Legal Document – LGPD

Privacy Policy – umbet2: Your Data Protected

Umbet2 takes your data privacy seriously. This document clearly and directly explains how we collect, use, store, and protect your personal information, in full compliance with the Lei Geral de Proteção de Dados.

Last updated: January 2026  ·  Brazilian Portuguese
LGPD
Law No. 13.709/2018
256-bit
SSL Encryption
0
Sale of data to third parties

How umbet2 takes care of your data

Six principles that guide the processing of personal data on our platform

Encryption on all transactions
All data transmitted between your device and umbet2 are protected by 256-bit SSL encryption — the same standard used by Brazil's largest banks, such as Itaú, Bradesco, and Nubank. This applies to registration, Pix deposits, and every gaming session.
Full compliance with the LGPD
The umbet2 operates in full compliance with General Data Protection Law (Law No. 13.709/2018). This means every piece of data collected has a defined legal basis, you may exercise your rights as a data subject at any time, and we maintain records of all processing operations carried out on the platform.
Your data is not sold
The umbet2 never sells, rents, or transfers your personal data to third parties for commercial purposes. When we share information with partners — such as game providers or payment processors — it is strictly to deliver the service you contracted, under confidentiality agreements and data protection obligations equivalent to our own.
Minimal and necessary data collection
We follow the principle of data minimization: we collect only what is strictly necessary to provide the service, meet legal obligations, and ensure platform security. We do not request data we do not need, and we do not retain it longer than required by law or necessary for the original purpose.
Control in your hands
You have the right to access, correct, export, and request the deletion of your personal data at any time. umbet2 provides clear channels for exercising these rights — no red tape, no need for a lawyer, directly through 24-hour Portuguese-language support.
Marketing communications only with your consent
No promotional email, bonus notification, or marketing message is sent without your explicit consent. You can withdraw this permission at any time in your account settings, and we will stop sending marketing communications immediately.

Umbet2 Privacy Policy

Updated January 2026

The umbet2 values the privacy of all its users and is committed to handling personal data responsibly, transparently, and securely. This Privacy Policy describes what data we collect when you use the umbet2.best, why we use it, who we may share it with, and how we protect it — all in compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). By using our services, you confirm that you have read and understood this document.

1Who is the Data Controller

For the purposes of the LGPD, the controller of your personal data is umbet2, operator of the Sports Betting and online casino platform accessible at umbet2.best. The controller is responsible for making decisions about how and for what purposes your data is collected and processed.

Any questions, requests, or complaints related to the processing of personal data can be sent directly to our privacy channel by email contato@umbet2.best or via the support chat available 24 hours a day on the platform, in Portuguese.

The umbet2 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Policy and the LGPD across all data processing operations on the platform. See contact details in section 13.

2What Data We Collect

The umbet2 collects personal data in the following situations:

Data provided directly by you:

  • Registration: full name, date of birth, CPF, email address, mobile phone number, and full residential address;
  • Identity verification (KYC): photo ID (RG, CNH, or passport), proof of address, and where required, proof of ownership of a Pix key or bank account;
  • Support communications: content of messages exchanged via chat, email, or other support channels of the umbet2;
  • Account preferences: deposit limits, communication preferences, and other settings configured in your account dashboard.

Data collected automatically during use:

  • Access data: IP address, device type, operating system, browser used, access time, and pages visited;
  • Usage data: betting history, games played, amounts wagered, results, and financial transaction history;
  • Payment data: details of deposits and withdrawals made via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED — we do not store full credit card data, only reference tokens generated by the payment processors;
  • Cookies and session data: as detailed in section 6 of this Policy.

The umbet2 does not collect sensitive data such as racial origin, religious belief, genetic or biometric data, union membership, or health-related information, except where strictly required by law and with your explicit consent.

3How We Use Your Data

The personal data collected by umbet2 are used exclusively for the following purposes:

Purpose Data Used
Account creation and management Full name, CPF, email, phone number, date of birth
Identity verification (KYC) Photo ID, proof of address, CPF
Processing deposits and withdrawals Payment data, Pix key, banking details
Provision of betting and casino services Betting history, balance, game preferences
Fraud and money laundering prevention IP, transaction history, access data
Customer Support Account data, communication history
Marketing communications (with consent) Email, phone number, declared preferences
Compliance with legal obligations CPF, financial data, transaction history
Product and experience improvement Anonymized usage data, navigation metrics

The umbet2 does not use your data for any purpose beyond those listed above. Any new use that may be introduced will be communicated to you in advance, and fresh consent will be collected where required.

4Legal Basis for Data Processing

Under the LGPD, all personal data processing must have a legal basis. These are the bases that umbet2 uses:

  • Contract performance: the data processing required to create your account, process bets and withdrawals, and provide the contracted services is based on the performance of the contract between you and the umbet2;
  • Compliance with a legal obligation: some data is processed because the law requires it — such as identity verification for anti-money laundering purposes and the maintenance of financial records;
  • Legitimate interest: security monitoring, fraud prevention, and product improvement are carried out on the basis of legitimate interest of umbet2 in maintaining a secure and fully functional platform;
  • Consent: marketing communications, non-essential cookies, and data sharing for experience personalization are only carried out with your explicit consent, which may be withdrawn at any time.

When processing is based on consent, you will always have the option to withhold it without affecting the provision of the essential services of the umbet2.

5Data Sharing with Third Parties

The umbet2 does not sell your personal data. We share information only when strictly necessary and always with equivalent contractual protection guarantees. The third parties with whom we may share data are:

  • Game providers: Evolution, Pragmatic Play, Spribe, SmartSoft, and other partners that supply the games available on the platform receive only the minimum data necessary for table operation and result integrity;
  • Payment processors: to enable deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, we share with the respective processors only the data required for each transaction;
  • Identity verification providers: for the KYC process, we use specialized partners in document verification and fraud prevention, who operate under strict confidentiality agreements;
  • Competent authorities: when required by law, court order, or a legitimate request from an administrative authority, umbet2 may be required to provide data to the competent Brazilian authorities;
  • Technology infrastructure providers: servers, security systems, and analytics tools that support platform operations, always under data protection agreements equivalent to our own standards.

No personal data is shared with third-party advertising companies for targeting or profiling purposes outside the umbet2.

6Cookies and Tracking Technologies

The umbet2 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — where you have given consent — personalize content and offer additional features. The types of cookies we use are:

  • Essential cookies: required for the platform's basic operation — keeping your session active, ensuring login security, and remembering your language preferences. These cookies cannot be disabled without affecting your use of the platform;
  • Performance cookies: collect anonymous information about how users interact with the umbet2 — most visited pages, load times, errors encountered. Used to improve platform performance;
  • Functionality cookies: remember your display preferences, game settings, and other customizations so you don't have to reconfigure them on every visit;
  • Analytics cookies (with consent): when you accept, we use analytics tools that help us understand how users interact with the platform, always in aggregate form and without direct personal identification.

You can manage your cookie preferences directly in the cookie banner shown on your first visit to the platform, or through your account settings. Declining non-essential cookies does not affect access to the core services of the umbet2.

7Data Storage and Security

The umbet2 adopts a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure:

  • 256-bit SSL Encryption: all communication between your device and our servers is encrypted using the TLS standard, preventing data from being intercepted in transit;
  • Secure storage: data at rest is stored with encryption on servers with both physical and logical access restrictions;
  • Access control: only employees with a legitimate need for access may view users' personal data, and that access is continuously logged and monitored;
  • Security monitoring: automated systems monitor the platform around the clock for suspicious activity, unauthorized access attempts, and anomalies;
  • Security testing: we conduct regular vulnerability assessments and penetration tests to identify and address potential weaknesses before they can be exploited;
  • Incident response plan: in the event of a data breach or leak, umbet2 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframes required by the LGPD.

Despite all our security measures, no digital system is 100% invulnerable. We recommend that you also protect your account with a strong, unique password and notify us immediately through support if you suspect any unauthorized access.

8International Data Transfers

Some of our technology partners and game providers operate infrastructure in other countries. When your personal data needs to be transferred outside Brazil, umbet2 ensures that such transfer takes place only under the following conditions:

  • For countries or international organizations that offer a level of data protection equivalent to that provided under the LGPD;
  • Through specific contractual data protection clauses with the recipient, ensuring that your rights as a data subject are preserved;
  • When you have given specific consent to the international transfer, with clear information about the destination and risks involved.

The umbet2 never transfers data to countries or entities that do not offer adequate protection guarantees, in compliance with Article 33 of the LGPD and ANPD regulations.

9How Long We Retain Your Data

The umbet2 retains your personal data only for as long as necessary for the purposes stated in this Policy, in accordance with the minimum retention periods required by Brazilian law:

  • Active account data: retained for as long as your account remains active on the platform;
  • Financial transaction data: retained for at least 5 years after the transaction, as required by tax and anti-money laundering legislation;
  • KYC documents: retained for 5 years after account closure, in compliance with financial crime prevention regulations;
  • Betting history: kept for 3 years after the last recorded bet;
  • Access records and security logs: retained for 6 months, as required by the Marco Civil da Internet (Law No. 12.965/2014);
  • Support communication data: retained for 2 years after the support session is closed.

Once the retention periods above have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. Deletion may be delayed in the event of an ongoing investigation or a request from a competent authority.

10Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights regarding your personal data. umbet2 respects and facilitates the exercise of all of them:

  • Access: you may request a copy of all personal data we hold about you at any time;
  • Correction: if any of your data is outdated or incorrect, you can request a correction directly through your account dashboard or by contacting support;
  • Deletion: you may request the deletion of data collected on the basis of consent, where there is no longer a need for processing or any legal obligation requiring its retention;
  • Portability: you may request your data in a structured format for transfer to another controller;
  • Withdrawal of consent: when processing is based on consent, you may withdraw it at any time — including for marketing communications — without affecting your access to essential services;
  • Objection: you may object to processing based on legitimate interest when you believe your fundamental rights and freedoms take precedence;
  • Sharing information: you have the right to know which third parties your data has been shared with;
  • Filing a complaint with the ANPD: if you believe your rights have been violated, you may file a complaint directly with the National Data Protection Authority (ANPD).

To exercise any of these rights, please contact umbet2 via 24-hour chat or by email contato@umbet2.best. We respond within 15 business days, as required by the LGPD.

11Data of Minors

The platform of umbet2 is intended exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from minors. Account registration requires age confirmation, and we apply age-verification measures to enforce this policy.

If we identify that a user is underage, the account will be immediately closed and all associated personal data will be deleted, subject to the minimum retention periods required by law for audit and fraud prevention purposes.

If you are a parent or guardian and believe a minor has created an account on umbet2, please get in touch immediately by email contato@umbet2.best so we can take the appropriate steps with urgency.

12Changes to this Privacy Policy

The umbet2 may update this Privacy Policy periodically to reflect changes in Brazilian law, our data processing practices, or the services we offer. When that happens:

  • The "Last updated" date at the top of this page will be changed to reflect the most recent revision;
  • For material changes that affect your rights or how we use your data, you will receive an email notification with reasonable advance notice;
  • For material changes, we may ask you to re-accept the Policy the next time you access the platform;
  • The version history of previous revisions to this Policy is available upon request from our support team.

Continued use of the platform after a new version of this Policy is published constitutes acceptance of the changes made. If you disagree with the changes, you may exercise your right to data deletion and close your account as described in this Policy and in the Terms and Conditions.

13Contact, DPO & Privacy Channels

The umbet2 has appointed a Data Protection Officer (DPO) as the official point of contact for privacy and personal data processing matters, as required by the LGPD.

To contact the DPO or exercise any of your rights as a data subject:

  • Live chat: available on the platform 24 hours a day, 7 days a week — please mention that your request concerns data privacy;
  • Privacy email: contato@umbet2.best — use the subject line "LGPD – Data Subject Request" for priority handling;
  • Response time: up to 15 business days from receipt of the request, as provided under the LGPD.

If you are not satisfied with the response you receive, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing compliance with the LGPD in Brazil.

To speed up your request, please include in your message the email address registered on the platform, a clear description of your request, and, where applicable, the type of right you wish to exercise (access, correction, deletion, etc.). Our privacy team responds in Brazilian Portuguese.

Your rights guaranteed by the LGPD at umbet2

The General Data Protection Law gives you real control over your personal information — see how to exercise each right

Right of Access
Request a complete copy of all personal data that umbet2 holds about you — registration, betting history, transactions, and communication records. We respond within 15 business days.
Right to Rectification
Found incorrect or outdated information in your umbet2? Request a correction through your dashboard or via support. Details such as your address and phone number can be updated directly from your account.
Right to Deletion
Request the deletion of your data collected on the basis of consent. Data required by legal obligation (such as financial records) is retained for the minimum legal periods even after account closure.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another controller. Portability requests are processed upon identity verification.
Right to Object
You may object to processing based on legitimate interest when you believe your fundamental rights outweigh the interest of umbet2. Each case is assessed individually.
Withdrawal of Consent
Withdraw at any time the consent you have given for marketing, non-essential cookies, or any other consent-based purpose — without affecting your access to the essential services of umbet2.

To exercise any of these rights, contact us via the 24h chat at umbet2 or by contato@umbet2.best. Response time: up to 15 business days.

Frequently asked questions about privacy at umbet2

The most common questions we receive about how we handle your personal data

No, not at all. The umbet2 never sells, rents, or transfers your personal data to third parties for commercial or advertising purposes. When we share data with partners — such as game providers (Evolution, Pragmatic Play) or payment processors — it is solely to deliver the service you used, under confidentiality agreements that require those partners to protect your information to the same standards we apply internally. This is a non-negotiable commitment of umbet2.

You can opt out of marketing communications from umbet2 in three ways: via the unsubscribe link in the footer of any email we send, directly in the communication settings in your account dashboard, or by contacting our support team via 24h chat. Once requested, we stop sending marketing communications immediately — within 48 hours at most for all systems to be updated. Essential transactional communications (such as withdrawal confirmations and security alerts) will continue to be sent regardless of this preference.

When you close your account at umbet2, we begin the process of deleting data that does not need to be retained by legal obligation. Access data and usage preferences are deleted immediately. However, financial records (transaction history, deposits and withdrawals via Pix, boleto, and other methods) and KYC documents must be retained for at least 5 years after account closure, as required by anti-money laundering legislation and the Brazilian Federal Revenue authority. This data is stored with maximum access restrictions and used only if legally requested.

We do not store complete credit or debit card details on umbet2. When you make a card deposit, the data is processed directly by our certified payment partner (PCI-DSS), which returns only a secure reference token to our platform. This token allows future transactions to be processed without re-entering your card number, but without the umbet2 never sees or stores your full card number. The same applies to Pix details and other bank account information.

The umbet2 has a Security Incident Response Plan that is activated immediately upon identification of any data breach or violation. The steps include: immediate containment of the incident, assessment of scope and impact, notification to the Autoridade Nacional de Proteção de Dados (ANPD) within 72 hours when the risk is significant — as required by the LGPD — and direct communication to potentially affected users with clear guidance on steps to take (such as changing passwords or monitoring account activity). We maintain records of all incidents and the actions taken.

Your rights at a glance – umbet2 and the LGPD

The umbet2 guarantees your rights as a data subject in accordance with the General Data Protection Law (LGPD – Law No. 13.709/2018): access, correction, deletion, portability, withdrawal of consent, and objection to processing. All data is protected with 256-bit SSL encryption and is never sold to third parties. To exercise your rights or ask questions, use the 24h support chat or send an email to contato@umbet2.best.

Play at umbet2 with complete security and privacy

Your data protected with end-to-end encryption, LGPD compliance, and a Portuguese-speaking support team ready to help. Sign up, deposit via Pix from R$ 10.00 and earn a bonus of up to R$ 500,00 on the first deposit.

SSL 256-bit encryption
LGPD Data protected by law
Português