🔒 Privacy Policy last updated on January 2026 — your data is safe 🛡️ Encryption AES-256 across all personal and financial data 📋 Full compliance with the LGPD — Law No. 13,709/2018 ⚡ Withdrawal via Pix in under 60 seconds for verified accounts 💎 VIP Program with cashback of up to 30% — no rollover ⚽ Brasileirão, Libertadores, volleyball, crash games at 27bnet 🔒 Privacy Policy last updated on January 2026 — your data is safe 🛡️ Encryption AES-256 across all personal and financial data 📋 Full compliance with the LGPD — Law No. 13,709/2018 ⚡ Withdrawal via Pix in under 60 seconds for verified accounts 💎 VIP Program with cashback of up to 30% — no rollover ⚽ Brasileirão, Libertadores, volleyball, crash games at 27bnet
Last updated: January 2026

Privacy Policy 27bnet — How Your Data Is Protected

A 27bnet treats your data privacy with the same seriousness it applies to the financial security of your account. This policy was written in plain language so you understand exactly what data we collect, why we collect it, how we protect it, and what rights you have under the LGPD.

Your Rights Under the LGPD
Access your personal data at any time
Correction of incorrect or outdated data
Data deletion where permitted by law
Portability of your data to another platform
Consent withdrawal at any time

How does the 27bnet Protects Your Data

Six pillars of protection that 27bnet applies to keep your information secure.

AES-256 Encryption
All personal and financial data stored on 27bnet's servers is encrypted using AES-256 — the same standard used by Brazilian financial institutions and government agencies. Your data is unreadable to anyone without the authorized access key.
256-bit SSL on All Transactions
All communication between your browser or mobile device and the 27bnet platform is protected by 256-bit SSL. This covers login, deposits, Pix withdrawals, and any interaction involving sensitive data. No data is ever transmitted in plain text.
Full LGPD Compliance
27bnet operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). This means that the collection, processing, and storage of your data follow the legal bases defined by the LGPD — without exception and without improvisation.
No Sale of Data to Third Parties
27bnet does not sell, rent, or hand over users' personal data to third parties for commercial purposes. Full stop. Your data exists to deliver the service you signed up for — Sports Betting, casino, Pix — and nothing beyond what the law requires.
Data Minimization
We only collect what is strictly necessary to operate the platform and meet legal obligations. We do not request more information than is needed for your registration, KYC verification, and financial transactions.
Incident Notification
In the event of any security incident that may affect your data, 27bnet notifies the affected users and the National Data Protection Authority (ANPD) within the legally required timeframe, with full transparency about what happened and the steps taken.

This Privacy Policy describes how 27bnet (platform accessible at 27bnet.best) collects, uses, stores, and protects the personal data of its users. By creating an account or using any service provided by the 27bnet — Sports Betting, casino, Crash Games, or any other platform feature — you confirm that you have read and understood this policy. If you have any questions, please contact us via support chat before continuing.

Section 1

Personal Data Controller

The controller of the personal data processed under this policy is 27bnet, operator of the Sports Betting and online casino platform accessible at 27bnet.best. For all purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the 27bnet is the entity responsible for decisions regarding the processing of its users' data.

The Data Protection Officer (DPO) of 27bnet can be reached by email at privacidade@27bnet.best. This channel is exclusively for matters related to personal data and privacy — for general platform support, please use the live chat available 24 hours a day.

A 27bnet has appointed a Data Protection Officer (DPO) as required by Art. 41 of the LGPD. The DPO serves as the official point of contact for communications with the National Data Protection Authority (ANPD) and for handling data subject requests.
Section 2

Personal Data We Collect

A 27bnet collects only the data necessary to operate the platform and meet legal obligations. The data collected falls into the following categories:

Identification and registration data:

  • Full name as shown on official identification.
  • CPF (Cadastro de Pessoa Física) issued by the Brazilian Federal Revenue Service.
  • Date of birth.
  • Email address.
  • Mobile phone number.
  • Residential address (for KYC verification on higher-value withdrawals).

Financial data:

  • Pix keys registered for deposits and withdrawals.
  • Partial credit and debit card details (never the full card number — processing is handled through a secure third-party payment gateway).
  • History of deposits, withdrawals, and bets placed on the platform.
  • Real-time account balance.

Usage and behavioral data:

  • IP address and approximate geolocation data.
  • Device type, operating system, and browser.
  • Pages visited, session duration, and navigation flow.
  • Gaming preferences and betting history by sport/category.

Identity verification data (KYC):

  • Government-issued ID (national ID, driver's license, or passport) — collected only when KYC verification is required.
  • Recent proof of address.
  • Selfie with ID document — required in cases of advanced verification for regulatory compliance.
A 27bnet does not collect data from sensitive categories as defined under Art. 11 of the LGPD — such as racial origin, religious belief, genetic or biometric data, or data relating to health or sexual life, except where strictly required by law for anti-money laundering purposes.
Section 3

Purpose of Data Processing

The data collected by 27bnet are used exclusively for the following purposes:

  • Platform operation: account creation and management, processing deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED, as well as bet and casino game execution.
  • Identity verification (KYC): confirm that the user meets the minimum age requirement of 18 years and that the registration details correspond to a real person, in accordance with anti-money laundering requirements.
  • Security and fraud prevention: identify and block unauthorized access attempts, multiple account creation, and fraudulent bonus abuse.
  • VIP Program and cashback: calculate points, determine VIP level, and automatically process the weekly cashback every Monday.
  • User communication: send notifications about transactions, terms updates, security alerts, and support communications. Promotional communications are sent only with explicit consent and include an opt-out option.
  • Compliance with legal obligations: report suspicious transactions to the relevant authorities in accordance with the Anti-Money Laundering Law (Law No. 9,613/1998) and provide information pursuant to court orders.
  • Continuous platform improvement: analyze aggregated and anonymized usage patterns to improve the experience, fix issues, and develop new products.

A 27bnet does not use personal data for third-party advertising, does not sell user profiles, and does not share data for external marketing purposes.

Section 4

Legal Bases for Processing (LGPD)

The processing of personal data by 27bnet is governed by the following legal bases set out in art. 7 of the LGPD:

Legal Basis Art. LGPD Application at 27bnet
Contract performance Art. 7, V Processing deposits, Pix withdrawals, bet execution, and the VIP Program.
Compliance with a legal obligation Art. 7, II KYC verification, financial data retention in compliance with Law No. 9,613/1998, and reporting to the ANPD.
Legitimate interest Art. 7, IX Fraud prevention, multi-account detection, and platform security.
Consent Art. 7, I Sending promotional communications and use of non-essential cookies.

Where processing is based on consent, you may withdraw it at any time through your account dashboard or via the support chat, without affecting your access to the platform's core services.

Section 5

Data Sharing with Third Parties

A 27bnet does not sell personal data. Sharing with third parties occurs only in the specific situations described below:

  • Payment processors: data required to process deposits and withdrawals via Pix, credit/debit card, PicPay, Mercado Pago, and TED is shared with the respective payment service providers, who act as processors under the instruction of the 27bnet.
  • Game providers: for live casino games and slots from external providers, minimal session data is shared for the technical operation of the game. No personally identifiable data beyond what is required for the session is transmitted.
  • Identity verification services: documents submitted during the KYC process may be reviewed by specialized partners in compliance with the LGPD and under a data protection agreement.
  • Competent authorities: when required by law, court order, or investigation by a Brazilian regulatory authority — such as COAF, Receita Federal, or Polícia Federal — the 27bnet provides the requested information to the extent determined by the authority.
All third parties that receive data from users of 27bnet are contractually required to handle this data with the same level of protection demanded by the LGPD. The 27bnet does not share data with countries that do not offer an adequate level of protection, except as provided under Article 33 of the LGPD.
Section 6

Data Retention and Deletion

Personal data is retained for as long as necessary for the purposes described in this policy. The general retention periods are:

  • Registration and active account data: retained for the entire duration of the user's relationship with the platform.
  • Financial data and betting history: retained for a minimum of 5 years after account closure, as required by the Anti-Money Laundering Law (Lei nº 9.613/1998) and Brazilian tax legislation.
  • KYC verification data: retained for a minimum of 5 years after account closure or the last transaction, in accordance with applicable regulations.
  • Browsing data and cookies: retained for up to 12 months. Session cookies are deleted when you close your browser.
  • Security logs: retained for up to 6 months for fraud investigations and security incidents.

Once the retention period expires, data is permanently deleted or anonymized. User deletion requests are fulfilled within the legally required timeframe, except where retention is mandatory by law — in which case the user is informed of the reason and the applicable retention period.

Section 7

Technical and Administrative Security Measures

A 27bnet implements technical and administrative measures to protect user data against unauthorized access, loss, alteration, or destruction. Key measures include:

  • AES-256 encryption for all data at rest on servers.
  • 256-bit SSL/TLS encryption for all data in transit between the user and the platform.
  • Multi-factor authentication available to all users on their account.
  • Role-based access control (RBAC) — only staff with a specific business need can access user data.
  • Continuous monitoring of suspicious access attempts and automatic IP-based blocking.
  • Regular security audits and penetration tests conducted by independent teams.
  • Documented incident response plan, with ANPD notification within the 72-hour deadline as required by Art. 48 of the LGPD.

No system is 100% breach-proof. If you notice any suspicious activity on your account — such as unrecognized transactions or login attempts — contact 27bnet via 24-hour chat for emergency account blocking.

Section 8

Cookie Policy

A 27bnet uses cookies and similar technologies to keep the platform running properly, improve the user experience, and — with your consent — understand browsing patterns. The types of cookies used are:

You can manage your cookie preferences at any time through your account settings panel or your browser settings. Disabling essential cookies may affect how the platform functions.

Section 9

Your Rights as a Data Subject

The LGPD grants you, as the owner of your personal data, the following rights, which may be exercised at any time with 27bnet:

  • Confirmation and access: know whether 27bnet processes your data and access it, including what data is stored and how it is used.
  • Correction: request the correction of incomplete, inaccurate, or outdated data.
  • Anonymization, blocking, or deletion: for data that is unnecessary or processed in violation of the LGPD.
  • Portability: receive your data in a structured, machine-readable format for transfer to another controller.
  • Deletion of data processed on the basis of consent: request the deletion of your data when processing is based solely on your consent and you choose to withdraw it.
  • Sharing information: know which third parties your data is shared with.
  • Consent withdrawal: withdraw consent previously given for specific processing activities, such as promotional communications.
  • Objection: object to processing carried out on the basis of legitimate interest when it conflicts with the LGPD.
  • Automated decision review: request human review of decisions made solely through automated processing that affect your interests.
To exercise any of these rights, contact the DPO at 27bnet at privacidade@27bnet.best or through the 24-hour support chat. The response deadline is up to 15 calendar days as per art. 18 of the LGPD. In complex cases, this period may be extended by an additional 15 days with justification.
Section 10

Minors

The platform of 27bnet is intended exclusively for users aged 18 and over. Registration and use of any service on 27bnet by users under 18 years of age is strictly prohibited.

A 27bnet does not knowingly collect personal data from minors. If we become aware that a user is under 18, the account will be immediately closed, any real BRL balance returned to the registered Pix key, and all data belonging to the minor deleted from our systems, except where retention is legally required for investigation purposes.

If you believe a minor has created an account on 27bnet, notify support immediately via the 24-hour chat so the account can be suspended and investigated as a priority.

Section 11

International Data Transfers

In specific situations, the technical operation of the platform may involve transferring data to servers or service providers outside Brazil — such as live casino game providers whose infrastructure is hosted in other countries, or security analysis services.

Any international data transfer by 27bnet takes place only under the conditions set out in Arts. 33 to 36 of the LGPD, specifically:

  • For countries that offer an adequate level of data protection recognized by the ANPD.
  • Through standard contractual clauses that guarantee a level of protection equivalent to the LGPD.
  • When strictly necessary for the performance of the service agreement with the user.

A 27bnet prioritizes partners with infrastructure in Brazil wherever technically feasible. The list of countries to which data may be transferred is available upon request to the DPO.

Section 12

Changes to this Privacy Policy

A 27bnet may update this Privacy Policy periodically to reflect changes in Brazilian legislation, platform practices, or in response to regulatory requirements. Changes that reduce user rights or expand the purposes of processing will be communicated at least 30 days in advance via the registered email address and an in-platform notification.

Minor language clarifications that do not affect the substance of our privacy practices may be made without prior notice. The date of the last update is always shown at the top of this page and in the document header.

Continued use of the platform after changes take effect constitutes acceptance of the new terms. If you do not agree with any change, you may request account closure with a refund of your real balance (BRL) before the effective date.

Section 13

Contact, DPO & Data Protection Authority

To exercise your rights, ask questions about this policy, or raise any privacy concerns regarding your data at 27bnet, contact us through the channels below:

  • DPO (Data Protection Officer): privacidade@27bnet.best — for specific personal data and LGPD inquiries.
  • Support chat: available 24 hours a day directly on the platform for general support and security emergencies.
  • General email: contato@27bnet.best — responded to within 24 business hours.

If your requests are not satisfactorily resolved by 27bnet, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal body responsible for overseeing personal data protection in Brazil under the LGPD.

This Privacy Policy was last updated on January 2026. The version currently available on this page is always the one in force. Previous versions may be requested from the DPO through a formal request.

Your Rights Guaranteed by the LGPD at 27bnet

You can exercise any of these rights right now — just reach out via the support chat.

Right of Access

Request a copy of all personal data that 27bnet holds about you, including betting history, registration details, and financial records. Response time: up to 15 days.

Right to Rectification

Found incorrect information in your 27bnet account? Contact support to request a correction. Identity-related data may require supporting documentation for validation.

Right to Deletion

When an account is closed, unnecessary data is deleted. Financial data subject to mandatory legal retention is kept for the required period and permanently deleted once that period ends, with no further use.

Right to Data Portability

Receive your data in a structured format (JSON or CSV) for transfer to another platform. Available upon request to the DPO at privacidade@27bnet.best.

Right to Withdraw Consent

Cancel your consent to receive promotional communications from 27bnet at any time through your account dashboard or via the unsubscribe link in any email you receive. Cancellation takes effect immediately.

Right to Review Automated Decisions

If 27bnet makes any automated decision that affects your account — such as betting limits or a block due to suspected fraud — you can request a human review through 24-hour support.

Questions about Privacy at 27bnet

The most common questions about how your data is handled.

No. 27bnet does not sell, rent, or share personal data with advertisers or external marketing companies. Data sharing with third parties is limited to essential operational needs: payment processors to handle deposits and withdrawals via Pix, card, boleto, PicPay, and Mercado Pago; game providers for the technical operation of live casino and slots sessions; and competent Brazilian authorities when required by law or court order. All such third parties are contractually obligated to handle data with the same level of protection required by the LGPD.

After account closure, data that does not need to be retained for legal compliance is deleted from 27bnet's systems. Financial data, betting history, and identity verification (KYC) records are kept for a minimum of 5 years in accordance with Brazilian anti-money laundering legislation (Lei nº 9.613/1998) and tax obligations. After this period, the data is permanently deleted. During the mandatory retention period, this data is not used for any commercial purpose — it exists solely for legal and regulatory compliance.

Requesting documents during the identity verification process (KYC) is a regulatory anti-money laundering requirement — not a choice made by 27bnet. Verification is required for withdrawals above a certain amount or when the security system flags a need for additional confirmation. Submitted documents — national ID, driver's license, proof of address, or a selfie with a document — are stored with AES-256 encryption and accessed only by authorized 27bnet internal staff strictly for verification purposes. No document is shared with any third party other than verification partners who are contractually bound to comply with the LGPD.

You have three ways to unsubscribe from promotional emails from 27bnet: by clicking the "Unsubscribe" link in any promotional email you receive; by going to your account dashboard under Settings and adjusting your communication preferences; or by requesting it through the 24-hour support chat. Cancellation takes effect immediately for new communications — emails already queued for delivery may take up to 24 hours to stop. Mandatory transactional communications — such as deposit and withdrawal confirmations and security alerts — will continue to be sent regardless of your marketing preferences.

In the event of a security incident involving personal data, 27bnet immediately activates its incident response plan. Actions include: containing the incident and blocking the access vector; assessing the scope and affected data; notifying the National Data Protection Authority (ANPD) within 72 hours as required by Art. 48 of the LGPD; and directly notifying all users whose data may have been compromised, with clear information about what happened, which data was affected, and what measures were taken. 27bnet never conceals security incidents from users or the relevant authorities.
Questions or Requests About Your Personal Data

To exercise your rights under the LGPD — access, correction, deletion, portability, or withdrawal of consent — please contact the DPO of 27bnet via email at privacidade@27bnet.best or through the 24-hour support chat. The response time is up to 15 calendar days. For urgent security matters, always use the live chat available on the platform.

Read the full Terms and Conditions →

Your Data Protected. Now Come Bet at 27bnet

AES-256 encryption, full LGPD compliance, no data selling, and Pix withdrawals in 60 seconds. Over 200,000 Brazilians already trust 27bnet.

Data protected with AES-256 Full LGPD compliance Pix Withdrawal in under 60s 24/7 Support in PT-BR
Português