Official document — LGPD

Privacy Policy of zz345 – how your data is protected

At zz345, privacy is not a formality — it is part of the service. This Policy clearly explains what data we collect, why we collect it, how we use it, and what your rights are as the data subject, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018). If you use the platform, it's worth a read.

Last updated: January 2026 Estimated read: 7 minutes
256-bit SSL · LGPD Compliance

What guides the handling of your data at zz345

Six concrete commitments that guide every decision about how your data is handled on the platform.

End-to-end encryption

All data transmitted between your mobile device or computer and zz345 servers is protected by 256-bit SSL encryption — the same standard used by banks and financial institutions in Brazil. Your CPF, transaction history, and Pix data are never transmitted as plain text.

256-bit SSL on all connections

Minimum necessary data

Zz345 collects only the data strictly necessary to provide the service and meet legal obligations. We do not ask for information we do not use. Name, CPF, email, phone number, and payment details — nothing beyond what operations and security require.

Data minimization principle (LGPD)

No data selling

Zz345 never sells, rents, or shares your personal data with third parties for marketing or advertising purposes. Data is shared only when required by law or with service providers essential to operations — always under a confidentiality agreement and strictly limited to what is necessary.

Zero commercial data sharing

Segregated and secured balance

Player balances are held in segregated bank accounts, completely separate from zz345's operational funds. This means your money cannot be used to cover platform expenses — it is reserved exclusively for player withdrawals.

Segregated accounts — international standard

Your guaranteed rights

As a data subject, you have the right to access, correct, delete, and port your information at any time. zz345 responds to all requests within 15 business days, in line with LGPD deadlines. Simply reach out via support chat or email.

Access, correction, and deletion guaranteed

Full transparency

This Policy explains every aspect of data processing in plain language, free of unnecessary legal jargon. Whenever material changes are made, you will be notified by email before they take effect. A version history is available upon request from support.

Advance notice for every change

This Privacy Policy was drafted in Brazilian Portuguese and is the official, binding version applicable to all players registered at the zz345. By creating an account or using any feature of the platform, you confirm that you have read and understood this document.

1
Data Controller

For the purposes of the General Personal Data Protection Law (LGPD — Law No. 13.709/2018), the controller of the personal data collected through the platform zz345 is the operating company of the platform, responsible for defining the purposes and means of processing the personal data of registered Brazilian players.

Zz345 operates exclusively in a digital environment, focused on the Brazilian market. All services — online casino (slots, blackjack, roulette, crash games, live casino), pre-match Sports Betting, live betting with cash out, and e-sports betting on CS2, Free Fire, LoL CBLOL, and Valorant VCT — are offered by the same controlling entity.

To contact the data controller or the Data Protection Officer (DPO), please use the channels listed in the Section 10 of this document.

LGPD in practice: zz345 processes your data as a responsible controller, with defined purposes, an identified legal basis, and security measures proportionate to the risk of each processing operation.

2
Data We Collect

The zz345 collects personal data at different points during your interaction with the platform. Collection follows the data minimization principle: we gather only what is necessary to provide the service, ensure security, and meet legal obligations.

Data provided directly by you:
Full name, CPF, date of birth, email address, mobile number, residential address, Pix key, and payment method details (partial card number, boleto details, account linked to PicPay or Mercado Pago). This data is collected during registration, identity verification (KYC), and financial transactions.
Data collected automatically during use:
IP address, browser type and version, device operating system (Android, iOS, Windows, etc.), pages visited within the platform, session times and duration, session identifiers, and technical performance data. This data is collected through cookies and similar technologies, as described in Section 6.
Transaction and betting data:
Full history of deposits, withdrawals, and bets placed (including events, odds, amounts wagered, and results), games accessed, bonuses used, and support interactions. This data is necessary to operate the service, resolve disputes, and meet financial compliance obligations.
Communication data:
Records of conversations with the support team via live chat and email, including the date, time, and content of each interaction. These records are retained for quality control and complaint resolution purposes.

Zz345 does not collect biometric data, real-time location data, the content of private communications outside the platform, or any other category of sensitive data beyond those listed above.

3
How We Use Your Data

The data collected by the zz345 are used solely for the purposes described below. No data is used for any purpose beyond those listed without prior notice and, where applicable, renewed consent from the data subject.

  • Account creation and management: identity verification, duplicate account prevention, login authentication, and account history maintenance.
  • Financial transaction processing: receiving deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; processing withdrawals via Pix to the key registered under the account holder's name.
  • Provision of gaming and betting services: operating the slots, Live Casino, blackjack, roulette, crash games, and live Sports Betting platforms; recording bets and results; calculating and paying out winnings.
  • Fraud prevention and legal compliance: detection of suspicious behavior, anti-money laundering (AML/CFT), eligibility verification (minimum age of 18), and compliance with regulatory obligations to Brazilian authorities such as the Banco Central and Receita Federal.
  • Player communication: sending transactional notifications (deposit confirmation, withdrawal status, account updates), communications about changes to this Policy or the Terms and Conditions, and — only with your consent — offers and promotions from zz345.
  • Service improvement: analysis of aggregated and anonymized data on usage patterns to improve the platform experience, identify technical bugs, and develop new features.
  • Player support: resolving queries, bet disputes, and complaints related to financial transactions, based on the recorded interaction history.

No external advertising profile: zz345 does not create or share player behavior profiles for advertising targeting on external platforms. Your usage data stays within the platform.

4
Legal Bases for Processing

All personal data processing carried out by the zz345 is grounded in one of the legal bases set out in the Art. 7 of the LGPD. The table below summarizes the main processing operations and the respective legal basis applied:

Processing operation Legal basis (LGPD) Summary description
Registration and identity verification Contract performance Required to create and maintain the player's account in accordance with the accepted Terms and Conditions.
Processing deposits and withdrawals Contract performance Essential for processing payment and withdrawal services in BRL.
Fraud and money laundering prevention Legal obligation Full compliance with financial regulations and Brazilian legislation applicable to the sector.
Minimum age verification (18+) Legal obligation Legal requirement to prevent minors from accessing the gaming platform.
Sending marketing communications Consent Carried out only when the player opts in through the account's communication preferences.
Usage analysis for product improvement Legitimate interest Aggregated and anonymized data used to improve the platform experience.
Customer support and dispute resolution Contract performance Interaction history required to resolve complaints and bet disputes.

Whenever consent is the legal basis used, you may withdraw that consent at any time without affecting the rest of your service agreement with zz345. Withdrawing consent for marketing, for example, does not affect your access to the platform or the processing of your withdrawals.

5
Sharing Data with Third Parties

The zz345 does not sell, rent, transfer, or trade players' personal data with third parties. Information is only shared in the cases described below, always to the minimum extent necessary and with contractual confidentiality guarantees:

Payment processors:
To process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, transaction data is shared with the financial institutions and payment gateways responsible for settlement. These partners are contractually bound to use the data solely for transaction processing purposes.
Game providers:
The slots, Live Casino games, and other titles available on zz345 are provided by certified third-party providers. Anonymized session identifiers may be shared for game logging and result verification. No personally identifiable information (CPF, full name, banking details) is shared with game providers.
Authorities and regulatory bodies:
zz345 may be legally required to share data with Brazilian authorities — Receita Federal, Banco Central, Polícia Federal, Ministério Público — in response to court orders, money laundering investigations, or other applicable legal requirements. Such disclosures are logged internally and communicated to the data subject whenever legally permitted.
Technology infrastructure providers:
Hosting servers, CDN (content delivery network) services, security analytics tools, and customer support platforms may have technical access to data in the course of providing their services to the platform. All operate under data processing agreements (DPAs) compatible with the LGPD.

International transfer: some infrastructure providers may operate servers outside Brazil. In such cases, zz345 ensures that international data transfers comply with the requirements of Art. 33 of the LGPD — through standard contractual clauses or equivalent safeguards.

6
Cookies and Tracking Technologies

The zz345 uses cookies and similar technologies to ensure the platform functions correctly, personalize the player experience, and analyze the service's technical performance. Below we explain the types of cookies used and how you can manage them.

Strictly necessary cookies:
Essential for the platform to function — session authentication, bet slip management, language preferences. They cannot be disabled without affecting the service.
Performance and analytics cookies:
Collect aggregated and anonymized data on how players navigate the platform — most visited pages, session duration, technical errors. Used internally to improve the product. Individual players are not identified.
Functionality cookies:
They remember player preferences — such as odds display format, preferred deposit method, and notification settings. They improve convenience without collecting sensitive data.

Types of cookies used on zz345:

Session Performance Functionality No external advertising cookies

The zz345 does not use third-party advertising cookies to track player behavior outside the platform or build advertising profiles for external networks.

How to manage cookies: you can manage and delete cookies through your browser's settings menu — Chrome, Safari, Firefox, or any other. Disabling strictly necessary cookies may affect how the platform functions. Disabling performance and functionality cookies does not affect access to games, Sports Betting, or transactions.

On mobile: on your Android or iPhone's native app, the operating system's privacy settings also let you control access to device identifiers used by the zz345 web platform.

7
Data Security and Storage

The zz345 implements technical and organizational measures proportionate to the risk of each data processing operation, in compliance with Art. 46 of the LGPD. The key safeguards in place on the platform include:

  • SSL/TLS 256-bit encryption across all data transmissions between the player's device and zz345's servers.
  • Encryption at rest for sensitive data at rest — CPF, banking details, and transaction history are stored in encrypted form in the databases.
  • Role-based access control (RBAC): only staff with a legitimate need have access to players' personal data, with a full log of all access activity maintained.
  • Two-factor authentication (2FA) available to all players in the account security section.
  • Continuous monitoring of unauthorized access attempts, brute-force attacks, and suspicious behavioral patterns.
  • Regular encrypted backups with separate storage, to ensure data availability in the event of an incident.
  • Segregated account balance: player funds are held in bank accounts completely separate from the company's operational funds.

In the event of a security incident that compromises personal data with significant risk to data subjects — such as a data breach or unauthorized access — zz345 will notify the Autoridade Nacional de Proteção de Dados (ANPD) within 72 hours of identification, as required by Art. 48 of the LGPD. Affected players will be notified directly by email as soon as possible.

Data is stored on servers located within Brazil or in jurisdictions that offer a level of protection equivalent to the LGPD, in accordance with the international transfer rules described in Section 5.

8
Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the holder of the personal data processed by the zz345, a set of rights that may be exercised at any time. See each right and how to exercise it below:

Access
Request a copy of all personal data zz345 holds about you, including your transaction and betting history.
Correction
Request the correction of any incorrect, incomplete, or outdated information — such as your email, phone number, or address.
Deletion
Request the deletion of data processed on the basis of consent. Data required by law (financial history, KYC) is retained for the mandatory legal period.
Portability
Receive your personal data in a structured, machine-readable format for transfer to another platform, in accordance with ANPD regulations.
Withdrawal of consent
Withdraw consent for processing based on this legal basis — such as marketing emails — at any time, with no impact on your access to the platform.
Right to object
Object to processing carried out on the basis of legitimate interest when you believe your fundamental rights outweigh the controller's interest.
Data sharing information
Request information about which public or private entities your data has been shared with by zz345.
Complaint to the ANPD
If you believe your rights have not been respected, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD).

To exercise any of these rights, contact our Data Protection Officer (DPO) through the channels listed in the Section 10. The response time is up to 15 business days, in accordance with the LGPD.

9
Data Retention and Deletion

The zz345 retains players' personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations. Retention periods vary depending on the type of data:

  • Active account data: retained for as long as the account remains active and for an additional 5-year period after closure, for financial compliance purposes and resolution of potential disputes.
  • Financial transaction history (deposits, withdrawals, bets): retained for a minimum of 5 years as required by Brazilian tax and anti-money laundering legislation.
  • Identity verification data (KYC): retained for a minimum of 5 years after account closure, in compliance with Law No. 9.613/1998 (anti-money laundering) and Banco Central regulations.
  • Support records: retained for 2 years after the interaction is resolved, for quality control purposes and in case a complaint needs to be reopened.
  • Marketing data (consent): retained only while consent is active. After withdrawal, deleted within 30 days.
  • Performance cookie data: expire automatically according to the lifespan configured for each cookie — typically between 30 days and 12 months.

Once the applicable retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymization follows the technical standard of irreversibility required by the LGPD.

Accounts with no activity (login, deposit, or bet) for more than 12 consecutive months are classified as inactive. zz345 will send an email notification before taking any action regarding remaining balances on inactive accounts.

10
Contact, DPO & Policy Changes

To exercise your rights as a data subject, clarify questions about this Policy, or file a complaint regarding the processing of personal data by the zz345, please contact our Data Protection Officer (DPO):

  • Live chat: available 24 hours a day directly on the platform, with an average response time of under 2 minutes. Let us know you'd like to discuss data privacy.
  • DPO Email: suporte@zz345.best — for formal LGPD rights requests, include "LGPD — [request type]" in the subject line.

The response time for data subject rights requests is up to 15 business days from receipt of the complete request, pursuant to Art. 19 of the LGPD.

Changes to this Policy: zz345 may update this Privacy Policy at any time to reflect changes in its services, applicable Brazilian legislation, or industry best practices. Any significant changes will be communicated at least 7 days in advance via email to the registered address and through a visible notice on the platform. The most recent version is always available at zz345.best/privacy-policy, with the date of the last update shown at the top.

Continued use of the platform after any changes to this Policy take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account through support or through your account settings before the effective date.

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13.709/2018). Any disputes shall be submitted to the courts of the district of São Paulo – SP, unless otherwise required by law.

24/7 support in Portuguese: any questions about privacy, data, or LGPD rights — reach out via chat. Our team responds in under 2 minutes, in Portuguese, every day.

Summary of your rights at zz345

You have the right to access, correct, delete, and port your personal data at any time. You may also withdraw consent for marketing or object to processing based on legitimate interest. Simply reach out via chat or email suporte@zz345.best. Response time: up to 15 business days as required by the LGPD.

For full details on your rights, please refer to the Section 8 of this Policy or the Terms and Conditions of zz345.

Play at zz345 with full security and transparency

Your data protected by LGPD, SSL 256-bit encryption, segregated account balance, and 24/7 support in Portuguese. Sign up and deposit via Pix from R$ 10.00.

SSL 256-bit Instant Pix Everything in BRL 24/7 Support in PT 18+ Only
Responsible Gambling — tools available in your account

Sports Betting and casino games involve the risk of financial loss. Never deposit more than you can afford to lose. zz345 offers deposit limits, temporary breaks, and self-exclusion for all players. Available to players aged 18 and over only. Need help? CVV: 188.

Português