Data Protection — LGPD
356x handles your data with full responsibility and transparency. Here you will find exactly what we collect, why we collect it, and how we protect every piece of information — in compliance with the General Data Protection Law (LGPD).
Our Principles
Before the full document, here are the six core commitments 356x makes to your data privacy.
356x operates in strict compliance with the General Data Protection Law (Lei nº 13.709/2018). All data processing has a defined legal basis — whether consent, compliance with a legal obligation, or the platform's legitimate interest. No data is processed without a clear legal justification.
All communication between your device and the 356x platform is encrypted with 256-bit SSL — the same standard used by banks and financial institutions. Data in transit is never exposed, whether during a Pix deposit, a withdrawal, or while browsing the betting lobby.
356x does not sell, rent, or transfer your personal data to third parties for commercial purposes. Period. Technical partners (payment processors, game providers) receive only the data strictly necessary to operate the service — and under a confidentiality agreement.
You have the right to access, correct, port, or request the deletion of your data at any time. Rights under the LGPD are handled by email within 15 business days. You also control your marketing communication preferences directly from your profile.
356x only collects the data necessary to operate its services securely. We do not request unnecessary information during registration, we do not track data outside the platform's context, and we do not build behavioral profiles for purposes beyond the legitimate operation of our services.
This Privacy Policy describes in plain language everything 356x does with your data. There are no hidden data collection practices or undisclosed uses of data. Significant changes are communicated by email before they take effect.
This Privacy Policy describes how 356x ("Platform", "we", "controller") collects, uses, stores, shares, and protects the personal data of users ("you", "data subject") when using the services available at 356x.best, including Sports Betting, Live Casino, poker, slots, and other products.
The controller of your personal data is 356x Group, operator of the 356x.best platform. For privacy-related matters, the contact channel is privacidade@356x.best.
By creating an account and using the platform, you acknowledge that you have read and understood this Policy. Continued use of the services constitutes agreement with the practices described herein.
During registration and while using the platform, you provide directly:
When you use the platform, we automatically collect:
In specific cases, we may receive data from third parties to supplement the identity verification process — such as CPF confirmation with public agencies — always within the legal bases of the LGPD and anti-money laundering regulations (AML/CFT).
The data collected by 356x is used for the following purposes:
The LGPD requires that all data processing have a legal basis. 356x processes your data in accordance with the following grounds set out in Art. 7 of Lei nº 13.709/2018:
356x does not sell personal data. Sharing occurs only in the situations below, always limited to what is strictly necessary:
356x may share data with government authorities, regulatory bodies, or the judiciary when required by law, court order, or investigation of unlawful activity. This includes obligations to the Brazilian Central Bank, Federal Revenue Service, and Ministry of Finance related to betting regulations.
In cases of legal disputes or to protect the rights of 356x or its users, data may be shared with legal advisors under professional confidentiality obligations.
356x applies technical and organizational measures to protect your data against unauthorized access, loss, destruction, or improper disclosure:
In the event of a security incident that may cause risk or harm to you, 356x will notify the ANPD and the affected data subjects within the timeframes set out in the LGPD, including a description of the data involved, the risks, and the measures taken.
356x retains your personal data for as long as necessary for each purpose:
When you close your 356x account, your data is anonymized or deleted, except where retention is required by law. Financial and KYC data is kept for the minimum legal period described above, even after account closure, to meet regulatory obligations.
After the mandatory retention period, data is securely and irreversibly deleted from our systems.
The LGPD grants you, as the data subject, the following rights regarding how 356x processes your data:
To exercise any of the rights above, submit your request to privacidade@356x.best with the subject line "LGPD Rights" and your identification (name and registered email). 356x will respond within 15 business days, and may request additional identity verification to protect your data from unauthorized access.
If you are not satisfied with the response, you may contact the National Data Protection Authority (ANPD), the regulatory body responsible for the LGPD in Brazil.
Cookies are small text files stored in your browser when you visit a website. 356x uses cookies to keep your session active, personalize your experience, and analyze platform usage.
You can manage cookies through your browser settings at any time. Disabling essential cookies may affect how the platform functions (such as keeping you logged in). For marketing cookies, you can withdraw your consent via the preferences panel in your account or by emailing privacidade@356x.best.
The 356x platform is intended exclusively for users aged 18 and over. 356x does not knowingly collect data from minors.
The identity verification process (KYC) requires proof of legal age via an official document. Any account identified as belonging to a minor is immediately closed and the data is handled in accordance with applicable child and adolescent data protection legislation.
Parents or guardians who identify misuse of the platform by minors should contact privacidade@356x.best for immediate action.
356x may send communications about promotions, bonuses, new games, poker tournaments with guaranteed prize pools in BRL, and sports events covered on the platform — such as Brasileirão matches, UFC cards, and Superliga de Vôlei events.
Marketing communications sent by email and SMS are based on the consent you provided at registration. You can opt out at any time through one of the following:
Opting out of marketing does not affect essential transactional communications, such as withdrawal confirmations, security alerts, and notifications of changes to the Terms.
Within the platform, we may display notifications about active promotions, available tournaments, and personalized bonuses based on your usage history. These communications are part of the platform's normal operation and are based on our legitimate interest in keeping you informed about services relevant to your profile.
356x may update this Privacy Policy to reflect changes in legislation, our practices, or the services we offer. All updates follow this protocol:
By continuing to use the platform after significant changes, you accept the new version of the Policy. If you disagree with the changes, you may close your account before the new version takes effect.
To exercise your data subject rights, ask questions about this Policy, or report any privacy concerns, please use the channels below:
Data Flow
From registration to withdrawal — a straightforward look at how your data is handled at each step.
You provide your name, CPF, email, and password. Data is encrypted in transit (256-bit SSL) and stored securely. Passwords are never saved in plain text.
Your ID and selfie are submitted to the identity verification system to confirm age and authenticity. Completed once; documents are stored with encryption.
Transactions via Pix, boleto, card, PicPay, or TED. Data is passed to the partner payment processor only to the extent necessary to complete the transaction — no additional data is shared.
Data remains active for as long as your account exists. After closure, it is anonymized or deleted, except where retention is legally required (minimum 5 years for financial data).
Your Rights
These rights are yours by law — and 356x is fully committed to honoring them.
You may request a full copy of all data 356x holds about you, including its purpose and origin — responded to within 15 business days.
Incorrect or outdated information (name, address, phone number) can be corrected at any time through support or by submitting a request to the DPO.
Unnecessary data may be deleted upon request, subject to legally mandated retention periods (such as the 5-year financial history requirement).
You may request your data in a structured format for transfer to another controller, in accordance with ANPD regulations.
You can withdraw your consent to marketing at any time, at no cost, via the unsubscribe link in emails or through your account settings.
If 356x does not respond adequately, you may contact the ANPD — National Data Protection Authority — for mediation and oversight.
Supplementary Guide
Data privacy is not the most exciting topic in the world — but it matters, especially on a platform where you deposit and withdraw real money, share documents, and use financial data. The 356x believes you deserve to know exactly what happens with your information — no lawyer required. That's why this supplementary guide breaks down the most practical points of the Privacy Policy in everyday language.
Brazil's General Data Protection Law (LGPD) came into force in 2020 and changed how every company must handle personal data. 356x adapted from the start: it reviewed internal processes, appointed a Data Protection Officer (DPO), established legal bases for each processing activity, and created clear channels for you to exercise your rights. This was not a last-minute adjustment — it is part of the culture of transparency that 356x has upheld since its founding.
The most common question is: why do you need my ID? The answer is straightforward and legally grounded. Betting platforms in Brazil are required by law to verify users' identities — this is a requirement under anti-money laundering (AML/CFT) regulations and the Ministry of Finance rules for the sector. It also serves to confirm that you are 18 or older, which is mandatory for any betting platform.
In practice: you submit a photo of your ID and a selfie holding it. These images are used solely to verify that you are who you claim to be. They are stored with encryption, accessed only by the compliance team, and retained for the minimum period required by law (5 years after account closure). After that, they are securely deleted. No image databases, no sale of biometric data — just the verification required by law.
Your betting history — which Brasileirão matches you bet on, which poker tournaments you entered, which live casino games you played — is stored in your account and used for three purposes: accurately calculating bonuses and VIP cashback, detecting patterns that may indicate problem gambling (for responsible gambling tools), and resolving disputes about bet outcomes when necessary. Your history is not used to build advertising profiles or sold to third parties.
You can access your full betting history at any time from your account dashboard — every bet, every result, every financial transaction. 356x believes that access to your own history is a user right, not a platform privilege.
SSL encryption protects your data in transit — but you also play an important role in keeping your account secure. Three practices make all the difference: using a unique, strong password (not the same one you use on other sites), enabling two-factor authentication (2FA) in your settings — which adds an extra code sent to your phone at each login — and never sharing your credentials with anyone, including anyone claiming to be "356x support".
About 2FA: once enabled, even if someone discovers your password, they cannot access your account without the temporary code generated on your phone. It is the most effective protection against unauthorized access. 356x strongly recommends using 2FA on all accounts, especially those with a significant balance or enrolled in the VIP Program.
Financial data is the most sensitive information you share with 356x. This includes your Pix key, banking details for withdrawals, and your transaction history. This data is handled with an extra layer of protection: encryption at rest in addition to SSL in transit, access restricted to the finance and compliance teams only, and access logs that record every time a team member views a account's financial information.
One important note: 356x does not store full credit card data — card processing is handled by PCI-DSS certified processors, the highest security standard for payment data. 356x only sees the transaction confirmation, not your full card numbers.
When you access the platform, cookies are used to keep your login active (without them, you would need to log in on every page), remember your preferences, and analyze platform usage in aggregate. 356x does not use third-party cookies for external advertising tracking — you will not see 356x ads following you around on Instagram or Google after visiting the site.
To disable non-essential cookies, simply adjust your browser settings. Essential session cookies cannot be disabled without affecting core functionality, but they only collect what is strictly necessary to keep you logged in.
Exercising your rights at 356x is straightforward. To request a copy of your data, correct inaccurate information, or ask for the deletion of data that is not legally required to be retained, simply send an email to privacidade@356x.best with the subject line "LGPD Rights", your full name, and your registered email address. You will receive a response within 15 business days — in practice, it is usually faster.
To opt out of marketing, the quickest way is the "Unsubscribe" link in the footer of any promotional email — one click and you're removed immediately. This does not affect transactional emails (withdrawal confirmations, security alerts), which will continue to be sent as they are necessary to operate the service.
When you use 356x's responsible gambling tools — such as setting a deposit limit of R$ 300.00 per week or requesting a voluntary break — that data is handled with the utmost confidentiality. Responsible gambling settings are not visible to other users, are not shared with third parties, and do not influence marketing communications (356x will not send you promotions during a voluntary break period).
356x also uses behavioral data in aggregated, anonymized form to identify patterns that may indicate problem gambling — this is part of its commitment to responsible gambling. No individual data is shared in this process; it is an internal analysis designed to proactively engage support when concerning patterns are detected. For more details on the tools available, visit the Responsible Gambling.
To access, correct, or delete your data, send an email with the subject line "LGPD Rights":
privacidade@356x.bestResponse within 15 business days.
Questions about privacy or your account? 356x support replies in Portuguese, every day.
suporte@356x.best Create Free Account356x complies with the General Data Protection Law (Lei nº 13.709/2018). Your data is collected and used exclusively to operate the platform and fulfill legal obligations — never sold or shared without a legal basis. To exercise your rights as a data subject, contact privacidade@356x.best. Betting involves financial risk — please gamble responsibly. See our Responsible Gambling and the Terms and Conditions. Service available exclusively to users aged 18 and over.
Your data protected under LGPD, withdrawals via Pix in up to 1 hour, and a 100% bonus up to R$ 500.00 on your first deposit. Sports Betting, Live Casino, and poker — with full transparency.
+18 only. Please gamble responsibly. Responsible Gambling.