Official Document

Privacy Policy – How 98a1 Protects Your Data

At 98a1, our members' privacy is taken seriously — not as fine print, but as a real practice. Here we explain, in plain language, what data we collect, what it's used for, and how you stay in control of all of it.

Updated January 2026 LGPD Compliance Version 2.4
Sections in this document
11
Click the index to navigate
SSL 256-bit Encryption
LGPD Law No. 13.709/2018
0 Data sold to third parties
24/7 Portuguese-language support

1Data Controller

This Privacy Policy describes how 98a1 — operator of the platform available at 98a1.best — collects, uses, stores, shares, and protects the personal data of its members and visitors, in compliance with the Lei Geral de Proteção de Dados Pessoais (LGPD — Lei nº 13.709/2018).

98a1 is the controller of the personal data processed on this platform. This means we are responsible for decisions related to the handling of your information — what data to collect, for what purpose, and how long to retain it. Any questions or requests related to privacy can be sent to suporte@98a1.best, with the subject line "Data Privacy".

By creating an account, using any feature of the platform, or simply browsing 98a1's website, you acknowledge that you have read and understood this policy. If you disagree with anything described here, we recommend that you do not use the platform's services and contact our support team to clarify any questions before proceeding.

Purpose of this policy: explain clearly and accessibly how 98a1 handles your data — without unnecessary legal jargon. If anything is unclear, our support team is available 24 hours a day to help.

2Data We Collect

The 98a1 collects only the data necessary to operate the platform securely, meet legal obligations, and deliver a quality experience. The data collected falls into three main categories:

Data provided directly by you:

  • Full name, CPF, date of birth, and email address — collected at registration.
  • Full residential address — requested for identity verification (KYC) and compliance with regulatory obligations.
  • Government-issued photo ID (RG, CNH, or passport) — submitted during the account verification process.
  • Banking details — account number, branch, or Pix key — provided to process withdrawals. 98a1 does not store full credit card data; that processing is handled directly by our partner payment providers.
  • Support information — the content of conversations with the customer service team via chat or email.

Data collected automatically during use:

  • IP address, device type, operating system, and browser.
  • Pages visited, access times, and session durations on the platform.
  • Betting history, casino sessions, deposits, and withdrawals made.
  • Approximate geolocation based on IP address — used to verify geographic eligibility.
  • Data from cookies and similar technologies, as described in Section 6.

Data received from third parties:

  • Identity verification information from KYC (Know Your Customer) partners — used to confirm the authenticity of submitted documents.
  • Data from payment processors (Pix, Mercado Pago, PicPay, card networks) — limited to what is necessary to confirm transactions.
  • Fraud prevention information from partners specialized in the Brazilian financial sector.
Data Category Primary Purpose Required?
Name, CPF, email Account creation and identification Yes
Photo ID KYC verification and regulatory compliance For withdrawals above the limit
Banking details / Pix Withdrawal processing Yes, for withdrawals
Bet history Platform operations and compliance Automatic
IP and device Security & fraud prevention Automatic
Preference cookies Experience personalization Optional

3How We Use Your Data

The 98a1 uses collected data exclusively for the purposes described below. No data is used for purposes you were not informed about or for which you did not give consent, where required by the LGPD:

  • Account creation and management: create your account, verify your identity, maintain secure access, and process account updates.
  • Financial transaction processing: process deposits via Pix, boleto, credit/debit card, Mercado Pago, PicPay, and TED transfer, as well as process withdrawals to the account designated by the account holder.
  • Betting and casino platform operations: record bets, settle results, credit winnings, process bonuses and VIP cashback, and keep your transaction history accessible.
  • Compliance with legal and regulatory obligations: comply with requirements from the Brazilian Central Bank, the Federal Revenue Service, the Ministry of Finance regulations for the betting sector, and anti-money laundering rules (AML/CFT).
  • Account communications: send notifications about confirmed bets, game results, processed withdrawals, security checks, and important platform updates.
  • Marketing and promotions: with your consent, send communications about 98a1 promotions, bonuses, and news. You can opt out of these communications at any time through your account dashboard or via the unsubscribe link in our emails.
  • Security and fraud prevention: detect suspicious access, fraud attempts, multiple account use, and other activities that violate the platform's Terms and Conditions.
  • Ongoing platform improvement: analyze usage patterns in an aggregated and anonymized form to improve features, performance, and user experience.
  • Customer support: log and resolve questions, complaints, and requests made via chat or email, maintaining a history to ensure continuity of support.

98a1 does not use your data for sale to external advertisers, for third-party advertising profiles, or for any commercial purpose beyond those listed above. Your betting data and financial behavior on the platform belong exclusively to us and to you.

4Legal Basis for Processing (LGPD)

The LGPD requires that each instance of personal data processing have a legal basis to justify it. Below are the legal bases applied by the 98a1 for each primary purpose:

  • Contract performance (art. 7, V): processing data such as your name, CPF, email, and banking details is necessary to provide the service — without this information, it is not possible to create an account, process deposits, or complete withdrawals. This is the primary legal basis for the platform's operation.
  • Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), financial transaction records, and anti-money laundering monitoring are legal requirements that 98a1 must comply with regardless of user preference.
  • Legitimate interest (art. 7, IX): access data (IP, device, timestamp) is processed based on 98a1's legitimate interest in ensuring platform security, preventing fraud, and protecting members from unauthorized access.
  • Consent (art. 7º, I): to send marketing communications, promotions, and updates by email or push notification — only with your explicit consent, which you can withdraw at any time.
  • Credit protection (art. 7º, X): queries basic financial information for risk assessment in high-value transactions, as permitted under Brazilian law.

Your rights as a data subject: regardless of the legal basis used, you have rights guaranteed by the LGPD regarding your data. All of them are described in Section 8 of this policy.

5Data Sharing

The 98a1 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only occurs in the following situations, all of which are necessary for the platform to operate securely and in compliance with the law:

  • Payment processors: when you make a deposit via Pix, boleto, credit/debit card, Mercado Pago, PicPay, or TED transfer (Nubank, Itaú, Bradesco, Banco do Brasil), the minimum necessary data is shared with the institution responsible for processing the transaction. These partners are contractually required to use your data solely for that specific purpose.
  • Identity verification partners (KYC): specialized document verification providers that assist 98a1 in meeting its regulatory obligations. Submitted documents are processed by these partners under strict confidentiality agreements.
  • Casino game providers: to operate the live casino and slots games, minimal session data (anonymized account identifier, bet balance) is shared with game providers. These providers do not have access to your full name, CPF, or financial details.
  • Government and regulatory authorities: when required by law, court order, or request from a competent Brazilian authority (Receita Federal, COAF, Banco Central, Ministério da Fazenda), 98a1 shares the requested data within applicable legal limits.
  • Technology infrastructure providers: hosting, cloud computing, and cybersecurity services that keep the platform running. These providers act as data processors and are contractually prohibited from using your information for their own purposes.

In all data-sharing situations, 98a1 contractually requires recipients to adopt security measures consistent with those required by the LGPD and to use the data solely for the purposes strictly necessary to deliver the agreed service.

International transfers: some technology infrastructure providers may be located outside Brazil. In such cases, 98a1 ensures that transfers take place to countries with an adequate level of protection or under contractual clauses that uphold the rights established by the LGPD.

6Cookies and Tracking Technologies

The 98a1 uses cookies and similar technologies to ensure the platform works correctly, improve your experience, and, with your consent, personalize content and communications. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — session authentication, security, language preferences, and the bet slip. They cannot be disabled without affecting your ability to use the platform.
  • Performance cookies: collect anonymous data on how members navigate the platform — most visited pages, load times, technical errors. Used to improve overall performance. Individual users are not identified.
  • Functionality cookies: remember your preferences — such as your chosen layout, notification settings, and bet filters — so you don't have to reconfigure them every time you log in.
  • Marketing cookies: with your consent, used to show you relevant 98a1 promotions within the platform itself, based on your usage history. 98a1 does not use this data to display ads on external websites.

You can manage your cookie preferences at any time through your account settings panel or your browser settings. Disabling essential cookies may prevent the platform from functioning properly.

98a1 does not use external social media tracking pixels or share behavioral usage data with third-party advertising platforms.

7Data Storage and Security

The 98a1 implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction. The key measures in place include:

  • 256-bit SSL Encryption on all connections between your device and 98a1's servers — the same standards used by major Brazilian banks.
  • Encryption at rest for sensitive stored data — identity documents, financial data, and account information are stored encrypted.
  • Multi-factor authentication (MFA) available for member accounts and mandatory for internal administrative access.
  • Role-based access control: only staff with a legitimate need have access to specific data, and every access is logged and auditable.
  • Continuous security monitoring: automated systems detect abnormal access attempts, brute-force attacks, and suspicious patterns in real time.
  • Penetration testing and security audits conducted periodically by independent specialized firms.
  • Regular backups stored securely and in a segregated manner, ensuring recovery in the event of a technical incident.

In the event of a security incident that may affect your data, 98a1 will notify the National Data Protection Authority (ANPD) and the affected individuals within the deadlines established by the LGPD, including details about the nature of the incident and the measures taken.

Your role in security: your account security also depends on you. Use a strong password, unique to 98a1, and never share it. If you suspect your account has been compromised, contact support immediately via 24/7 chat.

8Your Rights as a Data Subject

The LGPD guarantees you a set of rights over your personal data processed by the 98a1. These rights are yours and can be exercised at any time, free of charge, via the support chat or by emailing suporte@98a1.best:

Access

Request confirmation that we process your data and receive a copy of the information we hold about you.

Correction

Request the correction of incomplete, inaccurate, or outdated information in your account.

Deletion

Request the deletion of data processed on the basis of your consent, where there is no legal obligation to retain it.

Portability

Receive your data in a structured, machine-readable format for transfer to another controller.

Objection

Object to processing based on legitimate interest, when you believe your fundamental rights take precedence.

Consent Withdrawal

Withdraw consent given for specific processing activities, such as marketing emails, at any time.

Requests are fulfilled within 15 business days after the requester's identity has been confirmed. In complex cases requiring more in-depth review, the deadline may be extended with prior notice. Some rights may be partially limited when processing is required to fulfill a legal obligation — in such cases, we will clearly explain the reason for the limitation.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights were not properly respected by 98a1.

9Minors

The services of 98a1 are intended exclusively for people who are 18 years of age or older. The platform does not intentionally collect personal data from users under 18.

During registration, all users explicitly confirm they meet the minimum age requirement. The identity verification (KYC) process — which includes review of a photo ID and date of birth — is one of the mechanisms used to identify and prevent underage sign-ups.

If we determine that data from a user under 18 was collected inadvertently, the account will be immediately closed, the data will be deleted, and any existing balance will be handled in accordance with applicable legal rules. If you are aware that a minor has registered on 98a1, please contact support immediately at suporte@98a1.best.

Parents and guardians: if you discover that a minor in your care is using betting platforms, we strongly recommend contacting support immediately and using the parental control tools available on the devices and browsers used at home.

10Data Retention

The 98a1 retains members' personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal and regulatory obligations in Brazil:

  • Registration and identification data (name, CPF, email): retained for the entire period the account remains active and for 5 years after account closure, in accordance with tax and anti-money laundering requirements.
  • Financial records (deposits, withdrawals, bets): retained for 10 years to comply with the tax obligations of the Receita Federal and the Banco Central do Brasil's regulations on financial transaction records.
  • Identity verification documents (KYC): stored for 5 years after account closure, in accordance with AML/CFT (anti-money laundering and counter-terrorism financing) regulations.
  • Support history: conversations with the support team are retained for 2 years for quality assurance, training, and dispute resolution purposes.
  • Marketing cookie data: retained for the period specified in each cookie's settings, generally between 30 days and 12 months, or until consent is withdrawn.
  • Security logs (access, IP, device): maintained for 12 months for security incident investigation and fraud detection.

Once applicable retention periods expire, data is securely deleted or irreversibly anonymized. Anonymized data is no longer considered personal data and may be used for statistical purposes without a defined time limit.

11Contact & Changes to This Policy

For any questions, rights requests, or complaints related to your data privacy at 98a1, you can reach us through the following channels:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform after login. Average response time under 2 minutes.
  • Email: suporte@98a1.best — identify the subject as "Data Privacy" for priority routing to the data protection officer (DPO).

98a1 may periodically update this Privacy Policy to reflect changes to the LGPD, other applicable Brazilian regulations, our internal practices, or new services offered. Whenever a relevant change is made:

  • You will be notified by email at least 7 days in advance before the new version takes effect.
  • A notice will be displayed on your account dashboard upon your first login after the update is published.
  • The "last updated" date in the header of this page will be revised.

Continued use of the platform after the new version's effective date constitutes acceptance of the changes. If you disagree with any change, you may close your account before it takes effect without penalty — support can guide you through the closure process and explain how your available balance will be handled.

This policy is governed by Brazilian law, in particular by the LGPD. In the event of a dispute not resolved through the support channel, the competent jurisdiction is the court of Brasília (DF), as set out in the Terms and Conditions of the platform.

How 98a1 Protects You in Practice

Privacy isn't just fine print — here's what we actually do to keep your data safe.

256-Bit SSL Encryption

All communication between your phone or computer and 98a1's servers is encrypted with 256-bit SSL — the same security standard used by Brazil's major banks such as Itaú, Bradesco, and Nubank. Your login, deposit, and betting data travel fully protected.

Full LGPD Compliance

98a1 has operated in compliance with the General Data Protection Law (Lei nº 13.709/2018) since it came into force. This means a defined legal basis for every instance of data processing, justified retention periods, and your rights as a data subject guaranteed and exercisable at any time.

No Data Sold to Third Parties

98a1 does not sell, rent, or share member data with advertisers, data brokers, or any third party for commercial purposes. Your betting data, financial behavior, and gaming preferences are yours alone — and ours only to operate the platform.

Your Rights, Always Within Reach

Access, correction, portability, deletion, and consent withdrawal — every right granted by the LGPD can be exercised via 24/7 chat or email. No red tape, no endless forms. Our support team responds in minutes.

Minimal Data Shared with Partners

When we need to share data with payment processors (Pix, Mercado Pago, PicPay) or game providers, we share only the minimum necessary for that specific transaction. No partner has access to your full betting profile or detailed financial history.

You Control Your Communications

Promotional emails and marketing notifications are only sent with your consent. You can adjust or opt out of any communication directly in your account dashboard — no need to contact support. Changes take effect immediately.

SSL 256-bit
LGPD Compliant
Licensed Platform
24/7 Support
No Data Sales
Secure Pix
Free Registration

Your data is protected. Now it's time to bet with 98a1.

Free registration in under 2 minutes, deposits from R$ 20.00 via Pix, and a bonus of up to R$ 500.00 waiting for you. Brasileirão, UFC, live casino — with guaranteed privacy and 24-hour support.

Welcome Bonus
100%
up to R$ 500.00
  • Minimum deposit: R$ 20.00 via Pix
  • Bonus credited automatically
  • Data protected by SSL and LGPD
  • 24/7 human support in Portuguese
Claim Bonus Now
Privacy questions? If you want to know exactly what data 98a1 holds about you, correct any information, or request data deletion, contact us via 24/7 chat or by email at suporte@98a1.best. We provide support in Portuguese, with no red tape and an average response time of under 2 minutes. You can also check the Terms and Conditions for the platform's general rules.

Start with a Bonus of Up to R$ 500.00 at 98a1

Sign up now, deposit via Pix, and get a 100% bonus on your first deposit. Safe, fast, and in Portuguese.

Create Free Account
Frequently Asked Questions — Privacy at 98a1

The most common questions about how we handle your data, answered straight to the point.

Only when required by law or court order. As a Sports Betting and financial services platform operating in Brazil, 98a1 has legal obligations to report certain transactions and information to the Banco Central do Brasil, the Receita Federal, and COAF (Conselho de Controle de Atividades Financeiras) — particularly in situations related to anti-money laundering. Outside of these specific legal obligations, no information is shared with government authorities. Any data request from an authority is reviewed by our legal team before being fulfilled, to ensure it falls within applicable legal limits.

You can request deletion of your data by contacting us via 24/7 chat or by emailing suporte@98a1.best with the subject line "Data Deletion". Once your identity is verified, we process the request within up to 15 business days. Please note that data whose retention is required by law — such as financial and identity verification records — cannot be deleted before the minimum legal retention period (5 to 10 years, depending on the data type), even after account closure. For such data, 98a1 may apply irreversible anonymization as an alternative to full deletion, so the information can no longer be linked to you individually.

Not for external advertising. Betting history may be used internally by 98a1 to personalize promotions and offers within the platform itself — for example, sending a targeted boosted-odds offer for the Brasileirão to a member who regularly bets on football. This is done based on your consent, and you can turn off this type of personalization in your account dashboard. What 98a1 does not do is share your betting history with external advertisers or third-party ad platforms to target you with ads on other websites or social media.

After account closure, 98a1 retains the data necessary to fulfill legal obligations for the periods described in Section 10 of this policy — generally 5 years for registration data and 10 years for financial records, in accordance with Brazilian tax and anti-money laundering regulations. After these periods, data is permanently and securely deleted or irreversibly anonymized. During the post-closure retention period, your data is not used for marketing or any purpose other than fulfilling legal obligations. Internal access to this data is restricted and audited.
Português