Official Document – LGPD

Privacy Policy – 89p10: How We Protect Your Data

At 89p10, our users' privacy is treated as a priority, not a formality. Here you'll find a clear breakdown of exactly what data we collect, why we collect it, how we protect it, and what rights you have as a data subject.

Last updated: January 2026 In compliance with the LGPD
SSL
256-bit Encryption
LGPD
Law No. 13.709/2018
0
Data sold to third parties
15d
Response deadline for data subjects
256-bit SSL
LGPD Compliant
Data not sold
Data Subject Rights
Restricted Access
DPO Available

6 Key Things You Need to Know

A summary of this Privacy Policy before you read the full 89p10 document

📋
We Only Collect What We Need

89p10 only collects the data strictly necessary to operate its services and meet legal obligations. Name, CPF, email, phone number, address, and payment details are collected at registration. We don't collect more than we need.

🔒
Your Data Is Encrypted

All information transmitted through the platform is protected by 256-bit SSL encryption — the same standard used by Brazil's largest digital banks. Your financial data, such as your Pix key and transaction history, benefits from additional layers of protection.

🚫
We Do Not Sell Your Data

89p10 does not sell, rent, or share your personal data with third parties for marketing or advertising purposes without your express authorization. Full stop. There are no exceptions to this rule within our operation.

⚖️
Full LGPD Compliance

This policy was drafted in accordance with the General Data Protection Law (LGPD – Law No. 13.709/2018). 89p10 has a designated Data Protection Officer (DPO) and ongoing internal review processes in place.

🙋
You Control Your Data

As a data subject, you may request access, correction, portability, and deletion of your data at any time. 89p10 has up to 15 business days to respond and handles all requests via email at contato@89p10.net.

🔔
Incident Notification

Should any security incident occur that may affect your data, 89p10 will notify the affected users within the timeframes set out by the LGPD and will immediately take containment and mitigation measures.

89p10 Full Privacy Policy

This document describes the privacy and data protection practices of the platform 89p10 (available at https://89p10.net). It explains what information we collect from our users, how we use it, who we share it with, how we protect it, and what your rights are as the data subject. By creating an account or using any service from 89p10, you confirm that you have read and understood this policy.

Summary in one sentence: 89p10 collects only the data it needs to operate, protects everything with encryption, does not sell your information, and fully respects your rights under the LGPD. The text below explains every detail transparently.

1. Who We Are (Data Controller)

A 89p10 operates the Sports Betting and online casino platform available at https://89p10.net. For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), the 89p10 is the Controller of its users' personal data — meaning the entity that makes decisions about how and why data is processed.

If you have questions about this policy or wish to exercise your rights as a data subject, you can reach us by email at contato@89p10.net. Our Data Protection Officer (DPO) specifically handles requests with the subject line "LGPD – [your request]".

2. What Personal Data We Collect

A 89p10 collects personal data at different points throughout your experience on the platform. Below we detail each category:

2.1 Data provided directly by you

When you create an account at 89p10, you provide:

  • Full name — for account identification;
  • CPF — required by regulation for identity verification and tax compliance;
  • Date of birth — to confirm you are 18 years of age or older;
  • Email address — for communications, password recovery, and account notifications;
  • Mobile number — for two-factor authentication and security contact;
  • Residential address — including zip code, city, and state, as required by regulation;
  • Payment data — Pix key, TED bank account details, credit/debit card data (we never store your full card number — we use tokenization via PCI-DSS certified providers).

2.2 Automatically collected data

When you use the 89p10, we automatically collect:

  • IP address — for security purposes, fraud prevention, and geographic compliance;
  • Device data — device type, operating system, browser used;
  • Session data — pages visited, time spent, clicks, and interface interactions;
  • Approximate location data — derived from IP, not precise GPS;
  • Cookies and session identifiers — to keep you logged in and personalize your experience.

2.3 Identity verification data (KYC)

To meet regulatory anti-money laundering obligations, we may request:

  • Photo ID document copy (RG, CNH, or passport);
  • Proof of residence issued within the last 90 days;
  • Proof of ownership of the bank account or Pix key used for withdrawals.

Important: 89p10 will never ask for passwords, card PINs, bank authentication codes, or any credentials used to access your financial accounts. If you receive a request of this kind, do not respond and contact us immediately.

3. How We Use Your Personal Data

A 89p10 uses the data collected for the following purposes, each with an appropriate legal basis under the LGPD:

  • Platform operations: create and manage your account, process bets, deposits and withdrawals, and maintain your transaction and betting history;
  • Identity verification: confirm that you are 18 or older and that you are who you claim to be, fulfilling KYC legal obligations;
  • Fraud prevention: identify suspicious activity, multiple accounts, money laundering, and other behavior that violates the platform's terms;
  • Transactional communications: send registration confirmations, deposit and withdrawal notifications, security alerts, and account updates via email or mobile;
  • Marketing communications: send offers, promotions, and news from 89p10 — only with your consent, which may be withdrawn at any time;
  • Customer support: use your information to efficiently resolve inquiries, complaints, and requests;
  • Legal compliance: comply with applicable tax, regulatory, and judicial obligations related to 89p10's operations in Brazil;
  • Platform improvement: analyze aggregated, anonymous data on platform usage to identify interface and functionality improvements.

A 89p10 does not use your personal data for purposes beyond those listed above without a new adequate legal basis or your express consent.

4. Legal Basis for Data Processing

As required by the LGPD, all personal data processing by the 89p10 is carried out based on one of the legal grounds set out in article 7 of the law:

  • Contract performance (art. 7º, V): processing necessary to operate the platform, process bets and payments in accordance with the Terms and Conditions accepted by the user;
  • Legal obligation compliance (art. 7, II): data required by anti-money laundering regulations, tax oversight, and other applicable legal provisions;
  • Legitimate interest (art. 7º, IX): fraud prevention, platform security, and operational communications relevant to the user;
  • Consent (art. 7, I): marketing communications and use of non-essential cookies — always with a clear and immediate opt-out option.

5. Data Sharing with Third Parties

A 89p10 does not sell, rent, or trade its users' personal data. We share information only in the following specific and controlled situations:

5.1 Essential service providers

We share data with companies that provide services essential to running the platform, always under contracts with strict confidentiality and data protection clauses:

  • Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED. Only the minimum data required for each transaction is shared;
  • Cloud infrastructure providers: servers and data storage with security certification;
  • Identity verification services (KYC): certified platforms for document validation;
  • Fraud analysis tools: to identify suspicious behavior and protect all users on the platform;
  • Transactional email and SMS providers: for sending account notifications and authentication.

5.2 Legal obligation or court order

A 89p10 may share data with law enforcement, regulatory, or judicial authorities when required by law or court order, as provided under Brazilian legislation. In such cases, we share only the data specifically requested in the order or determination.

5.3 What We Don't Do

  • We do not share data with advertisers or third-party advertising networks;
  • We do not sell user lists or behavioral profiles to any company;
  • We do not share data with commercial partners without your explicit consent.

6. Cookies and Tracking Technologies

A 89p10 uses cookies and similar technologies to improve your experience on the platform. There are different categories of cookies, each serving a distinct purpose:

6.1 Essential cookies (required)

These cookies are required for the platform to function at a basic level. Without them, you won't be able to log in, maintain an active session, or place bets. They cannot be disabled, as they are essential to the operation of the service.

6.2 Performance and analytics cookies

They collect anonymous data on how users navigate the platform — most visited pages, load times, errors encountered. This information helps us identify issues and improve the experience. It does not identify you individually.

6.3 Preference cookies

They remember your platform settings — such as your preferred language, saved betting filters, and display preferences. They make browsing smoother by saving you from having to reconfigure everything on each visit.

6.4 Cookie management

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies may affect the performance of the 89p10.

7. Data Security

A 89p10 implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL/TLS Encryption in all communications between your device and our servers;
  • Encryption at rest for sensitive data stored in our systems;
  • Payment data tokenization — we never store full card numbers, only tokens generated by PCI-DSS certified processors;
  • Internal access controls based on the principle of least privilege — only team members with a legitimate need have access to specific data;
  • Two-factor authentication for internal access to systems containing user data;
  • Continuous monitoring of unauthorized access attempts and suspicious activity across systems;
  • Periodic security audits conducted by internal teams and external consultants;
  • Incident response plan regularly tested to ensure a swift response in the event of an incident.

Despite all these measures, it is important that you also protect your account on 89p10: use a strong, unique password, never share it with anyone, enable two-factor authentication, and contact us immediately if you suspect unauthorized access.

If you suspect unauthorized access to your 89p10 account, immediately go to your security settings and change your password, or contact our 24/7 support team at contato@89p10.net. We treat account security cases as our highest priority.

8. Data Retention and Deletion

A 89p10 retains your personal data for as long as necessary to fulfill the purposes described in this policy and any applicable legal obligations. The criteria used to determine the retention period include:

  • Active account data: retained for as long as your account is active on the platform, plus an additional period for resolving any pending disputes;
  • Financial transaction data: retained for 5 years after each transaction, as required by Brazilian tax and regulatory legislation for audit purposes;
  • KYC data (identity verification): retained for 5 years after account closure, as required by the Anti-Money Laundering Law (Law No. 9.613/1998);
  • Access records and security logs: retained for 6 months, in accordance with the Marco Civil da Internet (Law No. 12,965/2014);
  • Customer support communications: retained for 2 years for reference and dispute resolution purposes.

Once legal retention periods have expired, data is securely deleted or irreversibly anonymized. Anonymized data cannot be used to identify you individually and may be used for statistical purposes without restriction.

If you request deletion of your account at 89p10, any data that does not need to be retained for legal compliance purposes will be deleted within 30 business days. Data subject to a legal retention period will be kept only for as long as required by law.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the owner of your personal data, a robust set of rights that the 89p10 fully respects. You may exercise any of these rights at any time:

👁️
Right of Access

Request a copy of all personal data 89p10 holds about you, including how it was collected and the purposes for which it is used.

✏️
Right to Correction

Request the correction of incomplete, inaccurate, or outdated data. You can also update many details directly from your account dashboard.

🗑️
Right to Deletion

Request the deletion of your personal data processed on the basis of consent. Data subject to a legal retention obligation will be kept for the period required by law.

📦
Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another controller, as provided under the LGPD.

ℹ️
Right to Information

Request information about the third parties with whom 89p10 has shared your data, as well as about the possibility of withholding consent and the consequences of doing so.

🚫
Right to Object

Object to data processing carried out on the basis of legitimate interest or for marketing purposes, with immediate effect for marketing communications.

To exercise any of these rights, send an email to contato@89p10.net with the subject line "LGPD – [right you wish to exercise]" and your registered CPF for identification. The 89p10 has up to 15 business days to respond to your request, as provided by law. In cases of exceptional complexity, this deadline may be extended by a further 15 days, with prior notice and justification.

10. Minors

The platform 89p10 is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors. If we identify that an account was created by someone under 18, it will be immediately closed, all collected data will be deleted, and any deposited funds will be returned to the legal guardian upon verification.

If you are the guardian of a minor and believe they have created an account on 89p10, please contact us immediately at contato@89p10.net. We treat these requests with the highest priority.

11. International Data Transfers

In some cases, personal data of users of 89p10 may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or security analysis tools that operate globally. When this occurs, the 89p10 guarantees that:

  • Transfers are made only to countries or organizations that provide an adequate level of protection as assessed by the ANPD (National Data Protection Authority), or through the adoption of approved standard contractual clauses;
  • Contracts with international providers include data protection obligations equivalent to those required by the LGPD;
  • No Brazilian user data is transferred to foreign third parties for commercial or marketing purposes without explicit consent.

12. Changes to This Privacy Policy

A 89p10 may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services we offer. Material changes will be communicated via registered email and through a prominent notice on the platform at least 15 days before taking effect.

The most current version of this policy will always be available at https://89p10.net/privacy-policy, with the date of the last revision indicated at the top of the document. We recommend reviewing this page periodically. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated terms.

If the changes involve processing data for new purposes that require consent, we will request that consent explicitly before initiating the new processing.

13. Contact, DPO & Privacy Channel

To exercise your rights, ask questions, or file complaints related to the privacy and handling of your personal data at 89p10, you can reach us through the channels below. Our Data Protection Officer (DPO) is responsible for handling requests specifically related to the LGPD.

The general support of the 89p10 is also available 24 hours a day, 7 days a week for operational questions related to your account and use of the platform.

DPO / Privacy Email: contato@89p10.net — use the subject line "LGPD – [your request]" for priority routing to the DPO. Response time: up to 15 business days.

Types of Data We Collect at 89p10

A quick overview of each data category and its purpose

Full Name CPF Date of Birth Email Mobile Residential Address Pix Key Card Token IP address Device Data Betting History Session Logs KYC Documents Support Messages

Each piece of data is collected on an appropriate legal basis and for a specific purpose as described in this policy.

Talk to 89p10 About Privacy

Three ways to contact us about your personal data

DPO Email

For formal LGPD requests — access, correction, deletion, portability, and objection — please use the subject line "LGPD – [request type]".

contato@89p10.net
24h Customer Support

For general privacy questions, account settings, marketing communication opt-outs, and cookie management.

Live chat on the platform
Security Incidents

If you suspect unauthorized access to your account or misuse of your data, contact us immediately. We respond with the highest priority.

contato@89p10.net — urgent

Privacy FAQs at 89p10

Common questions from our users about how we handle their data

No. 89p10 does not sell, rent, or share your personal data with third parties for marketing, advertising, or any other commercial purpose. We only share information with essential service providers needed to operate the platform — such as Pix and Mercado Pago payment processors, infrastructure providers, and fraud prevention tools — always under contracts with strict confidentiality and data protection clauses. In the event of a court order or regulatory obligation, we may share data specifically requested by the competent authorities.

You can opt out of marketing communications from 89p10 in two ways: by clicking the "Unsubscribe" link in the footer of any marketing email, or by going to the notification settings in your account dashboard and turning off promotional communications. The opt-out takes effect within 48 business hours. Please note that we will continue to send essential transactional communications — such as deposit confirmations, security alerts, and account notifications — which cannot be disabled as they are necessary for the platform to function.

After account closure, any data that does not need to be retained for legal compliance will be deleted within 30 business days. However, certain data must be kept for specific legal periods: financial transaction data must be retained for 5 years under tax legislation; KYC data for 5 years under the Anti-Money Laundering Law; and access logs for 6 months under the Marco Civil da Internet. Once each category's legal retention period has elapsed, the data is permanently deleted or irreversibly anonymized. You may request details about what has been retained and on what legal basis at any time.

We do not store full credit or debit card numbers in our systems. When you use a card on 89p10, the data is processed directly by a PCI-DSS certified payment provider (Payment Card Industry Data Security Standard), which returns only a token — a unique identifier that represents the card without containing the actual data. That token is what we store for future transactions. Even if our systems were accessed without authorization, it would not be possible to retrieve your full card details from the token.

In the event of a security incident involving personal data, 89p10 has a detailed incident response plan in place. Immediate actions include: containing the incident to limit unauthorized access, assessing the scope and affected data, and notifying impacted users and the ANPD (National Data Protection Authority) within the timeframes required by the LGPD — up to 2 business days for incidents that may cause significant risk or harm. Users will be notified via their registered email address, with clear information about what happened, which data was affected, and what steps are being taken.

🔒 Your Data Secure, Your Fun Guaranteed

Create your 89p10 account knowing your information is handled with the highest level of security and transparency. Sign up for free and deposit via Pix in minutes.

89p10's Commitment to Privacy

All personal and financial data belonging to users of 89p10 are protected by 256-bit SSL encryption and handled in full compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). 89p10 does not sell personal data and responds to all data subject requests within the legally required timeframe. For questions or requests: contato@89p10.net.

See also: Terms and Conditions · Responsible Gambling

Bet Responsibly at 89p10

The privacy and security of your data go hand in hand with the commitment of 89p10 with responsible entertainment. Our platform is exclusively for users aged 18 and over and offers a full set of self-control tools for all users — deposit limits, temporary breaks, and self-exclusion, all effective immediately.

Just as your data is protected, your well-being is also a priority for 89p10. If gambling stops being a source of fun, use the available tools or reach out to our 24/7 support.

Deposit Limit Temporary Break Self-Exclusion 18+ only Loss Limit
🛡️

Need support? Call us toll-free at CVV: 188 (available 24/7). For more information, visit Responsible Gambling.

Português