LGPD · DATA PROTECTION · TRANSPARENCY

520win Privacy Policy – Your Data Protected

This document clearly explains how 520win collects, uses, stores, and protects your personal data, in full compliance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018). No fine print, no confusion — just straightforward information about what we do with your data.

Last updated: January 2026
Official Document
Applicable to all 520win users in Brazil

In compliance with the LGPD (Law No. 13,709/2018).
LGPD Compliant
256-bit SSL
No Data Selling
Data Subject Rights
24/7 Support

Why This Policy Exists and What It Guarantees

When you create an account on 520win, makes a deposit via Pix, places a bet on a Brasileirão match, or spins a slot at the casino, you are sharing information with the platform. This is unavoidable — without basic data such as CPF and email, it is not possible to create an account, process a payment, or keep your bankroll secure.

What 520win commits to is handling this information with respect, transparency, and within the bounds of the law. This Privacy Policy exists to make that clear: what data we collect, why we need it, who can access it, how long we keep it, and what you can do if you want to access, correct, or delete your information.

The 520win operates in compliance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018), which is Brazil's primary privacy and data protection law. Complying with the LGPD is not just a legal requirement for us — it is part of the platform's commitment to earning and keeping our users' trust.

This policy applies to all registered 520win users residing in Brazil, to anyone who accesses the site or uses the platform's services, and to any personal data processed by 520win in the context of those interactions.

Quick Summary
  • Your data is used solely to operate the platform and fulfill legal obligations.
  • We do not sell or share your data for advertising purposes without your consent.
  • You can access, correct, or delete your data at any time.
  • 256-bit SSL encryption across all transactions and communications.
  • Privacy questions: contato@520win.best, answered within 15 days.

What This Policy Covers

Six pillars that explain how 520win takes care of your data.

What Data We Collect
Full name, CPF, date of birth, email, phone number, address, Pix banking details, and platform usage history. Only what is necessary to operate 520win's services safely and with quality.
How We Use Your Data
To create and manage your account, process deposits and withdrawals via Pix and other Brazilian payment methods, meet legal obligations such as anti-money laundering requirements, and personalize your experience at 520win.
Who We Share Data With
Only with essential technical partners (payment processors, game providers such as Pragmatic Play and Evolution) and competent authorities when required by law. Never for third-party advertising without your consent.
How We Protect Your Data
256-bit SSL encryption across all communications, tokenized banking data, 24-hour anti-fraud monitoring, and strict internal access controls. Only employees with a genuine operational need are granted access to personal data.
Your Rights as a Data Subject
Under the LGPD, you may access, correct, delete, port, or withdraw consent for your data at any time. Simply send an email to contato@520win.best. We respond within 15 calendar days.
How Long We Retain Your Data
Registration data is kept for as long as the account remains active. After closure, it is retained for the minimum period required by Brazilian law (generally 5 years for financial data) and then securely deleted.

How Your Data Moves Through 520win

From registration to withdrawal — understand the lifecycle of your information on the platform.

1
Collected at Registration
You provide your name, CPF, email, and mobile number. This data is encrypted immediately and stored on secure servers. No password is ever saved in plain text — only a cryptographic hash.
2
Use in Transactions
When you deposit via Pix or request a withdrawal, your banking details are transmitted in tokenized form to the partner payment processor. 520win does not store full card data — only a single-use token.
3
Platform Usage Data
Your betting history, games accessed, and sessions are logged for support, fraud detection, and personalization purposes. You can view your full history in your account dashboard at any time.
4
Retention & Deletion
After account closure, data is retained for the mandatory legal period (a minimum of 5 years for financial records, as required by Brazilian law) and then securely and irreversibly deleted.

1. Data Controller

For the purposes of the LGPD, the controller responsible for processing your personal data is 520win, a Sports Betting and online casino platform operated for the Brazilian market. The controller is the entity that determines the purposes and means of personal data processing.

Any questions regarding privacy, personal data processing, or the exercise of rights under the LGPD should be directed to 520win's official channel:

DPO (Data Protection Officer) Email: contato@520win.best — with the subject line "LGPD – [your full name]". Response time: up to 15 calendar days from receipt of the request.

2. Personal Data We Collect

2.1 Data You Provide at Registration

  • Full name as it appears on a government-issued ID (RG or CNH)
  • CPF (Individual Taxpayer Registration)
  • Date of birth
  • Email address
  • Mobile number
  • Residential address (zip code, street, number, city, and state)
  • Access password (stored as a hash only — never in plain text)

2.2 Identity Verification Data (KYC)

  • Official photo ID document (National ID, Driver's License, or Passport)
  • A selfie of the account holder holding their ID document for authenticity verification
  • Proof of address documents, when requested

2.3 Financial Data

  • Pix key linked to the account holder's CPF for withdrawal processing
  • Credit or debit card token (we do not store the full card number)
  • Deposit and withdrawal history: amounts, dates, methods, and status
  • Account identification data for PicPay, Mercado Pago, or banks used for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil, and others)

2.4 Platform Usage Data

  • Full sports betting history (events, markets, odds, amounts, and results)
  • Casino game history (slots, roulette, blackjack, baccarat, crash games)
  • Session duration and access times
  • IP address and type of device used
  • Support interactions (service records)

2.5 Automatically Collected Data

When you access 520win on your phone or computer, we automatically collect: IP address, browser type and version, operating system, device identifier, and cookie data (detailed in Section 9). This information is used for security, fraud prevention, and improving your browsing experience.

520win collects only the data strictly necessary to provide its services. We do not collect sensitive data such as racial origin, religious beliefs, genetic data, or biometric data — with the exception of the selfie with ID document required by the KYC process, which is used solely for identity verification purposes.

3. Purpose of Data Processing

The 520win processes your personal data solely for the following purposes:

  • Account creation and management: registration, authentication, account data updates, and account-related communications.
  • Payment processing: deposits and withdrawals via Pix, bank slip (boleto), credit/debit card, PicPay, Mercado Pago, and TED.
  • Provision of betting and casino services: execution of Sports Betting, casino games, and all other platform services.
  • Anti-money laundering (AML/CFT): a legal obligation imposed by Brazilian law, including the identification and monitoring of unusual transactions.
  • Eligibility verification: age verification (minimum 18 years), proof of residence in Brazil, and absence from any restriction lists.
  • Security and fraud prevention: monitoring of access patterns, detection of multiple accounts, and suspicious activity.
  • Experience personalization: display of promotions and relevant content based on your usage profile, always with the option to opt out.
  • Support contact: logging and resolving requests, complaints, and inquiries.
  • Compliance with legal obligations: compliance with requests from competent judicial, regulatory, or tax authorities.

520win does not use your data for purposes incompatible with those described above. Should we wish to use your data for a new purpose not covered here, you will be informed in advance and may choose not to authorize it.

4. Legal Basis for Processing (LGPD)

All data processing carried out by 520win has a legal basis under the LGPD. The main bases we rely on are:

Processing Type Legal Basis (LGPD)
Account registration and management Contract performance (art. 7, V)
Payment processing Contract performance (art. 7, V)
Anti-money laundering compliance (KYC) Legal obligation (art. 7, II)
Fraud prevention and security Legitimate interest (Art. 7, IX)
Marketing communications and promotions Consent (art. 7, I)
Compliance with judicial authorities Legal obligation / Exercise of rights (Art. 7, II and VI)
Experience personalization Legitimate interest / Consent (Art. 7, IX and I)

5. Sharing Data with Third Parties

5.1 Operational Partners

520win may share personal data with third parties only when strictly necessary for the operation of its services:

  • Payment processors: to enable deposits and withdrawals via Pix, credit/debit card, PicPay, Mercado Pago, and TED. Data is transmitted in tokenized and encrypted form.
  • Game providers: such as Pragmatic Play, Evolution, NetEnt, and others, which receive only the technical session identifier required to run the games, with no full personal data.
  • Identity verification services (KYC): specialized platforms for document authentication and biometrics, contracted for the first-withdrawal verification process.
  • Technology infrastructure: hosting and cloud computing providers that process data on protected servers under a contractual confidentiality agreement.

5.2 Competent Authorities

520win may disclose personal data to Brazilian judicial, law enforcement, regulatory, or tax authorities when required by law, court order, or formal request from a competent body. In such cases, data is provided only to the extent required by the legal mandate, with no disclosure beyond what is necessary.

5.3 What We Do Not Do

520win does not sell users' personal data to third parties. We do not share your information with advertisers, brokers, or advertising networks without your explicit and specific consent. We do not transfer data for any purposes beyond those described in this policy.

6. International Data Transfers

Some of the game providers and technical service providers used by 520win have servers located outside Brazil. When such transfers occur, 520win ensures that the recipient jurisdictions offer a level of protection compatible with the LGPD, by means of:

  • Contracts containing standard data protection clauses aligned with the LGPD
  • Selection of vendors holding internationally recognized security certifications (ISO 27001, SOC 2)
  • Minimization of transferred data — only what is strictly necessary for the technical execution of the service

Under no circumstances are complete personal data records (CPF, banking details, identity documents) transferred to servers outside Brazil. This information is stored in infrastructure located or mirrored within Brazil.

7. Data Security

The 520win adopts technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL/TLS encryption across all communications between the user's device and the platform's servers
  • Password hashing using the bcrypt algorithm — passwords are never stored in plain text
  • Banking data tokenization — full card numbers are never stored on the platform
  • 24-hour anti-fraud monitoring with automated systems for detecting suspicious access
  • Internal access control based on least privilege — only employees with a verified operational need may access personal data
  • Audit logs of all access to personal data, with full traceability
  • Encrypted backups with retention policies and secure deletion

Despite every precaution, no security system is 100% infallible. If you suspect your account has been compromised, contact 520win's 24/7 support immediately at contato@520win.best.

8. Data Retention and Deletion

Personal data belonging to 520win users is retained for the following periods:

  • Registration and account data: for as long as the account remains active. After closure, retained for 5 years for audit purposes and compliance with legal obligations.
  • Financial records (deposits, withdrawals, betting history): minimum of 5 years in accordance with Brazilian legislation applicable to the financial and entertainment sectors.
  • KYC verification documents: for the period required to meet anti-money laundering compliance obligations, generally 5 years after account closure.
  • Access and security logs: 12 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).
  • Support communications: 2 years from the date of the interaction.

Once retention periods expire, data is securely and irreversibly deleted — including backups — or anonymized so that the data subject can no longer be identified.

Early deletion request: you may request deletion of your data before the retention period expires. In such cases, 520win will review the request and, if there is no legal impediment or retention obligation, will process the deletion within 30 days. Data subject to legal obligations cannot be deleted before the mandatory period.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. 520win uses cookies to function properly, enhance security, and deliver a personalized experience.

9.2 Types of Cookies We Use

  • Essential cookies: required for the platform's core functions — authentication, game session management, and security. These cannot be disabled.
  • Performance cookies: collect anonymous information about how users navigate the site, in order to identify pages with technical issues and improve the platform.
  • Functionality cookies: remember your language preferences, theme, and betting settings to personalize your experience.
  • Analytical cookies: used internally to measure platform usage and guide product decisions. We do not share this data with third parties for advertising purposes.

9.3 How to Manage Cookies

You can configure your browser to block or delete cookies. However, disabling essential cookies may prevent the platform from functioning properly, including access to your account. Most modern browsers — Chrome, Safari, Firefox — offer granular cookie controls in their privacy settings.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, the following rights regarding your information processed by 520win:

Right of Access
Request a copy of all personal data 520win holds about you, including the purpose of use and with whom it has been shared.
Right to Correction
Request the correction of inaccurate, incomplete, or outdated data. Details such as email address and phone number can be updated directly in your account dashboard.
Right to Erasure
Request the deletion of your personal data. Subject to legal retention obligations — financial data must be kept for the minimum period required by law.
Right to Data Portability
Receive your data in a structured, machine-readable format (JSON or CSV) for transfer to another controller, where technically feasible.
Right to Withdraw Consent
Withdraw consent given for processing based on this legal ground, such as receiving marketing communications. Withdrawal does not affect processing already carried out.
Right to Information
Be informed about which entities your data has been shared with and the legal bases used for each processing activity carried out by 520win.

To exercise any of these rights, send an email to contato@520win.best with the subject line "LGPD – [Right you wish to exercise] – [Your full name]". 520win will respond within 15 calendar days. In complex cases, this deadline may be extended by a further 15 days, with written justification provided to the data subject.

11. Minors

520win services are intended exclusively for individuals aged 18 years of age or older. The platform does not intentionally collect personal data from minors and has registration controls in place to verify that users are of legal age.

If 520win becomes aware that it has collected data from a person under 18, the account will be immediately closed, the data will be deleted, and any deposited balance will be returned to the identified legal guardian following identity verification.

Parents or legal guardians who suspect that a minor has created an account at 520win should contact us immediately at contato@520win.best with the subject line "Minor – Unauthorized Account".

12. Communications and Marketing

520win may send account-related communications — such as payment confirmations, security alerts, and withdrawal notifications — without requiring specific consent, as these messages are essential to the operation of the service.

For marketing communications — such as bonus offers, seasonal promotions, and platform updates —, 520win requests your consent at the time of registration or through a specific option in your account dashboard. You may opt out of these communications at any time:

  • Clicking the "Unsubscribe" link in the footer of any promotional email
  • Adjusting your communication preferences in your account dashboard
  • Submitting a request to contato@520win.best

Opting out of marketing communications does not affect the delivery of operational and security messages related to your account.

13. Security Incidents and Data Breaches

In the event of a security incident that may pose a significant risk or harm to data subjects — such as unauthorized access at scale, data breach, or loss of personal data —, the 520win will adopt the following procedures:

  1. Immediate incident containment and impact assessment
  2. Notification to the National Data Protection Authority (ANPD) within 2 business days of incident confirmation, as required by the LGPD
  3. Notification to affected users via their registered email, with a clear description of what occurred, the data potentially exposed, and the measures taken
  4. Implementation of corrective measures to prevent recurrence

If you suspect unauthorized access to your own account, contact 520win's 24/7 support immediately at contato@520win.best. The team has direct access to security systems and can preventively block the account within minutes.

14. Changes to this Privacy Policy

520win may update this Privacy Policy to reflect changes in services, legislation, or data processing practices. Material changes will be communicated by email to the registered address at least 7 days before taking effect.

The most recent version of this policy will always be available on this page, with the last updated date shown at the top of the document. Continued use of the platform after the effective date of any updated terms constitutes acceptance of those changes.

Previous versions of this policy are available upon request at contato@520win.best.

15. Contact & Data Protection Officer (DPO)

For all matters related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact 520win's Data Protection Officer (DPO):

Email: contato@520win.best
Suggested subject line: "LGPD – [Description of request] – [Your full name]"
Response time: within 15 calendar days from receipt
Availability: Monday to Friday, business hours (General support available 24/7)

If you are not satisfied with the response you received, or believe your rights have not been properly upheld, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

Summary of 520win's Commitment to Your Privacy

520win handles your personal data responsibly, transparently, and in compliance with the LGPD (Law No. 13,709/2018). We collect only what is necessary, use it only for the purposes described, do not sell your data, and you may exercise your rights at any time by emailing contato@520win.best.

By creating an account at 520win, you confirm that you have read and agree to this Privacy Policy, our Terms and Conditions and the rules of Responsible Gaming.

Your Data Is Safe. Your Game, Your Way.

At 520win, privacy and security are not marketing promises — they are built into the platform's foundation. Create your account, deposit via Pix, and play with the confidence of knowing your data is protected.

+18 · Gamble responsibly · Responsible Gaming

Português