Data Protection

H22Bet Privacy Policy – Data Protection and LGPD

H22Bet processes your personal data with transparency, accountability, and full compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018). Here you can understand what data we collect, why we collect it, how we use it, and what your rights are as a data subject.

Last updated: January 2026 Brazilian Portuguese Version
Quick Summary
Full LGPD Compliance
No data sold to third parties
SSL encryption across all pages
You control your own data
Data stored in Brazil
suporte@h22bet.best
LGPD Compliance
256-bit SSL
No data sales
Data subject rights guaranteed
DPO available 24/7

How H22Bet Protects Your Data

Six pillars that underpin H22Bet's privacy policy for every registered player in Brazil.

Full LGPD Compliance

H22Bet operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). All processes involving the collection, use, storage, and disposal of personal data follow the guidelines of the ANPD (Autoridade Nacional de Proteção de Dados) and international privacy best practices.

Encryption and Technical Security

All data transmitted between your device and H22Bet's servers is protected by 256-bit SSL encryption. Passwords are stored using irreversible cryptographic hashing. Intrusion detection systems and continuous monitoring operate 24 hours a day to keep your account safe.

No Data Sold to Third Parties

H22Bet does not sell, rent, or trade your personal data with third parties for advertising or commercial purposes. Technology partners and payment providers (such as Pix, boleto, and card processors) only access the data strictly necessary to perform the contracted services.

You Control Your Data

As a data subject, you have the right to access, correct, port, restrict the use of, and request the deletion of your personal data at any time. Requests are handled by our Data Protection Officer (DPO) within 15 business days, as required by the LGPD.

Securely Stored Data

Data belonging to H22Bet's Brazilian users is stored in infrastructure that meets high physical and logical security standards. When international data transfers are required for service operations, they follow the safeguards mandated by the LGPD and are documented in accordance with current regulations.

Incident Notification

In the event of a security incident that may affect your personal data, H22Bet will notify the impacted data subjects and the ANPD within the legal deadlines established by the LGPD, detailing the nature of the incident, the data involved, and the measures taken to mitigate it.

01 Who We Are — Data Controller

The H22Bet, operated by H22Bet Ltd. and accessible at https://h22bet.best, is the controller of the personal data collected from users registered on the Sports Betting and online casino platform. For the purposes of this Privacy Policy, "personal data" means any information that identifies or may identify a natural person, as defined under the LGPD.

The Data Protection Officer (DPO) of H22Bet can be reached by email suporte@h22bet.best for any questions related to the processing of personal data, exercise of data subject rights, or clarifications about this policy.

This Privacy Policy applies to all H22Bet users, regardless of access method (mobile, tablet, or desktop) or the service used (Sports Betting, casino, crash games, or jackpots).

02 What Personal Data We Collect

The H22Bet collects personal data both directly (provided by the user) and indirectly (collected automatically during platform use). Below is a detailed description of each category:

Data provided by the user at registration:

  • Full name as it appears on your ID document
  • CPF (Cadastro de Pessoas Físicas) issued by the Brazilian Federal Revenue Service
  • Date of birth
  • Email address
  • Mobile phone number
  • Residential address (street, number, complement, ZIP code, city, state)
  • Access password (stored in encrypted hash format, unreadable by H22Bet staff)

Data collected for identity verification (KYC):

  • Photo ID copy (Brazilian national ID, driver's license, or passport)
  • Recent proof of residence (utility bill or bank statement)
  • Selfie for facial verification, when requested

Financial and transaction data:

  • Pix key, credit/debit card details or other payment methods used
  • Deposit and withdrawal history (amounts, dates, methods)
  • Betting history (events, amounts wagered, outcomes)
  • Casino game history (titles played, amounts wagered, wins and losses)

Automatically collected data:

  • IP address of the device used to access the platform
  • Browser type and version, and operating system
  • Device identifiers (device ID)
  • Approximate geolocation data (country and state, derived from IP address)
  • Pages visited, session duration, and browsing patterns on the platform
  • Cookie and similar technology data (detailed in section 06)

H22Bet does not collect data from sensitive categories such as racial origin, religious belief, health data, or sexual orientation. Financial data is handled with additional security layers and restricted access.

03 How We Use Your Personal Data

The personal data collected by H22Bet are used exclusively for the following purposes, each tied to an appropriate legal basis under the LGPD:

  • Account creation and management: creating the user profile, access authentication, password recovery, and account information updates.
  • Identity verification (KYC): age confirmation (18+), CPF verification, fraud prevention and compliance with regulatory obligations.
  • Payment processing: processing deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; processing withdrawals via Pix and TED to banks such as Nubank, Itaú, Bradesco, and Banco do Brasil.
  • Service provision: access Sports Betting (football, UFC, basketball, volleyball, e-sports), online casino (slots, live tables, crash games, jackpots), and all other products on the platform.
  • Customer support: 24/7 live chat support in Portuguese, dispute resolution, and responses to user requests.
  • Fraud and money laundering prevention: monitoring of suspicious activity, compliance with COAF obligations, and cooperation with competent authorities.
  • Experience personalization: game and promotion recommendations based on usage history, display of odds relevant to the user's sports of interest.
  • Marketing communications: sending offers, bonuses, and news via email or push notification, with the option to unsubscribe at any time.
  • Platform improvement: aggregated usage analysis to identify technical issues, optimize performance and develop new features.
  • Responsible Gambling: identifying behavioral patterns that may indicate problem gambling, activating protection tools, and fulfilling responsible gambling obligations.

04 Legal Basis for Processing (LGPD)

The H22Bet grounds each processing of personal data in one of the legal bases set out in Article 7 of the LGPD. The main bases applied are:

  • Contract performance (art. 7, V): processing required to fulfill the service agreement entered into at the time of registration — account management, bet processing, and payments.
  • Compliance with a legal obligation (art. 7º, II): age verification, anti-money laundering compliance, and adherence to Brazilian tax and regulatory obligations.
  • Legitimate interest (art. 7, IX): fraud prevention, platform security, technical performance analysis and service improvement.
  • Consent (art. 7, I): sending marketing communications and providing advanced experience personalization. Consent may be withdrawn at any time without affecting access to the platform.

H22Bet maintains an up-to-date record of data processing operations (ROPA), as recommended by the ANPD, available upon request to the DPO.

05 Data Sharing with Third Parties

The H22Bet does not sell, transfer or commercially exploit users' personal data. Data sharing occurs only in the following situations, always with a specific purpose and appropriate safeguards:

  • Payment providers: processors for Pix, boleto bancário, credit/debit card, PicPay and Mercado Pago receive only the data necessary to authorize and settle financial transactions.
  • Game providers: developers such as Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, and others receive anonymized session identifiers for progressive jackpot management and RTP compliance. No personally identifiable data is shared.
  • KYC verification services: identity verification partners receive documents to confirm authenticity in compliance with fraud prevention requirements.
  • Competent authorities: in compliance with applicable Brazilian law, data may be shared with COAF, the Receita Federal, the Polícia Federal, or the Judiciary upon a formal legal order.
  • IT infrastructure providers: hosting, security and analytics services that act as data processors under contract with LGPD-compliant protection clauses.

All third parties that process personal data on behalf of H22Bet are bound by contracts that include data protection clauses and confidentiality obligations fully aligned with the LGPD.

06 Cookies and Tracking Technologies

The H22Bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and carry out performance analytics. When you visit the site for the first time, you are informed about the use of cookies and can manage your preferences through the settings panel.

Types of cookies used:

  • Essential cookies: required for the basic functioning of the platform — session authentication, language preferences, and login security. These cannot be disabled.
  • Performance cookies: collect anonymized data about how users interact with the platform (most visited pages, technical errors, load times). They help identify and resolve issues.
  • Personalization cookies: store preferences such as favorite sports, recently accessed games, and display settings to personalize your experience on your next visit.
  • Analytics cookies: used for aggregate analysis of traffic and user behavior, supporting the development of platform improvements.

You can manage or disable non-essential cookies through your browser settings or via H22Bet's cookie preference panel. Disabling essential cookies may impair critical features, such as account login.

07 Data Retention Period

The H22Bet retains personal data for only as long as strictly necessary to fulfill the purposes for which it was collected, in compliance with the applicable legal and regulatory timeframes in Brazil:

  • Active account data: retained for the full duration of the contractual relationship with the user.
  • Financial and transaction data: retained for a minimum of 5 years after the transaction, in accordance with fiscal and compliance requirements set by the Banco Central do Brasil and the Receita Federal.
  • KYC documents: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legislation (Law No. 9,613/1998).
  • Betting and gaming history: retained for up to 5 years for regulatory and internal audit purposes.
  • Marketing data: retained until the user withdraws consent. After unsubscribing from communications, the data is removed from the mailing list within 10 business days.
  • Data from closed accounts: upon voluntary account closure, data not subject to legal retention obligations is anonymized or deleted within up to 90 days.

Once retention periods have been met, data is securely and irreversibly deleted or anonymized so that it can no longer be used to identify the data subject.

08 Your Rights as a Data Subject (LGPD)

The LGPD guarantees data subjects a set of rights that the H22Bet is committed to honoring. To exercise any of these rights, contact the DPO at suporte@h22bet.best. Requests will be responded to within up to 15 business days from the date of the formal submission.

  • Right of access (art. 18, I): request a copy of all personal data that H22Bet holds about you.
  • Right to correction (art. 18, III): request the update or correction of incomplete, inaccurate, or outdated data.
  • Right to anonymization or erasure (art. 18, IV): request that unnecessary or excessive data be anonymized or deleted, except where retention is required by a legal obligation.
  • Right to data portability (art. 18, V): request the transfer of your data to another service provider in a structured, machine-readable format.
  • Right to withdraw consent (art. 18, IX): withdraw consent for processing based on that legal basis (such as marketing), without affecting essential platform services.
  • Right to information on sharing (art. 18, VII): find out which entities H22Bet shares your data with.
  • Right to object (art. 18, paragraph 2): object to processing based on legitimate interest when it is not compatible with the data subject's reasonable expectations.

All requests will be verified for the requester's identity before being fulfilled, to ensure that only the data subject themselves may exercise their rights over their data.

09 Data Security Measures

The H22Bet adopts appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction, including:

  • 256-bit SSL/TLS encryption on all communications between the user and the platform
  • Password storage using one-way cryptographic hashing (bcrypt)
  • Two-factor authentication (2FA) available for additional account security
  • Role-based access control (RBAC) for internal staff — each team member can only access the data necessary for their role
  • Continuous monitoring of suspicious activity and intrusion detection systems (IDS)
  • Encrypted backups with regular restoration testing
  • Strong password policy and periodic renewal for administrative access
  • Ongoing staff training on information security and data protection

No security system is completely infallible. In the event of a security incident that may affect your data, H22Bet will notify the affected data subjects and the ANPD within the timeframes required by the LGPD.

10 Minors Under 18

The platform H22Bet is intended exclusively for users aged 18 and over. H22Bet does not intentionally collect personal data from minors. Registration requires date of birth confirmation and identity verification proving legal age.

If H22Bet becomes aware that it has collected data from a user under 18, the information will be deleted immediately and the account will be closed. Parents or legal guardians who suspect a minor has created an account on the platform should contact support immediately for the necessary steps to be taken.

11 Marketing Communications and Preferences

With the user's explicit consent given at registration or later through the settings panel, the H22Bet may send communications about promotions, bonuses, new games, special odds for Brazilian football (Brasileirão, Copa do Brasil, Libertadores), UFC, NBB basketball, e-sports, and other sporting events.

You can opt out of marketing communications at any time through:

  • Unsubscribe link included in all emails sent by H22Bet
  • Communication preferences panel in your account
  • Direct request to support via 24/7 live chat

Opting out of marketing communications does not affect the receipt of essential transactional messages, such as deposit confirmations, withdrawal notifications, and account security alerts.

12 International Data Transfer

The operation of H22Bet may involve the international transfer of personal data to countries where technology providers' servers, international payment processors, or partner game developers are located.

In such cases, H22Bet ensures that transfers take place with the appropriate safeguards required by Article 33 of the LGPD, including: standard data protection contractual clauses, destinations offering a level of protection equivalent to Brazil's, or the adoption of technical measures that minimize risks to the data subject.

Sensitive financial data, such as full payment card details, is never stored on H22Bet's servers — processing is handled directly by certified payment providers (PCI-DSS), who are responsible for the security of that information within their own infrastructure.

13 Changes to This Privacy Policy

The H22Bet may update this Privacy Policy periodically to reflect changes in data processing practices, new legal obligations, or improvements to the clarity and transparency of the document.

Material changes will be communicated at least 7 days in advance via the registered email address or an in-account notification. Minor changes — such as editorial corrections or updated contact information — may be made without prior notice. The last updated date is always displayed at the top of this page.

Continued use of the platform after any changes take effect constitutes acceptance of the updated policy. We recommend revisiting this document periodically to stay informed about how your data is handled.

14 Contact the Data Protection Officer (DPO)

To exercise your rights as a data subject, clarify questions about this Privacy Policy, report suspected misuse of your data, or request additional information about the data protection practices of H22Bet, please contact the DPO:

  • Email: suporte@h22bet.best
  • Channel: 24/7 live chat available on the H22Bet platform
  • Response time: up to 15 business days for data subject rights requests

If you are not satisfied with the response you receive, you have the right to submit your complaint to the ANPD (National Data Protection Authority), the federal authority responsible for overseeing LGPD compliance in Brazil.

By creating an account or continuing to use the H22Bet platform, you confirm that you have read and understood this Privacy Policy. Have questions? Reach our 24/7 support team in Portuguese via live chat.

Your Privacy Rights at H22Bet

The LGPD guarantees these rights to every personal data subject. At H22Bet, you may exercise them at any time.

Right of Access

Request a copy of all personal data H22Bet holds about you. Receive a full report within 15 business days.

Right to Rectification

Found incorrect information in your profile? Request an update for incomplete or outdated details directly through your dashboard or by contacting support.

Right to Erasure

Request the deletion of your data when it is no longer needed for the purposes it was collected, subject to mandatory legal retention periods.

Right to Data Portability

Request the transfer of your personal data to another service provider in a structured, machine-readable format.

Consent Withdrawal

Withdraw your consent for marketing and personalization at any time. Opting out does not affect your account's essential services.

Right to Information

Find out which entities H22Bet shares your data with and for what purposes. Full transparency is a commitment of our policy.

Frequently Asked Questions About Privacy at H22Bet

Your CPF is used solely to verify your identity, confirm account uniqueness (one account per CPF), fulfill regulatory obligations related to fraud prevention and anti-money laundering, and report mandatory tax information to the relevant authorities when required by law. H22Bet does not use your CPF for commercial purposes, does not share it with marketing partners, and does not use it for credit checks or financial scoring.

No. H22Bet does not store complete credit or debit card details on its servers. Card payment processing is handled directly by PCI-DSS-certified payment processors, which are solely responsible for securing that information within their own infrastructure. H22Bet receives only transaction confirmation tokens and has no access to full card numbers.

To request deletion of your data, contact H22Bet's DPO at suporte@h22bet.best or via the 24/7 live chat on the platform. After your identity is verified, your data will be deleted or anonymized within up to 90 days, subject to mandatory legal retention periods (such as the 5-year requirement for financial data under Receita Federal regulations). Data subject to a legal retention obligation cannot be deleted before the end of the period established by applicable Brazilian law.

No. H22Bet does not share user data with other betting platforms, competing casinos, or any company in the digital entertainment sector outside the contractual relationships required to operate the services described in this policy. Each user who registers with H22Bet has their data handled exclusively within the platform's ecosystem.

Upon voluntary account closure, data not subject to legal retention obligations is anonymized or deleted within up to 90 days. Financial data, KYC documents, and transaction history are retained for 5 years as required by Brazilian law. After that period, they are securely and irreversibly deleted. You may request confirmation of full deletion from the DPO once the applicable legal retention periods have elapsed.

Privacy and Responsible Gambling — An Important Connection

H22Bet uses behavioral data to identify and support players who may need help — always with transparency and respect for privacy.

Gambling Pattern Monitoring

H22Bet analyzes betting patterns — frequency, amounts, and timing — to identify behaviors that may indicate problem gambling. This analysis is conducted internally and privately and is never shared with third parties.

Control Tools in the Panel

Deposit limits, voluntary breaks, and self-exclusion are available directly from the account panel. Use of these tools is securely recorded and cannot be reversed before the set time period expires.

Self-Exclusion and Privacy

When you request self-exclusion, the exclusion record is kept permanently to prevent account reactivation — even if you later request it. Your personal data remains protected in accordance with this policy.

Available Support

If gambling is becoming a concern, call 188 (CVV) at any time. Our Responsible Gambling offers additional resources.

Your Data Protected, Your Account Secure at H22Bet

Now that you know how H22Bet protects your privacy, create your account with confidence, deposit from R$ 20.00 via Pix, and enjoy a 100% welcome bonus up to R$ 500.00 on Sports Betting, live casino, crash games, and much more.

This is the Official H22Bet Privacy Policy

H22Bet processes your personal data in accordance with the General Data Protection Law (LGPD – Law No. 13,709/2018). For questions or to exercise your rights, please contact our DPO at suporte@h22bet.best. You can also review the Terms and Conditions and the Responsible Gambling.

Português