Win88 Privacy Policy – How Your Data Are Protected

For the purposes of the General Data Protection Law (LGPD – Lei 13.709/2018), the controller of personal data for Win88 platform users is the company operating the website win88-win.net, responsible for determining the purposes and means of processing data collected in the context of Sports Betting, live casino, crash games, and other products available on the platform.

The Data Protection Officer (DPO) of Win88 can be reached by email at contato@win88-win.net, with the subject line "LGPD – Data Subject Request". All data subject rights requests are handled directly by the DPO and responded to within 15 business days.

Win88 collects personal data at three main points: during registration, while using the platform, and throughout the identity verification (KYC) process. A breakdown of each category is provided below.

Data provided directly by you at registration:

• Full name as it appears on official ID
• Valid CPF (Cadastro de Pessoa Física) registered with the Receita Federal
• Date of birth
• Full residential address in Brazil
• Email address
• Brazilian mobile number
• Access password (stored in encrypted format — Win88 never has access to your password in plain text)

Data collected automatically during use:

• IP address and approximate geolocation data
• Device type, model, and operating system
• Browser and version in use
• Date, time, and duration of access sessions
• Pages visited within the platform
• Betting history, games accessed, balances and transactions
• Cookies and similar technologies (detailed in Section 6)

Data collected during the KYC (identity verification) process:

• Photo ID document (RG, CNH, or passport) — front and back
• Proof of address issued within the last 90 days
• In specific cases: proof of the payment method used (e.g., a bank statement showing the Pix key)

Every piece of data Win88 collects has a specific, justified purpose. We do not collect information as a precaution or "just in case we find a use for it later." The purposes for data processing at Win88 are outlined below:

Account operation and management: Your identification and contact data are used to create and maintain your Win88 account, process your registration, send betting confirmations, notify you of results, and communicate relevant service information — such as updates to the Terms and Conditions or security alerts.

Payment processing: Financial data (Pix key, transaction history) is used exclusively to process deposits and withdrawals. Win88 integrates with the Brazilian financial system — Pix, Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago, and boleto bancário — and the data shared with these institutions is limited to the minimum required to complete each transaction.

Identity verification and fraud prevention: KYC data, IP addresses, and behavioral patterns are used to verify user identity before releasing withdrawals, detect fraud attempts, identify duplicate accounts, and comply with anti-money laundering obligations established by Law 9.613/1998.

Personalization and experience improvement: Platform behavior data (bets placed, preferred sports, access times) is used to personalize promotion suggestions, tailor displayed content, and improve Win88's usability. This processing is based on Win88's legitimate interest, and you may object to it at any time.

Marketing communications: With your explicit consent, Win88 may send communications about promotions, new products, and special campaigns via email or mobile notification. You can withdraw this consent at any time by clicking "unsubscribe" in any marketing email or by adjusting your notification settings in your account.

Responsible gambling: Win88 uses betting behavior data to identify patterns that may indicate problem gambling — such as bets significantly above a user's historical average, frequent attempts to raise deposit limits, or unusually long gaming sessions. This analysis is carried out to protect the user, not for commercial purposes.

Compliance with legal obligations: Data is processed to meet Brazilian regulatory requirements, including reporting obligations to the relevant authorities in cases provided for by law (such as suspected money laundering or access by a minor).

The LGPD requires that all personal data processing have an identified legal basis from those set out in Article 7 of the law. Win88 processes data under the following legal grounds:

• Contract performance (Art. 7, V): Data required to create an account, process bets, make payments via Pix or boleto, and deliver the services the user contracted when registering with Win88.
• Legal obligation (art. 7, II): Data processed to meet legal requirements, such as KYC and anti-money laundering compliance (Law 9.613/1998), tax obligations, and reporting to relevant authorities when required by law.
• Legitimate interest (art. 7, IX): Behavioral and technical data used to prevent fraud, improve platform security, personalize the user experience, and develop new features — provided that this interest does not override the fundamental rights and freedoms of the data subject.
• Consent (art. 7, I): Marketing communications and advanced personalization are carried out based on the user's express consent, which may be withdrawn at any time without affecting access to Win88's services.

Win88 does not sell personal data of its users to third parties. Data sharing occurs only in the situations listed below, always with an identified legal basis and limited to the minimum necessary for each purpose:

Brazilian payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago, Win88 shares the minimum necessary data (name, CPF, and transaction details) with the financial institutions involved. These partners act as data processors under contracts that require LGPD compliance.

Technology service providers: Win88 uses third-party technology infrastructure providers (hosting, data processing, fraud analysis) that access user data as processors, under contracts containing confidentiality clauses and LGPD compliance requirements. These providers are not permitted to use the data for their own purposes.

Competent authorities: Win88 may share data with Brazilian government, regulatory, or judicial authorities when required by law — for example, in money laundering or fraud investigations, or in compliance with court orders. In such cases, data is shared only to the minimum extent necessary to fulfill the legal requirement.

Game content providers: To provide slots, live casino, and crash games from providers such as Pragmatic Play and PG Soft, minimal session data is shared with those providers to enable the technical operation of the games. These providers do not receive complete personal identification data.

International data transfer: Some technology providers used by Win88 may process data on servers located outside Brazil. In such cases, Win88 ensures that transfers are carried out in compliance with Article 33 of the LGPD, with contractual clauses that guarantee an adequate level of personal data protection.

Win88 uses cookies and similar technologies to keep the platform running properly and to improve the user experience. A cookie is a small text file stored in your browser or device when you access Win88.

Types of cookies used by Win88:

• Strictly necessary cookies: Essential for the platform to function. Without them, core features like login, session management, and bet processing simply don't work. They cannot be disabled — think of them as the engine oil that keeps everything running.
• Performance and analytics cookies: They collect aggregated, anonymous data on how users navigate Win88 — which pages are visited most, where technical errors occur, and average loading times. Used to improve the product. They can be disabled in the platform's cookie settings.
• Functionality cookies: They remember your platform preferences — language, saved betting settings, preferred odds. They enhance your experience without any advertising purpose. They can be disabled, though some preferences may not be saved as a result.
• Marketing cookies (with consent only): Used to display personalized communications within Win88 about promotions relevant to your betting profile. These are only activated if you give explicit consent and can be revoked in your account settings.

How to manage cookies: You can manage your cookie preferences at any time through the Win88 settings panel or your browser settings. Please note that disabling strictly necessary cookies may prevent the platform from functioning correctly on your phone or computer.

Win88 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, alteration, or destruction. The main security measures currently in place are:

• 256-bit SSL encryption: All traffic between the user's device and Win88's servers is encrypted. Authentication data, financial transactions, and personal information are never transmitted in plain text.
• Secure password storage: User passwords are never stored in plain text. Win88 uses salted hashing algorithms to store credentials, meaning that even Win88 employees cannot access your actual password.
• Role-based access control: Only Win88 staff with an operational need have access to users' personal data, and that access is controlled, audited, and limited to the minimum required for each role.
• Suspicious activity monitoring: Automated systems monitor access patterns in real time to detect intrusion attempts, use of compromised credentials, or anomalous behavior that may indicate a security risk to user accounts.
• Two-factor authentication (2FA): Available to all Win88 users as an additional layer of login protection. Strongly recommended — especially for accounts with a history of financial transactions.
• Regular encrypted backups: Data is regularly backed up with encryption to ensure recoverability in the event of a technical incident, without exposing personal data in the process.

In the event of a security incident: If Win88 identifies an incident that may affect users' personal data, it will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected data subjects within a reasonable timeframe, in accordance with Articles 48 and 49 of the LGPD, with information about the nature of the incident, the data involved, and the measures taken to mitigate its effects.

Win88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. Retention periods vary by data category:

• Active account data: Retained for the full duration of the user's Win88 account. In cases of extended inactivity (account not accessed for more than 36 months), Win88 may reach out to confirm the user's wish to keep the account before proceeding with data archiving.
• Financial transaction data: Retained for 5 years after each transaction, as required by applicable tax and anti-money laundering legislation in Brazil.
• KYC documents: Retained for 5 years after account closure, in accordance with regulatory obligations.
• Betting history: Maintained by 2 years after account closure for dispute resolution and regulatory compliance purposes.
• Support records and communications: Retained for 2 years for dispute management and continuous service improvement purposes.
• Analytics cookies: They expire within 12 months of the user's last interaction with the platform.

Once the applicable retention periods expire, data is securely deleted or anonymized so it can no longer be linked to you. Anonymized data may be retained indefinitely for statistical and product improvement purposes.

Article 18 of the LGPD guarantees you, as the data subject whose personal data is processed by Win88, a set of rights that may be exercised at any time. Below are all your rights and how to exercise them at Win88:

Win88 is a betting and entertainment gaming platform intended exclusively for individuals aged 18 years of age or older. Access to and use of the services by minors is strictly prohibited.

Win88 does not intentionally collect personal data from users under 18. If we identify that a user is below the minimum age, the account will be closed immediately, the data will be deleted, and any real-money balance deposited will be returned to the legal guardian upon verification.

If you suspect a minor is using the Win88 platform, please notify our support team immediately via chat or at contato@win88-win.net. Win88 takes all available measures to investigate and resolve such situations promptly.

Win88's Data Protection Officer (DPO) is the official point of contact for all matters related to privacy, data protection, and the exercise of rights under the LGPD.

DPO Contact:

• Email: contato@win88-win.net (subject: "LGPD – Solicitação de Titular")
• Live chat: Available 24/7 on the platform, in Brazilian Portuguese
• Response time: Up to 15 business days for formal data subject requests

Updates to This Policy: Win88 reserves the right to update this Privacy Policy to reflect changes in Brazilian law, new data processing practices, or modifications to the services offered. Any relevant update will be communicated to users with an active account by email at least 15 days in advance, with a clear description of the changes made.

The "Last Updated" date at the top of this page always reflects the version currently in effect. Previous versions of the Policy may be requested from the DPO by email.