Last updated: January 2026

Brx4 Privacy Policy – Your Data Protected by the LGPD

This Privacy Policy clearly explains how BRX4 collects, uses, stores, and protects your personal data in full compliance with Brazil's General Data Protection Law (LGPD — Lei nº 13.709/2018). We keep the legal language to a minimum: each section is written so you know exactly what happens to your information when you use the platform.

Quick Summary
Full LGPD compliance
Your data is never sold
SSL Encryption Across the Platform
You may request deletion of your data
24/7 LGPD Support in Portuguese
Cookies Explained Clearly

User privacy is taken seriously at BRX4 — not because we are legally required to, but because we believe a lasting relationship of trust can only be built when you know exactly what we do with your information. This policy covers every step of how your data is handled, from betting on the Brasileirão to withdrawing via Pix.

This Privacy Policy applies to all BRX4 features, including the website, mobile app, Sports Betting (football, volleyball, basketball, MMA/UFC, e-sports), casino games (slots, roulette, blackjack, Live Casino, crash games), promotions, VIP program, and any other services offered under the BRX4 brand.

01 Introduction & LGPD Commitment

The BRX4 operates in full compliance with the Brazilian General Data Protection Law — LGPD (Law No. 13,709, of August 14, 2018) — which governs the processing of personal data by individuals and legal entities in Brazil. The LGPD ensures that you, as the data subject, have clear rights over how your information is collected and used.

When you register on the platform, you provide us with the information needed to operate the service. We handle that data responsibly, proportionately, and transparently. We never collect more data than necessary for the purposes described in this policy, and we never use your data for purposes you have not authorized.

Our Commitment

BRX4 applies LGPD principles across all operations: purpose limitation, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability. If you have any questions about how your data is handled, our Portuguese-language support team is available 24 hours a day.

02 Data Controller

For the purposes of the LGPD, the controller of the personal data processed under this policy is the entity responsible for operating the BRX4. The controller is the party that makes decisions about the purposes and means of processing the collected personal data.

To exercise your rights as a data subject or to ask questions about this policy, you can reach BRX4's Data Protection Officer (DPO) by email at contato@brx4.net, with the subject line "LGPD Request". Responses are provided within up to 15 business days, as required by law.

03 What Data We Collect

The BRX4 collects different categories of data depending on how you interact with the platform. The categories and collection points are outlined below:

Registration data (provided by you):

  • Full name;
  • CPF (Cadastro de Pessoa Física);
  • Date of birth;
  • Full address (postal code, street, city, state);
  • Email address;
  • Mobile phone number;
  • Government-issued ID (RG, CNH, or passport) — requested during identity verification.

Financial data (generated through platform use):

  • Pix key registered for withdrawals;
  • Deposit and withdrawal history (amount, method, date);
  • Credit or debit card data (stored in encrypted form by the payment processor — brx4 does not store your full card number).

Usage data (collected automatically):

  • IP address and approximate location;
  • Device type and operating system;
  • Browser used;
  • Betting and gaming history;
  • Session duration and pages visited;
  • Gaming preferences and account settings.
Sensitive Data

Brx4 does not intentionally collect sensitive data such as racial origin, religious beliefs, political opinions, health information, or sexual orientation. If any such information is voluntarily included by the user in free-text fields, it will be disregarded and not processed.

04 How We Use Your Data

Every piece of data collected by BRX4 has a specific and legitimate purpose. We do not process data for any purpose not described in this policy. The processing purposes are:

  • Account creation and management: use your name, CPF, email, and date of birth to create your account, verify your identity, and keep your account active;
  • Financial transaction processing: use payment data to process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED transfers, and to process withdrawals via Pix;
  • Fraud prevention and anti-money laundering: monitor transactions and usage patterns to identify suspicious behavior and fulfill legal obligations to COAF and the Banco Central do Brasil;
  • Eligibility verification: confirm that the user is 18 or older and eligible to use the platform;
  • Platform improvement: analyze aggregated and anonymized usage data to identify issues, improve the user experience, and develop new features;
  • Service communications: send transactional notifications about deposits, withdrawals, credited bonuses, and security alerts;
  • Direct marketing: send promotions, offers, and platform updates — only with your consent, which can be withdrawn at any time;
  • Responsible gambling: monitor behavioral patterns to identify signs of problem gambling and trigger protective tools when needed;
  • Legal obligation compliance: maintain records required by applicable Brazilian legislation.
06 Data Sharing with Third Parties

The BRX4 does not sell, rent, or trade your personal data with third parties for advertising or any other commercial purpose. Data sharing occurs exclusively in the following situations and with the following categories of recipients:

  • Payment processors: financial data required to process deposits and withdrawals is shared with financial institutions and payment processors — all of whom are bound by contractual confidentiality obligations and LGPD compliance requirements;
  • Game providers: username and the minimum information required to operate casino games (slots, blackjack, live roulette) are shared with providers such as NetEnt, Pragmatic Play, and Microgaming under data protection agreements;
  • Identity verification services: registration documents and data may be shared with KYC (Know Your Customer) services for identity verification;
  • Competent authorities: data is shared with public authorities when required by law, court order, or applicable regulation — including the Receita Federal, COAF, and Banco Central do Brasil;
  • Technical service providers: hosting, data analytics, and security providers acting as data processors under BRX4's instruction, bound by contracts that ensure proper data handling.

What we never do: BRX4 never sells your email list or profile data to external advertisers, never shares your CPF or financial data with third parties unrelated to the platform's operation, and never uses your data to build behavioral profiles sold for other purposes.

07 How Long We Retain Your Data

The BRX4 retains personal data for as long as necessary to fulfill the purposes described in this policy, in accordance with the mandatory retention periods established by Brazilian law.

  • Registration and identity data: retained throughout the entire period the account is active and for up to 5 years after closure, as required by anti-money laundering regulations;
  • Financial transaction history: retained for a minimum of 5 years after each transaction, in accordance with the Brazilian Central Bank's regulations;
  • Usage data and access logs: retained for up to 6 months, with possible extensions if an investigation is ongoing;
  • Support communications: retained for up to 2 years after the support ticket is closed;
  • Marketing data: retained for as long as you have not withdrawn your consent — after withdrawal, deleted within 30 days.

Once the applicable retention period has passed, data is securely deleted or anonymized so that it can no longer be linked to any individual.

08 Data Security

The BRX4 implements technical and organizational measures to protect your data against unauthorized access, loss, destruction, or improper disclosure. The key security measures in place include:

SSL/TLS Encryption

All communication between your device and our servers is encrypted using up-to-date SSL/TLS protocol. This covers registration, login, Sports Betting, deposits, and withdrawals.

Two-Factor Authentication (2FA)

Available to all users in the account security panel. We strongly recommend enabling 2FA to protect your access, even if your password is ever compromised.

Encrypted Data at Rest

Sensitive data stored on brx4 servers — particularly financial information and identity documents — is encrypted at rest using industry-standard algorithms.

Role-Based Access Control

Only team members with a proven operational need are granted access to personal data, and all such access is logged and regularly audited.

Continuous Monitoring

Automated systems monitor the platform around the clock, scanning for suspicious access patterns, intrusion attempts, and anomalous behavior.

In the event of a security incident that may affect your data, BRX4 will notify the impacted data subjects and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.

09 Cookies & Tracking Technologies

The BRX4 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — for analytics and marketing purposes. Each category is explained below:

  • Essential cookies: required for core platform functionality — authentication, user sessions, account settings, and security. These cannot be disabled without affecting your ability to use the platform;
  • Preference cookies: store your personal preferences, such as preferred language and favorite sports, so you don't have to reconfigure them on every visit;
  • Analytical cookies: collect anonymized data about how you navigate the platform — pages visited, session duration, errors encountered. Used exclusively to improve the user experience. Require consent;
  • Marketing cookies: used to personalize communications and measure campaign effectiveness. They require explicit consent and can be disabled at any time in your account settings.

You can manage your cookie preferences in your account settings or through the cookie banner displayed on your first visit to the platform. Disabling non-essential cookies does not affect access to the platform's core features.

10 Minors

The BRX4 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18, and any account identified as belonging to a minor will be immediately closed, with any real BRL balance deposited returned.

The mandatory identity verification at registration — which includes submitting an official photo ID with date of birth — is the primary access control measure for minors. Parents or guardians who identify unauthorized access by a minor should contact our support team immediately via live chat or at contato@brx4.net.

11 Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights over your personal data. The BRX4 respects and facilitates the exercise of all these rights. Here is what you can request at any time:

Your LGPD Rights at brx4

You have full control over your data. See how to exercise each right.

Right of Access

Request a complete copy of all personal data brx4 holds about you. We respond within 15 business days with a full file of your information.

Right to Rectification

If any of your registration details are incorrect or out of date — a misspelled name, an old address, a wrong email — you can request a correction directly through support or from within your account.

Right to Erasure

Request the deletion of data that is unnecessary or processed on the basis of consent. Data required by law (such as financial history) is retained for the legally mandated period even after the request.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another controller. brx4 provides data in a format compatible with current technical standards.

Right to Withdraw Consent

You can withdraw your consent for marketing and promotional communications at any time — via the unsubscribe link in any email, through your account settings, or by contacting support. No cost, no impact on your platform access.

Right to Information

You have the right to know which third parties your data is shared with and the legal basis for each processing operation. This information is set out in this policy and can be further detailed through our support team.

To exercise any of these rights, please contact us by email at contato@brx4.net with the subject line "LGPD Request" or via live chat, available 24 hours a day. Response time is up to 15 business days as required by the LGPD, though we aim to respond within 5 business days in most cases.

12 International Data Transfer

To Operate the Platform BRX4 with the quality Brazilian users deserve, parts of the technology infrastructure — such as hosting servers and some casino game providers — may be located outside Brazil. When this is the case, international data transfers are carried out with the appropriate safeguards required by the LGPD, including:

  • Transfer to countries with a level of data protection recognized as adequate by the ANPD;
  • Standard contractual clauses that impose data protection obligations equivalent to those of the LGPD on recipients;
  • Specific security and confidentiality guarantees set out in each contract with international vendors.

International transfers are never carried out to jurisdictions that lack adequate data protection guarantees, and brx4 is responsible for ensuring that international sub-processors meet standards equivalent to Brazilian law.

13 Updates to This Privacy Policy

The BRX4 may update this Privacy Policy from time to time to reflect changes in data processing practices, Brazilian legislation, or the services offered by the platform. Any material changes will be communicated in advance to your registered email address, with clear highlights of what has been updated.

The date of the last update will always be shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform after a new version takes effect constitutes acceptance of the changes. If you do not agree with any update, you may close your account before the new terms come into force.

14 Contact, DPO & Complaints Channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, the BRX4 offers the following channels:

  • DPO Email: contato@brx4.net — use the subject line "Solicitação LGPD" for priority handling;
  • Live chat: available 24 hours a day, 7 days a week, via the website or app — for urgent matters or quick privacy questions;
  • Response time: up to 15 business days for formal requests submitted by email; up to 2 minutes via live chat for general inquiries.

If you believe your rights as a data subject have not been properly upheld by brx4, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

Data Processing Summary at brx4

A quick overview of how each data category is handled.

Data Purpose Legal Basis Sold to Third Parties?
Full name and CPF Registration, identity verification, and fraud prevention Contract Performance + Legal Obligation Never
Email Service and marketing communications (with consent) Contract performance + Consent Never
Pix Key Withdrawal processing Contract Performance Never
Betting history Platform operation, responsible gambling, and auditing Contract Performance + Legal Obligation Never
Transaction history Financial processing and regulatory compliance Legal Obligation Never
IP Address Security, fraud prevention, and geographic compliance Legitimate Interest Never
Usage and browsing data Platform improvement (anonymized/aggregated) Legitimate Interest Never
Analytical cookies Behavioral Analysis for Platform Improvement Consent Never
Marketing cookies Communication personalization and campaign measurement Consent Never
Identity document KYC Verification and Anti-Fraud Compliance Legal Obligation Never

Why Your Data Is Safe at BRX4

Six concrete privacy commitments the platform upholds for you.

LGPD in Practice

Compliance with Lei nº 13.709/2018 is more than a page of text. brx4 has internal processes for periodic review of privacy practices, staff training, and an active DPO channel to handle data subject requests.

Data Never Sold

Brx4 does not and never will operate a business model based on selling user data. Your betting, payment, and behavioral data is processed exclusively to operate the platform — never sold or commercialized with third parties.

End-to-End Encryption

Every piece of data exchanged between your phone or computer and brx4's servers — whether at login, placing a bet on the Brasileirão, or making a Pix withdrawal — is protected by up-to-date SSL/TLS encryption. No data travels unprotected.

You're in Control

Access your data, correct it, delete it, port it, or withdraw consent — all exercisable directly through Portuguese-language support. No lawyer or bureaucratic process needed to exercise your LGPD rights.

Retention with Defined Timeframes

Every data category has a clear, justified retention period. Once that period ends — and there is no legal obligation to retain it — the data is securely deleted or anonymized. We do not store data "just in case" indefinitely.

Incident Notification

If a security incident affects your data, brx4 will notify impacted users and the ANPD within the timeframes required by the LGPD — with no attempt to conceal the issue or downplay its impact. You'll receive direct communication and clear guidance on what steps to take.

Privacy FAQ at brx4

The most common user questions about how personal data is handled.

brx4 shares identification data — including CPF — only with service providers directly involved in platform operations, such as identity verification (KYC) services and payment processors. In all cases, sharing is governed by contracts with specific data protection clauses. Outside these necessary operational contexts, your CPF is never shared with third parties for commercial, marketing, or any other purpose not set out in this policy.

Yes. You may request account closure and deletion of associated data at any time through our Portuguese-language support. The process includes settling any pending real-money balance via Pix and deleting unnecessary data. However, certain data must be retained for the mandatory legal retention period even after account closure — specifically your financial transaction history (for up to 5 years, per Central Bank regulations) and identity data for anti-money laundering purposes. This data is stored securely, not actively used, solely to fulfill our legal obligations.

Your betting history is used for three main purposes: platform operation (calculating balances, applying promotions such as weekly cashback, and generating statements), responsible gambling (identifying behavioral patterns that may indicate problem gambling and triggering protective tools), and regulatory auditing (maintaining records required by applicable law). Aggregated betting history may be used in anonymized form for internal analysis and service improvement, but never in a way that identifies individual users to third parties. Your history is never sold or shared with other betting platforms or advertising networks.

You can unsubscribe from marketing emails at any time in three ways: by clicking the "Unsubscribe" link in the footer of any promotional email sent by brx4, by going to the notification settings in your account dashboard and disabling marketing communications, or by requesting removal directly through support in Portuguese via live chat or email. Unsubscribe requests are processed within 5 business days. After that period, you will no longer receive promotional emails, but you will continue to receive essential transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts, which are necessary for account operations.

In the event of a merger, acquisition, or closure of BRX4's operations, data subjects will be notified in advance via their registered email. Where operations are transferred to a third party, data may only be passed to the new controller with equivalent data protection guarantees — as required by the LGPD — and after notifying data subjects, who will have the opportunity to exercise their rights, including requesting deletion before the transfer if they choose. BRX4 commits to never transferring data in corporate transactions without prior notice and adequate protections for data subjects.

Your Data Protected, Your Experience Guaranteed

Sign up with BRX4 knowing your information is handled responsibly. Instant Pix payments, bonuses up to R$ 500.00, and 24/7 support in Portuguese.

This is the brx4 Privacy Policy

Brx4 handles your personal data with full accountability and in compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). Your data is never sold or shared with third parties for commercial purposes. For requests related to your rights as a data subject, contact us at contato@brx4.net with the subject line "Solicitação LGPD".

Responsible Gambling

Sports Betting is entertainment — not a guaranteed source of income. The BRX4 provides deposit limit, temporary self-exclusion and loss control directly in your account dashboard. The platform is exclusively for users aged 18 and over, with mandatory identity verification upon registration.

Learn More About Responsible Gambling
Português