Legal Document – LGPD

333ola Privacy Policy – Data Protection

The 333ola takes the protection of your personal data seriously. This Privacy Policy clearly explains what information we collect, how we use it, who we share it with, and what your rights are as a data subject — all in accordance with the General Data Protection Law (LGPD – Lei nº 13.709/2018).

Last updated: January 2026
Full LGPD Compliance
256-bit SSL Encryption
Data never sold to third parties

Privacy at 333ola in 6 Key Points

The key points on how 333ola protects your data, before you read the full document

256-bit SSL Encryption

All communication between your device and 333ola's servers is protected by SSL 256-bit encryption — the same standard used by Brazilian banks such as Nubank, Itaú, and Bradesco. Your registration data, betting history, and Pix payment information are always transmitted encrypted.

Data Never Sold

333ola does not sell, rent, or transfer your personal data to advertisers, data brokers, or any third party for commercial purposes. Your CPF, phone number, email, and betting history belong to you — and are used solely to operate your account and meet legal obligations.

You Control Your Data

Under the LGPD, you may at any time access, correct, export, or request the deletion of your personal data by emailing contato@333ola.net. 333ola responds to data subject requests within up to 15 business days, as required by Brazilian law.

Full LGPD Compliance

333ola operates in compliance with the General Data Protection Law (Law No. 13.709/2018) and maintains a designated Data Protection Officer (DPO). All data collection, storage, and processing procedures have been reviewed and aligned with the LGPD.

Secure Storage in Brazil

Data belonging to 333ola's Brazilian users is stored on security-certified servers with automatic backups. Internal access to data is role-restricted, and every access is recorded in auditable logs, ensuring full traceability and accountability.

Communications Only with Consent

Promotional emails, push notifications, and marketing SMS are only sent with your explicit consent. You may withdraw that consent at any time through your account settings or by clicking "unsubscribe" in any email you receive, without affecting your account in any way.

How We Handle Your Data

From registration to withdrawal, every step has a clear purpose and a defined legal basis under the LGPD.

1
You provide your data at registration

Full name, CPF, date of birth, email, phone number, and address — collected to create and verify your 333ola account.

2
We process data to operate your account

Your data enables Sports Betting, Live Casino, Pix deposits, withdrawals, and access to your betting history.

3
We share only what is necessary

Only with technical providers (payment, KYC) and when required by law — never for third-party commercial purposes.

4
We retain data for the minimum legal period

Financial transaction data is retained for 5 years in accordance with Brazilian anti-money laundering legislation.

5
Exercise your rights whenever you choose

Access, correct, export, or delete your data via email — responded to within 15 business days by the 333ola team.

Your Rights as a Data Subject

The LGPD grants you the following rights regarding your personal data at 333ola:

Right What this means in practice
Access Request a complete copy of all personal data that 333ola holds about you.
Correction Request the update or correction of incomplete, inaccurate, or outdated information.
Anonymization Request that unnecessary data be anonymized so it can no longer be used to identify you.
Portability Receive your data in a structured format for transfer to another service or platform.
Deletion Request the deletion of data processed on the basis of consent, subject to mandatory legal retention periods.
Consent Withdrawal Withdraw at any time the consent you gave for marketing communications and non-essential data use.
Information Know who your data has been shared with and for which specific purposes it has been used.
Objection Object to data processing carried out without consent that causes harm or infringes upon your rights.

To exercise any of these rights, send an email to contato@333ola.net with the subject line "LGPD Rights" and the type of request. 333ola responds within 15 business days, as required by Law No. 13,709/2018.

1. Who Is the Data Controller

The data controller responsible for processing your personal data is 333ola, a Sports Betting and online casino platform operating in Brazil and accessible at https://333ola.net.

333ola has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. The DPO can be reached by email at contato@333ola.net, with the subject line "Data Officer".

333ola processes your data on the following legal bases established by the LGPD: contract performance (art. 7, V), compliance with a legal obligation (art. 7, II), legitimate interest (art. 7, IX), and consent (art. 7, I) for marketing communications.

2. What Data We Collect

2.1 Data You Provide Directly

When you create your account and use 333ola's services, you provide us with:

  • Registration data: full name, CPF, date of birth, email, phone number, and residential address;
  • Identity verification data (KYC): copy of government-issued ID or driver's license, verification selfie, proof of address — required before your first withdrawal;
  • Financial data: Pix key, credit or debit card details, bank account information for TED transfers — we never store your full card number, only partial data for identification purposes;
  • Communications: content of messages exchanged with support via live chat or email.

2.2 Automatically Collected Data

When you access the platform, we automatically collect:

  • IP address and approximate geolocation (state/city);
  • Browser type and version, operating system, and device (mobile, tablet, or desktop);
  • Pages visited, session duration, and interactions on the platform;
  • Full history of bets, deposits, withdrawals, and transactions;
  • Cookie data and data from similar tracking technologies (detailed in Section 8).

2.3 Third-Party Data

In specific cases, 333ola may receive data about you from third parties, such as:

  • Identity verification bureaus to confirm the authenticity of your CPF and documents;
  • Payment providers (Pix, cards, PicPay, Mercado Pago) to confirm transactions;
  • Lists of politically exposed persons and legal restrictions for compliance with fraud prevention obligations.

3. How We Use Your Data

333ola uses your personal data exclusively for the following purposes:

  • Create, verify, and operate your user account on the platform;
  • Process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfer;
  • Record and settle Sports Betting on the Brasileirão, Copa do Brasil, Libertadores, and other events;
  • Provide access to live casino, slots, crash games, and other games on the platform;
  • Verify your identity and age (KYC) in compliance with Brazilian law;
  • Prevent fraud, money laundering, access by minors, and other unlawful activities;
  • Comply with legal obligations and respond to requests from competent authorities;
  • Provide customer support via live chat and email;
  • Send mandatory transactional communications (deposit confirmation, processed withdrawal, password change);
  • Send marketing communications and promotions, only with your explicit consent;
  • Improve the platform based on aggregated, anonymized usage analysis.

333ola never uses your data to build behavioral profiles for sale to third parties, for behavioral advertising outside the platform, or for any purpose not listed in this Policy.

4. Data Sharing

333ola shares your personal data only when strictly necessary and always on a defined legal basis:

4.1 Technical Service Providers

We share data with companies that help us operate the platform, including:

  • Payment processors: to confirm and process transactions via Pix, card, PicPay, and Mercado Pago — only the data required for each transaction;
  • Identity verification providers (KYC): to verify the authenticity of submitted documents;
  • Casino game providers: username and balance required to operate live tables and slots — no full identification data transmitted;
  • IT infrastructure providers: servers and storage systems that process data under a confidentiality agreement.

All providers are contractually required to process your data solely for the specific purposes agreed upon, with confidentiality and security measures equivalent to those adopted by 333ola.

4.2 Legal Obligations

333ola may disclose your data to Brazilian government authorities when legally required to do so, such as in money laundering investigations (Lei nº 9.613/1998), financial fraud cases, or pursuant to a court order. In such cases, you will be notified whenever the law permits.

333ola does not perform international transfer of personal data to countries without an adequate level of protection, as assessed by the ANPD (Autoridade Nacional de Proteção de Dados).

5. How Long We Retain Your Data

333ola retains your data for as long as necessary for the stated purposes and to meet legal obligations:

  • Registration details and active account: retained for as long as your account is active and for up to 5 years after it is closed;
  • Financial transaction data (deposits and withdrawals via Pix, boleto, card): 5 years, as required by anti-money laundering legislation (Law No. 9.613/1998);
  • Identity verification data (KYC): 5 years after account closure or the last transaction;
  • Betting history: 5 years for audit and dispute resolution purposes;
  • Support communications: 2 years for quality assurance and resolution of any disputes;
  • Non-essential cookie data: in accordance with the expiry period of each cookie, as detailed in Section 8.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized.

6. Data Security

333ola applies robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: SSL/TLS 256-bit encryption on all communications between your device and our servers;
  • Encryption at rest: sensitive data stored with AES-256 encryption;
  • Role-based access control: only employees with a proven operational need can access personal data, and all access is logged;
  • Multi-factor authentication: available to users and mandatory for employees with access to internal systems;
  • Security testing: we conduct penetration testing (pentest) and vulnerability assessments on a regular basis;
  • Incident response plan: In the event of a data breach that poses a risk to data subjects, we notify the ANPD and affected users within the timeframe required by the LGPD.

Never share your password with anyone, including 333ola support agents. No platform employee will ever ask for your password under any circumstances. If you receive such a request, treat it as a phishing attempt and notify support immediately.

7. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (Law No. 13.709/2018) grants you, as a data subject, the following rights regarding information processed by 333ola:

7.1 How to Exercise Your Rights

To exercise any of the rights listed in this section, send an email to contato@333ola.net with:

  • Subject: "LGPD Rights – [type of request]";
  • Your full name and CPF registered with 333ola;
  • A clear description of what you are requesting;
  • A copy of a photo ID document for identity verification.

333ola will respond to your request within 15 business days. For complex requests, the deadline may be extended by an additional 15 business days with prior notice.

7.2 Filing a Complaint with the ANPD

If you believe your rights have not been properly addressed by 333ola, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

8. Cookies and Tracking Technologies

333ola uses cookies and similar technologies to enhance your experience on the platform, ensure essential functionality, and — with your consent — analyze usage patterns.

8.1 Types of Cookies Used

  • Essential cookies: required for the platform's basic functionality — authentication, session management, and language preferences. They cannot be disabled without affecting your experience on 333ola;
  • Performance cookies: collect anonymized data about how you navigate the platform so we can identify and fix usability issues;
  • Functionality cookies: remember your preferences, such as your favorite sport on the home page or your selected language;
  • Analytics cookies: used with web traffic analytics tools to understand usage patterns in aggregate — always with anonymized data.

8.2 Cookie Management

The first time you access 333ola, you will see a cookie consent banner where you can accept all cookies, accept essential cookies only, or customize your preferences. You can update your cookie preferences at any time through your browser settings or in the preferences section of your 333ola account.

333ola does not use third-party cookies for behavioral advertising outside the platform. Analytics cookies are configured in anonymization mode, with no identifiable data transmitted to external services.

9. Protection of Minors

333ola is a platform intended exclusively for users aged 18 and over who are residents of Brazil. The intentional collection of data from minors is strictly prohibited and contrary to the company's values and policies.

During registration, we ask for your date of birth and CPF to verify that you are of legal age. Additional verification may be requested at any time. If we identify that an account was created by someone under 18, it will be immediately closed, all data will be deleted, and any deposited funds will be returned to the original payment method.

If you become aware that a minor is using 333ola, please contact us immediately at contato@333ola.net. We take this matter with the utmost seriousness.

If you have children or teenagers at home, we recommend using parental control tools on mobile and desktop devices to restrict access to betting platforms. 333ola supports initiatives that protect minors in digital environments.

10. Updates to This Privacy Policy

333ola may update this Privacy Policy periodically to reflect changes in Brazilian data protection legislation, in how we operate our services, or in the technologies we use.

Significant changes will be communicated at least 15 days in advance by registered email and in-platform notification. The "last updated" date at the top of this page will always reflect the most recent version.

Your continued use of 333ola after the effective date of an updated Policy indicates that you have been made aware of the changes. If you disagree with any change, you may close your account before the effective date without penalty and request the deletion of your data.

For questions about this Policy or how 333ola handles your data, contact us via the 24-hour live chat on the platform or by email at contato@333ola.net. Our team responds in Brazilian Portuguese.

Version: January 2026. This document supersedes all previous versions of the 333ola Privacy Policy.

LGPD Compliance and Data Protection at 333ola

333ola operates in full compliance with the General Data Protection Law (LGPD – Lei nº 13.709/2018). Betting is permitted only for individuals aged 18 and over who reside in Brazil. All transactions are protected by 256-bit SSL encryption. See also our Terms and Conditions and the Responsible Gambling.

Your Data Protected. Your Bet Secure.

At 333ola, privacy and security are not just promises — they are daily, audited practices. Sign up, deposit via Pix, and enjoy the Brasileirão knowing your data is in safe hands.

For users aged 18 and over residing in Brazil only. Please gamble responsibly.

Português