Policy updated January 2026  |  🔒 Full compliance with the LGPD — Law No. 13,709/2018  |  256-bit SSL encryption on all transactions  |  🇧🇷 Your data is never sold to third parties  |  You can request deletion of your data at any time  |  🛡️ Two-factor authentication available for all users  |  Data Protection Officer contact: contato@a222.run  |  ⚡ Deposit via Pix — instant and secure confirmation  |  No exchange fees, no hidden charges — everything in BRL (R$)  |  🎁 Welcome Bonus: 150% + 200 Free Spins Policy updated January 2026  |  🔒 Full compliance with the LGPD — Law No. 13,709/2018  |  256-bit SSL encryption on all transactions  |  🇧🇷 Your data is never sold to third parties  |  You can request deletion of your data at any time  |  🛡️ Two-factor authentication available for all users  |  Data Protection Officer contact: contato@a222.run  |  ⚡ Deposit via Pix — instant and secure confirmation  |  No exchange fees, no hidden charges — everything in BRL (R$)  |  🎁 Welcome Bonus: 150% + 200 Free Spins
Last updated: January 2026

A222 Privacy Policy — Your Data, Protected

Here you'll find a clear breakdown of exactly what data a222 collects, how it's used, how it's protected, and what rights you're guaranteed under the LGPD. No unnecessary legal jargon — explained in plain language for the Brazilian player.

0SSL Encryption
0Data Sales
0LGPD compliant since
0Response Timeframe
0LGPD Rights

How a222 Protects Your Data

Six pillars supporting personal data protection on the a222 platform — from registration to withdrawal.

256-Bit SSL Encryption
Every connection between your phone or computer and a222's servers is protected by 256-bit SSL encryption — the same standard used by major Brazilian banks like Itaú, Bradesco, and Nubank. Registration data, Pix transactions, credit card details, and any other sensitive information are always transmitted encrypted, making interception technically impossible.
Bank-grade standard
Full LGPD Compliance
a222 operates in full compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018). This means every piece of data collected has a declared purpose, a legal basis, and a defined retention period. We do not collect data beyond what is necessary to provide the service — and what we do collect is handled with all safeguards required under Brazilian law.
LGPD compliant
Your Data Is Never Sold
a222 does not sell, rent, or share users' personal data with third parties for commercial or marketing purposes. Technical partners — such as payment processors and game providers like Pragmatic Play and NetEnt — receive only the information strictly necessary to deliver the contracted service, and are bound by contractual confidentiality obligations.
Zero data selling
Two-Factor Authentication
a222 offers two-factor authentication (2FA) to all users who wish to enable it in their account settings. With 2FA active, even if someone discovers your password, they cannot access your account without the second factor — a code generated on your phone. It is an extra layer of protection we strongly recommend to all players.
2FA available
Full Control in Your Hands
Under the LGPD, you have the right to access all data a222 holds about you, correct inaccurate information, request data portability, and delete your account at any time. All requests are handled within 24 business hours via contato@a222.run — no unnecessary red tape.
7 LGPD Rights
Passwords Are Never Stored in Plain Text
a222 never stores user passwords in plain text. All passwords are cryptographically hashed before being saved — meaning even a222's own technical team cannot see your password. If you reset it, a new code is generated; the original password is never recovered because it simply does not exist anywhere in storage.
Cryptographic hash

Full Privacy Policy

This Privacy Policy describes how a222 collects, uses, stores, and protects your personal data. By creating an account or using any feature of the platform, you agree to the terms described here.

Section 1

Who We Are & Scope of This Policy

A222 is a Sports Betting and online casino platform operated for the Brazilian market, available at https://a222.run. We are the controller of the personal data collected during use of the platform, responsible for determining the purposes and means of processing that data as required by the LGPD.

This Privacy Policy applies to all a222 users — whether you are a site visitor, a registered account holder, or a former user whose data is still within the legally required retention period. It covers all data collected through the website, the mobile web app, and any other form of interaction with the platform, including live support chat and email communications.

The a222 Data Protection Officer (DPO) can be reached by email at contato@a222.run, with the subject line "Data Protection — LGPD". All personal data requests are responded to within 24 business hours.

Legal basis: a222's processing of personal data is based on the following legal grounds established by the LGPD: compliance with a legal or regulatory obligation (art. 7, II), performance of a contract (art. 7, V), legitimate interest (art. 7, IX), and, where applicable, consent (art. 7, I). Each processing purpose described in this Policy is linked to its corresponding legal basis.

Section 2

What Data We Collect and Why

2.1 — Data You Provide Directly

When you create an a222 account, we collect the following information:

  • Identification data: full name, date of birth, CPF, mobile number, and email address;
  • Address: street address, number, complement, neighborhood, city, state, and ZIP code — required for compliance with anti-money laundering regulations;
  • Identity documents: a copy of a national ID, driver's license, or passport, collected during the mandatory identity verification (KYC) process before the first withdrawal;
  • Financial data: payment method used, deposit and withdrawal history. a222 does not store full credit card details — that processing is handled directly by authorized payment processors.

2.2 — Automatically Collected Data

While you use the platform, we automatically collect technical information that helps us improve your experience and maintain security:

  • IP address and approximate geographic location;
  • Device type, operating system, and browser used;
  • Pages visited, session duration, and browsing patterns within the platform;
  • Betting history and game sessions — required for the VIP program, rollover calculations, and abusive behavior detection;
  • Cookies and similar technologies, described in detail in Section 7 of this Policy.

2.3 — Data Collected via Support

When you contact the a222 support team — whether via live chat or email — those conversations are recorded for quality assurance, dispute resolution, and staff training purposes. These records are retained for 24 months and are accessible only to authorized personnel.

Section 3

How We Use Your Data

A222 uses your personal data exclusively for the purposes listed below. No data is used for purposes incompatible with those described here without prior notice to you:

  • Account operation: creating, maintaining, and securing your a222 account;
  • Transaction processing: deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and wire transfer; withdrawal processing and financial reconciliation;
  • Identity verification (KYC): compliance with legal obligations related to customer identification and anti-money laundering;
  • Sports Betting and casino service delivery: bet recording, odds calculation, event settlement, live casino operation, and slots;
  • VIP loyalty program and bonuses: points calculation, promotion eligibility, and rollover compliance verification;
  • Responsible gambling: monitoring of gameplay patterns to identify at-risk behaviors and apply user-requested control tools;
  • Communications: sending transactional emails (registration confirmation, withdrawal notifications, security alerts) and, with your consent, promotional communications about a222 offers and promotions;
  • Security and fraud prevention: access monitoring, duplicate account detection, abusive behavior identification, and anti-money laundering;
  • Platform improvement: analysis of aggregated, anonymized data to identify usability issues and product improvement opportunities.

a222 will never use your personal data to make automated decisions with significant legal effects without human review, as provided under Art. 20 of the LGPD.

Section 4

Data Sharing with Third Parties

A222 does not sell personal data. Sharing with third parties occurs only in the following situations, always with the minimum necessary information and under contractual confidentiality obligations:

4.1 — Payment Processors

To process deposits and withdrawals, a222 shares with authorized payment processors only the information needed to complete each transaction: account holder name, amount, and payment method. Authorized processors handle Pix, boleto bancário, credit/debit cards, PicPay, Mercado Pago, and TED transfers through Brazil's major financial institutions — Nubank, Itaú, Bradesco, and Banco do Brasil. No processor has access to your full betting history or any data beyond what is strictly necessary to execute the specific payment.

4.2 — Game Providers

To operate live casino, slots, and crash games, a222 uses content providers such as Pragmatic Play and NetEnt. These providers receive an anonymized player identifier and session balance — they have no access to the user's full name, CPF, or financial data.

4.3 — Legal Obligations

A222 may share data with competent Brazilian authorities — such as the Financial Activities Control Council (COAF), the Receita Federal, and the Judiciary — when required by law, court order, or duly substantiated administrative request. In such cases, sharing is mandatory, and users will be notified whenever legally permitted.

We never share with: third-party marketing companies, data brokers, spam lists, third-party affiliate networks, or any other partner not operationally required to deliver a222's service.

Section 5

Data Security — How We Protect Your Information

A222 employs a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: 256-bit SSL/TLS on all connections between users and a222 servers;
  • Encryption at rest: sensitive data — identity documents, financial data, and KYC information — is stored with AES-256 encryption on our servers;
  • Password hashing: user passwords are processed with modern cryptographic hash algorithms (bcrypt) before storage — a222 cannot recover or view your original password;
  • Two-factor authentication (2FA): available to all users in account settings — strongly recommended;
  • Role-based access control: only employees with a legitimate need have access to users' personal data — and that access is logged and audited;
  • Continuous monitoring: automated intrusion detection and anomalous behavior monitoring systems run 24 hours a day on a222's servers;
  • Regular security testing: a222 conducts periodic penetration tests to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that may put users' data at risk, a222 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes established by the LGPD — within 72 hours when notification to the ANPD is mandatory.

Section 6

Data Retention — How Long We Keep Your Data

A222 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. The applicable retention periods are:

Data Category Retention Period
Registration and identification data 5 years after account closure (legal obligation)
Financial records and transactions 5 years after the transaction (Federal Revenue Authority / COAF)
KYC documents (national ID, driver's license, proof of address) 5 years after account closure
Betting history and game session records 3 years after account closure
Customer support records 24 months after the support case is closed
Access logs and technical data 12 months (as per the Brazilian Internet Civil Rights Framework)
Marketing communications data Until consent is withdrawn + 6 months

Once the applicable retention period expires, data is securely deleted or anonymized for statistical purposes. Anonymized data cannot be used to identify any individual and is therefore not subject to the LGPD.

Section 7

Cookies & Tracking Technologies

A222 uses cookies and similar technologies to ensure the platform works correctly, enhance the user experience, and carry out performance analysis. The types of cookies used are:

  • Essential cookies: required for the platform's core functionality — session management, authentication, and security. They cannot be disabled without affecting the usability of the site;
  • Performance cookies: collect anonymous information about how users browse a222 — which pages are visited most frequently, load times, and errors encountered. Data is aggregated and does not identify individual users;
  • Functionality cookies: store user preferences such as language and interface settings to personalize the experience on future visits;
  • Security cookies: assist in detecting fraudulent behavior and monitoring suspicious access.

A222 does not use third-party advertising cookies or cookies that track user behavior on other sites outside the platform. Cookie preferences can be managed in your browser settings or through the privacy preference center available in your account settings.

Section 8

Your Rights as a Data Subject (LGPD)

The LGPD (Law No. 13.709/2018) grants you, as a data subject, the following rights, which may be exercised at any time:

  • Confirmation and access: confirm whether a222 processes your data and, if so, access a copy of that data;
  • Correction: request the update or correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion: request that unnecessary or excessive data be anonymized, blocked, or deleted — subject to the legal retention obligations described in Section 6;
  • Portability: request the transfer of your personal data to another service provider in a structured, machine-readable format;
  • Deletion of data processed on the basis of consent: request the deletion of data processed solely on the basis of your consent — except where retention is required by law;
  • Sharing information: obtain information about which public or private entities a222 shares your data with;
  • Consent withdrawal: withdraw, at any time, consent for processing based solely on that legal basis — such as receiving promotional communications.

To exercise any of these rights, contact us at contato@a222.run with the subject line "LGPD Rights — [describe your request]". Please include your full name and registered CPF so we can identify you as the data subject. We respond within 24 business hours and process requests within the timeframes set by applicable law.

Please note: some deletion requests may be partially fulfilled due to legal retention obligations. For example, financial records must be kept for 5 years to comply with Federal Revenue Authority requirements and anti-money laundering regulations — even after account closure.

Section 9

Marketing Communications & Opt-Out

With your consent, a222 may send you communications about promotions, new games, bonus offers, and special events — such as boosted odds for Brasileirão rounds or Pragmatic Play slots promotions. This consent is requested explicitly during registration and can be withdrawn at any time.

To stop receiving promotional communications, you have three options:

  • Clicking the "Unsubscribe" link in the footer of any promotional email sent by a222;
  • Access your communication preferences in your account settings on the platform;
  • Send a request to contato@a222.run with the subject line "Marketing Opt-Out".

Opting out of promotional communications does not affect the receipt of mandatory transactional emails — such as registration confirmations, withdrawal notifications, security alerts, and identity verification communications. These emails are necessary for service delivery and cannot be disabled while the account is active.

Section 10

Changes to This Policy and Final Provisions

A222 may update this Privacy Policy periodically to reflect changes in legislation, the services offered, or data processing practices. Material changes will be communicated at least 7 days in advance by email or through a prominent notification on the platform.

The date of the most recent update is always shown at the top of this page. We recommend reviewing this Policy periodically to stay informed about how your data is handled.

This Privacy Policy is governed by Brazilian law, in particular the LGPD (Law No. 13,709/2018), the Marco Civil da Internet (Law No. 12,965/2014), and the Consumer Protection Code (Law No. 8,078/1990). Disputes relating to personal data processing are resolved under the jurisdiction of Brazilian courts, with the elected venue being the city of São Paulo (SP).

For questions about this Policy, to exercise your LGPD rights, or to contact a222's data protection officer, please email contato@a222.run. For information about the platform's general Terms and Conditions, visit /terms-conditions. For information about responsible gambling, visit /responsible-gaming.

Validity: this Privacy Policy came into effect in January 2026 and fully supersedes all previous versions. If you had an account with a222 before that date, the new terms apply to all data processing from the effective date onward.

Your Rights at a Glance
Access — You can request a full copy of all data a222 holds about you at any time.
Correction — Incorrect or outdated data must be corrected upon request within 24 business hours.
Deletion — You may request the deletion of your data, except where retention is required by law (e.g., financial records for 5 years).
Portability — You can request a transfer of your data to another service in a structured, machine-readable format.
Opt-out — You can opt out of marketing communications at any time via the link in any email or through your account settings.
DPO Contact — All LGPD requests: contato@a222.run with subject line "LGPD Rights". Response within 24 business hours.
Security at a222
256-bit SSL across the entire platform
Two-Factor Authentication (2FA)
bcrypt-hashed passwords — never stored in plain text
24/7 suspicious access monitoring
Periodic penetration testing
Card data not stored by a222
Secure Payment Methods
Pix Boleto Card PicPay Mercado Pago TED

All payments in BRL. Financial data protected by 256-bit SSL. Card data processed by payment gateways — not stored by a222.

Data Protection Officer (DPO)

To exercise your LGPD rights, ask questions, or report privacy concerns, contact the a222 DPO at contato@a222.run with the subject line "Data Protection — LGPD".

Response time: within 24 business hours.

A Safe and Trustworthy Platform SSL 256 + LGPD

Your data protected to the same security standard as Brazil's leading banks. Sign up at a222, deposit via Pix from R$ 20.00, and get started with a 150% bonus.

For users 18 and over only. Please gamble responsibly. Responsible Gaming

Frequently Asked Questions about Privacy at a222

No. a222 does not sell, rent, or share users' personal data with marketing companies, data brokers, or any third parties for commercial purposes. The only instances of data sharing are with strictly necessary operational partners — such as payment processors Pix, boleto bancário, PicPay, and Mercado Pago, and game providers like Pragmatic Play — who receive only the minimum information required to deliver the service and are contractually bound to confidentiality. You will also never receive third-party spam as a result of creating an account with a222.

To request deletion of your data, send an email to contato@a222.run with the subject line "Data Deletion — LGPD" and include your full name and registered CPF. The request will be processed within 24 business hours. Please note: certain data must be retained to meet legal obligations even after account closure — financial records and transactions, for example, must be kept for 5 years as required by the Receita Federal and anti-money-laundering regulations. In such cases, you will be informed which data will be deleted immediately and which must be retained for the legally required period.

No. a222 does not store full credit or debit card details on its servers. When you make a card deposit, your data is processed directly by the authorized payment gateway — a222 only receives the transaction confirmation (approved/declined) and the operation identifier, with no access to your full card number, CVV, or expiration date. This processing model is known as "tokenization" and is the security standard required by PCI-DSS, the card industry's security protocol. Your card information stays with the authorized processor, not with a222.

To enable 2FA on your a222 account, go to the security settings in your account profile. You will find the "Two-factor authentication" option — once enabled, a QR code is generated for you to scan with an authenticator app on your phone (such as Google Authenticator or Authy). After scanning, the app generates 6-digit codes that refresh every 30 seconds. The next time you log in, you will need to enter both your password and the code from the app. With 2FA active, even if someone gets hold of your password, they cannot access your account without your phone. It is simple to set up and we recommend it to all users.

Yes. A complete history of bets and gaming sessions is recorded. This serves three main purposes: (1) operational — correctly settling your bets, calculating bonus rollover completion, and maintaining transaction records; (2) responsible gambling — monitoring patterns that may indicate problematic behavior and activating protective tools when needed; (3) security and compliance — detecting abusive behavior and suspicious betting, and ensuring adherence to anti-money-laundering regulations. This data is stored securely and retained for 3 years after account closure, as described in Section 6 of this Policy. You have the right to request access to your full betting history at any time by emailing contato@a222.run.

When you close your account, a222 begins deleting personal data that does not need to be retained by law. Data such as interface preferences, browsing history, and marketing communications are removed immediately. Registration data, KYC documents, and financial records must be kept for 5 years as required by the Receita Federal and anti-money laundering regulations — after that period, they are securely deleted. Betting history is retained for 3 years. Support records for 24 months. You will receive a confirmation email upon account closure detailing which data is retained and the applicable deletion timelines.
Português