The 28gbet takes data protection seriously and operates in full compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018). Here you will find exactly what information we collect, why we collect it, and how we keep it safe.
All data collection and use at 28gbet strictly follows the Lei Geral de Proteção de Dados (Law No. 13,709/2018), Brazil's primary privacy regulation.
All data transmitted between you and the 28gbet platform is protected by 256-bit SSL encryption — the same standard used by banks in Brazil.
28gbet does not sell, rent, or share your personal data with third parties for commercial purposes. Your data is used exclusively to operate the platform.
You can access, correct, port, or request the deletion of your data at any time, fully exercising the rights guaranteed by the LGPD.
This Privacy Policy describes how 28gbet — a Sports Betting and online casino platform available at 28gbet.click — collects, uses, stores, shares, and protects the personal information of its users. It applies to everyone who accesses the site, creates an account, or uses any feature of the platform.
We know that privacy documents tend to be far too long and packed with legal jargon that's hard to make sense of in practice. That's why we wrote this document in plain language, organized into clear sections, so that any user can easily understand exactly what happens to their information when they use the 28gbet. If you still have questions after reading, our support team is available 24 hours a day in English.
By creating an account on the 28gbet or continuing to use the platform after any update to this policy, you confirm that you have read and accept the terms described herein. This policy is an integral part of the Terms and Conditions of the platform.
The 28gbet acts as the controller of personal data collected on this platform, pursuant to the Lei Geral de Proteção de Dados (LGPD – Law No. 13,709/2018). This means we are responsible for defining the purposes and means of processing the information you provide to us.
This policy was developed in accordance with the LGPD principles — purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability — and aligns with best practices in data protection in Brazil.
Data processing at 28gbet is carried out only when there is a valid legal basis under the LGPD. We never collect more information than necessary to operate the platform safely and efficiently.
The 28gbet collects different categories of data depending on how you interact with the platform. Each category is detailed below:
The 28gbet does not collect sensitive data such as racial origin, sexual orientation, religious beliefs, or health information, except to the extent strictly necessary to comply with specific legal obligations in the context of responsible gambling.
Every piece of data collected by the 28gbet has a specific and legitimate purpose. The table below summarizes how your data is used:
| Purpose | Data Used |
|---|---|
| Create and manage your account | Full name, CPF, email, mobile number, date of birth |
| Verify your identity (KYC) | Identity documents, proof of address, CPF |
| Process deposits and withdrawals via Pix, boleto, credit card, PicPay, and Mercado Pago | Financial data, CPF, name |
| Record and settle Sports Betting wagers and casino games | Betting history, balance, session data |
| Fraud prevention and anti-money laundering | IP address, device, usage patterns, financial data |
| User Support | Support history, account data, communications |
| Marketing communications (with consent) | Email, mobile number, betting preferences |
| Platform improvements and performance analysis | Browsing data, usage data, analytical cookies |
| Responsible gambling and addiction prevention | Betting history, behavioral patterns, configured limits |
| Compliance with legal and regulatory obligations | All data required by legal obligation |
The 28gbet does not use your data for purposes incompatible with those listed above without prior notice and, where required, obtaining your consent.
The LGPD requires that every personal data processing operation have a valid legal basis. At 28gbet, the main legal bases applied are:
When the legal basis is consent, the 28gbet will always request your authorization clearly before beginning any processing. Refusing or withdrawing consent for non-essential purposes does not affect your account's functionality.
The 28gbet does not sell or share your personal data with third parties for commercial purposes. Data is only shared in the following situations, always for a legitimate and proportionate purpose:
Any third party that processes personal data of users of 28gbet is contractually required to implement appropriate security measures and to process data solely in accordance with the platform's instructions, within the limits of the purpose for which it was shared.
The 28gbet retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal and regulatory obligations.
Once the applicable retention period expires, data is deleted or irreversibly anonymized, making it impossible to identify the data subject from the remaining information.
The 28gbet continuously invests in security infrastructure to protect your information against unauthorized access, loss, alteration, or improper disclosure. The main measures in place include:
Despite all these precautions, no system is completely immune to risk. In the event of a security incident affecting your data, the 28gbet is committed to notifying you by email as quickly as possible and taking the necessary corrective measures, as required by the LGPD.
You can also help keep your account secure by using a strong password, enabling two-factor authentication, and never sharing your credentials with anyone — not even 28gbet, which will never ask for your password.
The LGPD grants you, as a data subject, a set of rights that 28gbet is fully committed to honoring. See what you can request at any time:
You may request a full copy of all personal data that 28gbet holds about you, including the purpose of processing and with whom it has been shared.
If any of your registered information is incorrect or out of date, you can request a correction at any time directly in your account settings or by contacting support.
You may request the deletion of data processed based on consent. Data required to fulfill a legal obligation cannot be deleted before the legally mandated period.
You may request your data in a structured, machine-readable format to transfer it to another service provider, where applicable.
If you have authorized the use of your data for marketing or non-essential cookies, you may withdraw that consent at any time, at no cost and without providing a reason.
You have the right to know which public or private entities 28gbet has shared your data with, and to receive information about the consequences of not providing certain data.
To exercise any of the rights above, please contact 28gbet at suporte@28gbet.click. Response time is up to 15 days, as set out by the LGPD. In some cases, we may need to verify your identity before processing your request.
The platform 28gbet is intended exclusively for users aged 18 and over. We do not intentionally collect personal data from anyone under 18. The registration process includes date-of-birth verification and, where there is any doubt, a request for documents confirming the user's age.
If you believe a child or adolescent under 18 has created an account on the 28gbet providing false information, please contact support immediately. The account will be closed and all data relating to the minor will be deleted from our systems as soon as possible, in accordance with art. 14 of the LGPD, which establishes special protections for children's and adolescents' data.
The 28gbet maintains specific technical and procedural controls to detect and prevent access by users under 18. Parents or guardians who identify unauthorized use should contact support immediately.
The 28gbet may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or new platform features. Material changes will be communicated by email to the address registered on your account at least 7 days before taking effect.
Urgent changes required by immediate legal or regulatory obligations may take effect without the 7-day notice period, but will be communicated as soon as possible.
The date of the last update to this policy is always shown at the top of this page. We recommend checking back periodically to review the current version. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.
The 28gbet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is responsible for handling communications from data subjects and the ANPD (National Data Protection Authority), and for guiding the platform's internal privacy practices.
To exercise your data subject rights, report a privacy incident, ask questions about how your data is processed, or get in touch with the DPO of 28gbet:
If you are not satisfied with the response from 28gbet to a request related to your data, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.
This policy should be read together with the Terms and Conditions and the Responsible Gambling of 28gbet.
Data protection isn't just theory — here's what we put into practice every day
Your password is stored exclusively in encrypted format (hash). No 28gbet team member has access to your password in plain text — including support staff.
Enable 2FA in your account settings to add an extra layer of security to your mobile login. Even if your password is compromised, access remains blocked without the second factor.
Pix withdrawals are processed exclusively to keys registered in the name of the 28gbet account holder. Transfers to third parties are not accepted, protecting against financial fraud.
Automated systems monitor access patterns and unusual transactions in real time. Suspicious activity triggers additional verification before any financial transaction is processed.
All administrative access to user data is recorded in immutable audit logs. Every internal access is documented with the date, time, and identity of the team member.
28gbet sends email notifications whenever it detects access from a new device or unusual location on your account, so you can act quickly if you don't recognize the activity.
Your data protected, instant Pix payments, and bets on Brasileirão, UFC, NBB, and e-sports. Create your free account and get started with R$ 20.00.
The 28gbet operates in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018), Brazil's primary privacy legislation. All data processing carried out by the platform has a valid legal basis, a specific purpose, and is proportionate to its intended objective. For questions, data subject requests, or complaints, please contact us at suporte@28gbet.click. You may also file complaints directly with the ANPD — National Data Protection Authority.
The 28gbet believes betting should be entertainment. We offer control tools you can activate directly in your account settings at any time.
Set a weekly or monthly deposit cap. Once activated, any new deposits above the limit are automatically blocked.
Set the maximum amount you are willing to lose within a given period. Once the limit is reached, new bets are blocked until the next cycle.
Request a break of 24 hours, 7 days, or 30 days. Any available balance can be withdrawn normally during the break.
28gbet is strictly prohibited for users under 18. Age verification is mandatory during the registration process.
Need support? Call CVV: 188. More information at Responsible Gambling.