Privacy Policy of 68vip – Your Data, Protected

01 Who We Are

A 68vip is an online Sports Betting and casino platform operated under the domain https://68vip.express, dedicated to the Brazilian market. For the purposes of this Privacy Policy and the LGPD, 68vip acts as controller of personal data of its registered users in Brazil.

Our operations are exclusively focused on the Brazilian market, with all services provided in Portuguese, payments in BRL (R$), and full compliance with applicable national legislation, including the General Data Protection Law (LGPD – Lei nº 13.709/2018).

02 Data We Collect

68vip collects personal data at different points during your interaction with the platform. The table below details the data categories, their source, and the purpose of each collection:

2.1 Sensitive Data

68vip may collect data classified as sensitive under the LGPD exclusively in the following situations: biometric data (selfie for identity verification) and health or behavioral information voluntarily disclosed within the responsible gambling program. This data is handled with additional layers of protection and is never used for advertising purposes.

03 How We Use Your Data

Personal data collected by 68vip is used exclusively for the following purposes:

• Service delivery: Create and manage your account, process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, and settle Sports Betting and casino wagers;
• Identity verification: Verify your identity as required by anti-money laundering (AML) and know your customer (KYC) regulations;
• Security and fraud prevention: Detect suspicious access, fraud attempts, use of multiple accounts, and result manipulation;
• User support: Respond to requests via live chat, email, and other channels, resolve disputes, and handle complaints;
• Legal obligation fulfillment: Comply with requests from Brazilian regulatory, judicial, or tax authorities;
• Product improvement: Analyze usage patterns (in anonymized form) to improve the platform experience, fix bugs, and develop new features;
• Promotional communications: Send 68vip offers, bonuses, and news exclusively to users who have opted in to receive these communications;
• Responsible gambling: Monitor gameplay behavior patterns to identify at-risk situations and provide proactive support, in line with our responsible gaming policy.

04 Legal Basis for Processing (LGPD)

All personal data processing carried out by 68vip is grounded in at least one of the legal bases set forth in Art. 7 of the LGPD:

• Contract performance – Art. 7, V: processing necessary for the execution of the service agreement entered into with the user at the time of registration;
• Legal obligation compliance – Art. 7, II: processing required to comply with obligations imposed by Brazilian sports betting, anti-money laundering, and tax legislation;
• Legitimate interest – Art. 7, IX: processing for fraud prevention, platform security, and service improvement purposes, balanced against the rights of the data subject;
• Consent – Art. 7, I: for promotional communications by email or mobile, consent is obtained explicitly at registration and may be withdrawn at any time in the account settings;
• Credit protection – Art. 7, X: for financial risk analysis and default prevention in the context of payment operations.

05 Data Sharing with Third Parties

68vip does not sell or trade personal data. Data is shared only in the following situations, always for a legitimate and proportionate purpose:

5.1 Operational Partners

To keep the platform running, we share data with partners who act as data processors under our instruction:

• Payment processors: To process transactions via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago, we share the necessary financial data with the respective platforms, each of which operates under its own privacy policy;
• Identity verification (KYC) providers: To verify documents and conduct biometric checks, we use specialized, certified partners who process data under confidentiality agreements;
• Casino game providers: For live games and slots, session data may be shared with game providers (such as those responsible for the titles integrated into the platform) solely for the purposes of game operation and auditing;
• Infrastructure providers: Cloud servers and CDN services used to securely host and deliver the platform with speed and reliability.

5.2 Authorities and Legal Obligations

68vip may share data with Brazilian governmental, judicial, or regulatory authorities when required by law, court order, or regulatory mandate, in connection with money laundering investigations, or to fulfill tax obligations with the Receita Federal do Brasil.

06 Data Storage and Security

68vip adopts robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction:

• Encryption in transit: All communication between your device and our servers uses TLS 1.3 / SSL 256-bit;
• Encryption at rest: Sensitive data stored in our databases is encrypted using AES-256 algorithms;
• Hashed passwords: User passwords are never stored in plain text – we use salted hashing (bcrypt) for maximum protection;
• Access control: Access to user data is governed by the principle of least privilege – only employees with a verified operational need are granted access to each data category;
• Continuous monitoring: Automated intrusion detection and anomaly monitoring systems watch our servers around the clock;
• Two-factor authentication: Administrative access to internal systems requires mandatory two-factor authentication (2FA);
• Regular backups: We perform encrypted backups of data on geographically distributed servers, with periodic restoration tests.

68vip's servers are housed in data centers with internationally recognized security certifications, featuring redundant power, cooling, and connectivity.

07 Data Retention

68vip retains your personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with all mandatory legal retention periods:

• Registration & KYC data: Retained for the duration of the account and for at least 5 (five) years after closure, as required by anti-money laundering legislation (Law No. 9,613/1998);
• Financial history: Transactions and payment receipts are retained for a minimum of 5 (five) years for tax and regulatory purposes;
• Betting history: Retained for 2 (two) years after the last wager, or for the period required by sector-specific legislation;
• Technical logs: Retained for up to 6 (six) months, except where required for ongoing security incident investigations;
• Support communications: Retained for 2 (two) years for quality management and dispute resolution purposes.

Once retention periods expire, data is anonymized or securely and irreversibly deleted from our systems.

08 Cookies & Tracking Technologies

68vip uses cookies and similar technologies to ensure the platform works correctly, analyze usage, and personalize your experience. The cookies we use are grouped into the following categories:

8.1 Essential Cookies

Required for the platform's core functionality: session authentication, bet slip, security preferences, and load balancing. These cookies cannot be disabled without affecting how 68vip operates.

8.2 Analytical Cookies

Used to understand how users navigate the platform, which pages are most visited, and where usability issues arise. Analytics data is collected in anonymized or pseudonymized form and used exclusively for internal improvements.

8.3 Functional Cookies

These store user preferences such as selected language, favorite sports, and interface settings. They can be disabled without affecting core functionality, though some personalizations will be lost.

8.4 Cookie Management

You can manage your cookie preferences at any time in your browser settings. Most browsers allow you to block or delete specific cookies. Please note that disabling essential cookies may prevent 68vip from functioning properly.

09 Your Rights as a Data Subject (LGPD)

Article 18 of the LGPD grants you, as a personal data subject, the following rights regarding the processing carried out by 68vip:

9.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact our Data Protection Officer (DPO) by email at privacidade@68vip.express, providing your full name, the CPF registered to your account, and a clear description of your request. We will respond within 15 (fifteen) business days, as required by the LGPD.

10 Data of Minors

The 68vip platform is intended exclusively for individuals aged 18 (eighteen) years or older. We do not knowingly collect personal data from minors. Should we become aware that a minor's data was collected without the knowledge or consent of their legal guardians, we will immediately delete that information and close the corresponding account.

The registration process includes a mandatory age declaration and date-of-birth verification. 68vip also performs additional identity checks (KYC) to help detect and prevent minors from creating accounts.

11 International Data Transfer

In some cases, to enable services such as live casino with international providers or cloud server infrastructure, personal data may be transferred to servers located outside Brazil.

68vip ensures that all international data transfers are carried out in compliance with Art. 33 of the LGPD, through:

• Transfer to countries or international organizations that provide a level of personal data protection equivalent to that required by the LGPD;
• Specific contractual data protection clauses with international partners who receive data;
• Global corporate privacy policies that ensure a level of protection equivalent to that required under Brazilian law.

12 Links to Third-Party Sites

The 68vip platform may contain links to third-party websites or services (such as payment processors or game providers). This Privacy Policy applies exclusively to 68vip and does not cover the privacy practices of those external platforms.

We recommend reading the privacy policy of each external service you access. 68vip is not responsible for the data collection and use practices adopted by third parties.

13 Changes to This Privacy Policy

68vip may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services we offer. Significant changes will be communicated by email at least 15 (fifteen) days in advance.

The date of the last update is always displayed at the top of this document. Continued use of the platform after the new terms take effect constitutes acceptance of the changes. If you disagree with the updates, you may request account closure before the new terms come into force.

14 Data Protection Officer (DPO)

In accordance with Article 41 of the LGPD, 68vip has appointed a Personal Data Processing Officer (Data Protection Officer – DPO), responsible for:

• Receive complaints and communications from data subjects, provide clarifications, and take the appropriate measures;
• Receive communications from the National Data Protection Authority (ANPD) and take the necessary measures indicated;
• Advise 68vip employees and contractors on the practices to be followed regarding personal data protection;
• Carry out any other duties assigned by the controller or established under supplementary regulations.

To get in touch directly with the 68vip DPO: privacidade@68vip.express

15 Contact

For any questions, rights requests, or complaints related to privacy and the handling of personal data by 68vip, please get in touch:

• General email: suporte@68vip.express
• Privacy / DPO email: privacidade@68vip.express
• Live Chat: Available 24/7 on the platform, accessible via the support icon
• Help Center: FAQ

We are committed to responding to all privacy-related requests within 15 (fifteen) business days, as required by the LGPD.