Official platform document – LGPD compliance

222o Privacy Policy – Your Data Protected

A 222o takes user privacy seriously. This document clearly explains what data we collect, why we collect it, how we use it, and what your rights are as a data subject, in accordance with the Lei Geral de Proteção de Dados (LGPD).

Last updated: January 2026

What This Policy Covers

The six pillars of our approach to privacy and data protection.

Data We Collect

What information 222o collects during registration, platform use, and payment processing via Pix, boleto, and card — and why each piece of data is necessary.

How We Use Your Data

The specific purposes for which 222o uses your data: account operation, bet processing, support, security, and communication about promotions and bonuses.

Sharing

Who your data may be shared with — exclusively payment partners such as banks and digital wallets, and authorities when required by Brazilian law.

Data Security

The technical measures 222o applies to protect your data: 256-bit SSL encryption, role-based access control, and continuous monitoring against unauthorized access.

Your Rights Under the LGPD

Right to access, correction, deletion, portability, and withdrawal of consent — and how to exercise them with 222o simply, without red tape and at no cost.

Cookies & Tracking

Which cookies 222o uses, what they are for, and how you can manage your tracking preferences in your browser or mobile app.

By creating an account on 222o, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data as described in this document. Continued use of the platform after changes to this policy constitutes acceptance of the new terms. Questions can be sent to the DPO at privacidade@222o.best.

1 Data Controller

The controller of personal data collected on the 222o is the operating entity of the site 222o.best, responsible for defining the purposes and means of processing users' information. To exercise any right set out in this policy or to raise privacy-related questions, users may contact us at privacidade@222o.best or via the support chat available 24 hours a day on the platform.

A 222o has appointed a Data Protection Officer (DPO) as required by the General Data Protection Law (Lei nº 13.709/2018). The DPO is the official point of contact for requests related to the exercise of data subject rights, complaints about data processing, and any other privacy matters that cannot be resolved through general support.

2 Data We Collect

2.1 Data Provided Directly by the User

During the registration process and platform use, the 222o collects the following information provided directly by the user:

  • Identification data: full name, date of birth, CPF, RG or CNH (when requested for verification), residential address, email address, and mobile number.
  • Financial data: information required to process deposits and withdrawals, including Pix key, credit or debit card details (tokenized, never stored in plain text), bank account details for TED transfers, and PicPay and Mercado Pago account identification.
  • Communications: messages exchanged with support via chat, email, or any other channel made available by 222o.
  • Verification documents: copies of identity documents requested during the KYC (Know Your Customer) process required by anti-money laundering legislation.

2.2 Automatically collected data

A 222o automatically collects certain information when you access and use the platform:

  • Access data: IP address, device type (mobile, desktop, tablet), operating system, browser, mobile app version, and device identifiers.
  • Session data: login date and time, session duration, pages and sections visited, and interaction events such as clicks, bets placed, and games accessed.
  • Location data: approximate location based on IP address, used for security purposes and compliance with geographic restrictions. A 222o does not collect precise GPS location without explicit consent.
  • Cookies and similar technologies: as described in section 10 of this policy.

2.3 Third-Party Data

In certain situations, 222o may receive data from third parties for identity verification, fraud prevention, and regulatory compliance purposes. Such data is always handled with the same level of protection applied to data collected directly.

Data Category Examples Mandatory
IdentificationFull name, CPF, date of birthRequired
ContactEmail, phone numberRequired
FinancialPix key, bank account detailsRequired for withdrawals
KYC DocumentsNational ID, Driver's License, proof of addressConditional
Technical / SessionIP, device, browserAutomatic
BehavioralBetting history, games accessedAutomatic

3 Purpose of Data Processing

A 222o processes users' personal data solely for the purposes listed below. No data is used for purposes incompatible with those that originally justified its collection:

  • Account creation and management: register the user, authenticate access, verify identity, and keep account information up to date.
  • Service delivery: process sports bets, poker matches, live casino sessions, crash games, and all other activities available on the platform.
  • Financial processing: receive deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED; process withdrawals; and maintain the user's financial history.
  • User support: answer questions, resolve complaints, and provide technical assistance via chat, email, and other support channels.
  • Security and fraud prevention: identify suspicious behavior, prevent money laundering, detect multiple accounts, and protect the integrity of the platform.
  • Product and promotional communications: inform users about bonuses, promotions, new products, and relevant events — only for users who have not opted out of marketing communications.
  • Legal compliance: fulfill obligations established by the LGPD, the Banco Central do Brasil, the Receita Federal, and other competent authorities.
  • Platform improvement: analyze usage patterns to identify experience improvements, fix bugs, and develop new features aligned with Brazilian users' preferences.

A 222o does not carry out automated decisions with significant impact on the user without human review and the possibility of appeal, as provided for under the LGPD.

4 Legal Basis for Data Processing (LGPD)

Every data processing operation carried out by 222o is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

  • Contract performance (Art. 7, V): primary legal basis for processing the data required to operate your account, process bets, payments, and any other services you signed up for.
  • Compliance with a legal obligation (Art. 7, II): legal basis used for processing required by anti-money laundering regulations, customer identification (KYC), and reporting to competent authorities.
  • Legitimate interest (Art. 7, IX): legal basis used for processing related to platform security, fraud prevention, and service improvement, always in respect of the data subject's fundamental rights.
  • Consent (Art. 7, I): legal basis used specifically for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting access to any other services on the platform.

Transparency on legal bases: if you'd like to know the legal basis for any specific processing of your data, please contact 222o's DPO at privacidade@222o.best. We will respond within 15 business days with detailed information about the processing in question.

5 Data Sharing

5.1 Who We Share Data With

A 222o does not sell, rent, or trade users' personal data. Data is only shared in the situations described below, with partners operating under contractual confidentiality and data protection obligations equivalent to our own:

  • Payment processing partners: banks, card acquirers, and digital wallets such as Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, and Mercado Pago, to process user deposits and withdrawals. These partners receive only the data strictly necessary for each transaction.
  • Identity verification providers: specialized services for document validation and anti-fraud database checks used during the KYC process.
  • Technology providers: companies that provide server infrastructure, security software, and operational analytics tools under contracts that prohibit the use of data for their own purposes.
  • Game providers: slots, live casino, and crash game providers that need to receive technical user identifiers to personalize the gaming session.
  • Competent authorities: Banco Central do Brasil, Receita Federal, Ministério da Fazenda, and law enforcement agencies when required by court order or legal obligation.

5.2 What We Don't Do

A 222o never shares user data with: external advertisers for targeted advertising outside the platform; marketing companies that would use your information for purposes beyond your relationship with 222o; or any third party without a clear, documented legal basis for the sharing.

6 International Data Transfers

Part of the technical infrastructure of 222o may involve servers located outside Brazil, operated by internationally recognized cloud computing providers. When this occurs, data transfers are carried out with the safeguards required by the LGPD, including contractual clauses that obligate recipients to maintain a level of protection equivalent to that required by Brazilian law.

Brazilian users' financial data — particularly that used to process transactions via Pix, boleto, and TED — is preferentially processed on servers located in Brazil, in accordance with Banco Central guidelines.

When international data transfers occur, users may request detailed information about the destination countries and the safeguards in place by contacting the DPO through the channel described in Section 13 of this policy.

7 Data Retention

A 222o retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by law:

  • Active account data: retained for the entire duration of the contractual relationship — that is, for as long as the user's account remains active on the platform.
  • Financial data and transaction history: retained for a minimum of 5 years after each transaction, as required by Brazilian financial record-keeping and anti-money laundering legislation.
  • Support communication data: retained for 2 years after each request is closed, for quality assurance and audit purposes.
  • Betting data: complete history retained for 5 years, in accordance with regulatory requirements for the Sports Betting sector in Brazil.
  • KYC documents: retained for the minimum period required by BCB Resolution and other applicable regulations, generally 10 years after the end of the contractual relationship.

Once retention periods expire, data is securely deleted or anonymized so it can no longer be linked to the original data subject. Anonymized data may be retained indefinitely for statistical purposes and platform improvement.

8 Data Security

8.1 Technical Measures

A 222o implements a comprehensive set of technical security measures to protect user data against unauthorized access, loss, destruction, or alteration:

  • Encryption in transit: all communications between the user's device and 222o's servers are protected by SSL/TLS version 1.2 or higher, with 256-bit certificates.
  • Encryption at rest: sensitive data stored in the platform's databases — including financial information and KYC documents — is encrypted at rest.
  • Payment data tokenization: credit and debit card data is never stored in plain text on 222o's servers. All processing is handled by PCI-DSS certified gateways, which return only tokens for future use.
  • Role-based access control: 222o employees only have access to the data required to perform their specific roles, with audit logs recorded for every access.
  • Continuous monitoring: automated systems monitor unusual access attempts, suspicious behavior patterns, and potential security breaches in real time.
  • Two-factor authentication: available to all users and required to access the platform's administrative panel.

8.2 Security Incidents

In the event of a security incident that may affect user data, 222o will comply with the notification deadlines established by the LGPD: the Autoridade Nacional de Proteção de Dados (ANPD) will be notified within 72 hours of becoming aware of the incident, and affected data subjects will be informed as soon as possible, with clear details about the nature of the incident, the data involved, and the measures taken to mitigate the impact.

Your role in keeping your account secure: protecting your data is a shared responsibility. Use a unique, strong password for your 222o account, never share it with anyone, and enable two-factor authentication in your account settings. The 222o team never will never ask for your password via chat, email, or phone.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by 222o, a set of rights that can be exercised at any time, free of charge and without requiring justification for most requests:

Right of Access

Request a complete copy of all personal data 222o holds about you, including how it was obtained and what it is used for.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated information — such as your registered name, email address, physical address, or phone number.

Right to Deletion

Request the deletion of data processed based on consent, when that consent is withdrawn. Data retained due to legal obligations cannot be deleted before the minimum required period.

Right to Data Portability

Receive your data in a structured, commonly used format so you can transfer it to another controller, where technically feasible and in cases recognized by the ANPD.

Right to Object

Object to processing carried out on the basis of 222o's legitimate interest when such processing violates the data subject's fundamental rights, assessed on a case-by-case basis.

Right to Information

Obtain information about the public and private entities with which 222o has shared your data, as well as information about the option to withhold consent and the consequences of doing so.

How to Exercise Your Rights

To exercise any of these rights, submit your request to privacidade@222o.best or access your account dashboard under the "Privacy & Data" section. The 222o will respond within 15 business days. Data deletion requests that require additional identity verification may take up to 30 days. In all cases, you will receive a confirmation of receipt within 2 business days.

10 Cookies and Tracking Technologies

A 222o uses cookies and similar technologies to enhance the user experience, ensure platform security, and analyze usage patterns. A cookie is a small text file stored in your browser or device when you access the platform.

Manage your cookies

You can manage your non-essential cookie preferences by going to "Privacy Settings" in your account dashboard. You can also configure your browser to block or delete cookies, though doing so may affect certain platform features, such as keeping your session active or saving display preferences.

A 222o does not use cookies to track users' browsing activity outside the 222o.best platform.

11 Minors

The platform 222o is intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect data from minors, and account creation by minors is expressly prohibited under the platform's Terms and Conditions.

If we become aware that we have collected data from a minor under 18 without the knowledge and consent of their legal guardians, we will take immediate steps to delete that information from our systems, close the corresponding account, and return any deposited funds to the original payment method.

Legal guardians who identify that a minor has accessed the platform should contact support via 24-hour chat or by emailing privacidade@222o.best so the case can be handled as a priority. The 222o takes underage access to gambling extremely seriously and works with guardians to resolve the situation as quickly as possible.

12 Changes to this Privacy Policy

A 222o may update this Privacy Policy periodically to reflect changes in its services, applicable Brazilian legislation, or its data processing practices. The "last updated" date at the top of this document will be revised whenever changes are made.

Changes that significantly affect your rights as a data subject will be communicated by email to the address registered on your account at least 15 days before taking effect. Minor changes, such as language corrections or updated contact information, may be applied immediately with an updated date.

We recommend reviewing this policy periodically. The most current version will always be available at 222o.best/privacy-policy. Continued use of the platform after the effective date of any changes constitutes acceptance of the revised policy. If you do not agree with the changes, you may request account closure before the effective date, as described in the Terms and Conditions.

13 Contact, DPO & Complaints

For any questions regarding this Privacy Policy, the processing of your data, or the exercise of your rights as a data subject, the available contact channels are:

  • DPO Email: privacidade@222o.best — dedicated exclusively to privacy and data protection matters. Response time: up to 15 business days.
  • Support chat: available 24 hours a day, 7 days a week, on the platform. For urgent privacy matters or immediate data deletion requests.
  • General email: suporte@222o.best — for general inquiries that include privacy-related matters.

If you believe that 222o did not adequately handle your rights exercise request, or if you believe your data is being processed in violation of the LGPD, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through its official website, without prejudice to any other rights or remedies available to you.

A 222o is committed to treating all requests seriously and providing reasoned responses within the timeframes established by the LGPD. No legitimate exercise of rights will result in any penalty or differential treatment for the user.

Privacy and Responsible Gambling: Two Commitments from 222o

222o is committed to both your data privacy and your well-being as a player. In your account dashboard you'll find deposit limit tools, self-exclusion options, and privacy settings — all applied instantly, with no red tape. Betting should be safe, responsible entertainment. Learn more on our Responsible Gambling.

Your Privacy Questions Have Answers

If you have any questions about how 222o handles your personal data, please contact our DPO at privacidade@222o.best. You will receive a confirmation within 2 business days and a full response within 15 business days. No privacy question is considered too minor.

To fully understand your rights as a platform user, please also review our Terms and Conditions.

Privacy Guaranteed. Time to Play.

222o protects your data with 256-bit SSL encryption and full LGPD compliance. Create your account for free, deposit via Pix from R$ 10.00, and enjoy a 100% welcome bonus up to R$ 500.00 — completely secure.

Create My Account Securely I already have an account
Português