Updated January 2026

Privacy Policy top88 — Your Data, Protected

Top88 treats user privacy with the same rigor a bank applies to its transactions. This policy explains, in plain language, what data we collect, why we need it, and how you can stay in control.

LGPD
Law No. 13.709/2018
SSL 256-bit
Full encryption
No Selling
Data never sold
You Are in Control
8 guaranteed rights
256 SSL encryption bits
8 LGPD data subject rights
15 Business days to respond
Jan/25 Last updated

Introduction and Scope of This Policy

This Privacy Policy describes how the top88 collects, uses, stores, and protects the personal information of users of the Sports Betting and online casino platform available at top88-jit.net. By creating an account and using any feature of the platform — whether betting on the Brasileirão Série A, playing live roulette, depositing via Pix, or accessing the casino — you confirm that you have read and understood this policy.

O top88 operates in full compliance with the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018), Brazil's primary privacy legislation. Our commitment goes beyond formal legal compliance: we apply information security best practices at every layer of the platform because we understand that our users' trust is the most valuable asset we have.

This policy applies to all registered top88 users, including site visitors who do not yet have an account. We update this document whenever there are material changes to the way we handle your data. The date of the last revision is shown at the top of this page.

How top88 protects your privacy

Six concrete practices that demonstrate our genuine commitment to protecting your data

End-to-End Encryption

All communication between your device and top88's servers is protected by 256-bit SSL encryption — the same standard used by Brazilian banks and fintechs such as Nubank and Itaú. Your registration data, financial transactions, and betting history are never transmitted as plain text.

Data Is Never Sold

Top88 does not sell, rent, or trade users' personal data to third parties under any circumstances. Your CPF, email, mobile number, and activity history belong to you. We share information only when required by law or to deliver the services you have signed up for.

You Control Your Data

The LGPD grants data subjects eight rights, and top88 honors every one of them. You can access, correct, export, or request deletion of your data at any time. No legitimate request is ignored or delayed without justification.

Full LGPD Compliance

Top88 has mapped all platform data flows and documented the legal basis for each processing activity, as required by the LGPD. We have a designated Data Protection Officer (DPO) who is accessible for any questions related to user privacy.

Restricted Data Access

Within top88, only employees with a justified operational need have access to users' personal data. All access is logged and reviewed on a regular basis. Third-party providers that process data on our behalf sign contracts with strict confidentiality clauses.

Marketing Only With Consent

Top88 sends marketing communications — promotions, news, and special odds for the Brasileirão — only to users who have given explicit consent. You can withdraw that consent at any time in your account settings, with no impact on your access to the services.

1. Data top88 Collects

1.1 Data Provided Directly by You

By registering and using the top88, you directly provide the following information:

  • Identification data: full name, CPF, date of birth, gender;
  • Contact data: email address, mobile number, residential address with zip code;
  • Verification documents: National ID, driver's license, or passport (front and back), proof of address, selfie with document — requested during the KYC process;
  • Financial data: Pix key, credit or debit card details (stored in tokenized form), proof of bank account ownership;
  • Account preferences: language, responsible gambling limits set by you, enabled notifications.

1.2 Automatically Collected Data

When you access and use the platform top88, we automatically collect:

  • Browsing data: pages visited, session duration, click sequence, sections accessed;
  • Technical data: IP address, device type, operating system, phone model, browser version, screen resolution;
  • Location data: country and state inferred from IP — we do not collect GPS location without explicit consent;
  • Performance data: load times, technical errors, connection failures — used solely to improve platform stability;
  • Betting data: complete betting history including amounts, selected markets, outcomes, and timestamps.

1.3 Data Received from Third Parties

In some cases, top88 may receive information about you from legitimate third-party sources:

  • Credit bureaus and identity verification services — to confirm registration details and prevent fraud;
  • Regulatory bodies and competent authorities — when required by law, for mandatory compliance checks;
  • Payment providers (e.g., card operators, Pix processors) — to confirm ownership and the status of financial transactions.

Important: top88 never purchases third-party data lists for marketing purposes. Any information received from third parties relates exclusively to the secure operation of the platform and the fulfillment of legal obligations.

2. How top88 Uses Your Data

2.1 Processing Purposes

O top88 uses your personal data exclusively for the purposes described below, each with its corresponding legal basis under the LGPD:

  • Operate the platform and deliver the contracted services — to process bets, deposits via Pix and boleto bancário, withdrawals, access to the live casino and all available products. Legal basis: performance of a contract;
  • Verify your identity and prevent fraud — KYC process, suspicious transaction analysis, anti-money laundering. Legal basis: legal obligation and legitimate interest;
  • Fulfill regulatory obligations — reports to competent authorities, compliance with Sports Betting industry regulations in Brazil. Legal basis: legal obligation;
  • Improve the platform — browsing behavior analysis, A/B testing, bug identification, and experience improvement. Legal basis: legitimate interest;
  • Provide user support — logging and resolving support requests, maintaining interaction history for service continuity. Legal basis: contract performance;
  • Send marketing communications — Brasileirão promotions, bonuses, platform updates. Legal basis: consent (revocable at any time);
  • Ensure the security and integrity of the platform — detection of unauthorized access, protection against attacks and abuse. Legal basis: legitimate interest.

2.2 What top88 does NOT do with your data

To make this completely clear:

  • We do not sell or rent personal data to advertisers, brokers, or any third party;
  • We do not use your data to build profiles for sale to external advertising networks;
  • We do not share your betting history with family members, employers, or any third party without your explicit authorization or a court order;
  • We do not use your data for discrimination of any kind — racial, religious, political, or gender-based;
  • We do not make automated decisions with significant effects on you without the possibility of human review.

3. Data Sharing

3.1 Who top88 Shares Data With

O top88 shares personal data only in the situations below, always with appropriate safeguards:

  • Payment providers: Pix processors, credit and debit card operators, PicPay, Mercado Pago, and partner banks (Nubank, Itaú, Bradesco, Banco do Brasil) receive only the data necessary to process each specific transaction;
  • Live casino and games providers: third-party live table and slots providers receive an anonymous user identifier to operate the games — they do not receive your name, CPF, or full financial details;
  • Technology service providers: hosting, data analytics, security, and support companies operating under contract with strict confidentiality clauses and a prohibition on use for their own purposes;
  • Authorities and regulatory bodies: when required by law, court order, or formal request from a competent authority. In such cases, top88 notifies the user whenever legally permitted;
  • Identity verification (KYC) services: to confirm registration details and prevent fraud, operating strictly under top88's instructions.
International Data Transfers

Some of top88's technology providers may be located outside Brazil. In such cases, we ensure that any international data transfer complies with the provisions of Art. 33 of the LGPD — either through an adequacy decision recognized by the ANPD, or through standard contractual clauses that guarantee a level of protection equivalent to Brazilian standards.

4. Cookies and Tracking Technologies

4.1 What Cookies Are and How top88 Uses Them

Cookies are small text files stored on your device when you access the top88. They are essential for the platform to function properly and for us to deliver a personalized experience. We use the following types:

  • Essential cookies: required to keep your session active, process bets, and access your account. They cannot be disabled without affecting the platform's functionality;
  • Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, errors encountered. They help improve the speed and stability of top88;
  • Functional cookies: remember your language preferences, responsible gambling limits, and account settings so you do not have to reconfigure them on every visit;
  • Marketing cookies: used only with your consent to personalize the promotions you see — such as Brasileirão bonuses or live casino offers. These can be turned off in your account settings.

4.2 Cookie Management

You can manage your cookie preferences in two ways:

  • In your top88 account settings: go to "Privacy & Cookies" to view and adjust which cookie categories are active;
  • In your browser settings: all modern browsers — Chrome, Firefox, Safari, Samsung Internet — allow you to block or delete cookies. Note that disabling essential cookies may prevent you from accessing your account.

Top88 does not use social media tracking pixels or integrate sharing buttons that transmit browsing data to external platforms without your explicit consent.

5. Data Security

5.1 Technical and Organizational Measures

O top88 implements the following measures to protect your data against unauthorized access, loss, destruction, or improper disclosure:

  • 256-bit SSL Encryption across all communications between the user's device and the platform's servers;
  • Encrypted storage passwords are stored using secure hashing (bcrypt) — not even the top88 team can access your password in plain text;
  • Financial data tokenization — credit card numbers and Pix keys are stored in tokenized form, not as plain text;
  • Two-factor authentication (2FA) available to all users, strongly recommended for accounts with an active balance;
  • Continuous security monitoring with anomaly detection and automatic alerts for suspicious activity in real time;
  • Penetration testing (pentest) conducted periodically by an independent specialized firm to identify vulnerabilities before they can be exploited;
  • Role-based access control (RBAC) — each employee accesses only the data required for their role, with a full log of all queries.

5.2 Security Incidents

In the event of a security incident that may affect your personal data, top88 will take the following steps:

  • Immediate containment of the incident and impact assessment within the first 24 hours;
  • Notification to the National Data Protection Authority (ANPD) within the timeframe required by the LGPD when the incident poses a significant risk;
  • Direct notification to affected users via their registered email, with a clear description of what happened, which data was involved, and the steps taken;
  • A dedicated channel made available for questions and assistance to affected users.

Your responsibility: Part of your account security depends on you. Never share your password, use a unique password for top88, and enable 2FA. If you suspect unauthorized access, contact us immediately at contato@top88-jit.net.

6. Your Rights as a Data Subject

The LGPD grants data subjects eight rights. The top88 respects all of them and provides clear channels for you to exercise each one. Here is what every right means in practice:

Right of Access

Request a copy of all personal data that top88 holds about you. You will receive a full report within 15 business days.

Right to Correction

Found incorrect or outdated information? Request a correction at any time. Registration data can be updated directly in your account settings.

Right to Erasure

Request the deletion of your personal data processed on the basis of consent. Data retained due to legal obligations (e.g., financial history) is subject to minimum retention periods.

Right to Restriction

Request a temporary suspension of the processing of your data while any questions about its accuracy or use remain unresolved. top88 will put processing on hold until the matter is settled.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another service provider, where technically feasible.

Right to Information

Find out which entities top88 has shared your data with, the legal basis for each processing activity, and how long your data will be stored.

Right to Object

Object to data processing based on legitimate interest when you believe your fundamental rights take precedence. top88 will assess each case individually.

Right to Withdraw Consent

Withdraw at any time the consent you gave for receiving marketing communications. Withdrawal does not affect any processing carried out before it.

How to exercise your rights

Send your request to contato@top88-jit.net with the subject line "LGPD Rights — [specify the right]". Include your full name and registered CPF for identification. top88 will respond within 15 business days. If more time is needed for complex requests, you will be notified with a justification within the initial deadline.

7. Data Retention and Deletion

7.1 Retention Periods

O top88 retains your data for as long as necessary to fulfill the purposes for which it was collected, or to meet legal and regulatory obligations. The specific retention periods are:

  • Registration and identification data: retained for the full duration of the account and for 5 years after closure, in accordance with compliance and anti-money laundering requirements;
  • Financial transaction history (deposits via Pix, boleto, card, and withdrawals): retained for a minimum of 5 years after each transaction, in accordance with Brazilian tax legislation and financial regulations;
  • Betting history: retained for 5 years after each bet placed;
  • Customer support data: retained for 2 years after each support ticket is closed;
  • Security and access logs: retained for 1 year for incident investigation purposes;
  • Marketing data (based on consent): deleted immediately upon consent withdrawal, except for the historical record of the withdrawal itself.

7.2 Deletion Process

Once retention periods have expired, top88 follows these procedures for the secure deletion of data:

  • Permanent deletion from production databases with a deletion confirmation;
  • Secure overwriting of backups containing the relevant data at the next regular rotation cycle;
  • Anonymization of aggregated data used for statistical analysis, ensuring re-identification of the data subject is not possible;
  • Recording of the deletion process for internal audit purposes and potential verification by the ANPD.

8. Contact, DPO and Changes to This Policy

8.1 Data Protection Officer (DPO)

As required by the LGPD, the top88 has appointed a Data Protection Officer (DPO) responsible for:

  • Receive and respond to user requests related to rights under the LGPD;
  • Communicate with the National Data Protection Authority (ANPD) when required;
  • Guide the internal team on data protection best practices;
  • Oversee ongoing compliance with the LGPD and any other applicable privacy regulations.

To get in touch with top88's DPO, send an email to contato@top88-jit.net with the subject line "DPO — [your request]". Response time is up to 15 business days.

8.2 Changes to This Privacy Policy

O top88 reserves the right to update this Privacy Policy when necessary, particularly in response to:

  • Changes to Brazilian data protection legislation or to the sports betting sector;
  • Introduction of new products, features, or payment methods on the platform;
  • New regulatory requirements from the ANPD or other competent bodies;
  • Improvements to internal security and privacy practices.

Material changes will be communicated by email to all registered users at least 7 days in advance. The current version of this policy will always be available on this page, with the last updated date shown at the top. Continued use of the platform after the notice period implies acceptance of the updated version.

8.3 ANPD and Complaints

If you believe that top88 has not adequately responded to a request related to your rights as a data subject, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil. Before doing so, we encourage you to contact us first — most cases are resolved directly, more quickly and efficiently.

SSL 256-bit
LGPD Compliant
Data Not Sold
8 Guaranteed Rights
DPO Available

Bet safely at top88

Now that you know how top88 protects your data, create your account with confidence. Sign up for free, deposit via Pix from R$ 20.00, and start betting on the Brasileirão with a platform that takes privacy seriously.

Questions about this Policy?

To exercise your rights as a data subject or ask any questions about this Privacy Policy, please contact our DPO: contato@top88-jit.net. You can also consult our Terms and Conditions and the Responsible Gambling for a full overview of our policies.

Português