Important: By creating an account and using 121bat's services, you confirm that you have read and understood this Privacy Policy. To exercise your rights as a data subject or for any privacy-related questions, please contact our DPO at privacidade@121bat.com.
The 121bat is the controller of personal data collected and processed under this Privacy Policy. As controller, 121bat determines the purposes and means by which your personal data is processed, in accordance with the General Data Protection Law (LGPD – Law 13.709/2018) and other applicable regulations in Brazil.
This Policy applies to all services offered by the 121bat, including Sports Betting (football, volleyball, basketball, MMA, and others), Live Casino, slots, crash games, blackjack, and all features accessible through the website and the platform's support channels.
For questions, requests related to your personal data, or to exercise your rights as a data subject, please contact us at privacidade@121bat.com, managed by the Data Protection Officer (DPO) appointed by 121bat.
The 121bat collects personal data at various points during your interaction with the platform. Below are the data categories and the contexts in which they are collected:
Registration data:
- Full name, CPF, date of birth, and complete residential address.
- Email address and mobile number for authentication and communications.
- Password (stored exclusively in encrypted form — 121bat never has access to your password in plain text).
Identity verification (KYC) data:
- Copy of a photo ID (national ID card, driver's license, or passport).
- Proof of address (utility bill for electricity, water, or landline, or a bank statement issued within the last 90 days).
- In specific cases involving high-value withdrawals: proof of source of funds.
Platform usage data:
- Full betting history — tickets, selected markets, odds, amounts, and results.
- Deposit and withdrawal history, including the payment method used (Pix, bank slip, credit or debit card, PicPay, Mercado Pago, or TED bank transfer).
- Live Casino sessions, slots, blackjack, and other games.
- Bonuses and promotions activated and rollover completion history.
Technical and browsing data:
- IP address, device type, operating system, and browser used.
- Cookie data and similar technologies (detailed in Section 8).
- Access logs with dates, times, and actions performed on the platform.
- Approximate geographic location derived from IP address.
The 121bat does not collect sensitive data such as racial origin, political opinions, health data, or sexual orientation. Financial payment details (such as full card numbers) are processed directly by payment operators and are never stored on 121bat's servers.
| Data Category |
When It Is Collected |
Requirement |
| Registration data |
Upon account creation |
Required |
| KYC Documents |
Before your first withdrawal |
Required |
| Betting history |
On every bet placed |
Required |
| Payment data |
On every deposit or withdrawal |
Required |
| Technical data / IP |
On every login |
Automatic |
| Communication preferences |
When adjusting account settings |
Optional |
The 121bat uses your personal data solely for the purposes listed below. We do not use your data for any purpose beyond those described in this section without your prior consent:
- Service provision: Operation of the Sports Betting and casino platform, balance management, bet processing, results settlement, and customer support.
- Identity verification and fraud prevention: Confirming that the user is who they claim to be, preventing multiple accounts, detecting suspicious activity, and protecting against unauthorized account access.
- Payment processing: Management of deposits via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED bank transfer, as well as processing of withdrawals via Pix.
- Compliance with legal and regulatory obligations: Maintenance of financial transaction records as required by Brazilian regulations, anti-money laundering (AML) compliance, and cooperation with authorities in legal investigations.
- Platform improvement: Analysis of usage patterns to identify technical issues, improve the user experience, and develop new features. Data used for this purpose is always anonymized or pseudonymized.
- Account communications: Notifications about bets, results, withdrawals, security alerts, and important service updates from 121bat. These communications are essential and cannot be disabled.
- Marketing communications: Only with your explicit consent, we may send information about promotions, bonuses, and news from 121bat. You can unsubscribe from these communications at any time in your account notification settings.
- Responsible gambling: Monitoring of behavioral patterns that may indicate problem gambling, in accordance with the platform's responsible use policies. This data is used to provide support tools, not for automated decisions harmful to the user.
Each data processing operation carried out by 121bat has a legal basis under the LGPD. The main legal bases used are:
- Contract performance (Art. 7, V of the LGPD): Required to provide the contracted services — creating and managing your account, processing bets, settling results, and handling payments.
- Compliance with a legal or regulatory obligation (Art. 7, II): Data required by specific legislation, such as financial transaction records for anti-money laundering purposes and identity verification for betting services.
- Legitimate interest (Art. 7, IX): Fraud prevention, platform security, service improvement, and detection of abusive activity, provided that users' rights and reasonable expectations are respected.
- Consent (Art. 7, I): Marketing communications and promotions, when you opt in to receive this type of content. Consent can be withdrawn at any time.
For processing based on consent, withdrawal of consent does not affect the lawfulness of processing carried out prior to revocation. To exercise your rights as a data subject, refer to Section 9 of this policy.
The 121bat does not sell your personal data. Sharing with third parties occurs only in the situations described below, always for the purpose of operating our services or fulfilling legal obligations:
- Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED transfers. These partners have access only to the data required for the transaction and are contractually obligated to protect it.
- Identity verification (KYC) providers: To verify the authenticity of documents submitted during the verification process. Documents are transmitted in encrypted form and their use is limited to verification purposes.
- Technology and infrastructure providers: Companies that provide hosting, database, security, and technical support services for the 121bat platform. All contracts include mandatory data protection and confidentiality clauses.
- Competent authorities: Government bodies, regulators, and law enforcement authorities when required by law, court order, or regulatory obligation. 121bat reviews the legality of each request before complying.
- Casino game software providers: Slots, blackjack, Live Casino, and crash game providers receive only anonymous or pseudonymous session identifiers — they have no access to players' personally identifiable data.
The 121bat requires all its suppliers and partners to apply the same level of data protection used internally, including encryption of data in transit and at rest, restricted access controls, and incident response processes.
The 121bat retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The retention criteria for each data category are:
- Active account data: Retained for as long as the account is active. After voluntary closure, data is kept for an additional period as required by law.
- Financial transaction records: Retained for a minimum of 5 years after the transaction, in compliance with anti-money laundering legislation (Law 9.613/1998 and BACEN regulations).
- KYC documents: Retained for a minimum of 5 years after account closure, as required by regulatory obligations.
- Technical data and access logs: Retained for a period of 6 to 12 months for security and dispute resolution purposes.
- Marketing data (with consent): Retained until consent is withdrawn by the user.
After the applicable retention period, data is securely deleted or irreversibly anonymized. You may request the early deletion of your non-essential data as described in Section 9.
User data security is treated as the top priority at 121bat. The technical and organizational measures implemented include:
- 256-bit SSL/TLS Encryption across all communications between your device and 121bat's servers.
- Encryption at rest for sensitive data stored in our databases — including passwords (with secure hashing), identity documents, and financial data.
- Two-factor authentication (2FA) available to all users and strongly recommended for additional account security.
- Role-based access controls: only employees with a verified operational need have access to specific data categories. Access is audited and logged.
- Continuous Monitoring of unauthorized access attempts, brute-force attacks, and suspicious traffic patterns.
- Regular Security Testing, including penetration tests and vulnerability assessments conducted by specialized firms.
- Incident response plan with established procedures for containment, investigation, notification, and recovery in the event of a data breach.
Your role in keeping your account secure: 121bat will never ask for your password by email, chat, or phone. If you receive any message requesting your password or payment details on behalf of 121bat, do not respond and notify us immediately via live chat or at suporte@121bat.com.
The 121bat uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — analyze browsing behavior. A cookie is a small text file stored on your device by your browser.
| Cookie Type |
Purpose |
Can It Be Disabled? |
| Essential |
Authentication, active session, security, and basic platform functionality |
No — required for operation |
| Functional |
Remember user preferences such as language, theme, and account settings |
Yes — in your browser settings |
| Analytical |
Platform usage analysis to identify issues and improve features (anonymized data) |
Yes — via cookie consent banner |
You can manage your cookie preferences through the banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies may prevent your account and betting services from functioning correctly on the 121bat.
The 121bat does not use third-party tracking cookies for behavioral advertising or remarketing without the user's explicit consent.
The LGPD grants you, as the data subject whose personal data is processed by the 121bat, the following rights — which can be exercised at any time by emailing privacidade@121bat.com:
- Confirmation and access: Request confirmation that 121bat processes your data and obtain a copy of the information we hold about you.
- Correction: Request the correction of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion: Request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
- Portability: Request the portability of your data to another service provider, in a structured and commonly used format.
- Deletion upon consent: Request the deletion of data processed on the basis of your consent, except where retention is required by law.
- Withdrawal of consent: Withdraw consent for processing based on this legal basis (such as marketing communications) at any time, without affecting the lawfulness of prior processing.
- Information about sharing: Request information about which public and private entities 121bat has shared your data with.
- Right to object: Object to processing carried out on the basis of legitimate interest, where it is not in compliance with the LGPD.
- Review of automated decisions: Request a review of decisions made solely on the basis of automated processing of personal data that affect your interests.
The 121bat responds to rights requests within 15 business days. In complex cases, this deadline may be extended by an equal period, with prior notice and justification. We do not charge any fee to handle rights exercise requests.
To verify your identity before fulfilling rights requests, we may ask you to log in to your account or provide basic identification documentation. This measure protects you against unauthorized requests by third parties.
The services of 121bat are intended exclusively for users aged 18 and over. 121bat does not intentionally collect or process personal data from minors.
If you are a parent or legal guardian and believe that a minor under 18 has created an account on 121bat or provided personal data to the platform, please contact us immediately at privacidade@121bat.com. We will close the account, delete the minor's data, and refund any deposited funds as soon as the situation is identified and confirmed.
The 121bat uses automated systems and manual verification to identify registrations by minors, including CPF validation and age verification as part of the mandatory KYC process for withdrawals.
In some cases, the personal data of users of the 121bat may be transferred to or accessed by vendors located outside Brazil — such as cloud infrastructure providers or casino software vendors with international servers.
When this type of transfer occurs, the 121bat ensures that the level of data protection is equivalent to that required by the LGPD, through:
- Standard data protection contractual clauses in all agreements with international suppliers.
- Preference for vendors located in countries with data protection legislation recognized as adequate by the ANPD.
- Regular compliance assessments of international suppliers against the security standards required by 121bat.
For more information about specific international transfers, please contact us at privacidade@121bat.com.
The 121bat may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or internal data protection practices.
Significant changes will be communicated by email and through a prominent notice on the platform at least 7 days in advance. The date of the last update is always shown at the top of this page. We recommend reviewing this document periodically.
If the changes involve processing that requires new consent — such as new purposes for using your data — we will expressly request your authorization before implementing them. Continued use of the platform after changes that do not require consent take effect implies acceptance of the new terms.
For any questions, requests, or complaints regarding the processing of personal data by the 121bat, the available channels are:
- DPO (Data Protection Officer) email: privacidade@121bat.com — for rights requests, questions about this policy, and formal complaints. Response time: up to 15 business days.
- General support: suporte@121bat.com or live chat on the platform — for operational questions about your account, bets, and payments. Support available 24 hours in Portuguese.
If you believe that the processing of your data violates the LGPD and you have not received a satisfactory response from 121bat, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), Brazil's data protection regulatory authority.
Frequently Asked Questions About Privacy at 121bat
No. The 121bat never sells, rents, or shares your data with other betting platforms, affiliate networks, or marketing companies. Data is only shared with operational vendors — payment processors such as Pix and boleto bancário, identity verification providers, and technical infrastructure suppliers — and solely for the purpose of delivering the services. All vendor contracts include mandatory confidentiality and data protection clauses.
To request the deletion of your personal data, send an email to privacidade@121bat.com providing your registered CPF, account email, and the type of request (partial deletion of non-essential data or full deletion linked to account closure). 121bat responds within 15 business days. Data that must be retained by legal obligation — such as financial transaction records — cannot be deleted before the mandatory regulatory period ends, but you will be informed about which data remains and why.
The 121bat uses automated data analysis for security purposes — such as fraud detection, identification of multiple accounts, and anti-money laundering. These analyses are supplemented by human review in cases that result in account blocking or investigation. For responsible gambling purposes, 121bat may identify behavioral patterns and offer control tools, but does not make decisions that are harmful to the user in a fully automated manner. You have the right to request human review of any automated decision affecting your account, as guaranteed by the LGPD.
Pix transactions are processed directly through the integrated payment system, which does not store complete banking details on the servers of the 121bat. What 121bat keeps on record is the transaction history — amount, date, payment type (Pix), and transaction ID for tracking and dispute resolution purposes. Your Pix key for withdrawals is stored in encrypted form and used exclusively to process withdrawals you request. The same principle applies to other payment methods such as boleto bancário, PicPay, and Mercado Pago.
To stop receiving marketing communications by email or phone, go to the notification settings in your profile on 121bat and turn off promotional and newsletter communication options. You can also click the "unsubscribe" link in any marketing email received from 121bat. The opt-out takes effect within 48 hours. Essential communications — such as bet confirmations, security alerts, and account notifications — cannot be disabled, as they are necessary for the safe operation of our services.