22fff takes your personal data seriously. This document explains what we collect, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with the LGPD (Law No. 13.709/2018).
Six pillars that sum up how 22fff handles your personal data and why you can trust the platform.
22fff operates in compliance with the General Data Protection Law (Law No. 13.709/2018). Every stage of your data processing — collection, use, storage, and deletion — follows the legal bases set out in Brazilian law.
All communication between your device and 22fff is protected by 256-bit SSL encryption. Your registration data, payment information via Pix, boleto, or card, and betting history travel through a secure channel and cannot be intercepted.
You have the right to access, correct, port, and delete your data at any time. 22fff responds to data subject requests within 15 days, with no unnecessary red tape.
22fff does not sell personal data. Sharing only occurs with necessary operational partners — payment processors, KYC providers, and cloud infrastructure — all contractually bound to comply with the LGPD.
22fff uses essential, performance, and personalization cookies. You can manage your cookie preferences at any time in the platform settings, except for cookies strictly necessary for the service to function.
22fff retains your data for the minimum period necessary to fulfill legal and contractual obligations. After account closure, personal data is anonymized or deleted in accordance with the legal retention periods applicable to the betting sector in Brazil.
Quick summary: The 22fff collects only the data necessary to operate the platform and meet legal obligations. We do not sell your data. You may exercise your rights of access, correction, portability, and deletion at any time by emailing privacidade@22fff.net. This policy is compliant with the LGPD (Law No. 13.709/2018).
The 22fff, operator of the platform available at 22fff.net and its associated subdomains and applications, is the controller of users' personal data as defined under the LGPD — meaning it is the entity that decides how data is collected, processed, and stored.
This Privacy Policy applies to all users who:
For questions about this Policy or to exercise your rights as a data subject, please contact our Data Protection Officer (DPO) at privacidade@22fff.net.
The 22fff collects the following categories of personal data:
Data provided directly by you:
Automatically collected data:
Sensitive data: 22fff does not collect sensitive data such as racial origin, religious belief, political opinion, biometric data, or health information, except where strictly required by a specific legal obligation — in which case you will be notified in advance.
The 22fff uses your personal data only for the purposes described below, each with a legal basis established under the LGPD:
As required by the LGPD, each instance of personal data processing carried out by the 22fff has a specific legal basis. The table below summarizes the main processing activities and their respective legal bases:
| Processing Activity | Legal Basis (LGPD) |
|---|---|
| Account creation and maintenance | Contract performance |
| Bet and game processing | Contract performance |
| Deposits and withdrawals via Pix, boleto, card | Contract performance |
| Identity verification (KYC) | Legal obligation |
| Anti-money laundering | Legal obligation |
| Fraud detection and security | Legitimate Interest |
| Responsible gambling and risk monitoring | Legal obligation Legitimate Interest |
| Marketing communications and promotions | Consent |
| Support assistance | Contract performance |
| Response to regulatory authorities | Legal obligation |
When the legal basis is consent — such as for personalized marketing — you may withdraw that consent at any time without affecting your account's functionality.
The 22fff does not sell personal data to third parties under any circumstances. Sharing only occurs in the situations below, and always with appropriate contractual and technical safeguards:
All third parties that receive data from 22fff are contractually required to use it solely for the specific purpose for which it was shared, to maintain confidentiality, and to implement security measures consistent with LGPD standards.
In some cases, data from users of 22fff may be processed or stored on servers located outside Brazil — for example, by cloud infrastructure providers or game software vendors headquartered abroad.
When this occurs, 22fff ensures that:
You may request information about specific international transfers involving your data through the DPO contact channel indicated in Section 14 of this Policy.
The 22fff retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. Retention periods vary by data category:
Once retention periods have expired, data is either anonymized — with all personal identifiers removed — or securely and irreversibly deleted from 22fff's systems.
If you request deletion of your data before the legal retention periods expire, 22fff will delete all data not required by law and will clearly communicate which data must be retained and for how long, along with the corresponding legal basis.
The 22fff implements technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key measures include:
Your responsibility: The security of your account also depends on you. Use a strong, unique password for 22fff, do not share your credentials, and enable two-factor authentication (2FA) in your account settings. If you notice any suspicious access, contact support immediately.
The 22fff uses cookies and similar technologies to improve the user experience, analyze platform usage, and deliver personalized content. The types of cookies used are:
You can manage your non-essential cookie preferences at any time in the platform's privacy settings. Withdrawing consent for non-essential cookies does not affect your account functionality or the processing of bets and payments.
22fff does not use cross-site tracking technologies for advertising purposes, nor does it share browsing behavior data with external advertising networks.
The LGPD grants you, as a personal data subject, the following rights regarding processing carried out by the 22fff. All of them can be exercised through the channel indicated in section 14:
Request confirmation that your data is being processed and obtain a full copy of all personal data that 22fff holds about you.
Request the correction of incomplete, inaccurate, or outdated data, such as your email address, mobile number, or home address.
Request the deletion of data processed based on consent. Data retained due to a legal obligation cannot be deleted before the applicable legal deadline.
Receive your data in a structured, machine-readable format for transfer to another controller, upon formal request to the DPO.
Object to processing carried out on the basis of 22fff's legitimate interests, where you consider that your interests or fundamental rights override those interests.
Know which public and private entities 22fff has shared or may share your data with, and the legal basis under which each sharing occurred.
How to exercise your rights: Submit your request to privacidade@22fff.net with the subject line "LGPD Rights — [your name]" and a clear description of your request. 22fff will respond within 15 calendar days from the date the request is received. In complex cases, this deadline may be extended by an additional 15 days, with prior notice and justification.
The 22fff is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.
If we identify that an account was created by a minor, we immediately close the account, delete the collected data, and refund any deposited funds. The identity verification (KYC) system is the primary mechanism for detecting and preventing minors from registering.
If you are the legal guardian of a minor who created a 22fff account without authorization, please contact us immediately at privacidade@22fff.net so we can close the account and delete the data as a priority.
With your consent, the 22fff may send communications about promotions, bonuses, platform updates, featured sporting events such as the Brasileirão, Copa do Brasil, UFC, and other competitions, as well as VIP Program updates.
These communications may be sent via:
You can opt out of marketing communications at any time through three channels:
Unsubscribing from marketing does not affect mandatory transactional communications — such as bet confirmations, deposit and withdrawal receipts, account security notifications, and KYC verification updates.
The platform 22fff may occasionally contain links to third-party websites or services, such as casino game providers with their own support pages or regulatory bodies. This Privacy Policy applies exclusively to the 22fff platform and does not cover the privacy practices of third parties.
22fff is not responsible for the privacy policies or data protection practices of third-party websites. We recommend reading the privacy policy of any third-party site before providing personal data to it.
As provided under the LGPD, the 22fff has appointed a Data Protection Officer (DPO) responsible for:
Contact 22fff's DPO: Email: privacidade@22fff.net — Response time: up to 15 calendar days. When exercising LGPD rights, include in the subject line: "LGPD Rights — [type of request]".
If you believe your rights have not been adequately addressed, you may file a complaint directly with the National Data Protection Authority (ANPD) through the authority's official portal.
The 22fff may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered by the platform.
When an update is significant — meaning it changes the scope of data collected, the purposes of use, data sharing, or data subject rights — you will be notified via:
Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data as described in section 10.
Last updated: January 2026. For questions about this Policy, please contact the 22fff DPO by email at privacidade@22fff.net.
All personal and financial information collected by 22fff is protected by SSL 256-bit encryption and processed in accordance with the LGPD (Law No. 13.709/2018). No data is shared with third parties without a legal basis. To exercise your rights or ask questions, visit our Terms and Conditions or reach out by email at privacidade@22fff.net.
Now that you know how 22fff handles your data, create your account, deposit from R$ 20.00 via Pix, and bet on the sports you follow — with privacy, security, and support in Portuguese.
Adults 18 and over only. Betting involves financial risk. Responsible Gambling.