35ttt Privacy Policy — LGPD and Your Data

At 35ttt 35ttt, your personal data is handled with care and in full compliance with Brazil's General Data Protection Law (LGPD — Lei 13.709/2018). This policy clearly explains what we collect, how we use it, and what rights you hold as a data subject.

Last updated: January 1, 2026

LGPD
Compliance with Brazilian law
SSL
Encryption on all pages
0
Sale of data to third parties
8
Rights guaranteed under the LGPD

How 35ttt Protects Your Privacy

Six practices that keep your data safe on the platform

End-to-End Encryption

All pages and transactions on the 35ttt use SSL/TLS protocol. Your registration data, passwords, banking information, and betting history are always transmitted encrypted — no one can intercept what you send to the platform.

We Never Sell Your Data

The 35ttt does not sell, rent, or share your personal data with marketing companies, email lists, or any third party without your explicit consent. Your data belongs to you — full stop.

Two-Factor Authentication

The 35ttt offers two-factor authentication (2FA) for all accounts. Enabling 2FA ensures that only you can access your account, even if your password is compromised for any external reason.

Your 8 Rights Under the LGPD

The LGPD grants data subjects eight rights over their data — access, correction, portability, deletion, and more. At 35ttt 35ttt, you can exercise all of these rights through support or your account settings, without any red tape.

Protected Payment Data

The 35ttt does not store full credit or debit card details on its servers. Transactions are processed by PCI-DSS certified providers. For Pix withdrawals, only the registered key is stored — never your full banking details.

Minimum Data Retention

The 35ttt retains your data only for as long as necessary to fulfill the purposes described in this policy or to meet legal obligations. Once the minimum period required by law has passed, data is anonymized or securely deleted.

1Who Controls Your Data

The controller of personal data collected through the platform 35ttt — available at 35ttt.net and in any associated official application — is the operator of the service, referred to in this policy as 35ttt.

For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), the 35ttt acts as the controller, determining the purposes and means of processing the personal data of the platform's Brazilian users. This Privacy Policy transparently describes all data collection, use, storage, sharing, and deletion practices adopted by the 35ttt.

By creating an account, making a deposit, placing bets, or accessing any feature of the platform, you acknowledge that you have read and understood this policy and consent to the processing of your data as described herein. If you have any questions, please contact our Data Protection Officer (DPO) at privacidade@35ttt.net.

2What Data We Collect

The 35ttt collects different categories of personal data depending on how you use the platform:

Registration data:

  • Full name and date of birth.
  • CPF (Cadastro de Pessoa Física) issued by the Brazilian Federal Revenue Service (Receita Federal).
  • Email address and mobile phone number.
  • Full residential address (for KYC verification purposes).
  • Government-issued photo ID (RG, CNH, or passport), when requested during identity verification.

Financial and transaction data:

  • Pix key registered for withdrawals.
  • Deposit and withdrawal history (amount, method, date, and time).
  • Betting and game history on the platform.
  • Account balance and transaction history.

Usage and browsing data:

  • IP address and approximate IP-based location.
  • Device type, operating system, and browser used.
  • Pages visited, session duration, and clicks on the platform.
  • Betting and gaming preferences.
  • Cookie data and similar technologies (described in section 6).

Communications:

  • Support contact history (chat, email, or WhatsApp).
  • Communication preferences and notifications.

Important: the 35ttt does not collect data in sensitive categories such as ethnic origin, religious beliefs, political opinion, or biometric data, except where legislation requires biometric identity verification for security or fraud prevention purposes.

3How We Use Your Data

The 35ttt uses your personal data exclusively for the following legitimate purposes:

  • Contract performance: create and maintain your account, process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED bank transfer, record bets, and settle winning payments.
  • Identity verification (KYC): fulfill legal obligations related to age and identity verification, anti-money laundering, and regulatory compliance.
  • Communication: send transaction confirmations, security notifications, account updates, and — with your consent — promotional communications about 35ttt offers 35ttt.
  • Customer support: respond to inquiries, resolve disputes, and improve service quality based on interaction history.
  • Security and fraud prevention: detect and investigate suspicious activity, platform misuse, unauthorized access attempts, and behavior that violates the Terms and Conditions.
  • Responsible gambling: monitor usage patterns to identify at-risk behavior and offer proactive support when needed.
  • Platform improvement: analyze aggregated and anonymized usage data to improve features, performance, and the user experience on the 35ttt.
  • Legal compliance: comply with obligations imposed by Brazilian law, including requests from competent judicial or regulatory authorities.

The 35ttt does not use your data for fully automated decision-making that produces significant legal effects without the possibility of human review, as guaranteed by the LGPD.

4Legal Basis for Processing (LGPD)

All personal data processing by the 35ttt is grounded in at least one of the legal bases established by the LGPD:

  • Contract performance (art. 7, V): the processing is necessary for the performance of the contract to which you are a party — specifically, the provision of Sports Betting and casino services by the 35ttt. This includes the processing of financial transactions, betting records, and account maintenance.
  • Compliance with a legal obligation (art. 7, II): certain categories of data are processed to comply with legal obligations applicable to the 35ttt, such as anti-money laundering regulations, age verification requirements, and financial record retention obligations.
  • Legitimate interest (art. 7º, IX): usage and browsing data are processed on the basis of the legitimate interest of the 35ttt for security, fraud prevention, platform improvement, and responsible gambling purposes — always respecting the interests and rights of data subjects.
  • Consent (art. 7º, I): for sending promotional communications and marketing, the 35ttt requests your express consent, which can be withdrawn at any time in your account settings or by contacting support.

5Data Sharing with Third Parties

The 35ttt does not sell or rent your personal data to third parties under any circumstances. Data sharing occurs only when strictly necessary and in the following situations:

  • Payment providers: data required to process deposits and withdrawals is shared with certified payment providers (such as PCI-DSS-compliant card processors and partner financial institutions). These providers act as data operators and are contractually obligated to use your data solely for payment processing purposes.
  • Identity verification providers (KYC): documents and personal data may be shared with certified identity verification providers to meet regulatory obligations. These partners are bound by confidentiality and data protection agreements.
  • Casino game providers: for games to function, minimal session data is shared with game providers (such as an anonymous session identifier). No personally identifiable data is transmitted beyond what is strictly necessary to run the game.
  • Competent authorities: the 35ttt may disclose personal data in response to legitimate requests from Brazilian judicial, law enforcement, or regulatory authorities, as required by law.
  • Fraud prevention: in cases of suspected money laundering or criminal activity, the 35ttt may report information to the competent authorities in accordance with legal obligations.

Under no circumstances will the 35ttt shares your data with third-party advertising or marketing companies without your explicit and revocable consent.

6Cookies and Tracking Technologies

The 35ttt uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are:

  • Essential cookies: required for the basic operation of the platform — session authentication, language preferences, and form security. They cannot be disabled without compromising the proper functioning of the service.
  • Performance cookies: collect anonymized data on how users navigate the platform — pages visited, session duration, and clicks. Used to identify issues and improve performance. They do not collect any identifiable personal data.
  • Functional cookies: remember your usage preferences — such as favorite bets or display settings — to personalize your experience on the 35ttt.
  • Analytics cookies: used by web analytics tools to understand user behavior at an aggregate level. Data is processed in anonymized form.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may prevent the platform from functioning properly. For non-essential cookies, you can adjust your preferences without affecting the core features of the 35ttt.

7Information Security

The 35ttt implements strict technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • SSL/TLS encryption: all communications between your device and the servers of the 35ttt are encrypted with up-to-date SSL/TLS protocol.
  • Secure storage: sensitive data is stored with encryption at rest. Passwords are stored exclusively in hashed format using a modern algorithm — no employee of the 35ttt has access to your password in plain text.
  • Two-factor authentication (2FA): available for all accounts, adds an extra layer of protection against unauthorized access.
  • Active monitoring: automated systems monitor suspicious access attempts, logins from unusual locations, and patterns that may indicate account compromise.
  • Restricted access: only employees of the 35ttt with a legitimate need have access to users' personal data, under a contractual obligation of confidentiality.
  • Payment data: the 35ttt does not store full credit or debit card details. Transactions are processed by PCI-DSS certified providers.

In the event of a security incident that may affect your personal data, the 35ttt will notify affected data subjects and the National Data Protection Authority (ANPD) within the timeframes set out by the LGPD.

8How Long We Retain Your Data

The 35ttt retains your personal data only for as long as necessary to fulfill the purposes described in this policy, observing the minimum periods required by Brazilian law:

  • Registration data and active account: retained for the full duration of the contractual relationship — that is, for as long as your account remains active on the 35ttt.
  • Financial and transaction data: retained for a minimum of 5 years after the transaction, as required by tax and anti-money laundering legislation.
  • Betting records: retained for a minimum of 5 years for audit and regulatory compliance purposes.
  • Identity verification documents (KYC): retained for 5 years after account closure, in accordance with anti-money laundering obligations.
  • Browsing data and cookies: retained for a maximum of 13 months, after which they are anonymized or deleted.
  • Support history: maintained by 2 years after the last contact, for service improvement and dispute resolution purposes.

Once the retention periods above have expired, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymized data may be retained indefinitely for statistical purposes.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose data is processed by the 35ttt, the following rights, which may be exercised at any time:

Right What does How to exercise
Access Find out what data 35ttt holds about you Support or account settings
Correction Correct incomplete, inaccurate, or outdated data Account settings or support
Anonymization Anonymize your data when it is no longer needed Support request
Portability Receive your data in a structured, interoperable format Request submitted to the DPO by email
Deletion Delete data processed on the basis of consent Request to support or DPO
Information Know who your data has been shared with Support request
Revocation Withdraw consent given for specific processing activities Account settings or support
Objection Object to processing carried out on the basis of legitimate interest Request submitted to the DPO by email

To exercise any of these rights, contact 35ttt support 35ttt via chat or by emailing privacidade@35ttt.net. The 35ttt will respond to all requests within a maximum of 15 days calendar days, as set out under the LGPD.

If you have a complaint about how your data is handled, you may also contact the National Data Protection Authority (ANPD) — the federal body responsible for enforcing the LGPD in Brazil.

10Protection of Minors

The platform 35ttt is intended exclusively for individuals aged 18 and over. The 35ttt does not knowingly collect or process personal data from minors.

The registration process includes mandatory date-of-birth verification, and the KYC identity verification requires an official government-issued photo ID confirming the account holder is of legal age. Any account identified as belonging to a minor is immediately closed, the data is deleted, and the account balance is returned to the legal guardian upon proof of guardianship.

If you suspect that a minor has created an account on 35ttt, immediately notify support so that the appropriate measures can be taken without delay.

11International Data Transfers

In some cases, the platform's operation 35ttt may involve transferring data to servers or providers located outside Brazil — particularly cloud infrastructure providers, casino game providers, and analytics tools.

The 35ttt ensures that all international data transfers are carried out in compliance with Article 33 of the LGPD, through:

  • Transfer to countries with an adequate level of data protection recognized by the ANPD.
  • Specific data protection contractual clauses with the recipient, ensuring a level of protection equivalent to that of the LGPD.
  • Global corporate privacy policies covering all countries where the group operates.

Under no circumstances is Brazilian users' data transferred to jurisdictions that do not provide adequate protection guarantees, as assessed periodically by the 35ttt.

12Changes to This Privacy Policy

The 35ttt may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, or updates to applicable Brazilian legislation.

When relevant changes are made, the 35ttt will notify users with a minimum of 7 calendar days' notice through:

  • Prominent notice on the platform's homepage.
  • Email to the address registered on the account.
  • Notification via the official 35ttt app 35ttt.

Continued use of the platform after the effective date of the updated policy constitutes acceptance of the changes. If you do not agree with the changes, you may close your account before the effective date and request deletion of your personal data, subject to legally required retention periods.

The date of the last update to this policy is always shown at the top of this page. We recommend revisiting this policy periodically to stay informed about the privacy practices of the 35ttt.

13Contact Our Data Protection Officer (DPO)

The 35ttt has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for overseeing compliance with this policy and serving as a communication channel between data subjects, the 35ttt and the ANPD.

To contact the DPO of the 35ttt:

  • Email: privacidade@35ttt.net
  • Response time: up to 15 calendar days for requests related to data subject rights.
  • Language: support in Portuguese, provided by a qualified data protection professional.

For general support questions — such as inquiries about your account, deposits, withdrawals, or bets — please use the live chat or email suporte@35ttt.net. The DPO channel is exclusively for matters related to personal data protection and the exercise of rights under the LGPD.

Relationship with other documents

This Privacy Policy should be read together with our Terms and Conditions and the rules of Responsible Gambling. In the event of a conflict between documents, the more specific text applicable to the situation at hand shall prevail.

Our Commitment to Your Privacy

The principles that guide data handling at 35ttt every day

Data Minimization

The 35ttt collects only the data strictly necessary for each purpose. If a feature can be delivered with less information, that is how it is done. We do not collect data as a precaution or for undefined purposes.

Full Transparency

This policy explains in plain, straightforward language exactly what the 35ttt does with your data — without obscure legal language or intentionally confusing wording. You have the right to understand what happens to your information.

Security by Design

Data protection has been built into the platform's design 35ttt from the ground up — not as an afterthought. Encryption, access controls, and security monitoring are built into the core architecture of the system.

Control in Your Hands

You decide what the 35ttt can do with your data beyond what is strictly necessary for the contract. Marketing communications, non-essential cookies, and any consent-based processing can be withdrawn at any time.

LGPD in the Context of Online Betting in Brazil

Brazil's General Data Protection Law came into force in September 2020 and transformed the way digital companies — including Sports Betting platforms like the 35ttt — handle their users' information. Before the LGPD, there was no unified legal framework guaranteeing Brazilian citizens control over their own personal data. Today, these rights are protected by law, and non-compliance carries severe administrative sanctions enforced by the National Data Protection Authority (ANPD).

For the 35ttt user 35ttt, this means something concrete: you have the legal right to know exactly what data the platform holds about you, you can request the correction of inaccurate information, request portability to another platform, and request the deletion of your data when it is no longer needed — subject to the minimum retention periods required by law for security and financial audit purposes.

The 35ttt embraced the LGPD as an opportunity to strengthen user trust, not as a bureaucratic obligation to check off. This means compliance goes beyond drafting a privacy policy — it is embedded in internal data collection processes, vendor contracts, the platform's technical architecture, and ongoing staff training.

How Your Financial Data Is Handled at 35ttt

One of the topics that most concerns users of betting platforms is the handling of financial data — especially in a country where Pix became the dominant payment method in just a few years. The 35ttt applies an additional layer of protection to financial data beyond what is used for standard registration data.

For Pix deposits, the 35ttt processes the transaction directly through the Banco Central financial system, so your banking details never need to be stored on the platform beyond the Pix key registered for withdrawals. For credit and debit card transactions, payments are processed by PCI-DSS certified gateways — the highest security standard for card data in the global financial industry. The 35ttt never stores the full card number, CVV, or expiration date on its own servers.

Your transaction history — deposits, withdrawals, and bets — is kept securely and encrypted for the periods required by law. This history is always available for the user to review in the account settings, and can be exported upon request to the DPO as part of exercising the right to data portability under the LGPD.

Responsible Gambling and Privacy: How Your Data Is Involved

One area where data protection and responsible gambling intersect at the 35ttt is the monitoring of usage patterns. To provide proactive support to users who may be developing risky behaviors — such as progressively larger bets, very long sessions, or withdrawal attempts followed immediately by new deposits — the 35ttt uses platform usage data to automatically identify these patterns.

This type of monitoring is carried out on the basis of the legitimate interest of the 35ttt in protecting the well-being of its users, as provided for under the LGPD. Data used for this purpose is handled with the same level of security as all other data on the platform and is never shared with third parties. The sole aim is to provide support when needed — not to penalize, arbitrarily restrict, or use this information against the user.

If you would prefer not to be monitored for responsible gambling purposes and wish to exercise your right to object to this specific processing, please contact the DPO at privacidade@35ttt.net. The 35ttt will assess each request individually, taking into account applicable legal obligations and user protection interests.

Frequently Asked Questions About Privacy at 35ttt

Straightforward answers to the most common questions about data protection

No. The 35ttt stores passwords exclusively as one-way cryptographic hashes. This means no employee, system, or internal process can ever retrieve or view your password in plain text. If you lose your password, the correct procedure is to recover it via email — there is no way to "look up" the original password. For this reason, we strongly recommend using a strong, unique password for your 35ttt account. 35ttt.

You may request the deletion of your personal data by emailing privacidade@35ttt.net or via the support chat. The 35ttt will process the request within 15 calendar days. Please note that financial data and transaction records are retained for the minimum periods required by law — generally 5 years — even after account deletion. After that period, all data is securely deleted or irreversibly anonymized.

In some cases, the technical operation of the platform involves cloud infrastructure that may be located outside Brazil. When this occurs, the 35ttt ensures that transfers are made only to providers offering an adequate level of data protection — either through ANPD recognition or through specific contractual clauses that impose protections equivalent to those of the LGPD. No identifiable personal data is transferred to countries without adequate protection guarantees.

Yes. The right of access and portability guaranteed by the LGPD allows you to request a complete copy of all personal data that the 35ttt holds about you. To exercise this right, send an email to privacidade@35ttt.net identifying yourself as the data subject. The 35ttt will provide the data in a structured, easily readable format within 15 calendar days after verifying your identity.

After account closure, the 35ttt retains data for the minimum period required by Brazilian law — primarily financial data and transaction records, which must be kept for 5 years for audit and tax compliance purposes. Usage data and cookies are deleted within the standard 13-month period. Once all legal retention periods have been met, data is securely deleted or anonymized. You may request email confirmation of the deletion status of your data after the legal retention period has expired.

Bet Safely and Privately at 35ttt

Your data protected by the LGPD, encryption on every transaction, and Pix withdrawals in minutes. Create your free account and enjoy Brasileirão, Copa do Brasil, Libertadores, and much more.

✓ LGPD — your data protected by law ✓ SSL encryption across all pages ✓ Pix in up to 5 minutes ✓ 24/7 support in Portuguese

Responsible Gambling

35ttt cares about your well-being — on and off the platform.

Deposit Limit

Set daily, weekly, or monthly limits directly in your account settings

Session Control

Play-time alerts and scheduled breaks to keep the experience healthy and enjoyable

Self-exclusion

Voluntary suspension for 30, 90 days, or permanently — no penalty on your real balance

+18 Required

Mandatory identity verification — platform exclusively for users aged 18 and over

More information on our Responsible Gambling. If you are struggling with gambling-related issues, call the CVV: 188 (free, 24h).

Português