Official Document – LGPD Compliant

Privacy Policy 688a – Protecting Your Data

At 688a, privacy is not just fine print. Here you will find exactly what data we collect, why we collect it, how we protect it, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018).

Last updated: January 2026  ·  Version 3.1
Data Collected and Purpose
Sections 2 and 3 – What we collect and why
Data Sharing
Section 5 – Who Your Data Is Shared With
Security & Storage
Section 6 – How We Protect Your Data
Your Rights as a Data Subject
Section 7 – Access, Correction and Deletion
Cookies & Tracking
Section 8 – Platform Cookie Policy
SSL 256Encryption on all transactions
LGPDLaw No. 13.709/2018
15 daysRequest response timeframe
ZeroSale of data to third parties

Privacy in Practice: What 688a Guarantees

Six concrete commitments 688a makes to every registered user on the platform

256-Bit SSL Encryption

All communications between your browser or app and 688a's servers are encrypted with 256-bit SSL. This includes login, Pix deposits, withdrawals, registration, and any exchange of personal data.

Your Data Is Never Sold

688a does not sell, rent, or share its user list or any personal data with third parties for commercial purposes. Full stop. This is explicitly stated in this policy and is a non-negotiable principle of the platform.

Full LGPD Compliance

688a operates in compliance with the General Data Protection Law (Law No. 13.709/2018). We have a designated Data Protection Officer (DPO) and internal processes for periodic review.

You Control Your Data

You can access, correct, port, or request the deletion of your data at any time. Simply send an email to our privacy channel. We will respond within up to 15 business days.

Minimum Necessary Access

Within 688a, your data is accessed only by staff and systems that genuinely need it to perform their functions. Role-based access control is audited on a regular basis.

Incident Notification

In the event of a security incident that may affect your personal data, 688a will notify impacted users and the ANPD (National Data Protection Authority) within the timeframes required by law.

1

Introduction and Controller Identification

This Privacy Policy describes how 688a collects, uses, stores, shares, and protects the personal data of users who access and use the platform available at https://688a.click. It applies to all 688a services: Sports Betting, live casino, poker, e-sports, the VIP Program, and any current or future features.

688a is the controller of the personal data processed under this policy, as defined by the General Data Protection Law (LGPD – Law No. 13,709/2018). 688a's Data Protection Officer (DPO) can be contacted at privacidade@688a.click.

By creating an account at 688a or using any feature of the platform, you confirm that you have read and understood this Privacy Policy. If you have questions before signing up, reach out to our support team via live chat — available 24 hours a day in Portuguese.

2

What Personal Data 688a Collects

688a collects personal data at different points during your interaction with the platform. We only collect what is necessary for each specific purpose – never indiscriminately.

Data You Provide Directly

  • Identification data: full name, CPF, date of birth, gender.
  • Contact details: email address, mobile number, full residential address in Brazil.
  • Identity documents: image of national ID (RG), driver's license (CNH), passport, or RNE, submitted during identity verification (KYC).
  • Proof of address: document issued within the last 90 days, collected during KYC verification.
  • Financial transaction data: Pix key, credit/debit card details (tokenized), bank slip (boleto) information, and TED transfer receipts.

Automatically Collected Data

  • Platform usage data: betting history, games accessed, live casino sessions, poker tables joined.
  • Device data: device type (mobile, desktop, tablet), operating system, browser used, screen resolution.
  • Network data: IP address, internet service provider, approximate geolocation based on IP.
  • Session data: access time, pages visited within the platform, clicks and interactions with buttons and menus.
  • Cookies and similar technologies: detailed in Section 8 of this policy.

About card data: 688a does not store full credit or debit card numbers on its servers. Card data is processed by PCI-DSS certified payment gateways, which return only a secure token to the platform. This means that even 688a's technical team has no access to your full card number.

3

How We Use Your Data

Every piece of data collected by 688a has a specific, justified purpose. The table below summarizes the main processing purposes:

Purpose Data Used
Account creation and management Full name, CPF, email address, date of birth, mobile number
Identity verification (KYC) Photo ID, proof of address, CPF
Processing deposits and withdrawals Financial transaction data, CPF, email
Betting and gaming operations Betting history, session data, account balance
Customer Support Name, email, phone number, support interaction history
VIP program and promotions Betting history, VIP score, email
Security and fraud prevention IP address, device data, behavioral patterns
Compliance with legal obligations CPF, financial data, identity documents
Marketing communications (with consent) Email, mobile (SMS/WhatsApp), betting preferences
Platform improvement Aggregated and anonymized usage data

688a does not use your data for any purpose beyond those listed above without prior notice and, where required by the LGPD, without obtaining new specific consent.

4

Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a specific legal basis. 688a processes your data under the following legal grounds set out in Article 7 of Law No. 13.709/2018:

  • Contract performance (art. 7, V): processing data for account creation, bet placement, deposits, and withdrawals is necessary for the performance of the service agreement between you and 688a.
  • Compliance with a legal obligation (art. 7, II): identity verification (KYC), anti-money laundering (AML) compliance, and reporting to regulatory authorities are legal obligations that 688a must fulfill.
  • Legitimate interest (art. 7º, IX): the processing of security data (IP address, device, behavioral patterns) for fraud prevention is based on the legitimate interests of 688a and its users in keeping the platform secure.
  • Consent (art. 7, I): the sending of marketing communications by email, SMS, or WhatsApp is based on express consent given at registration or in account settings. You can withdraw this consent at any time through your account settings or via the privacy channel.

Withdrawing consent for marketing communications does not affect the validity of your service agreement with 688a. You will continue to receive transactional communications necessary for the operation of your account (deposit confirmations, withdrawal notifications, security alerts, etc.).

5

Data Sharing with Third Parties

688a never sells your personal data to third parties. Data sharing occurs only in the situations listed below, always with the purpose of operating the platform, fulfilling legal obligations, or protecting the legitimate interests of users:

Necessary Processing Partners

  • Payment gateways: to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the minimum data necessary to complete the transaction and are contractually required not to use it for any other purpose.
  • Cloud infrastructure providers: 688a's servers are hosted with cloud providers holding recognized security certifications. Data is stored on servers located in Brazil or in jurisdictions with an equivalent level of protection.
  • Security and anti-fraud software providers: automated systems that analyze behavioral patterns to identify suspicious activity, fraud attempts, or money laundering.
  • KYC Providers: companies specialized in identity document verification, when internal automated verification is insufficient.

Legal & Regulatory Obligations

688a may share personal data with Brazilian governmental, judicial, or regulatory authorities when required by law, court order, or a legitimate request from a competent body – such as the Federal Revenue Service, Central Bank, Ministry of Finance, Federal Police, or COAF (Financial Activities Control Council).

All third parties with access to 688a users' personal data sign Data Processing Agreements (DPAs) that prohibit them from using that data for any purpose beyond what has been strictly contracted with 688a, in compliance with the LGPD.

6

Data Security and Retention Period

688a adopts technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or improper disclosure. Key measures include:

  • 256-bit SSL encryption on all communications between the user and the platform.
  • Encryption at rest for sensitive data stored in the database.
  • Role-based access control (RBAC): only employees with a justified need are granted access to specific data categories.
  • Mandatory multi-factor authentication for internal access to systems containing personal data.
  • Continuous monitoring of unauthorized access attempts with automatic alerts to the security team.
  • Periodic external security audits conducted by specialized firms.
  • Regular backups with encryption and storage in a separate secure location.

Data Retention Period

688a retains your personal data only for as long as necessary for each purpose, respecting the minimum legal retention periods required under Brazilian regulation:

Data Category Retention Period Justification
Registration data and KYC 5 years after account closure Legal obligation (AML and betting regulation)
Financial transaction history 5 years Brazilian Civil Code and tax legislation
Betting history 3 years after account closure Dispute resolution and regulatory audit
Access and security logs 6 months (extendable for investigation purposes) Security and fraud prevention
Marketing data (with consent) Until consent is withdrawn Data subject consent
Identity documents (images) 5 years after verification Legal obligation (KYC and AML)

Once the retention period expires, data is securely deleted or irreversibly anonymized in accordance with industry best practices.

7

Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that 688a is committed to honoring in full. Here is what you can request at any time:

Access

Request a copy of all personal data that 688a holds about you, including the category, source, purpose, and retention period.

Correction

Request the correction of incomplete, inaccurate, or outdated data. Details such as your email and phone number can be updated directly in your account dashboard.

Erasure

Request the deletion of data processed on the basis of consent. Data that must be retained due to a legal obligation cannot be deleted before the required period expires.

Portability

Receive your data in a structured, interoperable format to transfer it to another controller, in accordance with ANPD regulations.

Withdrawal of Consent

Withdraw consent given for processing activities based on this legal basis, such as receiving marketing communications.

Data Sharing Information

Find out which public or private entities 688a has shared your personal data with and the reason for each disclosure.

To exercise any of these rights, send an email to privacidade@688a.click with the subject line "Exercise of LGPD Rights" and describe your request. 688a will respond within 15 business days from the date of receipt. In more complex cases, this deadline may be extended by an equal period, with notice provided to the requester.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been adequately addressed by 688a.

8

Cookies and Tracking Technologies

688a uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and communications. Cookies are small files stored in your browser or on your device when you access the platform.

Types of Cookies Used by 688a

Type Purpose Required?
Essential / Technical Maintain logged-in session, betting slip, language preferences, and session security Yes – the platform cannot function without them
Analytics / Performance Understand how users navigate the platform in order to improve the experience (aggregated and anonymized data) No – can be disabled via the cookie banner
Functionality Remember preferences such as favorite markets, odds displayed in decimal or fractional format, and betting layout No – can be disabled via the cookie banner
Marketing / Personalization Personalize promotions and communications based on your betting history and preferences (with consent only) No – requires explicit consent

You can manage your cookie preferences at any time through the cookie banner displayed on your first visit, or in your account settings under "Privacy & Cookies". Disabling non-essential cookies will not prevent you from using the platform, but may limit some personalization features.

688a does not use third-party tracking cookies for behavioral advertising outside the platform. Analytics and performance cookies are processed by proprietary tools or by partners under data processing agreements (DPA) that prohibit the use of this information for any other purpose.

9

Minors

The 688a platform is intended exclusively for individuals 18 years of age or older. 688a does not intentionally collect personal data from individuals under 18 years of age. If you believe a minor has created an account or provided personal data on the platform, please contact us immediately at privacidade@688a.click.

Upon becoming aware that a minor's data has been inadvertently collected, 688a takes the following immediate steps:

  • Immediate blocking of the identified account.
  • Deletion of all collected personal data, except for the minimum records required by law.
  • Refund of any deposited funds to the legal holder of the payment method used.
  • Notification to the minor's legal guardian, where identifiable.

No 688a marketing content is directed at minors. The platform uses age verification mechanisms at registration and during the withdrawal process to ensure only adults can use the services.

10

International Data Transfers

In some cases, the operation of the platform may involve transferring personal data to servers or service providers located outside Brazil – for example, cloud infrastructure providers or security tool vendors with global operations.

688a ensures that any international transfer of personal data takes place only under the following conditions, as required by Article 33 of the LGPD:

  • For countries or international bodies that provide a level of personal data protection equivalent to that required under the LGPD, as assessed by the ANPD.
  • When the recipient provides sufficient guarantees of compliance with LGPD principles and data subject rights, through standard contractual clauses, data processing agreements (DPA), or equivalent global corporate rules.
  • Where necessary for the performance of a contract with the data subject or for pre-contractual steps taken at the data subject's request.

Wherever technically feasible and economically reasonable, 688a prioritizes the use of providers with infrastructure based in Brazil to minimize the need for international transfers of Brazilian users' data.

11

Changes to this Privacy Policy

688a may update this Privacy Policy periodically to reflect changes in Brazilian legislation (particularly ANPD regulations), our data processing practices, platform features, or our business model.

Any material changes to this policy are communicated to users via their registered email address at least 7 calendar days before the effective date. For changes that significantly impact data subjects' rights — such as changes to the purpose of processing or the introduction of new categories of collected data — 688a may request renewed consent prior to the changes taking effect.

The latest version of this policy is always published on this page with the date and version number shown at the top of the document. We recommend reviewing this page periodically to stay informed about how 688a protects your data.

Continued use of the platform after the effective date of any changes to this policy constitutes acceptance of the new terms. If you disagree with the changes, you may close your account before the effective date and request a refund of your available balance. For questions about specific changes, please contact our DPO at privacidade@688a.click.

12

Contact, DPO & Privacy Channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you can contact 688a through the channels below:

  • Privacy Channel (DPO): privacidade@688a.click – for requests related to personal data, exercise of LGPD rights, and privacy complaints. Response time: up to 15 business days.
  • General Support: contato@688a.click – for general questions about the platform, betting, payments, and your account.
  • Live Chat: available 24 hours a day, 7 days a week, directly on the platform in Portuguese. Average response time: under 2 minutes.

688a's Data Protection Officer (DPO) is the official point of contact with the National Data Protection Authority (ANPD) and with data subjects for all LGPD-related matters.

If your request is not adequately addressed by 688a, you have the right to file a complaint directly with the ANPD (National Data Protection Authority), as provided under art. 18, §1º of the LGPD.

LGPD Compliant
256-bit SSL
Official License
Data Never Sold
24/7 PT-BR Support
Incident Notification
+18 Only
Questions about this Privacy Policy?

Contact our Data Protection Officer by email at privacidade@688a.click. We respond within 15 business days. For general questions about the platform, use the live chat available 24/7 or send an email to contato@688a.click. Also read the Terms & Conditions to understand the full terms of use for the 688a platform.

Frequently Asked Questions – Privacy at 688a

Common questions about how 688a handles and protects your personal data

No. 688a does not sell, rent, or transfer users' personal data to advertising companies, data brokers, or any third party for their own commercial purposes. Data sharing occurs only with operational partners strictly necessary to run the platform — such as Pix payment gateways and card processors — and always under data processing agreements that prohibit the use of that information for any other purpose.

Send an email to privacidade@688a.click with the subject line "Data Deletion Request", including the email address associated with your account. 688a will respond within up to 15 business days. Please note: data that must be retained due to a legal obligation — such as financial transaction history and identity documents (KYC) — cannot be deleted before the minimum period required by law, but will be erased as soon as that period expires.

Not in full. 688a processes card payments through PCI-DSS certified gateways, which do not store the full card number on the platform's servers. What is stored is a secure token generated by the gateway — a code that represents the card for future transactions without exposing the actual data. Even 688a's technical team does not have access to your full card number.

Yes. You can withdraw consent for marketing communications at any time in two ways: via the unsubscribe link included in every promotional email sent by 688a, or by visiting your account settings under "Communication Preferences". After withdrawing consent, you will only continue to receive transactional communications necessary for account operation — such as deposit confirmations, withdrawal notifications, and security alerts.

In the event of a security incident that may put your personal data at risk, 688a will follow the protocol established by the LGPD: notifying the ANPD (National Data Protection Authority) and affected users within the legally required timeframes. The communication to users will include the nature of the data affected, the measures taken to contain the incident, and recommendations to protect data subjects. 688a maintains a 24-hour incident response team ready to act promptly in the event of any occurrence.

Privacy Guaranteed. Now Enjoy the Platform

688a was built on genuine transparency — from protecting your data to the rules of the game. Create your account now, deposit via Pix, and bet on the Brasileirão, Libertadores, e-sports, and much more with complete peace of mind.

LGPD Compliant Data never sold 256-bit SSL on all transactions

Play responsibly. 688a is exclusively for users aged 18 and over. Bet within your means. Visit Responsible Gambling for self-exclusion and account control tools.

Português