🔒
Last updated: July 2026

Privacy Policy 15win – Data Protection and LGPD

15win processes your data responsibly and transparently, in full compliance with the Lei Geral de Proteção de Dados (LGPD – Law No. 13,709/2018). On this page you'll find everything you need to know: what data we collect, why we collect it, how we protect it, and what your rights are as a data subject.

How 15win Protects Your Privacy

Six principles that guide the processing of personal data on the platform.

LGPD Compliance

All data processing at 15win follows the Lei Geral de Proteção de Dados (Law No. 13.709/2018). You have the right to know exactly what data is collected, for what purpose, and how long it is retained.

No Data Selling

15win never sells, rents, or transfers your personal data to third parties for commercial purposes. Data is only shared to operate the services you signed up for or when required by law.

End-to-End Encryption

All connections between your device and 15win's servers are protected by SSL/TLS. Financial data — including Pix keys, card details, and transaction history — is stored with an additional layer of encryption.

Control in Your Hands

You can access, correct, export, or request deletion of your data at any time through your account dashboard or by contacting our support team. Your rights under the LGPD are always respected.

Minimal and Necessary Collection

15win collects only the data strictly necessary to provide the service, meet legal obligations, and prevent fraud. We do not collect sensitive data beyond what is required by identity verification (KYC) regulations.

Incident Transparency

In the event of any security incident that may affect your data, 15win will notify the affected data subjects and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes set out in the LGPD.

1

Who We Are and How to Contact Us

This Privacy Policy applies to the Sports Betting and online casino platform operated under the brand 15win, available at https://15win.life. For the purposes of the LGPD, 15win acts as data controller of its customers and users in Brazil.

Our Data Protection Officer (DPO) is available to answer questions, receive requests for the exercise of rights, and handle complaints related to the processing of personal data. To get in touch:

  • Email: suporte@15win.life (subject line: "Privacy – LGPD")
  • Live chat: available 24 hours a day, 7 days a week, directly on the Platform.

This Policy applies to all personal data processed by 15win, regardless of the collection channel: website, app, email, support chat, or any other form of interaction with the Platform.

Our commitment: 15win is committed to responding to personal data requests within 15 calendar days from the date of receipt, as required by the LGPD.
2

Data We Collect

15win collects different categories of personal data depending on how you interact with the Platform. The table below details the categories, examples, and purpose of each collection:

Category Examples When it is collected
Registration data Full name, CPF, date of birth, email, phone number, address At the time of registration on the Platform
Verification data (KYC) National ID (RG), driver's license (CNH), passport, proof of address, selfie with document Required prior to withdrawals above set limits or when irregularities are suspected
Financial data Deposit and withdrawal history, payment methods used (Pix key, partially masked card number), transaction amounts With each financial transaction on the Platform
Activity data Betting history, accessed games, crash game sessions, login times, account balances While using the Platform
Technical data IP address, browser type and version, operating system, device identifier, session cookies Automatically upon accessing the Platform
Communication data Content of support messages via chat and email, service records When contacting 15win support
Preference data Favorite sports, notification preferences, preferred language When configured by the user in the account dashboard

15win does not collect sensitive data such as racial or ethnic origin, religious belief, political opinion, trade union membership, health or sexual life data, or genetic or biometric data, except where strictly required by law.

3

How and Why We Use Your Data

Personal data collected by 15win is used exclusively for the purposes described below. No data is used in any way that is incompatible with the purpose for which it was collected:

  • Service delivery: account creation and management, bet processing, deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED.
  • Identity verification: compliance with KYC (Know Your Customer) legal requirements for the prevention of money laundering and terrorist financing, pursuant to Law No. 9,613/1998.
  • Fraud prevention: detection of duplicate accounts, bot usage, match-fixing, and any suspicious activity that violates 15win's Terms and Conditions.
  • Customer support: responding to inquiries, resolving issues, and keeping a service history to ensure quality Portuguese-language support.
  • Communications and promotions: sending notifications about Brasileirão, Copa do Brasil, crash games, and other offers — only to users who have consented to receive marketing communications.
  • Compliance with legal obligations: responding to requests from competent regulatory and judicial authorities in Brazil.
  • Platform Improvement: analysis of anonymized usage data to improve the user experience, identify technical issues, and develop new features.
  • VIP Program and promotions: XP calculation, cashback, bonus eligibility, and offer personalization based on each customer's usage profile.
Important: 15win never uses your data to build profiles for discriminatory purposes, denial of services, or any other purpose that violates your fundamental rights.
4

Legal Basis for Processing

Every data processing operation carried out by 15win is grounded in at least one of the legal bases set out in Articles 7 and 11 of the LGPD:

  • Contract performance (art. 7, V): processing necessary to provide the services you agreed to when creating your 15win account — Sports Betting, payments, and support.
  • Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and responding to requests from competent authorities.
  • Legitimate interest (art. 7, IX): fraud prevention, Platform security, and ongoing service improvement, provided this does not infringe your fundamental rights and freedoms.
  • Consent (art. 7, I): sending marketing communications, personalizing offers, and using non-essential cookies. Consent can be withdrawn at any time without affecting your access to any other 15win services.
  • Credit protection (art. 7, X): risk analysis and chargeback prevention for financial transactions.

When the legal basis is consent, 15win will request your authorization in a clear, specific, and plain-language manner before processing begins. Refusing or withdrawing consent does not prevent you from using the Platform's core services.

5

Data Sharing

15win never sells your personal data. Data sharing occurs only in the following situations, always with partners that meet adequate data protection standards:

  • Payment processors: data required to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED transfers. These partners act as data operators and follow 15win's instructions.
  • Game providers: minimum session data (anonymized identifier) required to operate crash games such as Aviator and Spaceman, slots, and live casino. Game providers do not receive full registration data.
  • Analytics and security services: fraud detection tools and behavioral analysis systems that process technical and activity data to protect the integrity of the Platform.
  • Competent authorities: when required by law, court order, or a request from a Brazilian regulatory authority — such as the Banco Central, the Ministry of Finance, or public security agencies.
  • Autoridade Nacional de Proteção de Dados (ANPD): in the event of security incidents or requests made in the exercise of ANPD's regulatory authority.

All partners that receive data from 15win are contractually required to process that information solely for the authorized purposes, apply appropriate security measures, and not share it further without express authorization.

6

International Data Transfer

Some of 15win's operational partners — particularly international game providers and cloud infrastructure providers — may process data on servers located outside Brazil. When this occurs, 15win applies the safeguards required by the LGPD to ensure your data remains protected to a standard equivalent to Brazilian law:

  • Specific data protection contractual clauses with all international partners.
  • Transfers only to countries or organizations that provide an adequate level of personal data protection, as assessed by the ANPD.
  • Anonymization or pseudonymization of data prior to transfer, whenever technically feasible.

15win does not transfer complete registration data — such as CPF, address, or identity documents — to servers outside Brazil, except in exceptional circumstances expressly provided for by law.

7

Data Storage and Retention

Personal data collected by 15win is stored on secure servers and retained for as long as necessary to fulfill the purposes of processing or to meet applicable legal obligations:

  • Active account data: retained for as long as the account remains active and for any additional period required by law after closure.
  • Financial and transaction data: retained for 5 years after each transaction, as required by anti-money laundering regulations (Law No. 9,613/1998) and Brazilian tax legislation.
  • KYC data (identity documents): retained for 5 years after account closure or the last relevant transaction.
  • Betting records: kept for 2 years after a bet is placed, for dispute resolution and audit purposes.
  • Customer support history: retained for 2 years from the last interaction, for quality assurance and training purposes.
  • Cookie and browsing data: retained in accordance with the expiration period of each cookie, as detailed in the cookies section of this Policy.

Once the applicable retention period expires, data is securely deleted or anonymized so that it can no longer be linked to the data subject. Anonymized data may be kept indefinitely for statistical purposes.

8

Information Security

15win applies technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. Key measures in place include:

  • SSL/TLS encryption: all communication between your device and 15win's servers is protected by end-to-end encryption protocols.
  • Secure storage: registration and financial data are stored with encryption at rest (AES-256) on servers with restricted access.
  • Two-factor authentication (2FA): available for all accounts — we recommend enabling it in the account dashboard for an extra layer of protection.
  • Real-time anti-fraud monitoring: automated system that detects suspicious access patterns and blocks account takeover attempts.
  • Internal access control: only staff members with a specific operational need are granted access to customers' personal data, with a full audit trail of every access.
  • Periodic security testing: regular audits and penetration tests conducted to identify and remediate vulnerabilities before they can be exploited.
  • Incident response plan: documented procedures for containment, notification, and remediation in the event of any security incident.
Your role in security: 15win protects data on our end, but your account security also depends on you. Use a strong password, enable 2FA, never share your credentials, and access the Platform only from trusted devices and networks.
9

Cookies and Similar Technologies

15win uses cookies and similar technologies to ensure the Platform functions properly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies we use are:

  • Essential cookies: required for the Platform's basic operation — session authentication, bet slip, and security preferences. They cannot be disabled without affecting service functionality. Duration: session or up to 30 days.
  • Performance cookies: collect anonymous data on how users navigate the Platform (pages visited, load times, errors) for technical improvement purposes. Duration: up to 12 months.
  • Functionality cookies: store your preferences (language, favorite sport, display settings) to personalize your experience without requiring you to reconfigure them on every visit. Duration: up to 12 months.
  • Marketing cookies: used, with your consent, to personalize offers and promotions displayed on the Platform based on your interest profile. Duration: up to 6 months.

You can manage your cookie preferences at any time through the account privacy settings panel or your browser settings. Disabling non-essential cookies does not affect betting, Pix payments, or any core 15win service.

How to disable cookies: In Chrome, Firefox, Safari, or Edge, go to your browser settings and find the "Privacy and Security" section → "Cookies and other site data". From there you can clear existing cookies or block specific categories.
10

Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by 15win, the following rights, which may be exercised at any time:

Your Rights Under the LGPD

As a data subject, you have full control over the information 15win holds about you.

Right of Access

Request a copy of all personal data 15win holds about you, including the purpose of processing and with whom it has been shared.

Right of Correction

Correct incomplete, inaccurate, or outdated information directly in your account dashboard or by contacting support. Changes to your CPF require additional verification.

Right to Deletion

Request the deletion of data processed based on consent. Data required by legal obligation (such as financial records for 5 years) cannot be deleted before the legal deadline.

Right to Data Portability

Receive your data in a structured, machine-readable format (JSON or CSV) for transfer to another service or platform, in accordance with ANPD regulations.

Right to Object

Object to data processing carried out on the basis of legitimate interest when it violates your rights. Marketing communications can be canceled at any time.

Right to Information

Find out which entities your data has been shared with, the legal basis for each processing activity, and your right to withhold consent — along with the consequences of doing so.

How to exercise your rights: Submit your request to suporte@15win.life with the subject line "Privacy – LGPD" or access the live chat on the Platform. 15win responds within 15 calendar days. If your request is not satisfactorily resolved, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

11

Minors' Data

15win is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from individuals under 18 years of age.

During registration, users must confirm they are at least 18 years old. 15win uses age verification mechanisms to enforce this requirement. If we determine that an account was created by a minor, it will be closed immediately, all balances will be cancelled, and the data will be deleted in accordance with legal retention periods.

If you are the guardian of a minor and have reason to believe they have created an account with 15win, please contact our support team immediately at suporte@15win.life so we can take the necessary steps as a priority.

Responsible gambling and minors: If you suspect a minor in your household is accessing betting platforms, we recommend using parental control tools on the device in question and having an open conversation about the risks of gambling. 15win supports initiatives that protect minors in digital environments.
12

Changes to this Policy

15win may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable law (including ANPD regulations), or improvements to the Platform. Our commitment to protecting your data remains constant — any changes will respect the principles of the LGPD.

When significant changes are made, 15win will notify data subjects through:

  • Email notification to the address registered on your account.
  • A highlighted notice on the Platform at login, summarizing the key changes.
  • Updating the "last updated" date at the top of this page.

For changes involving new processing purposes based on consent, 15win will request a new consent declaration before the new processing begins. Continued use of the Platform after any changes constitutes acceptance of the updated version of this Policy for processing based on contract and legitimate interest.

We recommend reviewing this Policy periodically. The most recent version is always available at https://15win.life/privacy-policy.

Why Privacy Matters at 15win

When you place a bet on the Brasileirão, play a round of Aviator, or request a withdrawal via Pix on the 15win, you share personal information with the platform. You deserve to know exactly what happens with that data — not just because the law requires it, but because 15win believes that a genuine relationship of trust with its users starts with transparency about how your data is handled.

The General Data Protection Law (LGPD – Law No. 13,709/2018) set a new standard for the handling of personal data in Brazil. In practice, this means that any company collecting information from Brazilian users must have a justified legal basis for each processing activity, inform data subjects about how their data is used, and provide real mechanisms for exercising the rights established by law. 15win approached the LGPD not as a hurdle to work around, but as an opportunity to build sound privacy practices from the ground up.

Financial Data: Handled with Extra Care

15win customers' financial information — deposit and withdrawal history via Pix, partially masked credit card data, and bet amounts — receives an extra layer of protection. This data is stored with AES-256 encryption at rest and transmitted with SSL/TLS in transit. No 15win staff member has access to a customer's full card number or complete Pix key — only to the minimum data needed to resolve potential transaction disputes.

The legal requirement to retain financial records for 5 years under anti-money laundering legislation is not just a formality. It ensures that if any questions ever arise about a transaction — from the customer, a third party, or regulatory authorities — there is an auditable record that protects both the customer and the integrity of the service. 15win never uses these records for any purpose beyond what the law requires.

Marketing Communications: Only If You Want Them

Notifications about Brasileirão promotions, boosted odds for the Copa do Brasil, crash game tournaments, and weekly cashback are only sent to customers who have opted in to receive marketing communications. That consent is collected explicitly at sign-up — not in fine print, not pre-checked. And it can be withdrawn at any time from your account dashboard with no penalty or impact on your access to 15win's services.

This also means 15win does not sell customer lists to external advertisers. The promotions you receive come directly from 15win — not from commercial partners who paid for access to your email or phone number. That is one of the practical differences between having a genuine privacy policy and having a document that exists only to check a box.

What to Do if There Is a Problem

If you notice any unauthorized access to your account, spot suspicious activity in your transactions, or have any questions about how your data is handled, the fastest way to reach us is through 15win's live chat — available 24 hours a day, every day, with a Brazilian team trained to assist in Portuguese. For formal requests to exercise your LGPD rights — access, correction, deletion, portability — emailing suporte@15win.life with the subject line "Privacy – LGPD" ensures a formal record and a response within 15 calendar days.

If 15win's response is not satisfactory, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd. 15win cooperates fully with the ANPD and all competent supervisory authorities in complying with data protection law.

Questions about this Policy? Contact our data protection officer at suporte@15win.life with the subject line "Privacy – LGPD". For questions about the platform's terms of use, please refer to our Terms and Conditions. For information on responsible gambling, visit Responsible Gambling.

🔒

Your data protected, your experience guaranteed

15win handles your data with the same care you'd expect from any financial service. Sign up securely, deposit via Pix, and enjoy Sports Betting, crash games, and Live Casino knowing your privacy is in good hands.

Create Your Account Securely
Português