222g Privacy Policy — Your Data Protected

The 222g is a Sports Betting and online casino platform operated for the Brazilian market and accessible at 222g.best. For the purposes of the LGPD (Law No. 13.709/2018), the 222g acts as the controller of users' personal data — meaning it is responsible for all decisions regarding how and why that data is processed.

The Data Protection Officer (DPO) of 222g can be reached exclusively by email: privacidade@222g.best. Requests related to your rights as a data subject (access, correction, portability, deletion) must be sent to that address and will be answered within 15 business days.

This Privacy Policy applies to all registered users and visitors of the 222g, including the 222g.best website and the mobile app for Android and iOS.

The 222g collects personal data at different points throughout your interaction with the platform. The table below details the categories, specific data points, and when each is collected:

The 222g only collects the data necessary for each specific purpose — the data minimization principle established under the LGPD. We do not collect sensitive categories of data such as political views, religion, health information, or sexual orientation, except where expressly required by law.

The personal data collected by the 222g are used exclusively for the following purposes:

• Account creation & management — verify your identity, create your user profile, confirm that you meet the eligibility criteria (minimum age of 18, valid CPF), and grant you access to the platform.
• Processing financial transactions — process deposits via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED transfers; process withdrawals to the bank account linked to your 222g account CPF.
• Identity verification (KYC) — verify that you are who you claim to be, as required by anti-money laundering regulations and betting industry rules in Brazil.
• Fraud prevention — identify duplicate accounts, use of automated software, abusive arbitrage, and any suspicious activity that could harm you or the integrity of the platform.
• Customer Support — address your questions, resolve technical issues, and handle requests submitted via live chat, email, or other 222g channels.
• Responsible gambling — monitor usage patterns to identify potential problem gambling behavior and proactively offer self-control tools when needed.
• Operational communications — send transactional notifications such as deposit confirmations, withdrawal approvals, account security alerts, and updates to terms and policies.
• Compliance with legal obligations — to meet requirements from Brazilian regulatory authorities, court orders, and requests from the Banco Central do Brasil or COAF (Conselho de Controle de Atividades Financeiras).
• Platform improvement — analyze usage data in aggregated, anonymized form to improve the betting experience, identify features with technical issues, and prioritize new features in the app and on the site.

The 222g does not use your data to build consumer profiles for third-party advertising purposes, does not carry out fully automated decisions with legal effects on you without the possibility of human review, and does not share data with brokers, insurers, or business partners outside the scope described in section 5 of this policy.

The LGPD requires that all personal data processing have a specific legal basis. The 222g bases the processing of your data on the following legal grounds set out in art. 7 of Lei nº 13.709/2018:

• Contract performance (art. 7, V) — processing of registration data, financial transactions, and platform activity is necessary to perform the contract established between you and 222g when you create your account and accept the Terms and Conditions.
• Compliance with a legal obligation (art. 7, II) — data for KYC, anti-money laundering, and COAF reporting is processed to fulfill obligations imposed on 222g by Brazilian law as an operator of financial and betting services.
• Legitimate interest (art. 7, IX) — technical and browsing data is processed for platform security, fraud prevention, and service improvement — legitimate interests of 222g that do not override your fundamental rights.
• Consent (art. 7º, I) — optional marketing communications, such as emails about 222g promotions and news, are sent only with your express consent, which you can withdraw at any time in your account settings.

The 222g does not sell your personal data. We share data with third parties only when strictly necessary to operate the platform or fulfill legal obligations. The partners that may have access to specific data are:

• Payment providers — financial data required to process transactions via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED is shared with the relevant financial institutions and payment processors. These partners have access only to the minimum data necessary to process each transaction.
• Game providers — session identification data (excluding CPF or banking details) is shared with live casino providers such as Evolution Gaming and Pragmatic Play Live to authenticate your game session.
• Identity verification services — documents submitted for KYC may be processed by specialized identity verification platforms operating under confidentiality agreements and in compliance with the LGPD.
• Technology infrastructure — cloud server providers, CDN, and security services that host the 222g platform have technical access to the systems but are contractually prohibited from using user data for any purpose of their own.
• Legal and regulatory authorities — in response to court orders, requests from the Ministério Público, COAF, Banco Central do Brasil, or other competent authorities, 222g may be legally required to disclose user data. In such cases, we notify the user whenever legally permitted to do so.

All third-party partners of the 222g that process users' personal data are selected based on their compliance with the LGPD and international data protection standards, and are bound by contracts that restrict the use of data exclusively to the contracted purpose.

The 222g uses cookies and similar technologies on its website and app to ensure the platform functions correctly, improve your experience, and protect your account's security. Below are the types of cookies used:

• Essential cookies — required for the platform's basic operation, such as keeping your session active after login, remembering language preferences, and securing transactions. These cookies cannot be disabled without affecting your use of the platform.
• Performance Cookies — collect anonymous data about how you use the site (pages visited, session duration, errors encountered) so we can identify technical issues and improve your experience. They do not identify you personally.
• Functionality cookies — remember your display preferences, such as favorite sports or most-used games, to personalize your experience on your next visit.
• Security cookies — used to detect unauthorized access attempts, suspicious activity, and protect your account against fraudulent use.

The 222g does not use third-party advertising cookies to track your behavior on other sites. You can manage your cookie preferences in the consent banner shown on your first visit or through your browser settings — however, disabling essential cookies may prevent the platform from working correctly.

The 222g implements technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or destruction. The main measures include:

• SSL/TLS encryption on all communications between your device and 222g servers — applies to both the website and the Android and iOS app.
• Encryption at rest for personal and financial data stored in the database — including KYC documents and transaction history.
• Mandatory multi-factor authentication for all administrators accessing systems that contain user data.
• Active 24-hour security monitoring with automatic alerts for anomalous activity.
• Penetration testing (pentest) carried out periodically by specialized external firms.
• Role-based access control (RBAC) — each employee can only access the data required for their specific role.
• Encrypted backups stored in a separate location to ensure recovery in the event of an incident.

In the event of a security incident that results in actual risk or harm to data subjects, the 222g will notify the ANPD (National Data Protection Authority) and affected users within the reasonable timeframe required by the LGPD, providing information about the nature of the incident, the data affected, and the steps taken to remedy the situation.

The 222g retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. Retention periods vary by data category:

• Registration & identification data — retained for the full duration of the active account and for at least 5 years after closure, in accordance with anti-money laundering requirements (Law No. 9.613/1998).
• Financial data and transaction history — retained for 5 years after each transaction, in accordance with Banco Central do Brasil requirements and tax obligations.
• KYC documents — retained for the minimum period required by current compliance regulations, currently 5 years from the date of verification.
• Platform activity data (betting history, sessions) — retained for 2 years after the last activity, except when part of an ongoing fraud investigation or legal proceeding.
• Technical data & logs — retained for 6 months for security and technical diagnostic purposes.
• Support communications — retained for 2 years for reference in the event of complaints or disputes.

Once the applicable retention period expires, your data is securely deleted or anonymized — so that it is no longer possible to identify you from the remaining information. Early deletion requests are assessed on a case-by-case basis, respecting the minimum periods required by law.

The LGPD grants you a set of rights regarding your personal data processed by the 222g. All of these rights can be exercised by emailing privacidade@222g.best — with a response within 15 business days:

To exercise any of these rights, send an email to privacidade@222g.best with the subject line "LGPD RIGHTS – [your specific right]" and include your CPF and the email address registered to your account for identification. 222g may request additional documentation to verify your identity before processing the request — a necessary step to prevent unauthorized third parties from accessing your data.

If you feel that the 222g did not adequately handle your request, you have the right to file a complaint with the National Data Protection Authority (ANPD) at www.gov.br/anpd.

The Personal Data Processing Officer (DPO) of the 222g is the official channel for matters related to this Privacy Policy and the exercise of your rights as a data subject. For general support inquiries (withdrawals, bets, bonuses), please use the standard customer service channels.

• DPO Email — privacidade@222g.best. Use this channel exclusively for privacy and data protection requests. Response guaranteed within 15 business days.
• General support — contato@222g.best or live chat on the platform. For questions about betting, Pix deposits, withdrawals, bonuses, and how 222g works in general.
• Responsible gambling — for self-exclusion requests or limit-setting tools, email contato@222g.best with the subject line "RESPONSIBLE GAMBLING" for priority handling.

The platform 222g is intended exclusively for individuals aged 18 or older. 222g does not knowingly collect, store, or process personal data from anyone under 18.

If you are the legal guardian of a minor and believe they have created an account on 222g or had their data collected by the platform, please contact the DPO immediately at privacidade@222g.best with the subject line "MINOR ACCOUNT". 222g will close the account, delete the minor's data, and return any deposited funds to the legal guardian following identity verification.

222g applies technical measures to limit minors' access to the platform, including CPF verification at registration (which confirms date of birth with the Receita Federal) and photo ID checks during KYC. That said, no system is foolproof — parental supervision is essential to prevent minors from accessing betting platforms.

The 222g may update this Privacy Policy periodically to reflect changes in our processes, applicable legislation, or the technologies we use. Material changes will be communicated by email to registered users and published on this page at least 7 days before taking effect.

The date of the last update is always shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform 222g after the updated policy takes effect constitutes implicit acceptance of the revised terms.