Last updated: January 2026

22win Privacy Policy – Data Protection in Brazil

22win takes the protection of your personal data seriously. This document clearly explains what we collect, why we collect it, how we use it, and who we share it with — in compliance with the General Data Protection Law (LGPD, Law No. 13.709/2018) and other applicable regulations in Brazil.

SECTIONS OF THIS DOCUMENT
1. Data We Collect
2. How We Use Your Data
3. Data Sharing
4. Cookies & Tracking
5. Your Rights (LGPD)
6. Security & Retention
LGPD Compliant
256-bit Encryption
Data Never Sold
24×7 Support pt-BR
LGPD Rights Guaranteed

How 22win Protects Your Data

The pillars of our privacy policy — read the full document below for complete details

Minimal and Necessary Data Collection

22win collects only the data strictly necessary to operate your account, process BRL payments, and meet legal obligations. We do not collect information beyond what is needed for you to use the platform safely.

End-to-End Encryption

All personal and financial data is transmitted and stored with 256-bit SSL encryption — the same standard used by financial institutions such as Itaú, Bradesco, and Nubank. Your login credentials and BRL balance are protected at all times.

We Never Sell Your Data

22win does not sell, rent, or trade users' personal information to third parties for marketing, advertising, or any other commercial purpose. Your data is yours — and it stays that way.

Your Guaranteed LGPD Rights

As a data subject, you have the right to access, correct, export, or request deletion of your personal information at any time — no red tape. Our team processes LGPD rights requests within 15 business days.

Full Cookie Control

22win uses cookies to improve the user experience, personalize content, and process live bets more accurately. You can manage your cookie preferences at any time in your account settings.

Full Transparency

This Privacy Policy is written in plain language, free of unnecessary legal jargon, so that any Brazilian user can clearly understand what happens to their data on the 22win platform.

Introduction and Scope

This Privacy Policy describes how 22win ("Platform", "we", "our") collects, uses, stores, and protects the personal information of all users who access or use the services available at 22win.express — including Sports Betting on the Brasileirão, Copa do Brasil, and other tournaments, crash games, Live Casino, slots, poker, and all other platform features.

This policy was drafted in compliance with the General Personal Data Protection Law (LGPD, Law No. 13.709/2018), which governs the processing of personal data in Brazil, along with other regulations applicable to the online betting sector. By creating an account at 22win or continuing to use the platform, you confirm that you have read and agreed to the terms of this policy.

If you have questions about any part of this policy or wish to exercise your rights as a data subject, contact us at suporte@22win.express. Our team responds in Portuguese 24 hours a day.

Data Protection Officer (DPO): 22win has appointed a Data Protection Officer responsible for ensuring compliance with this policy and the LGPD. For privacy-specific inquiries, please contact us at suporte@22win.express with the subject line "Data Protection – LGPD".

1. Data We Collect

22win collects personal data in three main contexts: when you create an account, when you use the platform's services, and when you contact us for support. Below are the types of data we process.

Registration Data

When you create an account at 22win, we collect the information needed to identify you, manage your account, and fulfill legal and regulatory obligations:

  • Full name;
  • CPF (Individual Taxpayer Registration);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Full residential address including ZIP code.

Identity Verification Data (KYC)

To release withdrawals and meet anti-money laundering compliance requirements, we may request additional documents:

  • Copy of a valid government-issued photo ID (RG, CNH, or passport);
  • Proof of residence issued within the last 90 days;
  • Selfie with a valid identity document for identity confirmation;
  • Proof of the payment method used (bank statement or Pix screenshot).

Financial Data

To process deposits and withdrawals in BRL, we collect information associated with transactions made on the platform:

  • Pix key used for deposits and withdrawals;
  • Banking details for TED transfers (branch, account number, and bank — Nubank, Itaú, Bradesco, Banco do Brasil, and others);
  • Financial transaction history within the platform;
  • Credit or debit card details (processed via a secure payment gateway — 22win does not store your full card number).

Platform Usage Data

When you use 22win, we collect data on how you interact with the platform to improve your experience and detect irregular behavior:

  • Full betting history — sports, markets, amounts, outcomes;
  • Casino game, crash game, and poker history;
  • Access times, active sessions, and devices used;
  • IP address and approximate location;
  • Device type, operating system, and browser.

Communication Data

When you contact our support team, we collect the content of those communications — including live chat history and email exchanges — to resolve your issue and improve the quality of our service.

Legal basis: data processing at 22win is primarily based on contract performance (to operate your account), compliance with a legal obligation (for KYC and AML purposes), and legitimate interest (for security and platform improvement), pursuant to Articles 7 and 11 of the LGPD.

2. How We Use Your Data

22win uses collected data solely for the purposes described in this policy. There is no secondary use or sale of personal data to third parties.

Purpose Data used Legal basis (LGPD)
Manage your account and platform access Name, email, CPF, phone number Contract performance
Process deposits and withdrawals in BRL Financial data, Pix key, banking details Contract performance
Identity verification and fraud prevention KYC documents, CPF, IP address Legal obligation
Customer support in Portuguese Communication history, account data Contract performance
Personalize the user experience Betting and game history, preferences Legitimate interest
Send communications about promotions and bonuses Email, phone number Consent
Monitor responsible gambling and identify problematic use Betting history, sessions, deposits Legitimate interest / legal obligation
Comply with regulatory and tax obligations CPF, financial data, transaction history Legal obligation

Marketing Communications

22win may send emails and notifications about promotions, bonuses, special odds, and platform news — such as odds boosts for Brasileirão fixtures or VIP Program freerolls. You can opt out of these communications at any time by clicking "unsubscribe" in the footer of any promotional email or by updating your account settings.

Opting out of marketing communications does not affect the receipt of essential operational notifications — such as Pix withdrawal confirmations, account security alerts, or notices regarding changes to the Terms and Conditions.

3. Sharing Data with Third Parties

22win does not sell, rent, or trade users' personal data. We share information with third parties only in the situations described below — always for the purpose of operating the platform or fulfilling legal obligations.

Essential Service Providers

We share data with companies that provide essential technical services for the operation of 22win, always under contracts with strict data protection clauses:

  • Payment processors: to process Pix, TED, credit card, PicPay, and Mercado Pago transactions in BRL. These partners receive only the data required to complete each specific transaction;
  • IT infrastructure providers: hosting and data processing companies that keep the platform's servers running with high availability;
  • Casino and game software providers: to make third-party games available on the platform — such as crash games, slots, and Live Casino — these providers may receive minimal session data for technical operation;
  • Analytics and security tools: to monitor security threats, detect fraud, and analyze usage behavior in an aggregated and anonymized manner.

Legal and Regulatory Obligations

22win may be required to share personal data with governmental or regulatory authorities in the following situations:

  • Compliance with a court order or determination by a competent authority;
  • Responding to requests from Brazilian gambling regulatory bodies;
  • Cooperation with investigations into money laundering, fraud, or other financial crimes;
  • Compliance with tax obligations and reporting requirements to Brazilian tax authorities.

In all cases of data sharing with authorities, 22win discloses only the information strictly required and, where legally permitted, notifies the user of the request.

International Data Transfers

Some technical service providers used by 22win may process data on servers located outside Brazil. When this occurs, 22win ensures that international data transfers comply with LGPD requirements — including the use of standard contractual data protection clauses or operation in countries with an adequate level of protection recognized by the ANPD (National Data Protection Authority).

No data selling: 22win does not share personal data with marketing companies, data brokers, advertising networks, or any other entity for commercial purposes. Your data is never used to enrich third-party databases.

4. Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device when you access the 22win platform. They allow the site to recognize your device, keep your session active, and personalize your experience — such as remembering your betting preferences or keeping you logged in between mobile sessions.

Types of Cookies We Use

  • Essential cookies: required for the platform's core functionality — account authentication, live bet processing, and session security. They cannot be disabled without compromising how 22win operates;
  • Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, session duration, errors encountered. Used to continuously improve the platform;
  • Functionality cookies: remember user preferences — language, betting settings, sports event search history — to personalize your experience without requiring you to reconfigure on every visit;
  • Analytical cookies: used to understand usage patterns in an aggregated and anonymized way, without identifying individual users. They help 22win prioritize product improvements.

How to Manage Cookies

You can manage your cookie preferences at any time through your 22win account settings or your browser settings. Disabling non-essential cookies may limit some personalized platform features, but will not prevent basic use of the services — including Sports Betting, Pix deposits, and withdrawals.

Third-Party Cookies

Some casino game and crash game providers available on 22win may set their own cookies for their products to function properly. These cookies are governed by the respective providers' privacy policies — 22win contractually requires these partners to uphold equivalent data protection standards.

5. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 22win, a set of rights that can be exercised at any time. See below what you can request and how to do so.

Right of Access

Request a complete copy of all personal data 22win holds on you — including betting history, registration details, BRL transaction records, and communications.

Right to Correction

Request the correction of any incorrect, incomplete, or outdated information — such as your name, address, phone number, or email registered on your 22win account.

Right to Erasure

Request the deletion of your personal data. After account closure, we retain only the data required by law for the minimum period established by applicable legislation.

Right to Data Portability

Request an export of your data in a structured format — such as betting history and registration details — for personal use or transfer to another service.

Right to Object

Object to the processing of your data for specific purposes — such as marketing communication personalization — without affecting your account's functionality.

Right to Information

Request information about which third parties your data has been shared with, how long it is retained, and the legal basis for each processing activity carried out by 22win.

How to Exercise Your Rights

To exercise any of the rights listed above, send an email to suporte@22win.express with the subject line "LGPD Rights – [your name]" and describe what you are requesting. 22win is committed to responding to and processing all rights requests within 15 business days of receiving a complete request.

Some requests — such as data deletion or access to your full history — may require identity verification before they are processed. This ensures your data is only delivered or deleted upon confirmation that the request comes from the legitimate account holder.

Complaints to the ANPD: if you believe that 22win's processing of your data violates the LGPD, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). 22win fully cooperates with ANPD investigations and all other competent authorities.

6. Data Security & Retention Period

Security Measures

22win implements technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

  • 256-bit SSL encryption across all communications between the user's device and the platform's servers;
  • At-rest data encryption for sensitive information stored in our databases;
  • Two-factor authentication is available for all users — we recommend enabling this feature on your account;
  • Continuous monitoring for suspicious activity, unauthorized access attempts, and behavioral anomalies;
  • Internal access controls — only 22win staff with a legitimate need are granted access to users' personal data;
  • Regular security testing and vulnerability audits conducted by specialized teams.

Data Retention Period

22win retains personal data for as long as necessary to fulfill the purposes for which it was collected, or for the minimum period required by law:

  • Registration and account data: retained for as long as the account is active and for up to 5 years after closure, as required by sector regulations;
  • Financial records and BRL transaction history: retained for a minimum of 5 years after each transaction, in accordance with tax and anti-money laundering requirements;
  • Betting history: retained for up to 5 years for audit and dispute resolution purposes;
  • Identity verification documents (KYC): stored for up to 5 years after account closure;
  • Access and security logs: retained for up to 2 years for security and incident investigation purposes.

Once the applicable retention period has expired, data is securely deleted or irreversibly anonymized.

Security Incident Notification

In the event of a security incident that may affect users' personal data — such as a data breach — 22win commits to notifying affected users and the ANPD within the timeframe required by the LGPD. The notification will include the nature of the incident, the data potentially affected, and the steps taken to mitigate the risks.

Security tip: use a strong, unique password for your 22win account — different from passwords you use on other services. Enable two-factor authentication whenever possible. Never share your login credentials with anyone, including anyone claiming to be from the 22win team — our support staff will never ask for your password.

7. Changes to This Policy

22win may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. Significant changes will be communicated to users at least 7 days in advance via the email registered on the account.

The date of the last update is shown at the top of this page. We recommend reviewing this policy periodically to stay informed about how 22win handles your data. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.

For any questions about this policy or the processing of your personal data, please contact our team at suporte@22win.express. We offer support in Portuguese 24 hours a day, 7 days a week.

Protection at a Glance

  • LGPD — Law No. 13.709/2018
  • 256-bit SSL Encryption
  • Data never sold
  • 2-Step Authentication
  • LGPD rights fulfilled within 15 business days
  • Incident notification
  • Designated DPO
  • Data retention as required by law
Exercise LGPD Rights

To request access, correction, deletion, or portability of your personal data, please get in touch:

suporte@22win.express

Subject: "LGPD Rights – [your name]"
Response time: up to 15 business days

Document Version

  • Current version2.0
  • Last updatedJan/2026
  • Applicable lawLGPD 13.709/18

Your Data Protected. Your Bet Secured.

At 22win, privacy and security aren't just promises — they're practice. Free registration, deposits via Pix from R$ 20.00, Brasileirão and Copa do Brasil betting with live odds, and withdrawals in minutes. All with your data protected under the LGPD.

256
encryption bits
LGPD
Full compliance
0
Data sold
24h
PT-BR Support

Responsible Gambling

22win provides real control tools for all users

Deposit Limit

Set a daily, weekly, or monthly deposit limit on your account — valid regardless of any active promotions.

Session Alerts

Get alerts when you've been playing longer than you planned — especially during live betting on the Brasileirão.

Self-Exclusion

Request a temporary break of 1 day to 12 months or permanent self-exclusion at any time — no penalties applied.

18+ Only

22win is exclusively for users aged 18 and over. Age verification is performed at registration and periodically throughout use.

Our Privacy Policy Summary

22win collects only the data necessary to operate your account, process payments in BRL (via Pix, boleto, credit card, PicPay, Mercado Pago, and TED), and meet legal obligations. Your data is stored with 256-bit encryption and is never sold or shared with third parties. You may request access, correction, deletion, or portability of your data at any time in accordance with the LGPD. To exercise your rights or for any questions, contact us at suporte@22win.express. By using the platform, you agree to these terms and to our Terms & Conditions.

Português