🔒 OFFICIAL PRIVACY Updated January 2026

88aa Privacy Policy — Your Data Protected

This Privacy Policy clearly explains how 88aa collects, uses, stores, and protects the personal data of players registered in Brazil — all in compliance with the LGPD (Law No. 13.709/2018).

LGPD Compliance 256-bit SSL Encryption Your guaranteed rights Valid in Brazil
Official 88aa Document
10 detailed sections
Clear and straightforward language
Your rights as a data subject
Full LGPD compliance
LGPD
Legal Compliance
256bit
SSL Encryption
Zero
Data Selling
8
Data Subject Rights
24h
Support Channel

How 88aa protects your privacy

Six concrete commitments 88aa makes to every registered player in Brazil

Minimal and Necessary Data Collection

O 88aa collects only the data strictly necessary to operate your account: name, CPF, date of birth, email, and mobile number. Nothing beyond what the law requires for identity verification and fraud prevention. No excessive tracking, no third-party data collection.

Encryption on All Connections

All communication between your phone or computer and the servers of 88aa is protected by 256-bit SSL encryption — the same standard used by major banks such as Itaú, Bradesco, and Nubank. Your registration data, betting history, and Pix payment information are never transmitted as plain text.

Your Data Is Never Sold

O 88aa never sells, rents, or transfers personal data to advertisers or marketing companies. Data is used exclusively to operate the platform, personalize internal promotions, and fulfill legal obligations — never to generate revenue with third parties.

Your Guaranteed LGPD Rights

As a data subject, you have 8 rights guaranteed by the LGPD that 88aa fully upholds: access, correction, anonymization, portability, deletion, information on sharing, consent withdrawal, and objection to processing. All rights can be exercised through 24/7 support.

Secure Storage with Defined Retention Periods

The data of the 88aa are stored on servers with strict access controls. Data from closed accounts is retained only for the minimum period required under Brazilian law — typically 5 years for financial records — and is then securely and irreversibly deleted.

Incident Notification

Should any security incident occur that may affect your data, the 88aa notifies affected users within the timeframe required by the LGPD — 72 hours after the issue is identified — with full details of what occurred and the steps taken to address and prevent future incidents.

About this document: this Privacy Policy applies to all registered users of the 88aa and transparently describes how we handle your personal data. By creating an account on the platform, you confirm that you have read and agree to the practices described here. If you have any questions, our support team is available 24 hours a day via live chat or at suporte@88aa-bangla.com.

1

Who we are — the controller of your data

O 88aa is an online entertainment platform offering live casino, slots, poker, roulette, crash games, and progressive jackpot services to the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018), the 88aa acts as controller of the personal data of users registered on the platform.

As data controller, the 88aa decides what is collected, why it is collected, and how data is handled — and takes full legal responsibility for ensuring that such processing is carried out lawfully, transparently, and securely, in full compliance with the LGPD and all other applicable regulations in Brazil.

This Privacy Policy applies to all user touchpoints with the 88aa: the website accessed via browser, the mobile interface, the chat support system, and any email or SMS communications related to the account.

This policy was drafted in compliance with the LGPD (Law No. 13.709/2018) and with the Consumer Protection Code (CDC — Law No. 8.078/1990). In the event of any conflict between this policy and applicable law, the law shall always prevail.

2

What data we collect and how

O 88aa collects personal data at different points during your interaction with the platform. Below, we detail each category of data collected and its source.

Data provided directly by the user during registration:

  • Full legal name;
  • CPF (Cadastro de Pessoas Físicas);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Residential address (requested for KYC verification on higher-value withdrawals).

Data collected automatically during platform use:

  • IP address and approximate geographic location;
  • Device type and version (Android phone, iPhone, computer);
  • Browser and operating system used;
  • Session history — access time, duration, and pages visited;
  • Betting history — type, amount wagered, outcome, and time.

Data collected during verification processes (KYC):

  • Government-issued photo ID (RG or CNH);
  • Proof of address issued within the last 90 days;
  • Selfie with ID document (in advanced verification cases).

Financial data collected in transactions:

  • Pix key linked to the user's bank account;
  • Last 4 digits of the credit or debit card (when used);
  • Deposit and withdrawal history — amount, method, date, and status.

O 88aa does not collect or store banking passwords, full credit card numbers, or biometric data beyond what is necessary for identity verification.


3

How we use your data

The data collected by 88aa are used exclusively for the purposes described below — all of which are directly related to platform operations and user protection:

  • Account operation and management: create and maintain user access, process deposits via Pix and boleto bancário, execute withdrawals, and calculate and credit the weekly rakeback under the VIP Program;
  • Identity verification and fraud prevention: confirm that the account belongs to a real person, aged 18 or over, with a valid CPF — and monitor suspicious transactions that may indicate money laundering or platform misuse;
  • Experience personalization: display promotions relevant to your gaming profile, recommend games based on your history, and send VIP Program communications tailored to your level;
  • Customer support: identify the user during support interactions via chat, email, or WhatsApp and resolve issues efficiently — without requiring you to re-identify yourself each time;
  • Compliance with legal obligations: maintain financial records as required by the regulations of the Banco Central, COAF (Conselho de Controle de Atividades Financeiras), and the Receita Federal, where applicable;
  • Platform security: detect and block unauthorized access, bot usage, duplicate accounts, and any other activity that violates the Terms and Conditions of the 88aa.
O 88aa never uses your data to sell advertising to third parties. The only communications you receive from the 88aa are related to your account, your promotions, and the VIP Program — and you can unsubscribe from promotional emails at any time in your account settings.

4

Legal basis for data processing

The LGPD requires that all processing of personal data have a specific legal basis. The 88aa relies on the following legal bases, as set out in Article 7 of Law No. 13,709/2018:

Purpose of processing Legal basis (LGPD)
Create and operate the user account Contract performance (art. 7, V)
Process deposits and withdrawals via Pix Contract performance (art. 7, V)
Identity verification (KYC) Legal obligation (art. 7, II)
Anti-money laundering Legal obligation (art. 7, II)
Sending promotional communications Consent (art. 7, I)
Personalization of the gaming experience Legitimate interest (art. 7, IX)
Platform Security and Fraud Detection Legitimate interest (art. 7, IX)
Maintenance of legal financial records Legal obligation (art. 7, II)

When processing is based on consent — such as sending promotional emails — users may withdraw that consent at any time without affecting access to the platform or their account.


5

Data sharing with third parties

O 88aa does not sell personal data. Data sharing with third parties occurs only in the situations listed below, always under contractual controls and limited to the minimum extent necessary for each purpose:

  • Payment gateways: when processing deposits via Pix, boleto bancário, PicPay, Mercado Pago, or credit/debit card, transaction data is shared with the corresponding payment processor solely to carry out the financial operation;
  • Game providers: when you launch a game from a partner provider (such as Pragmatic Play or Evolution Gaming), minimal technical session data is shared to load the game correctly — no personally identifiable information is transmitted beyond what is strictly necessary;
  • Identity verification (KYC): documents submitted for verification may be processed by specialized KYC platforms operating under confidentiality agreements and LGPD compliance clauses;
  • Government authorities and regulatory bodies: when required by law, court order, or request from the Central Bank, COAF, Receita Federal, or any other competent Brazilian authority;
  • Independent auditors: for RNG certification and operational compliance purposes — without access to individualized personal data of users.

All service providers that receive data from the 88aa are contractually required to treat this information with confidentiality, use it solely for the specific authorized purpose, and adopt security measures equivalent to or stricter than those of the 88aa.


6

Cookies and tracking technologies

O 88aa uses cookies and similar technologies to ensure the platform runs correctly, improve the user experience, and, in some cases, personalize the content displayed. Below are the types of cookies used:

Cookie Type Purpose Required?
Session Keep the user logged in while browsing Yes
Security Protect against CSRF and unauthorized access Yes
Preferences Remember language, time zone, and account settings Yes
Performance Monitor loading speed and technical errors Optional
Personalization Display games and promotions based on your activity history on 88aa Optional

Mandatory cookies are required for the platform to function properly — without them, login, deposits, and games will not work correctly. Optional cookies can be disabled in your browser settings or in the account privacy center without affecting your main access to the 88aa.

O 88aa does not use third-party cookies for external ad tracking. Personalization cookies are used solely within the platform itself to improve your experience — never for remarketing on other sites.


7

Storage, security and retention period

The personal data collected by 88aa are stored on servers with the following security controls:

  • Encryption at rest (AES-256) for all sensitive data stored in the database;
  • In-transit encryption (TLS 1.3) for all communications between the user's device and the servers of 88aa;
  • Role-based access control (RBAC) — only team members with a genuine need to access data are granted permission, with auditable access logs;
  • 24/7 security monitoring with automatic alerts for anomalous access attempts;
  • Encrypted backups with controlled retention and a documented recovery procedure.

Regarding data retention periods, 88aa follows the criteria below:

  • Active account data: retained for as long as the account remains active and for the period necessary to fulfill the purposes described in this policy;
  • Financial records: retained for a minimum of 5 years after the last transaction, as required by the Central Bank of Brazil and COAF regulations;
  • KYC Verification Data: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legislation;
  • Closed account data (no pending legal obligations): anonymized or deleted within 90 days after account closure is confirmed.

Once the applicable retention period expires, data is securely and irreversibly deleted — with no possibility of recovery — or anonymized so that the original user can no longer be identified.


8

Your rights as a data subject (LGPD)

The LGPD guarantees the user of the 88aa the following rights regarding your personal data, exercisable at any time by submitting a request to support:

  • Access: you may request a complete copy of all personal data that 88aa holds about you;
  • Correction: if any information is incorrect or out of date — such as your email address or mobile number — you can request a correction at any time;
  • Anonymization or blocking: you may request that data which is unnecessary or processed in violation of the LGPD be anonymized or blocked;
  • Deletion: you may request the deletion of data processed on the basis of consent — such as data used for promotional communications — without affecting data retained under legal obligation;
  • Portability: you may request that your data be exported in a structured, machine-readable format for transfer to another service;
  • Information on sharing: you have the right to know which companies the 88aa shared your data and for what reason;
  • Withdrawal of consent: when processing is based on consent, you may withdraw it at any time without affecting your access to the platform's core features;
  • Right to object: you may object to processing carried out on the basis of legitimate interest, and 88aa will assess whether the legitimate interest outweighs your individual rights in the specific case.

To exercise any of these rights, contact us via the 24h live chat on the platform or by support email. The 88aa responds to data subject rights requests within 15 business days from the date the request is received.

For account and data deletion requests, the 88aa may retain financial information for the minimum legal retention period (5 years) even after account closure — this retention is a legal obligation and cannot be waived even upon explicit user request.

9

Users under 18

O 88aa is an adult entertainment platform, intended exclusively for users aged 18 and over residing in Brazil. The collection of personal data from individuals under 18 is expressly prohibited by the LGPD (art. 14) and by the platform's Terms and Conditions.

To ensure no underage user accesses the 88aa, the platform adopts the following measures:

  • Automatic CPF verification at the time of registration — the system validates the date of birth associated with the CPF against the Receita Federal database;
  • Photo ID (RG or CNH) required before your first withdrawal is released;
  • Monitoring of usage patterns that may indicate access by a minor — such as shared account use with a registered adult;
  • Immediate account suspension upon suspicion of underage access, with an investigation completed before reactivation.

If you suspect that someone under 18 is using the 88aa — whether your own account or access to a family member's account — contact 24h support immediately. The 88aa treats this type of report as a top priority.

O 88aa does not intentionally collect any data from children or minors. Should it be identified that a minor's data was inadvertently collected, that data will be immediately deleted and the account permanently blocked.


10

Contact, DPO, and policy updates

O 88aa has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for matters related to personal data processing and the exercise of data subjects' rights.

To get in touch with the DPO or the privacy team at 88aa:

  • Live chat: available 24 hours directly on the platform — select the "Privacy & LGPD" option in the support menu;
  • Email: suporte@88aa-bangla.com — include "LGPD Request" in the subject line for priority routing to the DPO;
  • Response time: the 88aa responds to all privacy requests within 15 business days.

This Privacy Policy may be updated periodically to reflect changes in legislation, data processing practices, or platform features. Whenever a material change is made, the 88aa notifies users at least 15 days in advance via the registered email address and through an in-platform notification.

The most recent version of this policy will always be available on the Privacy Policy of the 88aa, with the update date indicated at the top of the document.

This Privacy Policy came into effect on January 2026. Previous versions are available upon request to the DPO. If you have any questions about how your data is handled on the 88aa, get in touch — our team is available 24 hours a day, every day.

Your 8 LGPD Rights at 88aa

Each of these rights can be exercised via the 24h support chat — no red tape, no complicated forms

Access

Request a full copy of all data 88aa holds about you — delivered in a readable format within 15 business days.

Correction

Correct any inaccurate or outdated information — email, phone number, address — directly in your account settings or by contacting support.

Anonymization

Request that unnecessary data be anonymized — made permanently non-identifiable — when there is no legal obligation to retain it.

Deletion

Request the deletion of data processed on the basis of consent. Data retained under legal obligation cannot be deleted before the minimum required period.

Portability

Export your data in a structured format for transfer to another service. 88aa delivers data in JSON or CSV format upon request.

Data Sharing Information

Find out which companies 88aa has shared your data with and why — including the full list of recipients and the legal basis for each disclosure.

Consent Withdrawal

Cancel consent to promotional emails at any time — via the unsubscribe link in the email itself or through your 88aa account settings.

Objection

Object to processing based on legitimate interest. 88aa will evaluate the request and provide a written justification if legitimate interest prevails in the specific case.

Privacy FAQ

The most common questions received by 88aa support regarding data protection

No. The CPF collected during registration at 88aa is used solely for identity verification, prevention of duplicate accounts, and compliance with legal obligations — such as those required by the Banco Central and COAF for anti-money laundering purposes. The 88aa never shares CPF numbers or any other personal data with advertisers, marketing companies, or third-party platforms for commercial purposes. Identifying data is only shared when required by a court order or a request from a competent Brazilian authority.

No. 88aa follows retention periods defined by Brazilian law. Betting history and financial transaction records are kept for a minimum of 5 years after the last transaction — as required by Central Bank and COAF regulations for financial records. After this period, data is anonymized or irreversibly deleted. If you close your account, operational data is anonymized within 90 days, but financial records remain subject to the 5-year legal retention period regardless of account closure.

There are three ways to opt out of promotional emails from the 88aa: (1) click the "unsubscribe" or "opt out" link in the footer of any promotional email — the cancellation takes effect immediately; (2) go to your account settings on the platform and turn off email notifications under the communication preferences section; (3) reach out to 24h support via live chat and request removal from all promotional communications. Opting out of promotional emails does not affect mandatory account-related communications — such as withdrawal confirmations, security alerts, and notifications about changes to the terms.

O 88aa applies multiple layers of security to minimize the risk of incidents — encryption at rest and in transit, role-based access control, and 24/7 monitoring. However, the LGPD sets out clear obligations in the event of a security incident: the 88aa must notify the National Data Protection Authority (ANPD) and affected users within 72 hours of identifying the incident, describing what occurred, which data was compromised, and what steps were taken to contain the damage. Notification is sent to the email address on the account. Additionally, all financial data is stored with AES-256 encryption, meaning that even if a server is compromised, the data remains unreadable without the decryption key.

Yes. You can request account closure and data deletion at any time through 88aa's 24h support. 88aa. The process follows these steps: (1) identity verification to confirm the account holder is making the request; (2) return of the available real balance via Pix within up to 5 business days; (3) cancellation of any pending bonuses; (4) anonymization of operational data within up to 90 days. Please note: financial records — deposit and withdrawal history — are retained for a minimum of 5 years after the last transaction, as required by law. This retention cannot be waived even upon express request, but data is anonymized to the greatest extent possible within legal requirements.

Your data protected — your fun guaranteed

88aa combines real security with premium entertainment. Create your account in 2 minutes, deposit from R$ 20.00 via Pix, and play with the confidence of knowing your data is in good hands.

LGPD Commitment

88aa processes all personal data in accordance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018). No data is sold, rented, or shared with third parties for commercial purposes. For privacy inquiries, reach us via 24h live chat or at suporte@88aa-bangla.com.

Also read our Terms and Conditions and the Responsible Gambling.

Clear privacy, safe play — welcome to 88aa

You've just read how we protect your data. Now it's time to enjoy over 3,000 games with fast Pix withdrawals, 24h Portuguese-language support, and a VIP Program with automatic weekly rakeback.

Sign Up at 88aa Now
Free registration · Minimum deposit R$ 20.00 · Instant Pix · 24/7 support in Portuguese · +18
Português