Privacy Policy — 366bet

Privacy Policy of 366bet:
How We Take Care of Your Data

At 366bet, privacy isn't just a legal obligation — it's a real commitment to every user. Here you'll find exactly what data we collect, why we collect it, how we use it, and what rights you're guaranteed under the LGPD.

Last updated: January 2026 Language: Brazilian Portuguese Fully compliant with the LGPD
256-bit SSL on all transactions Data never sold to third parties Guaranteed LGPD rights

This Privacy Policy describes how 366bet collects, uses, stores, and protects users' personal data in accordance with the Lei Geral de Proteção de Dados (Law No. 13,709/2018 — LGPD). By creating an account or using the platform's services, you agree to the terms of this Policy. If you have any questions, contact us via chat or at contato@366bet.cash.

POLICY HIGHLIGHTS

How 366bet Protects Your Privacy

Six concrete commitments that define how we handle your data — before you reach the full document.

Your data is never sold

The 366bet does not sell, rent, or trade users' personal data to advertisers, data brokers, or any third party for commercial purposes. Full stop. When we share information with technology partners to operate the platform, it is done under contracts with strict confidentiality and security obligations.

Full LGPD compliance

The 366bet fully complies with the General Data Protection Law (LGPD). This means every data processing activity has a defined legal basis, you can exercise your rights at any time — access, correction, deletion, portability — and the platform maintains an accessible Data Protection Officer (DPO) to handle your requests.

Minimal collection — only what's necessary

The 366bet applies the principle of data minimization: we collect only the information strictly necessary to operate the platform, verify user identity, process financial transactions, and meet legal obligations. We do not request unnecessary data and do not store information beyond what is needed for each specific purpose.

Full control in your hands

You can access, correct, and update your personal data directly from the account dashboard at 366bet at any time. For more complex requests — account deletion, data portability, or consent withdrawal — our Portuguese-language support channel is available 24 hours a day to process your request, with a maximum response time of 15 business days as required by the LGPD.

Communications only with your consent

The 366bet only sends marketing communications — email, push notifications, SMS — to users who have explicitly opted in to receive them. Unsubscribing at any time is simple: just update your preferences in your account or click "unsubscribe" in any email you receive. We will never send communications designed to work around active responsible gambling limits.

1 Personal Data We Collect

The 366bet collects personal data at different points during your interaction with the platform. The categories of data collected and the situations in which collection occurs are described below.

Data you provide directly during registration:

Full name CPF Date of birth Address Email Mobile number Password (stored as a hash)

Data collected during identity verification (KYC):

Official photo ID (RG, CNH, or passport) Proof of address Selfie with ID document Proof of ownership of the payment method

Financial and transaction data:

Pix key (CPF) Deposit and withdrawal history Payment method used Transaction amounts in R$

Platform usage data collected automatically:

IP address Device type and browser Operating system Pages visited and session duration Betting history Casino game history Notification preferences
Sensitive data: The 366bet does not collect sensitive data such as racial origin, religious beliefs, health information, or biometrics beyond what is strictly necessary for the identity verification process required by applicable regulations governing the betting industry in Brazil.

The legal basis for the processing of personal data on the 366bet is, depending on each purpose: performance of the platform's terms of use (Art. 7, V of the LGPD), compliance with a legal obligation (Art. 7, II), the platform's legitimate interest (Art. 7, IX), and the data subject's consent for marketing communications (Art. 7, I).

2 How We Use Your Personal Data

The 366bet uses collected data exclusively for the purposes described below. No data is used for purposes not covered by this Policy without prior notice to the user.

Purpose Data Used Legal Basis (LGPD)
Account creation and management Full name, CPF, email, date of birth, address, phone number Contract performance
Identity verification (KYC) Documents, selfie, proof of address Legal obligation
Processing deposits and withdrawals CPF, Pix key, transaction history Contract performance
Fraud prevention and anti-money laundering IP, device data, behavioral patterns Legal obligation / legitimate interest
Experience personalization and promotions Betting history, preferences, VIP level Legitimate interest / consent
Marketing communications and promotions Email, phone number, notification preferences Consent
User support and dispute resolution Registration data, betting history, communications Contract performance / legal obligation
Compliance with regulatory obligations Full registration data, financial transactions Legal obligation
The 366bet does not use your personal data to make automated decisions with significant legal effects without the possibility of human review. Your betting profile is used to personalize your experience and detect risk patterns for responsible gambling, and you always have the right to contest any such determination.
3 Data Sharing with Third Parties

The 366bet may share users' personal data only in the situations described below, always with an appropriate legal basis and contractual security guarantees in place.

  • Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago, we share only the strictly necessary data with authorized payment processors — such as CPF number, transaction amount, and Pix key. These partners operate under contracts that prohibit the use of data for any purpose other than processing the transaction.
  • Technology providers: We use third-party cloud infrastructure, data analytics, and security services to operate the platform. All are engaged under confidentiality and data protection clauses and have access only to the information necessary for their specific function.
  • Casino game providers: To provide slots, Live Casino, and crash games, minimal session data is shared with game providers for authentication and round integrity verification purposes.
  • Regulatory and judicial authorities: The 366bet responds to requests from competent Brazilian government authorities — the Receita Federal, Banco Central, law enforcement, and the judiciary — when backed by a legal requirement or court order. In such cases, we share only the data expressly requested in the formal order.
  • Anti-fraud and anti-money laundering agencies: As part of its legal obligations in the betting sector, 366bet may report suspicious transactions to the relevant authorities, as required by Brazilian anti-money laundering legislation (Law No. 9,613/1998 and COAF regulations).
The 366bet does not sell, rent, transfer, or commercialize users' personal data to advertisers, advertising platforms, data brokers, betting groups, or any other party for commercial purposes. This commitment is absolute and has no exceptions.

All partners that process data on behalf of 366bet are classified as "operators" under the LGPD and are subject to the same data protection obligations as the platform — with contractual liability in the event of an incident caused by a partner's negligence.

4 Data Security & Protection

The 366bet adopts a comprehensive set of technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction.

Technical measures implemented:

  • 256-bit SSL/TLS encryption on all communications between the user's device and the platform's servers;
  • User passwords stored exclusively as salted hashes, making it impossible to recover the original password even if unauthorized access to the database occurs;
  • Two-factor authentication (2FA) available for all users and recommended for additional account security;
  • Continuous monitoring for suspicious access attempts and automatic blocking after multiple failed login attempts;
  • Cloud infrastructure with geographic redundancy, regular backups, and disaster recovery plans tested on a periodic basis;
  • Network segmentation and role-based access control for internal staff — no employee has access to more data than is strictly necessary for their role.

Organizational measures:

  • Mandatory data protection training for all employees of 366bet with access to systems containing personal data;
  • Internal information security policy with annual review;
  • A formal security incident management process with an obligation to notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users in the event of a significant breach, as provided for under the LGPD.
In the event of a security incident that could pose a risk to your rights as a data subject, 366bet commits to notifying affected users within 72 hours of confirming an incident, describing the nature of the compromised data, the measures taken, and the recommended next steps for protection.

Data security is a shared responsibility. On the user's side, we recommend: creating a strong, unique password for your account on 366bet, enable two-factor authentication, never share your login credentials with anyone, and contact support immediately if you suspect unauthorized access to your account.

5 Cookies, Tracking, and Similar Technologies

The 366bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze service performance. The categories of cookies used are described below.

  • Essential cookies: Required for the platform's basic operation — session authentication, login state management, language preferences, and security features. These cookies cannot be disabled without impacting your use of the platform.
  • Performance and analytics cookies: Collect aggregated information about how users navigate the 366bet — which pages are most visited, load times, errors encountered. This data is used to continuously improve the platform and is handled anonymously whenever possible.
  • Functionality cookies: Store user preferences — interface settings, saved betting filters, notification preferences — to personalize the experience across sessions without requiring you to reconfigure everything each time you return.
  • Marketing cookies (with consent only): Used to personalize communications and offers for users who have opted in to receive marketing. These cookies are activated only with explicit consent and can be revoked at any time in the account privacy settings.
You can manage your cookie preferences by accessing the privacy settings available in the platform footer or in your account settings at 366bet. Disabling non-essential cookies may affect some personalization features, but will not prevent you from using the platform's core functionalities.

The 366bet does not use third-party tracking cookies to build behavioral profiles of users for external advertising purposes. The use of internal behavioral data serves one purpose only: to improve the user experience and ensure the integrity of bets.

6 Data Retention and Deletion

The 366bet retains users' personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with the minimum retention periods required by applicable Brazilian law.

  • Registration and identity data: Retained for as long as the account is active and for a minimum of 5 years after account closure, in compliance with anti-money laundering legal obligations and betting industry regulations;
  • Financial transaction data: Deposit and withdrawal records are retained for a minimum of 5 years from the transaction date, in accordance with Brazilian tax and regulatory requirements;
  • Betting and gaming history: Retained for the entire duration of the account and for at least 2 years after closure, for audit purposes and resolution of any disputes;
  • Support communication data: Retained for up to 2 years after account closure for traceability and service improvement purposes;
  • Cookies and session data: Deleted according to the retention period set for each cookie type, generally between 30 days and 1 year for non-essential cookies.
Once mandatory retention periods have been met, data is securely deleted or irreversibly anonymized. Anonymization ensures that data can no longer be linked to a specific user, allowing its use for statistical purposes without compromising individual privacy.

When you request the deletion of your account on 366bet, your data will be anonymized or deleted as soon as possible, in compliance with mandatory retention periods established by law. Any available real BRL balance will be returned via Pix before the account is permanently closed.

7 Your Rights as a Data Subject — LGPD

The Lei Geral de Proteção de Dados (LGPD) guarantees you, as the data subject whose personal data is processed by 366bet, a set of rights you can exercise at any time.

Right of Access

Request a copy of the personal data 366bet holds about you, including a description of the processing purposes and data recipients.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated data — such as address, mobile number, or email — directly in your account settings or by contacting support.

Right to Deletion

Request deletion of data processed on the basis of consent. For data processed under a legal obligation, deletion will take place once the mandatory retention period has been fulfilled.

Portability

Receive your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible and in accordance with ANPD regulations.

Withdrawal of Consent

Withdraw consent given for processing activities based on that legal basis — such as marketing communications — at any time, without affecting your ability to use the platform for betting and gaming.

Data Sharing Information

Know which public and private entities your data has been shared with by 366bet, in what context, and for what specific purposes.

To exercise any of these rights, contact the Data Protection Officer (DPO) of 366bet at contato@366bet.cash with the subject line "LGPD Rights — [request type]". Response time is up to 15 business days, as set out in the LGPD. In cases of justified refusal, the 366bet will provide the legal basis for the decision.

If you believe your rights have been violated after exhausting all contact channels with 366bet, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.
8 Minors and Children's Data Protection

The services of 366bet are intended exclusively for users aged 18 and over. We do not intentionally collect personal data from anyone under 18. Registration requires a date of birth, and any account found to have been created by someone who does not meet the age requirement is closed immediately upon identification.

If you suspect that someone under 18 has created an account on 366bet or is using the platform's services, contact support immediately via chat or at contato@366bet.cash. We will investigate the situation as a priority and, if underage use is confirmed, will close the account and delete the collected data as quickly as possible.

Protecting minors is a responsibility that 366bet takes very seriously. The identity verification process (KYC), mandatory before the first withdrawal, includes date-of-birth confirmation via official ID — which also serves as an additional barrier against underage access to the platform.
9 Contact, DPO & Policy Updates

The 366bet has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance on the platform, handling data subject requests, and serving as the communication channel with the National Data Protection Authority (ANPD).

To contact the DPO at 366bet or to exercise any right under the LGPD, use the channels below:

  • Email: contato@366bet.cash (subject: "LGPD Rights" or "Privacy")
  • Live chat: Available 24 hours a day on the platform, with an average response time of under 5 minutes

This Privacy Policy may be updated periodically to reflect changes in the services of 366bet, applicable legislation, or data processing practices. Significant updates will be communicated by email to active users at least 7 days in advance. The date of the most recent version is always shown at the top of this page.

Continued use of the platform after an updated version of this Policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the new version's effective date and request a refund of your available real balance via Pix.

If you have any questions about this Privacy Policy, how your data is handled, or how to exercise your rights, the support team at 366bet is available in Portuguese 24 hours a day to help you — no scripts, no automated replies that leave you without a real answer.

ABOUT PRIVACY AT 366BET

Privacy in practice: what changes for you day to day

Privacy has become a buzzword in the tech industry since the LGPD came into force in Brazil, but 366bet aims to go beyond minimum legal compliance. The idea is that whether you're betting on the Brasileirão, following odds for the Superliga volleyball league, or playing a round at the live casino, you can trust that your data is being handled responsibly.

Let's start with the basics: what you provide when you register at 366bet — name, CPF, date of birth, email, phone number — goes exactly where it needs to go and nowhere else. This information is used to create your account, verify your identity before your first withdrawal, process Pix deposits, and meet the legal obligations that any regulated betting platform in Brazil must fulfill. There is no selling of data to advertisers, no sharing with data brokers, and no building of profiles for external advertising.

The identity verification (KYC) process is something some users question — after all, submitting a document and a selfie can feel intrusive. But there is a clear and legitimate reason: betting platforms are legally required to confirm that users are who they claim to be, that they are 18 or older, and that they are not on any restriction lists. This verification also protects you — it prevents someone else from using your CPF to open an account and accumulate withdrawals in your name. Documents submitted are stored securely with encryption and accessed only by the compliance team at 366bet for verification purposes.

When it comes to financial transactions, 366bet works with the payment methods most used by Brazilians: Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago. Every transaction is protected by 256-bit SSL encryption — the same standard used by banks like Nubank, Itaú, and Bradesco. Credit card data is not stored on 366bet; it is held by the authorized payment processor, which in turn complies with PCI-DSS financial data security standards.

Regarding the use of your betting and casino game history: the 366bet uses this data to personalize your experience on the platform — showing odds for the teams you follow most, suggesting relevant promotions, and calculating your VIP Program cashback. We also use behavioral patterns to identify users who may be at risk from problem gambling, which is a core part of our responsible gambling commitment. None of these uses involve selling data to third parties or building a profile outside the platform.

Your rights as a data subject are real and fully enforceable at 366bet. If you want to know exactly what data we hold on you, you can request a full report by emailing contato@366bet.cash — we respond within 15 business days, as required by the LGPD. If you need to correct any outdated information, such as your address or mobile number, you can do so directly in your account settings without contacting support. If you want to stop receiving promotional emails — such as boosted odds notifications for Copa do Brasil or volleyball Nations League matches — simply adjust your notification preferences or click "unsubscribe" in any email.

And if you want to close your account on 366bet? Your available real balance is returned via Pix after identity verification. Data is retained for the minimum period required by the sector's legal obligations — primarily for anti-money laundering purposes and potential disputes — and is then anonymized or securely deleted. The process is transparent and there are no account closure fees.

If you have any questions about how your data is handled at 366bet — about cookies, about what happens when you use the app on your phone, about how the live casino records gaming sessions — support in Portuguese is available right now via the platform's chat, 24 hours a day, ready to answer clearly. Privacy shouldn't be a maze of legal text, and 366bet works hard to make sure it isn't.

🔒 Your data, your choice

Bet on 366bet with Safety and Transparency

Regulated platform, 256-bit SSL encryption, full LGPD compliance, and 24-hour support in Portuguese. Create your account and enjoy a 100% bonus on your first deposit.

Minimum deposit R$ 20.00 · 30x rollover · 18+ · New users only
100%
bonus on 1st deposit
up to R$ 500.00
+ 50 free spins no deposit
SECURITY AND COMPLIANCE

Your Data, Protected at 366bet

Regulated Platform
SSL 256-bit
LGPD Compliance
Zero Data Sales
24/7 PT Support
KYC Verified
RESPONSIBLE GAMBLING

Privacy and Responsibility Go Hand in Hand at 366bet

Just as we protect your data, we also provide tools to help you stay within your limits.

Deposit Limit

Set daily, weekly, or monthly limits in your account settings. Limit reductions take effect immediately. Increases are subject to a 72-hour waiting period.

Session Alert

Receive notifications when you reach your configured play time limit. A mindful break improves decision-making quality during live betting.

Self-Exclusion Break

Pause your access for anywhere from 24 hours to 6 months. No promotional communications are sent during an active pause — including to VIP members.

+18 Required

Mandatory identity verification with an official document. 366bet does not accept registrations from users under 18 and cooperates fully with any related investigations.

PRIVACY QUESTIONS

Frequently Asked Questions about 366bet's Policy

No. 366bet does not sell, rent, transfer, or share users' personal data with advertisers, advertising platforms, or data brokers. Data is only shared with payment processors (to process Pix, boleto, card, and other payment methods), technology providers operating under confidentiality agreements, and competent authorities when required by law or court order. In all cases, only the data strictly necessary for the specific purpose is shared.

You can request a full report of the personal data 366bet holds about you by emailing contato@366bet.cash with the subject line "LGPD Rights — Data Access". The response deadline is up to 15 business days, in accordance with the LGPD. The report will include the categories of data stored, the processing purposes, the recipients with whom data was shared, and the expected retention period. You can also view and update much of your data directly in your account settings.

After account closure, data is retained for the minimum period required by applicable legal obligations — primarily 5 years for registration and financial transaction data, in accordance with anti-money laundering legislation. Once those mandatory retention periods have been met, data is either irreversibly anonymized or securely deleted. You may request early deletion of data not subject to mandatory retention at any time by emailing contato@366bet.cash.

To opt out of marketing communications from 366bet, you have two options: go to the notification settings in your account and turn off marketing communications via email, SMS, and push; or click the "unsubscribe" link in the footer of any promotional email you receive. Opt-outs are processed within 48 hours. Mandatory transactional communications — such as withdrawal confirmations, security alerts, and account notifications — will continue to be sent regardless of this setting, as they are required for the service to function.

Like any regulated financial platform in Brazil, 366bet is subject to legal obligations under anti-money laundering law (Law No. 9,613/1998) and applicable sports betting regulations. This includes the obligation to report suspicious transactions to the Financial Activities Control Council (COAF) and to comply with requests from competent judicial authorities. In practice, this does not affect the vast majority of users — only transactions with unusual patterns that trigger objective legal criteria are reported, and only upon a formal request or a clear legal requirement.

Ready to Get Started at 366bet?

Secure platform, protected data, and a 100% bonus on your first deposit. Football, casino, volleyball, Poker, and much more waiting for you.

+18 | Gamble responsibly | Responsible Gambling | Terms and Conditions

Português