Privacy Policy
Comprehensive Data Protection Notice
Last updated: January 2025
BetInsights Ltda. ("BetInsights", "we", "our", or "us"), a company organized under the laws of the Federative Republic of Brazil, is committed to protecting your privacy and personal data in accordance with Lei Geral de Proteção de Dados Pessoais (LGPD - Law No. 13,709/2018), as amended, and other applicable data protection regulations.
This Privacy Policy describes how we collect, use, process, store, share, and protect personal data when you access or use our website, mobile applications, and related services (collectively, the "Platform"). This Policy also explains your rights as a data subject under Brazilian law and how you may exercise them.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will obtain your express consent before processing your personal data for specific purposes.
1. Definitions
For the purposes of this Privacy Policy, the following definitions apply in accordance with the LGPD:
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Sensitive Personal Data" means personal data concerning racial or ethnic origin, religious belief, political opinion, trade union membership, health, sexual life, genetic or biometric data.
- "Data Subject" or "User" means the natural person to whom the personal data refers.
- "Controller" means the natural or legal person, public or private, that makes decisions regarding the processing of personal data. BetInsights acts as the Controller of your personal data.
- "Processor" or "Operator" means the natural or legal person, public or private, that processes personal data on behalf of the Controller.
- "Processing" means any operation performed with personal data, including collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, control, modification, communication, transfer, diffusion, or extraction.
- "Consent" means the free, informed, and unambiguous expression by which the Data Subject agrees to the processing of their personal data for a specific purpose.
- "ANPD" means the Autoridade Nacional de Proteção de Dados (National Data Protection Authority), the Brazilian regulatory body responsible for overseeing compliance with the LGPD.
2. Data Controller Information
BetInsights acts as the Controller of personal data collected through the Platform:
Corporate Name: BetInsights Ltda.
Address: Brazil
Email: contact@betinsights.com
Data Protection Officer (DPO/Encarregado): dpo@betinsights.com
The Data Protection Officer is responsible for receiving communications from Data Subjects and the ANPD, providing guidance to employees regarding data protection practices, and performing other duties as determined by the Controller or established in complementary regulations.
3. Personal Data We Collect
We collect personal data in various ways when you interact with the Platform. The categories of personal data we collect are as follows:
3.1 Data Provided Directly by You
- Identification Data: Full name, email address, username, and password
- Contact Data: Phone number (optional), country of residence
- Account Preferences: Language preferences, timezone settings, notification preferences
- Financial Preferences: Bankroll amount (for simulation purposes only), preferred currency display
- Betting Preferences: Preferred bookmakers, favorite sports and leagues, odds format preference (decimal, fractional, American)
- User-Generated Content: Betting records voluntarily entered, notes, and annotations
- Communication Data: Messages sent to our support team, feedback, and survey responses
- Age Verification Data: Date of birth or age confirmation to verify you are at least 18 years old
3.2 Data Collected Automatically
- Device Information: Device type, operating system, browser type and version, unique device identifiers
- Connection Data: IP address, internet service provider, connection type
- Location Data: Approximate geographic location derived from IP address (country and region level only)
- Usage Data: Pages visited, features used, time spent on pages, click patterns, search queries within the Platform
- Referral Data: Information about how you arrived at our Platform (referral URL, marketing campaign identifiers)
- Technical Logs: Access timestamps, error logs, performance data
3.3 Data from Third Parties
- Social Login Data: If you register using a social media account (e.g., Google), we receive your public profile information as authorized by you
- Analytics Partners: Aggregated and anonymized usage statistics
- Payment Processors: Transaction confirmation data (we do not store complete payment card information)
3.4 Sensitive Personal Data
We do not intentionally collect sensitive personal data as defined by Article 5, II of the LGPD. If we become aware that such data has been inadvertently collected, we will take immediate steps to delete it unless we have a valid legal basis for its processing.
4. Purposes of Processing and Legal Bases
In accordance with Article 7 of the LGPD, we process your personal data based on the following legal bases and for the following purposes:
| Purpose | Data Categories | Legal Basis (LGPD Art. 7) |
|---|---|---|
| Account creation and management | Identification, Contact, Account Preferences | Contract performance (Art. 7, V) |
| Provision of Platform services | All user-provided data, Usage Data | Contract performance (Art. 7, V) |
| Age verification (18+ requirement) | Age Verification Data | Legal obligation (Art. 7, II); Regulatory compliance (Art. 7, VI) |
| Customer support | Identification, Contact, Communication Data | Contract performance (Art. 7, V) |
| Service improvement and analytics | Usage Data, Device Information, Technical Logs | Legitimate interest (Art. 7, IX) |
| Personalization of experience | Betting Preferences, Usage Data | Legitimate interest (Art. 7, IX) |
| Marketing communications and newsletters | Identification, Contact | Consent (Art. 7, I) |
| Affiliate program management | Identification, Contact, Referral Data | Contract performance (Art. 7, V); Consent (Art. 7, I) |
| Fraud prevention and security | Device Information, Connection Data, Usage Data | Legitimate interest (Art. 7, IX); Legal obligation (Art. 7, II) |
| Compliance with legal and regulatory obligations | All relevant data as required | Legal obligation (Art. 7, II); Regulatory compliance (Art. 7, VI) |
| Exercise of rights in judicial, administrative, or arbitral proceedings | All relevant data as required | Exercise of rights (Art. 7, VI) |
When processing is based on legitimate interest, we conduct a balancing test to ensure that your rights and freedoms are not overridden. You have the right to object to processing based on legitimate interest at any time.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information when you access the Platform. These technologies help us provide, protect, and improve our services.
5.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the Platform to function properly. These cannot be disabled and do not require consent. They include session management, security, and load balancing cookies.
- Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences, language settings, and login status.
- Analytics Cookies: Help us understand how users interact with the Platform by collecting anonymized usage statistics. We use Google Analytics for this purpose.
- Marketing Cookies: Used to track visitors across websites and display relevant advertisements. These are only placed with your explicit consent.
5.2 Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We do not control these cookies and recommend reviewing the privacy policies of the respective third parties:
- Google Analytics (analytics)
- Payment processors (transaction security)
- Social media platforms (if social features are used)
5.3 Managing Cookies
You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of the Platform. Upon your first visit, you will be presented with a cookie consent banner where you can choose which categories of cookies to accept.
5.4 Do Not Track
Some browsers offer a "Do Not Track" feature. Currently, there is no uniform standard for responding to these signals. We will update this Policy if a standard is established.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your personal data in the following circumstances:
6.1 Service Providers (Operators)
We engage third-party companies and individuals to perform services on our behalf. These Operators process data only as instructed by us and are bound by contractual obligations to maintain confidentiality and security:
- Cloud Infrastructure: Hosting and storage services
- Analytics Providers: Usage analysis and reporting
- Email Service Providers: Delivery of transactional and marketing emails
- Customer Support Tools: Help desk and ticketing systems
- Payment Processors: Subscription billing and payment processing
6.2 Partner Bookmakers
We maintain affiliate relationships with licensed bookmakers. If you click on affiliate links or choose to be redirected to a bookmaker's website, certain data (such as referral identifiers) may be shared to track the referral. We do not share your personal account information with bookmakers without your explicit consent. For more information about our affiliate relationships, please see Section 7 (Affiliate Disclosure).
6.3 Legal and Regulatory Authorities
We may disclose your personal data when required by law, court order, or request from competent authorities, including the ANPD, law enforcement agencies, tax authorities, or regulatory bodies overseeing sports betting activities in Brazil pursuant to Lei 14.790/2023.
6.4 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your data.
6.5 Protection of Rights
We may disclose personal data when we believe in good faith that disclosure is necessary to protect our rights, investigate fraud or security issues, enforce our Terms of Use, or protect the safety of users or the public.
7. Affiliate Disclosure
BetInsights participates in affiliate marketing programs with licensed bookmakers. This means we may receive compensation when you click on links to bookmaker websites or register for accounts through our Platform.
When you interact with affiliate links:
- Tracking cookies may be placed on your device to attribute the referral
- Referral identifiers may be shared with the bookmaker
- We may receive information about whether you completed registration or met qualifying criteria
- We do not receive information about your betting activity or account balance at bookmaker sites
Our affiliate relationships do not influence the accuracy or objectivity of the information, odds data, or analysis provided on our Platform. We are committed to transparency and clearly identify affiliate relationships in accordance with applicable consumer protection laws.
8. International Data Transfers
Some of our service providers may be located outside of Brazil, which means your personal data may be transferred to and processed in countries with different data protection laws.
In accordance with Article 33 of the LGPD, international transfers of personal data are only permitted when:
- The receiving country or international organization provides an adequate level of data protection
- The Controller offers and proves guarantees of compliance with the principles, rights, and data protection regime through specific contractual clauses, standard contractual clauses, or binding corporate rules
- The transfer is necessary for international legal cooperation between public intelligence, investigation, and prosecution bodies
- The transfer is necessary to protect the life or physical safety of the Data Subject or third party
- The ANPD has authorized the transfer
- The Data Subject has provided specific and highlighted consent for the transfer
We implement appropriate safeguards, including standard contractual clauses approved by the ANPD or equivalent mechanisms, to ensure that your personal data remains protected in accordance with Brazilian law when transferred internationally.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
The retention periods are determined based on:
- Account Data: Retained for the duration of your account and for up to 5 years after account deletion for legal compliance purposes
- Transaction Records: Retained for 5 years in accordance with Brazilian tax and commercial law requirements
- Communication Records: Retained for 2 years from the date of communication
- Analytics Data: Aggregated and anonymized data may be retained indefinitely; identifiable usage data is retained for up to 2 years
- Marketing Consent Records: Retained for 5 years from the date of consent or withdrawal
Upon expiration of the retention period, or upon your valid request for deletion, we will securely delete or anonymize your personal data, unless retention is required for compliance with legal obligations, exercise of rights in legal proceedings, or transfer to third parties as permitted by law.
10. Your Rights as a Data Subject
Under the LGPD (Articles 17-22), you have the following rights regarding your personal data:
- Right to Confirmation: You may request confirmation of the existence of processing activities concerning your personal data.
- Right to Access: You may request access to your personal data that we hold.
- Right to Correction: You may request the correction of incomplete, inaccurate, or outdated data.
- Right to Anonymization, Blocking, or Deletion: You may request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD.
- Right to Portability: You may request the portability of your data to another service provider, in accordance with ANPD regulations.
- Right to Deletion: You may request deletion of personal data processed with your consent, except in cases where retention is legally required.
- Right to Information about Sharing: You may request information about public and private entities with which we have shared your data.
- Right to Information about Consent: You may request information about the possibility of denying consent and the consequences of such denial.
- Right to Withdraw Consent: You may withdraw your consent at any time through a free and easy procedure. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Object: You may object to processing based on legitimate interest if you believe your fundamental rights and freedoms are being violated.
- Right to Review Automated Decisions: You may request review of decisions made solely based on automated processing of personal data that affect your interests, including decisions intended to define your personal, professional, consumer, or credit profile.
11. How to Exercise Your Rights
To exercise any of the rights described above, you may contact us through the following channels:
Data Protection Officer (Encarregado):
Email: dpo@betinsights.com
General Contact:
Email: privacy@betinsights.com
When submitting a request, please provide:
- Your full name and email address associated with your account
- A clear description of the right you wish to exercise
- Any additional information that may help us locate and process your request
We will verify your identity before processing any request to ensure the security of your data. We will respond to your request within 15 (fifteen) days, as required by the LGPD. If we are unable to comply with your request, we will provide a reasoned explanation.
If you believe that your rights have been violated or that our response is unsatisfactory, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at www.gov.br/anpd.
12. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental or unlawful destruction, loss, alteration, communication, or any form of improper or unlawful processing, in accordance with Article 46 of the LGPD.
Our security measures include, but are not limited to:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Access controls and authentication mechanisms
- Regular security assessments and vulnerability testing
- Employee training on data protection and security
- Incident response procedures
- Secure development practices
- Physical security measures for infrastructure
- Contractual security requirements for service providers
While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.
In the event of a security incident that may result in relevant risk or damage to Data Subjects, we will notify the ANPD and affected individuals in accordance with Article 48 of the LGPD.
13. Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. Access to sports betting-related content is restricted to adults in compliance with Lei 14.790/2023 and the Brazilian Statute of the Child and Adolescent (Law No. 8,069/1990).
If we become aware that we have collected personal data from a minor without appropriate parental consent, we will take immediate steps to delete such information. If you believe we have inadvertently collected data from a minor, please contact us at privacy@betinsights.com.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this Policy
- Notify you by email (if you have an account) or through a prominent notice on the Platform
- Where required by law, obtain your consent to the updated Policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform after any changes indicates your acceptance of the updated Policy.
15. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Federative Republic of Brazil, including but not limited to:
- Lei Geral de Proteção de Dados Pessoais (LGPD - Law No. 13,709/2018)
- Marco Civil da Internet (Law No. 12,965/2014)
- Código de Defesa do Consumidor (CDC - Law No. 8,078/1990)
- Lei das Apostas Esportivas (Law No. 14,790/2023)
- Applicable ANPD regulations and guidelines
Any disputes arising from or relating to this Privacy Policy shall be submitted to the competent courts of Brazil. In accordance with Article 101, I of the Consumer Defense Code, consumers may elect the jurisdiction of their domicile.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
BetInsights Ltda.
Brazil
General Inquiries:
Email: contact@betinsights.com
Privacy and Data Protection:
Email: privacy@betinsights.com
Data Protection Officer (Encarregado):
Email: dpo@betinsights.com
We are committed to working with you to resolve any concerns about your privacy and our handling of your personal data.