1. Introduction
This Privacy Policy describes how bet10 collects, uses, stores, shares, and protects the personal data of users of the Sports Betting and online casino platform available at bet10.express. It was drafted in accordance with Brazil's General Personal Data Protection Law (LGPD — Federal Law No. 13,709, of August 14, 2018) and other applicable regulations in Brazil.
By creating an account, registering, browsing the bet10 platform, or using any of our services — Sports Betting on football, UFC, volleyball, basketball, e-sports, live casino, slots, crash games — you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.
This Policy should be read together with the Terms and Conditions and with the rules of Responsible Gambling of bet10.
2. Data Controller
The controller of the personal data processed under this Policy is bet10, operator of the Sports Betting and online casino platform accessible at bet10.express, serving the Brazilian market.
Bet10 has a Data Protection Officer (DPO) responsible for overseeing LGPD compliance, handling data subject requests, and serving as the communication channel with Brazil's National Data Protection Authority (ANPD). To contact bet10's DPO, send an email to contato@bet10.express with the subject line "DPO – Privacidade".
3. Personal Data We Collect
3.1 Data you provide directly
During registration and use of the bet10 platform, we collect the following data that you provide directly:
- Identification data: full name, date of birth, CPF, RG or CNH (front and back), selfie with ID document;
- Contact details: email address, mobile phone number, full residential address including zip code (CEP);
- Financial data: Pix key, bank details for wire transfers, credit/debit card information (card number, expiry date — CVV is never stored), Mercado Pago or PicPay account;
- Account data: username, password (stored as a cryptographic hash — never in plain text), communication preferences;
- Support data: history of conversations with bet10 support, complaints, requests, and feedback.
3.2 Automatically collected data
When you use the bet10 platform, we automatically collect:
- Usage data: betting history, amounts wagered and won, sports and markets accessed, login times;
- Technical data: IP address, browser type and version, operating system, device identifier, screen resolution;
- Browsing data: pages visited, time on the platform, clicks, and traffic source (organic search, direct link, etc.);
- Location data: approximate location based on IP address for regulatory compliance purposes — bet10 does not collect precise GPS location without your explicit permission.
3.3 Third-party data
Bet10 may receive your data from third parties in specific situations:
- Identity verification and anti-fraud through specialized KYC (Know Your Customer) services;
- Payment processors for transaction confirmation via Pix, boleto bancário, credit/debit card, Mercado Pago, or PicPay;
- Credit bureaus or anti-money laundering services, when required by law.
4. How We Use Your Personal Data
Bet10 uses the personal data it collects solely for the following purposes:
- Service delivery: creating and managing your account, processing bets, settling results, and handling deposits and withdrawals via Pix, boleto, card, Mercado Pago, or TED;
- Identity verification (KYC): confirm that you are who you say you are, that you are 18 or older, and that you meet the eligibility requirements;
- Fraud and money laundering prevention: monitor suspicious transactions, identify unusual behavior, and fulfill legal anti-money laundering obligations (Law No. 9.613/1998);
- Customer support: to answer questions, resolve technical issues, and handle requests submitted via email or chat;
- Service communications: to send notifications about your account, updates to the Terms or Privacy Policy, security alerts, and transaction information;
- Marketing (with consent): send you promotions, bonuses, and news from bet10 if you have opted in to receive this type of communication. You can unsubscribe at any time;
- Platform improvement: to analyze usage patterns in order to fix bugs, improve the experience, and develop new features;
- Responsible gambling: identify patterns that may indicate problem gambling and offer proactive support in accordance with the Responsible Gambling of bet10;
- Compliance with legal obligations: to comply with requirements from regulatory authorities, court orders, or requests from competent government bodies.
5. Legal Basis for Processing (LGPD)
Bet10 processes your personal data based on the following legal grounds set out in the LGPD (Art. 7 and Art. 11):
- Contract performance (Art. 7, V): processing required to provide the contracted services — betting, payment processing, account verification;
- Compliance with a legal or regulatory obligation (Art. 7º, II): identity verification, anti-money laundering, reporting to authorities;
- Legitimate interest (Art. 7º, IX): fraud prevention, platform security, and service improvement — always weighed against your rights;
- Consent (Art. 7º, I): sending marketing communications and using non-essential cookies. Consent may be withdrawn at any time.
6. Data Sharing
Bet10 does not sell customers' personal data. Data is only shared in the following cases and with the safeguards described below:
6.1 Service providers (processors)
Bet10 works with partners that process data on our behalf, including:
- Payment processors: to process transactions via Pix, boleto, credit/debit card, Mercado Pago, and TED wire transfer;
- Identity verification services (KYC): to verify documents and prevent fraud;
- Cloud infrastructure providers: for secure hosting of the platform's systems;
- Casino providers: live game and slots providers receive only the minimum data required to operate the games (session identifier, available balance).
All processor partners are contracted with data protection clauses and are prohibited from using your data for their own purposes.
6.2 Authorities and legal requirements
Bet10 may share data with law enforcement, regulatory, or judicial authorities when required by law — for example, in fraud or money laundering investigations or in compliance with a court order. In such cases, data sharing is limited to the minimum necessary and, where legally permitted, you will be notified.
6.3 What we never do
- We do not sell your data to third parties;
- We do not share your betting history with employers, insurers, or credit bureaus;
- We do not share your data with marketing companies without your explicit consent;
- We do not transfer data to countries without an adequate level of protection without the safeguards required by the LGPD.
7. How Long We Retain Your Data
Bet10 retains your personal data for as long as necessary to fulfill the purposes described in this Policy and any applicable legal obligations:
- Active account data: retained for as long as your account is active;
- Financial and transaction data: minimum of 5 years after the transaction, in accordance with tax and anti-money laundering requirements;
- Identity verification data (KYC): minimum of 5 years after account closure;
- Betting history: 5 years, available for the customer to review and for audit purposes;
- Support data: 2 years after the support case is closed;
- Marketing data (with consent): until consent is withdrawn by the data subject.
Once the retention period has elapsed, data is securely deleted or anonymized in a way that prevents re-identification.
8. Security of Your Data
Bet10 applies technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:
- Encryption in transit: 256-bit SSL/TLS encryption on all communications between your device and bet10's servers;
- Encryption at rest: sensitive data — including banking details and identity documents — is stored encrypted;
- Hashed passwords: your password is never stored in plain text — we use salted hashing algorithms;
- Two-factor authentication (2FA): available to all customers and especially recommended for those with an active balance;
- Internal access control: only staff with an operational need have access to customer data, with full audit logs;
- Continuous monitoring: intrusion detection systems and 24/7 server monitoring;
- Security testing: periodic penetration testing carried out by specialized teams.
In the event of a security incident involving personal data that poses a real risk to data subjects, bet10 will notify Brazil's National Data Protection Authority (ANPD) and the affected customers within the timeframes required by the LGPD.
9. Cookies and Tracking Technologies
Bet10 uses cookies and similar technologies to ensure the platform works properly, remember your preferences, and understand how the site is used. See the types of cookies we use:
| Cookie Type | Purpose | Can it be disabled? |
|---|---|---|
| Essential | Keep your session active, process bets and transactions, security (CSRF prevention, authentication) | No — required for basic functionality |
| Functional | Remember your language preferences, theme, and account settings | Yes — in browser settings |
| Analytics | Understand how the platform is used — most visited pages, session time, traffic sources — in order to improve the overall experience | Yes — via cookie settings or your browser |
| Marketing (with consent) | Personalize communications and, where authorized, display relevant content | Yes — by revoking consent at any time |
You can manage or disable non-essential cookies in your browser settings (Chrome, Firefox, Safari, Edge) or through the consent banner shown on your first visit to the platform. Disabling essential cookies may prevent the platform from functioning properly.
10. Minors
Bet10 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account was created by a minor, the account is immediately closed, the data is deleted, and any deposited funds are returned to the registered CPF holder.
Parents or guardians who suspect a minor has created an account on bet10 should contact us immediately at contato@bet10.express with the subject line "Minor's Account". bet10 will take the appropriate action within 48 hours.
11. Your Rights as a Data Subject (LGPD)
The Lei Geral de Proteção de Dados grants you the following rights regarding your personal data processed by bet10. You may exercise any of these rights by contacting contato@bet10.express with the subject line "LGPD – [requested right]":
| Right | What this means | Response timeframe |
|---|---|---|
| Access | Know what personal data bet10 holds about you and how it is processed | Up to 15 business days |
| Correction | Correct data that is inaccurate, incomplete, or out of date | Up to 15 business days |
| Anonymization or deletion | Request the deletion of unnecessary data or data processed based on consent (within the legal retention limits) | Up to 15 business days |
| Portability | Receive your data in a structured format for transfer to another service | Up to 30 business days |
| Consent withdrawal | Withdraw consent given for marketing or non-essential cookies at any time | Immediate for marketing; up to 7 days for others |
| Data sharing information | Know which third parties your data has been shared with | Up to 15 business days |
| Objection | Object to processing carried out on the basis of legitimate interest when you disagree | Up to 15 business days |
| Complaint to the ANPD | File a complaint with the National Data Protection Authority if you believe your rights have not been upheld | At any time |
Some deletion requests may not be fully fulfilled when data must be retained to comply with a legal obligation — for example, financial records required by law for 5 years. In such cases, bet10 will inform you of the reason and the applicable retention period.
12. Changes to this Policy
Bet10 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or new platform services. Material changes will be communicated by email to your registered address at least 7 days before the effective date.
The date of the last update is always shown at the top of this document. Continued use of the bet10 platform after any changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.
13. Contact and Privacy Channel
To exercise your rights as a data subject, or to send questions, complaints, or requests related to this Privacy Policy, contact bet10 through the following channels:
- Email (DPO): contato@bet10.express — subject line "DPO – Privacy" or "LGPD – [right requested]"
- Live chat: available 24/7 on the bet10 platform
- Response time: up to 5 business days for general requests; specific timeframes as shown in the rights table above
If you believe bet10 has not adequately addressed your privacy request, you may file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.