Official Document · LGPD Compliance · Updated January 2026

Privacy Policy of 23vip — Your Data Protected with Transparency

At 23vip, player privacy is taken seriously. This document clearly explains how we collect, use, and protect your personal data — in compliance with Brazil's General Data Protection Law (LGPD). Please read it carefully before creating your account.

Last updated: January 15, 2026 Valid for players in Brazil LGPD Lei 13.709/2018
Your Data Belongs to You
23vip never sells players' personal data. Transparency and security are the cornerstones of our operation.

What This Policy Guarantees You

23vip's six core commitments to your data privacy

256-bit SSL Encryption Across the Board

Every transaction, login, and data transfer on 23vip is protected by 256-bit SSL encryption — the same standard used by Brazilian banks and fintechs like Nubank and Itaú. Your data is never transmitted in the clear.

Your Data Is Never Sold

23vip does not sell, rent, or transfer players' personal data for third-party commercial purposes. Data is only shared with partners when strictly necessary to provide services, always under confidentiality agreements.

You Control Your Data

The LGPD gives you the right to request access, correction, portability, and deletion of your data at any time. 23vip makes this easy — just reach out to support via chat or email.

Full LGPD Compliance

23vip operates in compliance with the Lei Geral de Proteção de Dados Pessoais (Lei 13.709/2018). We maintain internal privacy review processes and keep data processing records as required by Brazilian law.

Card Data Never Stored

23vip does not store full credit or debit card details on its servers. All card transactions are processed directly by the certified payment gateway, so sensitive data never passes through our systems.

Communications With Consent Only

23vip only sends marketing emails, promotions, and notifications if you have given your explicit consent. You can opt out of any type of communication at any time, directly from your account dashboard or via the unsubscribe link in our emails.

Read before registering: This Privacy Policy describes how 23vip handles your personal data. By creating an account, you confirm that you have read and understood this document. If you have any questions, please contact our support team via chat before completing your registration.

01

Who We Are & Scope of This Policy

This Privacy Policy describes the personal data processing practices adopted by the platform 23vip (available at 23vip.casino) with respect to all users who access, browse, or use the services offered — including Sports Betting, online casino, poker, slots, and the VIP Program.

The 23vip acts as the controller of the personal data you provide when registering and using the platform, as defined by the General Personal Data Protection Law (LGPD — Law 13.709/2018). This means we are responsible for decisions on how that data is collected, stored, used, and eventually deleted.

This policy applies to all players registered on the 23vip residing in Brazil. By using our platform, you acknowledge that you have read and understood the terms of this Privacy Policy, as well as the Terms and Conditions that supplement it.

02

Data We Collect

Data You Provide Directly

During registration and use of the platform, the 23vip collects the following personal data that you provide voluntarily:

  • Identification data: full name, CPF, date of birth, gender;
  • Contact data: email address, mobile number, full residential address (street, neighborhood, city, state, ZIP code);
  • KYC verification data: photo ID (RG, CNH, or passport), proof of address, selfie with document;
  • Financial data: Pix key registered for withdrawals, partial credit/debit card data processed by the gateway (the 23vip does not store your full card number);
  • Communication preferences: your choices regarding whether to receive marketing communications by email, SMS, or push notifications.

Automatically Collected Data

When you browse and use the platform of 23vip, some data is collected automatically by our systems:

  • Device data: device type (mobile, tablet, desktop), operating system, browser used;
  • Access data: IP address, date and time of access, pages visited, session duration;
  • Gaming data: betting history, games accessed, amounts wagered and won, VIP Program level, accumulated points;
  • Cookie data: information collected through cookies and similar tracking technologies (detailed in section 8).

Sensitive data: 23vip does not intentionally collect sensitive data such as racial origin, religious belief, political opinion, or health information. If you provide this type of information in communications with support, it will be handled with the highest level of confidentiality and will not be used for any commercial purpose.

03

How We Use Your Personal Data

The 23vip uses your personal data exclusively for the purposes listed below. We do not use your data for any other purpose without prior notice and, where required, your consent.

Primary Purposes

  • Account creation and management: registering, authenticating, and keeping your account active on the platform;
  • Transaction processing: processing deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED transfers, as well as processing withdrawals via Pix;
  • Identity verification (KYC): verify your identity for fraud prevention purposes and to meet regulatory obligations;
  • Service delivery: offer Sports Betting on Brasileirão, Copa Libertadores, UFC, and other sports, as well as slots, Live Casino, poker, and all other platform features;
  • VIP Program: calculating and crediting weekly cashback, tracking level progression, and managing exclusive benefits;
  • Customer support: answer questions, resolve issues, and improve the experience based on support interactions;
  • Security and fraud prevention: detect and prevent unauthorized access, multi-account use, money laundering, and other prohibited conduct;
  • Compliance with legal obligations: meeting regulatory requirements, responding to requests from competent authorities, and maintaining records required by law.

Secondary Purposes (with consent)

  • Marketing communications: send emails, SMS messages, and notifications about promotions, bonuses, and news from the 23vip — only if you authorize it;
  • Experience personalization: tailor game recommendations, promotions, and content based on your preferences and usage history;
  • Satisfaction surveys: invite you to take part in surveys to help us improve our services — always on a voluntary basis.
04

Legal Basis for Data Processing

Under the LGPD, all personal data processing must be grounded in a legal basis. The 23vip processes your data based on the following legal bases set out in Article 7 of Law 13.709/2018:

  • Contract performance (Art. 7º, V): processing required to create and maintain your account, handle transactions, and deliver all platform services;
  • Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering, and responses to competent authorities as required by applicable law;
  • Legitimate interest (Art. 7º, IX): fraud prevention, platform security, and usage pattern analysis to improve our services — provided this does not prejudice your fundamental rights;
  • Consent (Art. 7, I): sending marketing communications and advanced experience personalization — you may withdraw this consent at any time.

When processing is based on consent, the 23vip will request this authorization in a clear and prominent manner, separately from other terms. Revoking consent is straightforward and does not affect the lawfulness of processing carried out before the revocation.

05

Data Sharing with Third Parties

The 23vip does not sell, rent, or trade players' personal data. Sharing with third parties occurs only in the situations described below, always with appropriate safeguards:

Essential Partners for Service Delivery

  • Payment processors: to process deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago — only the data strictly necessary for each transaction is shared;
  • Game providers: certified slots, Live Casino, and other game providers receive only the player's anonymous session identifier — not their full personal data;
  • Identity verification services: companies specializing in document validation and KYC to verify player identity prior to withdrawals;
  • IT infrastructure: cloud computing providers and servers that host the platform, bound by confidentiality agreements and security standards equivalent to our own.

Authorities & Legal Obligations

The 23vip may be legally required to share data with government authorities, regulatory bodies, or law enforcement when there is a court order, a substantiated official request, or a regulatory obligation. In such cases, we will share only the minimum information required by the legal determination.

What We Never Do

  • We do not sell data to advertising companies;
  • We do not share gaming or financial data with competing brands or platforms;
  • We do not allow partners to use your data for their own purposes beyond the service contracted with the 23vip.
06

Information Security

The 23vip implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction:

Technical Measures

  • 256-bit SSL encryption: all communication between your device and the servers of the 23vip is encrypted using TLS 1.3 protocol;
  • Encryption at rest: sensitive data stored in our databases is encrypted using bank-grade algorithms;
  • Two-factor authentication (2FA): available to all players as an additional layer of login security;
  • Continuous monitoring: intrusion detection systems and anomaly monitoring operate 24 hours a day to identify suspicious access attempts;
  • Card data isolation: credit and debit card data is processed directly by the PCI-DSS certified gateway, without passing through the servers of the 23vip.

Organizational Measures

  • Access to personal data restricted to employees with a legitimate need in the performance of their duties;
  • Regular information security and privacy training for all staff;
  • Formal security incident response procedure, including notification to the ANPD (National Data Protection Authority) and affected data subjects, as required by the LGPD.

Security incidents: In the event of a data breach that could pose a significant risk to affected users, 23vip will notify the ANPD and the individuals involved within the timeframe required by the LGPD, describing the nature of the incident and the steps taken to mitigate it.

07

Data Retention

The 23vip retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or for the minimum period required by law. The criteria that determine our retention periods are:

  • Active account data: retained for the full duration of the account and up to 5 years after closure, due to regulatory anti-money laundering obligations;
  • Financial transaction records: retained for a minimum of 5 years, as required by applicable Brazilian financial regulations;
  • KYC data: retained for the duration of the account and for up to 5 years after closure;
  • Betting records and gaming history: retained for up to 3 years after the last activity, and may be extended in the event of an ongoing dispute or investigation;
  • Marketing data: retained for as long as your consent remains active, and deleted within 30 days of withdrawal.

After the retention period, data is securely deleted or irreversibly anonymized so it can no longer be associated with you.

08

Cookies and Tracking Technologies

The 23vip uses cookies and similar technologies to enhance your browsing experience, keep your session active, analyze platform usage, and — with your consent — personalize content and offers. Below are the types of cookies used:

Essential Cookies (cannot be disabled)

These are required for the platform's basic operation — keeping your session logged in, processing transactions securely, and remembering your language preferences. Without these cookies, the platform cannot function properly.

Analytical Cookies (require consent)

They help us understand how players navigate the platform — which pages are most visited, where friction occurs, and how the experience can be improved. Data is aggregated and does not identify you individually.

Personalization Cookies (require consent)

Allow the 23vip tailor game and promotion recommendations based on your usage history. If you bet heavily on football through the Brasileirão, for example, we may highlight promotions relevant to that profile.

How to Manage Cookies

By accessing the 23vip for the first time, you will see a cookie consent notice that lets you accept essential cookies only or all types. You can update your preferences at any time in the privacy settings of your account dashboard. You can also manage cookies directly in your browser — keep in mind that disabling essential cookies may affect the platform's functionality.

09

Your Rights as a Data Subject (LGPD)

The Brazilian General Data Protection Law (LGPD) grants you a set of rights over your personal data processed by the 23vip. These rights can be exercised at any time, free of charge, through our support channel:

Right of Access

You can request a copy of all personal data 23vip holds about you, including how it is used and with whom it is shared.

Right to Rectification

If any personal data is incorrect, incomplete, or out of date, you can request an immediate correction or update in your account dashboard or through support.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed, when consent is withdrawn, or when processing is unlawful. Data retained due to legal obligations will be disclosed.

Right to Data Portability

You may request your data in a structured, interoperable format for transfer to another service provider, in accordance with ANPD regulations.

Right to Object

You may object to data processing based on legitimate interest by requesting that 23vip cease a specific use of your personal data.

Right to Information

You have the right to receive clear information about the public and private entities with which 23vip shares your data, and about the possibility of withholding consent.

10

Protection of Minors' Data

The 23vip is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from minors. If we identify that an account belongs to a person under 18, the account will be immediately closed and all associated data will be deleted, subject to the minimum retention period required by law for financial records.

If you become aware that a minor has used the 23vip, please contact us immediately at suporte@23vip.casino so that urgent action can be taken. The 23vip takes this matter extremely seriously.

11

International Data Transfers

In some cases, personal data may be processed on servers located outside Brazil — for example, by cloud infrastructure providers. When this occurs, the 23vip ensures the transfer meets the standards required by the LGPD, through:

  • Contracts with specific data protection clauses meeting standards equivalent to those required under Brazilian law;
  • Transfer only to countries that offer an adequate level of data protection, as assessed by the ANPD;
  • Use of internationally recognized certification mechanisms and seals where available.

The 23vip maintains an up-to-date record of all international data transfers and can provide specific information about destinations and safeguards upon request by the data subject.

12

Changes to This Privacy Policy

The 23vip may update this Privacy Policy periodically to reflect changes in our practices, the services we offer, or legal requirements. All material changes will be communicated by email and via a notice in your account dashboard at least 15 days in advance.

For changes required by law or urgent regulatory decisions, the notice period may be shorter, but you will be informed as soon as possible. The date of the last update is displayed at the top of this page. We recommend reviewing this Policy periodically.

Continued use of the platform after the effective date of the updated terms constitutes automatic acceptance of the changes. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data.

13

Contact, DPO & Privacy Channel

To exercise any of your rights under the LGPD, ask questions about how your data is processed, or report privacy concerns, please contact the 23vip through the channels below:

  • Live chat: available 24/7 directly from the platform dashboard;
  • General email: suporte@23vip.casino;
  • Privacy email (DPO): privacidade@23vip.casino — for specific requests related to personal data and the LGPD.

The 23vip has appointed a Data Protection Officer (DPO) responsible for overseeing internal LGPD compliance and serving as the communication channel with the National Data Protection Authority (ANPD). Requests sent to the privacy email will receive a response within 15 business days.

If you believe your rights as a data subject have not been adequately fulfilled by the 23vip, you have the right to file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados), as provided under Article 18, §1º of the LGPD.

Summary: What Data, Why, and How Long

A consolidated overview of the main categories of data processed by 23vip

Data Category Primary Purpose Legal Basis (LGPD) Retention
Registration data (name, CPF, email, mobile number) Account creation and management Contract performance Account lifetime + 5 years
KYC documents (national ID/driver's license, proof of address) Identity verification for withdrawals Legal obligation Account lifetime + 5 years
Financial transaction data (Pix, boleto, card) Deposit and withdrawal processing Contract performance / Legal obligation 5 years minimum
Betting & Gaming History VIP cashback calculation, fraud prevention Contract performance / Legitimate interest 3 years after last activity
Access and IP data Security, multi-account prevention Legitimate interest 12 months
Preferences & analytical cookies Platform experience improvement Consent Until consent is withdrawn
Marketing data (email, SMS) Promotional communications and bonuses Consent Until consent is withdrawn
Customer support records Dispute resolution, service improvement Legitimate interest 2 years after ticket closure

Your Data, Protected. Now Come Play at 23vip

With privacy guaranteed by the LGPD and the highest security standards, 23vip is the right place to bet with peace of mind. Free registration, deposits from R$ 20.00 via Pix, and up to R$ 1,000.00 in bonuses on your first deposit.

Data protected under the LGPD 256-bit SSL on all transactions Instant Pix with no fees 24/7 support in Portuguese

Privacy and Data Questions at 23vip

Straightforward answers to the most common questions about how we handle your data

No. 23vip does not sell, rent, or share your data with competing platforms or advertising companies. Sharing with third parties occurs only with partners strictly necessary to provide our services — payment processors such as Pix and card networks, game providers, and identity verification services — all bound by confidentiality agreements. Your data is never used for commercial purposes by third parties.

You can request deletion by emailing privacidade@23vip.casino with the subject line "Data deletion request — LGPD" or via the live chat in your account dashboard. 23vip will process your request within 15 business days. Please note: some data must be retained for a minimum legal period — such as financial transaction records for 5 years — but this will be communicated transparently in the response to your request, with a legal justification for each retained category.

23vip may use your betting history to personalize recommendations within the platform itself — such as highlighting football promotions if you bet frequently on the Brasileirão, for example. This only occurs if you consent to personalization cookies. This history is never shared with external advertisers. You can disable personalization in your account dashboard's privacy settings at any time, with no impact on normal platform use.

The Pix key you register for withdrawals is stored in encrypted form on our systems to streamline future transactions. You can request its removal or update at any time through support. Full credit or debit card details are never stored on 23vip servers — card transactions are processed directly by our PCI-DSS certified payment gateway, so sensitive data never passes through our systems.

Yes. You may accept only essential cookies — required for the platform's basic operation, such as keeping your session active and processing transactions — and decline analytical and personalization cookies. When you do, the platform works normally, but you will not receive personalized game or promotion recommendations. Your cookie preferences can be changed at any time in your account dashboard's privacy settings.

After account closure, 23vip retains certain categories of data for the minimum periods required by law — primarily financial transaction records (5 years) and identity verification data (5 years), due to anti-money laundering regulatory obligations. Marketing data is deleted immediately upon account closure. At the end of the mandatory retention period, all data is securely deleted or irreversibly anonymized.
Português