A 22br takes user privacy seriously. This Privacy Policy clearly explains what data we collect when you use the platform, why we collect it, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with the LGPD (Law No. 13.709/2018). If you have any questions, our Portuguese-language support is available 24 hours a day via live chat or at suporte@22br.best.
All data transmitted between your device and 22br's servers is protected with the same encryption standard used by Brazil's major banks, such as Itaú, Bradesco, and Nubank.
22br processes your personal data in compliance with the General Data Protection Law (Law No. 13,709/2018). You have legally guaranteed rights over your information and may exercise them at any time.
22br does not sell, rent, or share your personal data with third parties for commercial purposes. Data is only shared when necessary to provide the service or meet legal obligations.
Access, correction, portability, and deletion of your data. You control your information at 22br and can request any of these actions through support — no red tape, no fees.
This Privacy Policy applies to all services provided by the platform 22br, accessible at 22br.best, including Sports Betting — football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, NBB basketball, MMA/UFC, and e-sports —, Live Casino, crash games, poker, slots, and all other features available on the platform.
A 22br is the controller of personal data collected through the platform, responsible for determining the purposes and means of processing your information, in accordance with the LGPD. As the data controller, 22br adopts appropriate technical and organizational measures to ensure the protection of your data.
This policy applies to all registered 22br users, website visitors, and anyone who contacts support, regardless of the channel used — live chat, email, or WhatsApp.
Quick summary: This policy explains everything 22br does with your data. Take your time reading it — we wrote it in plain English, no legal jargon that nobody understands. If anything is unclear, 22br's support team can walk you through the details via chat.
A 22br collects only the data necessary to provide platform services, meet legal obligations, and ensure transaction security. The data collected falls into the following categories:
Registration data:
Identity verification data (KYC):
Financial data:
Platform usage data:
Technical data:
| Data category | Examples | Legal Basis (LGPD) |
|---|---|---|
| Registration | Name, CPF, email, phone number | Performance of a contract (Art. 7, V) |
| KYC Verification | Document, proof | Legal obligation (Art. 7, II) |
| Financial | Pix key, history | Performance of a contract (Art. 7, V) |
| Platform usage | Bets, sessions | Legitimate interest (Art. 7, IX) |
| Technical / Cookies | IP, browser, cookies | Legitimate interest / Consent |
| Marketing | Contact preferences | Consent (Art. 7, I) |
A 22br uses collected data exclusively for the purposes described below. No new purpose is introduced without prior notice to the data subject:
22br does not carry out automated decision-making that produces legal effects or significantly impacts users without the possibility of human review. You may request a review of any automated decision through our support team.
A 22br processes users' personal data based on the following legal grounds established under the LGPD (Law No. 13,709/2018):
Your rights come first: In any case based on legitimate interest, 22br ensures that your rights and interests as a data subject are not disproportionately affected. If you disagree with a specific processing activity, you may contact our privacy channel.
A 22br does not sell users' personal data. Information is shared exclusively in the situations below, always for the purpose of providing the service or meeting legal obligations:
22br does not share data with commercial partners for third-party advertising purposes. You will not receive ads from other companies based on your 22br platform usage data.
All partners of 22br that have access to users' personal data are subject to LGPD compliance assessment prior to engagement and are bound by Data Processing Agreements (DPAs) that establish security obligations and restrictions on data use.
A 22br uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize the content displayed.
The types of cookies used by 22br are:
You can manage your cookie preferences at any time through your 22br account settings panel. For browser cookies, each browser's settings (Chrome, Safari, Firefox) offer additional control.
A 22br implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. The main measures in place include:
In the event of a security incident: If 22br identifies a data breach that may pose a risk to affected individuals, it will notify the ANPD (Autoridade Nacional de Proteção de Dados) and the affected users within the timeframe required by the LGPD, providing details about what occurred and the measures taken.
Despite all the security measures adopted by the 22br, no system is 100% impervious. We recommend using a unique, strong password for your account, never sharing your credentials, and enabling the two-factor authentication available in your dashboard.
A 22br retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods:
Once the applicable retention period expires, data is securely deleted or permanently anonymized. Anonymized data — which cannot be linked back to any individual — may be retained indefinitely for statistical analysis and service improvement.
The LGPD grants you, as the data subject whose information is processed by the 22br, the following rights:
Request confirmation that 22br processes your data and obtain a full copy of the information held about you on the platform.
Request the update or correction of inaccurate, incomplete, or outdated data — such as your address, email, or phone number registered with 22br.
Request the deletion of data processed on the basis of consent. Data retained as required by law (e.g., KYC, financial history) will be kept for the legally mandated period even after voluntary account deletion.
Receive your data in a structured, machine-readable format (JSON or CSV), with the option to transfer it to another platform of your choice.
Object to processing carried out on the basis of legitimate interest, or request temporary data blocking when the lawfulness of the processing is in question.
Withdraw at any time the consent you gave for marketing, non-essential cookies, and personalization — without affecting your access to 22br's core services.
To exercise any of these rights, contact us by email at suporte@22br.best with the subject line "LGPD Rights – [request type]" or via the 24-hour live chat available on the 22br platform. Responses are provided within up to 15 business days, which may be extended with a justified notice.
You also have the right to lodge a complaint with the ANPD (National Data Protection Authority) if you believe 22br is processing your data in violation of the LGPD. We recommend contacting our privacy channel first to seek an amicable resolution.
A 22br is a platform intended exclusively for users aged 18 and over. The collection and processing of data from minors is expressly prohibited under the terms of this policy and the Terms and Conditions of the platform.
During registration, the date of birth is verified to confirm the user is 18 or older. Accounts belonging to individuals identified as minors following KYC verification are closed immediately, with any real deposited balance returned to the CPF holder and competent authorities notified when legally required.
If you become aware that a minor has created a 22br account using false information, contact our support team immediately via live chat or at suporte@22br.best so the case can be investigated and the account closed.
Some of the technology partners of the 22br — such as cloud infrastructure providers, fraud analysis tools, and game providers — may be located outside Brazil. When this occurs, 22br ensures that data transfers are carried out in compliance with Art. 33 of the LGPD, through:
Under no circumstances are sensitive data such as the full CPF or complete banking details transferred to international partners without adequate safeguards. You may request information about specific transfers through 22br's privacy channel.
A 22br may update this Privacy Policy periodically to reflect changes in services, applicable legislation, or data processing practices. Material changes will be communicated at least 15 days in advance via your registered email and a prominent notice on the platform.
The last updated date is shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the 22br platform after the effective date of any changes constitutes acceptance of the updated privacy terms.
If the changes involve new processing purposes that require consent, 22br will request that consent explicitly before beginning the new processing — you will never be surprised by a new purpose without prior notice.
To exercise your rights, clarify questions about this Privacy Policy, or submit a complaint regarding the processing of your personal data by 22br, use the channels below:
Suporte@22br.best — use the subject line "Privacidade LGPD" for priority handling. Response time: up to 15 business days for formal rights requests.
For general questions about privacy and data processing, 22br's live chat responds in real time, every day, including weekends and holidays.
22br has appointed a Data Protection Officer responsible for serving as a communication channel between data subjects and the ANPD. Contact via email at suporte@22br.best with the subject line "DPO – Formal Request".
If you are not satisfied with 22br's response, you have the right to file a complaint directly with the ANPD, the federal authority responsible for enforcing the LGPD in Brazil.
The questions our support team receives most often about how we handle your data.
Six concrete practices that set 22br's privacy approach apart.
LGPD compliance at 22br is not just a line in the footer. It involves a designated DPO, a defined legal basis for each processing activity, contracts with operators, and internal processes for periodic privacy practice reviews.
Many platforms fund part of their business by selling behavioral profiles to advertisers. 22br does not do this. Your Brasileirão betting history, your crash game preferences, and your platform behavior are never sold to third parties.
256-bit SSL, encryption at rest, 2FA available, 24/7 fraud monitoring, and strict internal access controls. Data security at 22br operates in multiple layers — a failure in one layer does not compromise the others.
Your rights as a data subject aren't just written into this policy — you can exercise them via chat in minutes. 22br doesn't create unnecessary red tape for access, correction, or deletion requests.
22br does not assume marketing consent — you choose whether or not to receive offers, tips, and updates by email or notification. And you can withdraw that consent with a single click, no need to contact anyone.
When 22br's Privacy Policy is updated in a meaningful way, you will receive an email notification at least 15 days in advance. No surprises, no silent changes that affect your data without your knowledge.
Your data is protected by the LGPD and the security practices of the 22br. Create your free account, make your deposit via Pix, and claim your welcome bonus of up to R$ 500,00. Brasileirão, Copa do Brasil, Libertadores, crash games, poker and live casino — all in BRL, with privacy and security.
Play responsibly. For adults 18 and over only. Subject to Terms and Conditions.