1. Who We Are and Data Responsibility
The 365gg — accessible at 365gg.best — is the platform responsible for processing its users' personal data. For the purposes of the LGPD, the 365gg acts as data controller — meaning it is the entity that decides how and why data is collected and processed.
This Privacy Policy applies to all data collected during use of the 365gg platform, including:
- Accessing the 365gg.best site via mobile or desktop;
- Registration and account creation;
- Making deposits and withdrawals via Pix, credit/debit card, bank slip (boleto), or TED bank transfer;
- Placing sports bets on football (Brasileirão, Copa do Brasil, Libertadores), UFC, NBB, CBLOL, and other sports;
- Use of casino games, slots, and crash games;
- Interactions with customer support;
- Participation in promotions and loyalty programs.
To contact the data protection officer (DPO) of the 365gg, send an email to contato@365gg.best with the subject "LGPD — DPO".
Legal basis. The processing of your data by 365gg is based on the performance of a contract (provision of betting services), compliance with legal obligations (sports betting legislation, anti-money laundering), and, in some cases, legitimate interest or the user's explicit consent.
2. What Data We Collect
The 365gg collects personal data at different points during your interaction with the platform. The table below summarizes the main types of data, how they are collected, and why:
| Category |
Data collected |
How it is collected |
| Identification |
Full name, CPF, date of birth, RG or driver's license (when requested) |
Registration form and identity verification |
| Contact |
Email, mobile number with area code, residential address |
Registration form |
| Financial |
Pix key, partial card details, deposit and withdrawal history |
Transactions carried out on the platform |
| Activity |
Betting history, games used, promotions activated, access times |
Platform use |
| Technical |
IP address, device type, operating system, browser, approximate location |
Automatically upon accessing the site |
| Communication |
Support chat history and email exchanges |
Interactions with the support team |
The 365gg does not collect data in sensitive categories (such as racial origin, political opinion, health data, or sexual orientation) and does not request information beyond what is necessary to provide its services and meet legal obligations.
Data accuracy. You are responsible for the accuracy of the information you provide to 365gg. Incorrect or false data may result in account suspension and balance retention in accordance with the
Terms and Conditions.
3. How We Use Your Data
The data collected by the 365gg are used for specific, legitimate purposes. We never use your data for purposes other than those listed here without informing you first:
- Service delivery: create and manage your account, process bets, record deposits and withdrawals via Pix and other methods, and provide access to casino games;
- Identity verification: to confirm you are over 18 and that your registration details correspond to a real person, as required by Brazilian sports betting regulations;
- Fraud prevention: identify attempts to manipulate bets, use of multiple accounts, money laundering, or any other unlawful activity on the platform;
- Compliance with legal obligations: report suspicious transactions in accordance with anti-money laundering legislation and comply with requests from competent regulatory and judicial authorities;
- Customer support: answer questions, resolve issues with bets or transactions, and handle responsible gambling requests;
- Account communications: send bet confirmations, notifications for promotions you have signed up for, and account security alerts;
- Platform improvement: analyze usage patterns in aggregate to improve the browsing experience, sports coverage, and the platform's technical performance;
- Responsible gambling: monitor betting patterns to identify behaviors that may indicate problem gambling and trigger the available responsible gambling tools.
The 365gg may send marketing communications — such as football promotions, special odds for the Brasileirão, or UFC bonuses — exclusively to users who have opted in to receive them. You can unsubscribe at any time via the opt-out link in any email or by contacting platform support.
No harmful automated decisions. 365gg does not make automated decisions that produce significant effects on you without the possibility of human review — such as permanently blocking an account based solely on algorithms, without analysis by a team member.
4. Data Sharing with Third Parties
The 365gg does not sell users' personal data. Data sharing only occurs in the following situations, all of which have a legal and contractual basis:
- Payment processors: to process deposits and withdrawals via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and TED transfers — the required financial data is shared with contracted payment processors, who operate under confidentiality agreements and LGPD compliance;
- Identity verification providers: to verify the user's identity and CPF validity as required by regulation — only the minimum data necessary for verification is shared;
- Casino game providers: certified slots, live casino, and crash games providers receive only the technical data required to run the games (such as a session identifier) — never full personal data;
- Regulatory and judicial authorities: 365gg complies with legitimate requests from competent Brazilian authorities (Federal Revenue Service, Central Bank, law enforcement, and judicial authorities) when required by law;
- Technical service providers: hosting, security monitoring, and performance analysis services operated by contracted third parties under strict data protection clauses.
All third parties with whom the 365gg shares data with operate under contracts requiring data handling in compliance with the LGPD and security standards equivalent to those adopted by 365gg. The 365gg conducts periodic due diligence on its data suppliers.
International transfer. Some technology and casino game providers used by 365gg may process data outside Brazil. When this occurs, 365gg ensures that the transfer is carried out with the appropriate safeguards set out in Art. 33 of the LGPD, including specific contractual data protection clauses.
5. Data Security and Storage
The security of user data on the 365gg is an operational priority — not just a compliance checkbox. Security measures in place include:
- 256-bit SSL/TLS Encryption across all communications between the user's device and the platform's servers;
- Encryption at rest for sensitive data stored in databases, including CPF, financial data, and access credentials;
- Role-based access control (RBAC) — only employees with a proven operational need have access to users' personal data, and that access is recorded in audit logs;
- 24-hour security monitoring to detect unauthorized access attempts, brute-force attacks, and other security threats;
- Encrypted backups with regular restoration tests;
- Penetration testing carried out periodically by specialized security teams;
- Two-factor authentication (2FA) available to all users and mandatory for internal administrative operations.
In the event of a security incident that may affect your personal data, the 365gg will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 72 hours of incident confirmation when significant risk is involved.
Despite all measures in place, no system is 100% immune to threats. We therefore recommend that you also follow good security practices: use a strong, unique password for 365gg, enable 2FA, and never share your login credentials with anyone.
6. Cookies and Tracking Technologies
The 365gg uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:
- Essential cookies: required for the platform to function properly, such as keeping your session active as you navigate between the Sports Betting, casino, and account pages. Without these cookies, the platform will not work correctly. These cookies cannot be disabled.
- Performance cookies: collect information about how the platform is used — which pages are visited most, average browsing time, errors encountered — to help the technical team improve performance. Data is aggregated and does not identify individual users.
- Functionality cookies: remember user preferences, such as language and odds display settings, to personalize the experience.
- Analytics cookies: used to understand browsing behavior in aggregate, helping identify which sports, competitions, and features are most used by Brazilian bettors.
You can manage your cookie preferences through the consent banner shown on first access or through your browser settings. Disabling non-essential cookies may affect some platform features but will not prevent access to betting or your account.
No cross-site tracking. 365gg does not use cookies to track you across other websites outside the 365gg.best platform. Analytics cookies are configured to respect user privacy and do not share individual data with third parties for advertising purposes.
7. Your Rights Under the LGPD
The General Data Protection Law (LGPD) guarantees you, as the data subject, a set of rights that the 365gg is committed to upholding and facilitating. You may exercise any of these rights by emailing contato@365gg.best with the subject line "LGPD — [Request Type]":
- Access: request a copy of all personal data that 365gg holds about you;
- Correction: correct incomplete, inaccurate, or outdated data;
- Anonymization: request that data no longer needed for its original purposes be anonymized;
- Portability: receive your data in a structured format for transfer to another service;
- Deletion: request deletion of data processed under consent, when that consent is withdrawn. Data retained under legal obligation (such as financial transaction history) cannot be immediately deleted;
- Sharing information: find out which third parties your data has been shared with;
- Consent withdrawal: withdraw consent for marketing communications at any time, with no impact on activities carried out while consent was active;
- Automated decision review: request human review of any automated decision that affects your account.
The 365gg responds to LGPD rights requests within 15 business days from receipt of the duly identified request. In more complex cases, this deadline may be extended by an equal period, with notice to the user.
If you believe that the 365gg has not adequately handled a rights exercise request, you may file a complaint with the National Data Protection Authority (ANPD) through the ANPD's official portal.
8. How Long We Retain Your Data
The 365gg retains users' data for as long as necessary to fulfill the purposes described in this policy and applicable legal obligations. The main criteria are:
- Active account data: retained while your account is active and for a security period following closure, to address any disputes or regulatory requests;
- Financial transaction history: retained for a minimum of 5 years after the transaction, as required by Brazilian anti-money laundering legislation and Federal Revenue regulations;
- Betting history: retained for a minimum of 5 years as required by Sports Betting regulations;
- Identity verification data: retained for the period required by regulation, generally 5 years after account closure;
- Access and security logs: retained for 6 months for security purposes and incident investigation;
- Support communications: retained for 2 years for reference in future disputes;
- Non-essential cookie data: deleted in accordance with each cookie's expiration policy, generally within 13 months.
After the applicable retention period, data is securely deleted or anonymized so that the data subject can no longer be identified. The 365gg periodically reviews stored data to remove information that no longer has a purpose or legal basis for retention.
9. Minors
The 365gg is a platform exclusively for users aged 18 and over. We do not intentionally collect data from minors, and registration requires confirmation that the user is 18 or older, along with a valid CPF that is verified.
If the 365gg identify that an account was created by a minor, the account will be immediately closed, the balance will be frozen, and the data will be processed solely to fulfill the legal obligations arising from the situation, and deleted as soon as possible.
If you are a parent or guardian and believe a minor has created an account on the 365gg, please contact us immediately at contato@365gg.best with the subject line "Minor's Account". The compliance team will handle the matter with priority and discretion.
Parental controls. We recommend using parental control tools on mobile and desktop devices to prevent minors from accessing betting platforms. 365gg supports initiatives to protect minors and cooperates with relevant authorities in any related investigation.
10. Changes to This Policy and Contact
The 365gg may update this Privacy Policy to reflect changes in data practices, Brazilian legislation, or the services offered. When this happens:
- The new version will be published on this page with the updated date;
- Registered users will be notified by email with at least 7 days' notice for material changes that expand data collection or use;
- For changes that restrict data use or expand your rights, implementation may be immediate with simultaneous notification;
- Continued use of the platform after the new version's effective date constitutes acceptance of the changes.
For any questions, requests, or complaints regarding privacy and personal data at the 365gg:
- General email: contato@365gg.best
- DPO (data protection) email: contato@365gg.best — subject: "LGPD"
- Platform chat: available 24 hours a day in Portuguese
- Response time: up to 15 business days for LGPD requests, up to 4 hours for general email, and under 10 minutes for chat
This policy is governed by Brazilian law, in particular the LGPD (Law No. 13.709/2018). Any disputes will be submitted to the jurisdiction of the Comarca de São Paulo, SP.