At 20games, your personal data is handled with the same care you would expect from any bank. Here we explain exactly what we collect, how we use it, and what your rights as a data subject are — in plain English, no runaround.
Six principles that guide the handling of personal information on the platform
All personal data processing at 20games follows the General Data Protection Law (Lei nº 13.709/2018). The legal bases for each processing operation are documented and periodically reviewed by our legal team and Data Protection Officer (DPO).
All communication between you and the servers of the 20games is protected by 256-bit SSL encryption — the same standard used by Brazilian banks. Sensitive financial data is stored with additional encryption at rest and is never accessible in plain text.
The 20games does not sell, rent, or trade your personal data with third parties for advertising or commercial purposes. Data sharing occurs exclusively when necessary to operate the service or fulfill legal obligations — and always under a confidentiality agreement.
You have the right to access, correct, port, and request deletion of your data at any time. These requests are handled within 15 business days by our DPO. Simply send an email to contato@20games.net with the subject line "Data Subject Rights".
The 20games collects only the data strictly necessary to operate your account, process payments via Pix, boleto, or card, and meet regulatory obligations for anti-money laundering compliance. No data is collected out of curiosity or commercial convenience.
If any security incident occurs that may affect your personal data, the 20games will notify affected data subjects and the ANPD (National Data Protection Authority) within the timeframes established by the LGPD — with full transparency about what happened and what steps were taken.
The LGPD guarantees these rights — and 20games makes sure you can actually exercise them
Request a copy of all your personal data stored by 20games, including what was collected, how it is used, and with whom it has been shared.
Request the correction of any data that is incorrect, incomplete, or out of date. Changes to your profile details can be made directly under "My Account".
Request the deletion of your personal data when processing is based on consent or when there is no longer a legal basis for retention.
Receive your data in a structured, machine-readable format to transfer it to another controller, where technically feasible.
Object to data processing carried out on the basis of legitimate interest when you have grounds related to your particular situation.
Find out which public and private entities 20games has shared your data with, and the reasons behind each disclosure.
Withdraw at any time a consent you previously gave. Revoking consent does not affect processing already carried out on the basis of that consent.
Request human review of decisions made solely by automated processes that affect your interests, such as account blocks due to suspected fraud.
To exercise any of these rights: send an email to contato@20games.net with the subject line "Data Subject Rights – [your full name]" and describe your request. We respond within 15 business days, as required by the LGPD. Identity verification may be required before your request is processed.
Summary in one sentence: the 20games collects only what is necessary, protects your data with bank-grade encryption, never sells it, and respects all your rights under the LGPD. Full details are provided in the sections below.
This Privacy Policy describes how the 20games, operator of the platform available at 20games.net ("Platform"), collects, uses, stores, shares, and protects the personal data of its users in accordance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable regulations in Brazil.
The 20games acts as controller of the personal data processed under this Policy, and is responsible for decisions regarding the handling of that information. Our Data Protection Officer (DPO) can be reached at contato@20games.net for any questions related to privacy and data protection.
When you create an account at 20games and use its services — including online casino, Sports Betting on the Brasileirão Série A, Copa do Brasil, Libertadores, and other competitions — you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of it, please contact us before proceeding.
During registration and use of the platform, the 20games collects the following data that you actively provide:
By accessing 20games, we automatically collect technical information required for the platform's operation and security:
In specific cases, 20games may receive data from legally authorized third parties, such as payment processors that confirm transactions via Pix, card, or boleto, or fraud prevention bureaus used to protect your account.
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identification | Name, CPF, date of birth | Performance of a contract + Legal obligation |
| Contact | Email, mobile | Contract performance |
| KYC Documents | Government-issued ID, driver's license, selfie | Legal obligation (AML) |
| Financial | Pix key, bank account, partial card number | Contract performance |
| Technical / Navigation | IP, device, session | Legitimate interest (security) |
| Betting & Games | Betting history, balance, bonuses | Performance of a contract + Legal obligation |
The 20games grounds every data processing operation on at least one of the legal bases established under the LGPD:
No sensitive data (such as health information or biometrics) is collected or processed by 20games. Identity document images collected during KYC are used exclusively for identity verification and anti-money laundering purposes, based on a legal obligation.
The personal data processed by the 20games serve the following purposes:
You control your marketing communications. At any time, go to "My Account → Communication Preferences" to adjust which notifications you wish to receive. You can also click "unsubscribe" in any marketing email sent by the 20games.
The 20games does not sell personal data. Sharing only occurs in the following cases, with third parties who are duly contracted and required to maintain confidentiality:
To process financial transactions via Pix, boleto, credit/debit card, PicPay, and Mercado Pago, we share with the respective processors only the minimum data required to complete the transaction. No processor has access to the user's full betting history or gaming profile.
The casino and live casino games available at 20games are provided by certified third-party companies (such as gaming software providers). These companies receive an anonymized user identifier to record game results — with no access to the player's name, CPF, or financial data.
To process identity verification securely and efficiently, we may use specialized KYC and anti-money laundering providers. These providers operate under a data processing agreement and are contractually prohibited from using your data for any purpose other than the requested verification.
The 20games may disclose personal data to law enforcement, judicial, or regulatory authorities when required by law, court order, or applicable regulatory ruling in Brazil. In such cases, we disclose only the data specifically requested by the authority.
It is strictly prohibited for 20games and its staff: sharing personal data with marketing companies without the data subject's explicit consent; selling or monetizing personal data in any form; sharing data with competing betting or casino platforms.
The personal data of users of 20games are stored on servers located in Brazil or in jurisdictions with an adequate level of data protection, as assessed by the ANPD. All servers are operated by providers certified to ISO 27001 (information security management).
Data is retained for the following periods, counted from the date the account is closed or the last transaction is made, whichever occurs later:
Once retention periods have expired, data is securely deleted or anonymized for statistical purposes. Deletion by anonymization ensures that any remaining data cannot be linked to any identifiable individual.
The 20games adopts state-of-the-art technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
The security of your account also depends on you. We recommend: using a strong, unique password for 20games, enable 2FA in your account settings, never share your credentials with anyone, and contact support immediately if you suspect unauthorized access.
The 20games uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and, with your consent, personalize the content displayed.
You can manage and delete cookies directly through your browser settings. Most modern browsers (Chrome, Safari, Firefox) allow you to block third-party cookies or clear all existing cookies. Please note that disabling essential cookies may prevent the platform from functioning properly at 20games.
The 20games is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors.
If we become aware that a user is under 18, the account will be closed immediately and all associated data will be deleted as soon as legally required retention periods allow. Any deposits made by minors will be fully refunded to the original payment method.
If you are the guardian of a child or teenager and believe they have created an account at 20games, please contact us urgently at contato@20games.net so we can take immediate action.
🔞 Prohibited for users under 18. Participation in Sports Betting and casino games is restricted to adults. The 20games uses age verification during registration and may request identity documents at any time.
The 20games prioritizes storing data in Brazil. When operational needs require transferring data to servers outside the country, we apply the safeguards set out under the LGPD:
Under no circumstances will your financial data — especially your Pix key, bank account details, or card information — be transferred outside Brazil without the protections described above.
To exercise any of the rights provided under the LGPD regarding your personal data at 20games, you may:
The 20games responds to all data subject rights requests within 15 business days, as provided under the LGPD. In complex cases requiring more in-depth analysis, this deadline may be extended by an additional 15 business days, with notification to the data subject explaining the reason for the extension.
For access, portability, or deletion requests, you may be asked to verify your identity before processing — this is to protect you against fraudulent requests made in your name.
If you believe your rights have been violated and the response from 20games was not satisfactory, you have the right to file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.
The 20games has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is responsible for:
Contact the DPO at 20games:
The 20games may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. All material changes will be communicated via:
Changes that expand the scope of data processing or modify the applicable legal bases will require renewed consent where the legal basis for processing is the data subject's consent.
We recommend reviewing this Policy periodically. The date of the last update is always shown at the top of the document.
This Policy was written in Brazilian Portuguese to be understood by any user of the 20games in Brazil — no unnecessary legal jargon and no fine print designed to catch you off guard. If anything is unclear, please contact our support team or DPO before making any decisions about how your data is used.
Just as we protect your data, we provide tools to help you stay in control of your gaming experience.
No third party has access to your gaming profile, betting history, or financial data without a proven operational need and appropriate legal basis.
Set a daily, weekly, or monthly cap on your deposits. The limit takes effect immediately and we never share these settings with third parties.
During a self-exclusion period, your account remains confidential and no marketing communications are sent. Your balance is preserved and protected.
If gambling has stopped being fun, CVV is available 24/7 at 188. Your personal information is never shared with outside organizations without your consent.