LGPD — Lei nº 13.709/2018

188rio Privacy Policy – Your Data, Protected

At 188rio, privacy is not a bureaucratic exercise — it's a commitment. This page explains, in plain language, what data we collect, how we use it, how we protect it, and what your rights are as a data subject, in full compliance with the LGPD.

Last updated: January 2026
Your data belongs to you

188rio does not sell, rent, or share your personal data for commercial purposes. Ever.

The Pillars of Our Privacy Policy

Six principles that guide how 188rio collects, processes, and protects every piece of personal data from its users.

LGPD Compliance

All personal data processed by 188rio strictly follows the General Data Protection Law (Lei nº 13.709/2018). The platform has a designated Data Protection Officer (DPO) responsible for ensuring day-to-day compliance.

Minimal and Necessary Collection

188rio collects only the data strictly necessary to provide its services and meet legal obligations — nothing beyond what is needed to create your account, process payments, and keep the platform secure.

Bank-Level Security

AES-256 encryption for data at rest, SSL/TLS for all transmissions, and strict access controls for internal systems. Your financial and personal data is protected to the same security standard used by digital banks.

No Data Selling

188rio does not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes under any circumstances. Your data is used exclusively to operate the platform and meet legal requirements.

Full Control in Your Hands

You can access, correct, export, or request the deletion of your data at any time through 188rio support. Your rights as a data subject are honored without red tape or unnecessary delays.

Transparency Without the Fine Print

This Privacy Policy is written in plain language, free of unnecessary legal jargon. You deserve to know exactly what happens with your data — and 188rio is committed to explaining it in a clear, straightforward way.

This Privacy Policy applies to all users of the platform 188rio and describes how we handle your personal data in compliance with General Data Protection Law (Lei nº 13.709/2018 — LGPD). By using any 188rio service, you acknowledge that you have read and understood this policy. If you have any questions, contact us at suporte@188rio.best.

Who We Are — Data Controller

A 188rio, operated under the domain 188rio.best, is the controller responsible for processing the personal data of platform users, pursuant to article 5, item VI of the LGPD.

188rio is a Sports Betting and online casino platform dedicated to Brazilian players, offering betting on football (Brasileirão, Copa do Brasil, Libertadores), e-sports, volleyball, Poker, slots, crash games, Live Casino, and other digital entertainment products.

For privacy and data protection matters, the official channel to reach 188rio's Data Protection Officer (DPO) is the email suporte@188rio.best, with "Data Privacy" in the subject line of the message.

Personal Data We Collect

188rio collects different categories of personal data depending on your stage of interaction with the platform. Collection is always proportionate to the purpose and limited to the minimum necessary for each operation.

Category Data Collected When
Identification Full name, date of birth, CPF, gender Registration and KYC verification
Contact Email, mobile number, full address Registration
Documents National ID, driver's license, or passport (copy), proof of address Identity Verification (KYC)
Financial Pix key, deposit and withdrawal history, payment method used Financial Transactions
Behavioral Betting history, games accessed, session duration, preferences Continued use of the platform
Technical IP address, device type, operating system, browser, session cookies Platform access
Communications Support conversation history and emails exchanged with 188rio Support contact

188rio does not collect sensitive data such as racial or ethnic origin, religious belief, political opinion, trade union membership, health or sex life data, and genetic or biometric data — unless required by a specific legal obligation.

How We Use Your Data

Personal data collected by 188rio is used exclusively for the purposes listed below. No data is used for purposes incompatible with those that justified its collection:

  • Service delivery: create and manage your account, process deposits and withdrawals via Pix, boleto, card, PicPay, and Mercado Pago, record bets, and credit winnings;
  • Identity verification (KYC): confirm that you are over 18, reside in Brazil, and are who you claim to be — a legal requirement for betting platforms;
  • Fraud and money laundering prevention: monitor unusual transactions and protect the financial integrity of the platform and its users;
  • User support: answer questions, resolve issues, and handle requests related to your account;
  • Operational communications: notify you about changes to the Terms and Conditions, active promotions, transaction confirmations, and security alerts;
  • Platform improvement: analyze aggregate usage patterns (without individual identification) to improve the browsing experience, platform performance, and the products we offer;
  • Responsible gambling: identify behavioral patterns that may indicate problem gambling and offer proactive support when needed;
  • Compliance with legal obligations: comply with requests from competent public authorities when required under applicable Brazilian law.

188rio does not use your personal data for automated decisions that produce significant legal effects without the possibility of human review — as guaranteed by article 20 of the LGPD.

Legal Bases for Processing

The LGPD requires that all personal data processing have a legal basis to justify it. 188rio processes your data based on the following legal grounds set out in article 7 of Law No. 13.709/2018:

  • Contract performance (art. 7, V): processing is necessary to fulfill the contract established at the time of registration — operating your account, processing bets, and handling payments;
  • Compliance with a legal obligation (art. 7, II): identity verification, anti-money laundering, and compliance with requests from regulatory and judicial authorities;
  • Legitimate interest (art. 7, IX): fraud prevention, platform security, product improvement, and aggregate usage analysis — always weighed against your rights as a data subject;
  • Consent (Art. 7, I): for marketing communications and promotions that are not essential to account operation, subject to express consent, which may be withdrawn at any time.

You can withdraw your consent to marketing communications at any time by clicking "unsubscribe" in any email from 188rio, or by contacting support. Withdrawing consent does not affect processing carried out under other legal bases.

Data Sharing with Third Parties

188rio does not sell, rent, or share your personal data to third parties for commercial, advertising, or prospecting purposes under any circumstances. Data sharing occurs only in the strictly necessary cases listed below:

  • Payment processors: companies that facilitate transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago receive only the financial data strictly necessary to process each transaction, in compliance with the PCI-DSS standard;
  • Identity verification providers (KYC): specialized services for document verification and fraud prevention that process identification data under confidentiality agreements and LGPD compliance;
  • Technology infrastructure providers: servers, cloud services, and security systems that host the platform process your data under contracts that guarantee the same protection standards required by 188rio;
  • Public authorities: data may be shared with regulatory bodies, the judiciary, the Public Prosecutor's Office, and law enforcement authorities when required by a legal or judicial order — and only to the extent strictly necessary to fulfill that obligation.

All third parties with whom 188rio shares data are contractually required to handle it under the same security and confidentiality standards set out in this Privacy Policy and the LGPD.

Cookies and Tracking Technologies

188rio uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site performance on an aggregated basis. No cookies are used to sell data to third parties.

The types of cookies used by 188rio are:

  • Essential cookies: required for the platform's basic operation — session authentication, bet slip, language preferences. These cannot be disabled without affecting your ability to use the platform;
  • Performance cookies: collect anonymous, aggregated information about how users navigate the platform (pages visited, session duration, errors encountered) to improve the overall experience;
  • Functional cookies: remember your configuration preferences to personalize your experience on return visits — such as language and betting settings;
  • Analytics cookies: used to understand usage patterns and identify areas for improvement on the platform, always in aggregate form and without individual identification.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies does not affect the core functionality of the 188rio platform. For more information on how each browser manages cookies, consult the help section of your specific browser.

Data Security

188rio implements rigorous technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The main safeguards in place are:

  • AES-256 Encryption for all data stored on the platform's servers;
  • SSL/TLS across all connections between your device and 188rio's servers;
  • PCI-DSS Certification for the processing of financial and payment card data;
  • Least-privilege access controls — 188rio staff only access the data strictly necessary for their role;
  • Multi-layer authentication for access to internal systems;
  • Continuous threat monitoring with real-time intrusion detection;
  • Periodic security audits conducted by specialized internal and external teams;
  • Incident Response Plan with clear procedures for communication and mitigation in the event of a data breach.

In the event of a security incident that puts your personal data at risk, 188rio will notify the National Data Protection Authority (ANPD) and the affected data subjects within the legal timeframe established by the LGPD — and will immediately take the corrective measures necessary to minimize the impact.

188rio will never ask for your password, verification code, or full banking details via email, chat, or phone. If you receive any communication requesting this information on behalf of 188rio, disregard it and report it immediately through support.

Data Retention and Deletion

188rio retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The main retention periods are:

  • Registration and identification data: retained for the lifetime of the account and for up to 5 years after account closure, to meet regulatory obligations and resolve any potential disputes;
  • Financial transaction history: retained for up to 5 years from the date of each transaction, as required by anti-money laundering legislation;
  • Betting history: retained for up to 3 years after account closure, for dispute resolution and compliance reviews;
  • Support data: support conversations and tickets are retained for up to 2 years for quality control and protection in the event of future disputes;
  • Non-essential cookie data: expire automatically according to each cookie's settings, generally within 12 months.

At the end of each retention period, data is securely deleted or irreversibly anonymized, so it can no longer be linked to an identified or identifiable individual.

If you request account deletion before the legal retention periods have elapsed, your data will be retained only to the extent required by law — and no further processing will be carried out for the platform's operational purposes.

Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the data subject of personal data processed by 188rio, a robust set of rights that can be exercised at any time:

Your Rights as a Data Subject at 188rio

The LGPD guarantees these rights — and 188rio ensures you can exercise them without red tape.

Access

Request a copy of all personal data 188rio holds about you, including how it is used and with whom it has been shared.

Correction

Request the correction of any incomplete, inaccurate, or outdated information — name, address, email, or any other account details.

Deletion

Request the deletion of your data processed on the basis of consent. Data retained under a legal obligation is kept only for the period required by law.

Portability

Request an export of your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.

Objection

Object to the processing of your data carried out on the basis of 188rio's legitimate interest, where you have grounds related to your particular situation.

Blocking

Request a temporary suspension of the processing of your personal data while a correction or deletion request is under review.

Consent Withdrawal

Withdraw consent for processing based on this legal basis — such as marketing communications — at any time, with no impact on your use of the platform.

Information

Request clarification on which public and private entities 188rio has shared your data with, and under what circumstances.

To exercise any of your rights as a data subject, contact the 188rio DPO by email at suporte@188rio.best with the subject line "LGPD Rights". 188rio is committed to responding to all requests within 15 business days, as established by the LGPD.

Minors

188rio services are intended exclusively for users aged 18 (eighteen) years. The platform does not intentionally collect personal data from minors and does not permit registration or use of its services by this age group.

During the registration process, all users confirm they are 18 years of age or older. 188rio applies additional age verification measures as part of the KYC process, including the review of official photo identification documents.

If 188rio determines that it has inadvertently collected data from a minor, the account will be closed immediately, the data will be deleted, and any deposited funds will be returned to the original payment method, subject to ownership verification. Legal guardians who identify the improper registration of a minor should contact us immediately at suporte@188rio.best.

International Data Transfers

In some cases, personal data from 188rio users may be processed on servers located outside Brazil — for example, through cloud infrastructure services used by the platform. When this occurs, 188rio ensures that:

  • Data transfers only take place to countries that provide an adequate level of data protection, as assessed by the ANPD, or to organizations that offer contractual guarantees equivalent to those required by the LGPD;
  • Standard contractual clauses are in place that require recipients to maintain the same level of protection required by this Policy;
  • The transfer is strictly limited to the minimum necessary to provide the services and never occurs for third-party commercial purposes.

188rio continuously monitors ANPD regulations on international data transfers and updates its contracts and practices as needed to maintain full LGPD compliance.

Changes to This Privacy Policy

188rio may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or new services offered by the platform.

Material changes — those that affect data subjects' rights or expand the scope of data processing — will be communicated at least 10 days in advance via email to active users and through a prominent notice on the platform. Minor changes, such as text corrections or contact updates, may be made without prior notice.

The current version is always the most recent one published on this page, identified by the update date shown at the top of the document. We recommend reviewing this policy periodically to stay informed about how 188rio handles your data. Continued use of the platform after the new terms take effect constitutes tacit acceptance of the changes.

Contact the DPO — Data Protection Officer

188rio has appointed a Data Protection Officer (DPO) responsible for:

  • Receive and respond to requests and communications from data subjects;
  • Guide the internal team on data protection best practices;
  • Act as a communication channel with the National Data Protection Authority (ANPD);
  • Monitor 188rio's compliance with the LGPD and other applicable regulations.

To exercise your rights, clarify any questions about this policy, or report any concern related to the way 188rio handles your personal data, please contact the DPO directly:

DPO Email: suporte@188rio.best
Subject: "LGPD Rights" or "Privacy Policy"
Response time: up to 15 business days from receipt of the request
Availability: Monday to Friday, 9 AM to 6 PM (Brasília time)

If you are not satisfied with the response you receive, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory authority responsible for enforcing the LGPD in Brazil.

Why Privacy Is a Priority at 188rio

When you create a 188rio account to bet on the Brasileirão, play poker, or access the live casino, you're entrusting the platform with sensitive personal and financial information — your name, CPF, email, Pix key. In the wrong hands, that data can cause serious harm. 188rio understands that responsibility and treats every piece of information with the care it deserves.

Compliance with the LGPD is not merely a legal obligation for 188rio — it reflects core values. A platform that does not respect its users' data does not deserve their trust. It's that simple. That's why, from the technical architecture of our servers to our internal data access policies, every decision at 188rio is made with privacy as a requirement, not an afterthought.

The 188rio registration process collects only the minimum information needed to create your account and meet the regulatory requirements of the Brazilian betting market. Identity verification (KYC) is required to confirm you are over 18 and to prevent fraud — but all submitted documents are stored with AES-256 encryption and are never accessible to unauthorized parties.

Financial transactions at 188rio — deposits via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago, and withdrawals via Pix — involve sensitive financial data that is handled with strict technical and legal rigor. 188rio does not store full credit card numbers on its systems — that data passes directly through PCI-DSS certified processors and never touches the platform's servers.

Your betting history — which games you wagered on, which markets, and for how much — is behavioral data that 188rio uses internally to improve the platform, identify problem gambling patterns, and personalize your experience. This data is never sold or shared with third parties for commercial purposes. It belongs to you, and you can request a full copy or its deletion at any time.

188rio's cookie policy is equally careful. Essential cookies are required for the platform to function — authentication, bet slip, session preferences. Analytics cookies are used in an aggregated, anonymized manner to understand how users navigate the platform and where the experience can be improved. You can manage cookie preferences in your browser without affecting your core use of the platform.

One point worth highlighting is 188rio's data retention policy. Unlike platforms that store data indefinitely, 188rio sets clear timeframes for each category — registration data for up to 5 years after account closure (as required by regulation), betting history for up to 3 years, and support data for up to 2 years. At the end of each period, data is securely deleted or irreversibly anonymized.

If you have any questions about how 188rio handles your data, your rights as a data subject, or any specific aspect of this Privacy Policy, you can reach our DPO at suporte@188rio.best. 188rio is committed to responding to all privacy-related requests within the legal timeframe — because transparency, in this case, is the only acceptable answer.

FAQ — Privacy at 188rio

The most common user questions about data protection and privacy on the platform.

No, never. 188rio does not sell, rent, lend, or share users' personal data with third parties for commercial, advertising, or prospecting purposes. Your data is used exclusively to operate the platform, process payments, verify identity, and comply with legal obligations. This commitment is a core value of 188rio and is formally established in all contracts with partners and vendors.

You can request the deletion of your personal data at any time by emailing suporte@188rio.best with the subject line "Data Deletion — LGPD". 188rio will respond within 15 business days, indicating which data can be deleted immediately and which must be retained by legal obligation (such as financial transaction history, kept for up to 5 years under anti-money laundering legislation). Data not subject to any legal retention requirement will be deleted or anonymized within the timeframe provided.

Credit and debit card data is not stored on 188rio's servers. This data passes directly through PCI-DSS certified payment processors and is never stored in plain text on the platform's systems. Transaction data — such as deposit and withdrawal history via Pix, amounts, and dates — is stored with AES-256 encryption and used exclusively for support, user history queries, and compliance with regulatory obligations.

Yes. The right of access and data portability is guaranteed by the LGPD and upheld by 188rio. To request a full copy of your personal data, send an email to suporte@188rio.best with the subject line "Data Portability — LGPD". 188rio will deliver a structured file containing your registration data, transaction history, betting history, and all other data associated with your account within the legal deadline of 15 business days. The file will be delivered in a secure, authenticated format.

After account closure, 188rio retains your personal data for the minimum legally required periods: registration and financial data for up to 5 years (anti-money laundering legislation), and betting history for up to 3 years. During this period, data is held in retention mode — it is no longer used for active platform operations, only for regulatory compliance and potential dispute resolution. Once these periods expire, data is deleted securely and irreversibly. If you would like to know exactly which data will be retained and for how long after closing your specific account, please contact the DPO through support.
LGPD Compliance — 188rio

This Privacy Policy is in full compliance with General Data Protection Law (Law No. 13,709/2018). To exercise your rights as a data subject — access, correction, deletion, portability, objection, or consent withdrawal — please contact 188rio's DPO at suporte@188rio.best. Also see our Terms and Conditions for the full platform terms of use.

Responsible Gambling and Privacy

Behavioral data also works to protect you — 188rio uses pattern analysis to proactively identify signs of problem gambling.

Pattern Analysis

188rio analyzes betting patterns in aggregate to identify behaviors that may indicate problem gambling — and offers support before the situation escalates.

Responsible Gambling Data Protected

Information about self-exclusion and gambling limits is treated with the utmost confidentiality — it is never shared externally and is only accessible to the team responsible for player support.

Limits Set by You

You set your own deposit, betting, and session limits. This data is stored securely and takes priority over any benefit offered by the 188rio VIP Program.

Confidential Support

All conversations with 188rio support about responsible gambling are handled with complete confidentiality. Our team is available 24/7 for non-judgmental guidance.

Bet Safely at 188rio

Your data protected, your winnings in BRL, withdrawals via Pix in minutes — plus a bonus of 100% up to R$ 500.00 waiting for your first deposit. 188rio was built for the Brazilian player who wants security and transparency from start to finish.

LGPD Compliant AES-256 Encryption Fee-free Pix 24/7 Support
Português