Privacy Policy – Data Protection at 23bt

At 23bt, our users' privacy is not an afterthought — it is a genuine priority. This page explains clearly and directly what data we collect, why we collect it, how it is protected, and what your rights are as a data subject. No unnecessary legal jargon, no runaround.

Last updated: January 2026 Brazilian Portuguese In compliance with LGPD
SSL 256-bit
LGPD Compliant
Protected Data
No Data Selling
Audited

How 23bt Looks After Your Data

Six pillars that underpin the privacy policy of 23bt on a day-to-day basis.

SSL 256-bit Encryption

All communication between your device and 23bt's servers is encrypted with 256-bit SSL — the same standard used by major Brazilian banks such as Itaú, Bradesco, and Nubank. Your registration details, betting history, and financial transactions are fully secured in transit.

LGPD Compliance

23bt processes all personal data in strict compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018). Every processing activity has a defined legal basis — whether contract performance, legal obligation, or legitimate interest — and is documented internally.

We Never Sell Your Data

Your personal data is never sold, rented, or shared with third parties for commercial purposes. Data is shared exclusively with service providers essential to the platform's operation — such as Pix and Mercado Pago payment processors — or when required by law.

You Control Your Data

23bt upholds all rights guaranteed under the LGPD: access, correction, deletion, portability, and withdrawal of consent. Any request is handled within 15 business days by our Portuguese-speaking support team — no red tape, no cost to you.

Secure Financial Transactions

Deposits and withdrawals via Pix, boleto bancário, credit card, PicPay, and Mercado Pago are processed with additional authentication layers and real-time anti-fraud monitoring. Your card details are never stored in plain text on our systems.

Incident Notification

If any security incident occurs that may affect your personal data, 23bt will notify the affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the deadlines established by the LGPD — with full transparency, no exceptions.

This Privacy Policy describes how 23bt collects, uses, stores, protects, and shares the personal information of users of the platform available at 23bt.best. By creating an account or using any service provided by 23bt, you confirm that you have read and agree to this Policy. Please read it carefully — we wrote it in plain language so you know exactly what is happening with your data.

1Who We Are — The Data Controller

The 23bt is the controller of the personal data processed under this Policy. We operate the Sports Betting and online casino platform available at 23bt.best, with an exclusive focus on the Brazilian market. All data processing activities described here are our responsibility.

For any questions related to privacy and data protection, you can contact us directly at contato@23bt.best or via the live chat available on the platform 24 hours a day. Our Data Protection Officer (DPO) is the official point of contact for LGPD-related matters and can be reached at the same email address — please include "DPO – Data Protection" in the subject line.

2Data We Collect

The 23bt collects only the data necessary to provide its services safely and efficiently. We do not request information beyond what we actually need. The data collected falls into the following categories:

Category Data Collected Collection Moment
Identification Full name, CPF, date of birth, gender, nationality Registration and KYC verification
Contact Email address, mobile number, residential address Registration and profile updates
Documents National ID, driver's license, or passport (front and back), proof of address Identity verification (KYC)
Financial Pix key, bank details for withdrawals (branch, account, bank), transaction history Deposits & withdrawals
Behavioral Betting history, games accessed, gameplay sessions, product preferences Continued use of the platform
Technical IP address, device type, operating system, browser, session cookies Website and app access
Communications Chat and email support history, call recordings (where applicable) Contact support

We do not collect sensitive data such as racial origin, religious beliefs, or genetic or biometric information outside the standard document verification process. KYC is carried out by certified service providers, and documents are discarded from third-party systems after verification.

3Legal Bases for Processing

The 23bt processes your personal data on the following legal bases established by the LGPD (art. 7 and art. 11):

  • Contract performance (art. 7, V): Processing is necessary to create and maintain your account, handle deposits and withdrawals via Pix and other methods, settle bets, and provide the games you have access to.
  • Compliance with a legal obligation (Art. 7, II): Identity verification (KYC), anti-money laundering (AML), and reporting to tax and regulatory authorities as required by Brazilian legislation applicable to the sector.
  • Legitimate interest (Art. 7, IX): Fraud prevention, platform security, detection of multiple accounts, and behavioral analysis for service improvement — always balanced against your rights as a data subject.
  • Consent (Art. 7, I): For marketing communications, promotional messages, and non-essential cookies. Consent may be withdrawn at any time without affecting your normal use of the platform.

4How We Use Your Data

The data collected by 23bt are used exclusively for the purposes listed below. We do not use your data for any purpose other than those disclosed at the time of collection:

  • Registration and authentication: Account creation and maintenance, secure login with two-factor authentication when enabled.
  • Payment processing: Accepting deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; processing withdrawals to bank accounts in Brazil.
  • Identity verification: Confirming you are who you say you are, preventing underage use of the platform, and meeting KYC and AML requirements.
  • Betting and gaming services: Opening and settling Sports Betting markets, recording results for live casino games, and generating session history.
  • Customer support: Handling inquiries, resolving disputes, and managing communications related to your account and financial processes.
  • Fraud prevention and security: Monitoring of atypical behavior, blocking unauthorized access attempts, and identification of multiple accounts.
  • Platform improvements: Aggregated and anonymized usage analysis to improve the user experience, fix issues, and develop new features.
  • Promotional communications (with consent): Sending information about bonuses, Sports Betting promotions for the Brasileirão, Libertadores, UFC, and other events, plus slots and live casino updates — always with an easy opt-out option.

5Data Sharing with Third Parties

The 23bt does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the situations below, always with the goal of keeping the platform running or fulfilling legal obligations:

  • Payment processors: Companies responsible for processing Pix, boleto bancário, credit/debit cards, PicPay, Mercado Pago, and TED transfers. Only the data strictly necessary for the transaction is shared.
  • Identity verification providers (KYC): Certified companies that assist with document verification during the registration and withdrawal process. Documents are verified and discarded in accordance with those partners' policies.
  • Game and casino providers: Platforms that provide slots, live blackjack, roulette, and other games may receive anonymous session identifiers required for gameplay, but do not receive any personally identifiable data.
  • Government and regulatory authorities: In compliance with court orders, requests from the Receita Federal, COAF (Financial Activities Control Council), or other competent authorities — always through the appropriate legal instrument.
  • Technical infrastructure: Cloud service, hosting, cybersecurity, and system monitoring providers that process data under confidentiality agreements and as operators under the LGPD.

All third parties with access to personal data belonging to users of 23bt are contractually required to handle that information with the same level of security and confidentiality demanded by our policy and the LGPD.

6Information Security

Data protection is taken seriously at every level of 23bt. The technical and organizational measures we have put in place include:

  • 256-bit SSL/TLS Encryption across all communication between your device and our servers.
  • Encryption at rest for sensitive data stored in the database, including passwords (salted hashing) and financial information.
  • Two-factor authentication (2FA) available to all users in the account settings area.
  • Continuous monitoring of access logs and transactions by automated anomaly detection systems.
  • Internal access control with a least-privilege principle — each team member can only access the data required for their specific role.
  • Penetration testing and security audits conducted periodically by independent specialized firms.
  • Incident response plan documented and regularly tested, with clear procedures for notifying the ANPD and affected data subjects.

Despite all these measures, no digital system is 100% invulnerable. If you suspect any unauthorized access to your account at 23bt, change your password immediately and contact support via live chat.

7Data Retention and Deletion

The 23bt retains your personal data for as long as necessary to fulfill the purposes described in this Policy, or for a period required by law. The general criteria are:

  • Active account data: Retained for as long as your account remains active and for up to 5 years after account closure, as required by anti-money laundering regulations and tax obligations.
  • Financial history (deposits and withdrawals): Retained for 5 years from the transaction date, in accordance with Brazilian tax and AML legislation.
  • KYC documents: Retained for the duration of account activity plus 5 years additional.
  • Betting history and gaming sessions: Available to the user for 90 days in the account area; kept internally for up to 3 years for audit purposes.
  • Support communications: Retained for 2 years for quality assurance and dispute resolution purposes.
  • Marketing data (with consent): Retained until consent is withdrawn or the account is closed.

Upon voluntary account closure, data whose legal retention period has already expired will be deleted or anonymized within 30 days after the request. Data subject to an active legal retention period will remain stored for as long as required and will be automatically deleted once that period expires.

8Cookies and Tracking Technologies

The 23bt uses cookies and similar technologies to ensure the platform works correctly, analyze site usage, and personalize your experience. On your first visit, you will be prompted to review your cookie preferences.

Cookie Type Purpose Can You Disable It?
Essential Maintaining authenticated sessions, CSRF security, and proper functioning of the betting checkout. Without these cookies, the platform will not work correctly. No — they are required for basic functionality.
Analytics Aggregated and anonymized usage data is collected to understand how users navigate the platform and identify areas for improvement. This data does not identify you individually. Yes — via the cookie preferences panel.
Preferences Storage of settings such as language, preferred layout, favorite sports (e.g., football, volleyball, MMA), and visited casino table history. Yes — via the cookie preferences panel.
Marketing Personalizing communications and promotions based on your usage profile. Used only with your explicit consent. Yes — through the cookie preferences panel or by contacting support.

You can manage your cookie preferences at any time in your browser settings or through the preferences panel available in the platform footer. Disabling essential cookies may affect the normal functioning of the 23bt, including access to your account and the processing of bets.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a robust set of rights over your personal information. The 23bt respects and facilitates the exercise of all of them:

Access Request a copy of the personal data we hold about you.
Correction Update data that is incomplete, inaccurate, or out of date.
Deletion Request the deletion of data processed on the basis of consent.
Portability Receive your data in a structured format for use with another service.
Withdrawal Withdraw consent for processing based on that legal ground.
Information Know who we share your data with and why.
Objection Object to processing carried out on the basis of legitimate interest.
Review Request a review of decisions made through automated processes.

To exercise any of these rights, send an email to contato@23bt.best with the subject line "LGPD Rights – [your name]" and describe your request. We will respond within 15 business days, as set out under the LGPD. Identity verification may be required before your request is fulfilled.

If you feel your request was not properly addressed, you may file a complaint directly with the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.

10Users Under 18

The platform of 23bt is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a CPF and date of birth, and access is automatically blocked for users who declare they are under 18.

During the identity verification (KYC) process, we check the date of birth shown on the submitted documents. If an account is found to have been created by a minor, it is blocked immediately, the balance is held pending investigation, and the data is handled in accordance with data protection legislation applicable to this vulnerable group.

If you are the guardian of a minor and believe they may have created an account on 23bt, contact us by email contato@23bt.best immediately. We will act swiftly to resolve the situation.

11International Data Transfer

Some of the technical service providers used by 23bt — such as cloud infrastructure providers and cybersecurity systems — may be located outside Brazil. When this is the case, data transfers are carried out only to countries or organizations that offer a level of protection equivalent to the LGPD, or under specific contractual clauses that ensure your data is protected in accordance with Brazilian law.

Under no circumstances are financial data — such as Pix keys, bank details, or card information — transferred to countries without adequate data protection. This information is processed exclusively by authorized payment processors in Brazil or by platforms operating under equivalent regulation.

12Changes to This Privacy Policy

The 23bt may update this Privacy Policy periodically to reflect changes in our services, applicable law, or our security practices. Whenever a significant change is made, you will be notified via your registered email with a minimum advance notice of 7 calendar days before the new version takes effect.

The date of the last update is always shown at the top of this page. We recommend reviewing this Policy regularly to stay informed about how we protect your data. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy.

Previous versions of this Policy are archived and can be requested through support if you need to review them for any specific purpose.

13DPO Contact & Privacy Channel

The 23bt has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for questions about personal data processing, the exercise of data subject rights, and communication with the Autoridade Nacional de Proteção de Dados (ANPD).

To get in touch with the DPO or the privacy channel at 23bt:

  • Email: contato@23bt.best (subject: "DPO – Data Protection")
  • Live chat: Available directly on the 23bt.best platform, 24 hours a day
  • Response time: Up to 15 business days for formal LGPD rights requests; up to 2 business days for general privacy inquiries

We are committed to responding to all requests in a clear, straightforward manner and in Brazilian Portuguese. Please do not use third-party channels or intermediaries for privacy requests — always use the official channels of 23bt listed above to ensure the security and traceability of your request.

Your Data Protected. Your Fun Guaranteed at 23bt.

Create your account knowing your information is in good hands. Deposit via Pix from R$ 20.00 and enjoy Sports Betting, Live Casino, slots, and much more — with complete security and transparency.

  • 256-bit SSL on all transactions
  • In compliance with LGPD
  • No Data Sales
  • 24/7 support in Portuguese
Data Protection Summary at 23bt

The 23bt protects all your personal and financial data with 256-bit SSL encryption, in compliance with the Lei Geral de Proteção de Dados (LGPD). Your registration details, betting history, and payment data are never sold or shared with third parties for commercial purposes.

To exercise your rights as a data subject or to clarify any privacy-related questions, contact us by email contato@23bt.best. Also read our Terms and Conditions and the Responsible Gambling.

Responsible Gaming at 23bt

Betting should be entertainment. The 23bt provides concrete tools to help you stay in control.

Deposit Limit

Set daily, weekly, or monthly deposit limits in your account settings. The system will automatically block new deposits once you reach the limit you have chosen.

Temporary Pause

Suspend your account for 24 hours, 7 days, or 30 days with a single click. The suspension takes effect immediately — no paperwork, no additional approval required.

18+ Only

Access to 23bt is restricted to users aged 18 and over. We verify the identity of all users at registration. If you suspect underage use, please contact our support team immediately.


Português