LGPD Compliance

Bet535 Privacy Policy: Your Data Protected with Transparency

Bet535 handles every piece of personal data with care and accountability. On this page, in plain language, you will find everything about what we collect, how we use it, who we share it with, and what your rights are as a data subject under the LGPD.

Full LGPD Compliance 256-bit SSL across the board Your rights, guaranteed
Your Rights at bet535
Access your data at any time
Correct inaccurate information
Request deletion of your data
Export your data in a readable format
Withdraw previous consents
Updated: January 2026

How the bet535 Protects Your Privacy

Six concrete commitments to keeping your personal data safe

256-bit SSL Encryption on All Transactions

All data transmitted between your device and bet535's servers is encrypted with 256-bit SSL — the same standard used by Brazil's largest banks. This applies to Pix deposits, registration data, bets, and every other interaction on the platform.

Your Data Is Never Sold to Third Parties

Bet535 does not sell, rent, or transfer users' personal data to third parties for marketing or advertising purposes. Any data sharing occurs only when necessary to operate the service — payment processors such as Pix and card networks — and always under confidentiality agreements.

Full LGPD Compliance

The General Data Protection Law (Law 13.709/2018) establishes how companies in Brazil must handle personal data. bet535 operationalizes all LGPD requirements — a legal basis for each processing activity, consent management, a designated DPO, and processes to handle data subject requests.

Data Minimization

Bet535 collects only the data strictly necessary to operate your account, process payments, and meet legal obligations. We do not request information that is not relevant to providing the service, and we do not retain data for longer than necessary for the stated purposes.

Your Rights in Practice

Access, correction, deletion, portability, and consent withdrawal are not just words in bet535's terms — they are real processes you can initiate at any time via email or live chat. Response time is up to 15 business days, as required by the LGPD.

Full Control Over Communications

You choose which communications you want to receive from bet535 — promotional emails, push notifications, betting alerts, or none of the above. Communication preferences can be managed directly from your account dashboard and updated at any time, no hassle required.

Privacy Policy bet535

January 2026

This Privacy Policy describes how bet535 collects, uses, stores, and protects the personal data of its users. By creating an account or using any service on the platform, you confirm that you have read and understood this document. If you have any questions about any point, please contact our team before registering.

01Data Controller

The controller of the personal data processed under this Privacy Policy is the bet535, a Sports Betting and online casino platform available at bet535.best, operated for the Brazilian market.

For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), bet535 acts as the data controller for the personal data processing operations described in this document. The Data Protection Officer (DPO) can be reached at contato@bet535.best — please include "DPO — Data Protection" in the subject line.

Bet535 is committed to the principle of transparency: you will always know how and why your data is used, and you will have accessible tools to exercise your rights as a data subject as provided under the LGPD.

02Data We Collect

Bet535 collects only the data necessary to operate the platform securely and efficiently. The data we collect is grouped into the following categories:

Category Specific Data Point of Collection
Identification Full name, CPF, date of birth, email Sign Up
Contact Home address, mobile number Sign Up
Documents National ID or driver's license (front/back), selfie with document KYC Verification
Financial Pix key, bank details for wire transfer, transaction history Payments
Platform Usage Betting history, games accessed, preferences Continued use
Technical IP address, device type, browser, operating system Access

Credit and debit card data is never stored on bet535's servers — it is handled directly by certified payment processors (PCI-DSS), which receive only the transaction token for payment confirmation.

03How We Use Your Data

Every piece of data collected by bet535 has a specific, declared purpose. We use your personal data to:

  • Create and manage your account: verify identity, prevent fraud, and ensure that each CPF is linked to only one active account on the platform;
  • Process payments: confirm deposits via Pix, bank slip (boleto), credit and debit cards, PicPay, and Mercado Pago, and process withdrawals to accounts held in the account holder's name;
  • Anti-money laundering: transaction monitoring to meet Brazilian regulatory obligations regarding the prevention of financial crimes;
  • Experience personalization: displaying relevant content based on your favorite sports — football, UFC, volleyball, crash games — without sharing that data with external advertisers;
  • Service communications: sending bet confirmations, promotional alerts you have opted into, security updates, and account notices;
  • Customer Support: use your account history to resolve issues more efficiently when you contact our support team;
  • Responsible gambling: monitor usage patterns that may indicate problematic behavior and activate protection tools in line with our responsible gambling policy;
  • Legal compliance: maintain financial records in compliance with Brazilian tax and regulatory requirements for the legally established retention period.

Bet535 never uses your data for behavioral profiles sold to third parties, marketing campaigns for other companies, or any purpose not stated in this policy. If that changes, you will be notified in advance and given the option to object.

04Legal Basis for Processing

The LGPD requires that all personal data processing have a legal basis to justify it. bet535 operates under the following legal bases, as set out in Article 7 of Law 13.709/2018:

  • Contract performance (Art. 7, V): processing necessary to create and maintain your account, process bets, and execute deposits and withdrawals — the primary legal basis for most data processing at bet535;
  • Legal obligation (Art. 7, II): retention of financial and identification data to meet obligations with the Receita Federal, Banco Central, and other Brazilian regulatory authorities;
  • Legitimate interest (Art. 7, IX): platform security, fraud prevention, and monitoring of behavior that constitutes abuse or poses a risk to other users — always balanced against your rights and reasonable expectations;
  • Consent (Art. 7, I): marketing communications via email, push notifications, and personalization of internal advertising content — you can withdraw this consent at any time in your account settings.

When the legal basis is consent, bet535 will request your authorization in a clear, specific manner, separate from other terms, and will not make use of the service conditional on accepting marketing communications.

05Data Sharing

Bet535 does not sell personal data. Sharing only occurs in the situations below, all of which are governed by contractual confidentiality safeguards:

  • Payment processors: to confirm transactions via Pix (Banco Central), credit and debit cards (card networks and acquiring banks), bank slip (boleto), PicPay, and Mercado Pago — only the minimum data required to process each transaction;
  • Identity verification (KYC) providers: certified companies that assist with document verification during the KYC process, with access restricted to the submitted documents and no data retained after verification is complete;
  • Technology infrastructure: cloud hosting, CDN, and database service providers that process data as sub-processors, always under contracts requiring the same level of protection set out in this policy;
  • Public authorities: when required by law, court order, or request from Brazilian regulatory authorities (Receita Federal, Banco Central, law enforcement) — always limited to the minimum extent required and, where possible, with prior notice to the data subject.

All third parties that receive data from bet535 users sign Data Processing Agreements (DPAs) requiring them to handle that information in accordance with the LGPD and bet535's privacy policy. Any breach of these clauses results in immediate termination of the contractual relationship.

06Data Security

Bet535 implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: 256-bit SSL/TLS encryption on all communications between your browser or mobile device and bet535's servers;
  • Encryption at rest: sensitive data stored in encrypted format on our servers, with encryption keys managed securely and separately from the data itself;
  • Access control: only employees with a verified operational need can access personal data, with full audit logs of every access;
  • Multi-factor authentication: bet535's internal systems require MFA for all employee access, eliminating the risk of account compromise through single-password vulnerabilities;
  • Continuous monitoring: automated intrusion detection and anomalous behavior monitoring systems operate 24 hours a day;
  • Incident response plan: in the event of a data breach that could affect data subjects, bet535 will notify the ANPD and the affected users within the legal deadline of 72 hours after the incident is confirmed.

Despite all the measures in place, no system is 100% breach-proof. That is why we recommend using a strong, unique password for your bet535 account, enabling two-factor authentication in your settings, and contacting us immediately via live chat if you notice any suspicious activity.

07Cookies & Tracking

Bet535 uses cookies and similar technologies to enhance the platform experience, ensure security, and understand how users navigate the site. Cookies are divided into the following categories:

You can manage your cookie preferences in the banner shown on your first visit to the site or through your browser settings. Disabling essential cookies may prevent certain bet535 features from working, including login and live betting.

08Data Retention

Bet535 retains your personal data only for as long as necessary for the stated purposes, respecting the minimum retention periods required by law:

  • Registration and identification data: retained while the account is active and for 5 years after closure, in accordance with anti-money laundering obligations (Law 9.613/1998);
  • Financial records (deposits and withdrawals): retained for 10 years for tax and audit purposes, in accordance with the Brazilian Tax Code;
  • Betting history: retained for 5 years from the date of each bet for dispute resolution and audit purposes;
  • Access and security logs: retained for 6 months, in accordance with the Marco Civil da Internet (Law 12.965/2014);
  • Marketing communications data: retained only while consent is active — deleted within 30 days of consent being withdrawn;
  • KYC documents: retained for 5 years after account closure, in accordance with financial crime prevention regulations.

After the retention period, data is deleted or irreversibly anonymized, making it impossible to associate with the original data subject.

09Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that bet535 is committed to respecting and upholding. Here is how each right works in practice:

Right of Access

You can request a copy of all personal data bet535 holds about you — registration details, betting history, financial transactions, and access logs. A response will be sent within 15 business days by email in a readable format.

Right to Rectification

If any data held by bet535 is incorrect, incomplete, or outdated, you can request a correction. For identification data such as name and CPF, you may be asked to submit documentation supporting the correct information.

Right to Deletion

You may request the deletion of your personal data. Data processed on the basis of consent is deleted once that consent is withdrawn. Data subject to a legal obligation — such as financial records and betting history kept for regulatory purposes — is retained for the minimum period required by law, even after a deletion request.

Right to Data Portability

You can request an export of your data in a structured, machine-readable format (JSON or CSV). This includes registration data, betting history, and financial transaction records. The export is made available within up to 15 business days.

Right to Withdraw Consent

For any processing based on your consent — such as marketing emails or push notifications — you can withdraw that consent at any time through your account settings or by contacting support, with no impact on your access to bet535's core services.

Right to Information on Data Sharing

You can request information about which third parties have or have had access to your data. bet535 will provide a list of the entities with whom data was shared, the category of data involved, and the purpose of the sharing.

To exercise any of these rights, send an email to contato@bet535.best with a subject line identifying the right you wish to exercise (e.g., "Access Request — LGPD") or use the 24h live chat. Our team will respond within up to 15 business days with a receipt confirmation and the estimated completion timeframe.

10Minors

Bet535 services are prohibited for individuals under 18 years of age. The platform does not intentionally collect personal data from minors and does not direct any marketing communications to them.

The registration process requires a date of birth and performs a cross-check with the CPF to confirm that the user is of legal age. Additionally, the identity verification process (KYC) validates the user's age through an official government-issued document.

If you become aware that a user under 18 has created an account on bet535, please notify our team immediately at contato@bet535.best. The account will be closed right away and all related data will be handled in accordance with the LGPD's specific provisions for data involving minors.

If bet535 identifies, by any means, that an account belongs to a person under 18 years of age, the account will be immediately closed, all balances will be held pending investigation, and the minor's data will be deleted as required by the LGPD, except for records needed to demonstrate legal compliance.

11International Data Transfers

Bet535 prioritizes storing and processing data from Brazilian users on infrastructure located in Brazil or in countries with an adequate level of data protection recognized by the ANPD.

Where the use of international technology service providers is required — such as cloud infrastructure services — bet535 ensures that:

  • The provider is located in a country whose data protection standards are recognized as adequate, or;
  • Specific data protection contractual clauses (Standard Contractual Clauses) are in place to ensure the same level of protection required by the LGPD;
  • Data transferred is limited to the minimum necessary for the specific purpose;
  • The vendor is subject to audits and may not sub-delegate processing without prior approval from bet535.

You may request details about any international transfers involving your data by emailing our DPO with the subject line "International Transfer — LGPD".

12Changes to the Privacy Policy

Bet535 may update this Privacy Policy periodically to reflect changes in data processing practices, Brazilian legislation, or the services offered by the platform.

When changes are material to your rights or to how we handle your data, you will be notified via:

  • An email sent to the address registered on your account, highlighting the key changes;
  • A prominent notice displayed on the login screen or homepage for at least 30 days;
  • A notification in your account dashboard the next time you log in.

The most recent version of this policy is always available at bet535.best/privacy-policy, with the date of the last update. For changes involving new processing purposes or new third-party sharing, we will request your explicit consent before implementing them.

13Contact & Data Protection Officer (DPO)

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please get in touch:

  • DPO Email: contato@bet535.best — use the subject line "DPO — [topic of your request]" for prioritization;
  • Live Chat: available 24/7 on the platform, in Portuguese, with an average response time of under 10 minutes;
  • Response time: up to 15 business days for formal LGPD rights requests; up to 24 hours for general inquiries via chat.

If, after contacting bet535, you feel your rights as a data subject have not been adequately addressed, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the public body responsible for enforcing the LGPD in Brazil.

This Privacy Policy is governed by Brazilian law, in particular the General Personal Data Protection Law (Law 13.709/2018) and the Brazilian Internet Civil Rights Framework (Law 12.965/2014). The competent venue for disputes related to data processing is the district of São Paulo, State of São Paulo, Brazil.

Frequently Asked Questions about Privacy

The most common questions from Brazilian users about data protection at bet535

No. bet535 does not sell, rent, or transfer users' personal data to third parties for commercial or marketing purposes. The only data sharing that takes place is with the payment processors required to confirm transactions — such as the Banco Central's Pix system, card networks, and platforms like PicPay and Mercado Pago — and with technology infrastructure providers, all bound by confidentiality agreements. If you receive any external communication that appears to misuse bet535 data, please notify us immediately.

Send an email to contato@bet535.best with the subject line "Data Deletion — LGPD", including your full name and the email address on your account. Our team will respond within 15 business days to confirm receipt and provide a completion timeline. Please note that data subject to legal obligations — such as financial records of deposits and withdrawals — must be retained for the minimum period required by law (up to 10 years for tax records), even after a deletion request. All other data will be deleted or anonymized once the applicable retention period has passed.

No. Your full credit or debit card details are never stored on bet535's servers. When you use a card to deposit, the information is sent directly to the certified payment processor (PCI-DSS), which returns only a transaction confirmation token. bet535 stores only that token and the transaction amount for financial history purposes — never the full card number, expiration date, or security code (CVV).

Your Pix key is stored in encrypted form on bet535's servers, accessible only to the automated withdrawal processing systems. No employee has access to your Pix key in plain text. The key is used exclusively to process withdrawals you have requested — never for any other purpose. Additionally, Pix withdrawals can only be made to accounts linked to the CPF of the bet535 account holder, making it impossible to redirect a withdrawal to another person's account, even if someone gains unauthorized access to yours.

When you close your account, bet535 begins the process of deleting and anonymizing your data. Registration data and KYC documents are retained for 5 years after account closure, in line with anti-money laundering obligations. Financial records (deposit and withdrawal history) are kept for up to 10 years for tax purposes. After those periods, all data is permanently deleted or irreversibly anonymized. Marketing data — such as communication preferences and email history — is deleted within 30 days of account closure, regardless of the retention period that applies to operational data.

Privacy at bet535: What You Need to Know to Bet with Confidence

When you deposit via Pix on the bet535 to bet on the Brasileirão or UFC, a range of personal and financial data flows through the platform. Understanding what happens with that information — who can access it, how long it is stored, and what it is used for — is your right under the General Data Protection Law (LGPD). bet535 believes transparency is non-negotiable in this relationship: you deserve to know exactly what you are agreeing to when you create an account, and that is precisely why this document exists.

Data collection at bet535 starts at registration and is guided from the very first moment by the principle of minimization: we collect only what is necessary. Full name, CPF, date of birth, email, and phone number are required to create and secure your account, ensure each CPF has only one active account, and confirm you are of legal age before granting access to the platform. Your residential address is required for identity verification on higher-value withdrawals. This data is never shared with third parties for external advertising or marketing purposes — it never has been, and that policy will not change without prior notice and a request for new consent.

Pix is the most widely used payment method at bet535 — over 74% of all transactions on the platform are made via Pix, which makes sense for any Brazilian familiar with the system. The Pix key you register for withdrawals is stored in encrypted form, accessible only to the automated withdrawal processing systems, and used exclusively to transfer your winnings to the bank account linked to your CPF. No bet535 employee ever accesses your Pix key in plain text — the system is architected to make that impossible by design, not just by policy.

The identity verification process (KYC) is required for withdrawals above R$ 2,000.00 per request and involves submitting a photo of your CPF or RG along with a selfie. These documents are processed by a certified identity verification company, with access restricted strictly to what is necessary to confirm your identity, and are not retained by the verification company after the process is complete. At bet535, these documents are stored for the minimum period required by anti-money laundering regulations — 5 years after account closure — with access limited to the compliance team.

Cookies used on bet535 fall into four categories: essential (required for login and security, cannot be disabled), functional (remember your browsing preferences), analytical (aggregated data on how users interact with the platform, never individually identifiable), and security (detect fraudulent behavior). We do not use third-party behavioral advertising cookies — the kind that track you across other sites to build an ad profile. Your bets on the Brasileirão do not feed external advertising algorithms.

Regarding communications, bet535 distinguishes between two types: essential service communications (bet confirmations, security alerts, account notices, terms updates) and marketing communications (promotions, special offers, platform news). The former are sent regardless of consent, as they are necessary to operate the service. The latter require your explicit consent and can be turned off at any time in your account settings or by clicking "unsubscribe" in any email you receive — no hassle and no impact on your use of the platform.

The LGPD grants you a set of rights that bet535 has implemented in a practical, accessible way. You can request access to all your data, correction of any inaccurate information, deletion of data processed based on consent, portability in a readable format, information about any data sharing that has taken place, and withdrawal of any previously given consent. To exercise any of these rights, simply send an email to contato@bet535.best stating which right you wish to exercise. The response deadline is up to 15 business days as required by the LGPD — in practice, most requests are handled in fewer than 5 business days.

In the event of a security incident that could affect your data — a situation bet535 actively works to prevent, but that no company can guarantee with 100% certainty — the platform commits to notifying the National Data Protection Authority (ANPD) within 72 hours of confirming the incident, and to notifying affected users with clear information about what happened, which data was affected, and what steps were taken to mitigate the damage.

Your data privacy is not a technical detail — it is part of the trust that bet535 aims to build with every user. Whether you're betting on the next UFC card, following the Brasileirão Série A live, or playing crash games, you deserve to know that your information is safe, that it won't be misused, and that you have real control over what happens with it. That is bet535's commitment — and it's written here so you can hold us to it.

Privacy guaranteed. Ready to bet on the bet535?

Sign up in under 2 minutes, deposit via Pix, and bet on football, UFC, crash games, and much more — with the peace of mind of knowing your data is protected.

256-bit SSL LGPD Compliance Data never sold Your rights, guaranteed

Data Protection & LGPD: This Privacy Policy was drafted in compliance with the General Personal Data Protection Law (LGPD — Law 13.709/2018). To exercise your rights as a data subject or to clarify any questions about how your data is processed, please contact us at contato@bet535.best with the subject line "DPO — Data Protection". You can also review our Terms and Conditions and the Responsible Gambling.

Português