Aa68 Privacy Policy – Data Protection & LGPD

Aa68 handles your personal data with full accountability and in compliance with the LGPD. Here you will find exactly what we collect, why we collect it, and how we protect every piece of your information on the platform.

Last updated: January 2026
LGPDFull compliance
SSL 256End-to-End Encryption
ZeroData selling
YouControls your data
24/7Privacy Support

The Pillars of Privacy at aa68

How aa68 Approaches Data Protection for Its Users on a Day-to-Day Basis

LGPD Compliance

Aa68 operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). Every stage of data processing follows the legal bases set out in current Brazilian legislation.

End-to-End Encryption

All data transmitted between you and aa68 is protected by 256-bit SSL encryption. Sensitive information, such as banking details, is never stored directly on our servers.

No Data Selling

Aa68 has never sold and will never sell your personal data to third parties. Your information exists solely to improve your experience on the platform — no external commercial purposes, period.

You in Control

Aa68 ensures you can access, correct, port, and request the deletion of your data at any time. Your rights under the LGPD are respected without unnecessary red tape.

Clear Communication in pt-BR

This policy was written in plain Brazilian Portuguese, free of unnecessary legal jargon. aa68 believes you have the right to understand exactly what happens with your data — no lawyer required.

Incident Notification

In the unlikely event of a security incident affecting your data, aa68 will notify impacted users and the Autoridade Nacional de Proteção de Dados (ANPD) within the legally established timeframes set by the LGPD.

1Introduction

Aa68 is a Sports Betting and online entertainment platform built for the Brazilian market, accessible at aa68.world. This Privacy Policy clearly and objectively describes how aa68 collects, uses, stores, shares, and protects its users' personal data.

By creating an account on aa68 or using any service on the platform — including Sports Betting on the Brasileirão and Copa do Brasil, live casino games, slots, crash games, and jackpots — you acknowledge that you have read and understood this Privacy Policy. It forms an integral part of aa68's Terms and Conditions.

Aa68 is committed to transparency. If you have any questions about how your personal data is handled after reading this document, contact us directly at suporte@aa68.world. Our team responds in Portuguese within the timeframes established by the LGPD.

One-sentence summary: aa68 collects only the data needed to provide the services you signed up for, protects that information with state-of-the-art encryption, and never sells it to third parties. Period.

2Who Is the Data Controller

The controller of the personal data processed under this Privacy Policy is aa68, operator of the aa68.world platform. The controller is the entity responsible for decisions regarding the processing of users' personal data — that is, who determines why and how the data is processed.

For LGPD compliance purposes and to exercise your rights as a data subject, you may contact aa68 through the following channels:

  • Email: suporte@aa68.world
  • Live chat: available 24 hours a day directly on the platform, after logging in

Aa68 has appointed a Data Protection Officer (DPO) as required by the LGPD for companies that process sensitive data at scale. The DPO can be reached at the same support email address, using the subject line "Privacy – LGPD".

3What Personal Data aa68 Collects

3.1 Data Provided Directly by the User

When you create an account and use aa68's services, you directly provide the following data:

  • Full name as it appears on an official identity document
  • CPF (Cadastro de Pessoas Físicas)
  • Date of birth
  • Full residential address in Brazil, including zip code (CEP)
  • Active mobile number with a Brazilian area code (DDD)
  • Valid email address
  • Government-issued photo ID (RG or CNH), requested during the KYC verification process
  • Proof of residence in the account holder's name, for verification purposes
  • Payment method data used (Pix key, card details, bank account information for TED transfers)

3.2 Automatically Collected Data

While you use the platform, aa68 automatically collects certain technical data required to deliver its services and for security purposes:

  • IP address and approximate geolocation
  • Device type, operating system, and browser version
  • Session data: access time, duration, pages visited
  • Betting history, gameplay, deposits, and withdrawals on the platform
  • Browsing preferences and interactions with aa68 features
  • Cookies and similar tracking technologies (detailed in section 10)

3.3 Data received from third parties

In some cases, aa68 may receive data from third parties for identity verification or fraud prevention purposes, such as information from credit bureaus and public databases used for registration confirmation. This data is handled with the same level of protection applied to data provided directly by the user.

Data Category Examples Primary Purpose
Identification Full name, CPF, RG, date of birth Registration and KYC Verification
Contact Email, mobile number, address Communication and support
Financial Pix key, card details, TED account Payment processing
Behavioral Betting history, gaming sessions Service delivery and responsible gambling
Technical IP address, device, browser Security and fraud prevention

4How aa68 Uses Your Data

Aa68 uses your personal data solely for the purposes described below. No data is used for purposes not listed here without your prior explicit consent:

  • Provision of contracted services: creating and managing your account, processing Sports Betting and casino game activity, settling results, and paying out winnings;
  • Processing financial transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and withdrawals via Pix or TED (Nubank, Itaú, Bradesco, Banco do Brasil);
  • Identity verification (KYC): verifying user identity for security purposes and compliance with anti-money laundering legal obligations;
  • Fraud prevention and security: identifying suspicious behavior, multiple accounts, bonus abuse, and any activities that threaten the integrity of the platform;
  • Customer support: handling inquiries, resolving technical issues, and addressing complaints related to your account or bets;
  • Responsible gambling: monitoring of gaming patterns to identify signs of problematic use and proactively offer control tools;
  • Account communications: transaction notifications, security updates, changes to the Terms and Conditions, and communications relevant to your use of the platform;
  • Marketing communications: only with your prior consent, to send information about aa68 promotions, bonuses, and updates. You may unsubscribe at any time;
  • Compliance with legal obligations: maintaining records required under Brazilian law, responding to court orders, and cooperating with competent regulatory authorities;
  • Platform improvement: aggregated and anonymized analysis of usage data to improve features, fix technical issues, and develop new functionalities.

Aa68 follows the principle of data minimization: we collect only what is necessary for the purposes described above. If a piece of information is not required for any of those purposes, aa68 will not request it.

5Legal Bases for Data Processing (LGPD)

The LGPD requires that every instance of personal data processing have a specific legal basis. aa68 grounds the processing of your data on the following bases:

5.1 Contract Performance

The processing of identification, contact, and financial data is necessary to perform the service agreement you entered into when creating your aa68 account. Without this data, it is not possible to create an account, process Pix deposits and withdrawals, or settle bets.

5.2 Compliance with a Legal Obligation

Certain data processing activities are required by law regardless of your consent. This includes identity verification (KYC) for anti-money laundering purposes, maintaining financial records as required by Brazilian tax legislation, and cooperating with competent authorities pursuant to a court order.

5.3 Legitimate Interest

Aa68 may process data based on legitimate interest for fraud prevention, platform security, and service improvement purposes, provided those interests do not override your fundamental rights and freedoms. aa68 conducts periodic legitimate interest assessments to ensure the appropriate balance is maintained.

5.4 Consent

For marketing communications and the use of non-essential cookies, aa68 requests your explicit consent. You may withdraw that consent at any time with no impact on your access to the platform's core services.

Important: Withdrawing or refusing consent for marketing purposes does not affect your ability to use aa68 for Sports Betting on the Brasileirão, casino games, jackpot, or any other core platform service.

6Data Sharing with Third Parties

Aa68 does not sell your personal data. Full stop. That said, to deliver the quality of service you deserve, we do share data in specific, controlled situations:

6.1 Payment Partners

To process your deposits and withdrawals, aa68 shares the necessary financial data with certified payment gateways that handle Pix, boleto bancário, credit/debit cards, PicPay, Mercado Pago, and TED transfers. These partners only access the data strictly required for each transaction and are contractually prohibited from using it for any other purpose.

6.2 Game Providers

Slots, Live Casino, crash game, and jackpot providers operating on the aa68 platform may receive technical session data required for the games to function, such as an anonymous user identifier and connection data. These providers do not receive personally identifiable information such as full name, CPF, or banking details.

6.3 Identity Verification Services

For the KYC verification process, aa68 may use specialized document and identity verification services. Submitted documents are processed securely, and the data is used solely for identity confirmation purposes.

6.4 Authorities and Legal Obligations

Aa68 may share personal data with Brazilian public authorities when required by law or a duly substantiated court order. In such cases, aa68 verifies the legitimacy of the request before sharing anything and, where legally permitted, notifies the user of the request received.

6.5 Contractual Protection of Partners

All third parties that receive data from aa68 are bound by data processing agreements that establish confidentiality, security, and restricted-use obligations consistent with this Privacy Policy and the LGPD.

7How Long aa68 Retains Your Data

Aa68 retains your personal data for as long as necessary to fulfill the purposes described in this policy or as required by specific legal obligations:

  • Active account data: for as long as your account remains active on the aa68 platform;
  • Financial transaction data: for a minimum of 5 years after each transaction, as required by tax and anti-money laundering legislation;
  • KYC Documents: for the period required by applicable regulations, generally 5 years after the end of the contractual relationship;
  • Betting and gameplay history: for 5 years, for audit purposes, dispute resolution, and regulatory compliance;
  • Support communication data: for 2 years after the last interaction, for quality assurance and dispute resolution purposes;
  • Marketing data (with consent): until you withdraw your consent or request deletion.

Once applicable retention periods have expired, data is securely deleted or anonymized for use in aggregated statistical analysis that does not allow individual identification.

8Information Security

Aa68 implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. The key security measures in place include:

  • 256-bit SSL/TLS encryption across all communications between your device and aa68's servers;
  • Encrypted storage of sensitive data on restricted-access servers with continuous monitoring;
  • Two-factor authentication (2FA) available to all users who want to add an extra layer of login security;
  • Internal access controls restricting access to personal data exclusively to employees who need it to perform their duties;
  • 24-hour security monitoring with automated intrusion detection and suspicious behavior monitoring systems;
  • Penetration testing and security audits conducted periodically by independent external specialists;
  • Incident Response Plan with defined procedures for containment, notification, and mitigation in the event of a data breach.

It's worth remembering that no system is 100% invulnerable. That's why aa68 relies on users to help keep accounts secure: use strong passwords, never share them, and contact us immediately if you suspect any unauthorized access to your account.

Security tip: Never share your aa68 password with anyone, including anyone claiming to be an aa68 employee. Our support team will never ask for your full password. If in doubt, contact us directly at suporte@aa68.world.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a robust set of rights that aa68 is fully committed to upholding. Here is what you can request:

Right of Access

You may request a full copy of all personal data aa68 holds about you, including how it was obtained and the purposes for which it is used.

Right to Rectification

Incomplete, inaccurate, or outdated data may be corrected upon request. Some corrections may require document validation to ensure the accuracy of the information.

Right to Erasure

You may request the deletion of data processed on the basis of your consent. Data subject to legal retention obligations cannot be deleted before the period required by law.

Right to Data Portability

You may request your data in a structured, commonly used format for transfer to another service provider, where technically feasible.

Consent Withdrawal

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect any processing carried out prior to that point on the basis of the consent given.

Right to Information

You have the right to know which third parties aa68 shares your data with, the legal bases used for each processing activity, and how to exercise your other rights.

How to Exercise Your Rights

To exercise any of the rights listed above, contact aa68 through the available channels: email suporte@aa68.world (with the subject line "Privacy – LGPD – [your right]") or via live chat on the platform. aa68 will respond within 15 business days, as required by the LGPD. For complex requests, this deadline may be extended, with notice provided to the user.

Aa68 may request identity confirmation before fulfilling any request related to personal data, to ensure the request is being made by the legitimate data subject and not by an unauthorized third party.

If you are not satisfied with aa68's response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body established by the LGPD to oversee compliance with data protection law in Brazil.

10Cookies and Tracking Technologies

Aa68 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize the content displayed. See the types of cookies used below:

How to Manage Cookies

You can manage your cookie preferences through your mobile or desktop browser settings. Most modern browsers allow you to block or delete cookies in the privacy settings. Keep in mind that disabling essential cookies may prevent the aa68 platform from functioning properly.

11Protection of Minors' Data

Aa68 is a platform exclusively intended for users aged 18 and over. aa68 does not knowingly collect personal data from minors and does not direct any communications or services toward them.

If aa68 determines that data from a user under 18 was inadvertently collected, that data will be immediately deleted and the associated account will be closed. If you believe a minor has misused the platform, please contact us immediately at suporte@aa68.world so we can take the appropriate action.

Aa68 uses identity verification systems to confirm users are of legal age during the registration and KYC verification process, as a preventive measure to ensure only adults can access the platform.

12International Data Transfers

In certain operational situations, personal data from aa68 users may be transferred to servers or partners located outside Brazil. When this occurs, aa68 applies the safeguards required by the LGPD to ensure your data receives the same level of protection it would have in Brazil.

The main safeguards in place include: (i) transfers only to countries with an adequate level of data protection recognized by the ANPD; (ii) use of standard contractual clauses that impose data protection obligations equivalent to those of the LGPD; (iii) periodic assessments of international partners to ensure ongoing compliance.

If you would like specific information about international data transfers related to your account, please contact us at suporte@aa68.world with the subject line "Privacy – International Transfer".

13Changes to this Privacy Policy

Aa68 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to internal privacy processes. The date of the most recent update will always be shown at the top of this document.

In the event of significant changes that affect your rights or the way your data is used, aa68 will notify you at least 15 days in advance, by email or through a prominent notice on the platform, before the new terms take effect.

For minor changes — such as editorial corrections or language clarifications that do not affect the scope of data processing — updates may occur without prior notice, but the revision date will always be updated. The most recent version of this policy will always be available on this page.

Continued use of the aa68 platform after a new version of this policy takes effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.

14Contact, Inquiries, and Data Protection Officer (DPO)

For any questions, requests, or complaints related to how aa68 handles your personal data, you can reach us through the channels below. All support is provided in Brazilian Portuguese:

  • Email: suporte@aa68.world – please use the subject line "Privacy – LGPD"
  • Live chat: available 24 hours a day on the aa68 platform, after logging into your account

Aa68's Data Protection Officer (DPO) is the designated point of contact for all LGPD-related matters. Requests addressed to the DPO should be sent to the same email, with the subject line "DPO – aa68". The DPO will respond within the deadlines established by applicable law.

If you believe aa68 has not adequately addressed your request or that your rights as a data subject have been violated, you may file a formal complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal regulatory body responsible for overseeing LGPD compliance in Brazil.

We respond in Portuguese: All privacy and data protection communications with aa68 are handled in Brazilian Portuguese, by real people, within the legally required timeframes. No automated chatbots for sensitive matters like privacy.

Your Data Protected, Your Bets Placed with Peace of Mind

At aa68, you bet on the Brasileirão, the Copa do Brasil, or the best slots knowing your information is secure. Free registration, Pix deposits, and withdrawals in 15 minutes — with full data protection under the LGPD.

Related Documents

Other Documents That Supplement This Privacy Policy

Terms and Conditions

The complete rules for using the aa68 platform, including registration, betting, bonuses, and payments.

Responsible Gambling

Self-control tools, deposit limits, voluntary breaks, and support for those who need it.

Frequently Asked Questions

Straight answers about privacy, your account, payments, and how aa68 handles your data.

About aa68

Learn about aa68's mission, values, and commitment to Brazilian bettors.

Aa68 Respects You and Your Data

100% LGPD-compliant platform, 256-bit SSL encryption, zero data selling, and Portuguese-language privacy support available 24 hours a day. Create your account with the confidence of knowing you're protected.

Português