Official Document – LGPD

Privacy Policy of 20game – Your Data Always Protected

20game takes every Brazilian player's data protection seriously. Here you'll find a clear explanation of exactly what we collect, why we collect it, and how we keep your information safe — all in full compliance with the LGPD.

Last updated: January 2026 Brazilian Portuguese Law 13.709/2018 – LGPD
This policy covers
Data collected at registration
Data use and purpose
Third-party sharing
Cookies and tracking
Your rights as a data subject
Data security and retention
12 Sections of This Policy
LGPD Law 13,709/2018
SSL 256 End-to-End Encryption
Jan/2026 Last Reviewed

How 20game Protects Your Data

Six concrete commitments that 20game makes to every Brazilian player regarding the handling of their personal information.

256-Bit SSL Encryption

All data transmitted between your phone or computer and 20game's servers is encrypted with 256-bit SSL – the same standard used by major Brazilian banks. Your financial and personal data never travels in plain text.

256-bit SSL Mandatory HTTPS Encrypted data

Full LGPD Compliance

20game strictly complies with the General Data Protection Law (Lei n.º 13.709/2018). We have a designated Data Protection Officer (DPO), reviewed internal policies, and documented processes to respond to data subject requests within the legally required timeframes.

LGPD Designated DPO Defined legal basis

Control in Your Hands

You can access, correct, port, or request deletion of your data at any time by contacting 20game's privacy email. You may also withdraw consent for marketing communications at any time without affecting your account or access to games.

Data access Portability Deletion on request

We Do Not Sell Your Data

20game never sells, rents, or transfers players' personal data to advertising companies, data brokers, or any third party for commercial gain. Data is shared exclusively with the technical partners required to operate the service – payment processors and identity verification providers – and only under confidentiality agreements.

No data selling NDA Agreements No external advertising

Transparent Cookies

20game uses cookies to keep your session active, personalize your experience, and analyze platform performance. You can manage your cookie preferences through the banner shown on your first visit or in your account privacy settings. Essential cookies cannot be disabled.

Manageable cookies Active consent Saved preferences

Defined Retention Periods

Data is retained only for as long as necessary to provide the service and meet legal obligations. Financial transaction data is kept for 5 years in accordance with Brazilian law. After account closure, non-mandatory data is deleted within 90 days.

Defined period Automatic deletion As required by law

This Privacy Policy describes how 20game collects, uses, stores, and protects the personal data of players registered on the platform. By creating an account or using any 20game service, you confirm that you have read and understood this policy. If you have any questions, please contact us via live chat before proceeding.

1. Introduction

The 20game is a Sports Betting and online casino platform dedicated to Brazilian players. To deliver our services safely, efficiently, and in a personalized way, we need to collect and process certain personal data from our users. This policy explains how we do that, always grounded in transparency and respect for individual rights.

This Privacy Policy was drafted in compliance with the General Personal Data Protection Law – LGPD (Law No. 13,709/2018), which governs the processing of personal data in Brazil, as well as the Marco Civil da Internet (Law No. 12,965/2014) and other applicable regulations in the sector.

Throughout this document, the term "personal data" refers to any information relating to an identified or identifiable individual – in other words, any data that can directly or indirectly identify you. 20game treats this data as something that belongs to you, not to the platform.

2. Data Controller

For the purposes of the LGPD, the personal data controller collected on the 20game platform is the company responsible for operating the 20game.best website. The controller is responsible for decisions regarding the processing of your data — what data to collect, for what purpose, and for how long to retain it.

20game has appointed a Data Protection Officer (DPO) to handle data subject requests, liaise with the National Data Protection Authority (ANPD) when required, and oversee internal privacy practices. The DPO can be reached at the following email address privacidade@20game.best.

3. Data Collected

20game collects personal data across the following categories, in line with the purpose of each data type:

3.1 Registration Data

Provided directly by the user at the time of registration:

  • Full name;
  • CPF (Individual Taxpayer Registry);
  • Date of birth;
  • Email address;
  • Mobile phone number with area code;
  • Residential address (requested during identity verification for withdrawals).

3.2 Financial Data

Generated by transactions carried out on the platform:

  • Deposit and withdrawal history (amount, date, method — Pix, bank slip, credit card, PicPay, Mercado Pago, TED);
  • Pix key or bank details provided for withdrawals;
  • Credit or debit card details (partially masked card number, expiration date – never the CVV security code, which is not stored).

3.3 Usage and Behavioral Data

Collected automatically during platform use:

  • IP address and approximate geolocation;
  • Device type and operating system (Android, iOS, Windows, etc.);
  • Browser used;
  • Betting and gaming history on the platform;
  • Access times and session duration;
  • Pages visited within 20game.

3.4 Identity Verification Data

Required to release withdrawals above certain amounts or when fraud is suspected:

  • Photo ID document (national ID card, driver's license, or passport);
  • Selfie with the document;
  • Recent proof of address.
Category Examples When Collected
Identification Full name, CPF, date of birth Registration
Contact Email, mobile Registration
Financial Pix history, masked card details Transactions
Behavior IP, bets, sessions Continued use
Verification ID, selfie, proof of address Withdrawal request / KYC

20game never requests access password by email, chat, or phone. If anyone contacts you claiming to be from 20game and asks for your password, ignore it and report it immediately via live chat. This is an external fraud attempt.

4. Purpose of Processing

20game processes personal data solely for the purposes described below. We do not use your data for any purpose incompatible with the reason it was originally collected:

  • Delivery of contracted services: create and manage your account, process deposits via Pix, boleto, or card, place bets, and release withdrawals;
  • Identity verification (KYC): confirm that the account holder is who they claim to be, prevent fraud, and ensure withdrawals reach the account's rightful owner;
  • Anti-money laundering (AML/CFT): monitor transactions in compliance with Law No. 9.613/1998 and COAF regulations;
  • Compliance with legal obligations: comply with applicable judicial, regulatory, and tax requirements related to operations;
  • Platform security: detect unauthorized access, fraud attempts, multiple account use, and other suspicious activity;
  • User support: identify the user during live chat support and resolve account-related issues;
  • Product improvement: analyze usage patterns in aggregate form to improve the platform experience;
  • Marketing communications (with consent): send information about promotions, bonuses, and updates – only to users who have opted in to receive this type of communication.

5. Legal Basis for Processing

Under the LGPD, all personal data processing must be grounded in a legal basis. 20game processes data based on the following conditions set out in Article 7 of Law No. 13.709/2018:

  • Contract performance: processing is necessary to deliver the services you agreed to when creating a 20game account (sports betting, casino, payments);
  • Compliance with a legal obligation: financial and identification data is retained to comply with anti-money laundering, tax, and consumer protection legislation;
  • Legitimate interest: behavioral and security data are processed to protect the integrity of the platform and users themselves against fraud — always balanced against your rights and expectations;
  • Consent: marketing communications and the use of non-essential cookies are only carried out after your express consent, which may be withdrawn at any time.

6. Sharing with Third Parties

20game may share personal data with third parties only in the situations described below, and always with appropriate contractual safeguards in place:

6.1 Operational Partners

Companies that provide essential technical services for the platform's operation:

  • Payment processors: to process deposits via Pix, boleto bancário, PicPay, Mercado Pago, credit card, and TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil). Only the data required for each transaction is shared;
  • Identity verification (KYC) providers: for document verification and fraud prevention on withdrawals above established limits;
  • Cloud infrastructure providers: for secure data hosting on servers with certified security standards.

6.2 Public Authorities

20game shares data with government, regulatory, or judicial authorities when required by law, court order, or directive from a competent regulatory body. This includes COAF (Brazil's Financial Activities Control Council), the Federal Revenue Service, and law enforcement agencies in financial crime investigations.

6.3 What We Never Do

20game does not share personal data with:

  • Advertising companies or data brokers for targeting purposes;
  • Other competing betting or casino platforms;
  • Any third party for commercial purposes unrelated to the operation of our services.

All third parties that receive data from 20game users sign data processing agreements requiring them to use that information solely for the defined purpose, with appropriate security measures and in compliance with the LGPD.

7. Cookies and Tracking Technologies

20game uses cookies and similar technologies (pixels, localStorage) to enhance your browsing experience and platform performance. The cookies used fall into the following categories:

7.1 Essential Cookies

Required for the basic operation of the platform. Without them, you cannot log in, maintain an active session, or place bets. These cookies cannot be disabled:

  • Authentication and session management;
  • CSRF (Cross-Site Request Forgery) security token;
  • Language and currency preferences (BRL).

7.2 Performance Cookies

These collect aggregated and anonymized information about how users interact with the platform, helping 20game identify areas for improvement. They require your consent.

7.3 Personalization Cookies

These allow the platform to remember your preferences, such as favorite games and display settings. They require your consent.

7.4 Managing Your Cookies

You can adjust your cookie preferences through the banner shown on your first visit to 20game, or by going to the privacy settings in your account. You can also manage cookies directly through your browser – check the documentation for Chrome, Safari, Firefox, or whichever browser you use. Disabling non-essential cookies does not affect access to bets and games.

8. Data Security

20game implements technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, destruction, or improper disclosure. The main measures in place include:

  • 256-bit SSL Encryption: across all communication between the user's device and 20game's servers;
  • Encryption at rest: sensitive data stored in databases is encrypted with AES-256;
  • Two-factor authentication (2FA): available and recommended for all users, it adds a verification layer beyond your password;
  • Role-based access control (RBAC): only staff with a justified need can access user data, with auditable records of every access;
  • Continuous monitoring: automated systems monitor for suspicious access patterns and alert the security team in real time;
  • Regular penetration testing: 20game's infrastructure undergoes periodic security testing carried out by specialized firms;
  • Incident response plan: in the event of a data breach, 20game will notify affected users and the ANPD within the timeframes required by the LGPD.

Despite all these measures, no system is 100% immune to threats. We strongly recommend using a unique, strong password for your 20game account, enabling 2FA, and never sharing your login credentials with anyone.

9. Data Retention and Deletion

20game retains personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable legal retention periods:

Data Type Retention Period Legal basis
Registration data and active account While the account is active Contract performance
Financial transaction history 5 years after the transaction AML law and tax legislation
Identity verification data (KYC) 5 years after account closure Legal obligation (COAF)
Access and security logs 6 months Marco Civil da Internet
Marketing data (with consent) Until consent is withdrawn Consent (LGPD)
Account closed – non-mandatory data Deleted within 90 days Data minimization principle (LGPD)

Upon requesting account closure, 20game will begin the deletion process for data not subject to legal retention obligations. You will receive an email confirmation once the process is complete.

10. Your Rights as a Data Subject

The LGPD grants you, as the data subject, a set of rights that 20game is fully committed to upholding. You may exercise any of them by emailing privacidade@20game.best or via live chat:

Right of Access

Request a copy of all personal data 20game holds about you, including the purposes and sources of processing.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated data – such as your registered name, email, or phone number.

Right to Erasure

Request the deletion of data processed on the basis of consent, except where retention is required by law or legitimate interest.

Right to Data Portability

Receive your data in a structured, machine-readable format to transfer to another controller, where technically feasible.

Right to Object

Object to data processing carried out on the basis of legitimate interest, especially for direct marketing purposes.

Right to Information

Find out which entities 20game has shared your data with, the legal bases used, and the expected retention period for each category.

20game responds to rights requests within 15 business days from the date of receipt. For more complex cases, this period may be extended by an equal amount of time, with prior notice to the requester. If you are not satisfied with our response, you may file a complaint with the ANPD – National Data Protection Authority.

11. Minors

20game services are intended exclusively for users aged 18 years old. The platform does not knowingly collect personal data from minors. If we identify that an account was created by a minor, we immediately close the account, refund any deposits made, and delete the collected data in accordance with the procedures set out in this policy.

If you are responsible for a minor and suspect they have created a 20game account, please get in touch immediately at privacidade@20game.best or via live chat so we can act quickly.

12. Contact and Data Protection Officer (DPO)

To exercise any right set out in this policy, ask questions about how your data is handled, or report a privacy concern, please get in touch with 20game through the channels below:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform. Let us know you want to discuss privacy or LGPD and you will be directed to the right team;
  • General email: contato@20game.best – we respond within 4 hours;
  • DPO Email: privacidade@20game.best – for formal requests to exercise your rights, security incidents, or complaints regarding data processing. Response time: up to 15 business days.

This Privacy Policy was last reviewed on January 2026 and may be updated periodically to reflect changes in legislation, in 20game's practices, or in response to user feedback. Whenever relevant changes are made, you will be notified at the registered email address at least 7 days before those changes take effect.

20game is committed to the privacy of Brazilian players. If you believe any practice described here is not being followed, please let us know. We take every piece of feedback seriously and act quickly to correct any issues. Your data is yours — and 20game will continue to be a platform you can trust.

Our Privacy Principles

The six principles that guide how 20game handles the data of every Brazilian player.

Transparency

You know exactly what data we collect, why, and who we share it with. No surprises, no fine print that contradicts the main text.

Purpose

We collect only the data necessary to provide the service. Your data is never used for purposes other than those disclosed at the time of collection.

Security

256-bit SSL, encryption at rest, 2FA available, and continuous monitoring. Your data is protected like a bank vault.

User Control

You can access, correct, port, or delete your data at any time. Your LGPD rights are respected without unnecessary red tape.

Data Minimization Period

Data that has fulfilled its purpose and is not subject to any legal retention requirement is deleted. We do not store data "just in case" without a valid basis.

Accountability

We have a designated DPO, data processing agreements with partners requiring LGPD compliance, and documented processes to prove we practice what we preach.

Your data is protected – play with peace of mind

Privacy Guaranteed. Time to Play at 20game

Create your account, deposit via Pix from R$ 10.00, and claim a 100% bonus up to R$ 500.00. Sports Betting on the Brasileirão, live casino, MMA/UFC, and e-sports – with the security and privacy you deserve.

Responsible gambling. Adults 18 and over only. Learn more.

Português