920win handles your personal data with respect, transparency, and full compliance with Brazil's General Data Protection Law (LGPD). Here you'll find exactly what we collect, why we collect it, and what your rights are.
LGPD Compliance · 256-bit SSL Encryption · Secure Data
Six concrete commitments that guide the handling of personal data on the platform — from registration to withdrawals via Pix.
All communication between your phone or computer and 920win's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's largest banks. Your registration details, Pix deposits, and identity verification information are all transmitted securely.
920win operates in compliance with the General Data Protection Law (Lei nº 13.709/2018). Every piece of data collected has a declared legitimate purpose, a defined retention period, and a specific legal basis — whether consent, contract performance, or legal obligation.
920win does not sell, rent, or transfer players' personal data to third parties for commercial purposes. The information you provide during registration and platform use is used exclusively for service operation, identity verification, and fraud prevention.
Credit and debit card details used for deposits at 920win are never stored directly on the platform. All processing is handled by PCI-DSS certified payment gateways — the international security standard for card transactions.
Internal access to players' personal data at 920win is restricted to staff with a demonstrated operational need, under least-privilege access policies. Access logs are maintained for auditing and detection of misuse.
You can request access, correction, portability or deletion of your personal data at any time through 920win's support team. Requests are handled within the timeframes set out in the LGPD, without excessive red tape.
This Privacy Policy describes how the 920win collects, uses, stores, protects, and shares its users' personal data, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709, of August 14, 2018) and all other applicable regulations in Brazil.
When you create an account at 920win and use any of its services — Sports Betting, Live Casino, poker, slots, Pix deposits, or withdrawals — you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein.
This Policy applies to all 920win platform users, regardless of which Brazilian state they reside in or the device used to access our services.
This Policy should be read together with the Terms and Conditions of 920win. In the event of any conflict between documents, the interpretation most favorable to the protection of the user's personal data shall prevail.
The controller of personal data processed in connection with the services of the 920win is the operating company of the 920win.best platform. For the purposes of this Policy, "controller" refers to the entity that makes decisions about the processing of personal data — what to collect, why to collect it, and how long to retain it.
To exercise your rights as a data subject, or for any questions regarding the handling of your personal information, please use the dedicated contact channel indicated in Section 14 of this Policy.
Personal data contact channel:
Suporte@920win.best — please include the subject line "Data Protection" in your message
During registration and use of the 920win, you directly provide the following categories of data:
During your use of the platform, the 920win automatically collects the following technical data:
In some cases, the 920win may receive data from identity verification and anti-fraud partners to validate the information provided during registration. This data is used exclusively for verification and security purposes.
| Data Category | Examples | Required? |
|---|---|---|
| Identification | Full name, CPF, date of birth | Yes |
| Contact | Email, mobile number | Yes |
| Verification (KYC) | ID document, selfie, proof of address | For withdrawals |
| Financial | Pix key, transaction history | Yes |
| Technical | IP address, device, browser | Automatic |
| Behavior | Betting history, sessions | Automatic |
The 920win uses collected data exclusively for the purposes listed below. No personal data is processed for purposes incompatible with those described in this Policy without the data subject's renewed consent:
Under the LGPD, all personal data processing must have a legal basis. The 920win relies on the following legal bases for each category of processing:
The collection of identity verification (KYC) data is based on the legal grounds of legal obligation and contract performance — it does not require separate consent, as it is an operational and regulatory requirement for processing withdrawals.
The 920win does not sell, rent, or transfer personal data to third parties for commercial purposes. Data sharing occurs only in the situations described below, with partners contractually committed to information protection:
The 920win may share personal data with government authorities, regulatory bodies, or pursuant to court orders, when required by law or necessary to fulfill legal obligations — including fraud investigations, anti-money laundering, and child protection.
The 920win retains personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with applicable legal retention periods:
Once the applicable retention period has passed, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified.
The 920win implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure:
Should a security incident occur that may affect your personal data, the 920win will notify affected data subjects and the National Data Protection Authority (ANPD) within the timeframes set by the LGPD, with details on the nature of the incident and the measures taken.
The 920win uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience and, with your consent, personalize content.
You can manage cookie preferences in your browser settings. Disabling non-essential cookies does not affect access to the core features of the 920win, but may limit some interface personalization.
The 920win may use internal tracking pixels to measure the performance of email communications — such as confirming that account-related messages have been read. No third-party tracking pixels are used for external advertising purposes.
The 920win is a platform strictly intended for users aged 18 and over. Registration, use of services, and any form of betting or gaming on the platform are prohibited for anyone under 18.
920win does not intentionally collect personal data from users under 18. If we become aware that a minor has provided personal data during registration, the account will be immediately closed and the data deleted as quickly as possible.
Parents or guardians who identify a minor using the platform should contact support immediately via live chat or at suporte@920win.best.
Mandatory identity verification before the first withdrawal also serves as a safeguard against underage access — confirming that the account holder is over 18 years old through a government-issued photo ID.
The LGPD grants data subjects a set of rights that the 920win is committed to respecting and facilitating the exercise of:
You may request a copy of your personal data stored by 920win, including what data we hold, where it was collected from, and how it is used.
You may request the correction of incomplete, inaccurate, or outdated data. For certain information (such as CPF), you may be required to submit supporting documentation.
You may request the deletion of data processed on the basis of consent. Data required for legal obligations cannot be deleted before the applicable regulatory retention period.
You may request your personal data in a structured, interoperable format for transfer to another service provider, in accordance with ANPD regulations.
You may withdraw consent given for processing activities based on that legal ground — such as receiving promotional communications — at any time, without affecting any processing that took place prior to withdrawal.
You may request information about which third parties your data has been shared with and for what purpose — within the limits where disclosure does not compromise trade secrets or third-party confidentiality.
To exercise any of these rights, reach out via email at suporte@920win.best with the subject line "LGPD Rights" or through the live chat. The 920win will respond within the timeframes established by the LGPD — within 15 days for most requests.
In some cases, personal data collected by 920win may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or international technology partners.
When this occurs, the 920win ensures that the transfer is carried out in accordance with art. 33 of the LGPD, through:
Under no circumstances will your data be transferred to jurisdictions that do not offer protections equivalent to the Brazilian LGPD standard.
The 920win may update this Privacy Policy periodically to reflect changes in services, applicable legislation or data processing practices.
Significant changes will be communicated via your registered email or through a prominent notice on the platform at least 7 calendar days before taking effect. Minor changes may be implemented without prior notice, with the revision date at the top of this page updated accordingly.
Continued use of the platform after the effective date of any changes constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account and request deletion of your data before the effective date.
A historical version of this Policy can be requested through 920win's support team if you need to compare previous and current versions.
To exercise your rights as a data subject, submit questions about this Policy, or report any issue related to the processing of your personal data, please contact the 920win:
Available 24/7 in Portuguese. When starting the conversation, identify your topic as "Data Protection" to be directed to our specialized support team.
Suporte@920win.best — use the subject line "LGPD Rights" or "Data Protection". Response time: up to 15 days for data subject rights requests.
Data Protection Officer (DPO)
920win's Data Protection Officer can be reached at the email channel listed above, using the subject line "DPO – Data Protection". The DPO is the official point of contact for matters involving the LGPD and the relationship with the National Data Protection Authority (ANPD).
Privacy policies are the kind of document people ignore until they actually need one — when they want to close an account, when questions arise about how their CPF was used, or when news breaks about data breaches on online platforms. At 920win, the goal is for you to understand what happens to your information before any reason for concern ever arises. This section breaks down the most relevant points of the policy in plain language.
When you register on 920win, three types of data are collected immediately: identification data (name, CPF, date of birth), contact data (email and mobile number), and usage data (what you do on the platform — which games you access, how long you spend in each section, which bets you place). The CPF is especially important because it is the identifier that ties everything together: the account, Pix withdrawals, identity verification, and the one-account-per-person rule. Without a CPF, the platform cannot operate safely and in compliance with Brazil's regulatory requirements for the betting industry.
Identity verification (KYC) is the stage at which the most sensitive data is collected — a photo ID, selfie, and proof of address. This process exists for two practical reasons. The first is to confirm you are over 18, which is a legal requirement for using betting platforms. The second is to ensure that withdrawals go to the rightful account holder — not to a third party who has gained unauthorized access. The 920win would have no way to responsibly process Pix withdrawals without confirming the account holder's identity. Documents are stored in encrypted form and accessed only by authorized personnel for verification review.
Regarding financial data: the credit or debit card details you use for deposits at 920win are never stored on the platform's servers. They pass directly through a PCI-DSS certified payment gateway — the international security standard for card transactions. 920win only receives confirmation that the payment was approved, without your full card details. Pix works differently: the Pix key linked to your CPF is recorded for withdrawal processing, but it does not contain full banking information beyond the account identifier.
One thing worth highlighting: behavioral data collected automatically — such as which games you access, how long you spend on live Brasileirão bets or poker tables — is used internally for two purposes. The first is product improvement: understanding which features are used most, where users run into friction and what can be simplified in the interface. The second is responsible gambling monitoring: patterns that suggest problematic behavior — such as a sudden spike in deposits, unusually long sessions or high-value bets outside the account's historical norm — may trigger internal alerts so that the responsible gambling team at 920win get in touch.
The LGPD guarantees eight rights to personal data subjects, and the 920win takes all of them seriously. The most commonly exercised right in practice is the right of access — you can request a copy of everything the platform holds about you. The second most common is deletion — when someone decides to close their account and wants their data removed. It is important to understand, however, that certain data cannot be deleted immediately even after account closure: financial transaction history and identity verification documents must be retained for up to 5 years as required by anti-money laundering regulations. This is not a choice made by the 920win — is a legal obligation that applies to all financial platforms operating in Brazil.
To exercise any right under the LGPD, the process is straightforward: contact 920win via live chat or email, mention that your request relates to data protection and describe what you need. The team responds in Portuguese and has up to 15 days to provide a formal response on data subject rights requests — a deadline set by Brazilian law itself. For simpler requests, such as updating contact details or unsubscribing from promotional communications, issues are typically resolved immediately in the chat.
Finally, a reminder about what is in your hands: the security of your account also depends on what you do on your end. Using a strong, unique password for the 920win, not sharing your credentials with anyone, and enabling two-factor authentication are simple steps that significantly reduce the risk of unauthorized access. The platform's encryption protects your data in transit; the security of your credentials protects access to your account — and that part is entirely up to you.
If you have any questions about how the 920win handles your personal data or about your rights as a data subject, reach out via 24/7 live chat or by email at suporte@920win.best. Our team responds in Portuguese and knows the LGPD inside out — not just generic scripted answers.
To formally exercise your rights under the LGPD — access, correction, deletion, or data portability — please contact us by email with the subject line "LGPD Rights". Response time is up to 15 days.
View Terms and ConditionsThe most common questions about how 920win protects and uses your personal data.