Last updated: June 2026

Privacy Policy of 259bet – Protecting Your Data

259bet handles your personal data with seriousness and transparency. Here you'll find everything about what we collect, how we use it, and what rights you have as a Brazilian user.

LGPD Compliance SSL Encryption No data selling Document in PT-BR

What This Policy Covers

A summary of the key points — but please read the full document to understand all your rights and our obligations.

Registration Data
Name, CPF, email, and phone number
Financial Data
Pix, boleto, card, and more
Usage Data
Browsing, bets, and sessions
No Sale
Data never sold to third parties
Your Rights
Access, correction, and deletion
Legal Basis
LGPD – Law No. 13,709/2018

How 259bet Protects Your Privacy

Privacy is more than a legal obligation for 259bet — it is part of our commitment to the Brazilian users who trust this platform.

Encryption on All Transactions

All data transmitted between your phone or computer and 259bet's servers is protected by SSL/TLS encryption. Your registration data, Pix, card details, and betting history are never transmitted in plain text.

Full Compliance with the LGPD

259bet operates in compliance with the General Data Protection Law (Lei nº 13.709/2018). We have a designated Data Protection Officer (DPO), internal periodic review processes, and data retention policies defined by law.

Your Data Is Never Sold

259bet never sells, rents, or trades users' personal data with third parties for commercial or advertising purposes. Your CPF, email, and betting history belong to you — they are not a product.

Full Control in Your Hands

You can access, correct, export, or request deletion of your data at any time, directly in your account settings or via the privacy email. No red tape, no long wait times.

Secure Storage

Data is stored on servers with restricted access controls, regular backups, and continuous monitoring. Internal access is granted only to employees with a genuine operational need, and all access is logged for audit purposes.

Opt-Out Communications

Promotional emails and notifications about 259bet offers always include an unsubscribe link. You can opt out of marketing communications at any time without affecting your account.

Introduction and Scope

This Privacy Policy describes how 259bet collects, uses, stores, shares, and protects the personal data of users who access or use the platform available at 259bet.click. By creating an account or using any 259bet service — Sports Betting on the Brasileirão, Copa do Brasil, or Libertadores, Live Casino, crash games, slots, or promotions — you agree to the practices described in this document.

This policy applies to all data collected through the 259bet website, mobile access, customer support interactions, and any other official communication channel of the platform. Supplementary documents that form part of this policy include the Terms and Conditions and the guidelines of Responsible Gambling.

259bet operates in compliance with the General Personal Data Protection Law (LGPD – Law No. 13,709, of August 14, 2018) and all other applicable Brazilian regulations on data protection, information security, and consumer rights. Any material updates to this policy will be communicated by email with reasonable advance notice and reflected in the update date at the top of this document.

Data Protection Officer (DPO): 259bet has a designated Data Protection Officer responsible for overseeing internal LGPD compliance. To contact the DPO directly, use the email privacidade@259bet.click.

What Data We Collect

259bet collects different categories of personal data depending on how the user interacts with the platform:

Registration & Identity Data:

  • Full name as shown on official ID;
  • CPF (Cadastro de Pessoas Físicas) — required for regulatory compliance and identity verification;
  • Date of birth — for age verification (18+);
  • Email address — for account communications and access recovery;
  • Mobile phone number — for two-step verification and notifications;
  • Residential address — when required for KYC (Know Your Customer) verification.

Identity Verification Data (KYC):

  • Copy of a government-issued photo ID (RG, CNH, or passport);
  • Proof of address issued within the last 90 days;
  • Proof of the payment method used, when requested.

Financial and Transaction Data:

  • Pix key linked to the account holder's CPF;
  • Last digits of credit or debit cards used (never the full card number);
  • History of deposits and withdrawals made on the platform;
  • Identification data from paid bank slips (boletos).

Platform Usage & Behavioral Data:

  • Full betting history — Sports Betting, Live Casino, crash games, and slots;
  • IP address and approximate location (state/city) at the time of access;
  • Browser type and version, and operating system;
  • Pages visited, session duration, and interface interactions;
  • Device identifiers (cookies and similar technologies).

Financial security: 259bet never stores full credit or debit card numbers. Payment data is processed by PCI-DSS certified gateways. Pix is the primary payment method and does not require storage of sensitive banking data beyond the registered key.

How We Use Your Data

259bet uses the data collected exclusively for the following purposes, always on an appropriate legal basis as defined by the LGPD:

  • Account creation and management: account registration, authentication, access recovery, and user profile management on the platform;
  • Financial transaction processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; processing of withdrawals and maintenance of financial history;
  • Identity verification (KYC): fulfilling regulatory obligations for age verification and anti-money laundering compliance;
  • Provision of Sports Betting and casino services: recording and settlement of sports bets, live casino session management, and crash games;
  • Fraud prevention and security: detecting and blocking unauthorized access attempts, multiple account creation, bonus abuse, and other fraudulent activity;
  • Compliance with legal obligations: record retention as required by Brazilian law, responding to requests from public authorities when permitted by law;
  • Responsible gambling: monitoring behavioral patterns to identify signs of problem gambling and provide proactive support;
  • Marketing communications: sending information about promotions, boosted odds on the Brasileirão, cashback, and 259bet news — always with an opt-out option.

259bet does not use personal data to build automatic profiles that result in solely automated decisions with significant impact on users, with no possibility of human review. You have the right to request human review of any automated decision affecting your account.

Legal Basis for Processing

Under the LGPD, all personal data processing carried out by 259bet has a specific legal basis. The main legal bases used are:

  • Contract performance – for data required to create your account, process bets, and handle financial transactions;
  • Compliance with a legal or regulatory obligation – for KYC verification, financial record retention, and responding to competent authorities;
  • Legitimate interest – for fraud prevention, platform security, and service improvement;
  • Consent – for marketing communications, non-essential cookies, and data sharing for offer personalization. Consent may be withdrawn at any time without affecting access to any other account features.

Consent withdrawal: Withdrawing consent for marketing communications does not prevent 259bet from sending essential operational communications, such as bet confirmations, withdrawal notifications, and account security alerts.

Data Sharing with Third Parties

259bet does not sell, rent, or trade users' personal data with third parties for commercial, advertising, or third-party marketing purposes. Data sharing occurs exclusively in the following situations, with partners selected according to strict security criteria:

  • Payment Processors: minimum financial data required to process deposits and withdrawals via Pix, boleto, card, PicPay, and Mercado Pago. These partners are contractually prohibited from using the data for any other purpose;
  • Identity verification providers (KYC): for document validation and anti-money laundering purposes, as required by regulation;
  • Technology infrastructure providers: servers, CDN, and security services that process data under contracts with strict confidentiality clauses;
  • Brazilian public authorities: when required by law, court order, or valid legal process — always limited to the minimum extent necessary;
  • Auditors and consultants: professionals bound by professional confidentiality and NDA who assist with 259bet's regulatory compliance.

In all cases of third-party data sharing, 259bet contractually requires those partners to handle data in accordance with the LGPD and solely for the purpose for which it was provided. Any breach by a partner results in immediate contract termination and notification to the relevant authorities.

International data transfer: When data is processed by providers with servers located outside Brazil, 259bet ensures that such transfers comply with LGPD requirements, including the existence of adequate data protection safeguards in the destination country.

Cookies & Tracking Technologies

259bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze usage patterns. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — maintaining active sessions, authentication, and security. They cannot be disabled without compromising use of the service;
  • Performance cookies: collect anonymous information about how users interact with the platform, used to identify technical issues and improve the interface;
  • Functional cookies: store user preferences, such as language and notification settings, to personalize the experience across sessions;
  • Analytical cookies: used to understand browsing patterns at an aggregate level. No betting or financial data is included in this analysis.

You can manage non-essential cookie preferences directly in your browser settings. Disabling essential cookies may prevent access to critical 259bet features, such as login and live bet processing.

Data Retention and Deletion

259bet retains personal data for as long as necessary to fulfill the purposes described in this policy or to meet applicable legal obligations. Retention criteria by category are:

  • Registration and identity data: retained for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering obligations;
  • Financial transaction data: retained for 5 years from the transaction date, in accordance with Brazilian tax and financial legislation;
  • Betting history: retained for 3 years from the bet date for support, audit, and regulatory compliance purposes;
  • KYC verification data: retained for the legally required minimum period for the betting sector, no less than 5 years;
  • Access logs: retained for 6 months in accordance with the Brazilian Internet Civil Framework (Lei nº 12.965/2014) and for up to 1 year for security purposes.

Once the applicable retention period ends, data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical purposes with no impact on user privacy.

Please note: Requests for data deletion are subject to legal retention obligations. Where the law requires a specific piece of data to be kept for a minimum period, early deletion is not possible — however, the data will be restricted to the minimum use required by law.

Information Security

259bet applies appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. Key security measures include:

  • SSL/TLS encryption across all communications between the user and the platform's servers;
  • Passwords stored with secure hashing — 259bet never stores passwords in plain text;
  • Two-factor authentication (2FA) available and recommended for all users;
  • Role-based internal access controls — only staff with a verified need may access user data;
  • Continuous monitoring of suspicious access attempts and automatic security alerts;
  • Regular encrypted backups, stored in a location geographically separate from the main servers;
  • Periodic penetration and vulnerability testing conducted by specialized professionals.

In the event of a security incident that may affect users' personal data, 259bet will notify the National Data Protection Authority (ANPD) and the affected users within the deadlines established by the LGPD. The notification will include the nature of the data affected, the measures taken, and the recommended steps for users.

Despite every effort, no security system is 100% breach-proof. 259bet recommends that users follow basic security practices: use unique, strong passwords, enable 2FA on your account, and never share your login credentials with anyone.

Your Rights as a Data Subject

The LGPD grants you, as a personal data subject, the following rights regarding your information held by 259bet:

  • Access: request confirmation that 259bet processes your personal data and obtain a copy of all information stored about you;
  • Correction: request the update of incomplete, inaccurate, or outdated information in your account;
  • Anonymization, blocking, or deletion: request the anonymization or blocking of unnecessary, excessive, or non-compliant data; or the deletion of data processed on the basis of consent;
  • Portability: request the transfer of your personal data to another service provider, in a structured and interoperable format;
  • Information on sharing: obtain information about which entities 259bet shares your data with;
  • Consent withdrawal: withdraw consent for any processing based on that legal basis, without affecting processing that took place prior to withdrawal;
  • Right to Object: object to processing carried out on the basis of legitimate interest where it has a disproportionate impact on your rights;
  • Review of automated decisions: request human review of any automated decision that affects your interests, such as account blocking or feature restrictions.

To exercise any of these rights, please contact us at privacidade@259bet.click or through the 24/7 support chat. 259bet responds to data subject rights requests within 15 business days. If a request is complex or there is a high volume of requests, this deadline may be extended by a further 15 business days, with prior notice to the user.

To keep your information secure, 259bet may require identity verification before processing data subject requests. This protects you against unauthorized attempts by third parties to access or delete your data.

Communications & Marketing

259bet may send communications via email, SMS, and push notifications regarding the following types of content:

  • Operational communications: bet confirmations, withdrawal notifications, security alerts, account updates, and mandatory communications about changes to the Terms or this Policy. These communications cannot be opted out of, as they are essential to the contract;
  • Marketing communications: 259bet promotions, available cashback, boosted odds on the Brasileirão, crash game bonuses, and platform news. For these communications, you may opt out at any time without affecting your use of the account.

To stop receiving marketing communications, click the unsubscribe link in the footer of any promotional email or go to the notification settings in your account. Unsubscribe requests are processed within 48 hours.

Privacy and Responsible Gambling

259bet uses user behavior data — such as betting frequency, amounts wagered, and usage patterns — to identify signs of problem gambling and offer proactive support. This use exists solely for the user's well-being, not to maximize profits.

Data related to responsible gambling is handled with the utmost confidentiality. Information about self-exclusion, configured limits, and interactions with responsible gambling support is not used for any other purpose and is not shared with third parties, except when required by competent health or regulatory authorities.

If you or someone close to you shows signs of gambling dependency, visit our Responsible Gambling or contact CVV by phone 188, available 24 hours a day. 259bet supports those who need help and ensures that support is provided with complete discretion.

Updates to This Policy

259bet reviews this Privacy Policy periodically to reflect changes in the law, platform practices, or regulatory guidance. When significant changes are made, we will notify users by email at least 15 days before the changes take effect.

The date of the last update is always shown at the top of this document. If you continue using the platform after the updated version's effective date, you are understood to have accepted the new terms. If you do not agree with the changes, you have the right to close your account before the new version takes effect.

For questions about this Privacy Policy, please contact us at privacidade@259bet.click or through the 24/7 support chat available on the platform.

Policy Index

Privacy Contact

To exercise your data subject rights or ask questions about this policy, please contact our DPO.

privacidade@259bet.click 24/7 Live Chat Response within 15 business days

Your data is secure
Create your account with confidence — full LGPD compliance
Sign Up Free

Your Rights Under the LGPD at 259bet

Law No. 13.709/2018 grants concrete rights over your personal data. 259bet respects each of them and makes them easy to exercise through 24/7 support.

Right of Access

Request a complete copy of all personal data 259bet holds about you, including betting history, transactions, and registration data.

Right to Correction

Correct inaccurate or outdated data directly in your account settings or by contacting support. 259bet processes corrections within 5 business days.

Right to Deletion

Request the deletion of your data when there is no longer a legal basis for processing it. Data subject to a legal retention obligation cannot be deleted ahead of schedule.

Right to Data Portability

Receive your data in a structured format for transfer to another service. Useful if you want to migrate or back up your betting history.

Right to Object

Object to processing based on legitimate interest that causes disproportionate impact. 259bet will assess each case individually.

Automated Decision Review

Request a human review of any automated decision affecting your account — such as blocks, feature restrictions, or responsible gambling alerts.

To exercise any of your rights, please reach out by email privacidade@259bet.click or via the 24/7 support chat. A response is guaranteed within 15 business days.

Secure & Transparent Platform

Bet at 259bet knowing your data is protected

Full LGPD compliance, encryption on every transaction, no data selling, and 24/7 support in Portuguese. Create your account with confidence and enjoy Brasileirão, Copa do Brasil, crash games, and much more.

LGPD Compliance SSL Encryption No data selling 24/7 Support in PT-BR

Data Protection – This page describes 259bet's Privacy Policy in compliance with the LGPD (Law No. 13.709/2018). For the general platform usage rules, visit the Terms and Conditions. Also explore our Responsible Gambling. For any privacy-related questions, contact us at privacidade@259bet.click.

Responsible Gambling: Sports Betting and casino games are entertainment — never a guaranteed source of income. Play within your financial means. If gambling is affecting your life, visit Responsible Gambling or call CVV 188. Prohibited for users under 18.

Português