Before you begin: This Privacy Policy applies to all registered users of bwt365 and to visitors of the bwt365.biz website. By creating an account or continuing to use the platform, you confirm that you have read and understood this document in full.
1Data Controller Identification
For the purposes of the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018), the controller of personal data for bwt365 platform users is the company responsible for operating the bwt365.biz website and all services associated with it, including Sports Betting, online casino, slots, roulette, and other digital entertainment offerings available on the platform.
Bwt365 has appointed a Data Protection Officer (DPO) to oversee the platform's privacy practices and serve as the communication channel between data subjects and the company. The DPO can be reached at suporte@bwt365.biz with the subject line "Privacy – LGPD".
This Privacy Policy complies with the LGPD and the guidelines of the National Data Protection Authority (ANPD). We periodically review and update our practices to maintain the highest possible standard of protection for Brazilian users of bwt365.
2What Data We Collect and How
Bwt365 collects personal data in different ways throughout your interaction with the platform. Below are the categories of data collected and the circumstances under which each is obtained:
Data provided directly by you:
- Identification data: full name, CPF, date of birth, gender, and residential address — provided at registration or during identity verification.
- Contact details: email address and mobile number — used for platform communications, password recovery, and security notifications.
- Financial data: Pix key, bank branch and account number for TED wire withdrawals, and the last 4 digits of your credit or debit card for transaction reference. bwt365 does not store full card details — all processing is handled by PCI-DSS certified intermediaries.
- Identity documents: image of your RG, CNH, or passport and proof of address — requested only during the KYC (Know Your Customer) verification process, required for withdrawals above a certain amount or when additional identity confirmation is needed.
Automatically collected data:
- Usage data: betting history, games accessed, casino sessions, markets viewed, and browsing preferences on the platform.
- Technical data: IP address, browser type and version, operating system, device model (mobile, tablet, desktop), browser language, and time zone.
- Cookies and similar technologies: detailed in Section 8 of this Policy.
- Communication data: chat support conversation history and records of emails exchanged with the bwt365 team.
Data Minimization Principle: bwt365 collects only the data necessary for the purposes described in this Policy. We do not collect sensitive data — such as health information, sexual orientation, or religious beliefs — for any operational purpose.
3How We Use Your Personal Data
Data collected by bwt365 is used exclusively for the purposes listed below. No data is used for purposes other than those described here without prior notice and, where applicable, your consent:
1
Service Provision
Create and manage your account, process deposits via Pix, boleto, card, PicPay, and Mercado Pago, process withdrawals, record sports bets and casino sessions, and ensure the platform runs smoothly.
2
Identity Verification and Fraud Prevention
Verify your identity to protect your account and meet regulatory requirements. Detect suspicious activity, fraud attempts, duplicate accounts, or misuse of promotions and bonuses.
3
Operational Communications
Send bet confirmations, payment notifications, security alerts, account updates, and support responses. These communications are essential and cannot be disabled while the account is active.
4
Marketing Communications (with consent)
Send emails and notifications about promotions related to Brasileirão, Superliga, UFC, and other events, new casino games, bonuses, and special offers — only if you have opted in to receive this type of communication.
5
Platform Improvement
Analyze usage patterns in an aggregated and anonymized way to improve usability, identify technical issues, and develop new bwt365 features that better serve the needs of Brazilian users.
6
Compliance with Legal Obligations
Respond to requests from competent Brazilian authorities and fulfill tax, regulatory, and anti-money-laundering obligations in accordance with applicable Brazilian law.
4Legal Basis for Data Processing (LGPD)
Every personal data processing operation carried out by bwt365 is grounded in one of the legal bases set out in Article 7 of the LGPD. The table below summarizes the legal bases applied to each main purpose:
| Purpose of Processing |
Legal Basis (LGPD) |
| Account creation, bet processing, and payments |
Contract performance (art. 7º, V) |
| Identity verification and fraud prevention |
Compliance with a legal obligation (art. 7, II) and legitimate interest (art. 7, IX) |
| Essential operational communications |
Contract performance (art. 7º, V) |
| Sending marketing communications and promotions |
Data subject's consent (Art. 7, I) |
| Usage analysis for platform improvement |
Legitimate interest (art. 7, IX) |
| Responding to requests from authorities |
Compliance with a legal obligation (art. 7º, II) |
| Responsible gambling tools and self-exclusion |
Protection of life and health (Art. 7, VII) and consent (Art. 7, I) |
When the legal basis is consent, you may withdraw it at any time through your account settings or via bwt365's support channel. Withdrawing consent does not affect any processing carried out under it before the withdrawal.
5Sharing Data with Third Parties
Bwt365 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only in the strictly necessary situations listed below, always within the limits of this Policy and under confidentiality agreements:
- Payment processors: financial data is shared with PCI-DSS certified partners for processing Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago transactions. Only the data required for each transaction is transmitted.
- Game providers: when starting a casino game or slots session, an anonymous identifier (not your name or CPF) is shared with the game provider — such as Pragmatic Play, Evolution Gaming, or PG Soft — to enable the session.
- Technology service providers: companies that operate server infrastructure, cloud services, and security analysis tools in support of bwt365 operations, always under contracts with strict data protection clauses.
- Security and compliance auditors: when required for security audits, compliance certifications, or regulatory checks, anonymized or aggregated data may be shared with specialized firms.
- Public authorities: in response to valid legal requests from competent Brazilian authorities — such as the Receita Federal, Banco Central, or Ministério Público — as required by law.
International Transfer: Some of bwt365's technology infrastructure may be hosted on servers outside Brazil. When that is the case, we ensure that the data protection standards applied are equivalent to or higher than those required by the LGPD, in accordance with Article 33 of the law.
6Data Retention and Deletion
Bwt365 retains your personal data for as long as necessary to fulfill the purposes described in this Policy. Retention periods vary depending on the type of data and the applicable legal obligation:
- Active account data: retained for as long as the account is active and for up to 5 years after closure, to comply with tax and regulatory legal obligations.
- Financial transaction history: retained for a minimum of 5 years in accordance with Brazilian tax legislation and Central Bank regulations related to anti-money laundering.
- Betting history and casino session records: retained for up to 3 years after the last activity on the account.
- Support records (chats and emails): retained for up to 2 years for dispute resolution and service improvement purposes.
- Marketing data (email and notifications): retained while consent is active. Deleted within 30 days of consent withdrawal.
Once retention periods expire, data is securely deleted or irreversibly anonymized. User-requested data deletion is processed within 15 business days, subject to any minimum legal retention periods that may prevent the immediate deletion of certain data categories.
7Data Security — Technical and Organizational Measures
Bwt365 adopts a comprehensive set of measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:
Technical measures:
- 256-bit SSL/TLS encryption across all communication between the user's device and bwt365's servers.
- Passwords stored using one-way cryptographic hashing (bcrypt) — bwt365 never stores passwords in plain text.
- Two-factor authentication (2FA) is available to all users and mandatory for withdrawal transactions above R$ 1,000.00.
- Real-time monitoring of suspicious platform activity with an intrusion detection system.
- Network segmentation and role-based access controls for data stored on internal servers.
- Regular encrypted data backups with periodic recovery testing.
Organizational measures:
- Regular privacy and information security training for the entire bwt365 team.
- Internal least-privilege access policy — each staff member can only access the data strictly necessary for their role.
- Annual security audits conducted by independent specialized firms.
- A security incident response plan with defined procedures for notifying users and the ANPD in the event of a significant data breach.
Security Incident: In the event of a data breach that poses a significant risk to users, bwt365 will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframe established by the LGPD, with details about the nature of the incident and the measures taken.
8Cookies, Pixels, and Tracking Technologies
Bwt365 uses cookies and similar technologies to improve your browsing experience, ensure the platform works correctly, and, with your consent, personalize content and offers. Types of cookies used:
- Essential cookies: required for the platform's basic functionality — maintaining logged-in sessions, storing bet slip preferences, and CSRF security. Cannot be disabled without compromising your use of the platform.
- Performance cookies: collect anonymous data about how users navigate bwt365 — which pages they visit most often, where technical errors occur, and section load times. Used exclusively for internal platform improvement.
- Functionality cookies: remember your language preferences, preferred payment method, preferred layout, and other personalized account settings.
- Marketing cookies (with consent): used to display relevant offers within the platform based on your betting history and favorite games. Activated only with your consent.
You can manage your cookie preferences at any time in your browser settings or, for non-essential cookies, in the privacy panel of your bwt365 account. Disabling essential cookies may affect how the platform functions.
Bwt365 does not use third-party tracking pixels for external advertising purposes and does not share user behavior data with third-party ad networks.
9Your Rights as a Data Subject (LGPD)
The LGPD grants you a set of rights regarding your personal data processed by bwt365. All of these rights can be exercised at any time through the DPO contact channel:
| Right |
What this means in practice |
How to exercise |
| Access |
Receive a copy of all your personal data processed by bwt365 |
Email the DPO |
| Correction |
Update incomplete, inaccurate, or outdated data |
Account Dashboard |
| Anonymization / Blocking |
Request that unnecessary data be anonymized or blocked |
Email the DPO |
| Deletion |
Request deletion of data processed on the basis of consent |
Email the DPO |
| Portability |
Receive your data in a structured format for portability |
Email the DPO |
| Consent withdrawal |
Withdraw consent for consent-based processing (e.g., marketing emails) |
Account Dashboard |
| Opposition |
Object to processing carried out on the basis of legitimate interest |
Email the DPO |
| Information on sharing |
Find out which entities your data has been shared with |
Email the DPO |
Bwt365 responds to all data subject rights requests within 15 business days from the date of receipt. For complex requests, this deadline may be extended by an additional 15 business days, with prior notice to the requester. All requests are free of charge.
If you believe your rights have not been properly addressed by bwt365, you may file a complaint with the National Data Protection Authority (ANPD), the public authority responsible for enforcing the LGPD in Brazil.
10Protection of Minors
Bwt365 is a platform intended exclusively for individuals aged 18 and over. We do not intentionally collect personal data from minors, and any account created by or on behalf of a minor will be closed immediately upon identification.
The bwt365 registration process requires a date of birth and CPF, and the system automatically blocks registrations from individuals under 18. We also conduct periodic age verification checks as part of the KYC processes applied on the platform.
If you find that a minor's account has been created on bwt365 — including that of a dependent — contact us immediately at suporte@bwt365.biz with the subject line "Minor – Account". The account will be closed within 24 hours and all associated data will be deleted in accordance with this Policy.
For parents and guardians: If you believe your child or a minor dependent has accessed the bwt365 platform without authorization, please contact support immediately. Our team is available 24 hours a day, 7 days a week, to handle these cases with the highest priority.
11Changes to this Privacy Policy
Bwt365 may update this Privacy Policy periodically to reflect changes in applicable laws, data processing practices, new platform features, or ANPD decisions that affect our operations.
All material changes to this Policy will be communicated as follows:
- Email notification to all active bwt365 account holders, summarizing the most important changes.
- A prominent notice on the bwt365.biz website and in users' account dashboards, with a link to the updated version of the Policy.
- The date of the last update will always be displayed at the top of this page.
Changes that involve new data processing purposes or that reduce user rights will take effect no sooner than 15 days after notification, giving you time to review the changes and, if necessary, close your account before they come into force.
Continued use of the bwt365 platform after any changes take effect constitutes acceptance of the updated Privacy Policy. If you disagree with the changes, please contact support to discuss your options, including closing your account and requesting deletion of your data.
12Contact, DPO, and Privacy Channel
To exercise any of the rights set out in this Policy, ask questions about how bwt365 handles your data, or file a privacy-related complaint, please use the channels below:
- DPO Email: suporte@bwt365.biz (subject line: "Privacy – LGPD")
- Live chat: available 24 hours a day, 7 days a week, directly on the bwt365.biz platform
- Response time: up to 15 business days for personal data requests
Our privacy team operates exclusively in Portuguese (pt-BR) and is ready to guide you through every aspect of this Policy in plain, jargon-free language. We always aim to resolve requests quickly and to your satisfaction.
For general questions about using the platform, visit our FAQ or the Terms and Conditions from bwt365. For responsible gambling tools, visit the Responsible Gambling.
This Privacy Policy should be read alongside the bwt365 Terms and Conditions. In the event of any conflict between the two documents regarding the processing of personal data, this Policy takes precedence.