LGPD Compliance

Aa234 Privacy Policy – Your Data Protected

A aa234 handles your personal data with care and transparency. This document explains exactly what we collect, why we collect it, how we protect it, and what your rights are as a data subject — in compliance with the General Data Protection Law (LGPD, Law No. 13.709/2018).

Last updated: January 2026

How aa234 Protects Your Privacy

Six principles that guide how your data is handled on the platform

Minimal and Necessary Data Collection

Aa234 collects only the data that is genuinely necessary to create your account, process payments, and meet legal obligations. We do not ask for unnecessary information or store data beyond the required period.

Encryption at Every Layer

All communication between your phone or computer and aa234's servers is encrypted via TLS. Financial data — Pix keys, card information — is stored with additional encryption and is never held in plain text in our systems.

No Data Selling

Aa234 does not sell, rent, or share your personal data with third parties for commercial purposes. Your data is yours — the only use we make of it is what is described in this Policy, and nothing beyond that.

LGPD Compliance

This Policy was developed in compliance with the General Data Protection Law (Lei nº 13.709/2018). All rights provided under the LGPD are guaranteed by aa234, including the right to access, correct, port, and delete your data.

Controlled Internal Access

Within aa234, only employees who need your data to perform their specific job functions have access to it. Strict access controls and audit logs ensure that data is never accessed without a legitimate reason.

Incident Notification

If any security incident occurs that could affect your data, aa234 will notify impacted users and the National Data Protection Authority (ANPD) within the timeframes set by the LGPD, with clear information about what happened.

This Privacy Policy applies to all users of aa234 — anyone who visits the site, creates an account, makes deposits via Pix, bets on football, or plays slots. By using any aa234 service, you confirm that you have read and understood how your data is processed. The aa234 acts as the controller of personal data collected through the platform.

1

Data We Collect

A aa234 collects personal data at different points during your interaction with the platform. Below, we detail what is collected, how, and why:

Category Data collected Collection point
Identification Full name, CPF, date of birth, gender Aa234 Registration
Contact Email, mobile number (optional) Registration and updates
Address ZIP code, state, city, street address KYC Verification
Documents Official ID document image (RG/CNH), proof of address Identity Verification (KYC)
Financial Pix key, card details (tokenized), transaction history Deposits and withdrawals
Behavioral Betting history, games accessed, play sessions, preferences Using the aa234 platform
Technical IP address, device type, operating system, browser, approximate geolocation Site/app access
Communication Support message content, live chat records Contact with aa234 support

Fields marked as optional in the registration form are not required to create an account — but may be needed to access certain features, such as bank wire withdrawals, which require complete banking details.

Aa234 will never ask for your password via email, chat, or phone. If you receive any communication requesting your password or full credit card details on behalf of aa234, disregard it and report it immediately by emailing suporte@aa234.best.

2

How We Use Your Data

Each piece of data collected by aa234 has a specific and legitimate purpose. We do not use your data for anything beyond what is described below:

  • Creating and managing your account: Your name, CPF, and email are used to uniquely identify you on the platform and to ensure that only one account exists per CPF.
  • Process payments: Financial data is used exclusively to process deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, or TED — and to handle withdrawals to the account registered in your name.
  • Verify your identity (KYC): Documents are used to confirm that you are who you say you are, that you are 18 or older, and that the account belongs to you — protecting against fraud and fulfilling the regulatory obligations of the financial sector.
  • Providing customer support: Your support interaction history with aa234 is used to track and resolve your requests more efficiently.
  • Personalize your experience: Platform behavior data may be used to surface relevant content — such as crash games you have recently played or sports events in categories you follow — without sharing that data with third parties for external advertising purposes.
  • Security and fraud prevention: Technical data such as IP address and device information is used to detect suspicious access, fraud attempts, and the use of multiple accounts by the same user on aa234.
  • Meet legal obligations: aa234 may use or retain data to comply with tax legislation, betting sector regulations, and judicial or administrative orders from competent Brazilian authorities.
  • Operational communications: Your email is used to send registration confirmations, security alerts (such as logins from new devices), and important updates to the Terms and Conditions. For marketing communications, we request your consent separately.

Aa234 does not use your data to build psychological profiles, does not process it for automated decision-making with significant legal effects on you without the possibility of human review, and does not use it for purposes you have not been informed about.

3

Data Sharing

A aa234 does not sell your personal data. We share information only when necessary to operate the platform or fulfill legal obligations, and only with partners who are contractually committed to handling data with the same level of protection aa234 applies.

Circumstances in which your data may be shared:

  • Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, your financial data is shared with the relevant financial institutions and acquirers (such as Nubank, Itaú, Bradesco, and Banco do Brasil) strictly to the extent necessary to complete the transaction.
  • Game providers: When you play Aviator (Spribe), Spaceman (Pragmatic Play), Fortune Tiger (PG Soft), or any other title on aa234, minimal session data is shared with the provider to process the round result. From the provider's perspective, this data is generally anonymous — they receive a session identifier, not your CPF or full name.
  • Identity verification services: For the KYC process, we may use specialized platforms for document verification and CPF validation with the Federal Revenue Service. These services receive the documents you submit and the associated identification data.
  • Competent authorities: aa234 may share data with the Ministry of Finance, Federal Revenue Service, Financial Activities Control Council (COAF), Federal Police, or the Judiciary when required by law, court order, or investigation of unlawful activity.
  • Auditors and consultants: Professionals engaged for security audits, regulatory compliance, or legal advisory may access anonymized data or work within a controlled environment, always under a confidentiality agreement.

All partners who receive user data from aa234 are contractually required to use that data solely for the specific purpose for which it was shared and to apply appropriate security measures. aa234 conducts privacy due diligence before entering into any partnership with a vendor that processes personal data.

4

Data Security

A aa234 applies multiple layers of technical and organizational protection to keep your personal data secure:

  • TLS/HTTPS across the entire platform: All communication between your device and aa234's servers is encrypted via TLS 1.2 or higher, preventing data interception in transit.
  • Encryption of data at rest: Sensitive data stored in aa234's databases — including identity documents and financial information — is encrypted at rest using industry-standard algorithms.
  • Payment data tokenization: Credit and debit card details are never stored directly by aa234. They are replaced by tokens provided by payment processors, ensuring that even unauthorized access to our systems would not expose card data in plain text.
  • Role-based access control: aa234 employees have access only to the data required for their specific role. All access is logged in audit trails that are reviewed on a regular basis.
  • Two-factor authentication: Internal aa234 systems that process user data require multi-factor authentication for employee access.
  • Periodic security testing: aa234 conducts periodic penetration tests and security reviews to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, aa234 will notify impacted users by email with details about what occurred, the data potentially involved, and the steps taken — and will report to the National Data Protection Authority (ANPD) as required by the LGPD.

No security measure is 100% foolproof. You also share responsibility for your account's security: use a strong, unique password for aa234, do not share it with anyone, and enable two-factor authentication when available. If you suspect unauthorized access, contact suporte@aa234.best immediately.

5

Cookies and Tracking Technologies

A aa234 uses cookies and similar technologies to keep the platform running properly and enhance your experience. See the types of cookies we use:

  • Essential cookies: Required for the platform's basic functionality — they keep you logged in across pages, remember your language preferences, and maintain your game session state. They cannot be disabled without impairing normal use of aa234.
  • Functional cookies: These remember preferences you have set, such as favorite games or your last payment method used. They make the experience more convenient but are not strictly necessary.
  • Analytical cookies: Used internally by aa234 to understand how users navigate the platform — which pages are most visited, where navigation issues occur, and which features are used most. This data is processed in aggregate and does not identify users individually. aa234 does not use third-party analytics tools that transmit identifiable data outside our systems.
  • Security cookies: They help detect suspicious behavior, fraud attempts, and unauthorized access. These are part of your account's protection measures and cannot be disabled.

You can manage functional and analytical cookies in your browser settings or through the cookie consent banner displayed on your first visit to aa234. Disabling essential cookies will prevent normal use of the platform.

Aa234 does not use behavioral advertising cookies that track you outside the platform, nor does it share cookie data with external ad networks.

6

Your Rights under the LGPD

As the holder of personal data processed by aa234, you have the following rights guaranteed under the General Data Protection Law (LGPD):

Right of Access

Request a copy of all personal data aa234 holds about you, including how it was collected, what it is used for, and with whom it has been shared.

Right to Rectification

Request the correction of inaccurate, incomplete, or outdated data. For example, updating your address, fixing an error in your name, or updating your Pix key registered with aa234.

Right to Erasure

Request the deletion of your personal data when there is no longer a legitimate need or legal obligation to retain it. Some data must be kept for a legally mandated period even after your aa234 account is closed.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another controller — for example, exporting your betting history from aa234.

Right to Object

Object to the processing of your data for specific purposes — such as marketing communications — even when that processing is otherwise lawful. Simply specify which processing you are objecting to when contacting aa234.

Right to Information

Know which public and private entities aa234 has shared your data with, the legal basis for each processing activity, and the consequences of not providing certain data.

How to Exercise Your Rights
Send an email to suporte@aa234.best

Use the subject line "LGPD Rights – [request type]" and include your full name and the CPF registered with aa234. Our team responds within 15 business days, in accordance with the LGPD deadline.

Live chat on the aa234 platform

For simple requests — such as correcting contact details or unsubscribing from marketing communications — aa234's live chat can handle it on the spot, with no need to wait for an email response.

ANPD Complaint

If aa234 fails to respond adequately to your request within the legal timeframe, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body responsible for the LGPD in Brazil.

7

Data Retention

A aa234 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. The general applicable timeframes are:

  • Active account data: Retained for as long as your aa234 account is active and for up to 5 years after closure, for audit and tax compliance purposes.
  • Identity documents (KYC): Retained for up to 5 years after account closure, in accordance with the requirements of the Financial Activities Control Council (COAF) and sector regulations.
  • Financial transaction history: Deposit and withdrawal records are retained for up to 5 years for accounting and tax purposes, even after your aa234 account is closed.
  • Betting records: Sports betting and casino game history is retained for 3 years after each transaction, for audit and dispute purposes.
  • Access logs: Technical access logs (IP address, device, date/time) are retained for up to 6 months for security purposes and then deleted, unless required for an ongoing incident investigation.
  • Support communications: Chat records and emails exchanged with aa234 support are retained for 2 years for reference in cases of recurring issues or disputes.

Once the applicable retention periods have expired, your data is securely deleted or anonymized, so that you can no longer be identified from the remaining records.

8

Minors

A aa234 is a platform intended exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. The registration process requires a date of birth and the submission of documents during the KYC process, which serve as a barrier to prevent underage access.

If you suspect that a minor is using aa234 — whether through false information or by accessing an adult's account — please contact us immediately at suporte@aa234.best. aa234 will take the necessary steps to close the account and delete any data collected from the minor.

Parents and guardians who wish to block minors from accessing online betting platforms can also use parental control tools on their devices or request blocking through their internet service provider.

9

Changes to This Policy

A aa234 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory developments — including updates to the LGPD and ANPD regulations — or platform improvements.

When relevant changes occur that affect your rights or significantly alter how your data is handled, you will be notified by email at least 7 days before the new practices take effect.

For minor changes — such as wording corrections, added examples, or formatting adjustments that do not alter the substantive content — aa234 will update the revision date at the top of this page without prior email notification.

Continued use of aa234 after the effective date of a new version of this Policy constitutes acceptance of the changes. If you do not agree with the updates, you may request account closure before the effective date — any available real balance will be returned normally.

10

Contact and Data Protection Officer (DPO)

For questions, rights requests, or complaints related to how your data is handled by aa234, please contact our Data Protection Officer (DPO):

  • Email: suporte@aa234.best — use the subject line "Privacy" or "LGPD Rights" so your message is routed directly to the DPO.
  • Live chat: Available directly on the aa234 platform, 24 hours a day, 7 days a week.
  • Response time: Acknowledgment within 24 hours; full response within 15 business days as required by the LGPD.

Aa234's DPO is responsible for ensuring LGPD compliance, handling data subject requests, serving as the communication channel with the ANPD, and providing internal guidance on data protection best practices.

This Privacy Policy should be read together with the Terms and Conditions and the guidelines of Responsible Gambling of aa234. These three documents together form the complete set of rules governing the use of the platform.

Privacy in Online Betting: What You Need to Know

Online betting platforms collect more personal data than most everyday apps — and there are concrete reasons for that. The financial and gaming sector is strictly regulated in Brazil, and part of that regulation requires platforms to know exactly who their users are, where deposits come from, and where withdrawals are going. This is the KYC (Know Your Customer) process, and the aa234 applies it not as extra bureaucracy, but as a genuine protective measure — for you and for the integrity of the platform.

What sets aa234 apart from platforms that treat privacy as a formality is its approach to data that is simply not needed. We do not require your phone number as a mandatory field at registration — you can create an account with just an email address. We do not ask for a selfie at sign-up, only when the KYC process is triggered for withdrawals. We do not collect social media data. We do not link your aa234 account to Google or Facebook login by default, avoiding the automatic sharing of behavioral data with those platforms.

Another important point for aa234 mobile users: the app or mobile site does not access your camera, microphone, or GPS location in real time during normal use of the platform. Camera access is only triggered if you choose to submit an identity document directly from your phone during the KYC process — and even then, solely to capture the document image, without storing any permanent access.

How the LGPD Protects You at aa234

Brazil's General Data Protection Law came into force in 2020 and significantly changed how companies across all sectors — including online betting — are required to handle personal data. Before the LGPD, it was common to find generic privacy policies that essentially said "we collect everything and use it however we like." That is no longer legal in Brazil, and aa234 did not operate that way even before the law took effect.

In practice, the LGPD ensures that you can find out exactly what aa234 knows about you — just ask. This transparency is part of what builds trust between a platform and its users. Knowing that your data is being handled responsibly, that it will not be sold to third parties, and that you can request deletion whenever you decide to move on — that makes choosing aa234 an informed decision, not a leap of faith.

One important practical point: aa234 does not use your betting behavior data to build profiles that could be sold to insurers, banks, or employers. Your betting history — how much you wagered, which games you played, and how often — stays within aa234 and is used solely for the purposes described in this Policy: improving your experience on the platform and, where required, meeting regulatory obligations. No third party accesses this data to make decisions about your credit, insurance, or any other aspect of your life outside the betting context.

Payment Security: Pix, Card & Financial Data

For most users on any financial platform, payment data security is the top concern. At aa234, this is addressed seriously on multiple levels. When you make a deposit via Pix, aa234 receives only the payment confirmation and the minimum data required by the Banco Central for transaction records — we do not gain access to your account at Nubank, Itaú, Bradesco, or Banco do Brasil. Pix works as a one-way transfer: you authorize it in your bank's app, the funds are sent to aa234, and your bank does not provide us with any credentials to access your account.

For credit and debit card payments, aa234 uses tokenization — your actual card details (number, CVV, expiration date) are processed by the payment gateway and converted into a token that aa234 stores in place of the real data. If someone accessed our database, they would find only these tokens, which are useless without the decryption key held in the gateway's systems. This is the same standard used by major Brazilian e-commerce platforms and is fully compliant with PCI-DSS requirements.

For withdrawals, aa234 requires that the destination Pix key or bank account be registered under the same CPF as your account — specifically to protect you. If someone gains unauthorized access to your aa234 account, they cannot withdraw funds to their own account, because the system only allows transfers to the account linked to your CPF. This restriction exists precisely to safeguard each user's balance.

Finally, it is worth noting that this Policy is not a static document created once and forgotten. aa234 periodically reviews the practices described here, updates the document when needed, and continuously trains its internal team on data protection. If you notice any inconsistency between what this Policy describes and what you have experienced on the platform, please reach out — that kind of feedback is valuable and helps improve the way we handle privacy at aa234.

Your Data, Protected
Play with confidence at aa234

Now that you know how aa234 protects your privacy — create your account, deposit via Pix, and enjoy a bonus of up to R$ 500,00. Football, slots, crash games, and much more — with full transparency about how your data is handled.

Minimum deposit R$ 20.00 via Pix. For users aged 18 and over only. See the Terms and Conditions.

Privacy FAQs

The most common questions about how aa234 handles your data

No. aa234 does not sell, rent, or share your personal data with third parties for commercial purposes. Data is shared only with operational partners necessary to provide the service — such as Pix payment processors and game providers — and even then, only the data strictly necessary for each specific purpose is shared.

The identity verification process (KYC) serves two main purposes: protecting your account from fraudulent use by third parties and fulfilling regulatory requirements in the Brazilian financial sector — including COAF anti-money laundering obligations. Without this verification, it would be easy for fraudsters to withdraw funds from compromised accounts. The process is completed once and takes just a few minutes with a valid government-issued ID and proof of address.

Send an email to suporte@aa234.best with the subject line "LGPD Data Erasure", including your full name and registered CPF. aa234 will respond within 15 business days. Please note that some data must be retained by law even after account closure — such as financial transaction history for 5 years for tax purposes. In those cases, we will inform you which data will be kept and for how long.

No. Your betting history, balance, deposits, and withdrawals are completely private on aa234. Other users have no access to this information. In the Aviator live chat, for example, the multipliers at which players cashed out are displayed — but with no indication of who each player was or how much they wagered.

Full card details — card number, CVV, and expiration date — are never stored directly in aa234's systems. We use tokenization: your actual data is processed by the payment gateway, which returns a secure token. aa234 stores only that token, which cannot be used to carry out transactions without the gateway's keys. This is the same security standard used by major Brazilian e-commerce platforms and marketplaces.

After account closure, aa234 retains only the data required by law — primarily financial and identity records for up to 5 years for regulatory purposes. Data with no legal retention obligation is deleted or anonymized. You may request detailed information about which specific data will continue to be retained by contacting us at suporte@aa234.best.
Português