Legal Document

Privacy Policy of 10br – Your Data, Always Protected

A 10br handles your personal data with the utmost seriousness and in full compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018). This document clearly explains what we collect, how we use it, who we share it with, and what your rights as a data subject are.

Last updated: January 2026 Official language: Portuguese (Brazil) Law No. 13.709/2018 (LGPD)

Commitments

How 10br handles your privacy in practice

Six real commitments that guide how your data is handled on the platform

Full LGPD compliance
A 10br operates in full compliance with Law No. 13.709/2018. Every data processing activity has a defined legal basis — whether contract, legal obligation, or explicit consent. We do not collect what we do not need.
End-to-end encryption
All personal and financial data is transmitted with 256-bit SSL encryption — the same security standard used by Brazil's leading banks. Your account details, CPF, and Pix transactions never travel in plain text.
Restricted and controlled access
Only employees of 10br with a direct need for access can view your data. Every access is recorded in an auditable log. No personal data is accessible without higher-level authorization.
No sale of data to third parties
A 10br does not sell, rent, or share your personal data with third parties for marketing or any other purpose. We only share data when necessary to operate the service or to comply with a legal obligation.
Control in your hands
You can access, correct, export, or request deletion of your data at any time by emailing contato@10br.net. Your rights as a data subject under the LGPD are upheld without unnecessary red tape.
Communications only with your consent
Promotions, news, and updates about football, slots, and live casino are only sent to users who have opted in. Unsubscribing from any type of marketing communication takes a single click — no hassle.

This Privacy Policy describes how 10br (10br.net) collects, uses, stores, and protects your personal data. By creating an account or using any service on the platform — Sports Betting on the Brasileirão, slots, live casino, poker, crash games, or any other feature — you confirm that you have read and understood this document. If you have any questions, please contact us at contato@10br.net before signing up.

1

Personal Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of users' personal data on the platform 10br is the operating company behind the 10br.net platform, headquartered in Brazil.

The controller is responsible for decisions regarding the processing of your personal data: what is collected, for what purpose, how it is stored, and with whom it is shared. All practices described in this Policy reflect the controller's decisions and comply with the LGPD and the regulations of the National Data Protection Authority (ANPD).

A 10br also operates in compliance with Law No. 14.790/2023, which regulated fixed-odds betting in Brazil, and with the supplementary rules issued by the Secretaria de Prêmios e Apostas (SPA) of the Ministério da Fazenda, which impose specific obligations for collecting and verifying user data — including the KYC (Know Your Customer) process required before the first withdrawal.

To contact our Data Protection Officer (DPO), please use the email privacidade@10br.net. See more details in section 10 of this document.

2

Personal Data We Collect

A 10br collects only the data strictly necessary to provide its services. Below are the categories of data collected and when each is gathered:

2.1 Data you provide directly
  • Registration: full name, date of birth, CPF, email address, mobile number, residential address;
  • Identity verification (KYC): image of an identification document (national ID, driver's license, or passport), selfie with document, proof of address;
  • Financial Transactions: Pix key, credit or debit card details (tokenized — the 10br never stores the full card number), bank account details for wire transfers;
  • Support communications: live chat and email conversation history, including issue reports and requests;
  • Preferences: account settings, communication preferences, deposit and betting limits set by the user.
2.2 Automatically collected data
  • Browsing data: IP address, browser type and version, operating system, pages visited, time spent, and access source;
  • Platform usage data: betting history, games accessed, live events watched, usage frequency, access times;
  • Device data: device identifier (Device ID), phone model, screen resolution, time zone;
  • Cookies and similar technologies: as detailed in section 5 of this Policy.
2.3 Data we do not collect

A 10br does not collect data considered sensitive under the LGPD, such as racial origin, religious belief, political opinion, health data, or sexual orientation, except where expressly required by a specific legal obligation.

Data Category When it is collected Legal Basis (LGPD)
Identification (name, CPF, email) At registration Contract performance
Documents (KYC) Before the first withdrawal Legal obligation
Financial data (Pix, card) On deposits and withdrawals Contract performance
Browsing and device data On each platform visit Legitimate interest / Consent
Betting and game history On each bet or game played Contract performance / Legal obligation
Support communications When you contact support Legitimate interest
3

How We Use Your Personal Data

A 10br uses your personal data solely for the purposes listed below. No data is used for any purpose other than the one that prompted its collection without prior notice and, where applicable, renewed consent.

  • Account creation and management: user identification, platform access, experience personalization;
  • Financial transaction processing: processing of deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED, as well as withdrawals via Pix;
  • Identity verification (KYC): fulfillment of legal obligations related to anti-money laundering and counter-terrorism financing (Law No. 9.613/1998) and compliance with betting regulations (Law No. 14.790/2023);
  • Fraud Prevention: detection and prevention of duplicate accounts, bonus abuse, bet manipulation, and other fraudulent activity;
  • Customer support: responding to inquiries, resolving technical issues, and handling payment and betting support;
  • Service communications: transactional notifications (deposit confirmation, bet result, withdrawal approval), security alerts, and important platform updates;
  • Marketing communications (with consent only): promotions and special bonuses for Copa do Brasil, Brasileirão, UFC, new slots, and Live Casino events — sent only to users who have authorized this type of communication;
  • Platform improvement: aggregated and anonymized usage analysis to identify usability issues, optimize the mobile interface, and improve features;
  • Regulatory compliance: fulfillment of legal obligations, compliance with requests from competent Brazilian authorities.

Marketing communications: You can unsubscribe from promotional emails and SMS at any time by clicking "unsubscribe" in any communication you receive, or by adjusting your notification preferences in your account dashboard on 10br. Opting out does not affect mandatory transactional communications.

4

Data Sharing with Third Parties

A 10br does not sell or share your personal data with third parties. Data sharing only occurs in the situations listed below, each with a defined legal basis:

4.1 Service providers (operators)

We share data with companies engaged to support the operation of the platform, including:

  • Payment Processors: for processing Pix, boleto, cards, and wire transfers — financial information is transmitted in encrypted form, and only what is necessary for each transaction is shared;
  • Identity verification providers (KYC): for document analysis and verification of registration information;
  • Cloud infrastructure providers: for secure data storage on servers located in Brazil or with guarantees equivalent to Brazilian law;
  • Anti-fraud providers: for behavioral pattern analysis and detection of suspicious activity;
  • Game providers: providers of slots, live casino, and crash games integrated into the platform receive only the user's anonymous identifier — never full personal identification data.

All service providers are engaged under data protection clauses and are prohibited from using the information for their own purposes.

4.2 Legal obligations

A 10br may share data with Brazilian public authorities — such as the Conselho de Controle de Atividades Financeiras (COAF), Receita Federal, Ministério da Fazenda, or judicial authorities — when legally required to do so, pursuant to a court order or valid administrative request. In such cases, only the minimum data necessary to fulfill the obligation is shared.

4.3 International data transfers

When data needs to be processed outside Brazil — for example, by international infrastructure providers — 10br ensures that the destination country provides an adequate level of protection, or that the contractual safeguards required by the LGPD and ANPD regulations have been adopted.

Important: 10br never shares your full data with third-party platforms for advertising purposes. Any retargeting is carried out using anonymized or aggregated data only.

5

Cookies and Tracking Technologies

A 10br uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and communications.

5.1 Types of cookies used
  • Essential cookies: required for the basic operation of the platform — authenticated session management, security, and critical functionality. These cookies cannot be disabled without compromising your use of the platform;
  • Performance and analytics cookies: collect information about how you use the platform — most visited pages, errors encountered, loading times. Data is aggregated and anonymized. These can be disabled in your cookie preferences;
  • Functionality Cookies: store your preferences such as language, platform layout, and betting settings. They can be disabled, but doing so may affect your personalized experience;
  • Marketing Cookies (with consent only): used to display relevant communications about promotions from 10br within the platform itself. They are not used to track your browsing activity on other websites.
5.2 How to manage cookies

You can manage your cookie preferences at any time through the preference panel available in the platform footer or through your browser settings. Disabling essential cookies may prevent certain features of the 10br.

On mobile devices (Android and iPhone), browser cookie settings are available in the options of Chrome, Safari, or whichever browser you use. The 10br requires no app installation — everything runs in the browser, and cookie preferences apply to all sessions on the same browser.

6

Personal Data Security

The protection of your personal data is a core structural priority at 10br. The security measures in place include:

  • 256-bit SSL/TLS Encryption: all communication between your phone or computer and the servers of 10br is encrypted. This includes registration data, Pix transactions, card information, and betting history;
  • Encrypted storage: sensitive data such as passwords are stored using a high-strength cryptographic hash (bcrypt). Financial data is tokenized — the 10br never stores the full number of credit or debit cards;
  • Role-based access control (RBAC): each team member accesses only the data necessary for their specific role. All access is recorded in an auditable log with full traceability;
  • Two-factor authentication (2FA): available to all users — we strongly recommend enabling 2FA for additional account protection. It can be configured in your account's security panel;
  • Continuous monitoring: intrusion detection systems and 24-hour monitoring identify and respond to unauthorized access attempts in real time;
  • Periodic security testing: the infrastructure of 10br undergoes regular penetration testing (pentests) conducted by independent specialized firms;
  • Incident response plan: in the event of a data breach, the 10br will notify affected users and the ANPD within the timeframes required by the LGPD.

Security tip: Use a strong, unique password for your account at 10br. Never share your password or verification code. Our team will never ask for your password via email, chat, or phone. If you receive any communication requesting your password, it is a fraud attempt — report it immediately at contato@10br.net.

7

Data Retention and Deletion

A 10br retains your personal data for only as long as necessary for each purpose, in compliance with the minimum periods required by law:

7.1 Retention periods
  • Registration and identification data: retained for as long as the account remains active and for a period of 5 years after account closure, as required by anti-money laundering legislation (Law No. 9.613/1998);
  • Financial transaction history: retained for 5 years after each transaction, in accordance with tax and regulatory requirements;
  • Betting and gaming records: retained for 5 years in accordance with SPA/Ministry of Finance regulations;
  • KYC documents: retained for 5 years after account closure, or 10 years if an administrative or judicial investigation is ongoing;
  • Browsing data and analytics cookies: retained for up to 13 months, after which they are anonymized or deleted;
  • Support communications: retained for 2 years after each support ticket is closed.
7.2 Deletion request

You can request the deletion of your personal data at any time by emailing privacidade@10br.net. The 10br will respond to the request within 15 business days. Deletion will be complete for data whose processing is not required by law. For data subject to mandatory retention periods (such as financial records), deletion will occur once that mandatory period has ended.

Closing your account does not result in the immediate deletion of all data — legal retention periods apply regardless of account status.

8

Your Rights as a Data Subject (LGPD)

The General Data Protection Law guarantees you, as a data subject, the following rights regarding the personal data processed by 10br. All rights may be exercised by submitting a request via email to privacidade@10br.net:

Right of Access

Request a copy of all personal data that 10br holds about you, including the purpose of each processing activity and how long it will be retained.

Right to Rectification

Request the correction of incomplete, incorrect, or outdated data. Basic registration details can also be updated directly in your account dashboard.

Right to Erasure

Request the deletion of data whose processing is not required by law. Data subject to mandatory legal retention periods will be deleted once those periods expire.

Right to Data Portability

Receive your personal data in a structured, machine-readable format (JSON or CSV) for transfer to another controller, where technically feasible.

Consent Withdrawal

Withdraw consent given for consent-based processing — such as marketing communications — at any time, without affecting any processing carried out prior to withdrawal.

Right to Information on Data Sharing

Know which public or private entities 10br has shared your data with and under what circumstances, including identification of those entities where legally permitted.

All data subject rights requests are responded to within 15 business days from the date of receipt. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice to the data subject.

If you feel your rights have not been properly addressed by 10br, you may file a complaint with the National Data Protection Authority (ANPD) through the portal gov.br/anpd.

9

Users Under 18

The platform 10br is intended exclusively for individuals aged 18 and over. Use of the platform by minors is expressly prohibited under our Terms and Conditions and by Brazilian gambling legislation (Law No. 14.790/2023).

A 10br does not knowingly collect personal data from individuals under 18. The identity verification (KYC) process includes age confirmation before the first withdrawal. Accounts where we identify — at any point — that the holder is a minor are closed immediately and all collected data is deleted or blocked as circumstances require.

If you believe a minor has created an account on the platform using your data or a third party's data, please contact us immediately at contato@10br.net so that we can take the necessary steps.

Gambling is prohibited for minors: Sports Betting, slots, live casino, crash games, and poker on 10br are exclusively for users aged 18 and over. Parents and guardians must ensure that minors do not have access to the platform.

10

Contact, DPO & Policy Updates

10.1 Data Protection Officer (DPO)

In accordance with art. 41 of the LGPD, the 10br has appointed a Data Protection Officer (DPO) responsible for:

  • Receive and respond to communications from data subjects and the ANPD;
  • Provide internal guidance on data protection practices;
  • Ensure ongoing compliance with the LGPD and related regulations.

You can contact the DPO of 10br via the dedicated email address: privacidade@10br.net.

10.2 Contact channels for privacy matters
  • DPO Email: privacidade@10br.net (for data subject rights and specific privacy matters)
  • General email: contato@10br.net (for general questions about the Policy)
  • Live chat: available 24/7 directly on the 10br.net platform

DPO requests are processed within up to 15 business days. For general inquiries by email, responses are provided within up to 4 business hours on business days.

10.3 Updates to this Privacy Policy

This Policy may be updated periodically to reflect changes in the services of the 10br, in Brazilian data protection law, or in security best practices. When relevant changes affecting your rights occur, you will be notified by email at least 15 days in advance. Minor changes for clarity and organization will be communicated via a notice on the platform.

The most current version of this Policy will always be available at 10br.net/privacy-policy, with the date of the last update indicated at the top of the document.

This Privacy Policy was last updated on January 2026. For any questions about how your personal data is handled on 10br, please contact us at privacidade@10br.net. We take your privacy seriously — not as a formality, but as part of our commitment to everyone who trusts our platform.


Your data protected, your bet placed with peace of mind

Create your account on 10br, deposit via Pix from R$ 20.00 and bet on Brasileirão, UFC, slots, and much more — with full security and in compliance with the LGPD.


Related Documents

Other documents that form part of your agreement with 10br

This Privacy Policy is part of a set of documents governing the use of the platform

Português