Privacy Policy

Privacy Policy 98acom — How We Protect Your Data

The 98acom handles your personal data responsibly, transparently, and in full compliance with the LGPD — General Data Protection Law (Law No. 13,709/2018). This document explains what we collect, how we use it, how we protect it, and what your rights are as a user in Brazil.

Last updated: January 2026 Applicable in Brazil Portuguese Version (pt-BR)
Compliance
LGPD 2018
Encryption
SSL 256-bit
Your Rights
Guaranteed
Data Sale
Prohibited
DPO Support
24h / pt-BR

How 98acom protects your data in practice

Privacy is not just a legal obligation for 98acom — it is part of how we build trust with every user registered on the platform.

Full LGPD Compliance
The 98acom operates in full compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018), Brazil's most important privacy legislation. Every data processing activity has a defined and documented legal basis, respecting your rights as a data subject.
256-Bit SSL Encryption
All information transmitted between your mobile device or computer and the servers of 98acom are protected by 256-bit SSL encryption — the same standard used by Brazil's leading digital banks, such as Nubank and Itaú. Your financial data is never transmitted as plain text.
No Sale of Data to Third Parties
The 98acom does not sell, rent, or share your personal data with marketing companies, data brokers, or any other organization for commercial purposes. Your data is used exclusively to operate the platform and meet legal obligations in Brazil.
Your Rights, Always Within Reach
You have the right to access, correct, port, and request the deletion of your data at any time. A 98acom responds to user requests within 15 business days via live chat, WhatsApp, or email — all in Portuguese, with no red tape.
Minimal and Necessary Collection
The 98acom collects only the data strictly necessary to operate the service — registration, payments, betting, and support. We do not collect sensitive information beyond what is legally required for identity verification (KYC) and anti-money laundering purposes.
Incident Notification
In the event of a security incident that may affect your data, 98acom will notify affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the legal deadlines established by the LGPD, with full transparency about what occurred and the measures taken.
1

Who We Are and Scope of This Policy

This Privacy Policy describes how 98acom — Brazilian Sports Betting and online casino platform available at 98acom.best — collects, uses, stores, protects, and shares the personal data of its users in Brazil.

For the purposes of this policy, 98acom acts as the data controller for its users' personal data, as defined by the General Data Protection Law (LGPD — Law No. 13,709/2018). This means that 98acom is responsible for all decisions regarding the processing of the data you entrust to us when you create your account and use the platform's services.

This policy applies to all registered users and visitors of the 98acom, regardless of the device used — mobile, tablet, or desktop. By creating an account or simply browsing the site, you acknowledge that you have read and understood the privacy practices described in this document.

Reference legislation: This policy was drafted in compliance with the LGPD (Law No. 13,709/2018), the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), the Consumer Protection Code (Law No. 8,078/1990), and the Central Bank of Brazil regulations applicable to electronic payment methods, including Pix.

2

Data We Collect

The 98acom collects personal data in different ways throughout your experience on the platform. Below, we detail the categories of data collected and the circumstances in which each collection takes place:

Category Data Collected When It Is Collected
Registration Full name, date of birth, CPF, email, mobile phone number, residential address When creating an account on 98acom
Verification (KYC) Government-issued ID (RG or CNH), selfie with document, proof of address Required for withdrawals above R$ 1,000.00 or upon risk assessment
Payments Pix key, card details (tokenized), deposit and withdrawal history When carrying out financial transactions
Activity Betting history, games accessed, bonuses used, session duration While using the platform
Technical IP address, device type, operating system, browser, cookies Automatically on every visit
Communication Chat logs, emails, and messages exchanged with support When contacting the 98acom team

Credit and debit card data is never stored as plain text on 98acom. We use tokenization — a technology that replaces sensitive card data with an encrypted identifier — to ensure your financial information remains secure even in the event of a technical incident.

The 98acom does not collect data in sensitive categories such as racial origin, religious belief, political opinion, health, or biometrics, except where strictly required by law for identity verification (KYC) purposes in specific contexts defined by Brazilian regulations.

3

Purpose of Data Processing

The 98acom uses your personal data solely for the purposes described below. No data is processed for purposes incompatible with those listed in this section without your explicit consent:

  • Platform operation: Create and maintain your account, authenticate access, process Sports Betting and casino wagers, calculate outcomes, and pay out winnings;
  • Payment processing: Process deposits via Pix, bank slip, credit and debit card, Mercado Pago, PicPay, and bank transfer; process withdrawals to the Pix key linked to the account holder's CPF;
  • Fraud and money laundering prevention: Verifying user identities, monitoring suspicious transactions, and fulfilling legal obligations under Law No. 9.613/1998 (anti-money laundering);
  • VIP program and bonuses: Calculating VIP points, crediting cashback, managing bonus rollovers, and personalizing promotional offers based on your platform usage history;
  • Customer support: Answer questions, resolve technical and financial issues, and log interactions for quality assurance purposes;
  • Communications: Send notifications about transactions, important platform updates, and — with your consent — promotions and news from 98acom;
  • Product improvement: Analyze aggregated and anonymized usage patterns to improve the platform experience — speed, interface, and features;
  • Responsible gambling: Monitor behavioral patterns to identify signs of problem gambling and activate the responsible gaming tools available on 98acom.

The 98acom does not use your data to build behavioral profiles for sale to third parties, for advertising products unrelated to the platform, or for any purpose not listed above.

4

Legal Basis for Processing (LGPD)

The LGPD requires that every processing of personal data have a specific legal basis. The 98acom processes your data on the basis of the following legal grounds set out in Article 7 of Law No. 13,709/2018:

  • Contract performance (art. 7, V): The processing of registration, financial, and activity data is necessary to fulfill the service agreement you accepted when creating your account at 98acom. Without this data, the platform cannot operate;
  • Legal obligation (art. 7, II): Some data is processed to comply with legal obligations imposed on the sector — such as anti-money laundering regulations (Law No. 9,613/1998) and Central Bank rules for electronic payment methods;
  • Legitimate interest (art. 7, IX): Technical data such as IP address and device type are processed on the basis of the legitimate interests of 98acom for security, fraud prevention, and service improvement purposes — always proportionate and respectful of your rights;
  • Consent (art. 7, I): For marketing communications and the use of non-essential cookies, 98acom requests your consent in a clear and specific manner. You may withdraw that consent at any time in your account settings.

Your rights as a data subject: You have the right to know exactly which legal basis justifies each instance of data processing. If you would like more information about the legal basis for a specific processing activity, please contact the data protection officer (DPO) at 98acom by email at suporte@98acom.best.

5

Data Sharing

The 98acom does not sell your personal data to third parties. Sharing only occurs in the situations listed below and always with appropriate security and confidentiality safeguards in place:

  • Payment providers: Data required to process transactions is shared with contracted payment operators — such as card processors, Pix operators, Mercado Pago, and PicPay — solely for the purpose of completing the transactions you requested;
  • Game providers: Minimal session data is shared with providers such as Pragmatic Play, Evolution Gaming, Spribe, and others to enable the games in 98acom. These providers do not receive your full registration data;
  • Technology infrastructure providers: Companies responsible for hosting, network security, and analytics tools may access anonymized technical data or data covered by strict confidentiality agreements;
  • Competent authorities: The 98acom shares data with the Receita Federal, Banco Central, Ministério Público, or other Brazilian authorities when required by law, court order, or applicable sector regulation;
  • Fraud prevention: In cases of fraudulent activity investigations, data may be shared with financial crime prevention entities with which 98acom maintains cooperation agreements.

All third parties with whom 98acom shares data with are contractually bound to maintain the confidentiality of that information and to use it solely for the specific purposes of the service provided. The 98acom requires those partners to maintain security policies compatible with our own.

The 98acom has no control over the privacy policies of external websites that may be linked from the platform. When you click an external link, you are subject to that site's own privacy policy. We recommend reviewing the privacy policies of any third-party service you use.

6

Data Security & Protection

The 98acom has put in place a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. The key safeguards currently in place include:

  • 256-bit SSL/TLS Encryption: All communication between your device and the servers of 98acom is protected by strong encryption, making data unreadable to any third party attempting to intercept it;
  • Financial data tokenization: Credit and debit card data is tokenized — replaced by encrypted identifiers — and never stored in plain text. Not even employees of 98acom have access to your full card details;
  • Role-based access control: Only staff members with a demonstrated operational need have access to user data, and even then only with permissions limited to the minimum required for their role;
  • Continuous monitoring: The systems of 98acom are monitored around the clock for anomaly detection, unauthorized access attempts, and suspicious activity;
  • Two-factor authentication: Available to all user accounts on 98acom, we strongly recommend enabling this additional layer of protection in your account settings.

Although 98acom takes all reasonable technical measures to protect your data, no security system is 100% foolproof. In the event of a security incident that may affect your personal data, 98acom will notify affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD.

You also play an important role in keeping your account secure: use strong, unique passwords, never share your credentials, enable two-factor authentication, and contact support immediately if you suspect unauthorized access.

7

Data Retention

The 98acom retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods. The criteria that determine these periods are:

  • Registration and active account data: Retained for as long as your account remains active on 98acom and for up to 5 years after account closure, for legal compliance and defense in potential disputes;
  • Financial transaction history: Retained for a minimum of 5 years as required by Brazilian anti-money laundering legislation (Law No. 9.613/1998) and Central Bank regulations;
  • Identity verification data (KYC): Retained for 5 years after account closure, or as required by a specific court or regulatory order;
  • Support communication records: Retained for 2 years for service quality and dispute resolution purposes;
  • Technical data and access logs: Retained for 6 months as required by the Marco Civil da Internet (Law No. 12.965/2014), and may be extended by court order.

Once retention periods have expired, your data is securely deleted or anonymized so that you can no longer be identified, directly or indirectly. A 98acom maintains records of the disposal process for auditing and LGPD compliance purposes.

8

Cookies & Tracking

The 98acom uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — personalize the content displayed. Cookies are small text files stored on your device that allow the platform to recognize you on subsequent visits.

The types of cookies used by 98acom are:

  • Essential cookies: Required for the platform's basic operation — authentication, session management, and security. These cookies cannot be disabled without affecting normal use of 98acom;
  • Performance cookies: They collect information about how you use the platform — pages visited, session time — anonymously and in aggregate, to help us improve your experience;
  • Preference cookies: Remember your language, layout, and display preferences to personalize your experience on 98acom;
  • Marketing cookies: Used only with your explicit consent to measure the effectiveness of promotional campaigns by 98acom. They are not used for tracking across other websites.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent access to certain platform features, such as keeping your session active. For marketing cookies, you can withdraw your consent at any time in your account settings on 98acom.

Note on tracking: The 98acom does not use third-party tracking pixels to monitor your behavior outside the platform, nor does it share individual behavioral data with external advertising networks.

9

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the holder of the personal data processed by 98acom, a robust set of rights. These rights may be exercised at any time via live chat, WhatsApp, or email suporte@98acom.best. The 98acom responds to requests within 15 business days.

Right of Access

You may request a complete copy of all personal data that 98acom holds about you, including categories, purposes, and with whom it has been shared.

Right to Rectification

If any of your data is incomplete, inaccurate, or out of date, you have the right to request a correction. Basic account details can be updated directly in your account settings.

Right to Erasure

You may request the deletion of your personal data. Data whose processing is required by law — such as financial records for 5 years — cannot be deleted before the legal retention period ends, but will be deleted once that period expires.

Right to Data Portability

You have the right to receive your personal data in a structured, interoperable format and to transfer it to another platform or data controller, in accordance with ANPD regulations.

Right to Object

For processing based on legitimate interest or consent, you may object at any time. The 98acom will review the request and cease processing where no overriding legal basis exists.

Right to Information

You have the right to be informed about which public and private entities 98acom shared your data and about the possibility of withholding consent for its processing.

To exercise any of these rights, please contact 98acom via live chat, WhatsApp, or email at suporte@98acom.best. Please provide your full name, CPF, and a clear description of your request. We may ask you to verify your identity before fulfilling the request to ensure only the account holder can access your data.

10

Minors

The services of 98acom — Sports Betting, online casino, crash games, and live casino — are intended exclusively for users aged 18 and over. The platform does not intentionally collect data from individuals under the age of 18.

At the time of registration, the user declares they are 18 years of age or older. The 98acom enforces age verification mechanisms and may request documents proving legal age at any time, especially for withdrawals or when inconsistencies are detected in the information provided.

If you believe a child or minor has accessed the platform without authorization, please notify our support team immediately. We will take the necessary steps to terminate access and delete any data that may have been collected, in compliance with the Child and Adolescent Statute (ECA — Law No. 8,069/1990) and the LGPD.

11

Changes to This Privacy Policy

The 98acom may periodically update this Privacy Policy to reflect changes in our privacy practices, legal requirements, or service improvements. Whenever significant changes are made, 98acom will take the following steps:

  • Update the "Last updated" date at the top of this document;
  • Notify users via their registered email address when changes are substantial and directly affect their rights;
  • Display a notice on the platform for at least 30 days following any relevant changes, giving you time to review what has been updated;
  • When required by the LGPD, obtain fresh consent for processing activities that come to rely on a different legal basis.

We recommend visiting this page periodically to check for updates. Continued use of the platform 98acom after the effective date of an updated version of this policy constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account through support before the new version's effective date.

12

Contact, DPO & Privacy Channel

The 98acom has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. The DPO can be reached through the following channels:

  • Email: suporte@98acom.best — with the subject line "Data Privacy" or "LGPD Request";
  • Live chat: Available on the platform 98acom, 24 hours a day, in Portuguese;
  • WhatsApp: Available in the help center after logging into your account.

For formal requests related to your data subject rights — access, correction, deletion, portability, or objection — please provide your full name, CPF, and a clear description of what you are requesting. 98acom responds within 15 business days and may request identity verification before processing the request.

If you feel your rights have not been adequately addressed by 98acom, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing the LGPD in Brazil. The ANPD can be reached through the gov.br portal.

Related documents: This Privacy Policy should be read alongside the Terms and Conditions and the page of Responsible Gambling of 98acom. For general questions about the platform, please visit our Frequently Asked Questions.

Your Data, Your Trust: The 98acom Commitment

When you open the 98acom on your phone to bet on Flamengo, spin a round of Aviator, or take a seat at a live blackjack table, you are trusting us with important information — your name, CPF, banking details for Pix, and betting history. That trust is something 98acom takes very seriously and that guides every decision we make about how your data is handled.

Brazil took a landmark step with the passage of the LGPD in 2018. The Lei Geral de Proteção de Dados gave the country one of the most comprehensive privacy regulatory frameworks in the world, placing Brazil alongside European nations that follow the GDPR. The 98acom embraced this legislation not as a bureaucratic burden, but as an opportunity to build a more transparent and honest relationship with Brazilian users.

In practice, this means that 98acom collects only the data necessary to operate the platform. We do not sell information to advertisers. We do not build profiles to resell to third parties. When you make a deposit via Pix through Nubank or Itaú, that transaction data stays with 98acom for the period required by law — and are deleted thereafter. Your credit card details are never stored in plain text — we use tokenization, the same technology that protects purchases made through banking apps.

256-bit SSL encryption protects all communication between your device and the servers of 98acom. Whether you're using a café's Wi-Fi in São Paulo or a 4G connection on the Rio de Janeiro metro, your data travels encrypted — completely unreadable to anyone attempting to intercept it. Two-factor authentication, available to all users, adds an extra layer of protection that we strongly recommend you enable.

Your rights as a data subject are real and enforceable at 98acom. You can request a full copy of your data, correct inaccurate information, ask for the deletion of data that is no longer needed, or object to certain types of processing. The process is straightforward: reach out via live chat or email at suporte@98acom.best and our DPO team will respond within 15 business days. No complicated forms, no endless queues — this is the commitment of a platform that genuinely respects its Brazilian users.

The use of cookies on 98acom is transparent and user-controlled. Essential cookies are required for the platform to function — authentication, session security. All other cookies can be managed in your browser or account settings. We do not track your behavior on other sites, we do not sell browsing data to advertising networks, and we do not use third-party tracking pixels to monitor what you do outside the platform.

Privacy and responsible gambling go hand in hand at 98acom. Behavioral patterns — such as betting volume, session frequency, and changes in deposit behavior — are monitored to detect signs of problem gambling and trigger the protective tools available on the platform. This data processing is solely for user well-being and is never used to manipulate engagement.

If you have questions about how 98acom handles your data, this policy is always available on this page and is updated whenever there are relevant changes to our practices. The last time we made significant changes, in January 2026, we notified users by email in advance. That is the standard we hold ourselves to — because you deserve to know what happens with your information before it happens.

Your data protected, your fun guaranteed at 98acom

Create your account now and enjoy Sports Betting, casino, crash games, and instant Pix payments with the security you deserve. 100% bonus up to R$ 500.00 on your first deposit.

LGPD Compliance SSL 256-bit Secure Pix
Questions About Your Data? Talk to 98acom

To exercise your data subject rights (access, correction, deletion, portability), please reach out via live chat or email suporte@98acom.best with the subject line "LGPD Request". We respond within 15 business days. This policy should be read alongside our Terms and Conditions and the page of Responsible Gambling. For general inquiries, visit our Frequently Asked Questions.

Português