This Privacy Policy has been in effect since July 1, 2026 and applies to all registered users and visitors of the platform 90winapp. By using the platform, you confirm that you have read and agreed to the practices described here. This policy supplements the Terms and Conditions of 90winapp.
1 Personal Data We Collect
A 90winapp collects personal data at different points during your interaction with the platform. Collection is limited to the minimum necessary for each purpose and follows the principles of necessity and adequacy set out in the LGPD. The main types of data collected are listed below:
| Data Type |
Examples |
When Collected |
| Identification Data |
Full name, CPF, date of birth, RG or CNH |
Registration and identity verification |
| Contact Data |
Email address, mobile phone number |
Registration and communications |
| Financial Data |
Pix key, originating bank, deposit and withdrawal history |
Payment processing |
| Platform Usage Data |
Bets placed, games accessed, session duration, bonus history |
While using the platform |
| Technical Data |
IP address, browser type and version, operating system, device identifier |
Automatically, upon accessing the platform |
| Location Data |
Country and state of access (inferred by IP) |
Automatically, for geographic verification |
| Verification Documents |
Photo ID document, verification selfie, proof of address |
Only when requested for withdrawals or account verification |
Data minimization: 90winapp only requests information that is strictly necessary for each step. For example, identity document details (national ID, driver's license) are only requested when verifying a user's identity for withdrawal processing or in suspected fraud cases — not during standard registration.
Data provided voluntarily — such as notification preferences, favorite sports, or survey responses — is treated in the same way as all other personal data, with the same protections set out in this policy and under the LGPD.
2 Purpose of Data Use
A 90winapp uses the personal data collected solely for the purposes described below. Each purpose has a corresponding legal basis under the LGPD, ensuring that the processing of your data is always lawful and transparent.
- Account creation and management: Identification and contact data are used to create your account, verify your identity, and keep your registration up to date. Legal basis: performance of a contract.
- Processing deposits and withdrawals: Financial data such as Pix key, bank details, and CPF are required to process payments via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED transfers. Legal basis: performance of a contract.
- Fraud and money laundering prevention: Identification data, financial history, and technical data are analyzed to detect and prevent suspicious activity. Legal basis: legal obligation and legitimate interest.
- Account communications: Email and phone number are used to send transaction confirmations, security alerts, and notifications about changes to the Terms. Legal basis: contract performance.
- Marketing communications: With your consent, your email and mobile number may be used to send information about promotions, bonuses, and 90winapp news. You may withdraw this consent at any time. Legal basis: consent.
- Compliance with legal obligations: Data may be retained or shared with competent authorities when required by law, court order, or regulation applicable to the betting sector in Brazil. Legal basis: legal obligation.
- Ongoing platform improvement: Usage data (pages visited, features accessed, session duration) is analyzed in aggregate to identify opportunities to improve the user experience. Legal basis: legitimate interest.
- Responsible gambling: Betting and deposit history may be analyzed to identify patterns that suggest problem gambling, with the goal of protecting the user. Legal basis: legal obligation and legitimate interest.
Important: 90winapp does not use your personal data for any purpose beyond those listed above. If new purposes become necessary in the future, you will be notified in advance and, where required, we will request fresh consent.
3 Sharing Data with Third Parties
A 90winapp does not sell, rent, or trade users' personal data. Data is shared with third parties only in the strictly necessary situations listed below, always with contractual guarantees of adequate data protection:
- Payment processors: To process Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED transfers, financial data is shared with the respective payment processors, which operate under their own security and LGPD compliance policies. Only the minimum data required for the transaction is transmitted.
- Identity verification providers: To verify the authenticity of submitted documents (national ID, driver's license, proof of address), we use specialized identity validation services that operate in compliance with the LGPD. Documents are not retained by these providers after verification is complete.
- Game and casino providers: Providers such as Pragmatic Play, PG Soft, NetEnt, Play'n GO, and Hacksaw Gaming receive an anonymous session identifier to operate the games — they do not receive users' names, CPF, or banking details.
- Legal and regulatory authorities: Data may be shared with judicial, law enforcement, or regulatory authorities when required by law, court order, or formal request from a competent body. 90winapp will notify the user of such requests whenever permitted by law.
- Technology infrastructure services: The servers and cloud storage systems used by the platform are contracted with providers that meet the highest security standards and enter into data processing agreements compatible with the LGPD.
International data transfers: Should it be necessary to transfer personal data outside Brazil, 90winapp ensures that the recipient country or organization provides a level of data protection equivalent to that required by the LGPD, as assessed by the National Data Protection Authority (ANPD).
4 Data Storage and Retention Periods
The personal data collected by 90winapp are stored on servers with encryption at rest and in transit, with access controls restricted to authorized technical personnel. Storage systems follow industry security standards, including regular backups with protection against data loss or corruption.
Retention periods vary according to the nature and purpose of each type of data:
- Active account data: Retained for as long as the account remains active on the platform.
- Financial transaction data (deposits and withdrawals): Retained for a minimum of 5 (five) years after the transaction, as required by Brazilian tax legislation and anti-money laundering regulations.
- Betting data and gaming history: Retained for a minimum of 5 (five) years after account closure, for audit purposes and compliance with regulatory obligations.
- Identity verification documents: Retained for the minimum period required by applicable law, after which they are securely deleted.
- Marketing communication data: Retained until consent is withdrawn by the user, after which they are removed from mailing lists within 10 (ten) business days.
- Technical data and access logs: Retained for 6 (six) months, as required by the Brazilian Internet Civil Framework (Law No. 12.965/2014).
After a voluntary account closure, personal data that does not need to be retained for legal compliance is deleted or anonymized within 90 (ninety) days. Anonymization ensures the data can no longer be linked to a specific user — allowing aggregated information to be kept for statistical purposes without compromising individual privacy.
5 Cookies and Tracking Technologies
A 90winapp uses cookies and similar technologies to enhance your experience on the platform, maintain session security, and understand how users interact with the various available features. Each type of cookie used is explained below:
Essential Cookies Required
Required for basic platform functionality: keeping you logged in during your session, processing transactions securely, and protecting against CSRF attacks. Without these cookies, the platform cannot function properly. They cannot be disabled.
Preference Cookies Optional
These remember your platform preferences: selected language, favorite sports, interface settings, and notification preferences. Without these cookies, you will need to reconfigure your preferences on every visit.
Analytics Cookies Optional
Collect anonymous data on how users navigate the platform — most visited pages, average session time, most used features. This data is used in aggregate to improve 90winapp and does not identify users individually.
Marketing Cookies Optional
Used to display relevant content and promotions within the 90winapp platform itself, based on your usage history. 90winapp does not use these cookies to track you across third-party sites. Activated only with your explicit consent.
You can manage or disable optional cookies in your browser settings (Chrome, Firefox, Safari, Edge) or in the privacy settings of your 90winapp account. Disabling essential cookies may affect platform functionality.
Local Storage and Session Storage: In addition to cookies, 90winapp may use browser local storage technologies (localStorage and sessionStorage) to save temporary interface preferences. This data remains on your device only and is not transmitted to our servers.
6 Your Rights as a Data Subject (LGPD)
The General Data Protection Law (LGPD) guarantees you, as the data subject whose personal data is processed by the 90winapp, a set of rights you can exercise at any time. Below is a full overview of your rights and how to act on them in practice:
Right of Access
You can request a complete copy of all personal data we hold about you, including how it is used and who it is shared with.
Right to Rectification
If any personal data is incorrect, incomplete, or out of date, you may request a correction. Details such as email address and phone number can be updated directly in your account settings.
Right to Erasure
You can request the deletion of your personal data. Deletion will be carried out for data that does not need to be retained under a legal obligation (such as financial transaction data).
Right to Data Portability
You can request your data in a structured, machine-readable format (such as CSV or JSON) for transfer to another platform or service of your choice.
Right to Object
You may object to the processing of your data when it is based on legitimate interest, especially for direct marketing purposes. Opt-out requests for marketing are processed within 10 business days.
Right to Information
You have the right to be informed about which entities your data has been shared with, the legal basis for each processing activity, and the applicable retention periods.
To exercise any of the rights listed above, send an email to contato@90winapp.best with the subject line "LGPD — [name of the right you wish to exercise]", for example: "LGPD — Data Access Request". We will respond within 15 business days from the date the request is received, as required by the LGPD.
Identity verification for LGPD requests: To protect your data, all requests to exercise rights are subject to identity verification — confirmation of the registered email address and, for more sensitive requests (such as deletion or portability), submission of an identification document. This ensures that no third party can request your data or its deletion on your behalf.
If you believe your rights have not been adequately addressed by 90winapp, you have the right to file a complaint with the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.
7 Minors
A 90winapp is a betting and casino games platform intended exclusively for individuals who are 18 (eighteen) years of age or older. Registration and use of any platform feature by minors is strictly prohibited.
The platform employs the following mechanisms to prevent access by minors:
- Date of birth verification during registration.
- CPF request, which may be used to confirm legal age against official databases.
- Photo ID may be requested at any time, particularly for withdrawals above R$ 500.00.
- Monitoring of usage patterns that may indicate access by minors.
Notice for responsible parties: If you are the guardian of a minor and suspect they may have accessed the platform, contact us immediately at contato@90winapp.best. The account will be closed and any deposited funds will be refunded after verification. 90winapp does not knowingly collect personal data from individuals under 18.
90winapp does not intentionally collect, store, or process personal data from minors. If we identify that a minor's data was inadvertently collected, we will immediately delete that data and close the associated account.
8 Data Security
Protecting users' personal data is a priority for 90winapp. We have implemented a comprehensive set of technical and organizational measures to ensure the confidentiality, integrity, and availability of information stored on the platform:
- Encryption in transit: All communication between your device and 90winapp's servers is protected by 256-bit SSL/TLS — the same standard used by Brazilian digital banks such as Nubank and Itaú.
- Encryption at rest: Sensitive data stored on our servers — including passwords (hashed with bcrypt), banking details, and identity documents — is encrypted at rest.
- Two-factor authentication (2FA): Available to all users in account settings. With 2FA enabled, any login from a new device requires confirmation via the registered mobile number.
- Role-based access control: Only technical personnel with a justified operational need have access to users' personal data. Access is logged for audit purposes and reviewed on a regular basis.
- Anti-fraud system: Real-time monitoring of access patterns and transactions to detect unauthorized access attempts, use of compromised credentials, or suspicious financial activity.
- Regular security testing: The platform's infrastructure undergoes periodic penetration testing and security audits conducted by specialized external teams.
- Incident response plan: In the event of a data breach, 90winapp will notify affected users and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.
Your responsibility matters too: Beyond 90winapp's own security measures, you also play an important role in protecting your account. Use a strong, unique password, enable 2FA, never share your credentials with anyone, and be wary of emails or messages asking for your password — 90winapp will never ask for your password through any channel.
9 Changes to this Privacy Policy
A 90winapp may periodically review and update this Privacy Policy to reflect changes in Brazilian data protection legislation, platform feature updates, new types of data collected, or adjustments to data processing practices.
When significant changes are made to this policy, 90winapp will follow these communication procedures:
- A notification email will be sent to the address registered on your account, summarizing the main changes, with a minimum advance notice of 15 (fifteen) days before the new version takes effect.
- A highlighted notice displayed on the platform, visible at login and in the account area, until the user confirms they have read the changes.
- Update of the "Last updated" date at the top of this page.
For changes that involve a new processing purpose or require fresh consent (such as adding new types of marketing use), we will request your explicit agreement before the new practices take effect.
Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the updated practices. If you do not agree with the changes, you may request account closure before the new version's effective date.
Previous versions of this Privacy Policy may be requested by emailing contato@90winapp.best with the subject line "Request for Previous Version of the Privacy Policy".
10 Contact, Data Protection Officer (DPO) and Support Channels
A 90winapp has appointed a Data Protection Officer (DPO) as required by the LGPD for operators that process data at scale. The DPO is the official point of contact for matters related to personal data processing and the exercise of your rights as a data subject.
To contact 90winapp's DPO or privacy team, use the channels below:
- DPO / Privacy Email: contato@90winapp.best — use the subject line "LGPD" so your message is routed directly to the privacy team. Response time: up to 15 business days.
- General Support: Live chat is available directly on the platform, 24 hours a day, 7 days a week, in Brazilian Portuguese. For privacy-related matters, ask to be transferred to the specialized team.
- Frequently asked questions: Visit the Frequently Asked Questions for quick support on account, data, and privacy matters.
By using the
90winapp, you confirm that you have read, understood, and agreed to this Privacy Policy. This policy supplements the
Terms and Conditions and the guidelines of
Responsible Gambling of the platform. If you have any questions about how your data is handled, please don't hesitate to reach out — we're here to help.