The AA88 takes your personal data seriously. This policy explains clearly and without legal jargon what we collect, why we collect it, who we share it with, and what your rights are as a data subject — all in compliance with the LGPD.
The main topics covered in this AA88 Privacy Policy
The controller of personal data collected through the aa88.express platform is AA88 Entretenimento Digital Ltda., a Brazilian company responsible for all decisions regarding the processing of its users' data.
For the purposes of this policy, "data processing" covers any operation performed on personal data, including collection, storage, use, sharing, transmission, modification, and deletion — as defined in art. 5, X of the LGPD.
The AA88 acts as a data controller with respect to data collected directly from users, and as a data processor with respect to certain data handled under the instructions of game providers and payment processors that use the platform to deliver their services.
To contact the privacy team at AA88, use the dedicated channel: privacidade@aa88.express or the platform's 24/7 support chat.
The AA88 collects personal data at different points throughout your experience on the platform. Below are the types of data and the situations in which they are collected:
Data provided directly by you:
Data collected automatically during platform use:
Data received from third parties:
The AA88 uses your personal data exclusively for the purposes described below. We never use your data for purposes incompatible with those originally stated:
| Purpose | Data used |
|---|---|
| Account creation and management | Full name, CPF, e-mail, phone number, date of birth |
| Identity verification (KYC) | Official document, CPF, verification selfie |
| Processing deposits and withdrawals | Pix key, bank details, card data |
| Fraud and money laundering prevention | IP, transaction history, gaming behavior |
| Customer Support | Contact history, account data, transactions |
| Account communications (transactional) | Email, mobile |
| Promotional communications (with consent) | Email, mobile number, game preferences |
| Responsible gambling and user protection | Betting history, behavioral patterns |
| Compliance with legal and regulatory obligations | All data required by law |
| Platform improvement and usage analytics | Browsing data, anonymous or aggregated behavior |
When you opt out of promotional communications, the AA88 will continue sending only strictly necessary transactional messages — such as deposit confirmations, withdrawal confirmations, or password change alerts.
The LGPD requires that all personal data processing have a specific legal basis. The AA88 bases its data processing on the following grounds, pursuant to art. 7 of Law No. 13,709/2018:
The AA88 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only occurs in the situations listed below, all of which are necessary for service delivery or compliance with legal obligations:
All third parties that receive data from AA88 are contractually required to handle that data to the same security and protection standards demanded by the LGPD. The AA88 maintains a record of all data sharing carried out.
The AA88 retains your personal data for as long as necessary for each specific purpose, respecting the minimum retention periods required by law:
After permanent account closure, the AA88 deletes data that no longer needs to be retained due to legal obligations, keeping only the minimum required by applicable regulations. Anonymized data — which cannot be used to identify the user — may be retained indefinitely for statistical purposes.
The AA88 applies appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or improper destruction. The main measures implemented include:
In the event of a security incident that may affect your personal data, the AA88 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe established by the LGPD, with details about the incident and the measures taken.
The AA88 uses cookies and similar technologies to ensure the platform functions properly, analyze usage, and personalize the experience. The types of cookies used are:
You can manage your cookie preferences in your account settings on the AA88 or directly in your browser settings. Disabling non-essential cookies does not affect your ability to bet, deposit, or withdraw.
The AA88 does not use social media tracking pixels or fingerprinting technologies for persistent user identification beyond active sessions on the platform.
The platform of AA88 is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If you are under 18, do not create an account or use any services on the platform.
During registration and the KYC verification process, the AA88 verifies date of birth through an official document. Accounts identified as belonging to minors are immediately blocked, the data is deleted, and any deposits are returned to the originating account after verification.
If you are the guardian of a minor and believe they have created an account on AA88 without authorization, contact support immediately via the 24/7 chat and provide the CPF used during registration. We will take the necessary steps without delay.
The LGPD guarantees you, as the data subject whose data is processed by AA88, the following rights, which may be exercised at any time:
To exercise any of these rights, please contact the AA88 by emailing privacidade@aa88.express or via the 24/7 support chat. Requests will be answered within 15 business days. In complex cases or those requiring additional identity verification, the deadline may be extended with a written explanation.
If you believe your rights have not been adequately addressed by the AA88, you may file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.
The AA88 has appointed a Data Protection Officer (DPO), as required by the LGPD for companies that process personal data at large scale.
The DPO of AA88 is responsible for:
To contact the DPO at AA88 directly with questions related to privacy and data protection:
The DPO responds within the legal deadline of 15 business days for straightforward requests. Cases involving additional identity verification or legal review may take up to 30 days, with prior notice to the data subject.
The AA88 may update this Privacy Policy periodically to reflect changes in legislation, platform practices, or services offered. The date of the last update is always displayed at the top of the document.
Material changes — those that significantly affect your rights or the way your data is handled — will be communicated via your registered email or through an in-platform notification at least 15 days before taking effect.
Minor changes — such as wording corrections, updated contact details, or technical adjustments that do not affect your rights — take effect on the date of publication without prior notice.
Continued use of the AA88 after material changes take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account and request deletion of your data as described in section 10 of this policy.
All rights guaranteed and exercisable at any time via support or e-mail
Online betting platforms handle a sensitive combination of data: identity information, financial data, and behavioral history. This creates a genuine responsibility that goes far beyond simply complying with a law. AA88, privacy is treated as part of the service — not as a bureaucratic obligation.
The General Data Protection Law (Lei nº 13.709/2018) came into effect in 2020 and significantly changed how Brazilian companies must handle personal data. For betting platforms such as AA88, which collect financial and gambling behavior data, the LGPD introduces specific requirements: clear legal bases for each processing activity, defined retention periods, a duty to notify in the event of incidents, and an obligation to respond to data subject requests within a reasonable timeframe.
The AA88 has aligned its entire operation with the LGPD, including reviewing partner contracts, implementing data processing activity records, and appointing a Data Protection Officer (DPO). Not because the ANPD's fine for non-compliance can reach 2% of revenue (capped at BRL 50,000,000.00 per violation), but because a platform that doesn't respect its users' data doesn't deserve their trust.
When you make a deposit via Pix at AA88, transaction confirmation arrives from the Central Bank's Instant Payment System (SPI) with the data needed to identify the payment — amount, date/time, and basic sender details. The AA88 stores these records for audit purposes, fraud prevention, and compliance with legal obligations regarding financial transaction recordkeeping.
For credit and debit cards, processing is handled by PCI-DSS certified partners (Payment Card Industry Data Security Standard). The AA88 does not store your full card number, CVV code, or authentication data — only a reference token used to process refunds when needed. This means that even if a security incident were to occur on the servers of AA88, your card data would not be exposed.
One of the most important uses of gaming behavior history at AA88 is the identification of patterns that may indicate problematic behavior. This includes analysis of betting frequency, amounts deposited within short periods of time, and sudden increases in average bet size — all of which are internationally recognized indicators of risk in responsible gambling.
When the AA88 identifies risk patterns and may proactively display warning messages or suggest self-control tools — such as deposit limits or account pause. This use of behavioral data is legally grounded in the platform's legitimate interest in protecting its users and in fulfilling the responsible gambling obligations set out in betting regulations. You may request human review of any automated decision made in this context.
The AA88 may send promotional communications — about new promotions, boosted odds, special bonuses, and sporting events — only to users who have given explicit consent to receive such messages. Consent is collected at registration and can be withdrawn at any time in the account's communication preference settings.
Regardless of your marketing preferences, AA88 will always send essential transactional communications: registration confirmation, deposit confirmation, withdrawal processed notification, account security alerts, and legally required communications. These messages are not marketing — they are an integral part of the service and cannot be disabled without compromising the security and transparency of the operation.
To exercise your rights as a data subject, clarify any questions about this policy, or file a privacy-related complaint with the AA88:
If you do not receive a satisfactory response, you may escalate to the ANPD (Autoridade Nacional de Proteção de Dados) at gov.br/anpd.
Create your account at AA88 with the assurance that your data is protected by the LGPD and our privacy policy. Deposits via Pix from R$ 20.00, withdrawals in 30 seconds, live casino with dealers in Portuguese.
+18 | Gamble responsibly | Responsible Gambling | Terms and Conditions