Data Protection

Privacy Policy of 678rio — Data, LGPD, and Transparency

At 678rio, your privacy isn't fine print — it's a real commitment. This document clearly explains what data we collect, why we collect it, how we use it, and what your rights are as a data subject, in full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018).

Last updated: June 1, 2026. Whenever this Policy is updated in a material way, you will be notified by email at least 15 days before the changes take effect.
OUR COMMITMENT

What This Policy Guarantees You

Before getting into the technical details, here are the six principles that guide data processing at 678rio.

Minimal & Necessary Data Collection
678rio collects only the data strictly necessary to operate the platform, process payments, meet legal obligations, and provide support. We do not collect unnecessary information or sell data for third-party advertising purposes.
256-Bit SSL Encryption
All data transmissions between your device and 678rio's servers are protected by 256-bit SSL encryption — the same standard used by Brazilian banks such as Itaú, Bradesco, and Nubank. Your data travels securely with every transaction.
No Data Sales to Third Parties
678rio does not sell, rent, or share your personal data with advertising companies, data brokers, or any unauthorized third party. Your data is used solely to operate the platform's services and fulfill legal obligations.
Your Rights Under the LGPD
You have the right to access, correct, port, and request deletion of your personal data at any time. 678rio fully respects the rights guaranteed by the LGPD and responds to requests within 15 business days of receipt.
Defined Retention Period
Data is retained only for as long as necessary for each purpose — or for the minimum period required by Brazilian law. Financial transaction data is kept for 5 years in compliance with the rules of the Banco Central do Brasil and the Receita Federal.
Direct Channel for Questions & Requests
Have questions about how your data is handled? 678rio's support team is available 24 hours a day via live chat and at contato@678rio.best. Formal LGPD-related requests are prioritized by the compliance team.
This Privacy Policy describes how 678rio collects, uses, stores, and protects its users' personal data. By using the platform — whether to bet on the Brasileirão, play at the live casino, or join Poker tournaments — you agree to the practices described in this document. Please read carefully and reach out via live chat if you have any questions.
Article 1

Data Controller Identification

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of personal data collected on the platform is the 678rio, operator of the sports betting and online casino platform available at 678rio.best.

The data controller is responsible for all decisions regarding the processing of your personal data — including which data is collected, for what purpose, how long it is retained, and with whom it may be shared. All of 678rio's data processing operations follow LGPD guidelines and the applicable regulations governing online betting and entertainment in Brazil.

To contact the data controller regarding personal data matters, please use the email: contato@678rio.best with the subject line "LGPD — Privacy".

Article 2

Personal Data We Collect

The 678rio collects personal data at different points during your interaction with the platform. Each category is detailed below:

2.1 Registration Data — information you provide when creating your account:

  • Full name, CPF, and date of birth;
  • Email address and mobile phone number;
  • Full residential address (street, number, neighborhood, city, state, and ZIP code);
  • Account password (stored in encrypted format — never in plain text).

2.2 Identity verification data (KYC) — collected during the account validation process for withdrawals or as required by regulation:

  • Copy of an official government-issued photo ID (national ID card, driver's license, or passport);
  • Selfie with ID document for identity confirmation;
  • Proof of address issued within the last 90 days;
  • Additional documents proving ownership of the payment method, when requested.

2.3 Financial Data — generated by your transactions on the platform:

  • Pix keys used for deposits and withdrawals;
  • Deposit, withdrawal, and transaction history;
  • Partial credit or debit card details (full card data is not stored by 678rio — it is processed directly by the payment operators in a secure environment);
  • TED account details (bank, branch, and account number) for withdrawals via bank transfer.

2.4 Usage and Behavioral Data — automatically generated during your use of the platform:

  • IP address, device type, operating system, and browser used;
  • Sports betting history (events, markets, amounts, results);
  • Gaming history in live casino, Poker, blackjack, and other game types;
  • Session duration, pages visited, and navigation sequences;
  • Access logs with date, time, and approximate location.

2.5 Communication data — generated through your contact with support:

  • Live chat conversation transcripts;
  • Emails exchanged with our team;
  • Support call records, where applicable.

Sensitive data: 678rio does not collect sensitive data as defined by the LGPD (racial origin, religious belief, health information, biometrics, etc.), except where strictly necessary to fulfill legal obligations, always with your explicit consent.

Article 3

Purpose of Data Processing

The 678rio processes your personal data exclusively for the purposes listed below. We never use your information for purposes incompatible with what is described in this Policy without your prior authorization.

  • Account operation: creating and maintaining your account, access authentication, interface personalization, and preference settings;
  • Payment processing: deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED; withdrawal processing and financial reconciliation;
  • Identity verification (KYC): age verification, CPF validation, fraud prevention, and compliance with the regulatory requirements applicable to the sector;
  • Financial crime prevention: detection and prevention of money laundering, terrorism financing, and other illicit activities, in accordance with Law No. 9.613/1998 and BACEN regulations;
  • User support: live chat and email support, dispute resolution, complaint analysis, and continuous service improvement;
  • Responsible gambling: monitoring of at-risk behavioral patterns, sending self-control alerts, and enforcing limit and self-exclusion tools;
  • Platform communications: sending notifications about bets, results, promotions, and relevant service updates — always with an opt-out option;
  • Product improvement: analysis of aggregated and anonymized data to improve the platform experience, fix issues, and develop new features;
  • Compliance with legal obligations: responding to requests from competent Brazilian public authorities, as required by law.
Article 4

Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing activity has a specific legal basis. The 678rio bases its data processing operations on the following legal grounds set out in Article 7 of the LGPD:

Purpose Legal Basis (Art. 7 LGPD)
Account creation and management, betting and gaming Contract performance (item V)
Processing of deposits and withdrawals (Pix, boleto, TED, etc.) Contract performance (item V)
Identity verification (KYC) and fraud prevention Compliance with a legal obligation (item II)
Anti-money laundering Compliance with a legal obligation (item II)
Marketing communications and promotions Consent (item I) — revocable at any time
Product improvement & behavior analysis Legitimate interest (item IX) — does not override your rights
Responding to requests from public authorities Compliance with a legal obligation (item II)

Where the legal basis is consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand. Consent can be withdrawn in your account settings or by emailing contato@678rio.best.

Article 5

Data Sharing with Third Parties

The 678rio does not sell your personal data. We share information only when strictly necessary, with the following categories of recipients:

  • Payment providers: institutions such as Banco do Brasil, Itaú, Bradesco, Nubank, credit and debit card operators, PicPay, and Mercado Pago — exclusively to process your financial transactions;
  • Game providers: companies such as Evolution, Pragmatic Live, and Playtech, which operate live casino studios and supply the games. These providers receive only the data required to record your bets and calculate results;
  • Identity verification services (KYC): specialized vendors in document verification and fraud prevention, who process verification data under strict confidentiality agreements;
  • Technology infrastructure: cloud and hosting service providers that maintain 678rio's servers — all located in data centers with internationally recognized security certifications;
  • Brazilian public authorities: Banco Central do Brasil, Receita Federal, Polícia Federal, and other competent authorities, when required by law or court order;
  • Auditors and legal advisors: professionals engaged for audit, legal, or accounting purposes, bound by professional confidentiality obligations.

All third parties with whom we share data are contractually required to handle your information with the same level of protection demanded by 678rio and the LGPD. No data is shared for behavioral advertising purposes or sold to data brokers.

Attention: In the event of a merger, acquisition, or corporate restructuring involving 678rio, your data may be transferred to the new controller. You will be notified in advance and will have the option to close your account before the transfer if you do not agree.

Article 6

Cookies, Pixels & Tracking Technologies

The 678rio uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. Below, we detail the types used:

  • Essential cookies: required for the platform to function — they keep your session active after login, remember your language preferences, and ensure secure browsing. They cannot be disabled without affecting how 678rio operates;
  • Performance cookies: collect aggregated, anonymous information about how users navigate the platform — most-visited pages, load times, errors encountered. Used exclusively to improve the experience;
  • Functionality cookies: remember personalized settings, such as the balance displayed on screen, live casino table preferences, or saved betting filters;
  • Analytics cookies: we use traffic analysis tools with anonymized data to understand platform usage behavior in aggregate — without identifying individual users.

You can manage your cookie preferences directly in your browser settings. Disabling essential cookies may affect critical platform features such as login and bet processing. Disabling non-essential cookies does not impact access to 678rio's games and services.

678rio does not use social media pixels to track user behavior outside the platform, nor does it share browsing data with third-party advertising platforms.

Article 7

Data Security & Protection

The 678rio adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key safeguards in place are:

  • 256-bit SSL Encryption on all connections between your device (mobile or desktop) and the platform's servers;
  • Encrypted storage of passwords using salted hash algorithms — no 678rio employee has access to your password in plain text;
  • Role-based access control — 678rio staff only access the data required to perform their specific roles;
  • Two-factor authentication (2FA) available for your account — we strongly recommend enabling it in your security settings;
  • Continuous monitoring of unauthorized access attempts, suspicious behavior patterns, and traffic anomalies;
  • Security testing periodic assessments carried out by external specialists to identify and fix vulnerabilities before they can be exploited;
  • Incident response plan — in the event of a data breach that may affect your rights, you will be notified within the timeframe established by the LGPD, with a description of what occurred and the measures taken.

Despite all these controls, no system is 100% breach-proof. 678rio strongly recommends using a strong, unique password for your account, enabling two-factor authentication, and never sharing your login credentials with third parties.

Article 8

Data Retention & Deletion Period

The 678rio retains your personal data only for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. The general retention periods are:

  • Registration data and active account: retained for as long as your account remains active. After closure, basic registration data is kept for 5 years for audit and legal compliance purposes;
  • Financial transaction history: retained for 5 years, as required by the Brazilian Central Bank and anti-money laundering regulations;
  • KYC verification documents: retained for 5 years after account closure or for the period required by industry regulations;
  • Betting and gaming history: retained for 5 years for dispute resolution, audits, and compliance with regulatory requirements;
  • Support communication data: retained for 2 years for service improvement and dispute resolution purposes;
  • Access and security logs: retained for 12 months for security analysis and fraud detection purposes.

After the applicable retention period, data is permanently deleted or irreversibly anonymized, making it impossible to identify the data subject. Requests for early deletion are subject to verification of minimum legal retention requirements.

Article 9

Your Rights as a Data Subject

The LGPD grants data subjects a set of rights that 678rio fully respects. Here is what you can request at any time:

Right What it means How to exercise
Access Request a copy of all personal data that 678rio holds about you. Email with subject line "LGPD — Access"
Correction Correct any incomplete, inaccurate, or outdated information in your account. Account settings or chat support
Deletion Request the deletion of data processed based on consent, subject to legally required retention periods. Email with subject line "LGPD — Deletion"
Portability Receive your data in a structured format for transfer to another service provider. Email with subject line "LGPD — Portability"
Objection Object to certain forms of processing, such as marketing communications. Account notification settings
Withdrawal of consent Withdraw previously given consent for non-essential purposes. Account settings or email
Information To be informed about which entities your data is shared with. Described in this Policy — supplemented via email

Requests are responded to within 15 business days. In complex cases requiring more detailed analysis, the deadline may be extended by up to 15 additional days, with prior notice to the data subject. All requests are processed free of charge.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been respected by 678rio.

Article 10

Protection of Minors' Data

The platform 678rio is intended exclusively for individuals aged 18 and over. We do not intentionally collect personal data from minors. All registrations undergo CPF verification and date of birth confirmation to ensure compliance with this restriction.

If you suspect that a minor has created a 678rio account using false information, please contact us immediately at contato@678rio.best. The account will be investigated and closed if the user's age is confirmed, and any deposits will be refunded to the identified legal guardian after verification.

If 678rio identifies that it has inadvertently collected data from a user under 18, that data will be deleted immediately, with no need for a request from the data subject or their guardian.

Article 11

International Data Transfer

Some of the service providers that 678rio works with — especially live casino providers such as Evolution and Pragmatic Live — operate servers outside Brazil. In these cases, international transfer of the data required for the games to function may occur.

All international data transfers carried out by 678rio comply with the requirements of the LGPD, specifically:

  • The recipient countries or organizations offer a level of data protection compatible with the LGPD;
  • Where no formal adequacy decision exists, the transfer is covered by specific contractual clauses that guarantee the data subject the same rights provided under Brazilian law;
  • Data transferred is limited to the minimum necessary for the operation of the contracted services.

You can request more information about international data transfers and the protection mechanisms in place by emailing contato@678rio.best.

Article 12

Changes to this Privacy Policy

The 678rio may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services offered. Any material change will be communicated at least 15 days in advance by email and in-platform notification.

The version in effect is always the one published on this page, with the last updated date shown at the top of the document. A history of previous versions of this Policy is available upon request to support.

Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data.

Article 13

Data Protection Officer (DPO) & Contact Channels

In compliance with the LGPD, the 678rio has appointed a Data Protection Officer (DPO) responsible for overseeing data processing practices and handling data subject requests.

To exercise your rights or ask questions about this Privacy Policy, please use the following channels:

  • DPO Email: contato@678rio.best — subject line "LGPD — [request type]";
  • Live chat: available on the platform 24 hours a day, seven days a week — for general inquiries and privacy request submissions;
  • FAQ: our FAQ covers answers to the most common privacy and data questions.

Responses to LGPD-related requests are provided within up to 15 business days from receipt. For complaints not resolved internally, you may contact the National Data Protection Authority (ANPD), as provided in Article 18, § 1 of the LGPD.

This document is governed by Brazilian law, in particular the LGPD (Law No. 13.709/2018), the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014), and all other regulations applicable to the online betting and entertainment sector in Brazil.

YOUR DATA FLOW

How Your Data Flows Within 678rio

A visual summary of how your personal data is handled at each stage of your experience on the platform.

Registration
You provide your name, CPF, email, and password. This data creates your account and is used for authentication, identification, and regulatory compliance.
Deposit & Withdrawal
Payment data (Pix keys, TED details, partial card numbers) is transmitted with SSL encryption directly to our partner financial institutions.
Games & Betting
Your betting and gaming history is stored for results calculation, dispute resolution, and regulatory compliance. Game providers receive only the minimum data required to operate the table.
Deletion
After the legally required retention period (generally 5 years), your data is permanently deleted or irreversibly anonymized.

Your Data Protected, Your Fun Guaranteed

Create your 678rio account with complete peace of mind. Pix payments, 24/7 support in Portuguese, and Live Casino with real dealers — all protected by encryption and fully LGPD compliant.

LGPD Compliant Create Account
RESPONSIBLE GAMBLING

Privacy and Responsible Gaming Go Hand in Hand at 678rio

Your gaming behavior data is also used to protect you — by identifying risk patterns and offering self-control tools.

Deposit Limit

Set a daily, weekly, or monthly deposit cap. Your transaction data is monitored to ensure the limit is automatically enforced.

Self-Exclusion

Request an account block for 24 hours, 7 days, or up to 6 months. 678rio retains only the data necessary to keep the block active during the requested period.

Protection for Minors

Mandatory CPF and date of birth verification prevents users under 18 from accessing the platform. All verification data is handled with strict confidentiality.

Loss Control

Your financial history is monitored to trigger notifications when you approach your configured loss limit — without being shared with third parties.

Bet within your limits and take care of your financial health. If you need support, call CVV: 188 or visit our Responsible Gambling.

PRIVACY

Privacy Questions? Talk to Our Team

If anything in this Privacy Policy is unclear, or you wish to exercise your rights as a data subject, our team is available 24 hours a day via live chat or at contato@678rio.best.

LGPD compliant 256-bit SSL Encryption No data selling
Português