⚽ Brasileirão Série A – betting now open at bes365 🎰 Live Casino – 200+ tables with a real dealer at bes365 💸 Deposit via Pix instant – funds available in seconds 🥊 UFC – exclusive odds at bes365 🏆 Bonus of up to R$ 500.00 for new registrations 🔒 Your data protected by LGPD at bes365 ⚽ Copa do Brasil – all matches with live odds 🃏 Live Poker – tables open 24/7 at bes365 ⚽ Brasileirão Série A – betting now open at bes365 🎰 Live Casino – 200+ tables with a real dealer at bes365 💸 Deposit via Pix instant – funds available in seconds 🥊 UFC – exclusive odds at bes365 🏆 Bonus of up to R$ 500.00 for new registrations 🔒 Your data protected by LGPD at bes365 ⚽ Copa do Brasil – all matches with live odds 🃏 Live Poker – tables open 24/7 at bes365
Updated January 2026

Privacy Policy – bes365: Protecting Your Data

At bes365, privacy is not a technical footnote buried at the bottom of the page — it is a core part of the relationship with every user. This page clearly explains what data we collect, why we collect it, how we use it, and what rights you have under the LGPD.

🔒 Summary of this policy:

  • What personal data we collect
  • Purposes of data processing
  • Who We Share Information With
  • Cookies and tracking technologies
  • Data Security and Storage
  • Your Rights as a Data Subject
LGPD
Full Compliance – Law No. 13.709/2018
256-bit
Encryption on all transactions
0
Sale of data to third parties
24/7
Support for privacy-related questions

How bes365 Protects Your Privacy

Six concrete practices that define our approach to handling personal data.

🔒
LGPD Compliance

A bes365 processes all users' personal data in compliance with the Brazilian General Data Protection Law (Lei nº 13.709/2018). This means every piece of data collected has a specific purpose, a defined legal basis, and a proportionate retention period. You have the right to know exactly what we do with your information — and this policy answers that clearly.

🔐
End-to-End Encryption

All financial transactions on the bes365 — deposits via Pix, boleto, credit card, or PicPay — are protected with 256-bit encryption. Your payment data travels through secure channels and is not stored in plain text on our servers. The same security standard applies to login, balance communications, and betting history.

🚫
No Data Selling

A bes365 does not sell, rent, or transfer your personal data to third parties for commercial purposes. We share information only with the operational partners strictly necessary to provide the service — such as payment processors and live casino providers — and always under confidentiality and data processing agreements.

🇧🇷
Data in Brazil

The personal data of Brazilian users of bes365 are stored and processed primarily on servers located in Brazil or in countries with an equivalent level of protection recognized by the ANPD (National Data Protection Authority). International data transfers, when necessary, follow the safeguards set out in art. 33 of the LGPD.

🧾
Specific Purpose for Each Data Point

At bes365, every piece of information collected has a reason to exist. Your CPF is used for identity verification and fraud prevention. Your email, for account communications and promotions. Your betting history, for support and anti-money laundering compliance. We don't collect data we don't use — and we don't use data beyond its stated purpose.

⚙️
Control in Your Hands

You can access, correct, export, or request the deletion of your personal data directly through bes365, at any time. Exercising these rights is free of charge, hassle-free, and responded to within the deadlines set by the LGPD — generally up to 15 business days. Your privacy is a right, not a favor.

This Privacy Policy describes how bes365 (bes365.best) collects, uses, stores, and protects the personal data of its users in accordance with the General Data Protection Law (LGPD – Law No. 13,709/2018). By creating an account or continuing to use the platform, you acknowledge that you have read and understood this policy. If you have any questions, please contact our support team or our Data Protection Officer at privacidade@bes365.best.

1

Personal Data Controller

The controller of personal data collected by the platform is bes365, operator of bes365.best. The controller is responsible for decisions regarding data processing — what to collect, for what purpose, and how long to retain it.

To exercise your rights or for any questions related to the processing of personal data, users may contact:

  • General support: suporte@bes365.best or 24-hour live chat on the platform;
  • Data Protection Officer (DPO): privacidade@bes365.best.
The Data Protection Officer (DPO) is the official channel for LGPD-related requests — including access, correction, portability, deletion, and complaints about how your data is handled.
2

What Personal Data We Collect

A bes365 collects personal data at different points during the user's interaction with the platform. The table below summarizes the main data collected, when it is collected, and the purpose:

Data Collected When It Is Collected Primary Purpose
Full name Registration Identification and communication
CPF Registration Identity Verification and Account Uniqueness
Date of birth Registration Age verification (+18)
Email Registration Communication, password recovery, and notifications
Mobile number Registration / 2FA Two-factor authentication and urgent communications
Residential address KYC Verification Confirmation of Brazilian residency and regulatory compliance
Government-issued ID (RG/CNH/passport) KYC Verification Fraud Prevention and KYC/AML Compliance
Pix key / banking details Withdrawal Payment Processing and Anti-Money Laundering
Betting and transaction history Platform usage Support, fraud prevention, and legal obligations
IP address and device data Site/app access Security, fraud detection, and geolocation
Browsing and usage data (cookies) Site/app usage Experience Improvement and Usage Analytics

A bes365 does not collect sensitive personal data such as racial origin, religious beliefs, health data, or sexual orientation. All data collected has a legitimate purpose proportional to the service provided.

3

Purposes of Data Processing

The personal data collected by bes365 are used exclusively for the following purposes:

  • Account management: creation, maintenance, access, and closure of the user's account on the platform;
  • Identity verification (KYC): confirmation that the user is over 18 years of age, a resident of Brazil, and the account holder of the financial accounts used;
  • Payment processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; withdrawals via Pix and bank transfers;
  • Fraud prevention and anti-money laundering: monitoring of usage patterns, verification of the source of funds, and compliance with the obligations of Law No. 9.613/1998;
  • User Communication: account notifications, transaction confirmations, support responses, and promotional communications (where consent has been given);
  • Service improvement: platform usage analysis to improve features, fix bugs, and personalize the experience;
  • Compliance with legal obligations: compliance with orders from regulatory authorities, courts, and the ANPD.
bes365 does not use your data to build behavioral profiles for sale to external advertisers, nor to make fully automated decisions that produce legal effects without the possibility of human review.
4

Legal Bases for Processing

All data processing carried out by bes365 has a legal basis under the LGPD (art. 7). The main legal bases used are:

  • Contract performance (art. 7, V): processing of your name, CPF, email, banking details, and transaction history is necessary to operate your account and deliver the service you contracted upon registration;
  • Compliance with a legal obligation (art. 7, II): the collection and retention of identity documents and financial records are required by Brazilian anti-money laundering legislation and the sports betting regulatory framework;
  • Consent (art. 7, I): for the sending of marketing communications and non-essential promotions, consent is obtained explicitly and may be withdrawn at any time in the account settings;
  • Legitimate interest (art. 7º, IX): for platform usage analysis aimed at service improvement and fraud prevention, provided this interest does not override the rights and freedoms of the user.
You may withdraw consent to marketing communications at any time through your account settings or via the unsubscribe link included in all promotional emails.
5

Data Sharing with Third Parties

A bes365 does not sell personal data. Information is shared with third parties only in the following situations, always with appropriate security controls in place:

  • Payment processors: data required to process deposits and withdrawals is shared with the financial institutions responsible for payment processing (e.g., card operators, banks for wire transfers, the Pix system via the Central Bank). This data is transmitted securely and used solely for the transaction;
  • Live casino providers: for live games (Evolution Gaming, Pragmatic Play Live, Playtech), minimum session data such as the user identifier and round history are shared with the provider for the game's technical operation. No complete financial data is transmitted to these providers;
  • Identity verification services (KYC): documents submitted for verification may be processed by specialized KYC platforms operating under data processing agreements in compliance with the LGPD;
  • Competent authorities: data may be shared with the Receita Federal, COAF, Banco Central, Ministério da Fazenda, or judicial authorities when required by law or court order.
All third parties that process data on behalf of bes365 are contractually required to handle that information with the same level of protection required by the LGPD, with an express prohibition on using it for their own purposes.
6

Data Retention and Deletion

A bes365 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods:

  • Active account data: retained for as long as the account is active. After closure, basic data is kept for up to 5 years for audit and legal compliance purposes;
  • Financial transaction history: retained for a minimum of 5 years after the transaction, as required by anti-money laundering legislation (Law No. 9.613/1998);
  • Identity documents (KYC): retained for up to 5 years after account closure or for the period determined by the competent regulatory authority;
  • Browsing data and non-essential cookies: retained according to each cookie's lifespan, as described in section 8 of this policy — generally between 30 days and 2 years;
  • Support communications: support history retained for up to 2 years after account closure for quality assurance and dispute resolution purposes.

Personal data that no longer needs to be retained for any legitimate purpose is securely deleted with guaranteed irreversibility. You may request early deletion of data not subject to mandatory legal retention through the privacy channel.

7

Data Security and Protection

A bes365 adopts robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

  • SSL/TLS Encryption: all communication between the user's device and bes365 servers is encrypted using 256-bit SSL/TLS protocol;
  • Hashed passwords: user passwords are never stored in plain text — only a secure hash is saved, making it impossible to recover the original password even in the event of an incident;
  • Two-factor authentication (2FA): available to all users and strongly recommended to protect account access;
  • Security monitoring: automated systems monitor suspicious access attempts, logins from unusual IPs, and anomalous usage patterns with real-time alerts;
  • Internal access control: only employees with a strictly operational need have access to users' personal data, and all access is logged and auditable;
  • Incident response plan: in the event of a security incident that puts personal data at risk, bes365 will notify the ANPD and affected users within the timeframes set out in the LGPD (art. 48).
bes365 will never ask for your password by email, chat, or phone. If you receive such a request in the platform's name, treat it as phishing and report it immediately through the official support channel.
8

Cookies and Tracking Technologies

A bes365 uses cookies and similar technologies to enhance the platform experience, ensure session security, and analyze service usage. The types of cookies used are:

You can manage and disable non-essential cookies at any time through your browser settings or via the cookie preference panel available in the platform footer.

Disabling analytics and preference cookies does not prevent use of the platform — it only removes personalization based on browsing history and aggregated usage reports.
9

Minors

The platform bes365 is intended exclusively for individuals aged 18 or older. We do not knowingly collect personal data from anyone under 18.

Registration requires a valid CPF, and age verification is a mandatory part of the account opening process. Any account identified as belonging to a minor is closed immediately, with data collected during registration deleted once identification is confirmed and any applicable legal obligations have been met.

Parents or guardians who become aware that a minor has created an account on bes365 should contact us immediately at privacidade@bes365.best so the situation can be resolved without delay.

We recommend that guardians use parental control tools on shared devices to prevent minors from accessing online betting platforms.
10

Your Rights as a Data Subject (LGPD)

The LGPD grants personal data subjects a set of rights that bes365 is fully committed to upholding. See each right and how to exercise it below:

👁
Access

Request a full copy of the personal data bes365 holds about you. We respond within 15 business days.

✏️
Correction

Request the correction of incomplete, inaccurate, or outdated data. Basic registration details can be updated directly in your account settings.

🗑
Deletion

Request the deletion of your personal data when it is no longer needed for the purpose it was collected — subject to mandatory retention periods required by law.

📦
Portability

Receive your data in a structured, interoperable format for transfer to another controller, in accordance with ANPD regulations.

🚫
Objection

Object to data processing based on legitimate interest when it conflicts with your fundamental rights.

ℹ️
Sharing Information

Request information about which entities your data has been shared with and for what specific purpose.

To exercise any of these rights, please contact the DPO at bes365 at privacidade@bes365.best, stating the right you wish to exercise and your account details for identification. All requests are responded to within the legally required timeframe.

If you are not satisfied with the response you receive, you have the right to file a complaint with the ANPD (National Data Protection Authority), as provided under art. 18, § 1º of the LGPD.

11

Changes to this Privacy Policy

A bes365 may periodically update this Privacy Policy to reflect changes in data processing practices, new platform features, or updates to Brazilian legislation — including ANPD regulations.

When relevant changes are made, you will be notified by email (at your registered address) and by an in-platform notice at least 7 days before the changes take effect. The date of the latest update is always shown at the top of this page.

Continued use of the platform after the changes take effect constitutes acceptance of the updated policy. If you disagree with the changes, you may request account closure before the effective date, with any available balance returned in accordance with the procedures described in the Terms and Conditions.

Keep your registered email address up to date to receive notifications about changes to this Policy and other important bes365 documents.
12

Contact, DPO & Privacy Channel

For any questions relating to this Privacy Policy or the processing of your personal data, the bes365 provides the following channels:

  • General support (24 hours): live chat on the bes365.best platform;
  • Support email: suporte@bes365.best;
  • Privacy channel / DPO: privacidade@bes365.best — exclusively for LGPD-related requests (access, correction, deletion, portability, complaints).

The standard response time for LGPD-related requests is up to 15 business days from receipt of a properly identified request. Requests requiring more complex analysis may have their deadline extended, with prior notice given to the requester.

This Privacy Policy is governed by Brazilian law. Any dispute not resolved through the privacy channel may be submitted to the ANPD or the competent court, as set out in the platform's Terms and Conditions.

Data Privacy in the Context of Online Betting in Brazil

When you create an account on an online betting platform, you provide a fairly broad set of personal information — name, CPF, date of birth, address, banking details, betting history. That's a lot. And it makes sense to want to know exactly what happens with all of it after you click "Register". The bes365 understands this concern, which is why this policy was written in plain language, free from the dense technical jargon typical of documents like this.

The legal basis for everything we do with your data is the LGPD — Brazil's General Data Protection Law (Law No. 13,709/2018), in force since September 2020. The LGPD is one of the most comprehensive data protection laws in the world, heavily inspired by the European GDPR, and it gives Brazilian citizens real rights over their own data: the right to know what information a company holds about you, the right to correct inaccurate information, the right to request deletion of data that no longer needs to be retained, and the right to data portability. A bes365 respects each of these rights — and you may exercise them at any time through the privacy channel.

The CPF is the cornerstone of identity verification on the platform. Each account at bes365 is linked to a single CPF, which prevents duplicate accounts from being created and is essential for KYC (Know Your Customer) and anti-money laundering obligations required by betting market regulations. Your CPF is never shared with third parties for commercial purposes — it is used exclusively for identification, verification, and compliance with legal obligations.

Regarding payments, the bes365 works exclusively with Brazilian payment methods: Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED through the country's major banks. When you make a deposit via Pix, the transaction data travels through Brazil's financial system under the Banco Central's security rules. The bes365 receives payment confirmation — not your full bank account details. For withdrawals, the Pix key you provide is stored securely and used solely to process the requested payment.

Betting history is another sensitive data point that the platform handles with care. It is used by the support team to help resolve queries about results and settlements, by the compliance department to detect anomalous patterns that may indicate misuse of the platform, and is retained for the minimum period of 5 years required by anti-money laundering law. This history is not sold to third parties, is not used to build bettor profiles for external advertising purposes, and is not accessed by live casino providers such as Evolution Gaming or Pragmatic Play Live — those providers receive only an anonymous session identifier to operate the game.

The cookie question deserves special attention. Many online platforms use extensive tracking cookies to build behavioral profiles that are then sold to advertising networks. A bes365 does not do this. The cookies used are essential (required for login and session security), analytical (to understand how the platform is being used in aggregate terms, without individual identification), and preference-based (to remember settings such as favorite sports and language). Marketing cookies are only used with express consent and solely to measure the effectiveness of internal platform campaigns — never for external ad tracking.

Data security is another area where bes365 invests consistently. All communications are protected by 256-bit SSL/TLS encryption, passwords are stored only as secure hashes (never in plain text), two-factor authentication is available to all users, suspicious access attempts are continuously monitored, and a structured incident response plan is in place should any security event occur. If an incident putting personal data at risk is confirmed, the ANPD and affected users will be notified within the legally required timeframes — with no concealment or minimization of what occurred.

Finally, it's worth noting that no privacy policy can do the job alone — it needs to be backed by real practices. At bes365, this means internal access to personal data is restricted to employees with a genuine operational need, with all access logged and auditable; third-party data processors are contractually required to uphold the same protection standards; and a DPO is available to any user who wants to exercise their rights or ask questions. Privacy is an ongoing commitment — and bes365 treats it as such.

Legal Documents

Privacy Channel

To exercise your LGPD rights or ask questions about your data:

🔒 privacidade@bes365.best

Response time: up to 15 business days


Your LGPD Rights
  • Access to your data
  • Correction of information
  • Data deletion
  • Portability
  • Consent withdrawal
Create Account Log In

Play Safely and Privately at bes365

Your data protected by the LGPD, payments via Pix, and a bonus of up to R$ 500.00 on your first deposit. Free and hassle-free registration.

🛡 Responsible Gaming at bes365

Betting is entertainment. We provide real tools to help you stay in control at all times.

Deposit Limit

Set daily, weekly, or monthly deposit limits in your account settings. A simple, effective way to keep your bankroll on track.

Session Alerts

Set a time limit per session and receive automatic alerts. Playing with focus and a set time limit is always better than playing on autopilot.

Self-Exclusion

Need a break? Temporary or permanent self-exclusion is available in your account settings — no paperwork, no waiting period, no judgment.

18+ Exclusive

Bes365 is exclusively for users aged 18 and over with a valid CPF. Identity verification is mandatory for all registrations, no exceptions.

❓ Frequently Asked Questions About Privacy at bes365

The most common questions about how we handle your personal data, answered directly.

No. The bes365 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Information is shared with partners only when strictly necessary to provide the service — such as payment processors for Pix, boleto, or card transactions, and Live Casino providers like Evolution Gaming for table operations. All such third parties are contractually required to handle data with the same level of protection demanded by the LGPD, with an express prohibition on using it for their own purposes. Your data is never sent to advertising networks or data brokers.

To request the deletion of your personal data, please contact the DPO at bes365 by emailing privacidade@bes365.best, stating the right you wish to exercise (data deletion), the CPF and email address associated with your account for identification, and the specific data whose deletion you are requesting. The response deadline is up to 15 business days. Please note that some data cannot be deleted immediately — such as financial transaction history, which must be retained for a minimum of 5 years under anti-money laundering legislation. In such cases, our response will specify which data can be deleted immediately and which is subject to a mandatory retention period.

Upon closing your account at bes365, data is handled as follows: basic registration data (name, email, phone number) is marked as inactive and retained for up to 5 years for audit purposes; financial transaction history is retained for 5 years as required by law; identity documents submitted during the KYC process are retained for the applicable legal period; browsing data and non-essential cookies are deleted. Data not subject to any legal retention obligation may be deleted upon request through the privacy channel, even after account closure.

A bes365 stores user passwords exclusively as a secure cryptographic hash — never in plain text. This means that even platform employees have no way of seeing your password; the system only checks whether the password entered at login matches the stored hash. All communications between your device and the platform are encrypted with 256-bit SSL/TLS. For additional protection, we recommend enabling two-factor authentication (2FA) in your account settings — it adds an extra layer of security that prevents unauthorized access even if someone discovers your password. If you suspect unauthorized access, contact support immediately to lock your account.
Português