656win takes user privacy seriously. This document clearly explains what data we collect, why we collect it, how we use it, and how you can exercise your rights under Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018). No unnecessary legal jargon, no fine print.
Policy Highlights
Before reading the full document, here are the key points every 656win user needs to know about how their data is handled.
All data transmitted between your device and 656win is protected by 256-bit SSL encryption — the same standard used by Brazil's largest digital banks. Your registration data, documents and Pix transactions are always transmitted securely.
656win does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is only shared with partners when necessary to operate our services — such as Pix payment processors — and always under strict confidentiality obligations.
656win operates in full compliance with Law No. 13,709/2018 (LGPD). You have the right to access, correct, port, and request the deletion of your data at any time — simply contact our data protection officer.
Data belonging to 656win's Brazilian users is stored on servers with both physical and logical protection, following information security best practices. Internal access to data is restricted and continuously audited.
656win sends marketing communications — promotions, boosted odds, new games — only to users who have opted in. You can unsubscribe at any time through your account dashboard or via the unsubscribe link included in every email.
656win retains user data for the period required by Brazilian law — including tax obligations (5 years) and anti-money laundering obligations (10 years). After these periods, data is anonymized or securely deleted.
The controller of the personal data collected on the 656win platform is the company operating the site 656win.best, responsible for defining the purposes and means by which the personal data of Brazilian users is processed.
For the purposes of this Privacy Policy, "656win", "we", "our platform" or "our services" refer to the operator of the 656win platform and all services made available at 656win.best — including Sports Betting, online casino, slots, progressive jackpot, Live Casino, and all other features.
Data Protection Officer (DPO): 656win has appointed a Data Protection Officer responsible for overseeing compliance with this Policy and for communicating with data subjects. To exercise your rights or ask questions about privacy, please contact us at privacidade@656win.best.
656win collects personal data at different points throughout your journey on the platform. The categories of data and when they are collected are described below:
| Data Category | Examples | Point of Collection |
|---|---|---|
| Identification data | Full name, date of birth, CPF, ID card or driver's license | Registration and KYC verification |
| Contact details | Email address, mobile number, residential address | Registration and profile updates |
| Financial data | Pix key, bank details for TED, deposit and withdrawal history | Financial transactions on the platform |
| Usage data | Betting history, games accessed, sessions, preferences | Ongoing use of the platform |
| Technical data | IP address, device type, browser, operating system, approximate location | Platform access (web and app) |
| Communication data | Chat support history, emails exchanged with the support team | Contact with the support team |
| Verification documents | Identity document photo, proof of address, verification selfie | Mandatory KYC process |
656win does not collect sensitive personal data — such as racial origin, religious beliefs, health information, or sexual orientation — unless strictly required for responsible gambling purposes (such as self-identification of a gambling problem), and always with the user's explicit consent.
656win processes its users' personal data for the following purposes:
Under the LGPD (Law No. 13,709/2018), all personal data processing must have a legal basis. 656win relies on the following legal bases depending on the purpose of the processing:
| Purpose | Legal Basis (LGPD) |
|---|---|
| Performance of the platform's terms of use | Art. 7, V — Contract performance |
| Identity verification (KYC) and anti-money laundering | Art. 7, II — Legal obligation |
| Payment processing via Pix and other methods | Art. 7, V — Contract performance |
| Marketing communications and promotions | Art. 7, I — Consent |
| Responsible gambling and behavior monitoring | Art. 7, IX — Legitimate Interest |
| Maintenance of tax and regulatory records | Art. 7, II — Legal obligation |
| Service improvement (anonymized data) | Art. 7, IX — Legitimate Interest |
On consent: where the legal basis is consent (such as for marketing communications), you may withdraw that consent at any time — through your account dashboard under "Communication Preferences" or via the unsubscribe link in any email. Withdrawal does not affect any processing carried out prior to your request.
656win shares users' personal data only in the following circumstances, always with confidentiality and security safeguards in place:
656win does not sell, rent, transfer, or share users' personal data with third parties for direct marketing, programmatic advertising, or any other commercial purpose not listed above. Any communication claiming otherwise is false and should be reported to our support team.
656win uses cookies and similar technologies to enhance the platform experience, ensure security, and analyze service usage. The types of cookies used are:
You can manage your cookie preferences through the banner displayed on your first visit to 656win or through your browser settings. Disabling non-essential cookies does not affect access to the platform's core features.
656win implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss. Key measures include:
No security system is 100% foolproof. In the event of a security incident that compromises your personal data, 656win will notify affected users and the ANPD within 72 hours of identifying the incident, as required by the LGPD.
656win retains users' personal data for the periods set out below, after which data is securely deleted or anonymized:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Registration and identification data | Active account + 5 years | Tax obligation (RFB) |
| Financial transaction history | 10 years | Law No. 9,613/1998 (AML) |
| KYC documents (ID card, driver's license, proof of address) | 10 years | Law No. 9,613/1998 (AML) |
| Betting history and results | 5 years | Contractual and legal obligation |
| Access and security logs | 6 months | Marco Civil da Internet |
| Support communication data | 2 years after account closure | Legitimate interest |
| Analytics cookies (anonymized) | 13 months | Consent |
After account closure, 656win retains data for the minimum period required by applicable Brazilian law. Data no longer required by law is securely deleted or irreversibly anonymized.
The LGPD grants you, as the data subject whose personal data is processed by 656win, the following rights, which may be exercised at any time:
How to exercise your rights: to exercise any of the rights above, please contact 656win's DPO by email at privacidade@656win.best or via live chat on the platform. 656win will respond to your request within 15 business days, as required by the LGPD. If you are not satisfied with the response, you may file a complaint with the National Data Protection Authority (ANPD).
656win's services are intended exclusively for individuals who are 18 years of age or older. The platform does not intentionally collect personal data from users under 18 years of age.
656win's registration process includes age verification via CPF and, where necessary, identity document verification. If a minor is found to have created an account on the platform, the account will be immediately closed, the data deleted, and any deposited funds returned to the holder of the payment method used, as described in the Terms and Conditions.
If you believe a minor under 18 is using the 656win platform, please contact support immediately via live chat or by email at suporte@656win.best so that appropriate measures can be taken without delay.
Some of the technology and game providers used by 656win — such as cloud infrastructure providers and slots developers like Pragmatic Play and PG Soft — may have servers located outside Brazil. In these cases, 656win ensures that any international transfer of personal data takes place only under the following conditions:
656win contractually requires all international partners that process Brazilian users' data to comply with LGPD requirements and information security best practices.
656win may update this Privacy Policy periodically to reflect changes in services, regulatory requirements, or improvements to data protection practices. Any material change will be communicated at least 15 days in advance through:
The latest version of this Policy is always available at 656win.best/privacy-policy. We recommend reviewing it periodically. Continued use of the platform after any changes constitutes acceptance of the updated version.
For any questions regarding the privacy of your data, the exercise of your rights as a data subject, or this Privacy Policy, please contact 656win through the following channels:
Requests related to data subject rights will be responded to within 15 business days from the date the request is received, in accordance with Art. 18 of the LGPD. Where it is not possible to respond within that timeframe — due to complexity or volume of requests — 656win will inform you of the reason and the expected completion date.
LGPD in Practice
Law No. 13,709/2018 guarantees concrete rights over your personal data. Here's how to exercise each of them on 656win, simply and directly.
Request a copy of all personal data 656win holds about you — registration details, KYC, betting history and transactions. Send your request to privacidade@656win.best and receive a response within 15 business days.
Found an error in your registration — such as a misspelled name or outdated address? Correct it directly through your account dashboard or request the update via live chat. 656win updates data within up to 5 business days.
Request the deletion of data processed based on your consent — such as marketing preferences — at any time. Data retained for legal obligations, such as financial transaction history, cannot be deleted before the statutory deadline.
Request the portability of your personal data in a structured, machine-readable format (JSON or CSV), in accordance with ANPD regulations. This is useful if you decide to migrate to another betting platform.
Cancel your consent to receive marketing emails from 656win at any time — through your dashboard under "Communication Preferences" or via the unsubscribe link in any email. Withdrawal does not affect processing already carried out.
Request detailed information about which companies and entities 656win has shared your personal data with. The response will identify each recipient, the purpose of the sharing and the legal basis used.
Layered Security
Privacy and security at 656win are not just written policies — they are concrete features you can see and use directly on the platform.
Every piece of data you submit to 656win — from your CPF at registration to your Pix key at withdrawal — is encrypted with 256-bit SSL before traveling over the internet. Not even our own team can intercept that data in transit.
Enable 2FA in your 656win account dashboard and add an extra layer of security: in addition to your password, you'll need a code sent to your phone to log in. Highly recommended for accounts with an active balance.
Your 656win account password is stored only as an irreversible cryptographic hash — even if someone gained access to the database, they would not be able to recover your password. For this reason, our support team also has no access to your password.
656win staff only access user data when required for their specific role — and every access is logged and regularly audited. Unauthorized access is detected automatically and investigated.
656win regularly conducts penetration testing (pentests) and security audits with specialized firms. Any identified vulnerabilities are addressed with the highest priority to ensure your data remains protected at all times.
In the event of any security incident that may affect your data, 656win will notify you by email within 72 hours — ahead of the legal deadline — with clear information about what happened and what steps you should take.
When you bet on 656win — whether on the Brasileirão Série A, the CONMEBOL Libertadores, progressive jackpot slots, or Live Casino — you are sharing sensitive personal data: CPF, banking details for Pix, identity documents, location. In a country where financial scams and data breaches are an everyday reality, understanding how a platform handles that information isn't paranoia — it's basic due diligence.
656win was built with the Brazilian market as its priority, and that includes a commitment to the LGPD from the ground up — not as a bureaucratic requirement added as an afterthought, but as part of the platform's design. Every feature involving personal data was developed with the data subject rights set out in Law No. 13,709/2018 in mind.
The KYC process — identity verification — is one of the most common sources of confusion and, at times, resistance among users. Understanding the reason behind it clears that up: verification is not an obstacle created by 656win; it is a legal requirement that protects both the platform and you.
From a legal standpoint, Law No. 9,613/1998 — which governs anti-money laundering in Brazil — requires any company that handles financial transactions to verify the identity of its customers. Without this, the platform would be in breach of Brazilian law. From a practical standpoint, verification means no one else can withdraw funds from your 656win account using false information. If someone attempts to create an account with your details, the system will detect that the CPF is already registered and block the attempt.
Documents submitted for KYC — national ID, driver's license, passport, proof of address, and selfie — are stored in encrypted form on 656win's servers and accessed only by compliance team members with specific authorization. These documents are not shared with third parties except when required by court order or regulatory mandate.
Pix is the preferred deposit and withdrawal method at 656win — and for good reason: it's instant, available 24 hours a day, fee-free for individuals, and integrated with every Brazilian bank, from Nubank to Bradesco. That said, using Pix on online platforms calls for careful attention to security.
At 656win, your Pix key data — CPF, email, phone number, or random key — is used solely to process the specific transaction you requested and is never stored in plain text on the platform's servers. Pix processing is handled by financial intermediaries certified by the Banco Central do Brasil, bound to 656win by contracts requiring compliance with the LGPD and Bacen regulations.
For withdrawals, 656win requires that the destination Pix key belong to the same CPF registered on the platform. This means that even if someone gains access to your account, they cannot withdraw funds to a different account — the system automatically blocks any withdrawal attempts to a CPF other than the one on file.
Cookies are small text files stored on your device when you access 656win. They serve different purposes: some are essential for the platform to work — such as the session cookie that keeps you logged in while browsing the slots section or placing bets on the Brasileirão. Others are optional — such as analytics cookies that help 656win understand which features are most used so they can be prioritized in development.
656win does not use cookies to build advertising profiles or to track your browsing outside the platform. Data collected via cookies is used exclusively to improve your experience on 656win and to keep sessions secure. You can manage your cookie preferences through the banner displayed on your first visit — and disabling non-essential cookies will not prevent you from using the platform's core features.
656win sends marketing communications — such as growing jackpot alerts, special promotions for the Campeonato Brasileiro and free spins — only to users who gave explicit consent during registration or in their account settings. You can opt out of these communications at any time in two ways: through the account dashboard under "Communication preferences" or via the unsubscribe link in the footer of any 656win marketing email.
Unsubscribing from marketing emails does not affect transactional communications — such as Pix deposit confirmations, processed withdrawal notifications, or account security alerts. These messages are essential to the service and will continue to be sent regardless of your marketing preferences.
To exercise any right under the LGPD — access, correction, portability, deletion, or withdrawal of consent — please contact the 656win DPO at privacidade@656win.best. The response time is up to 15 business days. For questions about the platform's terms of use, please refer to our Terms and Conditions. For information on responsible gambling and self-control tools, visit our Responsible Gambling. 656win is exclusively for users aged 18 and over.
Privacy and security first
Your data protected by the LGPD, 256-bit SSL encryption, and a team that takes privacy seriously. Create your free account and deposit via Pix in under 2 minutes.