LGPD Compliance — Law No. 13,709/2018

Privacy Policy of i2bets — How We Take Care of Your Data

At i2bets, privacy isn't bureaucracy — it's a commitment. This document explains clearly what data we collect, why we collect it, how we use it, and what your rights are as a data subject. All in plain English, no legal jargon.

Updated January 1, 2026 pt-BR version

Summary — what you need to know right now

  • We collect only the data necessary to operate the platform
  • We never sell your data to third parties
  • 256-bit SSL encryption on all transactions
  • You can request access to, correction of, or deletion of your data
  • Processing in compliance with the LGPD — Law No. 13,709/2018
  • Financial data stored on segregated servers
  • DPO contact: suporte@i2bets.net

This summary is for informational purposes. Please read the full document below to understand all the details of how your data is processed.

256-bitSSL Encryption
LGPDFull Compliance
0Data Sold
24/7Privacy Channel

How i2bets Protects Your Privacy

Six concrete pillars that define how we handle the data of everyone who plays on i2bets.

Minimal and Necessary Data Collection

I2bets collects only the data strictly necessary to create your account, process deposits via Pix, card, or boleto bancário, verify your identity (KYC), and provide player support. We do not collect data beyond what the operation requires.

End-to-End Encryption

All communications between your device and i2bets servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This covers login, Pix deposits, withdrawal requests, and any exchange of information with support.

No Data Selling

I2bets does not sell, rent, or trade players' data with third parties for commercial purposes. Data shared with partners — such as payment processors and game providers — is limited to the technical minimum required and governed by contracts that include confidentiality obligations.

Your LGPD Rights, Guaranteed

You may request access, correction, portability, anonymization, or deletion of your personal data at any time via 24/7 chat or by emailing suporte@i2bets.net. i2bets responds to rights requests within 15 business days, as required by the LGPD.

Financial Data Segregation

Players' financial data — Pix deposit history, withdrawals, balances, and credit/debit card transactions — is stored on segregated servers with restricted access, separate from the platform's production systems.

Ongoing LGPD Compliance

I2bets conducts periodic compliance audits under the Lei Geral de Proteção de Dados — Law No. 13,709/2018. Any change to data processing practices that affects data subjects' rights is communicated by email at least 15 days in advance.

This Privacy Policy describes how i2bets ("Platform", "we", "controller") collects, uses, stores, and protects the personal data of players and visitors on i2bets.net. By creating an account, making a deposit via Pix, or using any i2bets service, you confirm that you have read and agree to the terms of this Policy.

This Policy was drafted in accordance with the Lei Geral de Proteção de Dados Pessoais — LGPD, Federal Law No. 13,709/2018 — and with international information security best practices applied to the digital entertainment sector in Brazil.

Plain language

We made the effort to write this Policy in plain language. If anything is unclear, reach out via chat or email at suporte@i2bets.net — our team is available 24 hours a day to help.


1 Who We Are — Data Controller Identification

For the purposes of this Policy and the LGPD, i2bets acts as controller of its players' personal data — meaning it is i2bets that determines how and why data is collected and processed.

  • Platform name: i2bets
  • Domain: i2bets.net
  • Area of operation: Brazil — Sports Betting and online casino market for Brazilian players
  • Data Protection Officer (DPO) email: suporte@i2bets.net

The i2bets data protection officer is the designated point of contact for handling data subjects' requests regarding personal data processing, communicating with the Autoridade Nacional de Proteção de Dados (ANPD), and guiding platform staff on privacy practices.


2 Data We Collect

2.1 Data Provided Directly by You

During registration and use of i2bets, you provide us directly with the following information:

  • Full legal name as shown on a government-issued ID (RG, CNH, or passport).
  • CPF — used for identity verification and single-account linking.
  • Date of birth — to confirm the minimum age requirement (18 years).
  • Active email address — for account communications and password recovery.
  • Brazilian mobile number with area code — for verification and support.
  • Full residential address including zip code — required during the KYC process for withdrawals above R$ 5,000.00.
  • Identity documents and proof of address submitted during KYC verification.
  • Pix key, bank account details, or credit/debit card information for processing deposits and withdrawals.

2.2 Automatically Collected Data

When you access the i2bets platform on mobile or desktop, we automatically collect the following technical information:

  • IP address and approximate geographic location (city and state in Brazil).
  • Browser type and version, and operating system.
  • Device identifier — useful for detecting unauthorized account access.
  • Session records — login and logout times, session duration, and pages visited.
  • Sports betting history (football, volleyball, basketball, MMA) and casino games (slots, crash games, live roulette).
  • Deposit and withdrawal history, including method (Pix, boleto, card), amount, and timestamp.
  • Clicks, browsing behavior, and interactions with platform elements.

2.3 Third-Party Data

In some cases, i2bets may receive information about you from third-party partners, including:

  • Transaction confirmation from payment processors — Pix via Banco Central, credit/debit card networks, PicPay, and Mercado Pago.
  • Results of identity verification checks carried out by credit bureaus or partner KYC services.
  • Fraud prevention information provided by automated risk monitoring systems.

3 Purpose of Processing

I2bets uses your personal data exclusively for the purposes listed below. No processing for purposes other than those described in this Policy will take place without a new consent request:

Purpose Data Used Legal Basis (LGPD)
Registration and authentication Name, CPF, email, mobile number, password Contract performance
Identity verification (KYC) CPF, date of birth, ID documents, address Legal obligation
Processing deposits and withdrawals Bank account details, Pix key, card data Contract performance
Player support Account history, bets, transactions Contract performance
Fraud and money laundering prevention IP, betting patterns, financial data Legal obligation / Legitimate interest
Marketing communications Email, mobile number, preference history Consent
Platform improvement Browsing logs, usage behavior Legitimate interest
Responsible gambling Betting patterns, session frequency Legal obligation / Legitimate interest

4 Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have an explicit legal basis. i2bets grounds the processing of your data on the following grounds set out in Art. 7 of Law No. 13,709/2018:

  • Contract performance (Art. 7, V): most of your data is processed because it is necessary to provide the service you agreed to when creating your account — processing Pix deposits, crediting winning bets, handling withdrawals, and keeping your account active.
  • Legal obligation (Art. 7, II): identity verification (KYC), financial transaction records, and anti-money laundering reports are legal requirements that i2bets must comply with regardless of user consent.
  • Legitimate interest (Art. 7, IX): fraud pattern analysis, platform security, and continuous service improvement are processing activities based on the legitimate interests of i2bets and its players, provided they do not infringe on your fundamental rights.
  • Consent (Art. 7, I): sending marketing communications by email or mobile requires your consent, which can be withdrawn at any time in your account settings or by emailing suporte@i2bets.net.

5 Third-Party Data Sharing

5.1 Who We Share Data With

I2bets shares personal data only with the categories of third parties described below, and solely to the extent necessary for each purpose:

  • Payment processors: banking and financial data is shared with the payment processors that enable deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners are contractually required to handle data with the same level of protection as i2bets.
  • Game providers: username and minimum session information are transmitted to providers — such as Pragmatic Play, Spribe, SmartSoft Gaming, and Evolution Gaming — to ensure the games function properly. No CPF or financial data is ever transmitted to game providers.
  • KYC and fraud prevention services: identity documents and basic registration data are verified by accredited identity verification partners bound by confidentiality agreements.
  • Government authorities: i2bets may disclose data to competent Brazilian authorities — such as the Banco Central, Receita Federal, COAF, or judicial authorities — when required by law or court order.

We never sell your data

I2bets does not sell players' personal data to marketing agencies, data brokers, advertisers, or any entity for commercial purposes. This commitment has no exceptions.

5.2 Data Protection Contracts with Partners

All third parties that receive player data from i2bets sign dedicated data processing agreements that include confidentiality obligations, use restrictions, and security measures aligned with the LGPD. i2bets regularly audits partners' compliance with these obligations.


6 Cookies & Tracking Technologies

6.1 Types of Cookies Used

I2bets uses cookies and similar technologies to ensure the platform works properly and to improve your experience as a player. Cookies are small text files stored on your device — mobile, tablet, or computer — when you access the platform.

  • Essential cookies: required for the platform's basic operation — keeping your session active, preserving language settings, and securing your login. They cannot be disabled without affecting your ability to use i2bets.
  • Performance cookies: collect anonymous information about how you navigate the platform — which pages you visit, how long you spend in each section, and any errors that occur. They help i2bets identify and fix issues.
  • Preference cookies: remember your settings — such as your preferred deposit method or favorite games — to personalize your experience on future visits.
  • Security cookies: used to detect suspicious behavior, unauthorized access attempts, and bot activity, protecting the integrity of your i2bets account.

6.2 Cookie Management

You can manage your cookie preferences through the banner displayed on your first visit to the platform or through your browser settings. Disabling non-essential cookies will not affect the functionality of betting, slots, crash games, or any other core i2bets feature.


7 Data Security

I2bets implements technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or accidental destruction. The main measures in place include:

🔐

TLS 1.3 + SSL 256-bit

All communication between your mobile device or browser and i2bets servers uses TLS 1.3 with 256-bit encryption — the most advanced standard currently available.

🗄️

Segregated Servers

Financial data — Pix history, withdrawals, and balances — is held on infrastructure separate from registration data, with access restricted to authorized personnel.

🕵️

Continuous Monitoring

Automated systems monitor access, transactions, and behavioral patterns in real time to detect and block suspicious activity before it causes harm.

🔑

Enhanced Authentication

Passwords are stored using cryptographic hashing (bcrypt). i2bets offers two-factor authentication (2FA) via mobile to strengthen your account security.

In the event of a security incident

In the unlikely event of a security incident affecting your personal data, i2bets will notify the affected individuals and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD, with a clear description of what occurred and the measures taken.


8 Data Retention and Deletion

8.1 How Long We Retain Your Data

I2bets retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations:

  • Registration and identity data: retained for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering legislation applicable to the sector.
  • Financial transaction history (Pix, withdrawals, deposits): retained for 10 years, in accordance with Brazilian tax and regulatory obligations.
  • Access and browsing logs: retained for 6 months, in accordance with the Marco Civil da Internet — Law No. 12,965/2014.
  • Betting History: retained for 5 years for dispute resolution and regulatory compliance purposes.
  • Support communications: retained for 2 years for quality assurance and complaint resolution purposes.

8.2 Data Deletion upon Request

You may request the deletion of your personal data at any time. i2bets will fulfill the request within 15 business days, except for data whose retention is required by law — such as financial records and transaction logs subject to regulatory obligations. In such cases, i2bets will inform you which data must be retained and for how long, and which can be deleted immediately.


9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that i2bets is committed to honoring. Below is each right and how to exercise it:

Access

You may request a complete copy of all personal data i2bets holds about you — including your registration details, betting history, Pix transactions, and access logs.

Correction

If any of your data is incorrect or out of date, you can request a correction. Basic data — email address, mobile number — can be updated directly in your account settings.

Deletion

Request the deletion of your personal data when it is no longer needed for its original purpose, subject to the legal retention obligations described in Clause 8.

Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service, as regulated by the ANPD.

Withdrawal of Consent

For processing based on consent — such as marketing communications by email or mobile — you may withdraw your authorization at any time at no cost.

Sharing Information

You may request a full list of the third parties with whom your data has been shared, along with the purpose of each disclosure made by i2bets.

How to exercise your rights

Send your request to suporte@i2bets.net with the subject line "LGPD Rights — [your full name]" or via the 24/7 chat after logging in. i2bets responds within 15 business days and may request identity confirmation before processing your request.


10 International Data Transfers

Some of the service providers used by i2bets — such as game providers (Pragmatic Play, NetEnt, Spribe, SmartSoft Gaming), cloud infrastructure services, and analytics tools — operate servers outside Brazil. In these cases, international transfers of personal data are carried out in compliance with Art. 33 of the LGPD, which permits transfers when the destination country offers an adequate level of protection or when the recipient adopts contractual safeguards equivalent to the LGPD.

I2bets contractually requires all international partners that process Brazilian players' data to implement security and privacy measures equivalent to the standards required by the LGPD. No identifiable personal data is transferred to countries without adequate contractual data protection guarantees.


11 Users Under 18

I2bets is an entertainment platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If our identity verification processes indicate that an account was created by a minor, we immediately close the account and delete all collected data, except for the minimum records required by legal obligations.

Responsibility of legal guardians

If you are a parent or legal guardian and believe a minor may have created an account on i2bets, please contact us immediately at suporte@i2bets.net or via live chat so we can take the necessary steps without delay.


12 Changes to This Privacy Policy

I2bets may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or industry best practices. Every update will be published on this page with the new effective date indicated at the top of the document.

Changes that involve material modifications to how your data is processed — such as new purposes of use, new third-party sharing, or a reduction of your rights — will be communicated by email at least 15 days before taking effect. For editorial or clarity updates that do not affect your rights, updating the date on the page is sufficient.

Continued use of i2bets after the effective date of any changes constitutes implicit acceptance of the updated Policy. If you do not agree with the changes, you may close your account before the effective date at no additional cost.


13 Contact, Data Protection Officer & Complaints

To exercise any right set out in this Policy, submit privacy-related questions, or file a complaint about how your personal data is handled at i2bets, please use the channels below:

  • Data Protection Officer (DPO) email: suporte@i2bets.net — subject line "Privacidade LGPD".
  • Live chat: available 24 hours a day, 7 days a week, on the platform after login.
  • Response time: up to 15 business days for rights requests; up to 2 hours for urgent matters via chat.

If you believe i2bets has not adequately addressed your rights request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados — ANPD, the federal authority responsible for enforcing the LGPD in Brazil, accessible at gov.br/anpd.

Effective Period of this Policy

This Privacy Policy takes effect on January 1, 2026, and supersedes all previous versions published by i2bets. Prior versions may be requested by email for historical reference.

Privacy at i2bets: More Than Legal Compliance

When you open the i2bets app on your phone to follow a Brasileirão Série A match or play a round of Aviator, you share data. Your name, CPF, Pix key, betting history, and usage patterns. That data is what makes the experience personalized and secure — but it is also sensitive information that deserves the same care you give your banking password.

I2bets was built for the Brazilian player, and that means understanding the local context: Pix is the most widely used payment method in Brazil, CPF is the primary identification document, and the LGPD is the law that has protected Brazilians' rights over their own data since 2020. The platform did not adapt a global system for Brazil — it built privacy processes with the Brazilian reality in mind from the ground up.

One of the most common questions we get from support is: "does i2bets sell my data?" The answer is no — and that no comes without asterisks. Players' data is never sold, rented, or traded with marketing companies, data brokers, or any commercial entity. The only third parties that receive data are those who operationally need it: the Pix payment processor, the slot game provider whose game you're playing, the identity verification service when you request a large withdrawal. And even those partners receive only the minimum necessary for their specific function, bound by contracts that require them to handle data to the same standard as i2bets.

At i2bets, LGPD compliance is not treated as a box to check to avoid fines — it's the floor, not the ceiling. We conduct regular audits of our processes, review contracts with international providers such as Pragmatic Play and Evolution Gaming to ensure that Brazilian players' data protection standards are upheld even outside Brazil, and monitor ANPD regulatory updates so we can adapt quickly when needed.

Financial transaction data — your Pix deposit history, withdrawals, balances, and betting history — is kept on segregated servers with restricted access. The engineering team responsible for the game interface has no access to financial data. The support team accesses only what is needed to resolve the specific issue you raised in chat. This principle of minimum access reduces the risk of internal data leaks, which historically account for more incidents than external attacks.

If you want to know exactly what data i2bets holds about you, you can request it at any time through 24/7 chat or by email. Within 15 business days, you will receive a file with everything: registration details, betting history for football and crash games, financial transactions, and access logs. If any data is incorrect, you can request a correction. If you want any data deleted — subject to mandatory legal retention requirements — just ask.

Privacy at i2bets is, in practice, a trust agreement. You share your data to play; we use only what is necessary to keep the experience running smoothly and securely. That is the foundation of the relationship — and it is what i2bets commits to upholding for as long as you are a player on the platform.

Questions about this Policy? Contact our Data Protection Officer by email at suporte@i2bets.net or via 24/7 live chat. You can also visit our Terms and Conditions and the Responsible Gambling for additional information.

Your Data Protected. Your Game, Your Freedom.

Sign up with i2bets knowing your data is protected by the LGPD, end-to-end encryption, and a team fully committed to your privacy.

🔐 256-bit Encryption 📋 LGPD Compliance 🚫 Zero data selling 💬 24/7 support in Portuguese ⚡ Instant Pix
Português