Learn how 98a3 collects, uses, and protects your personal data in compliance with Brazil's General Data Protection Law (LGPD). Full transparency — no confusing legal jargon.
Six principles that guide the handling of personal information on the platform
98a3 operates in full compliance with Law No. 13,709/2018 (LGPD). Every data processing activity has a defined legal basis — contract performance, legal obligation, legitimate interest, or consent. No data is processed without a legitimate, documented justification.
98a3 does not sell, rent, or share users' personal data with marketing companies, prospecting lists, or any third party not directly involved in operating the platform. This is non-negotiable — it has been part of our policy from day one.
All communications between your phone or computer and 98a3's servers are protected by 256-bit SSL encryption — the same standard used by Brazil's Central Bank for financial transactions. Your registration data, betting history, and Pix transactions are always transmitted encrypted.
You can view, correct, export, or request the deletion of your personal data at any time, directly through the account dashboard or by email. 98a3 responds to data subject requests within 15 business days, in accordance with the deadlines established by the LGPD.
98a3 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or to meet legal and regulatory obligations. Financial transaction data is retained for 5 years as required by the Central Bank. Marketing data is deleted upon withdrawal of consent.
98a3 has a designated Data Protection Officer (DPO) responsible for ensuring LGPD compliance, responding to data subject requests, and serving as the communication channel with the National Data Protection Authority (ANPD). Direct contact is available at privacidade@98a3.net.
This Privacy Policy describes how the 98a3 (available at 98a3.net) collects, uses, stores, shares, and protects the personal information of Brazilian users. By creating an account or using any service on the platform, you confirm that you have read and understood this document. For any questions, please contact our Data Protection Officer at privacidade@98a3.net.
The 98a3 is an online entertainment platform committed to protecting each user's personal information. This Policy was drafted in compliance with the General Data Protection Law (Lei nº 13.709/2018 — LGPD) and reflects the principles of transparency, purpose limitation, adequacy, necessity, free access, data quality, security, prevention, non-discrimination, and accountability.
The processing of personal data at the 98a3 is handled responsibly and proportionately. We collect only what is necessary, use it solely for the purposes described, and guarantee data subjects the rights provided by law. This is not merely a legal requirement — it is part of 98a3's commitment to the Brazilian players who trust the platform.
Applicability: This Policy applies to all personal data processed by 98a3 in its operations in Brazil, including data collected through the 98a3.net website, the official app for Android and iOS, and any other communication channel on the platform.
By registering and using the 98a3, you voluntarily provide the following information:
By accessing the platform, the 98a3 automatically collects technical data necessary for the secure operation of its services:
In some cases, the 98a3 may receive data from payment partners (such as card processors, Mercado Pago, and PicPay) to confirm transactions, or from identity verification providers used in the KYC process. This data is used exclusively for the purposes agreed upon with each partner.
Data minimization principle: 98a3 applies the principle of data minimization — we only collect what is strictly necessary for each purpose. We do not collect sensitive information such as health data, sexual orientation, or religious beliefs.
The 98a3 uses collected personal data exclusively for the purposes listed below. No data is used for purposes other than those described here without fresh consent or an adequate legal basis:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Full name, CPF, email, phone number, date of birth | Contract performance |
| Identity verification (KYC) | Identity documents, proof of address | Legal obligation |
| Payment Processing | Bank details, CPF, Pix key | Contract performance |
| Fraud prevention and anti-money laundering | IP address, transaction history, behavioral data | Legal obligation / Legitimate interest |
| Customer Support | Email, account history, session logs | Contract performance |
| VIP program and personalization | Betting history, gaming preferences | Legitimate interest |
| Marketing communications | Email, phone number, preferences | Consent |
| Responsible gaming and monitoring | Betting history, set limits, session data | Legal obligation / Legitimate interest |
All personal data processing carried out by the 98a3 has a defined legal basis under the terms of Art. 7 of the LGPD. We rely on the following bases:
The processing required to deliver contracted services — account creation, deposit processing via Pix and boleto, withdrawals, access to games, and the VIP Program — is carried out on the basis of the contract entered into between the user and the 98a3 at the time of registration.
Certain data processing activities are required by law: identity verification (anti-money laundering regulations), retention of financial records (Banco Central do Brasil regulations), and reporting of suspicious activity to the relevant regulatory authorities.
The 98a3 processes data on the basis of legitimate interest for purposes such as fraud prevention, platform security, personalization of services within the VIP Program, and ongoing improvements to the user experience, provided these interests do not override the rights and freedoms of data subjects.
To send marketing communications by email, SMS, or push notification, the 98a3 requests the user's explicit consent. This consent can be revoked at any time through the account dashboard or via the unsubscribe link included in every communication.
The 98a3 does not sell personal data. Sharing only occurs in the situations described below, with partners who have signed appropriate confidentiality and data processing agreements:
No personal data is shared with advertising companies, data brokers, third-party mailing lists, or any entity not described above. If that changes, you will be notified in advance and may choose to stop using the platform.
Personal data is retained by the 98a3 only for as long as necessary to fulfill the purpose that justified the collection, in accordance with the following retention periods:
Once the applicable retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified. Requests for early deletion are assessed on a case-by-case basis, taking into account any legal obligations that may prevent immediate removal.
The 98a3 implements technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:
No digital platform can guarantee absolute security, but the 98a3 follows industry best practices in the financial and entertainment sectors to minimize risk. If you suspect unauthorized access to your account, contact us immediately via live chat, available 24 hours a day.
The 98a3 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and collect analytics data. The cookies used fall into the following categories:
Required for the platform's basic operation: maintaining an authenticated session, remembering language preferences, and storing account settings. They cannot be disabled without impairing use of the platform.
Collect anonymous data on how users interact with the site — most visited pages, average session duration, errors encountered — so that the 98a3 can continuously improve the platform. They do not identify users individually.
Allow the platform to remember your specific preferences — such as favorite games, betting settings, and notification preferences — to personalize your experience on every visit.
Used only with your consent to deliver relevant content and personalized communications. You can manage your cookie preferences at any time through your account settings panel or via the consent banner displayed on first access.
Cookie controls: You can disable performance and marketing cookies in your browser settings or through your account dashboard on 98a3. Essential cookies cannot be disabled as they are required for the platform to function.
The LGPD guarantees personal data subjects a set of rights that 98a3 is committed to respecting. You may exercise these rights at any time by emailing privacidade@98a3.net or via the platform's live chat:
The 98a3 responds to all data subject requests within 15 business days. For more complex cases requiring additional identity verification, the deadline may be extended with prior notice to the requester. All responses are provided in English.
Official channel for data requests: privacidade@98a3.net. Please have your registered CPF on hand to speed up identity verification before your request is processed.
The services of the 98a3 are intended exclusively for users aged 18 and over. The platform does not intentionally collect or process personal data from minors. Registration requires a date of birth that is verified against the CPF provided, and any account created with a minor's details is closed immediately upon identification.
Legal guardians who identify unauthorized use of the platform by a minor must contact us immediately at privacidade@98a3.net. The 98a3 will take the necessary steps to close the account and delete the data collected, as well as return any deposited funds to the legal guardian upon proof of guardianship.
If a minor attempts to create an account using an adult's information, this constitutes a violation of the platform's Terms and Conditions. 98a3 has monitoring systems in place to identify usage patterns inconsistent with the profile declared at registration.
Some technical partners of the 98a3 — such as cloud infrastructure providers and international game suppliers — may process data on servers located outside Brazil. 98a3 ensures these transfers only occur to countries or organizations that offer an adequate level of data protection, or under contractual instruments that uphold the same standards as the LGPD.
International transfers made by the 98a3 fall under one of the following bases:
You may request information about specific international transfers involving your data by emailing privacidade@98a3.net.
The 98a3 may update this Privacy Policy to reflect changes in Brazilian law, our data processing practices, or our services. Material changes — those that significantly affect data subjects' rights or how we use your data — will be communicated at least 15 days in advance by email to your registered address and via a prominent notice on the platform.
Non-material changes (such as language corrections, section reorganization, or clarifications that do not alter the substance of the practices described) may be published without prior notice. The last updated date shown at the top of this page allows you to track the history of changes.
Continued use of the platform after material changes take effect constitutes acceptance of the updated Policy. If you disagree with the changes, you may close your account and request deletion of your data as described in Section 9.
The 98a3 has appointed a Data Protection Officer (DPO) to serve as the official point of contact on all matters related to personal data processing. The DPO is responsible for:
Data Protection Officer (DPO) Contact: privacidade@98a3.net
General support: suporte@98a3.net or live chat on the site, available 24 hours a day in Portuguese.
If you believe your rights as a data subject have been violated and have not received a satisfactory response from the 98a3, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), accessible through the official Brazilian federal government website.
Response time: 98a3 responds to all data subject requests within 15 business days of identity confirmation. Urgent requests related to security breaches are handled within 24 hours.
Brazilian law gives you real control over your data. 98a3 makes it easy to exercise each of these rights.
Request a copy of all personal data 98a3 holds about you. You will receive a response within 15 business days at your registered email address, in a readable and organized format.
Found outdated or incorrect information? You can update your registration details directly in the account dashboard or by contacting support. Data that affects KYC verification is corrected upon submission of new documentation.
Where processing is based on consent or legitimate interest, you may request the deletion of your data. 98a3 will remove the information within 30 days, unless legal obligations require it to be retained.
Request your data in a structured format (CSV or JSON) for transfer to another service. 98a3 will make the file available within 15 business days of identity confirmation.
Revoke your consent for marketing communications at any time through your account dashboard, no need to contact support. The opt-out is immediate — you will no longer receive promotional messages.
You have the right to know which entities your data has been shared with, for what purpose, and on what legal basis. 98a3 responds to these requests in detail and in plain language.
To exercise any of these rights, submit a request to privacidade@98a3.net with your full name and the CPF registered on the platform.
The questions our DPO receives most often about data protection
This Privacy Policy is part of a set of documents governing the use of 98a3. For a full understanding of your rights and obligations, we recommend reading it alongside the Terms and Conditions and the Responsible Gaming Policy.
To exercise your rights as a data subject, report a privacy concern, or find out more about how we handle your information, please contact our DPO. We respond within 15 business days, always in Portuguese.
Create an Account at 98a3All transactions are in R$ (BRL) and protected by 256-bit SSL. Payment data is never stored in plain text.
When the 98a3 was founded, one of the first structural decisions was how to handle Brazilian players' data. Rather than collecting as much information as possible and treating it as a commercial asset — a common practice in parts of the online entertainment industry — the decision was the opposite: collect only what is necessary, clearly explain why, and give users real control over their own information.
This commitment did not emerge solely from the General Data Protection Law coming into force in 2020. It existed before that as a core platform value, and the LGPD simply formalized — in law — what the 98a3 already understood as the right approach. A player who deposits via Pix, shares their CPF for verification, or provides their address for security purposes is entrusting sensitive data to a company. That trust must be met with responsible practices, genuine transparency, and tools that put the user in control.
In practice, this means that when you sign up on 98a3, the data you provide has a defined purpose before it is even collected. Your CPF is for identity verification and regulatory compliance — not to build an advertising profile. Your betting history is to personalize your experience in the VIP Program — not to be sold to data brokers or advertising platforms. Your mobile number is for communications from the platform itself — not to be added to third-party lists.
The identity verification process (KYC) is where privacy concerns tend to feel most tangible. When the 98a3 asks for a photo ID and proof of address — not to make things difficult for players, but because it is a legal requirement tied to anti-money laundering obligations that the platform holds toward the Brazilian financial system. These documents are stored in encrypted form, accessed only by staff whose specific role requires it, and deleted once the legally required retention period ends. They do not circulate freely within the company.
The technical security of information at the 98a3 follows industry-standard financial security practices: 256-bit TLS/SSL encryption on all communications, encryption at rest for sensitive data in databases, two-factor authentication available to all users, and continuous monitoring for suspicious access attempts. When the platform detects an intrusion attempt, the system responds automatically — the user receives an alert and, in serious cases, the account is preventively locked until security is confirmed.
The 98a3 has a formally appointed Data Protection Officer (DPO), as required by the LGPD for data controllers that process data at scale. This professional is the official point of contact for any privacy matter — whether a request to access your own data, a question about how specific information is used, or a report of misuse. The channel is privacidade@98a3.net and all requests receive a substantiated response within 15 business days, in Portuguese.
For those who use the 98a3 on mobile — which describes the majority of Brazilian players, given how widely the smartphone has been adopted as the primary device for internet access in the country — the Privacy Policy applies to the app in exactly the same way as the website. Cookies in the app work similarly to those on the site, with the difference that mobile device identifiers are used instead of traditional cookies. The logic is the same: essential cookies for functionality, analytics cookies for improvement, and marketing cookies only with consent.
Transparency means this Policy is not a document buried in a footer that nobody reads. The 98a3 makes it accessible, writes in language that Brazilian players understand, and updates it whenever practices change — with 15 days' prior notice for material changes. If you have questions, there is a place to ask them. If you disagree with something, you have options — close your account, withdraw specific consents, or request deletion of the data the law allows to be removed. That is the standard 98a3 sets out to meet, not as a marketing exercise, but as real, day-to-day operational practice.
Create your account for free and play on a platform that handles your data responsibly. Deposits via Pix from R$ 20.00, bonuses of up to R$ 500.00, and 24/7 support in Portuguese.