How 500bet Protects Your Privacy
The key principles of our policy before you read the full document
500bet operates in full compliance with the General Data Protection Law (Lei 13.709/2018). We have an in-house Data Protection Officer (DPO) responsible for ensuring that all personal data processing follows the principles and obligations set out in current Brazilian legislation.
All communication between your device and 500bet's servers is secured with 256-bit SSL encryption — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil. Your registration data, financial information, and gaming history are always transmitted in encrypted form.
500bet follows the principle of data minimization: we collect only what is strictly necessary to operate your account, process payments via Pix and other Brazilian payment methods, and meet our legal obligations. We do not request information for which we have no legitimate use.
You may at any time access, correct, export, or request the deletion of your personal data. You may also withdraw any previously granted consent. Our team responds to data subject requests within 15 business days, as established by the LGPD.
500bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Any sharing with operational partners occurs only when strictly necessary to provide the service, and always with contractual data protection guarantees equivalent to our own.
In the event of a security incident that may affect your personal data, 500bet will notify the ANPD (Autoridade Nacional de Proteção de Dados) and the affected data subjects within the legally established timeframes, with clear information about what occurred, which data was affected, and what measures were taken.
- 1. Introduction and Controller
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing
- 6. International Transfers
- 7. Security and Protection
- 8. Data Retention
- 9. Cookies and Technologies
- 10. Your Rights as a Data Subject
- 11. Marketing Communications
- 12. Minors
- 13. Changes to This Policy
- 14. Contact and DPO
Terms and Conditions Responsible Gambling Frequently Asked Questions
1. Introduction and Data Controller
This Privacy Policy describes the practices of 500bet regarding the collection, use, storage, sharing, and protection of personal data of users of the platform available at 500bet.asia, including all associated services: Sports Betting, online casino, progressive jackpots, crash games, and other platform features.
For the purposes of the LGPD (Lei Geral de Proteção de Dados – Lei 13.709/2018), the 500bet acts as data controller of its users. This means we are responsible for decisions about what data to collect, for what purposes, and how it is processed.
By creating an account with 500bet, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree with any part of this document, we recommend that you do not proceed with registration.
This policy applies to all registered users and visitors of the platform, regardless of the device used — desktop, mobile, tablet, or any other. All content was written in Brazilian Portuguese and is governed by Brazilian law.
2. Data We Collect
The 500bet collects personal data at various points during platform use. Below, we detail the categories of data collected and the situations in which collection takes place:
2.1 Data You Provide Directly
| Category | Data | When It Is Collected |
|---|---|---|
| Identification | Full name, date of birth, CPF, RG, or CNH | Registration and KYC verification |
| Contact | Email address, mobile number | Registration |
| Address | ZIP code, street address, city, state | Registration and KYC verification |
| Financial | Pix key, bank details for wire transfers, last 4 digits of card | Deposits and withdrawals |
| Documents | Identity document photos, selfie with document | KYC Process |
| Communication | Messages exchanged with support | When contacting support |
2.2 Automatically Collected Data
- Access and browsing data: IP address, browser type, operating system, pages visited, session duration, access date and time;
- Device data: mobile or computer model, operating system, unique device identifiers;
- Location data: approximate location inferred from your IP address for compliance with geographic restrictions and fraud detection — we do not collect GPS location without your explicit consent;
- Gaming and betting data: complete history of sports bets, casino sessions, deposits, withdrawals, and bonus usage — data required for account operation and compliance with legal obligations.
2.3 Third-party data
In some cases, we may receive your data from service providers such as payment gateways (responsible for processing Pix, credit and debit cards, PicPay, Mercado Pago, and boleto bancário) and identity verification bureaus used in the KYC process, always within the limits permitted by law.
3. How We Use Your Data
The personal data collected by 500bet are used for the following purposes:
- Account creation and management: account registration, authentication, access control, and account-related communications;
- Payment processing: deposits via Pix, credit and debit card, PicPay, Mercado Pago, bank slip (boleto), and TED wire transfer; withdrawal processing via Pix and TED transfer to Brazilian banks such as Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, and others;
- Service delivery: operation of sports betting, casino games, crash games, and progressive jackpots;
- Identity verification (KYC): user identity confirmation, minimum age verification (18 years), and compliance with anti-money laundering obligations;
- Security and fraud prevention: detection and prevention of unauthorized access, duplicate accounts, bot usage, and other conduct prohibited under the Terms and Conditions;
- Responsible gambling: monitoring of gameplay patterns to identify risky behaviors and trigger responsible gambling tools where applicable;
- Compliance with legal obligations: retention of financial and identity records as required by Brazilian law, including tax obligations and anti-money laundering requirements;
- Operational communications: sending account notifications, transaction updates, security alerts, and changes to the terms of use;
- Marketing and promotional communications: sending offers, promotions, and 500bet news, exclusively with your prior consent, which may be withdrawn at any time;
- Platform improvement: usage analytics to improve the Brazilian player experience, fix bugs, and develop new features.
4. Legal Basis for Data Processing
All personal data processing carried out by 500bet has an adequate legal basis as required by the LGPD. The main applicable legal bases are:
| Processing Purpose | Legal Basis (LGPD) |
|---|---|
| Account creation and management, bet processing | Contract performance (Art. 7, V) |
| KYC verification, anti-money laundering | Legal obligation (Art. 7, II) |
| Fraud prevention and platform security | Legitimate interest (Art. 7º, IX) |
| Sending marketing communications | Consent (Art. 7, I) |
| Platform improvement and usage analytics | Legitimate interest (Art. 7º, IX) |
| Financial records retention | Legal obligation (Art. 7, II) |
When processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, go to your account settings or contact support.
5. Data Sharing
The 500bet does not sell or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the situations described below, always with appropriate safeguards in place:
5.1 Operational Service Providers
We share data with companies that support us in delivering our services, including:
- Payment gateways: to process deposits and withdrawals via Pix, credit and debit cards, PicPay, Mercado Pago, boleto bancário, and TED. These providers act as data processors under our instructions and are bound by contractual data protection obligations equivalent to our own;
- Casino game providers: Evolution Gaming, Pragmatic Play, PG Soft, and other providers receive only the minimum data necessary to operate game sessions — typically an anonymized user identifier;
- Identity verification services (KYC): specialized platforms that assist us with identity verification and document validation for users;
- Cloud infrastructure providers: our servers are hosted with certified cloud providers that maintain rigorous information security standards.
5.2 Legal Obligations
We may share data with public authorities, regulatory bodies, or the judiciary when required by law, court order, or instruction from a competent regulatory authority, including the Banco Central do Brasil and the ANPD.
5.3 Rights Protection
In situations where it is necessary to protect the rights of 500bet or third parties — such as in cases of confirmed fraud, bonus abuse, or other unlawful conduct — we may share data with the relevant authorities or with entities specialized in combating financial crime.
We never share: your data with external advertisers, data brokers, unauthorized third-party marketing platforms, or any entity that has no legitimate operational or legal need to access it.
6. International Data Transfers
Some of our service providers — such as live casino game suppliers (Evolution Gaming, Pragmatic Play) and cloud infrastructure providers — may be located outside Brazil or process data on servers in other countries.
When such transfers take place, the 500bet ensures that appropriate safeguards are in place, as required by Articles 33 to 36 of the LGPD, which may include:
- Standard data protection contractual clauses approved by the ANPD;
- Transfers to countries with an adequate level of protection recognized by the ANPD;
- Internationally recognized compliance certifications and seals.
You may request more information about the specific safeguards in place for international data transfers by contacting our DPO at suporte@500bet.asia.
7. Data Security and Protection
The 500bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, improper alteration, or unauthorized disclosure. The main measures in place include:
- Encryption in transit: 256-bit SSL/TLS encryption on all communications between the user's device and our servers;
- Encryption at rest: sensitive data stored in encrypted format in our databases;
- Access control: access to users' personal data restricted to employees with a legitimate need, through strong authentication and full access logging;
- Continuous monitoring: automated intrusion detection and anomalous behavior monitoring systems operating 24 hours a day;
- Security testing: periodic security audits and penetration testing conducted by specialized firms;
- Incident response plan: documented procedures for identifying, containing, and reporting security incidents, in accordance with LGPD requirements.
No security system is completely impenetrable. Despite all our efforts, we cannot guarantee absolute security. We therefore recommend taking protective measures on your end as well: use strong, unique passwords, keep your operating system up to date, and never share your login credentials.
8. Data Retention
The 500bet retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum mandatory retention periods required by law. The criteria used to determine retention periods include:
| Data Category | Retention Period | Basis |
|---|---|---|
| Registration and identification data | Account lifetime + 5 years | Legal obligation – LGPD, Civil Code |
| Financial data (transactions) | 10 years after the transaction | Legal obligation – National Tax Code |
| KYC Documents | Account lifetime + 5 years | Legal obligation – Anti-Money Laundering Law |
| Betting and gaming history | 5 years after account closure | Legitimate interest and legal obligation |
| Access and security logs | 12 months | Marco Civil da Internet (Law 12,965/2014) |
| Support communications | 3 years after the end of contact | Legitimate interest – dispute resolution |
| Marketing data (consent) | Until consent is withdrawn | Consent – LGPD Art. 7º, I |
Once the applicable retention period expires, data is securely deleted or irreversibly anonymized, making it impossible to identify the data subject.
9. Cookies and Tracking Technologies
The 500bet uses cookies and similar technologies to ensure the platform functions correctly and to deliver a personalized experience. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.
9.1 Types of Cookies Used
- Essential cookies: required for the platform's core functionality — maintaining authenticated sessions, the betting slip, and language preferences. These cannot be disabled without affecting your ability to use the platform;
- Performance cookies: collect information about how users interact with the platform in order to identify errors and areas for improvement. All data is aggregated and anonymized;
- Functionality cookies: allow the platform to remember your preferences — such as your preferred odds format, favorite games history, and display settings;
- Analytics cookies: used to measure audience reach and understand usage patterns. All data collected is anonymized before any analysis.
9.2 Cookie Management
You can manage your cookie preferences through the banner displayed on your first visit to the platform or via your browser settings. Disabling non-essential cookies may affect certain platform features, but will not prevent you from using the core services. Note that essential cookies cannot be disabled as they are required for the platform's basic operation.
10. Your Rights as a Data Subject
The LGPD grants you, as a data subject, a set of rights regarding your personal information processed by 500bet. Below are all your rights and how to exercise them:
Access
Request confirmation of what personal data we process about you and receive a complete copy of that information.
Correction
Request the correction of incomplete, inaccurate, or outdated data directly through your account dashboard or by contacting support.
Deletion
Request the deletion of data processed on the basis of consent. Data processed under a legal obligation cannot be deleted before the minimum legal retention period.
Portability
Receive your personal data in a structured, interoperable format for transfer to another service provider.
Objection
Object to processing based on legitimate interest where that interest does not override your fundamental rights and freedoms.
Sharing Information
Request information about the public and private entities with which 500bet has shared your data.
To exercise any of these rights, contact our data protection officer (DPO) at suporte@500bet.asia, clearly stating which right you wish to exercise and providing enough information to confirm your identity. We respond within 15 business days within the timeframe established by the LGPD. Where a request is lawfully denied, we will provide the applicable legal grounds.
11. Marketing Communications
The 500bet may send promotional communications about bonuses, offers, new games, and other platform news — provided you have given explicit consent to receive them, either at registration or at a later date.
You may opt out of marketing communications at any time, free of charge and without penalty, through:
- Unsubscribe link included in all promotional emails;
- Communication preference settings in your account dashboard;
- Direct request to support via live chat or email.
Opting out of marketing does not affect the receipt of essential operational communications — such as deposit and withdrawal confirmations, account security alerts, and important updates to the terms of use.
Even after unsubscribing from email marketing, you may still see personalized content within the platform based on your usage history. This content is treated as a platform feature, not external marketing.
12. Minors
The services of 500bet are intended exclusively for individuals aged 18 and older. We do not knowingly collect personal data from anyone under 18.
If we identify that an account was created by a minor, we will immediately suspend access, delete the collected data to the extent permitted by law, and take all further measures set out in the platform's Terms and Conditions.
If you are a guardian of a minor and believe they have created an account on 500bet, please contact our support team immediately at suporte@500bet.asia. We will handle your case with priority and full confidentiality.
13. Changes to This Policy
The 500bet may update this Privacy Policy periodically to reflect changes in our data processing practices, updates to Brazilian legislation (including new ANPD regulations), or improvements to our services.
When we make significant changes, we will provide reasonable advance notice through:
- Email notification to the address registered on your account;
- A prominent notice on the platform upon your first login after the changes are published;
- Update of the "last updated" date shown at the top of this document.
Your continued use of the platform after the new version takes effect constitutes acceptance of the changes. If you do not agree with the updates, you may request account closure before the new version's effective date.
The current version of this policy is always available on this page, accessible from any device, with no account required.
14. Contact the Data Protection Officer (DPO)
Pursuant to Article 41 of the LGPD, the 500bet has appointed a Data Protection Officer (DPO) responsible for:
- Accept complaints and communications from data subjects;
- Provide clarification on data processing practices;
- Receive communications from the ANPD and take the necessary steps;
- Guide the 500bet team on LGPD compliance.
To exercise your rights as a data subject, file a complaint, request information, or ask questions about this policy, please contact our DPO:
Last updated: June 1, 2026. Version 3.1. This document fully supersedes all previous versions of this Privacy Policy.
Frequently Asked Questions About Privacy at 500bet
What players ask most about how we handle their data
This Privacy Policy is in compliance with the LGPD (Lei 13.709/2018). For questions, data subject requests, or complaints related to personal data processing, please contact our DPO at suporte@500bet.asia. You may also file complaints directly with the ANPD (Autoridade Nacional de Proteção de Dados) if you believe your rights have been violated. See also our Terms and Conditions and the Responsible Gambling.
Play Responsibly at 500bet
Your data protected by the LGPD, 256-bit SSL encryption, and full transparency. Create your account, deposit via Pix, and start playing with confidence.