Learn how R9Bet collects, uses, stores, and protects your personal data. This policy is written in plain language so you know exactly what happens with your information — no fine print.
R9Bet's key commitments to the privacy of Brazilian users
This Privacy Policy describes how the R9Bet, an online casino and Sports Betting platform available at r9bet.best, collects, uses, stores, and protects the personal data of Brazilian users. R9Bet acts as the controller of your personal data under the terms of the General Data Protection Law (LGPD, Law No. 13,709/2018).
For the purposes of this policy, "personal data" refers to any information relating to you that allows your direct or indirect identification — such as your name, CPF, email address, phone number, and banking details. "Processing" covers any operation performed with that data: collection, use, storage, sharing, or deletion.
When creating an account on the R9Bet or continuing to use the platform after changes to this policy, you acknowledge that you have read and understood the terms described herein. This policy supplements the Terms and Conditions of R9Bet.
The R9Bet collects only the data necessary to operate the platform, process payments, and meet legal obligations. The categories of data collected are:
Your data is used by the R9Bet primarily to create and maintain your account, verify your identity, process deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago and TED, process withdrawals, and manage your balance. Without this data, it is not possible to operate the platform.
The R9Bet uses usage data — IP address, device, access patterns, and transaction history — to detect suspicious activity, prevent fraud, identify money laundering, and protect the security of the platform and its users. This monitoring is continuous and automated, with human review for cases that show warning signs.
The R9Bet uses your email and phone number to communicate essential account information: registration confirmation, withdrawal notifications, security alerts, and important updates to the Terms and Conditions or this policy. These communications are mandatory and cannot be disabled, as they relate directly to your account security.
For promotional communications — new bonuses, football promotions, VIP tournaments —, the R9Bet asks for your separate consent at the time of registration. You may withdraw that consent at any time in your account's communication preferences or by emailing contato@r9bet.best.
Aggregated and anonymized data on usage patterns is used internally by the R9Bet to improve the platform experience — identifying games with technical issues, optimizing the deposit and withdrawal flow, enhancing the interface for mobile use, and understanding which sports (Brasileirão, e-sports, UFC) generate the most interest among Brazilian users.
The R9Bet monitors gambling patterns to identify behaviors associated with problem gambling — excessive frequency, increasing deposit volumes, or sudden changes in betting behavior. This monitoring is carried out to protect the user and may result in proactive outreach from the support team.
The R9Bet processes your personal data based on the following legal grounds set out in the LGPD (Law No. 13,709/2018):
Consent withdrawal: To withdraw consent for promotional communications, go to the "Communication preferences" section in your account or email contato@r9bet.best. Withdrawing consent does not affect data processing carried out under other legal grounds (such as contract performance).
The R9Bet does not sell or transfer your personal data to third parties for commercial purposes. Data sharing is limited to the following situations:
The R9Bet uses third-party providers to operate essential platform services — payment processing (Pix, boleto, card), server hosting, identity verification (KYC), and security infrastructure. These providers receive only the data strictly necessary to perform the contracted service and are contractually bound to handle it with the same level of confidentiality required of R9Bet.
The game providers available on the R9Bet — such as Pragmatic Play, PG Soft, Evolution, and Spribe — receive only an anonymized account identifier for game integrity and technical dispute resolution purposes. They do not receive the user's name, CPF, email, phone number, or banking details.
The R9Bet may be required to share data with competent Brazilian authorities — Receita Federal, Banco Central, Ministério Público, Polícia Federal, or others — when mandated by a court order or legal obligation. In such situations, R9Bet strictly complies with what the law requires, without going beyond what is requested.
Cookies are small text files stored in your browser or on your device when you access the R9Bet. They are used to keep your session active (so you do not have to log in on every page), remember language and interface preferences, and analyze how the platform is used for improvement purposes.
You can manage or block cookies in your browser or device settings. Disabling essential cookies may prevent the platform from working properly. Performance and preference cookies can be turned off without affecting the core functionality of the R9Bet.
The R9Bet uses multiple layers of security to protect user data against unauthorized access, loss, alteration, or destruction:
Internal access to users' personal data is restricted to employees and staff of the R9Bet with a legitimate need for access to perform their roles — customer support, compliance, security, and financial operations. All are bound by confidentiality obligations.
In the event of a security incident that could result in significant risk or harm to data subjects, the R9Bet will fulfill the breach notification obligations set out in art. 48 of the LGPD, notifying the National Data Protection Authority (ANPD) and affected users within the legally required timeframe.
The LGPD gives you a set of rights over your personal data. The R9Bet makes exercising these rights straightforward — no unnecessary red tape. To exercise any of them, contact us by email at contato@r9bet.best providing your full name and CPF.
Response time: R9Bet has up to 15 business days to respond to requests for the exercise of rights related to personal data, as required by the LGPD. In more complex cases, this period may be extended by an equal amount of time, with justification provided.
The R9Bet retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, or for the period required by law, whichever is longer. The main retention periods are:
Once retention periods have expired, data is securely deleted or irreversibly anonymized — meaning it can no longer be linked back to you.
The platform of the R9Bet is intended exclusively for users aged 18 and over. R9Bet does not intentionally collect personal data from individuals under 18 and does not permit minors to create accounts or use any service on the platform.
During the registration process, the user declares they are 18 years of age or older. Whenever there is reason to suspect that a user may be underage, the R9Bet may request documents to verify the date of birth and, upon confirmation, will immediately close the account and delete all collected data, returning any real balance on file.
If you believe a minor has created an account on the R9Bet, please contact us at contato@r9bet.best so we can investigate and take the necessary steps with the highest priority.
The R9Bet may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or how the platform operates. The date of the most recent update will always be shown at the top of this page.
When changes are significant — such as updates to the purposes for which data is used or how we share information —, the R9Bet will notify users by email at least 7 days before the new version takes effect, giving you time to review the changes before they apply.
Continued use of the platform after the effective date of any changes indicates awareness and acceptance of the updated version of this policy. If you do not agree with the changes, you may close your account before the effective date — any available real balance will be returned via Pix.
To exercise any right provided under the LGPD, ask questions about this policy, or file a complaint regarding the processing of your personal data by the R9Bet, get in touch through the channels below:
The R9Bet has appointed a Data Protection Officer (DPO) responsible for ensuring LGPD compliance and handling data subject requests. The DPO can be reached at the same email address above, with the subject line "LGPD — Data Protection Officer".
If you are not satisfied with the response from the R9Bet, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under art. 55-J of the LGPD.
When you make a deposit via Pix on the R9Bet, your Pix key — which is usually your own CPF, email, or phone number — is saved as the withdrawal method linked to your account. This is required for transaction security: we ensure funds always go back to the same person who made the deposit. It also means we handle sensitive financial data, and we take that responsibility seriously.
The R9Bet was built with the LGPD in mind from the ground up, not retrofitted after the fact. That makes a real difference: the system architecture was designed to collect only what's necessary, store it securely, and make it easy for users to exercise their rights — rather than having to rework a system that was never designed with that in mind.
Each payment method available on the R9Bet has its own level of data handling. Pix is the simplest in terms of data: the system records the key used and the transaction amount, processing everything through the Banco Central do Brasil's system with all the security infrastructure that entails. No banking data beyond the Pix key is stored by R9Bet.
For credit or debit card transactions, the R9Bet uses a PCI-DSS certified payment gateway — the security standard for the card payment industry. Your full card number never reaches R9Bet's servers: it is tokenized before any transmission takes place. What R9Bet stores is only the token (an encrypted identifier), the last four digits of the card, and the card brand — enough to identify the payment method without storing sensitive data.
For TED deposits made through banks such as Nubank, Itaú, Bradesco, or Banco do Brasil, R9Bet stores the source account details as needed to verify ownership and process withdrawals back to the same account — in compliance with anti-money laundering regulations.
When you request the closure of your account on the R9Bet, the process is not immediate from a data perspective — and that is a legal requirement, not a decision made by R9Bet. Brazilian law — in particular Receita Federal regulations and anti-money laundering rules — requires that financial transaction records be kept for at least 5 years.
In practice, this means that after account closure, the R9Bet maintains a historical record of transactions and identity verifications for the legally required period — but that record remains inactive and is not used for any marketing or communication purpose. Your contact preferences are deactivated immediately. Platform usage data (which games you played, access times, etc.) is anonymized, and session logs are deleted in accordance with the Marco Civil da Internet retention period.
If you wish to exercise the right to delete data that is not subject to a legal retention obligation, you may do so by submitting an express request to the R9Bet via email at contato@r9bet.best. We will identify what can be deleted immediately and what must be retained by law, with a clear explanation for each case.
The protection of your account data at R9Bet is a shared responsibility. On our end, we maintain SSL encryption, secure servers, monitoring for suspicious access attempts, and two-factor authentication. On your end, a few simple habits can significantly reduce the risk of your account being compromised.
Most importantly: use a unique password for R9Bet — a password you do not use on any other site or app. Leaked credentials from other services are the leading cause of unauthorized access on betting platforms. Enable 2FA in your account security settings — it takes two minutes and adds a significant extra layer of protection.
The R9Bet never contacts you asking for your password, verification code, or requesting that you make a transfer to "confirm" your details. If you receive any communication of this kind in the name of R9Bet — via WhatsApp, email, or any other channel — do not respond and report it immediately to support via live chat. This is a phishing scam and has no connection to R9Bet.
The most common questions about personal data at R9Bet
R9Bet is an entertainment platform exclusively for users aged 18 and over. Only bet what you have set aside for leisure, within your budget. Deposit limit and self-exclusion tools are available at any time in your account.
Visit our Responsible Gambling or call CVV: 188. Platform exclusively for users aged 18 and over.