Full LGPD compliance
365win handles your personal data with complete seriousness. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what your rights are — all in compliance with Brazil's General Data Protection Law (LGPD).
A straightforward summary before you read the full document — the key things you need to know about how 365win handles your data
365win collects only the data strictly necessary for the platform to operate, meet legal obligations, and improve the user experience. No data is collected arbitrarily.
365win never sells, rents, or shares your personal data with third parties for commercial purposes. Full stop. Data shared with technical partners is protected by specific confidentiality and restricted-use agreements.
All personal and financial data transmitted and stored at 365win is protected with 256-bit SSL encryption — the same standard used by Brazil's leading digital banks, such as Nubank and Itaú.
You can access, correct, export, or request the deletion of your data at any time. Your rights under the LGPD can be exercised by email, with a response within up to 15 business days.
365win only sends marketing emails, SMS, or notifications if you have given explicit consent. You can withdraw that consent at any time, either through any message you receive or by contacting support.
This policy was drafted in compliance with Law No. 13,709/2018 (LGPD) and takes into account the guidelines of the National Data Protection Authority (ANPD). We review and update this document regularly to maintain compliance.
Numbers that reflect our commitment to protecting your data
A 365win is a Sports Betting and online casino platform operating in Brazil, accessible at https://365win.express and through the official app available for Android and iOS. This Privacy Policy describes how 365win collects, uses, stores, shares, and protects the personal data of users who access and use our services.
365win acts as data controller under the terms of the General Data Protection Law (Law No. 13,709/2018 — LGPD). This means we are responsible for decisions about how your data is processed within the platform. Our technical partners — such as game providers and payment processors — act as data processors, handling information only in accordance with the instructions and purposes defined by 365win, under specific data protection agreements.
This policy applies to all 365win users in Brazil, whether you are a registered user with an active account, a visitor browsing without an account, or an app user. By using any part of our services, you confirm that you have read and understood this Privacy Policy.
A 365win collects personal data at different points during your interaction with the platform. The table below outlines the main types of data collected and the context in which that collection takes place:
| Data Type | What it includes | When it is collected |
|---|---|---|
| Registration data | Full name, CPF, date of birth, email address, mobile number, account creation date. | At the time of registration. |
| Identity Data (KYC) | Government-issued ID image (national ID, driver's license, or passport), proof of address, identity verification photo when requested. | During the withdrawal verification process. |
| Financial data | Pix keys used, bank details for wire transfers, deposit and withdrawal history, transaction amounts in R$. | When making deposits or withdrawals. |
| Gaming data | Sports betting history, slots sessions and live casino, amounts wagered, results, game times. | While using the platform. |
| Technical data | IP address, device type, operating system, browser used, app version, approximate location data. | Automatically upon accessing the platform. |
| Behavioral data | Pages visited, links clicked, session duration, game preferences, account settings. | Automatically while browsing. |
| Communications | Content of messages sent to support via chat, email, or any other customer service channel. | When contacting support. |
We do not collect sensitive personal data — such as racial origin, religious belief, political opinion, or health data — unless strictly required by a legal obligation (for example, in responsible gambling cases involving financial health assessments).
A 365win uses the personal data collected solely for the purposes listed below. We do not use your data for any purpose not described in this policy without your prior consent:
The LGPD requires that all processing of personal data have a justified legal basis. The 365win processes your data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:
A 365win does not sell, rent, or share your personal data with third parties for commercial use. We share data only in the situations described below, always for a specific, proportionate purpose and protected by contracts:
A 365win uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze how our services are used. When you access the website or app, you are informed about the use of cookies and can manage your preferences.
The types of cookies used by 365win are:
You can manage or block cookies in your browser or device settings. Please note that disabling essential cookies may prevent access to parts of the platform — including login and betting features.
Protecting your data is a core technical priority for 365win, not just a legal compliance item. Our security infrastructure includes multiple layers of protection:
In the event of a security incident affecting users' personal data, 365win will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.
A 365win retains personal data for as long as necessary to fulfill the purposes described in this policy, in accordance with the minimum retention periods required by Brazilian law:
Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymization follows technical standards that make re-identification irreversible.
The LGPD guarantees a set of rights to personal data subjects. As a user of 365win, you may exercise all rights set out in Article 18 of Law No. 13,709/2018 at any time:
To exercise any of these rights, send an email to suporte@365win.express with the subject line "LGPD Request", identifying yourself as the account holder and specifying the right you wish to exercise. The response deadline is up to 15 business days.
A 365win is strictly prohibited for users under 18. Our platform does not intentionally collect personal data from minors. The registration process requires a valid CPF and identity verification that confirm the user's legal age.
If we identify that an account was created by or on behalf of a minor, the account will be immediately closed and all associated personal data will be deleted, with any legitimate balance returned to the legal guardian after identification and verification.
If you are the legal guardian of a minor and believe they have created an account on 365win, please contact us immediately via support chat or by emailing suporte@365win.express so that we can take the necessary steps.
Some of our technical partners — such as game providers and cloud infrastructure services — may process data on servers located outside Brazil. The 365win ensures that international data transfers occur only to countries or organizations that provide an adequate or equivalent level of protection to that required by the LGPD, as assessed by the ANPD.
In all cases of international data transfer, 365win enters into specific data protection contractual clauses with the partners involved, ensuring your data receives the same level of protection required by Brazilian law, regardless of where it is processed.
The main international data transfer destinations involve certified cloud infrastructure within the European Union — which has data protection legislation (GDPR) considered equivalent to or stronger than the LGPD — and game provider servers in jurisdictions with established iGaming regulation.
A 365win may send communications about promotions, new games, Brasileirão special events, Copa do Brasil, and other relevant offers to users who have explicitly consented to receive this type of communication.
You can choose whether or not to receive marketing communications through the following channels:
To stop receiving any type of marketing communication, you can:
A 365win may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or services offered by the platform. The date of the last update is always displayed at the top of this page.
When there are relevant changes that affect your rights or the way your data is processed, 365win will notify users by email at least 15 days in advance before the new terms take effect. For minor changes of a technical or language-clarity nature, updates may be made without prior notice.
Continued use of the platform after the effective date of any changes constitutes acceptance of the new terms. If you disagree with any significant change, you may close your account before the effective date as set out in the Terms and Conditions.
We recommend reviewing this policy periodically. All previous versions of this policy are available upon request to our support team.
A 365win has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance, responding to data subject requests, and serving as the communication channel with the National Data Protection Authority (ANPD).
To exercise your rights as a data subject, report a potential privacy breach, or make any request related to the processing of your personal data by 365win, please use the channels below:
If, after contacting 365win, you feel your request was not handled satisfactorily, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.
The LGPD guarantees these rights for you — and 365win ensures they are upheld in practice
Request a complete copy of all personal data 365win holds about you. We respond within 15 business days.
Found incorrect or outdated information in your profile? Request a correction at any time through support or in your account settings.
Request the deletion of your personal data when processing is no longer necessary or when there is no legal basis to justify it.
Request your data in a structured format to transfer to another service. 365win provides data in a standardized, interoperable format.
Object to data processing carried out without an adequate legal basis or in violation of the LGPD at any time.
Withdraw your consent to receive marketing communications at any time, with no penalty or impact on your contracted services.
Find out who 365win has shared your data with and why. We guarantee full transparency over every sharing instance.
If you are not satisfied with our response, you have the right to file a complaint with Brazil's National Data Protection Authority.
What Brazilian users most often ask about how we handle their data
This Privacy Policy should be read together with the Terms and Conditions of 365win, which govern the general use of the platform, and with the Responsible Gambling, which details the control tools available to users. If you have any questions about this policy or your rights as a data subject, our support team is available 24 hours a day to help.
Contact for privacy and LGPD requests: suporte@365win.express — subject line "LGPD Request" • Response time: up to 15 business days • +18 only.
365win was built for Brazilian bettors with security and privacy as top priorities. Sign up now, deposit via Pix, and bet on the Brasileirão knowing your data is in safe hands.
+18 only. Gamble responsibly. Responsible Gambling. Terms and conditions apply.