This document explains clearly and directly how the 38win collects, stores, uses, and protects the personal data of platform users. We strictly comply with the General Data Protection Law (LGPD) and handle every piece of information with the respect you deserve. No fine print, no surprises.
The 38win, operator of the platform available at 38win.world, is the controller of personal data collected through the use of its services. As the data controller, the 38win defines the purposes and means by which personal data is processed, in accordance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable Brazilian legislation.
The 38win has appointed a Data Protection Officer (DPO) responsible for receiving communications, answering questions, and ensuring compliance with LGPD obligations. To contact the DPO, use the email privacidade@38win.world or the live chat channel available on the platform 24 hours a day.
This Privacy Policy applies to all users of the 38win platform, including unregistered visitors, users with active accounts, and former users whose data remains within the legally established retention period.
By registering and using the platform 38win, you voluntarily provide us with the following personal data:
While using the platform, the 38win automatically collects technical information required for the service to function and remain secure:
In specific circumstances, the 38win may receive supplementary data from authorized partners: payment providers (such as identity confirmation linked to a Pix key), identity verification services, and, where applicable, regulatory bodies that require information sharing under a legal obligation.
The 38win uses your personal data solely for the purposes described below, always grounded in one of the legal bases set out by the LGPD (contract performance, legal obligation, legitimate interest, or consent):
The 38win does not use your personal data for any purposes not explicitly described in this policy. We do not sell, rent, or transfer personal data to third parties for commercial purposes unrelated to the platform's operation.
The sharing of personal data by 38win is restricted to the following categories of recipients, all operating under data processing agreements that guarantee the same level of protection required by the LGPD:
No personal data is shared with third parties for advertising, market research, or any other commercial purpose not listed above. Business partners offering promotions on the 38win do not have access to individual user data — any campaign effectiveness analysis is conducted using aggregated and anonymized data.
The 38win retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable minimum legal retention periods:
Once retention periods expire, data is securely deleted or anonymized so that the user can no longer be identified. You may request early deletion of specific data by exercising the rights described in Section 8, subject to any legal obligations that require certain information to be retained.
The 38win implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. The main security measures in place include:
In the event of a security incident that may affect your personal data, the 38win will notify the National Data Protection Authority (ANPD) and affected users within the timeframes set by the LGPD — generally within 72 hours of becoming aware of the incident. The notification will include a description of the incident, the data affected, and the measures taken to mitigate the risks.
The 38win uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. Cookies are small text files stored on your device when you access the platform. The types of cookies used are:
You can configure your browser to block cookies, but doing so may affect essential platform features — such as the login process and betting slip loading. Marketing cookies can be declined without impacting the core functions of the 38win.
The General Data Protection Law grants you a range of rights over your personal data. The 38win is committed to making it easy to exercise these rights — quickly and without red tape. To exercise any of them, contact us at privacidade@38win.world with the subject line "LGPD Rights – [your full name]".
The response time for LGPD rights requests is up to 15 calendar days from receipt confirmation. In cases requiring more in-depth analysis, this period may be extended by an additional 15 days with written justification.
The platform 38win is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we identify that an account was created by a minor, it will be closed immediately, the data will be deleted, and any deposited balance will be refunded to the original payment method after verification.
If you are the guardian of a minor and believe they have created an account on the 38win without authorization, contact support immediately at suporte@38win.world or via live chat. We will handle the matter with priority and discretion.
Some of the operational partners of the 38win — such as cloud infrastructure providers and live game providers — may process data on servers located outside Brazil. In such cases, the 38win ensures that any transfer is carried out on the basis of one of the safeguards provided under the LGPD: standard contractual clauses requiring a level of protection equivalent to Brazilian standards, internationally recognized certifications, or an adequacy decision issued by the ANPD.
International data transfers are limited to the minimum necessary for platform operations. Sensitive data — such as identity documents and complete banking information — is preferably processed on servers located in Brazil.
The 38win may update this Privacy Policy to reflect changes in its data practices, applicable legislation, or platform features. The most current version will always be available on this page, with the revision date shown at the top of the document.
For material changes that affect how your data is handled — such as new purposes of use, new partners with data access, or changes to retention periods — the 38win will send an email notification to all active registered users at least 15 days in advance, describing the changes and offering the option to close their account if they do not agree with the new terms.
To exercise your LGPD rights, clarify questions about this policy, or file a complaint regarding the handling of personal data, please contact 38win through the channels below:
If, after contacting 38win, you feel your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.
Data protection is more than words on a page. Here is what 38win actively does to keep your information secure.
All communication between your phone or computer and 38win's servers uses TLS 1.3 — the most current encryption protocol available. Data at rest on the servers is protected with AES-256. No information is ever transmitted without protection.
38win strictly complies with the General Data Protection Law (Lei nº 13.709/2018 – LGPD). We have a designated DPO, documented data processing procedures, and incident response processes that meet the deadlines set by the ANPD.
38win does not store complete credit or debit card details on its own servers. All payment processing is handled exclusively by PCI-DSS certified gateways — the payment industry's security standard — which handle this data in an isolated environment.
38win does not sell, rent, or share personal data for advertising or market research purposes. Your data is used exclusively to operate the platform, process payments, and meet legal obligations — nothing more.
You can unsubscribe from marketing communications at any time directly from your account dashboard. Access, correction, or deletion requests are handled within 15 days. Your LGPD rights are real and easy to exercise at 38win.
If a security incident affects your data, you will be notified by email within the legally required timeframe. The notification will cover what happened, which data was affected, and the steps taken — no vague statements, no omissions.
The LGPD gives you clear rights over your data. See what you can request from 38win at any time.
You can request a copy of all personal data 38win holds about you — including what data is processed, for what purposes, and with whom it has been shared. We respond within 15 business days.
If any of your personal information is incorrect or out of date — such as your name, email, or address — you can request a correction at any time. Basic details can be updated directly in your account dashboard without needing to contact support.
You can request deletion of your personal data. Data that is not legally required to be retained (such as financial history from the past 5 years) will be deleted. Data subject to legal retention obligations will be kept for the minimum required period and then deleted.
For processing activities based on consent — such as receiving marketing communications — you may withdraw your authorization at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to it.
You may request your data in a structured, machine-readable format to transfer it to another service, as provided for by the LGPD. Delivery takes up to 15 calendar days after the request is confirmed.
If you believe that 38win has not handled your data properly or has not responded satisfactorily to your requests, you may file a complaint directly with the National Data Protection Authority (ANPD) through the authority's official portal.
| Data Type | Primary Purpose | Legal Basis (LGPD) | Retention |
|---|---|---|---|
| Full name, CPF, date of birth | Account registration and identity verification | Contract performance / Legal obligation | 5 years after account closure |
| Email and mobile number | Communication, support, and security | Contract performance / Legitimate interest | 5 years after account closure |
| KYC documents (RG/CNH) | Age verification and AML | Legal obligation | 5 years after account closure |
| Payment data (Pix, TED) | Processing deposits and withdrawals | Contract performance / Legal obligation | 5 years as required by tax law |
| Betting history | Settlement, disputes & reports | Contract performance / Legal obligation | 5 years after account closure |
| IP address & access data | Security & fraud prevention | Legitimate interest | 2 years |
| Marketing preferences | Sending promotional communications | Consent | Until consent is withdrawn |
| Platform usage data | Product improvement (anonymized) | Legitimate interest | 2 years (anonymized thereafter) |
At 38win, you place your bets knowing your data is protected under the LGPD, your Pix transactions are processed securely, and your information is never sold to third parties. Create your account and experience a platform that takes privacy seriously.
+18 years · LGPD compliant · Secure Pix · AES-256 encrypted data