Legal Document · Updated January 2026

Privacy Policy of 66bb – Your Data, Your Security

At 66bb, privacy isn't a formality — it's part of the product. Here you'll find exactly what data we collect, why we collect it, how we protect it, and what your rights as a data subject are, all in full compliance with the LGPD.

Last updated: January 2026

What This Policy Covers

A straightforward overview of the topics covered in this document before you read it in full.

Data Collected

What information 66bb collects during registration, platform use, and transactions — including name, CPF, email, phone number, financial data, and browsing data.

Purpose of Processing

Why each category of data is collected: service provision, identity verification, fraud prevention, compliance with legal obligations, and account communications.

Data Sharing

Who 66bb shares your data with — payment providers such as Pix, PicPay, and Mercado Pago, regulatory authorities, and game providers — and under what conditions.

Data Security

The technical and organizational measures 66bb has adopted to protect your information: 256-bit SSL encryption, access controls, 2FA, and continuous monitoring.

Your Rights as a Data Subject

Your rights under the LGPD: access, correction, deletion, portability, anonymization, and withdrawal of consent — and how to exercise each of them directly within the platform.

Retention & Deletion

How long your data is retained, when it is automatically deleted, and which categories must be kept for legal compliance even after account closure.


Recommended Reading Before Anything Else

This Privacy Policy describes how the 66bb platform collects, uses, stores, shares, and protects its users' personal data. By creating an account, making a deposit via Pix, or using any 66bb feature, you confirm that you have read and understood this document. If you have any questions, our support team is available in Portuguese via live chat, around the clock.

1Introduction & Data Controller

This Privacy Policy was drafted in accordance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and applies to all users registered on the 66bb platform, accessible at 66bb.casino.

The controller of the personal data processed by this platform is 66bb, responsible for defining the purposes and means of processing the information collected. To exercise any right provided under the LGPD, or for questions about this Policy, users may reach us by email suporte@66bb.casino or through the live chat available on the platform.

This Policy applies to the main website, online casino features (slots, roulette, crash games, live casino), Sports Betting (Brasileirão, UFC, NBB, e-sports, and other categories), and all related services offered by 66bb. Supplementary documents — such as the Terms and Conditions and the Responsible Gaming — together forming an integrated set of rules alongside this Policy.

2Personal Data Collected

66bb collects personal data in the following situations and categories:

At registration:

  • Full name, date of birth, and CPF;
  • Email address and mobile phone number;
  • Full residential address (zip code, street, city, state);
  • Access password (stored in encrypted form — never as plain text).

During identity verification (KYC):

  • Copy of a government-issued photo ID (RG, CNH, or passport);
  • Selfie of the account holder holding their ID document;
  • Recent proof of address (within the last 90 days);
  • Proof of ownership of payment method (where applicable).

While using the platform:

  • Deposit and withdrawal history — method, amount, date, and time;
  • Betting history and results — sport, event, market, stake, and winnings;
  • Casino game history — title, provider, amount wagered, and outcome;
  • Pix key, card details (tokenized by the payment processor), bank account for wire transfers.

Automatically while browsing:

  • IP address and country/region of access;
  • Browser type and version, and operating system;
  • Pages visited, session duration, and actions taken on the platform;
  • Session and preference cookies (see section 6).
Payment Data

66bb does not store full credit or debit card numbers. Card data is tokenized by the accredited payment processor, which operates in accordance with PCI-DSS standards. For Pix transactions, only the account holder's Pix key (CPF, email, mobile number, or random key) is stored for refund and ownership verification purposes.

3Legal Basis for Processing

All personal data processing carried out by 66bb has a defined legal basis under the LGPD. The applicable bases are:

Legal Basis (LGPD) Application at 66bb
Contract performance Account registration, processing of deposits and withdrawals via Pix, boleto, card, and TED, and the provision of gaming and Sports Betting services
Legal or regulatory obligation KYC identity verification, anti-money laundering compliance (COAF), legally required financial record retention
Legitimate interest Fraud prevention, platform security, usage pattern analysis for technical improvements, responsible gambling monitoring
Consent Promotional communications by email or mobile (marketing), use of non-essential cookies for behavioral analytics
Exercise of legal rights Data retention for defense in judicial, administrative, or arbitration proceedings

When processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawing consent for marketing communications does not affect your access to the platform's services.

4Purpose of Data Use

66bb uses the data it collects exclusively for the following purposes:

  • Account creation and management: registration, authentication, password recovery, account-related communications, and responsible gambling settings;
  • Service provision: process bets on the Brasileirão, UFC, NBB, and other sports; provide slots, roulette, crash games, and live casino; manage balances in BRL;
  • Payment processing: receiving deposits via Pix, PicPay, Mercado Pago, credit/debit card, boleto bancário, and TED transfer; processing withdrawals to verified accounts; preventing transaction fraud;
  • Identity verification (KYC/AML): confirm that the account holder is who they claim to be, prevent the platform from being used for money laundering, and comply with regulatory reporting obligations to COAF;
  • Responsible gambling: identify behavioral patterns consistent with problem gambling and trigger the protective measures outlined on the Responsible Gaming;
  • Platform security: detect and prevent unauthorized access, fraud attempts, the use of multiple accounts, and other activities that violate the Terms and Conditions;
  • Service improvement: analyze aggregated and anonymized browsing data to identify technical issues and improve the user experience — particularly on mobile, which accounts for over 90% of 66bb's traffic;
  • Communications: send security alerts, transaction confirmations, withdrawal notifications, and — where consent has been given — promotional and bonus communications.

66bb does not use your personal data to sell advertising profiles to third parties, for targeting through external ad networks, or for any purpose not described in this Policy without new explicit consent.

5Data Sharing with Third Parties

66bb may share personal data with the following categories of third parties, strictly to the extent necessary for each purpose:

  • Payment processors: the data required to process transactions via Pix (Banco Central do Brasil), PicPay, Mercado Pago, credit/debit card, and TED is shared with the respective payment providers, which operate under their own privacy policies and regulatory compliance frameworks;
  • Game providers: the username and internal account identifier are shared with slots, crash games, and live casino providers for game session personalization. CPF, banking details, and contact information are not shared with game providers;
  • Identity verification services: documents submitted during the KYC process are handled by a third-party provider specialized in identity verification, contracted by 66bb and bound by a confidentiality and LGPD compliance agreement;
  • Regulatory and judicial authorities: COAF (Financial Activities Control Council), the Federal Revenue Service, the Central Bank, and other competent authorities may receive data as required by law — no user consent is needed in such cases;
  • Infrastructure providers: cloud servers, security monitoring systems, and technical analytics tools contracted by 66bb, all bound by data processing agreements with protection clauses equivalent to those required by the LGPD.

66bb does not sell, rent, or transfer personal data of users to marketing companies, data brokers, advertising networks, or any third party for commercial purposes not directly related to the provision of the platform's services.

COAF Reporting

66bb is legally required to report suspicious transactions — or those meeting the reporting criteria defined by Brazilian anti-money laundering regulations — to COAF. This reporting may occur without prior notice to the data subject, as required by law.

6Cookies and Tracking Technologies

66bb uses cookies and similar technologies to ensure the platform runs correctly and to improve the user experience. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — maintaining login sessions, language preferences, bet slip data, and security settings. These cannot be disabled without affecting account access;
  • Functional cookies: store user preferences such as favorite games, most-visited sports categories, and display settings. They can be disabled, though doing so may affect some personalization features;
  • Analytical cookies: used to understand how users navigate the platform — which pages are most visited, where technical errors occur, and average session duration. Data is analyzed in aggregate and anonymized form. These require consent and may be declined;
  • Security cookies: help detect suspicious behavior, unauthorized access attempts, and the use of automation. They are part of 66bb's anti-fraud system and are classified as essential cookies.

The first time you access the platform, you will see a cookie consent banner where you can accept or customize your preferences. You can update your cookie settings at any time through your account dashboard or your browser settings.

66bb does not use third-party tracking cookies for advertising purposes — such as social media pixels or retargeting systems — without the user's explicit consent.

7Data Security

66bb implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

  • 256-bit SSL encryption across all communications between the user's device and the platform's servers — the same standard used by Brazil's largest banks;
  • Encryption at rest for sensitive data stored on servers, including KYC documents and identification data;
  • Two-factor authentication (2FA) mandatory for withdrawals and optional for login, with a code sent to your registered phone number;
  • Role-based access control: each 66bb team member can only access the data required for their specific role — no employee has unrestricted access to the full database;
  • 24/7 anti-fraud monitoring: automated system that identifies suspicious patterns in logins, transactions, and gameplay behavior in real time;
  • Regular encrypted backups with storage on infrastructure separate from the production environment;
  • Periodic penetration testing conducted by an independent security team to identify vulnerabilities before they can be exploited.

In the event of a security incident that poses a risk or causes actual harm to data subjects, 66bb will notify the National Data Protection Authority (ANPD) within the timeframe required by the LGPD and will inform affected users by email with all available details about the incident and the measures taken.

Your Role in Security

Account security is also your responsibility. Use a unique password for 66bb (do not reuse it on other sites), enable 2FA, never share your credentials, and always access the platform through the official address. 66bb staff will never ask for your password through any channel.

8Data Retention & Deletion

66bb retains your personal data for as long as necessary to fulfill the purposes described in this Policy or as required by law. The retention periods are:

Data Category Retention Period Justification
Registration data (name, CPF, email) 5 years after closure Legal obligation and fraud prevention
KYC Documents 5 years after closure AML/COAF rules and financial regulations
Financial transaction history 5 years after closure Civil Code and tax legislation
Betting and gaming history 2 years after account closure Fraud prevention and responsible gambling
Access and security logs 6 months Marco Civil da Internet (Law No. 12.965/2014)
Analytical cookie data 13 months Standard cookie cycle duration
Support communications 2 years Dispute resolution and support history

Once the applicable retention period ends, data is securely deleted or anonymized so that it can no longer be linked to the original data subject. Secure deletion follows technical procedures that prevent subsequent data recovery.

9Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as the data subject whose information is processed by 66bb, the following rights, which may be exercised at any time:

Access

Request a copy of all personal data 66bb holds about you, including your transaction history, bets, and submitted KYC documents.

Correction

Request the update or correction of incomplete, inaccurate, or outdated data — such as the email address, phone number, or billing address on your account.

Deletion

Request deletion of your data when processing is based on consent. Data retained under a legal obligation cannot be deleted before the minimum retention period.

Portability

Receive your data in a structured, interoperable format for transfer to another controller, where technically feasible and in accordance with terms regulated by the ANPD.

Anonymization

Request the anonymization of unnecessary or excessive data, where applicable and provided that doing so does not compromise legal retention obligations.

Withdrawal of Consent

Withdraw consent for processing based on that legal basis, such as receiving marketing communications, without affecting your access to the platform's services.

To exercise any of these rights, go to your account dashboard on 66bb, under the "Privacy & Data" section, or contact support via live chat or by email suporte@66bb.casino with the subject line "LGPD Rights". The response deadline is up to 15 business days, as provided under the LGPD.

If you believe your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD) through the official channel available at gov.br/anpd.

10Data of Minors

The 66bb platform is intended exclusively for users aged 18 and over. We do not intentionally collect personal data from individuals under the age of 18.

The registration process requires an active CPF and identity verification to confirm the user is of legal age. If 66bb identifies at any point that an account was created by a minor or that data belonging to a minor was provided, the account will be immediately closed and all related data deleted, except for records required for reporting to the relevant authorities in cases provided for by law.

If you are the legal guardian of a minor and believe they have created a 66bb account, please contact us immediately via support chat or by email at suporte@66bb.casino. We will treat these cases with the highest priority.

11International Data Transfers

Some service providers used by 66bb — such as cloud infrastructure and international payment processors — may operate servers outside Brazil. When this occurs, 66bb ensures that international transfers of personal data are carried out in compliance with LGPD requirements, specifically:

  • For countries or international organizations that offer a level of data protection deemed adequate by the ANPD; or
  • Through specific contractual clauses that guarantee a level of protection equivalent to that provided by the LGPD; or
  • Based on global corporate rules approved by the competent authority.

66bb does not transfer user data to countries or organizations that do not meet these criteria. Financial processing via Pix takes place entirely within the Banco Central do Brasil's infrastructure, with no international data transfers.

12Changes to This Privacy Policy

66bb may update this Privacy Policy from time to time to reflect changes in its services, applicable legislation, ANPD decisions, or internal data processing practices.

Relevant changes will be communicated to the user with a minimum notice period of 15 calendar days via the registered email address and/or through a prominent notice on the platform. Changes required by urgent legal or regulatory determination may take effect immediately, with simultaneous notice to the data subject.

The date of the last update is always shown at the top of this Policy and in the page header. Continued use of the platform after the notice period constitutes acceptance of the changes. If you do not agree with the new terms, you must request account closure before the changes take effect.

13Contact, DPO & Privacy Channel

66bb has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that process personal data at scale. The DPO serves as the communication channel between data subjects, 66bb, and the ANPD.

To contact 66bb's DPO or privacy channel:

  • Email: suporte@66bb.casino (subject: "Privacy / LGPD");
  • Live chat: available on the platform 24 hours a day, 7 days a week, in Portuguese;
  • Account dashboard: "Privacy & Data" section for access, correction, deletion, and portability requests.

The response time for LGPD rights requests is up to 15 business days from receipt of the complete request. For general questions about this Policy handled by support, the response time is up to 3 business days.

Ombudsman & Complaints

If your privacy request goes unanswered within the required timeframe or is resolved unsatisfactorily, you have the right to file a complaint with the ANPD through the official portal at gov.br/anpd. Before doing so, we recommend trying to resolve the matter through 66bb's ombudsman channel — we respond to every formal complaint with a documented position and a defined timeline.


Frequently Asked Questions About Privacy at 66bb

Straightforward answers to the most common questions about how we handle your data.

No. 66bb does not sell, rent, transfer, or otherwise commercialize users' personal data to third parties under any circumstances. Your data is shared only with service providers directly involved in operating the platform — payment processors such as Pix, PicPay, and Mercado Pago, KYC identity verification providers, and partner game providers — and only to the extent strictly necessary for each purpose. Any sharing outside these situations requires your prior explicit consent. 66bb does not participate in advertising networks based on financial behavior data.

You can request deletion of your data at any time. However, not all data can be deleted immediately — some must be retained due to legal obligations. Financial transaction data (deposits and withdrawals via Pix, boleto, and card), KYC documents, and registration data must be kept for up to 5 years after account closure, as required by Brazilian anti-money laundering legislation and the Civil Code. Data that does not fall under any legal retention obligation — such as browsing preferences, support history, and cookie data — is deleted within 30 days of the request. After the legal retention period expires, all data is permanently deleted.

No. 66bb does not have access to your phone's browsing history, other apps, contacts, camera, microphone, photo gallery, or any data outside the scope of the platform. Since 66bb runs through your mobile browser — with no installed app — it only accesses what you provide directly within the platform. The only data collected automatically is your IP address, browser type, and activity within 66bb's own website, as described in the cookies section of this Policy. No data is collected when you are not using the platform.

You can unsubscribe from 66bb promotional and marketing emails at any time in three ways: by clicking the "Unsubscribe" link in the footer of any marketing email you receive; by going to your account dashboard under "Notifications & Preferences" and turning off marketing communications; or by requesting it directly via support chat or at suporte@66bb.casino. The cancellation is processed within 72 hours. After that, you will no longer receive promotional emails — but you will continue to receive essential account communications, such as withdrawal confirmations, security alerts, and identity verification notifications, as these are necessary for service provision and cannot be disabled.

In the event of a merger, acquisition, incorporation, or any other form of transfer of 66bb's operations to another entity, users' personal data may be transferred as part of the transaction. In such cases, 66bb commits to: (1) notify users at least 30 days in advance of the change in data controller; (2) ensure the new entity maintains a level of protection equivalent to or greater than that of this Policy; (3) give users the option to request deletion of their data before the transfer if they do not agree with the new terms. The transfer will only take place with entities that expressly commit to LGPD compliance and to the confidentiality and security obligations assumed by 66bb.

Your Rights Summed Up in One Line

You have the right to know exactly what data 66bb holds about you, to correct it if it's inaccurate, to port it to another service, and to request its deletion when there is no legal obligation to retain it — all guaranteed under the General Data Protection Law (LGPD — Law No. 13.709/2018).

To exercise any of these rights, access the account dashboard or reach out via live chat. For more complex matters or formal complaints, email suporte@66bb.casino with the subject line "LGPD Rights". We respond within 15 business days with a documented position. You may also consult our Terms and Conditions to understand the full set of platform rules.


Transparent Privacy, Real Fun.

Now that you know how 66bb protects your data, create your account in under 2 minutes and access slots, crash games, Brasileirão betting, and much more — all in BRL, with withdrawals via Pix.


Português