Official Document

H2bey Privacy Policy — Your Data Protected

H2bey takes every user's privacy seriously. This document clearly explains how we collect, use, and protect your personal data in accordance with the LGPD — without unnecessary legal jargon.

Last updated: June 2026

By using any h2bey service, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data as described herein.

Full compliance with the LGPD (Law 13.709/2018)
256-bit SSL encryption on all transactions
Financial data never stored in plain text
You are in control and can request deletion of your data
No data sold to third parties for commercial purposes

How we protect your privacy at h2bey

A summary of the concrete commitments h2bey makes to each user regarding the handling of personal data.

Bank-Grade Encryption

All data transmitted between your device and h2bey's servers is protected by 256-bit SSL encryption — the same standard used by Nubank, Itaú, and Bradesco. No sensitive information travels in plain text.

LGPD Compliance

H2bey operates in compliance with the General Data Protection Law (Law 13.709/2018). You have the right to access, correct, port, and request the deletion of your personal data at any time, with no red tape.

Data Never Sold

H2bey does not sell, rent, or transfer users' personal data to third parties for commercial purposes. The only data sharing that takes place is strictly necessary for service delivery and compliance with legal obligations.

Secure Payment Data

H2bey does not store complete credit or debit card details on its servers. Transactions via Pix, boleto, PicPay, and Mercado Pago are processed by certified payment gateways, and h2bey retains no sensitive financial information.

Control in Your Hands

You decide what you receive: in your account preferences you can manage marketing communications, email, and SMS notifications. Opting out of any promotional communication is immediate and hassle-free.

Dedicated Security Team

H2bey has an in-house compliance and information security team that monitors access, detects anomalous behavior, and responds to incidents. In the event of a data breach, affected users are notified as required by the LGPD.

In effect since June 2026

1Who we are and what this Policy covers

H2bey is a Sports Betting and online casino platform operated for the Brazilian market, with a focus on football (Brasileirão Série A, Copa do Brasil, Libertadores), Live Casino, slots, crash games and real-time betting. This Privacy Policy describes how h2bey collects, uses, stores, shares and protects the personal data of users who access or use any service on the platform.

For the purposes of this Policy, h2bey acts as data controller as defined by the General Data Protection Law (LGPD — Federal Law 13.709/2018). By creating an account, making a deposit via Pix, or simply browsing the h2bey website, you acknowledge that you have read and agreed to the terms set out here.

h2bey's commitment: This Policy was written to be read and understood by anyone, not just lawyers. If you have any questions, reach out to our team via live chat — available 24 hours a day, in Portuguese.

This Policy should be read together with the Terms and Conditions and with the rules of Responsible Gambling of h2bey.

2What personal data we collect

H2bey collects only the data necessary to deliver its services properly, meet legal obligations, and improve the user experience. The types of data that may be collected are outlined below:

Data provided directly by you

  • Registration data: full name, CPF, date of birth, email address, mobile number, full address including ZIP code;
  • Verification documents (KYC): photo ID (RG or CNH), proof of address, selfie with document;
  • Payment data: Pix key (CPF, phone number, email, or random key), bank account details for wire transfers, credit/debit card information processed via secure gateway;
  • Support communications: chat conversation history, emails sent to suporte@h2bey.net.

Automatically collected data

  • Usage data: pages visited, events and markets viewed, bets placed, casino games accessed, session times and duration;
  • Technical data: IP address, browser type and version, operating system, device identifier, configured language;
  • Location data: approximate location derived from IP address, for regulatory compliance purposes;
  • Cookies and similar technologies: as detailed in Section 6 of this Policy.
Data type Examples Primary purpose
Identification Full name, CPF, date of birth Identity verification, fraud prevention
Contact Email, phone number, address Communication, support, and proof of payment submission
Financial Pix key, destination bank Processing of deposits and withdrawals
Behavioral Bets, games, sessions Personalization, responsible gambling, security
Technical IP address, device, browser Security and unauthorized access detection

3How we use your personal data

Data collected by h2bey is used exclusively for the purposes described below. No data is used for any purpose incompatible with what was stated at the time of collection.

  • Account creation and management: identity verification, access authentication, essential account communications;
  • Financial transaction processing: deposits via Pix, boleto, card, PicPay, and Mercado Pago; withdrawals to the account holder's bank account or Pix key;
  • Compliance with legal obligations: anti-money laundering (AML/CFT) compliance, reporting to regulatory authorities as required by Brazilian law;
  • Service delivery and improvement: personalization of your platform experience, along with bet and promotion suggestions based on your usage history;
  • Marketing communications: sending promotions, bonuses, and notifications about relevant sports events — only with your express consent, which can be withdrawn at any time;
  • Responsible gambling: monitoring usage patterns to proactively identify potentially risky behavior and offer tools to help users stay in control;
  • Platform security: fraud detection and prevention, bot usage, creation of multiple accounts, and other conduct prohibited by the Terms and Conditions;
  • User support: interaction history for faster resolution of inquiries and disputes.

H2bey never uses your data to build independent credit profiles, make automated decisions with significant effect on you without the possibility of human review, or for any discriminatory purpose.

4Legal basis for processing (LGPD)

All collection and use of personal data by h2bey has a legal basis defined under the LGPD. The main legal bases we rely on are:

  • Performance of a contract (art. 7, V): processing required to provide the services contracted by the user upon account creation — identity verification, bet processing, and payments;
  • Compliance with a legal obligation (art. 7, II): data required to meet regulatory, tax, and anti-money laundering obligations imposed by Brazilian law;
  • Legitimate interest (art. 7, IX): platform security, fraud prevention, and ongoing service improvement, provided these interests do not override the user's fundamental rights;
  • Consent (art. 7, I): sending marketing communications and use of non-essential cookies — the user may withdraw this consent at any time.

LGPD Transparency: For each data processing purpose, h2bey maintains an internal record of the applicable legal bases. You may request a copy of this record from our Data Protection Officer (DPO) by emailing suporte@h2bey.net.

5Data sharing with third parties

H2bey does not sell or rent personal data of users to third parties. The only cases in which data is shared are those described below, all with a legitimate purpose and adequate contractual protections:

Payment processing partners

To process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED bank transfer, h2bey shares the minimum necessary data with the payment gateways and financial institutions involved. These partners are contractually required to process the data solely for the specified purpose and in compliance with the LGPD.

Game and casino providers

Slots, Live Casino, and crash games are developed by third-party providers. To enable access to these games, h2bey shares an anonymous session identifier — not your name or CPF — with those providers. No financial data is passed on.

Authorities and legal obligations

H2bey may be required by law, court order, or regulatory authority to share users' personal data. In such cases, sharing is strictly limited to what is specified by the court or regulatory order, and the user will be notified whenever legally permitted.

Technology and infrastructure providers

Cloud hosting, data analytics, and fraud protection services may access aggregated or pseudonymized data for operational purposes. These providers are selected based on their security certifications and are contractually bound to h2bey's data protection standards.

Important: h2bey never shares personal data with third-party advertising platforms for ad-targeting purposes outside its own platform. Your betting behavior data is never sold for external marketing.

6Cookies and tracking technologies

H2bey uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are:

Strictly necessary cookies

Essential for the platform to function properly — session authentication, bet slip maintenance, and language preferences. These cookies cannot be disabled without affecting your use of the platform.

Performance and analytics cookies

They collect information about how you use h2bey (pages visited, session time, errors encountered) in an anonymous and aggregated manner. The data is used exclusively to improve the platform — for example, to identify slow pages or betting flows with unnecessary friction.

Personalization cookies

With your consent, h2bey uses cookies to remember your preferences (favorite sport, odds display format) and show promotions and events relevant to your betting profile. You can withdraw this consent at any time in the cookie settings of the platform or your browser.

Cookie Management

When you first access h2bey, you will see the cookie preferences panel, where you can accept or decline each category individually. You can also adjust these preferences at any time in your account settings. Modern browsers such as Chrome, Firefox, and Safari offer built-in controls for managing cookies on a per-site basis.

7Data security

H2bey implements technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

  • 256-bit SSL/TLS encryption on all communications between the user's device and h2bey's servers;
  • Passwords stored with high-strength hashing (bcrypt), with no possibility of plain-text reversal;
  • Payment card data is processed exclusively through PCI-DSS certified gateways — h2bey does not store card numbers on its servers;
  • Role-based access control for internal staff — each team member can only access the data necessary to perform their duties;
  • Continuous monitoring of unauthorized access attempts, with automatic alerts to the security team;
  • Periodic security audits, including penetration testing carried out by specialized third-party firms.

Despite all measures in place, no security system is entirely foolproof. In the event of a security incident affecting users' personal data, h2bey commits to notifying the National Data Protection Authority (ANPD) and the affected users within the timeframe required by the LGPD.

Recommendation: For extra protection of your h2bey account, enable two-factor authentication (2FA) in your security settings. Use a unique password for h2bey and never share it with anyone.

8Data retention and deletion

H2bey retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law.

Retention periods

  • Registration and identity data (KYC): retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations (Law 9.613/1998);
  • Financial transaction history: retained for 5 years, as required by tax and regulatory obligations;
  • Betting history: retained for 2 years after the last bet for dispute resolution and audit purposes;
  • Support communications: retained for 2 years for quality assurance and dispute resolution purposes;
  • Non-essential cookie data: retained for a maximum of 13 months after collection.

Data deletion

Once the retention periods above have expired, data is permanently deleted or anonymized in a way that prevents re-identification. If you request account deletion, your data will be handled in accordance with the applicable legal retention period — we cannot immediately delete data whose retention is required by law.

9Your rights as a data subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by h2bey, the following rights, which may be exercised at any time through the support channel:

Access Request confirmation of which personal data h2bey holds about you and obtain a copy of it.
Correction Request the correction of incomplete, inaccurate, or outdated information registered in your account.
Deletion Request the deletion of data processed based on your consent, subject to applicable legal retention periods.
Portability Receive your data in a structured, machine-readable format for transfer to another controller.
Withdrawal of consent Withdraw consent for processing based on that legal basis, such as marketing communications.
Information on data sharing Know which entities your data has been or may be shared with.
Blocking or anonymization Request the blocking or anonymization of unnecessary or excessive data processed in non-compliance.
Review of automated decisions Request human review of decisions made solely through automated processing that affect your interests.

To exercise any of these rights, contact us via 24-hour live chat or send an e-mail to suporte@h2bey.net. h2bey will respond to your request within 15 calendar days, as stipulated by the LGPD.

10Under 18

H2bey services are intended for exclusively for users aged 18 and over. h2bey does not intentionally collect personal data from minors and does not permit minors to register or use the platform.

If h2bey determines that data from a minor was collected unintentionally, that data will be deleted immediately and the associated account will be closed. If you suspect that a minor is using an account on the platform, please contact support via live chat so we can take the appropriate action.

Minor protection: h2bey uses CPF validation and date-of-birth verification during registration to prevent minors from accessing the platform. Parents or guardians who identify a minor attempting to register should contact suporte@h2bey.net immediately.

11International data transfers

In some cases, personal data of h2bey users may be transferred to or accessed by servers or service providers located outside Brazil — for example, cloud infrastructure providers or cybersecurity partners.

When such a transfer takes place, h2bey ensures it is carried out in compliance with Articles 33 to 36 of the LGPD, with one of the following safeguards in place:

  • The destination country offers an adequate level of data protection, as assessed by the ANPD;
  • The recipient is bound by standard contractual clauses for data protection equivalent to those required by the LGPD;
  • The transfer is necessary for the performance of the contract entered into with the user or for compliance with a legal obligation.

H2bey does not carry out any international data transfers without implementing the safeguards described above. Users may request information about transfers made and the applicable guarantees through the DPO contact channel.

12Changes to this Privacy Policy

H2bey may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. When material changes are made, h2bey will notify users with a minimum advance notice of 15 calendar days before the new version takes effect, through:

  • A prominent notice displayed on the platform at login;
  • Email notification to the address registered on the account;
  • Updating the "Last updated" date at the top of this document.

If a user does not agree with the changes, they may close their account before the new version's effective date. Continued use of the platform after that date constitutes acceptance of the updated Policy.

13Contact and Data Protection Officer (DPO)

H2bey has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Policy and the LGPD, and for serving as a communication channel between h2bey, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, ask questions about how your data is handled, report a potential privacy violation, or contact h2bey's DPO, please use the channels below:

  • Live chat: available 24 hours a day, 7 days a week, on the h2bey platform — immediate access for urgent matters;
  • E-mail: suporte@h2bey.net — response within 2 business hours for general inquiries, and within 15 calendar days for formal LGPD rights requests.

Current version: June 2026. This Policy supersedes all previous versions and applies to all users with an active h2bey account from the effective date stated. In the event of a conflict between this Policy and the Terms and Conditions, the version more specific to the subject matter shall prevail.

Questions about privacy and data protection?

Our team is available 24 hours a day via live chat. For formal LGPD rights requests — access, correction, deletion, or data portability — please send an email to suporte@h2bey.net providing their full name and registered CPF. h2bey responds within 15 calendar days, as required by law.

Ready to get started?

Your data protected, your bet worry-free

H2bey takes your privacy seriously. Sign up, deposit from R$ 20.00 via Pix, and bet on Brasileirão, UFC, slots, and much more with complete peace of mind.

Minimum deposit: R$ 20.00 · Pix withdrawal in up to 8 minutes · Data protected under LGPD · For users 18 and over only

Português