Privacy & Data

Privacy Policy of 98aa — How We Take Care of Your Data

At 98aa, privacy isn't just a document nobody reads — it's a real practice. This page explains, in plain language, what data we collect, why we collect it, how we use it, and what rights you have under the LGPD. Full transparency, no fluff.

LGPD Compliance
SSL
256-bit
Data Not Sold
7
LGPD Rights
256-bit SSL Encryption

All communication between your browser and 98aa is protected by end-to-end encryption. Personal and financial data is never transmitted in plain text.

Data Is Never Sold

98aa does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Your data stays within the platform.

LGPD Compliance

Data processing at 98aa fully complies with the General Data Protection Law (Lei 13.709/2018), ensuring your rights as a data subject.

Control in Your Hands

You can request access to, correction of, or deletion of your data at any time. 98aa responds within 15 business days, in Portuguese.

Your data belongs to you. This Policy explains how 98aa handles your data. By using the platform, you confirm that you have read and understood these practices. To exercise any rights over your data, simply contact us — we respond promptly, no red tape.

1. Introduction

This Privacy Policy describes how the 98aa, a Sports Betting and online casino platform accessible at 98aa.best, collects, uses, stores, and protects the personal data of its users. The 98aa is a platform focused on the Brazilian market and processes all data in compliance with the Lei Geral de Proteção de Dados Pessoais (LGPD — Law No. 13,709/2018).

The 98aa believes you have the right to know exactly what happens to your data. That is why this policy was written in plain language, without excessive legal jargon. If anything is unclear, reach out to our support team and we will walk you through it personally.

This policy applies to all registered users and visitors of the platform 98aa, including users accessing via mobile, desktop, or any other device. By creating an account or simply browsing the site, you confirm that you are aware of the practices described here.

One-sentence summary: 98aa collects only the data necessary to operate the platform, does not sell your data to anyone, and ensures you can access, correct, or delete your information at any time.

2. Data We Collect

2.1 User-provided data

When you create an account on 98aa, directly provides the following data:

  • Identification data: full name, CPF, date of birth.
  • Contact details: email address and mobile number.
  • Address data: street address, number, unit, neighborhood, city, state, and ZIP code.
  • Verification Documents (KYC): National ID (RG or CNH), proof of address, and, where applicable, documents related to the payment method used.
  • Payment data: information required to process deposits and withdrawals via Pix, credit/debit card, PicPay, Mercado Pago, or TED bank transfer.

2.2 Data Generated Through Platform Use

While using the 98aa, the platform automatically collects:

  • Betting and gaming history.
  • Deposit and withdrawal history.
  • IP address and approximate geolocation data.
  • Device type, operating system, and browser used.
  • Pages visited and time spent on the platform.
  • Session data and access logs for security purposes.

2.3 Communication Data

When you contact the support team of 98aa — whether via live chat, email, or any other channel — the data from that interaction is stored for the purpose of resolving your case and continuously improving our support.

The 98aa collects only the data necessary to operate the platform properly. We do not collect sensitive data such as racial origin, religious beliefs, or health information. The CPF is collected solely for identity verification and fraud prevention purposes, as required by industry regulations.

2.4 Summary Table of Data Collected

Category Data Examples When It Is Collected
Identification Full name, CPF, date of birth At registration
Contact Email, phone number At registration
Address ZIP code, city, state At registration or KYC
KYC Documents Government-issued ID, driver's license, proof of address During identity verification
Payment Pix key, card details (tokenized) In financial transactions
Platform usage Bets, games, sessions, IP During ongoing use
Communication Support history, emails When contacting support

3. Purpose of Data Use

The 98aa uses collected data exclusively for the following purposes:

  • Account creation and management: verify your identity, create your profile, and keep your account active and secure.
  • Transaction processing: process deposits and withdrawals via Pix, card, PicPay, Mercado Pago, and TED accurately and securely.
  • Service delivery: provide Sports Betting, live betting, slots, Live Casino and crash games as requested by the user.
  • Fraud prevention and security: detect unauthorized access, multiple accounts, money laundering, and other activities prohibited by the Terms and Conditions.
  • Compliance with legal obligations: meet regulatory, tax, and anti-money laundering requirements under current Brazilian legislation.
  • Customer support: resolve user questions, complaints, and operational issues efficiently.
  • Platform improvement: analyze usage patterns to improve the experience, fix issues, and develop new features.
  • Relevant communications: send account updates, withdrawal confirmations, active bonuses, and promotions — only to users who opted in.

The 98aa does not use your data for third-party advertising, does not build profiles for sale to external advertisers, and does not share your data with marketing platforms without your explicit authorization.

4. Legal Basis for Processing (LGPD)

Under the terms of the LGPD, the 98aa processes personal data based on the following legal grounds:

  • Contract performance (LGPD, art. 7, V): data required to create and maintain your account, process transactions, and deliver the services you signed up for on the platform.
  • Compliance with a legal obligation (LGPD, Art. 7, II): data required by tax legislation, anti-money laundering regulations, and other rules applicable to the industry.
  • Legitimate interest (LGPD, art. 7, IX): data used for fraud prevention, platform security, and service improvement, where these purposes do not conflict with your fundamental rights.
  • Consent (art. 7, I of the LGPD): to send marketing communications and promotions, when you have opted in to receive them. You may withdraw this consent at any time.

The 98aa does not process data on any legal grounds not clearly identified above. If a new purpose requires a new legal basis, this policy will be updated and you will be notified.

5. Data Sharing

The 98aa does not sell personal data of users. Data sharing occurs only in the cases listed below, all subject to contractual data protection controls:

5.1 Operational partners

To operate the platform, the 98aa uses third-party services with access limited to the data required for each function:

  • Payment processors: companies that process transactions via Pix, credit/debit card, PicPay, Mercado Pago, and TED. These partners receive only the data strictly necessary to complete the transaction.
  • Game providers: companies such as Pragmatic Play, PG Soft, and others that supply slots and Live Casino content. Sharing is limited to an anonymous session identifier, with no complete personal data included.
  • Identity verification services (KYC): specialized companies that verify documents and prevent fraud, with access limited strictly to the documents required for verification.
  • Technology infrastructure: cloud and hosting services that process data on a technical level to keep the platform running, without access to individually interpreted data.

5.2 Legal Obligations

The 98aa may share data with governmental, regulatory, or judicial authorities when required by law — such as in money laundering investigations or in compliance with a court order. In such cases, the 98aa shares only the minimum data necessary to meet the legal requirement.

98aa never shares data with advertising platforms, social networks, or third-party marketing analytics services without your explicit consent. If you receive an offer from another company claiming to have obtained your data through 98aa, that is not true — please report it to our support team.

6. Data Retention and Deletion

The 98aa retains your data for as long as necessary to fulfill the purposes described in this policy or as required by law. The general retention periods are:

  • Active account data: retained for as long as your account is active. After account closure, data is kept for up to 5 years to meet legal and tax obligations.
  • Financial transaction data: retained for a minimum of 5 years after the transaction, as required by tax and anti-money laundering regulations.
  • KYC documents: retained for up to 5 years after account closure, in accordance with applicable industry regulations.
  • Access and security logs: retained for 6 months to 2 years, according to operational and legal requirements.
  • Support communications: retained for 2 years for quality assurance and the resolution of any disputes.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. You may request early deletion of your data, provided there is no legal obligation that prevents it.

If you close your account on 98aa and would like your data deleted, simply submit a request by email. Except for data we are required to retain by law, we will process the deletion within 30 days.

7. Data Security

The 98aa applies technical and organizational measures to protect your data against unauthorized access, loss, alteration, or destruction. Key measures include:

  • SSL/TLS 256-bit Encryption across all communications between your device and 98aa's servers.
  • Encrypted storage of sensitive data, including passwords (stored only as an irreversible hash) and KYC documents.
  • Internal access control based on the principle of least privilege — each 98aa team member only accesses the data required for their specific role.
  • Continuous monitoring of suspicious access attempts, with automatic blocking of IPs displaying abnormal behavior.
  • Periodic security testing to identify and fix vulnerabilities before they can be exploited.
  • Two-factor authentication (2FA) available to users who want an extra layer of account security.

In the event of a security incident that compromises personal data, the 98aa will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframes established by the LGPD, with clear information about what happened and what steps were taken.

Security is a shared responsibility. Use a strong, unique password for 98aa, enable 2FA, and never share your login credentials with anyone — including anyone claiming to be from platform support. 98aa support will never ask for your password.

8. Cookies and Similar Technologies

The 98aa uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and in some cases remember your preferences. See the categories used:

8.1 Essential cookies

Required for the basic operation of the platform — including keeping your session active after login, processing bets correctly, and securing transactions. These cookies cannot be disabled without compromising your use of 98aa.

8.2 Performance Cookies

They collect information about how you use the 98aa — which pages you visit most often, where errors occur — to help improve the platform. Data is aggregated and does not identify individual users.

8.3 Preference Cookies

Remember your usage preferences, such as language, preferred layout, and betting settings, so you do not have to reconfigure them on every visit to 98aa.

8.4 Cookie Management

You can manage or delete cookies in your browser settings. Disabling essential cookies may prevent full use of the platform. All other cookies can be turned off without any significant impact on functionality.

The 98aa does not use tracking cookies for third-party advertising and does not share cookie data with external ad networks.

9. Minors

The 98aa is a platform exclusively for users aged 18 and over. We do not knowingly collect data from minors. The registration process requires a date of birth, and the KYC process confirms legal age before withdrawals are enabled.

If the 98aa identifies that an account belongs to a minor, the account is immediately closed, access is blocked, and the data is handled in accordance with the law, with notification to the relevant authorities where applicable.

If you are a parent or guardian and believe a minor has created an account on the 98aa, please contact us immediately at contato@98aa.best. We treat these cases with urgency.

The protection of minors is an absolute priority at 98aa. No personal data belonging to a minor is retained after the situation is identified, except the minimum necessary to comply with any applicable legal obligation.

10. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by the 98aa, the following rights — all exercisable at no cost, with a response within 15 business days:

Right of Access

Request a full copy of the personal data 98aa holds about you, including what data is processed and for what purpose.

Right to Correction

Request the correction of inaccurate, outdated, or incomplete data. For registration details, many can be updated directly in your account settings.

Right to Erasure

Request deletion of your data when there is no longer a need for its processing or a legal obligation requiring it. 98aa processes these requests within 30 days.

Right to Object

Object to data processing carried out on the basis of legitimate interest, particularly for marketing purposes. Your request will be reviewed and answered within 15 business days.

Right to Information

Find out which partners 98aa has shared your data with, for what purpose, and during what period. We will respond with a complete, detailed list.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.

Consent Withdrawal

Withdraw at any time the consent you gave for processing based on this legal basis — such as marketing emails. Withdrawal does not affect any processing carried out prior to it.

File a Complaint with the ANPD

If you are not satisfied with our response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body responsible for the LGPD in Brazil.

To exercise any of your rights, send an email to contato@98aa.best with the subject line "LGPD Rights" and describe your request. We will confirm receipt within 24 hours and respond within 15 business days, in Portuguese, with no red tape.

11. Data Protection Officer (DPO)

Pursuant to art. 41 of the LGPD, the 98aa has appointed a Data Protection Officer (DPO) responsible for receiving communications from data subjects and from the National Data Protection Authority (ANPD), as well as providing internal guidance on privacy practices.

To reach the Data Protection Officer of the 98aa can be reached at contato@98aa.best, with the subject line "Data Officer — LGPD". All personal data requests are forwarded directly to the DPO for review and response.

The Data Officer of 98aa responds in Portuguese and does not require you to use complicated forms or legal terminology. Simply describe your request in plain language and we will take care of the rest.

12. Changes to This Policy

The 98aa may update this Privacy Policy periodically to reflect changes in services, legislation, or internal data protection practices. Material changes will be communicated via your registered email at least 7 days before taking effect.

The current version of this policy will always be available on this page, with the date of the last update shown in the side index. If you have any questions about which version applies to your case, please contact 98aa support. 98aa.

By continuing to use the platform after the effective date of any changes, you confirm that you have been notified and understand the updates. If you disagree with a change, you may close your account and request deletion of your data before the effective date.

13. Privacy Contact

For any questions, requests, or complaints related to privacy and the processing of personal data on 98aa, please reach out through the channels below:

  • Email: contato@98aa.best — response within 24 business hours, in Portuguese, from a real person.
  • Live chat: available on the platform during peak hours. For privacy matters requiring documentation, email is the preferred channel.

LGPD rights requests — access, correction, deletion, portability, and others — are handled within 15 business days. If the complexity of a case requires more time, you will be notified with an estimated completion date.

The 98aa takes every privacy-related request seriously. We do not use automated responses for data protection inquiries — each case is reviewed individually by the responsible team.

You may also file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body overseeing the LGPD in Brazil, if you believe your rights have not been properly addressed by 98aa.

By using the 98aa, you confirm that you have read and understood this Privacy Policy. To review the platform's other policies, please also see the Terms and Conditions and the Responsible Gambling.

Privacy Commitment

How 98aa Protects Your Data in Practice

Concrete measures — not just policy promises

End-to-End Encryption

All data transmitted between your device and 98aa's servers is protected by 256-bit SSL/TLS. Passwords are stored as an irreversible hash — not even the 98aa team can read your password.

No Data Selling

98aa does not sell, rent, or share user data with advertisers, marketing platforms, or any third party for commercial purposes. Your data stays with 98aa, full stop.

Full LGPD Compliance

98aa processes personal data in accordance with the legal grounds established by the LGPD and has a designated Data Protection Officer to receive and respond to requests from data subjects and the ANPD.

Controlled Internal Access

Each member of the 98aa team has access only to the data required for their role — the principle of least privilege. Access audits are conducted regularly to detect anomalies.

On-Demand Data Deletion

Closed your account and don't want your data kept on file? Just submit a request by email. 98aa will delete everything it is not legally required to retain within 30 days, with email confirmation.

Incident Notification

If any security incident compromises personal data, 98aa will notify the ANPD and affected users within the timeframes set by the LGPD, with a clear description of what occurred and the measures taken.

Privacy Questions

Frequently Asked Questions about 98aa's Privacy Policy

98aa only shares data with the operational partners needed to run the platform — such as Pix payment processors, game providers, and identity verification (KYC) services. All partners operate under confidentiality agreements and receive access only to the minimum data necessary. 98aa does not sell data to advertisers, marketing platforms, or any third party for commercial purposes.

Send an email to contato@98aa.best with the subject line "Data Deletion — LGPD" stating that you wish to request deletion. 98aa will confirm receipt within 24 hours and process the deletion within 30 days. Any data that must be retained due to a legal obligation — such as financial transaction history required for tax purposes — will be identified and explained in the response.

After account closure, 98aa retains identification data and financial transaction records for up to 5 years, in accordance with Brazilian legal and tax requirements. Access logs are kept for 6 months to 2 years. Support communications are retained for up to 2 years. Once these periods expire, data is securely deleted or anonymized. If you want to know exactly what data is retained and why, submit a request to our privacy email.

98aa may send communications about platform promotions and updates only to users who opted in to receive such messages during registration. You can unsubscribe at any time by clicking "unsubscribe" in the footer of our emails or by contacting support. 98aa does not use your data for third-party advertising and does not share data with external ad networks.

Payment data at 98aa is transmitted with 256-bit SSL encryption. Credit card data is tokenized — 98aa does not store full card numbers on its servers, only a reference token generated by the payment processor. Pix keys are stored in encrypted form and linked to the account holder's CPF to ensure withdrawals go only to the account owner.

Reach out by email at contato@98aa.best with the subject line "Data Misuse — LGPD" and describe the situation. 98aa will investigate and respond within 15 business days. If you are not satisfied with the response, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body overseeing the LGPD in Brazil. 98aa cooperates fully with the ANPD in all investigations.
🔒 Your Data Protected

Bet on 98aa with confidence — your data is never sold

SSL encryption, full LGPD compliance, and complete control over your information. Sign up now, deposit from R$ 20.00 via Pix, and bet on the Brasileirão, Libertadores, and much more — knowing your data is in safe hands.

Create Account Securely

LGPD
Privacy Up to Date

Sign Up to 98aa and Play with Peace of Mind

Your data protected, your bets on the Brasileirão and Libertadores, and withdrawals via Pix in minutes. 98aa is the platform that respects you — on and off the pitch.

LGPD Compliance Data not sold 256-bit SSL Pix Withdrawal in 5 min
Português