The 888rio handles your personal data with full transparency and in compliance with the LGPD. Here you'll find everything you need to know: what we collect, how we use it, who we share it with, and what your rights are as a data subject.
The 888rio believes that privacy is not just a legal obligation — it is a genuine commitment to everyone who trusts our platform. This policy explains, in plain language, how we handle your personal data. If anything is unclear, our support team is available in Portuguese 24 hours a day.
The controller of the personal data processed under this policy is 888rio, a Sports Betting and online casino platform operated for the Brazilian market. For the purposes of the LGPD (Law No. 13,709/2018), the 888rio is the party responsible for making decisions about the processing of users' personal data.
Any questions, requests to exercise your rights, or complaints regarding data processing should be directed to our Data Protection Officer (DPO) at suporte@888rio.best with the subject line "Privacy – LGPD". The 888rio will respond within the legal deadline of 15 calendar days.
This Privacy Policy applies to all users registered on the platform, visitors to the website, and any individual whose personal data is processed in the context of the activities of the 888rio. By using our services — whether to bet on the Brasileirão, play live roulette, join poker tournaments, or any other activity — you agree to the terms of this policy.
The 888rio collects only the data strictly necessary to provide the contracted services and meet legal obligations. Data is organized into the following categories:
The 888rio does not intentionally collect sensitive personal data as defined by the LGPD (racial origin, political opinion, health, biometrics, etc.), except where required by a specific legal anti-money laundering obligation, in which case processing is carried out on an express legal basis and with appropriate safeguards.
Every piece of data collected by the 888rio has a specific and legitimate purpose. We never collect more than what is necessary for the stated purposes:
The 888rio processes personal data based on the following legal grounds set out in art. 7 of the LGPD:
Where processing is based on consent, the user may withdraw that basis at any time without affecting the lawfulness of any processing carried out beforehand. Withdrawal can be done directly in the communication settings within the platform or by submitting a request to support.
The 888rio does not sell personal data. Full stop. No identifiable information is traded or shared with third parties for commercial or advertising purposes of any kind.
Data sharing only takes place in the following scenarios, each with a clear legal justification:
We share only the data strictly necessary with providers who help us operate the platform, including payment processors (to handle transactions via Pix, boleto, and card), cloud infrastructure providers, live casino game suppliers, and identity verification systems. All partners are contractually required to use the data solely for the agreed purpose and to maintain security standards equivalent to those of the 888rio.
The 888rio shares data with Brazilian public authorities when required by law, court order, regulatory body request, or in the context of anti-money laundering investigations. In such cases, only the minimum necessary data is shared, within the applicable legal limits.
In situations involving suspected fraud, a breach of the Terms of Use, or a threat to platform security, the 888rio may share data with competent authorities or with other fraud prevention platforms within the context of industry security consortia.
Some of our technical service providers may be located outside Brazil. In such cases, the 888rio ensures that transfers are carried out only to countries with an adequate level of protection recognized by the ANPD, or under standard contractual clauses approved by the authority, in accordance with Art. 33 of the LGPD.
The personal data of users of the 888rio are stored primarily on servers located in Brazil, operated by certified infrastructure partners. We apply the following technical and organizational measures to protect your information:
In the event of a security incident that may pose a significant risk or harm to data subjects, 888rio will notify the ANPD and affected users within 72 hours of becoming aware of the incident, as required by the LGPD.
The website and app of 888rio use cookies and similar technologies to ensure the platform runs correctly and to improve the user experience. Cookies are classified as:
Required for basic platform functionality — session authentication, language preferences, and anti-CSRF security. These cannot be disabled without affecting your ability to use the service. No consent is required, as they are strictly necessary.
Used to understand how users interact with the platform in an aggregated, anonymized way — most visited pages, average session duration, navigation flow. This data helps 888rio to improve the experience without identifying any individual user. Consent is required and they can be disabled in your account settings.
Allow the 888rio remember individual preferences such as favorite sports, language, and interface settings. They enhance the experience without any advertising purpose. Consent is required.
Users can manage their cookie preferences at any time by going to "Privacy Settings" within the platform. Disabling non-essential cookies does not affect access to the core features of the 888rio.
The LGPD grants the data subject — you — a robust set of rights that 888rio is fully committed to upholding. To exercise any of these rights, send an email to suporte@888rio.best with the subject line "LGPD Rights" describing your request. We will respond within 15 business days.
Your rights include:
In certain situations, the 888rio may be required to retain certain data even after a deletion request — for example, financial records required by anti-money laundering legislation or KYC documents required by regulators. In such cases, we will inform you of the legal basis justifying the retention.
The 888rio retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following criteria:
After account closure, data is anonymized or deleted within 90 days, except where retention is required by law. Users may request confirmation of the applicable retention period for each data category by emailing our DPO.
The 888rio has appointed a Data Protection Officer (DPO) as required by the LGPD for all data processing agents. The DPO serves as the communication channel between the 888rio, data subjects and the National Data Protection Authority (ANPD).
To get in touch with the DPO of 888rio:
The response time for LGPD rights requests is up to 15 calendar days from receipt. In more complex cases, the deadline may be extended by a further 15 days, with a justified notice sent to the requester.
This Privacy Policy may be updated periodically. Material changes will be communicated to users by email and via an in-platform notification at least 7 days in advance. Previous versions of this policy are available upon request to the DPO.
If you are not satisfied with the response from 888rio to a rights exercise request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil. Our DPO can guide you through the process.
A consolidated overview of the key data processed by 888rio, its purposes, and legal bases.
| Data Category | Primary Purpose | Legal Basis (LGPD) | Retention |
|---|---|---|---|
| Full name, CPF, email | User registration and identification | Contract | Term + 5 years |
| KYC documents | Identity verification and fraud prevention | Legal obligation | Minimum 5 years |
| Payment data | Process Pix, boleto, card, and other payment methods | Contract | 5 years as required by law |
| Betting history | Gaming records, audit and security | Contract / Leg. interest | 5 years |
| IP and device data | Security, fraud prevention and support | Leg. interest | 12 months |
| Support communications | Support and quality records | Leg. interest | 2 years |
| Marketing Preferences | Sending promotions and personalized communications | Consent | Until revocation |
| Analytical cookies | Platform experience improvement | Consent | Until revocation |
The 888rio respects each of the data subject rights set out in article 18 of Law No. 13.709/2018.
Confirm whether we process your data and obtain a full copy of the information we hold about you on the platform.
Art. 18, I and IIRequest the update or correction of incomplete, inaccurate, or outdated information on your 888rio account.
Art. 18, IIIRequest the deletion of unnecessary data or data processed in violation of the law, where there is no legal obligation to retain it.
Art. 18, IV and VIReceive your data in a structured, interoperable format for transfer to another service provider of your choice.
Art. 18, VKnow which public or private entities 888rio shares your data with and for what purpose.
Art. 18, VIITo be informed of the consequences of withholding consent and to choose which types of processing you accept or decline.
Art. 18, VIIIWithdraw any consent granted at any time, without penalty, directly in your account settings.
Art. 18, IXLodge a complaint directly with the Autoridade Nacional de Proteção de Dados if you are not satisfied with our response.
Art. 18, § 1ºConcrete measures we have implemented to ensure your privacy is more than just policy text.
The most common questions from 888rio users about data protection.