Privacy & LGPD

Privacy Policy of 1prabet – Your Data in Safe Hands

1prabet respects your privacy. This document clearly and directly explains what data we collect, why we collect it, how we use it, and what your rights are as a data subject — all in compliance with Brazil's General Data Protection Law (LGPD).

Last updated: January 2026
Highlights
LGPD – Lei 13.709/2018
256-bit SSL across the board
No data selling
You can delete everything
DPO available by email

How 1prabet Protects Your Data

Six principles that guide how personal data is handled across the entire 1prabet platform.

LGPD Compliance

1prabet operates in full compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018). The entire lifecycle of your personal data — collection, storage, use, and disposal — follows the legal bases defined by the LGPD, including explicit consent, contract performance, and legitimate interest.

End-to-End Encryption

All connections to the 1prabet platform use 256-bit SSL/TLS encryption — the same standard adopted by Brazil's leading digital banks, including Nubank, Itaú, and Banco do Brasil. Your registration data, Pix transaction history, and payment information are always transmitted in encrypted form.

No Sale of Personal Data

1prabet never sells, rents, or transfers your personal data to third parties for marketing purposes or any other commercial use unrelated to the operation of the platform. Your data exists so you can use the service — not to monetize your information for the benefit of other companies.

Real Control in Your Hands

You can access, correct, export, or request the deletion of your personal data at any time — directly through your account settings or by contacting our Data Protection Officer (DPO). 1prabet processes these requests within 15 calendar days, in accordance with the deadlines set by the LGPD.

Minimization & Purpose

1prabet collects only the data strictly necessary to provide the service. We do not ask for information that has no bearing on platform operations. Every piece of data collected has a clear, documented purpose communicated to you in this policy — no surprises after sign-up.

Incident Notification

If 1prabet identifies any security incident that may affect your personal data, you will be notified by email within the legally required timeframe under the LGPD, with clear information about what happened, which data was affected, and what steps were taken to protect you.

Your Rights as a Data Subject

The LGPD grants you a set of rights over the data that 1prabet holds about you. Learn what each of those rights entails.

Access
You have the right to know exactly what personal data 1prabet holds about you and how it is used.
Correction
Incomplete, outdated, or incorrect data can be corrected at any time through your account settings or by contacting support.
Deletion
You may request the deletion of data processed on the basis of consent, except where a legal retention obligation applies.
Withdrawal of Consent
Any consent given for data processing may be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Portability
You may request an export of your personal data in a structured format for transfer to another service, in accordance with ANPD regulations.
Blocking or Restriction
You may request a temporary suspension of the processing of your data while a dispute or review is in progress.

To exercise any of these rights, please contact our Data Protection Officer (DPO) by email at privacy@1prabet.com or via live chat on the platform. The response time is up to 15 calendar days from the date the request is received.

1. Who We Are (Data Controller)

The 1prabet is the controller of the personal data processed on this platform, as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018). We are responsible for deciding how and why your data is collected and processed in the context of our Sports Betting and online casino platform.

This Privacy Policy applies to all 1prabet services accessed via browser (desktop and mobile) and through the native app for Android and iOS, as well as any communication between 1prabet and its users by email, live chat, or WhatsApp.

By registering and using the platform, you confirm that you have read and understood this policy. For any privacy-related questions or requests, please contact our Data Protection Officer (DPO) at privacy@1prabet.com.

2. Data We Collect

The 1prabet collects only the data necessary to provide the service and meet legal obligations. Below we detail the categories of data collected and the contexts in which each type is obtained.

2.1 Data You Provide Directly

  • Registration: full name, CPF, date of birth, email address, mobile number, and residential address;
  • Identity verification (KYC): government-issued ID (RG, CNH, or passport) and proof of address;
  • Payments: Pix key details, credit/debit card information (processed in encrypted form and never stored in plain text), and bank account details for TED transfers;
  • Support: content of messages exchanged with our team via chat, email, or WhatsApp.

2.2 Automatically Collected Data

  • Usage data: betting history, games accessed, Live Casino sessions, pages visited, and features used;
  • Technical data: IP address, browser or app type and version, operating system, device model (mobile, tablet, or desktop), time zone, and configured language;
  • Cookies and similar technologies: session identifiers, platform preferences, performance data, and analytics cookies (detailed in section 6);
  • Geolocation data: approximate location based on IP address for regional eligibility verification.

2.3 Data Received from Third Parties

  • Transaction confirmations from payment providers (Pix via Banco Central, card networks, PicPay, Mercado Pago);
  • Identity verification data from credit bureaus or document validation services, where applicable for KYC purposes;
  • Information from partner game providers (Evolution Gaming, Pragmatic Play, and others) regarding gaming sessions initiated on the platform.

Sensitive data: 1prabet does not collect sensitive personal data such as racial origin, religious beliefs, health information, or sexual orientation, unless strictly necessary for responsible gambling purposes and with the user's explicit consent.

3. How We Use Your Data

The personal data collected by 1prabet are used solely for the purposes described below. We do not process your data for purposes incompatible with those listed here without obtaining fresh consent:

Purpose Data Used Legal Basis (LGPD)
Account creation and management Full name, CPF, email, phone number Contract performance
Identity verification (KYC) Government-issued ID, proof of address Legal obligation
Processing deposits and withdrawals Bank details, Pix key, CPF Contract performance
Fraud and money laundering prevention IP address, usage behavior, history Legal obligation / legitimate interest
Experience personalization Usage history, preferences Consent / legitimate interest
Sending marketing communications Email, phone number, preferences Consent
User Support Chat data, account history Contract performance
Responsible gambling and minor protection Date of birth, usage patterns Legal obligation / legitimate interest

Marketing communications (promotions, new games, special offers) are only sent if you give your consent during registration or through your account notification settings. You can withdraw that consent at any time by clicking "unsubscribe" in any email you receive, or by adjusting your notification preferences directly on the 1prabet platform.

4. Legal Bases for Data Processing (LGPD)

The 1prabet processes your personal data on the basis of at least one of the legal grounds set out in Article 7 of the LGPD. The main bases we rely on are:

  • Contract performance (Art. 7, V): processing required to create and maintain your account and to handle bets, deposits, and withdrawals — the core of the service you agreed to when you signed up;
  • Compliance with a legal obligation (art. 7º, II): identity verification (KYC), anti-money laundering compliance, minor protection, and reporting to regulatory authorities as required by Brazilian law;
  • Legitimate interest (art. 7º, IX): platform security, fraud prevention, and usage pattern analysis for service improvement — always balanced against your interests and fundamental rights;
  • Consent (Art. 7, I): sending marketing communications, preference-based personalization, and collection of data not essential to the service. This consent may be withdrawn at any time.

5. Data Sharing with Third Parties

The 1prabet never sells your personal data. Sharing occurs only in the situations listed below, always with appropriate safeguards and limited to what is strictly necessary for each purpose:

5.1 Service Providers (Operators)

We share data with companies acting as processors on our behalf — technology providers, payment processors (financial institutions affiliated with Pix, card networks, PicPay, Mercado Pago), identity verification services, and partner game providers (Evolution Gaming, Pragmatic Play, and others). These partners are contractually required to process data only according to our instructions and within the agreed purposes, and may not use it for their own ends.

5.2 Regulatory and Judicial Authorities

1prabet may share data with regulatory bodies, tax authorities, law enforcement, or judicial authorities when required by law, court order, or a lawful request from a competent authority acting within its legal mandate. There is no discretion in these cases — compliance with the law is mandatory.

5.3 Anti-Money Laundering

Relevant financial transactions may be reported to COAF (Brazil's Financial Activities Control Council) in accordance with Brazilian anti-money laundering and counter-terrorism financing legislation.

Please note: 1prabet never shares data with third-party advertising companies without the user's explicit consent. All marketing communications sent by 1prabet are produced and distributed internally — email lists and contact details are never passed on to external advertisers.

6. Cookies and Tracking Technologies

The 1prabet uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze usage patterns in an aggregated manner. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — keeping your session logged in, language preferences, and security. They cannot be disabled without affecting your use of the service;
  • Performance cookies: collect anonymous, aggregated data on how users navigate the platform, allowing us to identify and fix technical issues and improve loading speeds;
  • Functionality cookies: store your interface preferences — such as your chosen layout, favorite football markets, or frequently played casino games — to personalize your experience every time you log in;
  • Analytical cookies: help 1prabet understand which sections of the platform are most used, which flows have the highest drop-off rates, and where experience improvements are most needed. Data is processed in aggregate form, with no individual identification.

You can manage cookie preferences in your browser or app settings. Disabling non-essential cookies will not prevent you from using the platform, but may reduce some personalization features. Cookie settings can be adjusted at any time from the privacy panel available in your 1prabet account.

7. Data Security

Protecting your data is an operational priority at 1prabet. We apply a set of technical and organizational measures to protect your information against unauthorized access, loss, alteration, or improper disclosure:

  • 256-bit SSL/TLS encryption on all connections to the platform;
  • Passwords stored using secure hashing (bcrypt) — never in plain text;
  • Two-factor authentication (2FA) available and recommended for all users;
  • Internal access controls based on the principle of least privilege — staff members can only access the data required to perform their specific role;
  • Continuous monitoring for suspicious activity and intrusion detection systems;
  • Penetration testing and security audits conducted periodically by specialized third-party firms;
  • Encrypted backups with retention in geographically separate environments.

In the event of an incident: if 1prabet identifies a data breach that poses a risk to you, you will be notified by email within the legally required timeframe under the LGPD, with details about what happened and the steps taken. The ANPD (Autoridade Nacional de Proteção de Dados) will also be notified as required by law.

8. Data Retention and Deletion

The 1prabet retains your personal data for as long as necessary to fulfill the purposes described in this policy or as required by law. The general retention periods are:

  • Registration and KYC data: retained for at least 5 years after account closure, in compliance with legal obligations related to anti-money laundering and tax record-keeping;
  • Financial transaction history: retained for 5 years in accordance with tax legislation and regulations from the Banco Central do Brasil;
  • Betting and gaming history: retained for 3 years after account closure, for audit and dispute resolution purposes;
  • Access and security logs: retained for 6 months in accordance with the Marco Civil da Internet (Law No. 12.965/2014);
  • Support communications: retained for 2 years after the support ticket is closed;
  • Data processed on the basis of consent (such as marketing data): deleted within 30 days of consent withdrawal, unless another legal basis justifies continued retention.

Once retention periods expire, data is securely deleted or irreversibly anonymized, making it impossible to identify the data subject from any remaining information.

9. International Data Transfers

Some of the service providers used by 1prabet — such as cloud infrastructure providers and live casino game suppliers — may process data on servers located outside Brazil. When this occurs, 1prabet ensures the transfer is covered by:

  • Standard contractual clauses that ensure the recipient of the data maintains a level of protection equivalent to that required by the LGPD;
  • Data protection certifications internationally recognized as adequate by the ANPD;
  • A transfer impact assessment is conducted in advance to ensure your rights as a data subject are not compromised.

1prabet does not transfer data to countries that do not offer adequate data protection guarantees without first putting appropriate safeguards in place, as required by the LGPD.

10. Minors

The 1prabet is intended exclusively for individuals aged 18 years of age or older. We do not intentionally collect personal data from minors. The registration process includes date-of-birth verification and, when necessary, confirmation via government-issued ID.

If you are the guardian of a child or teenager and believe they may have created an account on 1prabet, please contact our support team immediately via live chat or by email at contato@1prabet.com. We will close the account and delete all collected data once the situation is confirmed, returning any deposited balance to the legal guardian.

We recommend that guardians use parental control software to restrict minors' access to betting and casino platforms. Responsibility for minors accessing devices and accounts belonging to adults lies with the adult account holder.

11. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, withdrawal of consent, or restriction of processing — you may:

  1. Access the Privacy Settings directly in your 1prabet account, where most requests can be handled automatically;
  2. Get in touch with our support team via live chat on the platform (available 24/7);
  3. Send an email to our Data Protection Officer (DPO) at privacy@1prabet.com, clearly identifying the request and the data it refers to.

1prabet responds to all requests within 15 calendar days of receipt, as stipulated by the LGPD. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice and justification provided to the data subject.

If you believe your rights have not been adequately addressed by 1prabet, you may file a complaint with the ANPD (National Data Protection Authority), which is the regulatory authority responsible for overseeing compliance with the LGPD in Brazil.

12. Changes to this Privacy Policy

The 1prabet may update this Privacy Policy periodically to reflect platform changes, new regulatory requirements, or updates to our data processing practices. The date of the most recent update is always displayed at the top of this page.

Material changes — especially those affecting your rights as a data subject or altering the purpose of data processing — will be communicated to you by email at least 14 days in advance before taking effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated version of the policy.

We recommend reviewing this policy periodically to stay informed about how 1prabet protects your data. Previous versions of this policy are available upon request from our DPO by email.

13. Contact & Data Protection Officer (DPO)

The Data Protection Officer (DPO) of 1prabet is responsible for ensuring that personal data processing on the platform complies with the LGPD, and for serving as the communication channel between 1prabet, data subjects, and the ANPD.

For all privacy and data protection inquiries, please contact:

  • DPO Email: privacy@1prabet.com
  • General support: contato@1prabet.com
  • Live chat: available on the 1prabet platform, 24 hours a day, 7 days a week

When reaching out about privacy matters, please provide your full name, the email address registered on the platform, and a clear description of your request or question to help us assist you faster.

This Privacy Policy is governed by Brazilian law, in particular the LGPD (Law No. 13.709/2018) and the Marco Civil da Internet (Law No. 12.965/2014). Any disputes not resolved through the DPO channel will be submitted to the courts of the city of São Paulo, State of São Paulo.

Your Data, Protected

Bet on 1prabet with Privacy and Security

Your personal data is handled transparently and in full compliance with the LGPD. Free registration, Pix deposits from R$ 20.00, and the assurance that none of your information will ever be sold or shared without your authorization.

Create Free Account I Already Have an Account
LGPD Compliant
No data selling
Fast and secure Pix payments

Privacy Questions

The most common questions about how 1prabet handles and protects your personal data.

No. The 1prabet never sells, rents, or transfers your personal data to third parties for marketing, advertising, or any other commercial purpose unrelated to the direct operation of the platform. Your data is shared only with service providers acting on our behalf (such as payment processors and game providers) and with authorities where there is a legal obligation to do so. All partners are contractually required to process data exclusively in accordance with our instructions.

You can request the deletion of your data by sending an email to privacy@1prabet.com or by contacting support via live chat on the platform. 1prabet will process your request within 15 calendar days. It is important to know that, even when a deletion request is submitted, some data must be retained due to legal obligations — such as financial records of Pix transactions, which must be kept for 5 years under Brazilian law. In such cases, data is retained only for the minimum legally required period and is not used for any other purpose.

Payment data at 1prabet are handled with the highest level of security. Credit and debit card data is never stored in plain text — processing is carried out by PCI-DSS certified operators, and 1prabet stores only identification tokens, not full card numbers. For Pix transactions, 1prabet stores the Pix key and transaction records as required by the Banco Central do Brasil for financial traceability purposes. No banking passwords are collected or stored by the platform.

Yes. The sending of marketing communications by 1prabet is consent-based — you will only receive promotions, offers, and updates if you opted in during registration or through your notification settings. To unsubscribe, you have two options: click the "unsubscribe" link in the footer of any marketing email you receive, or go to the notification settings in your 1prabet account and turn off marketing communications. Removal from the list is processed within 48 hours. Please note that transactional emails — such as withdrawal confirmations, identity verification, and security alerts — will continue to be sent as they are essential to the service.

In the event that 1prabet, users would be notified with a minimum advance notice of 30 days by email. Any remaining balances would be returned to account holders via Pix before the final shutdown. Personal data would be handled in accordance with applicable legal retention obligations — data that the law requires to be kept for a set period would remain securely stored for the necessary duration and then permanently deleted. In the event of a business transfer to another controller, data subjects would be notified and would be able to exercise their right to data deletion before the transfer.

Privacy and Responsible Gambling, Together

Protecting your data is part of our broader commitment to your well-being. 1prabet provides control tools such as deposit limits, scheduled breaks, and self-exclusion — and handles all responsible gambling-related data with the highest level of confidentiality. Our platform is strictly for users aged 18 and over.

Learn More About Responsible Gambling
Português