Official Document

PK88 Privacy Policy –
How We Protect Your Data
with Transparency and Respect

At pk88, privacy isn't a technical footnote — it's a commitment to every user. This document clearly explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have under the LGPD. No unnecessary legal jargon: here you can understand exactly what's happening with your information.

Last Updated: January 2026 Portuguese Version (pt-BR)
Our Commitments to Your Privacy

Six pillars that guide how pk88 handles every piece of data you entrust to us

🛡️ LGPD
Full LGPD Compliance

Every data collection and processing activity at pk88 is structured in compliance with Brazil's General Data Protection Law (Law No. 13.709/2018). We have an identified legal basis for each type of data we collect, and you have the right to question any processing at any time.

🔒 Security
256-bit SSL Encryption Across the Board

All communication between your device and pk88's servers is protected by 256-bit SSL encryption. This applies to login, registration, betting, and especially any financial transaction — deposits via Pix, boleto, card, or TED, and withdrawals processed through the platform.

💳 Payments
Payment Data with PCI DSS Level 1

Pk88 does not store full credit or debit card numbers on its servers. All financial data is processed by PCI DSS Level 1 certified gateways – the highest certification level in the payments industry. Your card data is tokenized before it even reaches our systems.

🚫 No Selling
Your Data Is Never Sold

Pk88 does not sell, rent, or share users' personal data with third parties for marketing or advertising purposes without your explicit consent. The data we collect is used to operate the platform, improve your experience, and ensure security – nothing more.

✅ Rights
You Control Your Data

We guarantee all rights provided under the LGPD: access, correction, portability, deletion, objection, and withdrawal of consent. You can exercise any of these rights through your account dashboard or by emailing suporte@pk88.express – response time is up to 15 calendar days.

📍 Brazil
Data Stored Securely

Data belonging to pk88's Brazilian users is stored in secure infrastructure with strict access controls, regular backups, and continuous monitoring. Any international data transfer, when required for technical operations, follows the requirements established by the LGPD for international transfers.

01

Data We Collect

The pk88 collects the personal data necessary to provide its Sports Betting and online casino services in a secure manner and in compliance with Brazilian law. Data collection occurs at different points during your interaction with the platform:

Data you provide directly during registration:

  • Full name as it appears on an official ID (RG, CNH, or passport)
  • Valid and active CPF (Cadastro de Pessoas Físicas)
  • Date of birth
  • Valid email address
  • Mobile number with area code
  • Full residential address (street, number, neighborhood, ZIP code, city, state)
  • Identity documents submitted during the KYC verification process (RG, CNH, proof of address)

Data generated during platform use:

  • Betting history: sports, events, markets, amounts wagered, and results
  • Financial history: deposits via Pix, boleto, credit/debit card, PicPay, Mercado Pago, or TED; withdrawals made; bonuses received and used
  • Access data: IP address, device type, operating system, browser, login and logout date and time
  • Platform behavior data: pages visited, features accessed, session duration
  • Support communications: chat history via live chat, email, and WhatsApp

Pk88 collects only the data strictly necessary for each purpose. The data minimization principle, as set out in the LGPD, is applied at every stage of processing: we don't collect more than we need.

02

How We Use Your Data

Every piece of data collected by pk88 has a specific, justified purpose. We do not use your information for anything beyond what is described below:

  • Account management: creation, authentication, maintenance, and security of your pk88 user account.
  • Bet processing: registration, settlement, and full history of all bets placed on the Brasileirão, volleyball, e-sports, live casino, crash games, and other platform products.
  • Payment processing: processing deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; processing withdrawals via Pix; anti-money laundering (AML) verification in accordance with Law No. 9,613/1998.
  • Identity verification (KYC): fulfillment of legal identity verification obligations prior to releasing withdrawals or in cases of suspected fraud.
  • Responsible gambling: monitoring of usage patterns to identify behaviors that may indicate a gambling problem and activation of the available protection tools.
  • Transactional communications: sending registration confirmations, bet confirmations, result notifications, security alerts, and account-related notices.
  • Marketing communications: sending promotions, special odds, and pk88 news – only to users who have explicitly consented to this type of communication. You can opt out at any time from your account dashboard.
  • Platform improvement: analysis of aggregated and anonymized data to improve the user experience, identify technical issues, and develop new features.
  • Compliance with legal obligations: responding to requests from government, judicial, or regulatory authorities in accordance with Brazilian law.
03

Legal Basis for Processing (LGPD)

The General Data Protection Law (Law No. 13,709/2018) requires that all personal data processing have a specific legal basis. pk88 grounds the processing of your data on the following legal bases set out in Article 7 of the LGPD:

Purpose of Processing Legal Basis
Account operation and betting Contract performance
Payment processing (Pix, boleto, card, TED) Contract performance
KYC verification and anti-fraud Legal obligation
Anti-money laundering (AML) Legal obligation
Responsible gambling monitoring Legitimate interest
Transactional account communications Contract performance
Marketing communications and promotions Consent
Product improvement and usage analytics Legitimate interest
Compliance with authorities and court orders Legal obligation

Where processing is based on consent – such as marketing communications – you may withdraw that consent at any time with no impact on your account. Withdrawal can be done via the settings dashboard or by emailing suporte@pk88.express.

04

Sharing Data with Third Parties

Pk88 does not sell users' personal data. Sharing only occurs in the situations below, always with proper contractual safeguards:

  • Payment processors: PCI DSS Level 1 certified gateways that process deposits via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED. These partners receive only the minimum data required to process each transaction.
  • Identity verification (KYC) providers: companies specializing in document verification and anti-fraud that support pk88 in meeting its Know Your Customer legal obligations.
  • Technology infrastructure providers: cloud hosting, CDN, and system monitoring services that support the platform's operation. These providers have limited, contractually restricted access to user data.
  • Analytics and anti-fraud providers: tools that help identify suspicious behavior, fraud attempts, and violations of the Terms and Conditions, protecting all users on the platform.
  • Government and judicial authorities: in compliance with court orders, requests from law enforcement or regulatory authorities, and obligations set out in Brazilian legislation, including Law No. 9,613/1998 (money laundering) and the Code of Civil Procedure.

Pk88 requires all suppliers and partners that process users' personal data to sign specific data protection agreements, with clauses ensuring proper handling and security of information, in accordance with Art. 37 of the LGPD.

05

Data Security

User information security is an engineering priority at pk88. The technical and organizational measures in place include:

  • Encryption in transit: all traffic between user devices and pk88's servers uses TLS 1.3 with a 256-bit SSL certificate.
  • Encryption at rest: sensitive data stored in pk88's databases is encrypted at rest using AES-256 algorithms.
  • Access control: internal access to user data is restricted by the principle of least privilege – each team member can only access the data required for their role.
  • Multi-factor authentication: all pk88 internal systems that store user data require multi-factor authentication for access.
  • Continuous monitoring: intrusion detection and security monitoring systems operate 24 hours a day, 7 days a week.
  • Security testing: pk88 conducts periodic penetration tests and security audits to identify and address vulnerabilities before they can be exploited.
  • Incident response plan: in the event of a data breach, pk88 will follow the protocol established by the LGPD, notifying the National Data Protection Authority (ANPD) and affected users within the timeframe required by law.

No system is 100% invulnerable. That's why we also recommend taking steps on your end: use a strong, unique password for pk88, enable the 2FA option available in your account panel, and never share your credentials with anyone.

06

Cookies and Tracking Technologies

Pk88 uses cookies and similar technologies to ensure the platform works correctly, personalize the user experience, and analyze site usage. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation, such as keeping your session active after login and remembering language preferences. They cannot be disabled without affecting your ability to use the platform.
  • Performance cookies: collect anonymous information about how users navigate the platform – most visited pages, errors encountered, loading times. They help identify and fix technical issues.
  • Functionality cookies: allow the platform to remember user preferences, such as favorite bets, preferred sports, and account settings.
  • Analytical cookies: used to understand aggregate usage patterns and improve the overall experience. Data is processed in anonymized form.

You can manage your cookie preferences through the consent banner displayed on your first visit or through your browser settings. Disabling essential cookies may prevent the platform from functioning properly.

Pk88 does not use third-party cookies for behavioral advertising or cross-site tracking. Data collected via cookies is used solely to improve your experience within the platform itself.

07

Data Retention and Deletion

Pk88 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with mandatory legal retention periods:

  • Registration and identification data: retained for the full duration of the active account and for up to 5 years after closure, in accordance with compliance requirements and anti-money laundering regulations (Law No. 9,613/1998).
  • Betting history and financial transactions: retained for 5 years from the date of each transaction, in accordance with applicable tax and compliance obligations.
  • Support communications: retained for 2 years after the ticket is closed, for reference in the event of disputes.
  • Session and browsing data: retained for 90 days, after which they are anonymized or deleted.
  • Consents and revocations: retained for as long as necessary to demonstrate legal compliance, even after other data has been deleted.

Once retention periods expire, data is securely and irreversibly deleted or anonymized so that the user can no longer be identified. User requests for data deletion are processed within the legally required timeframes, in compliance with the mandatory retention obligations described above.

08

Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as the data subject, the following rights regarding the processing carried out by pk88:

Right of Access

Request confirmation that your data is being processed and obtain a full copy of all personal data pk88 holds about you.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated data, such as an incorrect address, phone number, or email on your account.

Right to Erasure

Request the deletion of data processed on the basis of consent or data that is no longer necessary, subject to mandatory legal retention periods.

Right to Data Portability

Request the portability of your personal data to another service or product provider, in a structured and commonly used format.

Right to Object

Object to processing carried out on the basis of legitimate interest when such processing infringes on your fundamental rights.

Consent Withdrawal

Withdraw consent given for processing based on this legal basis – such as marketing communications – at any time, at no cost.

To exercise any of these rights, send an email to suporte@pk88.express with the subject line "LGPD Request", including your full name, CPF, and the specific request. pk88 will respond within up to 15 business days. For complex requests, this period may be extended by a further 15 days, with prior notice.

If you believe your rights have not been properly upheld by pk88, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided under Article 18, §1 of the LGPD.

09

Minors

Pk88's services are intended exclusively for individuals aged 18 (eighteen) or older. pk88 does not intentionally collect personal data from users under 18 and does not permit registration or use of the platform by this age group.

The KYC verification process includes confirming the date of birth via an official document. Any account identified as belonging to a minor is immediately closed, and any deposited balance is returned.

If you become aware that someone under 18 has created a pk88 account, please contact us immediately at suporte@pk88.express. pk88 will take the necessary steps to close the account and delete the minor's data as a priority, in accordance with Art. 14 of the LGPD.

10

Contact, Data Protection Officer (DPO) and Updates

Pk88 has appointed a Data Protection Officer (DPO) as required by the LGPD, to serve as a communication channel between the company, its users, and the National Data Protection Authority (ANPD).

For any questions regarding privacy and personal data processing at pk88, you can reach us through the following channels:

  • DPO email: suporte@pk88.express (subject: "Privacy / DPO")
  • Live chat: available 24 hours a day, 7 days a week, in Portuguese, directly on the platform
  • WhatsApp: available at the number shown in the account support panel

This Privacy Policy may be updated periodically to reflect changes in data processing practices, new legal obligations, or improvements to pk88's processes. Significant changes will be communicated by email with at least 15 days' notice. The version currently in effect is always the one published on this page, with the last updated date shown at the top of the document.

Continued use of the pk88 platform after an updated Privacy Policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date at no cost.

How pk88 Handles Your Data Day to Day

Data privacy is one of the topics that raises the most questions among users of online platforms in Brazil, and for good reason. After all, when you create an account at a betting site like pk88, you are providing sensitive personal information: your CPF, banking details for Pix, mobile number, and the financial history of your transactions. It's only natural to want to know exactly what happens with that information.

The starting point is the LGPD – Brazil's General Data Protection Law (Law No. 13.709/2018), which came into force in September 2020 and established the rules for how companies operating in Brazil must collect, process, and protect the personal data of Brazilian users. pk88 has structured all of its data processing activities within the legal bases set out by the LGPD, meaning every piece of data we collect has a specific legal justification – we don't collect anything "just in case" or "in case it might be useful someday".

The largest volume of data pk88 collects is generated through your actual use of the platform: your bets on Brasileirão Série A, volleyball, e-sports, or live casino, deposits via Pix or card, and withdrawal requests. This data is necessary to operate the platform and forms the basis of the agreement between you and pk88. Without it, processing your bets or financial transactions simply would not be possible. This falls under the legal basis of contract performance provided for by the LGPD.

Another set of data we collect is used to meet legal obligations that are not discretionary for pk88. Law No. 9.613/1998 (anti-money laundering) requires platforms that handle money to verify user identities and retain transaction records for at least 5 years. For this reason, before releasing withdrawals above certain amounts, pk88 may request additional documents. This protects you from having your account used by third parties without your authorization and safeguards the Brazilian financial system as a whole.

One point that often raises questions is data sharing with third parties. pk88 works with partners to process payments – when you make a deposit via Pix through Nubank, Itaú, Bradesco, or Banco do Brasil, a PCI DSS certified payment gateway handles that transaction. This partner receives only the data strictly necessary to process that specific Pix – nothing beyond that, and always under contractual data protection obligations. pk88 does not sell information about your bets, gambling habits, or financial profile to advertisers. That is not part of the platform's business model.

On the technical side, pk88 continuously invests in information security. All communication between your phone or computer and the platform's servers is encrypted with TLS 1.3. Data stored in internal databases is encrypted at rest using AES-256. Internal access to user data follows the principle of least privilege — a support team member sees only what is needed to resolve your ticket and cannot access your full financial history without justification. Systems undergo periodic penetration testing and security audits.

Your rights as a data subject are real and enforceable. If you want to know exactly what data pk88 holds about you, just ask — we will respond within 15 days. If any data is incorrect, we will fix it. If you want to delete data that is no longer needed, we will do so within the limits of legal retention obligations. If you no longer want to receive promotional emails and special odds, one click in your account dashboard is all it takes to unsubscribe. The LGPD turned these rights into law, and pk88 takes that seriously.

Finally, about cookies: pk88 uses functional cookies to keep your session active and analytical cookies to understand how the platform is being used in aggregate. We do not use third-party cookies for advertising tracking or to sell your behavioral profile to external advertisers. The cookie consent banner, displayed on your first visit, lets you choose which cookie categories to accept beyond the essential ones.

Any questions about this Privacy Policy or how your data is handled at pk88 can be sent to suporte@pk88.express with the subject line "Privacy / DPO". Our specialized team will get back to you within 15 business days with all the information you need.

Privacy Questions at PK88

No. pk88 does not sell, rent, or share users' personal data with third parties for marketing or advertising purposes without your explicit consent. The only third parties with access to any portion of your data are payment processors (such as PCI DSS-certified gateways that handle Pix, boleto, and card transactions), technology infrastructure providers, and anti-fraud tools — all of which are contractually required to protect your information and not use it for any other purpose. If you receive marketing communications from pk88, it is because you gave consent at the time of registration, and you can withdraw that consent at any time from your account dashboard.

You can request the deletion of your personal data by emailing suporte@pk88.express with the subject line "LGPD Request – Data Deletion", including your full name and CPF. pk88 will respond within up to 15 business days, confirming which data has been deleted and which must be retained due to legal obligations. For example, financial transaction data must be kept for at least 5 years under anti-money laundering legislation — even after account closure. Data for which there is no retention obligation is securely and irreversibly deleted within the response period.

No. pk88 does not store full credit or debit card numbers on its servers. When you make a card deposit on the platform, your data is sent directly to a PCI DSS Level 1-certified payment gateway — the highest level of security certification in the payments industry. The data is tokenized by the gateway before any processing takes place, and pk88 receives only a reference token, not the card number itself. This means that even in a hypothetical security incident involving pk88's servers, your card data would not be exposed.

After account closure, pk88 retains different categories of data for varying periods in accordance with legal obligations: registration and identification data is retained for up to 5 years (anti-money laundering requirement); financial transaction history is retained for 5 years (tax obligations); support communications are retained for 2 years. After these periods, data is securely deleted or anonymized. Data for which there is no retention obligation — such as browsing preferences and marketing data — is deleted immediately upon account closure.

pk88 has a structured security incident response plan. In the event of an incident that could pose a risk or harm to users, pk88 will follow the protocol established by the LGPD: notifying the National Data Protection Authority (ANPD) within the legal deadline and communicating with affected users with clear information about what happened, which data was involved, and what measures were taken. Communication will be sent to the email address registered on the account. pk88 will continuously invest in security to minimize the likelihood of any incident, but should one occur, our commitment is to full transparency and immediate action to protect our users.
Your Data Is Safe at PK88

This Privacy Policy complies with the General Data Protection Law (LGPD – Law No. 13,709/2018). For questions or requests to access, correct, or delete your data, please contact us at suporte@pk88.express with the subject line "LGPD Request". You can also refer to our Terms and Conditions and our Responsible Gambling.

Secure and transparent platform

Your Data Protected, Your Bets Placed with Peace of Mind at PK88

Now that you know how pk88 looks after your information, it's time to enjoy everything the platform has to offer: live Brasileirão, volleyball, e-sports, casino, instant Pix, and a 100% welcome bonus on your first deposit.

Data protected by the LGPD 256-bit SSL on all transactions Pix via CPF key – no third parties 24/7 support in Portuguese
Português