Data Protection

Privacy Policy win345 – Your Data Protected

Win345 handles your personal data with full transparency and in compliance with Brazil's General Data Protection Law (LGPD). On this page you will find everything about how we collect, use, and protect the information of players registered in Brazil.

Last updated: January 2026

256-bit SSL

All data is transmitted using the same encryption standard adopted by Brazil's leading digital banks.

How win345 takes care of your data

Six pillars that support personal data protection on the win345 platform

Full LGPD Compliance

Win345 operates in full compliance with the General Data Protection Law (Law No. 13,709/2018). All data collection, storage, and usage processes have been reviewed to ensure alignment with the legal bases set out in the law, including consent, contract performance, and legal obligation.

Law No. 13,709/2018

256-Bit SSL Encryption

Every piece of data transmitted between your phone or computer and win345's servers is protected by 256-bit SSL encryption — the same standard used by Nubank, Itaú, Bradesco, and Banco do Brasil. This applies to Pix deposits, account registration, withdrawals, and every other interaction on the platform.

Brazilian banking standard

Your Data Is Never Sold

Win345 does not sell, rent, or trade players' personal data to third parties under any circumstances. Data is shared with partners only when strictly necessary to deliver our services — payment processors such as Pix, PicPay, and Mercado Pago — and always with appropriate contractual safeguards in place.

Zero data selling

Guaranteed Data Subject Rights

You have the right to access, correct, port, and request the deletion of your personal data at any time. win345 responds to data subject requests within 15 business days, in accordance with the timeframe established by the LGPD. The DPO contact channel is available 24 hours a day.

Response within 15 business days

Secure and Minimized Storage

Win345 collects only the data strictly necessary to operate your account and meet legal obligations. Data that is no longer needed for its original purpose is anonymized or deleted. Identity verification (KYC) information is retained for the period required by Brazilian law.

Data minimization principle

Incident Notification

In the event of any security incident that may put player data at risk, win345 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the legally required timeframes. We maintain an incident response plan that is active and regularly tested.

Active response protocol

Your rights as a data subject

The LGPD guarantees data subjects eight fundamental rights. Here's how to exercise them at win345

Access

Confirm whether your data is being processed and obtain a copy of the information we hold about you.

Correction

Request the update of any incomplete, inaccurate, or outdated information in your win345 account.

Deletion

Request the deletion of data processed on the basis of consent when that consent is withdrawn.

Portability

Receive your data in a structured format to transfer it to another service provider.

Objection

Object to data processing carried out on the basis of legitimate interest where there are valid grounds.

Information

Know which third parties your data is shared with and the purpose of each such sharing.

Non-Discrimination

Not to be discriminated against for exercising any right related to the protection of your personal data.

Human Review

Request human review of automated decisions that affect your interests.

To exercise any of these rights, please contact our DPO by email at suporte@win345.world

Commitment to your privacy: This Privacy Policy clearly explains how win345 collects, uses, stores, and protects your personal data. By registering on the platform, you confirm that you have read and understood this document. Questions? Reach out to our DPO at any time.

1. Who We Are and How to Contact Us

Win345 is a Sports Betting and online casino platform dedicated to Brazilian users, accessible at win345.world. For purposes of the LGPD, win345 acts as the controller of registered players' personal data, determining the purposes and means of processing that information.

The win345 Data Protection Officer (DPO) can be reached by email at suporte@win345.world, available 24 hours a day, seven days a week. For requests related to personal data, please use the subject line "LGPD – [your request]" to help us respond faster.

Win345 as Data Controller

Win345 determines the purposes and means of processing your personal data. We always act within the legal bases established by the LGPD and maintain records of processing activities as required by Art. 37 of Law No. 13,709/2018. Our privacy program is periodically reviewed by a specialized team.

2. What Personal Data We Collect

Win345 collects only the data strictly necessary to provide the services requested by the player and to meet legal obligations. The categories of data collected and when they are collected are detailed below:

2.1 Data provided directly by the player

  • Registration: full name, CPF, date of birth, email address, mobile number, full residential address;
  • Identity verification (KYC): identity documents (RG, CNH, Passport), proof of address, selfie with document;
  • Financial data: Pix key (CPF, email, phone number, or random key), bank details for wire transfers (bank, branch, account), credit/debit card information (only the last four digits are stored — full processing is handled by the payment operator);
  • Communication: messages sent to support via chat, email, or any other official win345 channel.

2.2 Automatically collected data

  • IP address and approximate geolocation data;
  • Device type, operating system, and browser version;
  • Betting history, game sessions, deposits, and withdrawals;
  • Access logs including time, duration, and pages visited;
  • Cookies and similar technologies (detailed in Section 6).
Data category Examples Sensitive?
Identification Full name, CPF, date of birth No
Contact Email, mobile number, address No
Financial Pix key, banking details, transaction history No (handled in strict confidence)
Document identity National ID, driver's license, proof of address No
Behavioral Betting history, game preferences No
Technical IP, device, browser, access logs No

3. How We Use Your Data

Win345 uses the data collected for the following purposes:

  • Account creation and management: account registration, authentication, password recovery, and player profile management;
  • Provision of betting and casino services: processing of Sports Betting on Brasileirão, Copa do Brasil, Libertadores, NBB, MMA/UFC, and other championships; operation of casino sessions, slots, and crash games;
  • Payment processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and withdrawals via Pix or TED to Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian financial institutions;
  • Identity verification and fraud prevention: KYC document analysis, suspicious transaction monitoring, detection of multiple accounts, and activities that violate the Terms and Conditions;
  • Compliance with legal obligations: reports to regulatory authorities, responses to court orders, and maintenance of legally required records;
  • VIP Program and promotions: managing Bronze, Silver, Gold, and Diamond tier levels, calculating cashback, and sending communications about active promotions;
  • Customer support: handling questions, complaints, and requests submitted to win345 support;
  • Platform improvement: aggregated data analysis to identify technical issues, optimize the user experience, and develop new features;
  • Responsible gambling: monitoring of gambling patterns that may indicate problematic behavior, with the goal of offering players self-control tools.

4. Legal bases for processing

Every data processing activity carried out by win345 is based on at least one of the legal grounds set out in Art. 7 of the LGPD:

Legal basis Purposes covered
Contract performance (Art. 7, V) Account creation, bet processing, deposits and withdrawals via Pix, casino operation, and games
Legal Obligation (Art. 7, II) KYC verification, anti-money laundering, retention of financial records, compliance with court orders
Legitimate interest (Art. 7, IX) Fraud prevention, platform security, service improvement, detection of multiple accounts
Consent (Art. 7, I) Sending marketing emails, personalizing promotional communications, use of non-essential cookies
Credit protection (Art. 7, X) Risk analysis on higher-value financial transactions

Withdrawal of consent: Where data processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawing consent for purposes that are essential to the operation of your account — such as transaction processing — is equivalent to closing the account, as it makes it impossible to deliver the contracted service.

5. Sharing Data with Third Parties

Win345 does not sell personal data. Sharing occurs only in the situations below, with partners who are contractually bound to handle data with the same level of protection adopted by win345:

5.1 Payment processors

To process deposits and withdrawals, win345 shares the necessary financial data with the payment operators integrated into the platform: Pix processors connected to the Banco Central do Brasil, credit/debit card operators, PicPay, and Mercado Pago. Each of these partners has its own privacy policy and is responsible for handling data within the scope of its own operations.

5.2 Casino game providers

Game providers operating on the win345 platform — such as Evolution Gaming, Pragmatic Play, NetEnt, and Playtech — may receive session data (anonymous account identifier, available balance, round results) to operate their tables and slots. Full identity data is not shared with these providers.

5.3 Authorities and regulatory bodies

Win345 shares data with law enforcement, judicial, or regulatory authorities when required by law, court order, or determination from the Central Bank of Brazil, ANPD, or other competent bodies. In such cases, sharing is strictly limited to what the legal request specifies.

5.4 Identity Verification Services

The KYC process may involve partners specialized in document verification who receive player-submitted documents solely for authentication purposes. These partners are classified as data processors and operate under win345's instruction.

6. Cookies and tracking technologies

Win345 uses cookies and similar technologies to enhance the player experience, keep sessions active, and analyze platform performance. Cookies are classified as:

  • Essential cookies: required for the platform's basic functionality, such as maintaining your login session and bet slip. They cannot be disabled without affecting how the service works;
  • Performance cookies: collect anonymous information about how players use the platform (pages visited, session duration, errors). They help win345 identify and fix technical issues;
  • Functional cookies: remember player preferences such as language, display settings, and in-platform browsing history;
  • Analytics cookies: used to understand aggregated usage patterns and improve the overall platform experience.

You can manage your cookie preferences through the banner displayed on your first visit or through your browser settings. Disabling essential cookies may affect the functionality of the win345 platform.

7. How long we retain your data

Win345 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable minimum legal retention periods:

  • Registration and identity data (KYC): for the period the account remains active plus 5 years after closure, as required by anti-money laundering regulations;
  • Financial records (deposits, withdrawals, bets): minimum of 5 years for accounting and tax purposes, in accordance with Brazilian tax legislation;
  • Access and security logs: 6 months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), extendable by court order;
  • Support communications: 2 years after the request is resolved;
  • Game session data: 1 year for dispute resolution purposes, and may be extended if an investigation is ongoing.

Once retention periods have expired, data is anonymized or securely deleted with no possibility of recovery.

8. Information Security

Win345 implements robust technical and organizational measures to protect players' personal data against unauthorized access, loss, destruction, or improper disclosure:

8.1 Technical Measures

  • 256-bit SSL/TLS encryption on all communications between client and server;
  • Encryption at rest for sensitive data stored in the database;
  • Multi-factor authentication (MFA) for access to win345's internal systems;
  • Continuous monitoring for unauthorized access attempts and traffic anomalies;
  • Regular penetration testing and vulnerability assessments conducted by a specialized team;
  • Encrypted backups with restoration routines tested on a regular basis.

8.2 Organizational Measures

  • Access to personal data restricted to the minimum necessary (principle of least privilege);
  • Mandatory data protection and information security training for all win345 staff;
  • Confidentiality agreements with all employees and service providers;
  • Security incident response plan with clearly defined procedures and assigned responsibilities.

Your role in keeping things secure: win345 recommends using a strong, unique password for your account, enabling two-factor authentication when available, and never sharing your login credentials with anyone. If you suspect your account has been compromised, contact support immediately at suporte@win345.world.

9. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD regarding your data at win345, you must:

  1. Submit a request to suporte@win345.world with the subject line "LGPD – [type of request]";
  2. Provide your full name and the CPF registered on the platform;
  3. Clearly describe the right you wish to exercise (access, correction, deletion, portability, etc.);
  4. Wait for a confirmation of receipt, which will be sent within 2 business days.

Win345 responds to data subject rights requests within 15 business days from the time of receipt. In more complex cases, this deadline may be extended by an additional 15 business days, with prior notice to the requester.

We do not charge any fee for exercising data protection rights. Requests that are manifestly unfounded or excessive may be declined with a reasoned explanation, as permitted under the LGPD.

If win345 fails to respond satisfactorily, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under Art. 55-J of the LGPD.

10. Minors

The win345 platform is intended exclusively for users aged 18 years old. We do not intentionally collect personal data from minors. If we identify that an account was created by a person under 18 years of age, that account will be immediately closed, any collected data will be deleted, and any deposits made will be refunded in accordance with the Terms and Conditions.

Legal guardians who identify that a minor has used the platform must contact win345 support immediately at suporte@win345.world. Cases involving minors are treated as the highest priority by the compliance team.

11. Changes to this Privacy Policy

Win345 may update this Privacy Policy at any time to reflect changes in the services provided, applicable legislation, or data processing practices. Significant changes will be communicated by email and/or platform notification at least 7 calendar days before the new version takes effect.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated version. We recommend reviewing this policy periodically to stay informed about how win345 protects your data. The date of the most recent update is always displayed at the top of this document.

12. Contact the DPO

For any questions, requests, or complaints related to the processing of personal data by win345, please contact our Data Protection Officer (DPO):

  • Email: suporte@win345.world (subject: "LGPD")
  • Live chat: available 24/7 on the platform after login
  • Help center: Frequently Asked Questions

For formal requests to exercise data subject rights, we recommend submitting them by email to keep a documented record of the communication. win345's DPO is responsible for receiving, logging, and responding to all requests related to the protection of players' personal data.

Policy version: This document came into effect in January 2026 and supersedes all previous versions of the win345 Privacy Policy. By continuing to use the platform, you confirm that you have read and accepted the current provisions.

Your data protected, your account secure

Win345 keeps your data secure with 256-bit SSL encryption and full LGPD compliance. Sign up now and enjoy betting on the Brasileirão, Copa do Brasil, and live casino with instant Pix.

Create Free Account I already have an account
Português