Privacy & LGPD
At 40bet, player privacy is not a footnote. This page clearly explains what data we collect, why we collect it, how we use it, and how you can exercise your rights under the LGPD.
+18 | Gamble responsibly | For Brazil residents only
These cards are a summary for guidance purposes only. The full policy text takes precedence in all cases.
Name, CPF, email, phone number, address, and payment details — only what is strictly necessary to operate the platform and comply with Brazilian law.
Your personal data is never sold to third parties. We only share information with operational partners necessary to deliver the service.
All communication between your device and 40bet is encrypted. Financial data is stored on servers with restricted access and continuous auditing.
Under the LGPD, you may access, correct, export, or request the deletion of your personal data at any time through 40bet's support team.
We use cookies for platform functionality, security, and experience improvement. No tracking cookies are shared with external ad networks.
Should any security incident occur that may affect your data, 40bet will notify impacted users within the legal timeframe established by the LGPD.
Six concrete practices that reflect 40bet's commitment to protecting the data of Brazilian players.
All connections between your phone or computer and 40bet's servers are protected by 256-bit SSL encryption — the same standard used by banks like Nubank, Itaú, and Bradesco. Your registration details, passwords, and Pix information are never transmitted as plain text.
Personal and financial data is stored on servers with strict access controls. Only staff with a proven operational need can access sensitive information — and every access is recorded in audit logs that are reviewed on a regular basis.
40bet offers two-factor authentication (2FA) for all accounts. With 2FA enabled, even if someone obtains your password, they won't be able to access your account without the code sent to your phone. We strongly recommend enabling this extra layer of security right after registration.
40bet processes players' data in full compliance with Brazil's General Data Protection Law (LGPD — Lei 13.709/2018). This includes a defined legal basis for each processing activity, a record of processing operations, and full respect for all data subject rights established by law.
40bet does not sell, rent, or trade players' personal data with third parties for advertising or marketing purposes. Information shared with partners is strictly limited to what is necessary to operate the platform — Pix processing, game providers, and security tools.
40bet's Privacy Policy is reviewed regularly to keep pace with changes in Brazilian legislation and industry best practices. When material changes are made, players are notified in advance by email and through a notice on the platform.
The LGPD grants Brazilian players a set of rights over their own data. 40bet respects and facilitates the exercise of each one.
Request a copy of all personal data 40bet holds about you. A response is provided within 15 business days.
Found data that's outdated or incorrect? Submit a correction request through support and we'll update it promptly.
You may request the deletion of your personal data. Data required by law (such as financial records) is retained for the legally mandated period and then permanently deleted.
Receive your data in a structured, machine-readable format for transfer to another service, as provided under the LGPD.
When processing is based on your consent, you may withdraw it at any time without affecting operations already carried out.
You may request the blocking of unnecessary data or the suspension of any specific processing activity you consider irregular or abusive.
Request a list of the partners and third parties with whom 40bet has shared your data, including the purpose of each disclosure.
If you believe your rights have not been upheld, you may file a complaint with the National Data Protection Authority (ANPD).
To exercise any of these rights, contact 40bet support via live chat or by emailing suporte@40bet.click.
This Privacy Policy describes how the 40bet platform collects, uses, stores, and protects its users' personal data in accordance with the General Personal Data Protection Law (LGPD). By using 40bet's services, you agree to the practices described in this document. Please read it carefully — it's short, straightforward, and written so you can actually understand it, not to confuse you.
The controller of the personal data processed under this policy is 40bet, operator of the platform available at 40bet.click. For LGPD purposes, 40bet is the legal entity responsible for decisions regarding the processing of players' and users' personal data.
The official contact channel for privacy and data processing matters is the email suporte@40bet.click, available 24 hours a day. Formal LGPD rights requests are responded to within up to 15 business days of receiving your complete submission.
40bet collects only the data necessary to operate the platform, meet legal obligations, and provide a safe, personalized experience. The categories of data collected are:
Identification data:
Contact data:
Financial data:
Platform usage data:
Communication data:
Every piece of data collected by 40bet has a specific and legitimate purpose. We process your data to:
40bet does not use your data for purposes incompatible with those listed above. If a new use arises, you will be notified in advance.
The LGPD requires that every personal data processing operation have a defined legal basis. 40bet relies on the following legal bases:
| Purpose of Processing | Legal Basis (LGPD) |
|---|---|
| Account creation and management | Contract performance (art. 7, V) |
| Processing deposits and withdrawals via Pix | Contract performance (art. 7, V) |
| Identity verification (KYC/AML) | Compliance with a legal obligation (art. 7, II) |
| Fraud prevention and illegal activity | Legitimate interest / Legal obligation (art. 7, II and IX) |
| Customer support and dispute resolution | Contract performance (art. 7, V) |
| Marketing communications and promotions | Consent (art. 7, I) |
| Usage analysis for service improvement | Legitimate interest (art. 7, IX) |
| Responding to regulatory authority requests | Compliance with a legal obligation (art. 7, II) |
When processing is based on your consent, you may withdraw it at any time without affecting any processing already carried out on that basis.
40bet does not sell players' personal data. Information is shared with third parties only in the following scenarios and strictly limited to what is necessary:
In all cases of data sharing with partners, we contractually require that the information be used solely for the intended purpose and to security standards equivalent to those of 40bet.
40bet retains players' personal data for as long as necessary to fulfill the purposes described in this policy, subject to the applicable mandatory minimum legal retention periods:
Once the retention periods above have expired, data is securely deleted or anonymized so that the individual can no longer be identified. Requests for early deletion are assessed on a case-by-case basis, in compliance with minimum legal retention obligations.
40bet employs a robust set of technical and organizational measures to protect players' personal data against unauthorized access, alteration, disclosure, or destruction:
Despite every precaution, no system is 100% foolproof. We therefore recommend using a strong, unique password for your 40bet account, enabling 2FA, and never sharing your credentials with anyone.
40bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and maintain session security. The types of cookies used are:
40bet does not use third-party cookies for advertising purposes nor does it share browsing data with external ad networks. You can manage your cookie preferences in your browser settings, but disabling essential cookies may prevent the platform from functioning properly.
The 40bet platform is intended exclusively for users aged 18 (eighteen) and over. Collecting personal data from minors is strictly prohibited and never done intentionally.
During registration, 40bet requests your date of birth and performs CPF verification against official databases. Any account created using a minor's details is closed immediately upon detection, and any associated balances or bets are cancelled.
If you believe a minor is using the platform, or that their data was inadvertently collected, please contact 40bet support immediately. We take this matter with the utmost seriousness.
To exercise any of the rights provided under the LGPD — access, correction, deletion, portability, consent withdrawal, blocking, or information about data sharing — simply contact 40bet through the channels below:
The response period is up to 15 (fifteen) business days from the date we receive your complete request. To verify your identity, we may ask for additional documentation before processing the request.
If, after contacting 40bet, you feel your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for overseeing compliance with the LGPD.
In the event of a security incident that could pose significant risk or harm to data subjects — such as unauthorized access, leakage, or destruction of personal data — 40bet will follow these procedures:
40bet maintains a documented Incident Response Plan, reviewed annually and tested through periodic simulations. Our security team monitors systems around the clock for early detection of any suspicious activity.
40bet may update this Privacy Policy periodically to reflect changes in Brazilian data protection legislation, platform operational practices, or the technologies used.
When changes are material to data subjects' rights, 40bet will notify users at least 7 (seven) days in advance via registered email and a prominent notice on the platform. The "last updated" date shown at the top of this page reflects the current version.
Continued use of the platform after the change notification period implies acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your personal data before the new version takes effect.
40bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and handling data subject requests. You can reach the DPO and the privacy channel through the following means:
For general questions about privacy, how the platform works, Pix payments, or anything else related to your 40bet account, our customer support team is available through the same channels listed above, with an average chat response time of under 2 minutes.
This policy is governed by the laws of the Federative Republic of Brazil, in particular the General Personal Data Protection Law (Lei 13.709/2018) and the Brazilian Internet Civil Framework (Lei 12.965/2014).
Our privacy team is available 24 hours a day to answer any questions about how 40bet handles your data. Reach us via live chat on the platform or at suporte@40bet.click — we respond in under two minutes on chat.
When 40bet was built, the privacy of Brazilian players was never treated as a legal checklist item — it was a product decision. That means the practices described in this policy existed before they became mandatory. Pix transactions were always processed with tokenization, verification documents were always stored with encryption, and data sharing with third parties was always limited to the operational minimum.
The enactment of the LGPD in 2020 formalized in law what 40bet was already doing. This made technical and documentary compliance straightforward, but it did not change the underlying philosophy: players' data belongs to the players. 40bet is simply the temporary custodian of that information, responsible for keeping it safe and using it only for agreed purposes.
In everyday practice, this translates into a few concrete things. When you deposit R$ 50.00 via Pix to bet on the Brasileirão or play a jackpot slot, the transaction details are transmitted to the payment processor with end-to-end encryption. Your full Pix key is stored securely, linked to the account holder's CPF — which also serves as protection against fraudulent withdrawals to third-party accounts. If you use a credit card, 40bet never stores the full card number: only the token generated by the processor, which has no value outside the financial partner's infrastructure.
Your betting history is data that belongs to you just as much as it does to the platform. You can access a full statement of all your bets, deposits, and withdrawals in your account dashboard, filtered by period and transaction type. This history matters not only for personal record-keeping, but also for making use of responsible gambling tools — when you can see the numbers, it becomes easier to maintain a realistic picture of how much you're wagering.
A common concern among players is marketing communications — promotional emails, push notifications about special odds for the Brasileirão or UFC. At 40bet, this type of communication is only sent to players who gave explicit consent at registration or through their account settings. If you'd like to opt out, simply disable the option in your settings or reply to any email with an unsubscribe request — we process it within 24 hours. Opting out does not affect your account, bets, or withdrawals.
40bet applies a zero-tolerance policy to data involving minors. Registration requires a CPF, which is cross-referenced against the date of birth provided — any inconsistency triggers a manual review. Accounts identified as belonging to minors are closed immediately, regardless of any balance or open bets. We recognize this as a responsibility that falls on the entire operation, not just the legal team.
Finally, 40bet maintains an active and responsive privacy channel. This isn't an inbox that takes weeks to reply — it's the same support team that handles Pix and live betting questions, now also trained to process formal LGPD requests. If you want to know exactly what data we hold about you, how we obtained it, and where it has gone, just ask. We'll respond clearly, within the legal timeframe, and without unnecessary red tape.
Your data is protected at 40bet in accordance with the LGPD. To exercise your rights of access, correction, or deletion of data, contact us via 24h support. Also see our Terms and Conditions and the Responsible Gambling to understand all the rules governing use of the platform.