522bt Privacy Policy – Your Data Protection

At 522bt, your data is handled with care. This page clearly explains what we collect, why we collect it, how we protect it, and what your rights are as a data subject, in accordance with the LGPD.

256-bit SSL
In accordance with the LGPD
Your data, your rights
Language: Brazilian Portuguese

What You Need to Know About Privacy at 522bt

These are the key highlights of this Policy. The full document follows, with all details and legal grounds.

Minimal and Necessary Collection

The 522bt collects only the data strictly necessary to operate the platform — registration, identity verification, payment processing via Pix, and compliance with legal obligations. No excessive collection, no unnecessary data.

256-Bit SSL Encryption Protection

All data transmitted between you and the 522bt are protected by 256-bit SSL encryption — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Nubank. No information is transmitted in plain text.

Your Rights under the LGPD

You have the right to access, correct, delete, and port your personal data at any time. You may also withdraw consent and request information about how your data is processed — all without any red tape, via email or the support chat at 522bt.

No Third-Party Data Selling

The 522bt does not sell, rent, or share your personal data with marketing companies or any third party without a justified operational need. Essential technical partners — such as payment processors and identity verification systems — access only the minimum data required to perform their specific function.

Cookies with a Clear Purpose

The 522bt uses cookies to keep your session active, remember your preferences, and understand how the platform is used. You can manage your cookie preferences in your browser settings at any time, without affecting your access to the platform's main features.

Communications That Make Sense

The 522bt may send account-related communications — such as deposit confirmations, outcome notifications, and security alerts. For promotional communications, we ask for your separate consent, and you may opt out at any time without affecting your use of the platform.

1 Data Controller

The 522bt, operator of the platform accessible at 522bt.best, is the controller responsible for processing the personal data collected in connection with the provision of its Sports Betting and online casino services to the Brazilian public. All decisions regarding how, when, and why personal data is processed are made by the 522bt, in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable Brazilian regulations.

When you create an account, make a deposit via Pix, or use any service available on the platform 522bt, you are aware of and agree to the processing of your data as described in this Privacy Policy. If you have questions about any aspect of this policy, you may contact our team through the channel indicated in section 13 of this document.

Summary: The 522bt is the entity that decides how your data is used and bears legal responsibility for it. We have a Data Protection Officer (DPO) available to answer your privacy-related questions and requests.

2 Data We Collect

The 522bt collects different categories of data depending on how you interact with the platform. Collection is limited to what is necessary to provide the contracted services, meet legal obligations, and ensure platform security.

Data provided directly by you

Registration data

Full name, CPF, date of birth, email address, and mobile number.

Address Data

Full residential address, zip code, city, and state, collected during the KYC verification process.

Financial data

Pix key, deposit and withdrawal history, payment methods used (boleto, card, PicPay, Mercado Pago).

Identity documents

Images of your national ID (RG), driver's license (CNH), or passport, and proof of address submitted for KYC verification.

Automatically collected data

When you access the platform of 522bt, we automatically collect technical data that helps us ensure account security and improve the user experience:

  • IP address and approximate geolocation data.
  • Browser type and version, operating system, and device type (mobile, tablet, or desktop).
  • Pages visited, access times, and session duration.
  • Betting history, games accessed, and transactions carried out on the platform.
  • Cookie identifiers and other session tracking technologies.

No biometric data (such as facial recognition) is collected or stored by 522bt. Any selfies requested during the KYC process are used solely for identity verification and discarded once the process is complete.

3 How We Use Your Data

The data collected by 522bt are used exclusively for the purposes described below. We do not use your data for purposes that are incompatible with those that originally justified its collection, without first informing you and obtaining the necessary consent.

  • Account creation and management: create and maintain your active account on the platform, including authentication, password recovery, and account-related communications.
  • Financial transaction processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, as well as withdrawals to bank accounts at Brazil's major banks (Itaú, Bradesco, Banco do Brasil, Caixa, Nubank, and others).
  • Identity verification (KYC): verify your identity to fulfill legal obligations related to the prevention of money laundering and terrorism financing, in accordance with Brazilian law.
  • Provision of betting and casino services: register and settle Sports Betting in football (Brasileirão, Copa do Brasil, Libertadores), volleyball, basketball (NBB), e-sports, and other disciplines, as well as manage Live Casino sessions, slots, and Crash Games.
  • Security and fraud prevention: identify and prevent unauthorized access, fraudulent behavior, and misuse of the platform.
  • Customer support: respond to your requests via live chat or email, and keep a history of your interactions for future reference.
  • Transactional communications: send deposit confirmations, bet result notifications, security alerts, and account-related information.
  • Promotional communications: send offers, bonuses, and platform news — only with your explicit consent and with the option to opt out at any time.
  • Compliance with legal obligations: comply with requests from competent Brazilian regulatory and judicial authorities, when legally required.
  • Platform analysis and improvement: understand how users interact with the 522bt to improve features, fix issues, and develop new functionality.

4 Legal Basis for Processing

The LGPD requires that all personal data processing have a legal basis. The 522bt processes your data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

  • Contract performance: processing required to fulfill the service agreement accepted at the time of registration — such as processing your Pix deposits, recording bets, and handling withdrawals.
  • Compliance with a legal obligation: KYC identity verification, transaction record retention, and responding to requests from Brazilian regulatory and law enforcement authorities.
  • Legitimate interest: fraud prevention, platform security, detection of unusual behavior, and internal analysis for service improvement — always proportionate and respectful of your rights.
  • Consent: sending promotional communications and using non-essential cookies. Consent may be withdrawn at any time without affecting your use of the platform.

Important: Withdrawing consent for promotional communications does not affect data processing carried out under other legal bases — such as contract performance and legal obligations. Your account and the services of 522bt continue to operate normally.

5 Data Sharing

The 522bt does not sell, rent, or trade your personal data. Sharing occurs only in the specific situations described below, with partners who are contractually bound to handle your data with the same level of protection required by this policy and by the LGPD.

Essential operational partners

  • Payment providers: Pix processors, credit and debit card operators (Visa, Mastercard, Elo), PicPay, and Mercado Pago receive only the data strictly necessary to process your financial transactions.
  • Identity verification services (KYC): specialized partners in document verification and fraud prevention receive the necessary data to validate your identity during the registration process and in periodic reviews.
  • Casino game providers: slots, Crash Games, and live casino providers receive technical session identifiers to operate the games. These providers do not have access to your full personal data.
  • Cloud infrastructure and hosting: cloud storage and computing service providers that host the 522bt and process data in accordance with technical instructions defined by us.

Legal obligations

The 522bt may share data with Brazilian governmental, regulatory, or judicial authorities when required by law, court order, or official investigation. This includes the Banco Central do Brasil, the Receita Federal, and civil and federal police forces, as applicable. In such cases, we share only the minimum necessary to comply with the legal request.

Should 522bt undergoes a merger, acquisition, or corporate restructuring, your data may be transferred to the new controller, who will be required to honor this policy or notify you of any changes before applying new data processing terms.

6 Information Security

The 522bt applies strict technical and organizational measures to protect your data against unauthorized access, improper disclosure, alteration, or destruction. Our security infrastructure includes:

  • 256-bit SSL Encryption in all communications between your device and the servers of 522bt — the same standard used by Brazil's largest banks.
  • Encrypted storage of passwords and sensitive financial data, using modern, irreversible hashing algorithms.
  • Two-factor authentication (2FA) available to all users as an additional layer of account access protection.
  • Continuous monitoring of suspicious activity, unauthorized access attempts, and anomalous usage patterns.
  • Restricted internal access controls: only employees of 522bt who need the data to carry out their functions have access to it, with an audit log of all access events.
  • Periodic security testing conducted by specialized teams to identify and address vulnerabilities before they can be exploited.

Despite every effort, no system is completely infallible. In the event of a security incident that may affect your data, 522bt will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, with details about what occurred and the measures taken.

Security tip: The 522bt never asks for your password by email, chat, or phone. If you receive a message requesting your password on behalf of 522bt, ignore it and notify us immediately at contato@522bt.best — it may be a phishing attempt.

7 Data Retention and Deletion

The 522bt retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law.

Retention periods

  • Active account data: retained for as long as your account is active and for up to 5 years after closure, to meet legal obligations and resolve any potential disputes.
  • Financial transaction records: retained for a minimum of 5 years in accordance with the regulations of the Banco Central do Brasil and the Receita Federal, regardless of account status.
  • KYC verification documents: retained for the minimum period required by anti-money laundering legislation — generally 5 years from the date of the last transaction.
  • Browsing and session data: retained for up to 12 months for security and platform analysis purposes.
  • Support communications: kept for up to 2 years after the case is closed, for reference and quality control purposes.

Data deletion

When you request account closure, 522bt anonymizes or deletes personal data that is no longer needed to fulfill legal obligations. Data that must be retained by law is stored in an isolated environment and accessed only when required to meet those obligations. You may request deletion of your data at any time through the channels described in section 13, and you will receive a response within 15 business days.

8 Cookies and Tracking Technologies

The 522bt uses cookies and similar technologies to ensure the platform functions correctly, remember your preferences, and understand how users navigate the site. Below we explain the types of cookies used:

Essential cookies

Required for the platform's basic functionality — such as keeping your session active while you bet, recognizing your device as authenticated, and securing transactions. These cookies cannot be disabled without affecting your use of 522bt.

Performance and analytics cookies

Used to understand how users interact with the 522bt — which pages are most visited, where navigation difficulties occur, and how features are used. Information is aggregated and anonymized, with no individual users identified.

Preference cookies

They store your usage preferences — such as your selected language, favorite sports, and display settings — so you don't have to reconfigure them every time you log in.

How to manage cookies

You can manage, block, or delete cookies in your browser settings — Chrome, Firefox, Safari, or any other. Please note that blocking essential cookies may prevent certain platform features from working correctly, such as logging in and processing bets. For non-essential cookies, you can update your preferences at any time without affecting your use of 522bt.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the personal data subject, a set of rights that 522bt is fully committed to upholding. See below what you can request and how to exercise each right:

Right What does How to exercise
Access Know what personal data 522bt holds about you and how it is used. Email or 24h chat
Correction Correct incomplete, inaccurate, or outdated information in your account. Account settings
Deletion Request deletion of data processed on the basis of consent, where there is no longer a legal requirement to retain it. Email or 24h chat
Portability Receive your data in a structured, machine-readable format for transfer to another service. Email the DPO
Withdrawal Withdraw previously given consents — such as for promotional communications — at any time. Settings or email
Information Know which third parties your data has been shared with and for what purpose. Email the DPO
Objection Object to data processing carried out on the basis of legitimate interest, where there are valid grounds. Email the DPO

To exercise any of these rights, contact our team via live chat on the platform (available 24/7) or by email at contato@522bt.best. A 522bt responds to all data subject requests within 15 business days, as required by the LGPD.

10 Data of Minors

The 522bt is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from minors. Registration on the platform requires confirmation that the user is at least 18 years old, and the identity verification (KYC) process validates this based on the submitted documentation.

If we become aware that we have collected data from a person under 18 years of age, the account will be immediately closed, the data will be deleted, and any deposited balance will be returned to the holder of the payment method used. If you are the guardian of a child or teenager and believe their data was inadvertently collected by 522bt, please contact us immediately at contato@522bt.best.

11 International Data Transfer

In some cases, personal data collected by 522bt may be transferred to servers located outside Brazil — for example, when we use cloud infrastructure providers or technical partners headquartered abroad. When this occurs, 522bt ensures that the transfer is carried out in compliance with the LGPD, through one of the following safeguards:

  • Transfer to countries recognized by the ANPD as providing an adequate level of data protection.
  • Contracts with standard data protection clauses approved by the ANPD.
  • Adoption of technical and organizational measures equivalent to those required by the LGPD by the data recipient.

The 522bt does not transfer data to jurisdictions without an adequate level of protection without adopting the safeguards above. If you have questions about specific international transfers, please contact our data protection officer.

12 Changes to This Policy

The 522bt may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, data processing practices, or ANPD recommendations. Any relevant change will be communicated at least 7 business days in advance via your registered email and a visible notice on the platform.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy. If you disagree with the changes, you may request account closure and a refund of your available balance before they take effect. The date of the last update to this policy is always shown in the sidebar summary of this page and in the document footer.

We recommend reviewing this Privacy Policy periodically to stay informed about how 522bt protects your information. Previous versions of the policy are archived and may be requested from our data protection officer.

13 Contact & Data Protection Officer (DPO)

The 522bt has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for handling data subject requests, guiding the internal team on privacy practices, and serving as the communication channel with the Autoridade Nacional de Proteção de Dados (ANPD).

To exercise your rights as a data subject, ask questions about this policy, or report any concerns regarding the handling of your personal data by 522bt, you can reach us through the following channels:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform. Average response time under 3 minutes.
  • Email: contato@522bt.best — for data subject rights requests, include "LGPD" in the subject line. Response time: up to 15 business days.

If you believe your rights as a data subject have been violated and the matter has not been satisfactorily resolved through our internal channels, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), following the procedures established by that authority.

Commitment to the LGPD

The 522bt is fully committed to LGPD compliance and to respecting the rights of data subjects. Our Terms and Conditions Policy and the guidelines of Responsible Gambling complement this document and form part of our commitment to protecting Brazilian users.

The 522bt Privacy Essentials at a Glance — Six Key Points

Data collection

Only what is necessary to operate the platform: registration, KYC, Pix transactions, and compliance with legal obligations. Nothing more.

No data selling

Your data is never sold, rented, or shared with marketing companies. Sharing is limited to essential operational partners.

Security

256-bit SSL encryption, secure storage, two-factor authentication, and continuous monitoring for suspicious activity.

Your rights under the LGPD

Access, correction, deletion, portability, withdrawal of consent, and objection to processing. Responses within 15 business days.

Data retention

Data retained for as long as necessary for the original purpose and for the minimum statutory periods — generally 5 years for financial records.

Contact the DPO

24/7 live chat or email at contato@522bt.best. For LGPD requests, please include "LGPD" in the subject line. Response time: up to 15 business days.

Privacy Questions at 522bt

No. 522bt does not sell, rent, or share your personal data with advertising, marketing, or any third-party companies without a direct operational need. Your data is shared only with partners essential to the platform's operation — such as Pix and boleto payment processors, identity verification services, and casino game providers — and only to the extent required for each function. For promotional communications from 522bt itself, we ask for your separate consent, and you can opt out at any time.

To request deletion of your data, contact our support team via live chat (available 24/7) or send an email to contato@522bt.best with the subject line "LGPD – Data Deletion". Once your identity has been verified, 522bt will process the request within 15 business days. Please note that certain data must be retained for the minimum period required by law — such as financial transaction records required by the Banco Central do Brasil — and cannot be deleted before that period expires, even upon request.

Identity verification (known as KYC — Know Your Customer) is a legal requirement for betting platforms and financial services in Brazil. It is mandated by Banco Central regulations and anti-money laundering legislation (Law No. 9,613/1998). The process protects you — preventing third parties from opening accounts in your name — and protects the platform against fraudulent use. Submitted documents are stored with encryption, accessed only by the 522bt compliance team, and disposed of after the minimum legal retention periods.

Yes, at any time. Every promotional email from 522bt includes an unsubscribe link in the footer. You can also opt out of promotional communications in your account settings, under notification preferences. Opting out of promotional emails does not affect essential transactional messages — such as deposit confirmations, bet result notifications, and account security alerts — which are required for the service to function.

After account closure, 522bt anonymizes or deletes personal data that does not need to be retained under a legal obligation. Data that must be kept by law — primarily financial transaction records, KYC documents, and betting history — is stored in an isolated environment for the minimum required period (generally 5 years) and accessed only when there is a proven legal need. Once those retention periods expire, the data is permanently deleted from 522bt's systems.

Your data protected, your winnings secured at 522bt

Privacy read, trust established. Registering at 522bt takes less than 2 minutes — deposit from R$ 20,00 via Pix and start betting on the Brasileirão, volleyball, NBB, e-sports, and much more.

256-bit SSL In accordance with the LGPD No data selling Pix Withdrawal in 5 min
Português