PRIVACY AND DATA PROTECTION

234k Privacy Policy – How We Protect Your Data

234k handles your data responsibly, transparently, and in full compliance with the LGPD. Here you will find a clear explanation of exactly what we collect, what we use it for, and how we protect every piece of your information.

Last updated: January 2026

Privacy in practice: what this means for you

Six concrete commitments from 234k to protect your personal data.

256-bit SSL encryption

All information transmitted between your phone or computer and 234k's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's leading banks, including Nubank, Itaú, and Bradesco. Your data never travels in plain text.

100% LGPD compliant

234k operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). This means you have clear rights over your data — to access, correct, port, or delete it — and 234k has equally clear obligations to honor those rights.

Your data is never sold

234k does not sell, rent, or trade your personal data to third parties under any circumstances. Data is shared with partners only when strictly necessary to process payments via Pix, boleto, or card — and exclusively with companies certified by the Banco Central do Brasil.

Control in your hands

In your 234k account dashboard, you control your communication preferences — which emails and push notifications you receive. To exercise your data subject rights under the LGPD, simply send an email to contato@234k.best. 234k responds within 15 business days, as required by law.

Minimum data required

234k collects only the information needed to operate your account, process payments, and meet legal obligations. We don't ask for data we don't use. The data minimization principle established by the LGPD is applied at every stage of registration and platform use.

Fixed-term retention

Personal data belonging to 234k users is stored for as long as necessary to fulfill the purposes for which it was collected, plus the mandatory legal retention period required under Brazilian financial regulations. After that period, data is anonymized or securely deleted.

1

Who we are and scope of this Policy

This Privacy Policy describes how 234k, operator of the Sports Betting and online casino platform available at 234k.best, collects, stores, uses, and protects the personal data of its users in Brazil.

For the purposes of this Policy, 234k acts as controller of users' personal data, as defined by the General Data Protection Law (LGPD – Law No. 13,709/2018). This means 234k makes the decisions about how and for what purposes data is used, along with the legal responsibilities that role entails.

This Policy applies to all interactions with 234k, including use of the 234k.best website, the Android and iOS app, the support chat, registration forms, and any other communication channel maintained by the platform. By creating an account or using 234k's services, you confirm that you have read and agreed to the terms of this Policy.

This Policy should be read together with the Terms and Conditions of 234k, which govern the remaining terms of use of the platform.

2

Data we collect

234k collects only the data strictly necessary to operate the platform, process financial transactions, and meet legal obligations. The data collected falls into the following categories:

Category Data collected When collected
Identification Full name, CPF, date of birth, gender At registration
Contact Email address, mobile number, residential address At registration
Financial Pix key, bank details (branch/account number or institution), deposit and withdrawal history On your first deposit/withdrawal
Documents National ID or driver's license (front and back), proof of address During KYC checks
Behavior Betting history, games accessed, gaming sessions, bonuses used While using the platform
Technical IP address, device type, operating system, browser, session identifiers On every login
Communication Support chat history, sent and received emails When you contact us

234k does not collect sensitive data such as health information, sexual orientation, religious beliefs, or biometric data, except where expressly required by law and with the data subject's specific consent.

3

How we use your data

The data collected by 234k is used exclusively for the following purposes:

  • Account operation: create, verify, manage, and secure your account on the platform;
  • Payment processing: process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers; process withdrawals to accounts held in your name;
  • Service delivery: record bets, calculate results, and credit winnings and VIP Program cashback;
  • Fraud prevention: detect suspicious patterns, prevent money laundering, and protect the integrity of the platform;
  • Responsible gambling: monitor behavioral patterns that may indicate problem gambling and apply protective tools when necessary;
  • Communication: send account notifications, promotions, and updates relevant to your use of the platform, where you have opted in to receive them;
  • Platform improvement: analyze aggregated and anonymized data to improve features, fix technical issues, and develop new functionality;
  • Legal compliance: respond to requests from competent authorities and meet regulatory obligations applicable to the betting sector in Brazil.

234k does not use your data to build profiles for third parties, does not sell it, and does not use it for purposes incompatible with those listed above without your renewed consent.

4

Legal basis for processing (LGPD)

The LGPD requires that all personal data processing have a legal basis to justify it. 234k processes your data under the following legal grounds set out in Art. 7 of Law No. 13.709/2018:

  • Contract performance: the processing required to operate your account and handle bets and payments is based on the performance of the platform use agreement you entered into at registration;
  • Compliance with a legal obligation: data used for identity verification (KYC), anti-money laundering compliance, and responses to requests from regulatory authorities are processed on the basis of a legal obligation;
  • Legitimate interest: technical and behavioral data used for fraud prevention, platform security, and service improvement are processed on the basis of 234k's legitimate interests, provided those interests do not override your fundamental rights;
  • Consent: marketing communications, promotions, and push notifications are sent based on the consent you provide at registration or in your account settings — and can be withdrawn at any time.

You can withdraw your consent to marketing communications at any time through your account dashboard under "Communication Preferences" or via the unsubscribe link in any 234k email.

5

Sharing data with third parties

234k does not sell your personal data. Sharing with third parties occurs only in the strictly necessary situations listed below, and always with partners who are contractually committed to handling data with the same level of protection required by the LGPD:

  • Payment processors: the financial data required to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago is shared with the respective payment processors and financial institutions, all certified by the Banco Central do Brasil;
  • Technology providers: companies that provide server infrastructure, cloud services, and security tools that support 234k's platform operations — always under confidentiality agreements and data processing contracts;
  • Game providers: technical session data required for the operation of slots, live casino, and crash games provided by third-party suppliers integrated into the 234k platform;
  • Authorities and regulatory bodies: when required by law, court order, or a competent regulatory authority in Brazil;
  • Anti-money laundering: companies specializing in financial risk analysis, when required to comply with the obligations of Lei nº 9.613/1998 and COAF regulations.

Under no circumstances is your data shared with advertisers, data brokers, or third-party marketing companies for commercial purposes unrelated to 234k's services.

6

Cookies and tracking technologies

234k uses cookies and similar technologies to ensure proper platform functionality, improve the user experience, and protect session security. The cookies used on 234k fall into the following categories:

  • Essential cookies: required for the basic operation of the site and app — session authentication, bet slip maintenance, and security. They cannot be disabled without compromising your use of the platform;
  • Preference cookies: remember settings you've chosen, such as language and notification preferences, so you don't have to reconfigure them every time you log in;
  • Analytics cookies: collect aggregated and anonymized data on how users navigate the platform, in order to identify usability improvements. No personally identifiable data is associated with these cookies;
  • Security cookies: detect suspicious behavior, unauthorized access attempts, and fraudulent activity to keep your account protected.

234k does not use third-party advertising tracking cookies or share browsing data with ad networks. You can manage your cookie preferences through the banner displayed on your first visit to the site or in your browser settings — keep in mind that disabling essential cookies may affect platform functionality.

7

Data security

234k implements technical and organizational measures to protect your data against unauthorized access, loss, alteration, or destruction. The main security measures in place include:

  • 256-bit SSL encryption across all communications between the user and 234k's servers;
  • Encryption at rest for financial data and documents stored on our servers;
  • Two-factor authentication (2FA) available to all users in the account security settings;
  • Continuous monitoring of suspicious activity and unauthorized access attempts;
  • Restricted access controls — only 234k employees with a verified operational need have access to users' personal data;
  • Regular audits security audits and penetration testing conducted by specialized firms;
  • Encrypted backups in separate environments to ensure data recovery in the event of an incident.

In the event of a security incident that may affect your data, 234k will notify impacted users and the National Data Protection Authority (ANPD) within the deadlines established by the LGPD.

No system is 100% breach-proof. 234k recommends using a unique password for your account, enabling 2FA, and never sharing your login credentials with anyone. If you suspect your account has been compromised, contact us immediately via live chat.

8

Data retention and deletion

234k retains your personal data for as long as necessary to fulfill the purposes described in this Policy, observing the minimum retention periods required by Brazilian law:

  • Active account data: retained for the full period the account remains active and for up to 5 years after closure, as required by applicable financial regulations;
  • Financial transaction data: retained for a minimum of 5 years in accordance with Lei nº 9.613/1998 (anti-money laundering) and Banco Central do Brasil regulations;
  • Identity verification documents (KYC): retained for a minimum of 5 years after verification, in accordance with regulatory requirements;
  • Behavioral and betting data: retained for the duration of the account plus 2 years, for audit and dispute resolution purposes;
  • Support communications: kept for 2 years for record-keeping purposes and to resolve any potential disputes.

Once retention periods expire, data is anonymized or securely and irreversibly deleted. Anonymization preserves aggregated data for statistical purposes without allowing individual users to be identified.

9

Your rights as a data subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that 234k is committed to upholding. See below what you can request and how to exercise each right:

Right of access

Request a copy of all personal data that 234k holds about you, including how it is used and with whom it has been shared.

Right to rectification

Request the correction of incomplete, inaccurate, or outdated data, such as your name, address, or phone number on your account.

Right to erasure

Request the deletion of data processed based on consent. Data retained under a legal obligation cannot be deleted before the mandatory retention period expires.

Right to data portability

Request your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.

Right to withdraw consent

Withdraw consent for data processing based on consent — such as marketing communications — at any time, without affecting processing already carried out.

Right to information

Receive information about which public and private entities 234k shares your data with, and about the option to withhold consent and its consequences.

To exercise any of these rights, send an email to contato@234k.best with the subject line "LGPD Rights", including your full name and registered CPF. 234k will respond within up to 15 business days, as required by the LGPD.

10

Minors

The services of 234k are intended exclusively for users aged 18 and over. The platform does not knowingly collect data from minors and does not permit registration by users below that age.

During registration, users expressly confirm they are 18 years of age or older. Identity verification may be requested to confirm this declaration. If 234k determines that data from a minor was inadvertently collected, the account will be closed immediately and the data deleted, with any real-money balance returned to the legal guardian upon verification.

If you believe a minor has misused the 234k platform, please contact us immediately at contato@234k.best or via live chat so we can take the appropriate action.

11

International data transfers

Some of the technology and infrastructure providers used by 234k may have servers located outside Brazil. When this occurs, 234k ensures that any international data transfer is carried out with the safeguards required by the LGPD, which include:

  • Transfers to countries offering a level of data protection equivalent to that required by the LGPD, as assessed by the ANPD;
  • Use of standard contractual clauses that require the recipient to handle data with the same level of protection demanded by Brazilian law;
  • International security and privacy certifications, such as ISO 27001, covering the operations of infrastructure providers engaged by 234k.

234k does not transfer users' financial data internationally. Deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED are processed exclusively by institutions regulated by the Banco Central do Brasil.

12

Links to external websites

The 234k platform may occasionally contain links to third-party sites — such as game providers or responsible gambling resources. This Privacy Policy applies exclusively to 234k and does not cover the privacy practices of other websites.

234k recommends that you read the privacy policy of any external website you visit. The platform is not responsible for the content, privacy practices, or security of third-party websites.

13

Updates to this Privacy Policy

234k may update this Privacy Policy periodically to reflect changes in Brazilian legislation, market practices, or platform features. Any significant update will be communicated by email and via a notice in your account dashboard with at least 7 (seven) calendar days in advance.

The date of the most recent update is shown at the top of this page. We recommend reviewing this Policy periodically to stay informed about how 234k protects your data. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

If the changes affect the processing of consent-based data in a way that involves a new use not previously anticipated, 234k will request fresh explicit consent before carrying out that processing.

14

Data Protection Officer (DPO)

234k has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for:

  • Handle data subject requests related to the exercise of their rights;
  • Communicate with the Autoridade Nacional de Proteção de Dados (ANPD) in the event of incidents or regulatory inquiries;
  • Guide 234k's internal team on data protection best practices;
  • Assess the privacy impact of new features on users before they are implemented.

To contact 234k's DPO directly, use the email privacidade@234k.best with the subject line "DPO – [subject of your request]". The DPO responds within 15 business days.

15

Contact

For any questions, requests, or complaints related to this Privacy Policy or to the processing of your personal data by 234k, use the channels below:

  • Live chat: available on the 234k website and app, 24 hours a day, 7 days a week — for urgent account-related issues;
  • General email: contato@234k.best — responded within 24 business hours;
  • DPO / LGPD email: privacidade@234k.best — for data subject rights requests and specific data protection matters, responded within 15 business days;
  • FAQ: visit the page FAQ for quick answers to the most common questions about privacy and your account.

You also have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights as a data subject have not been properly upheld by 234k.

Related documents
Other policies governing your use of 234k

Why privacy matters at 234k

When you bet on the 234k, you share personal information that goes well beyond the basics: your CPF, your banking details, your betting history, the device you use, the time you play. Data like this, if mishandled, can put your financial privacy and digital security at risk. That's why 234k treats data protection not as a regulatory checkbox, but as a core commitment to every user on the platform.

The LGPD established clear rules for the handling of personal data in Brazil, and the 234k was built to comply with them fully — not just on paper, but in practice. This means every platform feature went through a privacy impact assessment before launch. It means 234k's technology team follows the "privacy by design" principle: privacy built into development from the start, not added as an afterthought.

A concrete example: a Pix withdrawal on 234k can only be processed to a key whose holder has the same CPF registered on the platform account. This rule exists not only to protect 234k against fraud — it exists to protect you. If someone gains unauthorized access to your account, they won't be able to transfer your funds to a third-party account. It's a security layer that directly benefits the user, and it reflects how 234k approaches the protection of your financial data.

Another point worth highlighting: the 234k does not use third-party advertising tracking cookies. This means your activity on the platform does not feed external ad networks, is not sold to data brokers, and is not used to build profiles for third-party marketing campaigns. The only external cookies used are those strictly necessary for the operation of integrated payment solutions — such as Pix processing — and are covered by data protection agreements with each partner.

Whether you follow the Brasileirão, bet on UFC, or play Fortune Tiger late on a Friday night, 234k is a platform that looks after both your entertainment and your security. Your gameplay behavior data is used exclusively to improve your experience within 234k — new app features, promotions more relevant to your profile, and responsible gambling alerts when patterns suggest they might be helpful. Never to sell to third parties, never for purposes you don't know about.

If you wish to exercise any of your rights under the LGPD — accessing your data, correcting information, requesting data deletion, or simply learning more about how the 234k handles your information — the process is straightforward: send an email to privacidade@234k.best with the subject line "Direitos LGPD" along with your full name and CPF. 234k will respond within 15 business days with everything you need. No unnecessary red tape, no endless redirects — the same efficiency you expect from Pix and support, applied to your privacy rights as well.

Your rights as a data subject at 234k

In compliance with the LGPD (Law No. 13.709/2018), you may at any time request access to, correction of, portability of, or deletion of your personal data. To exercise these rights, send an email to privacidade@234k.best with the subject line "Direitos LGPD". You may also lodge a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have not been respected. Visit our Terms and Conditions for the full set of platform usage rules.

Bet at 234k with complete peace of mind

Your data protected by the LGPD, 256-bit SSL encryption, and a transparent privacy policy. Create your account now, deposit from R$ 10.00 via Pix, and enjoy a 100% bonus up to R$ 1,500.00.

Português