LGPD · 256-bit SSL · Data Protected

Privacy Policy of 2hbet — Your Data, Always Protected

2hbet handles your personal data responsibly and transparently, in full compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018). This page explains what we collect, how we use it, who we share it with, and what your rights are as a data subject.

Create Free Account Terms and Conditions
Last updated: January 2026 Official language: Brazilian Portuguese (pt-BR) Applicable law: LGPD — Law No. 13,709/2018 Encryption: 256-bit SSL

Quick summary: 2hbet only collects the data needed to provide platform services, verify your identity, and meet legal obligations. Your data is never sold. You can request access, correction, portability, or deletion of your data at any time through 24h support. By using 2hbet, you agree to this Privacy Policy.

1. Introduction

This Privacy Policy describes how 2hbet, a Sports Betting and online casino platform accessible at https://2hbet.best, collects, stores, processes, shares, and protects its users' personal data. This document was drafted in accordance with the General Data Protection Law (LGPD — Law No. 13,709/2018) and applies to all users who register and use the platform's services in Brazil.

2hbet understands that privacy is not a formality — it is a fundamental right. That is why this policy is written in plain, straightforward language, free of unnecessary legal jargon. The goal is for any Brazilian player to be able to read, understand, and exercise their rights without needing a lawyer to interpret the text.

By creating an account, making a deposit, placing bets, or simply browsing 2hbet, you agree to the processing of your data as described here. If you do not agree with any part of this policy, we recommend not using the platform. If you have any questions, our 24/7 support in Portuguese is available to help.

This Privacy Policy should be read together with the Terms and Conditions and the guidelines of Responsible Gambling of 2hbet, which together form the complete set of documents governing the use of the platform.

2. Data Controller

The controller of personal data processed under this policy is the legal entity responsible for operating the 2hbet platform. For LGPD purposes, the controller is the party that makes decisions about data processing — what data to collect, for which purposes, with whom to share it, and how long to retain it.

To contact the controller or exercise any right provided under the LGPD, use 2hbet's support channels, available 24 hours a day:

  • Live chat: available directly on the platform, in Brazilian Portuguese.
  • Email: suporte@2hbet.best

2hbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and handling data subject requests. Requests specifically related to LGPD rights can be submitted to the email address above with the subject line "LGPD Request — [your right]".

3. Data We Collect

2hbet collects personal data in the following situations and categories:

Data provided directly by the user at registration:

  • Full name
  • CPF (Individual Taxpayer Registry)
  • Date of birth
  • Email address
  • Mobile phone number
  • Full residential address (requested during KYC verification)

Data collected during the identity verification (KYC) process:

  • Official government-issued photo ID (national ID card, driver's license, or passport)
  • Proof of address (when requested)
  • Selfie with ID document (for enhanced verification cases)
  • Payment method data for ownership verification

Financial and transaction data:

  • Deposit and withdrawal history (method, amount, date, status)
  • Pix key, bank details for wire transfers, and other information related to the payment methods used
  • Betting, gaming, and activity history on the platform

Data collected automatically during browsing:

  • IP address and approximate geolocation
  • Browser type and version
  • Operating system and device type (mobile, tablet, desktop)
  • Pages visited, session duration, and interactions on the platform
  • Cookies and similar tracking technologies (detailed in section 9)

2hbet follows the principle of data minimization: we collect only what is strictly necessary to provide the services, meet legal obligations, and maintain platform security. We do not collect sensitive data such as racial origin, political opinions, health data, or sexual orientation.

4. Purpose of Data Processing

Personal data collected by 2hbet is used exclusively for the following purposes:

  • Service delivery: create and manage your account, process deposits via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED, record bets and gameplay, calculate results, and process withdrawals.
  • Identity verification (KYC): confirm that you are 18 or older, that your CPF is valid, and that the ownership of the payment methods matches your registered account.
  • Fraud and money laundering prevention: monitor suspicious behavioral patterns, fulfill legal anti-money laundering obligations (Law No. 9,613/1998), and protect the integrity of the platform.
  • Customer support: answer questions, resolve issues, and keep a record of interactions for reference in future contacts.
  • Relevant communications: send notifications about transactions, security updates, changes to terms and, with your consent, marketing communications about promotions and bonuses.
  • Platform improvement: analyze usage data in aggregated and anonymized form to identify technical issues, improve the user experience, and develop new features.
  • Compliance with legal obligations: respond to requests from competent authorities when required by law, report suspicious activity to regulatory bodies, and maintain accounting and tax records.
  • Responsible gambling: monitor gaming patterns to identify signs of problematic behavior and offer proactive support when needed.

2hbet does not use user data to build profiles for sale to third parties, for advertising unrelated to the platform itself, or for any purpose not listed above or described in a specific notice with your consent.

Under the LGPD, all personal data processing must be grounded in a legal basis. 2hbet processes your data under the following legal hypotheses set out in Article 7 of Law No. 13,709/2018:

  • Performance of a contract (Art. 7, V): processing is necessary to perform the service agreement established when you create an account and use the platform. This includes processing deposits, withdrawals, recording bets, and managing your account.
  • Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money-laundering controls, and reporting to competent authorities are legal obligations imposed on 2hbet by Brazilian law.
  • Legitimate interest (Art. 7, IX): fraud prevention, security monitoring, and continuous platform improvement are based on 2hbet's legitimate interests, provided they do not conflict with your fundamental rights and freedoms.
  • Consent (Art. 7, I): marketing communications and the use of non-essential cookies are based on your consent, which can be withdrawn at any time.

6. Data Sharing

2hbet does not sell personal data of its users to third parties. Data sharing only takes place in the strictly necessary situations listed below:

  • Payment providers: data required to process transactions via Pix, bank slip, credit card, PicPay, Mercado Pago, and bank transfer are shared with the financial institutions and payment processors involved in the transaction. These partners are contractually obligated to handle data with the same level of protection required by 2hbet.
  • Game providers: slots, live casino, and other game providers (Pragmatic Play, NetEnt, Play'n GO, and others) receive only the minimum data required to operate the games (session identifier, wagered amount) and have no access to full personally identifiable information.
  • Identity verification services (KYC): partners specializing in document verification and fraud prevention receive the documents submitted to confirm users' identity and age.
  • Competent authorities: 2hbet complies with lawful requests from Brazilian judicial, law enforcement, and regulatory authorities, including reports to COAF (Financial Activities Control Council) regarding suspicious transactions.
  • Auditors and consultants: auditing, legal, and consulting professionals who need to access data to provide services to 2hbet are bound by confidentiality agreements and only access the minimum data necessary for their role.

All third parties that receive data from 2hbet are contractually required to treat that information with confidentiality, apply appropriate security measures, and use it solely for the authorized purposes.

7. Data Retention and Deletion

2hbet retains personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. The specific retention periods are:

  • Active account data: retained for the entire period the account remains active and, after closure, for the minimum period required by law.
  • Financial and transaction records: retained for a minimum of 5 years after the transaction, in accordance with Brazilian tax and anti-money laundering legislation.
  • Identity verification documents (KYC): retained for a minimum of 5 years after account closure, in accordance with legal obligations.
  • Betting and gaming records: retained for a minimum of 3 years for audit and dispute resolution purposes.
  • Access and security logs: retained for 6 months for the purpose of investigating security incidents.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized. Anonymization ensures that data can no longer be linked to a specific individual, allowing it to be used for statistical purposes without compromising privacy.

When you request the deletion of your data, 2hbet will delete or anonymize all information that does not need to be retained by legal obligation. If there is data that cannot be deleted by force of law, you will be informed of what it is and how long it will be kept.

8. Data Security

2hbet implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, disclosure, alteration, loss, or destruction. The main security measures in place include:

  • 256-bit SSL/TLS encryption across all communications between the user's browser and the platform's servers — including login, deposits, withdrawals, and document transmission.
  • Encryption at rest for sensitive data stored in databases, especially identity documents, financial data, and access credentials.
  • Role-based access control (RBAC): 2hbet employees access users' personal data only when required for their specific role, and all access is logged.
  • Two-factor authentication (2FA) available to users who want to add an extra layer of security to their login.
  • Continuous monitoring of suspicious activity across systems, with automatic alerts for abnormal access patterns.
  • Regular security testing, including penetration testing and vulnerability audits conducted by specialized professionals.
  • Incident response plan: in the event of a data breach that could cause risk or harm to data subjects, 2hbet will notify the National Data Protection Authority (ANPD) and affected users in accordance with the timeframes and criteria established by the LGPD.

Despite all measures in place, no system is 100% immune to risk. We strongly recommend protecting your login credentials, using strong and unique passwords, and contacting support immediately if you suspect unauthorized access to your account.

9. Cookies and Tracking Technologies

2hbet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — for analytics and marketing purposes. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — authentication, session management, security, and core user preferences. They cannot be disabled without compromising the site's functionality.
  • Performance and analytics cookies: collect information on how users interact with the platform (pages visited, session duration, errors encountered) in an aggregated and, where possible, anonymized form. Used to improve 2hbet's performance and usability.
  • Functionality cookies: allow the platform to remember your preferences — such as language, display settings, and recently visited games — to personalize your experience.
  • Marketing cookies: used with your consent to track browsing behavior and display relevant communications about 2hbet promotions and updates. You can withdraw consent at any time in the platform's cookie settings.

Most modern browsers let you manage your cookie preferences directly in the settings. Blocking essential cookies may prevent login and core platform features from working correctly. Blocking non-essential cookies does not affect access to games and services.

10. Minors

2hbet is a Sports Betting and online casino platform intended exclusively to users aged 18 and over. Registration and use of the platform by individuals under 18 years of age is strictly prohibited.

2hbet does not intentionally collect personal data from individuals under 18 years of age. The identity verification (KYC) process includes confirming the date of birth via CPF and, when required, through an official photo ID, to ensure that only adults can access the services.

If 2hbet determines that it has collected data from a user under 18 — for example, through fraudulent information provided during registration — that data will be deleted immediately and the account will be closed. Legal guardians who identify unauthorized use of the platform by a minor in their care should contact 24h support to report the situation and request account closure and data deletion.

11. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 2hbet, the following rights, which may be exercised at any time through 24h support:

Access

Request a copy of all personal data 2hbet holds about you, including data categories, purposes of processing, and who it has been shared with.

Correction

Request the correction of any data that is inaccurate, incomplete, or out of date — for example, a change of address, a name correction, or an updated phone number.

Deletion

Request the deletion of personal data processed on the basis of consent. Data retained under a legal obligation cannot be deleted before the minimum period required by law.

Portability

Request your data in a structured, machine-readable format (CSV or JSON) for transfer to another data controller.

Withdrawal of Consent

Withdraw consent for processing activities based on this legal basis — such as receiving marketing communications — at any time, without affecting any prior processing.

Data Sharing Information

Request information about which public or private entities 2hbet has shared your personal data with.

To exercise any of these rights, contact 2hbet's 24h support via live chat or email suporte@2hbet.best with the subject line "LGPD Request — [right name]". 2hbet will respond within 15 business days from the date the request is received, as provided by the LGPD. In complex cases, this deadline may be extended by an equal period with justification.

If you believe your rights have not been adequately addressed by 2hbet, you may file a complaint directly with the National Data Protection Authority (ANPD), as provided under Law No. 13,709/2018.

12. International Data Transfers

In certain situations, personal data belonging to 2hbet users may be transferred to servers or service providers located outside Brazil — for example, cloud infrastructure providers or game suppliers with servers abroad.

When this occurs, 2hbet ensures that the transfer takes place only to countries or organizations that offer a level of data protection adequate or equivalent to that established by the Brazilian LGPD, or through specific contractual mechanisms that safeguard your data, such as standard contractual clauses approved by the ANPD.

No international data transfers are made for purposes unrelated to the provision of 2hbet's services or compliance with legal obligations.

13. Changes to This Privacy Policy

2hbet may update this Privacy Policy periodically to reflect changes in data processing practices, legislative updates, or improvements to internal processes. Whenever relevant changes are made, you will be notified in advance by registered email and through a prominent notice on the platform.

The date of the most recent update is always shown at the top of this page and in the information banner below the hero. We recommend reviewing this policy periodically to stay informed about how your data is handled.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must close your account and request data deletion before that date.

14. Contact, DPO & Privacy Channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, please contact 2hbet through the channels below:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform, in Brazilian Portuguese.
  • Privacy email: suporte@2hbet.best — please label the subject as "LGPD Request" to ensure priority handling.

2hbet's Data Protection Officer (DPO) can be reached at the same email address. The DPO is the official point of contact with the National Data Protection Authority (ANPD) and with data subjects on all matters relating to privacy and data protection.

Frequently asked questions about privacy are also answered on our Frequently Asked Questions. For questions about the platform's terms of use, please refer to the Terms and Conditions.

How 2hbet Protects Your Data in Practice

Beyond the words in this policy, see the concrete measures 2hbet has implemented to protect your information

256-bit SSL Encryption on Everything

Every piece of data you transmit to 2hbet — from your login to your card number, from your CPF to your verification document — is encrypted with 256-bit SSL before it leaves your phone or computer. This means that even if someone intercepts the communication, the data is unreadable without the decryption key held exclusively by 2hbet's servers.

Full Compliance with the LGPD

2hbet does not treat the LGPD as a legal checkbox — it is an operational commitment. Every new internal process involving personal data goes through a Data Protection Impact Assessment (DPIA). Contracts with vendors and partners include specific data protection clauses. And the DPO actively oversees compliance with all legal obligations.

Your Data Is Never Sold

2hbet does not and never will operate a business model based on selling user data to third parties. The only situations in which your data is shared are listed in this policy — and all of them are strictly necessary to provide the services or fulfill legal obligations.

Control in Your Hands

You can access, correct, port, or request the deletion of your data at any time through our 24/7 support in Portuguese. No lawyer needed, no months of waiting. Every LGPD request receives a response within 15 business days, with clear communication about what was done and what cannot be deleted due to legal obligations.

Minimal Employee Access

Not all 2hbet employees have access to all user data. Access is governed by the principle of least privilege — each team member sees only what they need to perform their specific role. All access to sensitive data is logged and audited on a regular basis.

Incident Notification

If, despite all security measures in place, an incident occurs that could put your data at risk, 2hbet will notify you and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — with clear information about what happened, which data was affected, and what steps are being taken.

Data Processing Summary at 2hbet

A consolidated overview of the main data categories, purposes, and retention periods

Data Category Primary Purpose Legal Basis (LGPD) Retention Period
Full name, CPF, date of birth Registration and identification Contract performance For as long as the account exists + 5 years
Email and phone number Communication & security Contract performance For as long as the account exists
KYC documents (national ID, driver's license) Identity Verification Legal obligation 5 years after account closure
Financial data (Pix, wire transfer) Payment processing Contract performance 5 years (tax obligation)
Betting and game history Audit and disputes Legitimate interest 3 years
IP address and device Security & fraud prevention Legitimate interest 6 months
Marketing cookies Promotional communications Consent Until consent is withdrawn
Support history Quality of service Legitimate interest 2 years

Key Points of This Policy

Everything 2hbet users need to know about privacy before creating an account.

LGPD is law — and 2hbet complies

Data processing strictly follows the General Data Protection Law. You have legally guaranteed rights that 2hbet is required to respect, regardless of any contractual clause.

No data is sold

2hbet does not sell user information. Data is shared with third parties only when necessary to provide the services or when required by law.

Response within 15 business days

All LGPD rights requests — access, correction, deletion, portability — are responded to within 15 business days. Submit your request by email with the subject line "LGPD Request".

You can request deletion of your data

After closing your account, you may request deletion of any data that does not need to be retained under a legal obligation. Tax and anti-money-laundering records are kept for the minimum period required by Brazilian law.

Marketing only with your consent

You only receive promotional communications from 2hbet if you have given your consent. You can withdraw it at any time through your account preferences or by contacting support, with no penalties.

Frequently Asked Questions about Privacy

The most common questions from Brazilian users about how 2hbet handles their data.

2hbet complies with legal requests from judicial authorities, law enforcement, and Brazilian regulatory bodies when required by law. This includes reporting suspicious money laundering transactions to COAF (Financial Activities Control Council) as required by Law No. 9.613/1998. These obligations apply to all financial service providers operating in Brazil and are not a discretionary choice by 2hbet — they are legal requirements. Outside these legally mandated situations, 2hbet does not share data with authorities proactively or voluntarily.

The selfie-with-document requirement for withdrawals above R$ 10,000.00 is a security measure designed to protect the user. It confirms that the person requesting the withdrawal is the actual account holder and matches the registered document, preventing anyone who may have gained access to your credentials from withdrawing large amounts. This is a standard procedure in the financial industry and is aligned with international best practices for fraud prevention. The image collected is used solely for this verification and stored in accordance with the retention periods defined in this policy.

After account closure, 2hbet retains certain data for the minimum period required by law — primarily financial records (5 years, tax obligation) and KYC documents (5 years, anti-money-laundering obligation). Data that does not need to be retained by law is deleted or anonymized. If you explicitly request deletion of your data at the time of account closure, 2hbet will process the request and inform you which data has been deleted and which must be retained, along with the applicable retention period for each category.

Yes. 2hbet logs user gaming activity for several legitimate purposes: auditing results in the event of a dispute, detecting suspicious behavioral patterns (fraud, bot usage, poker collusion), meeting anti-money laundering obligations, and — in the context of responsible gambling — identifying signs of problem gambling behavior in order to offer proactive support. This data is handled with confidentiality and is never shared with third parties for purposes unrelated to service delivery or legal compliance.

Your right to privacy is taken seriously at 2hbet

This Privacy Policy is compliant with the General Data Protection Law (LGPD — Law No. 13,709/2018). To exercise any right as a data subject — access, correction, deletion, portability, or withdrawal of consent — contact us via 24h live chat or email suporte@2hbet.best. Responses within 15 business days. Also see the Terms and Conditions and the guidelines of Responsible Gambling.

Transparency Is the Foundation of 2hbet

Now that you know how 2hbet handles your data, create your account with confidence. Deposit via Pix from R$ 20.00, automatic welcome bonus, 24h support in Portuguese, and withdrawals in up to 7 minutes.

Create a Free Account at 2hbet
Already have an account — Log In

+18 · Play responsibly · Responsible Gambling · T&C apply

Português