Win456: your data protected in accordance with the LGPD SSL Encryption: all transactions are encrypted Privacy: your data is never sold to third parties KYC: identity verification for your security Privacy questions: 24/7 support via chat and email LGPD: Law No. 13.709/2018 fully applied Win456: your data protected in accordance with the LGPD SSL Encryption: all transactions are encrypted Privacy: your data is never sold to third parties KYC: identity verification for your security Privacy questions: 24/7 support via chat and email LGPD: Law No. 13.709/2018 fully applied
Privacy Policy

Win456 Privacy Policy – Your Data Protected

This document describes how the Win456 collects, stores, uses, and protects its users' personal data in full compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018). By creating an account or using any service on the platform, you acknowledge that you have read and understood this Policy.

Last updated: January 2026 Language: Portuguese (pt-BR) Compliance: LGPD
LGPD Compliant
SSL
Active Encryption
0
Data Sold to Third Parties
24/7
Privacy Support

The Pillars of Our Privacy Policy

How win456 handles your data at every stage of your experience on the platform

Minimal and Necessary Data Collection

Win456 collects only the data strictly necessary to operate its services: full name, CPF, date of birth, email address, mobile number, and payment details. No data is collected without a legitimate, defined purpose — there is no preemptive gathering of information that "might be useful in the future."

Robust Technical Security

All data transmitted between your device and win456's servers is protected by SSL/TLS encryption. Sensitive data stored at rest — such as payment information — undergoes additional encryption. Internal access is controlled by multi-factor authentication and logged for audit purposes.

Full User Control

You have the right to access, correct, request portability of, and delete your personal data at any time. These rights can be exercised through our support team via live chat, WhatsApp, or email at suporte@win456.my, with no justification required for access or correction requests.

No Sale of Data to Third Parties

Win456 does not sell, rent, or trade users' personal data with third parties. Data is shared only with service providers essential to platform operations — such as payment processors and identity verification providers — always under confidentiality agreements.

Full LGPD Compliance

This Policy is drafted and reviewed to maintain ongoing compliance with the General Data Protection Law (Law No. 13,709/2018). win456 has a Data Protection Officer (DPO) responsible for ensuring that all internal processes comply with the principles and obligations established by the LGPD.

Limited and Justified Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, plus any applicable legal retention obligations. Once that period has passed, data is securely deleted or anonymized so that the individual can no longer be identified.

Your Rights as a Data Subject

The LGPD guarantees these rights to you — and Win456 is committed to honoring every one of them

Access

Request a copy of all personal data win456 holds about you, including what information was collected and how it is being used.

Correction

Request the correction of incomplete, inaccurate, or outdated information in your account — such as your address, phone number, or email.

Deletion

Request the deletion of your personal data, subject to cases where retention is legally required — such as financial records mandated by tax legislation.

Portability

Request the transfer of your personal data to another service or platform, in a structured and interoperable format, as provided for under the LGPD.

Objection

Object to the processing of your data for certain purposes, particularly when processing is based on legitimate interest without a sufficient legal basis.

Blocking

Request the temporary suspension of the processing of your data while a correction or deletion request is being handled by Win456.

Information

Obtain clear information about which third parties your data has been shared with and under what conditions that sharing took place.

Complaint

File a complaint with the National Data Protection Authority (ANPD) if you believe your rights are not being respected by win456.

To exercise any of these rights, contact us via live chat or send an email to suporte@win456.my with the subject line "LGPD Rights".

This Privacy Policy applies to all services provided by the Win456 at win456.my, including Sports Betting, live casino, slots, crash games, and all other platform features. By using any of our services, you confirm that you have read and agree to the terms described herein.

1. Who We Are (Data Controller)

The Win456 is the controller of the personal data collected and processed under this Privacy Policy. For the purposes of the LGPD, the controller is the entity that makes decisions regarding the processing of data subjects' personal data.

Win456 operates the online betting and casino platform available at win456.my, offering Sports Betting (football — Brasileirão Série A and B, Copa do Brasil, Libertadores —, volleyball, basketball NBB, MMA/UFC, e-sports, and more), Live Casino, slots, roulette, poker, and crash games for users based in Brazil.

For questions, requests, or complaints related to the processing of your personal data, please contact us by email at suporte@win456.my with the subject line "Privacy – LGPD" or via the 24-hour live chat available directly on the platform.

2. Data We Collect

The Win456 collects personal data in the following categories, each with a defined purpose and appropriate legal basis:

2.1 Registration Data

  • Full name;
  • CPF (Cadastro de Pessoas Físicas);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Full residential address (street, number, unit, neighborhood, city, state, ZIP code).

2.2 Identity Verification Data (KYC)

  • Copy of a government-issued photo ID (national ID card, driver's license, or passport);
  • Recent proof of address in the account holder's name;
  • Selfie for document comparison, where applicable.

2.3 Financial Data

  • Pix key linked to the account holder's CPF;
  • Credit or debit card details (stored in tokenized form by the payment processor — win456 does not retain the full card number);
  • Bank account details for TED processing (bank, branch, and account number);
  • History of deposits, bets, winnings, and withdrawals made on the platform.

2.4 Usage and Browsing Data

  • IP address of the device used to access the platform;
  • Browser type and version, and operating system;
  • Pages visited, session duration, and interactions with the platform;
  • Approximate geolocation data (derived from IP address, not GPS);
  • Cookies and session identifiers.

2.5 Support Communications

  • Content from conversations via live chat, WhatsApp, and email with the Win456 support team;
  • Complaints, requests, and feedback submitted through support channels.
3. How We Use Your Data

The personal data collected by the Win456 are used exclusively for the purposes described below:

  • Account creation and management: identity verification, prevention of duplicate registrations, and maintenance of the user's profile on the platform;
  • Service delivery: bet processing, odds calculation, casino session management, crash games, and all other available game modes;
  • Financial processing: receiving deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED, as well as processing withdrawals to the account holder;
  • Eligibility verification: confirmation that the user is 18 years of age or older, resides in Brazil, and holds a valid CPF, as required by the platform's Terms and Conditions;
  • Compliance with legal obligations: responding to requests from competent authorities, fulfilling tax obligations, and maintaining records required by applicable Brazilian law;
  • Fraud and money laundering prevention: monitoring of suspicious transactions, cross-checking of registration details, and analysis of behavioral patterns that may indicate unlawful activity;
  • Operational communications: sending notifications about completed transactions, security alerts, registration confirmations, and important platform updates;
  • Marketing communications: sending information about promotions, bonuses, and platform updates — only to users who have expressly consented to this type of communication and may unsubscribe at any time;
  • Platform improvement: analysis of usage data in aggregated, anonymized format to identify opportunities to improve the user experience;
  • User support: resolving questions, complaints, and requests submitted through Win456's support channels.

The Win456 does not use users' personal data for purposes not described in this Policy without obtaining new consent, except where processing is required by a legal obligation.

4. Legal Basis for Processing

The LGPD requires that all personal data processing have an adequate legal basis. The Win456 processes your data based on the following legal grounds established by Law No. 13.709/2018:

Purpose of Processing Legal Basis (LGPD)
Account creation and service delivery Contract performance (Art. 7, V)
Payment Processing (Pix, boleto, card, TED) Contract performance (Art. 7, V)
Identity verification (KYC) Compliance with a legal obligation (Art. 7, II)
Fraud prevention and anti-money laundering Legitimate interest / Legal obligation (Art. 7, II and IX)
Sending marketing communications Data subject consent (Art. 7, I)
Product improvement and usage analysis Legitimate interest (Art. 7, IX)
Compliance with competent authorities Compliance with a legal obligation (Art. 7, II)

Where processing is based on consent, the user may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Consent can be withdrawn through our support team via chat or email.

5. Data Sharing

The Win456 does not sell, rent, or trade its users' personal data. Data sharing occurs only in the following situations, always for the purpose of enabling service operations or fulfilling legal obligations:

  • Payment processors: financial data required to process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED through partner banks (Nubank, Itaú, Bradesco, Banco do Brasil). These providers operate under confidentiality agreements and are required to use the data solely for the contracted purpose;
  • Identity verification providers: for the KYC process, documents and information may be shared with specialized identity verification services, which operate with certification and under data protection agreements;
  • Game software providers: casino game, slots, and crash game providers available on the platform receive only the minimum session data required for the game to function technically — they do not have access to the user's full profile;
  • Government and regulatory authorities: Win456 may share data with competent authorities — such as the Receita Federal, COAF (Financial Activities Control Council), or ANPD — when required by law, court order, or regulatory determination;
  • IT and security service providers: cloud infrastructure, cybersecurity, and anti-fraud analysis providers that process data on behalf of Win456, always under contracts that ensure confidentiality and proper data handling.

Under no circumstances does win456 share personal data with advertisers, advertising companies, data brokers, or any entity whose interest lies in monetizing your personal information.

6. Cookies and Tracking Technologies

The Win456 uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and analyze service performance. The types of cookies used are:

  • Essential cookies: required for the platform's basic functionality, such as keeping your session active after login. They cannot be disabled without affecting your ability to use the platform;
  • Performance cookies: collect anonymous, aggregated data on how users navigate the platform — which pages are visited most, where technical errors occur, and how long users spend in each section. This data is used solely to improve the platform;
  • Preference cookies: store settings chosen by the user — such as language, displayed currency, and notification preferences — so they don't need to be reconfigured on every visit;
  • Security cookies: help detect and prevent unauthorized access attempts, suspicious activity, and fraud by verifying the consistency of login sessions.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent access to platform features that require an authenticated session.

Win456 does not use third-party cookies for advertising purposes or to track users' behavior on other sites outside the platform.

7. Data Retention and Deletion

The personal data collected by the Win456 are retained for as long as necessary to fulfill the purposes for which they were collected, also taking into account the legal retention obligations applicable to the operation of betting platforms in Brazil.

  • Registration and active account data: retained for as long as the account remains active on the platform;
  • Financial transaction data: retained for a minimum of 5 years after the transaction is completed, in accordance with Brazilian tax and financial compliance obligations;
  • Identity verification (KYC) data: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering requirements (Law No. 9,613/1998 and COAF regulations);
  • Support communication data: retained for 2 years after the ticket is closed, for quality assurance and dispute resolution purposes;
  • Usage and browsing data: retained for a maximum of 12 months in identifiable format; after that period, they are anonymized for use exclusively in aggregated analyses.

Once retention periods have been met, data is securely deleted or irreversibly anonymized. If a data subject requests deletion before the legal retention period ends, the data will be blocked from further use but kept for the minimum period required by law, then deleted once all legal obligations have been fulfilled.

8. Data Security

The Win456 implements appropriate technical and organizational measures to protect its users' personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place include:

  • SSL/TLS encryption on all communications between the user's device and the platform's servers;
  • Additional encryption at rest for sensitive stored data, especially financial data and identity documents;
  • Multi-factor authentication for internal access by employees and contractors;
  • Role-based access controls, ensuring that only team members with a legitimate need can access specific data categories;
  • Continuous security monitoring with anomaly detection and identification of unauthorized access attempts;
  • Regular security audits and penetration testing to identify and address vulnerabilities;
  • A security incident response plan, with defined procedures for notifying the ANPD and affected data subjects in the event of a data breach.

In the event of a security incident that results in significant risk or harm to data subjects, the Win456 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe established by the LGPD, with details about the nature of the incident, the data involved, and the measures taken to mitigate its effects.

The security of your account is also your responsibility. Use a strong, unique password for Win456, never share your credentials with anyone, and contact support immediately if you suspect unauthorized access to your account.

9. Protection of Minors

The services of the Win456 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and actively takes steps to prevent underage registration.

The identity verification (KYC) process includes age confirmation as a mandatory step. Accounts created with false date-of-birth information are terminated immediately upon detection, and any associated balance may be canceled.

If you believe a user under the age of 18 has created an account on Win456, please report it immediately by emailing suporte@win456.my with the subject line "Minor User". The account will be suspended for investigation and the data will be deleted upon confirmation.

10. How to Exercise Your Rights (LGPD)

To exercise any of your rights as a personal data subject under the LGPD, please contact the Win456 through the following channels:

  • Live chat: available 24 hours a day directly on the platform — let us know you wish to exercise a right under the LGPD;
  • Email: suporte@win456.my with the subject line "LGPD Rights – [specify the right you wish to exercise]";
  • WhatsApp: support via WhatsApp, stating that your message is a data subject rights request.

The Win456 will respond to rights exercise requests within 15 calendar days, as required by the LGPD. For complex requests that require additional time, the data subject will be informed of the extra time needed, which may not exceed 30 days in total.

For access requests, the Win456 will provide the information in a clear, readable format. For deletion requests, the applicable mandatory retention period will be confirmed before the data is permanently disposed of.

If a data subject believes their rights are not being properly upheld, they may file a formal complaint with the National Data Protection Authority (ANPD) through the agency's official channels.

11. International Data Transfers

Some of the service providers that support the operation of Win456 — such as cloud infrastructure providers or gaming software vendors — may be located outside Brazil. When personal data is transferred to countries that do not offer a level of protection equivalent to the LGPD, Win456 applies the following safeguards:

  • Execution of standard contractual clauses that impose on the recipient the same data protection obligations required under the LGPD;
  • Verification that the recipient is certified under internationally recognized data protection programs;
  • Minimizing data transferred to only what is strictly necessary for the purpose of the contracted service.

Any international transfer of personal data carried out by Win456 only takes place when necessary for the provision of services and always with adequate safeguards to ensure the protection of Brazilian data subjects' data.

12. Changes to This Policy

The Win456 may update this Privacy Policy periodically to reflect changes in data processing practices, legislative updates, or improvements to the services offered. Material changes will be communicated to users via their registered email or through a prominent notice on the platform at least 7 days before the changes take effect.

The current version of this Policy is always available on this page, with the date of the last update indicated at the top of the document. We recommend reviewing this Policy periodically to stay informed about how your data is being handled.

Continued use of the platform after changes to this Policy take effect constitutes acceptance of the updated practices described herein. If you do not agree with the changes, you may request account closure and withdrawal of your available balance before the effective date.

13. Contact & Data Protection Officer (DPO)

The Win456 has a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests.

To contact win456's DPO or privacy support team:

  • Email: suporte@win456.my (subject: "DPO / Privacy");
  • Live chat: available 24 hours a day on the platform — let us know you'd like to discuss privacy or data protection;
  • WhatsApp: WhatsApp support in Portuguese, available for privacy and data protection inquiries.

This Privacy Policy is supplemented by the Terms and Conditions and on the Responsible Gaming of Win456. Together, these documents form the complete set of rules governing the relationship between the platform and its users.

Frequently Asked Questions about Privacy at Win456

What users most frequently ask about how their data is handled

No. Win456 does not sell, rent, or share users' personal data with competing betting companies, advertisers, or data brokers. Data is shared exclusively with service providers essential to operating the platform — payment processors, identity verification providers, and gaming software suppliers — always under contracts that prohibit use of the data for any purpose beyond what was agreed. Government authorities may request data when required by law or court order, which is not at win456's discretion.

You can request deletion of your data via live chat, WhatsApp, or by emailing suporte@win456.my with the subject line "Data Deletion – LGPD". Win456 will respond within 15 days with details on which data can be deleted immediately and which must be retained for the minimum period required by law — primarily financial and transaction records, which must be kept for 5 years under tax and compliance regulations. Once all legal retention periods have been met, all data will be securely deleted.

Win456 does not store your full credit or debit card number on its servers. When you use a card to make a deposit, the information is processed directly by a certified payment processor — which stores the data in tokenized form, replacing the actual card number with a secure identifier. Win456 receives only a transaction confirmation and a token that allows future charges without requiring you to re-enter your full card number. This is an industry-standard process that ensures your complete card details remain protected even in the event of an incident on Win456's servers.

Identity verification (KYC — Know Your Customer) is a legal requirement for platforms that handle financial transactions, based on anti-money laundering regulations (Law No. 9.613/1998) and COAF guidelines. The process is designed to confirm that the account holder is who they claim to be and that the funds come from a legitimate source. For users, KYC is also a protection: it prevents someone who gains unauthorized access to your account from withdrawing your winnings. The documents requested — a government-issued ID (RG or CNH) and proof of address — are stored with encryption and used exclusively for verification purposes, never for anything else.

Yes. Receiving marketing communications — such as promotional emails about bonuses and new features — is based on your consent, which can be withdrawn at any time. To opt out, simply go to the notification settings in your account dashboard and turn off marketing communications, or click the unsubscribe link in any promotional email you receive. Opting out only affects marketing communications: operational emails — such as transaction confirmations, security alerts, and mandatory notifications — will continue to be sent, as they are necessary for the normal operation of your account.
Your Data, Secure

Bet with Confidence at Win456

Your data is handled responsibly and in full compliance with the LGPD. Create your account, deposit via Pix, and enjoy betting on the Brasileirão, Superliga de Vôlei, UFC, crash games, and live casino — with 24/7 support in Portuguese.

+18 · Gamble responsibly · Responsible Gaming · Terms and Conditions

Português