222win Privacy Policy – Your Data Protected

The 222win is the Sports Betting and online casino platform accessible at 222win.world. For the purposes of the LGPD, the 222win acts as controller of the personal data collected from its users — that is, it is the 222win which determines the purposes and means of processing your data.

The platform offers Sports Betting across a range of categories including football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, basketball (NBB), MMA/UFC, E-sports (CS2, CBLOL, Valorant, Free Fire), as well as Live Casino games, slots, and crash games. All services are provided directly by the 222win for users in Brazil, with transactions processed exclusively in BRL (R$) and through domestic payment methods such as Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago.

For any questions related to your privacy, you may contact the 222win by email privacy@222win.world or via live chat in Portuguese, available 24 hours a day directly on the platform.

The 222win collects only the data necessary to provide its services and comply with legal obligations. The categories of data collected include:

Identification and registration data:

• Full name
• CPF (Cadastro de Pessoa Física)
• Date of birth
• Email address
• Mobile phone number
• Residential address (requested during the KYC process)

Financial and transaction data:

• Pix Key linked to the registered CPF
• Credit or debit card data (only the last four digits and card brand — the full card number is not stored by 222win)
• History of deposits and withdrawals made on the platform
• Betting history and casino game participation

Platform usage data:

• IP address and approximate location by IP
• Browser type and version, and device operating system
• Pages visited, session duration, and browsing patterns on the site
• Cookie and similar technology data (detailed in Section 8)

Identity verification documents (KYC):

• Official government-issued photo ID (RG, CNH, or passport)
• Identity verification selfie
• Proof of address, when requested

The 222win collects personal data in the following ways:

• Directly by you: when you fill out the registration form, make a deposit via Pix or another payment method, contact support, respond to satisfaction surveys, or use any platform feature that requires you to provide information.
• Automatically during platform use: technical data such as IP address, device type, browser, pages visited, and session duration are collected automatically via cookies and tracking technologies described in Section 8.
• By authorized third parties: payment processing partners (such as financial institutions that process Pix, boleto bancário, or credit card transactions) may provide the 222win data required to confirm financial transactions and verify identity.
• Via KYC process: when the 222win requests identity verification — typically before the first withdrawal or when transactions require confirmation — you directly provide the documents listed in Section 2.

The 222win does not purchase third-party data lists or use any undisclosed external data sources to enrich user profiles.

Data collected by the 222win are used exclusively for the purposes listed below. Each purpose is associated with a specific legal basis under the LGPD, detailed in Section 5.

The 222win does not use your data for purposes incompatible with those listed above. Should a new processing purpose arise, you will be notified in advance and, where applicable, your consent will be requested again.

The LGPD requires that all processing of personal data have a legal basis. The 222win uses the following legal bases, as set out in Article 7 of Law No. 13.709/2018:

• Contract performance (Art. 7, V): processing is necessary to provide the services you agreed to when creating your account on 222win — such as processing your bets on the Brasileirão, crediting your balance after a Pix deposit, or completing a withdrawal.
• Legal obligation (Art. 7, II): some processing activities are required by law, such as identity verification (KYC) mandated by Brazilian anti-money laundering and counter-terrorism financing regulations.
• Legitimate interest (Art. 7, IX): the 222win uses platform usage data to ensure site security, detect fraud, and improve the user experience. These uses are necessary and proportionate, with no harm to data subjects' rights.
• Consent (Art. 7, I): for sending marketing communications and promotions by email or mobile, the 222win requests your explicit consent. You may withdraw this consent at any time through your account dashboard or by contacting platform support.

The 222win does not sell, rent, or trade your personal data. Sharing occurs only in the strictly necessary situations listed below, always with contractual data protection guarantees:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil), the 222win shares strictly necessary financial data with the financial institutions and payment gateways involved in each transaction.
• Identity verification partners: documents provided during the KYC process may be handled by specialized identity verification providers contracted by the 222win with confidentiality obligations and LGPD compliance requirements.
• Game providers: to offer live casino games, slots, and crash games, the 222win works with certified providers. Data sharing with these partners is minimal and limited to what is necessary for the games to function.
• Competent authorities: the 222win may share data with regulatory bodies, law enforcement, or judicial authorities when legally required to do so — for example, in response to a court order or formal regulatory request.
• National Data Protection Authority (ANPD): in the event of a relevant security incident, the 222win will notify the ANPD in accordance with the timelines and procedures set out in the LGPD.

All third parties with whom the 222win share data are bound by contractual agreements requiring adequate protection of information and prohibiting its use for unauthorized purposes.

The personal data collected by 222win are stored on servers with rigorous security controls, including encryption at rest, role-based access control, and continuous security monitoring.

The 222win retains your data for as long as necessary for each specific purpose:

• Active account data: while your account is active on the 222win, your registration data is retained to allow access to and use of the services.
• Data after account closure: after account closure, the 222win may retain certain data for up to 5 years to meet legal obligations related to financial transactions, anti-money laundering requirements, and potential disputes. This retention period is aligned with the requirements of applicable Brazilian regulations.
• KYC Data: identity verification documents are retained for the minimum legal period required by betting regulations and financial crime prevention rules — generally 5 years after the end of the relationship.
• Marketing data: marketing communications are stopped immediately upon withdrawal of consent. Consent records are retained for as long as necessary to demonstrate regulatory compliance.

The 222win uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and analyze usage patterns. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — such as keeping your session active after login, remembering language preferences, and ensuring the betting cart works correctly. These cookies cannot be disabled without affecting your use of the platform.
• Functional cookies: enhance the personalized experience — such as remembering your favorite sport in the Sports Betting section or the bet limit settings you configured in your dashboard. These can be disabled without affecting basic platform use.
• Analytical cookies: collect aggregated and anonymized data about how users navigate the 222win — which sections are visited most, where clicks are concentrated, and average time per session. This data helps 222win to continuously improve the platform.

You can manage your cookie preferences through the banner displayed on your first visit to the site or through your browser settings. Disabling non-essential cookies does not affect the use of the main features of the 222win, such as Sports Betting, Live Casino, and cash out.

The LGPD grants you, as the data subject whose personal data is processed by the 222win, the following rights, which may be exercised at any time through the platform's support channels:

• Access: you may request a copy of the personal data that the 222win holds about you, including what information was collected, for what purposes, and with whom it was shared.
• Correction: if you identify incomplete, inaccurate, or outdated information in your account, you may request a correction at any time.
• Anonymization, blocking, or deletion: for data processed on the basis of consent or legitimate interest, you may request that it be anonymized, blocked, or deleted — except where retention is required by law.
• Portability: you have the right to receive your personal data in a structured, machine-readable format for transfer to another service or platform, where technically feasible.
• Withdrawal of consent: consent to receive marketing communications may be withdrawn at any time, at no cost or penalty to you.
• Data sharing information: you may request detailed information about which third parties have access to your data and under what conditions.
• Objection: you may object to data processing based on legitimate interest when you believe your rights outweigh 222win's interest.
• Review of automated decisions: if any decision affecting you is made based solely on automated data processing, you may request a review by a human.

To exercise any of these rights, please contact the 222win by email privacy@222win.world or via live chat. The 222win will respond within 15 business days as provided under the LGPD, with the option to extend this period by a further 15 days in complex cases, with proper justification.

The 222win implements a range of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or improper alteration:

• 256-bit SSL/TLS Encryption across all communications between your device and 222win's servers.
• Two-Factor Authentication (2FA) available to all users — we strongly recommend enabling this feature in your account settings panel.
• Internal access control based on the principle of least privilege — 222win employees only access the data necessary to carry out their specific roles.
• Continuous security monitoring of servers and systems for early detection of intrusion attempts or suspicious activity.
• Penetration testing and regular security audits conducted by independent specialized firms.
• Encrypted backups stored in geographically separate locations to ensure service continuity.

In the event of a security incident that poses significant risk to data subjects, the 222win will notify affected users and the ANPD within the timeframes established by the LGPD, providing details on the nature of the incident, the data involved, and the measures taken to mitigate the damage.

The services of the 222win are intended exclusively for individuals aged 18 or older. The 222win does not knowingly collect or process personal data from individuals under 18 years of age.

During registration, the 222win requests the user's date of birth and may require age verification documents as part of the KYC process. If the 222win identifies that a user under 18 has created an account, the account will be immediately suspended, any deposited balance will be refunded, and the collected data will be deleted in accordance with applicable procedures.

If you become aware that a minor is using the services of 222win, please notify us immediately by email at privacy@222win.world.

The 222win may update this Privacy Policy periodically, particularly in response to changes in the LGPD or Brazilian online betting regulations, updates to the products and services offered, or improvements to internal data protection procedures.

When relevant changes occur that affect your rights or the way your data is processed, the 222win will notify you by email and/or through a prominent notice on the platform at least 7 days before any changes take effect.

The "last updated" date at the top of this page will always be updated to reflect the most recent version of the policy. We recommend reviewing this page periodically to stay informed about how the 222win protects your data.

Continued use of the services of 222win after the effective date of the changes constitutes acceptance of the new version of this Privacy Policy. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.

The 222win has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for questions regarding personal data processing and the exercise of your rights as a data subject.

To get in touch with the 222win on privacy matters: