Data Protection

Hh888 Privacy Policy – Data Protection and LGPD

A hh888 handles your data with care and transparency. Here you'll find everything about what we collect, how we use it, and what your rights are as a personal data subject — written in plain language, no legal jargon.

Last updated: January 2026 Language: Portuguese (Brazil)
LGPD Compliant SSL 256-bit Your guaranteed rights
Sections in This Document
1.Who Is the Data Controller
2.Data Collected & Purpose
3.Legal Basis for Processing
4.Data Sharing
5.Security & Storage
6.Your Rights as a Data Subject
7.Cookies and Tracking

How hh888 Protects Your Data

Six pillars that keep your information secure during every session on the platform

256-Bit SSL Encryption
All communication between your phone or computer and hh888's servers is encrypted with 256-bit SSL — the same standard used by banks such as Itaú, Bradesco, and Nubank. Your registration data, Pix transactions, and betting history are all transmitted with complete security.
Full LGPD Compliance
hh888 operates in strict compliance with the General Data Protection Law (Law No. 13.709/2018). All collection, use, and storage of personal data has a defined legal basis, a clear purpose, and a retention period limited to what is necessary.
Two-Factor Authentication
hh888 offers two-factor authentication (2FA) for all players. With 2FA enabled, even if your password is compromised, no one can access your account without the code sent to your phone. We strongly recommend enabling this feature in your account's security settings.
No Sharing Without Consent
hh888 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Any sharing — limited to essential operational partners — takes place solely on a contractual basis and for the purposes described in this Policy, never beyond that.
Your Rights, Always Within Reach
You can access, correct, export, or request the deletion of your data at any time through hh888 support. Assistance is available in Portuguese, 24 hours a day — no red tape, no excessive wait times.
Continuous Security Monitoring
hh888's security team monitors systems around the clock to detect unauthorized access attempts, behavioral anomalies, and potential vulnerabilities. Any incident is handled through a dedicated response protocol, with notification to the affected data subject.

This Privacy Policy describes how hh888 collects, uses, stores, and protects the personal data of its players, in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018). By creating an account or using any hh888 service, you confirm that you have read and understood this Policy.

1Who Is the Data Controller

For the purposes of the LGPD, the controller of personal data collected on the platform hh888 is the company responsible for operating the hh888.life website and the brand's official apps. The controller defines the purposes and means by which Users' personal data are processed.

A hh888 has appointed a Data Protection Officer (DPO), responsible for handling communications from data subjects and the Brazilian National Data Protection Authority (ANPD). To contact hh888's DPO, send an email to suporte@hh888.life with the subject line "Data Privacy – DPO".

All personal data processing operations carried out by hh888 are recorded in the Data Processing Operations Register, as required by the LGPD, and may be presented to the ANPD upon regulatory request.

2Personal Data Collected

A hh888 collects the following types of personal data during registration, identity verification, and use of the platform:

Registration Data
  • Full name as shown on official ID
  • CPF (Cadastro de Pessoas Físicas)
  • Date of birth
  • Full residential address (street, number, complement, neighborhood, city, state, ZIP code)
  • Email address
  • Mobile number with area code
Identity Verification Data (KYC)
  • Photo ID document (RG, CNH, or passport)
  • Recent proof of address (issued within the last 3 months)
  • Selfie for identity confirmation, when requested
Financial Data
  • Pix key linked to the account holder's CPF
  • Last four digits of the credit or debit card used for deposits
  • Deposit and withdrawal history (dates, amounts, methods)
Platform Usage Data
  • Sports betting history (events, markets, odds, amounts, results)
  • Session history in slots and casino games
  • Access IP address
  • Device type, operating system, and browser or app version
  • Date, time, and duration of each session
  • Support interaction data (chat messages, emails)

hh888 collects only the data strictly necessary to provide its services and meet applicable legal obligations. No sensitive data — such as biometrics, racial origin, religious beliefs, or health information — is collected by the platform.

3Data Processing Purpose

A hh888 uses collected personal data exclusively for the following purposes:

Purpose Data Used
User account creation and management Full name, CPF, email address, phone number, date of birth
Identity verification (KYC) and fraud prevention Documents, CPF, proof of address
Processing of deposits and withdrawals via Pix, boleto, and card Pix key, financial data, transaction history
Provision of Sports Betting and casino services Betting history, account balance
Customer support and dispute resolution Contact details, interaction history
Compliance with legal and regulatory obligations CPF, financial data, transaction history
Experience personalization and delivery of relevant communications Usage history, recorded preferences
Platform security and anti-money laundering IP, device, behavioral patterns, transactions

A hh888 does not use your data for third-party advertising, sell it to marketing companies, or apply it to any purpose not listed above. If the platform needs to use your data for a new purpose not covered by this Policy, you will be informed and, where required, asked for your consent.

4Legal Basis for Processing

As required by the LGPD, each data processing operation carried out by hh888 has a defined legal basis. The applicable legal bases are:

  • Contract performance (art. 7, V of the LGPD): the data processing required to create your account, handle deposits and withdrawals, and provide the Sports Betting and casino services you signed up for.
  • Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), transaction monitoring for anti-money laundering purposes, and record retention as required by Brazilian law.
  • Legitimate interest (Art. 7, IX): fraud prevention, platform security, and service improvement based on usage history — provided these interests do not override your fundamental rights and freedoms.
  • Consent (art. 7, I): the sending of marketing communications, promotions, and news from the hh888, for which you may withdraw consent at any time through your account dashboard or by contacting support.
5Data Sharing with Third Parties

A hh888 does not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes. Data sharing occurs only in the following cases, always on a contractual basis and for the purposes described in this Policy:

  • Payment processors: to enable deposits and withdrawals via Pix, boleto, credit and debit card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to process each transaction.
  • Identity verification providers: specialized KYC companies that assist with document validation during the account verification process. They operate under data processing agreements with obligations equivalent to those of hh888.
  • Game and casino providers: game studios (such as Pragmatic Play, PG Soft, and Hacksaw Gaming) receive only the minimum session data required to run licensed games. They do not receive any personally identifiable information beyond the anonymous session identifier.
  • Competent authorities and court orders: hh888 may share data with the Receita Federal, the Banco Central, COAF (Financial Activities Control Council), and other competent authorities when required by law, regulation, or a valid court order in Brazil.

All third parties that receive personal data processed by hh888 are subject to contractual confidentiality and data protection obligations equivalent to or greater than those in this Policy. hh888 conducts periodic due diligence on its partners to ensure compliance.

6Data Storage and Security

The personal data collected by hh888 are stored on servers with robust technical and organizational controls to ensure the confidentiality, integrity, and availability of information. The key security measures implemented include:

  • Encryption in transit: 256-bit SSL/TLS across all communications between Users' devices and hh888 servers.
  • Encryption at rest: sensitive data stored in encrypted format in our databases.
  • Role-based access control (RBAC): only staff members with a verified operational need are granted access to personal data, and every access is recorded in an audit log.
  • Multi-factor authentication for staff: all internal access to hh888 systems requires multi-factor authentication.
  • Penetration testing and security audits: conducted periodically by specialized third-party firms to identify and remediate vulnerabilities before they can be exploited.
  • Continuous monitoring: automated anomaly detection systems that monitor for unauthorized access attempts, operating 24 hours a day.

A hh888 adopts a privacy by design approach — privacy is built in from the conception of every new platform feature or functionality, not added as an afterthought.

7Data Retention and Deletion

A hh888 retains personal data only for as long as strictly necessary for the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law:

  • Active account data: retained for the full duration of the account and available to the User at any time in the settings dashboard.
  • Financial data and transaction history: retained for a minimum of 5 years after account closure, as required by anti-money laundering legislation (Law No. 9.613/1998) and Banco Central regulations.
  • Access records and audit logs: retained for a minimum of 6 months, as required by the Brazilian Internet Civil Framework (Law No. 12.965/2014).
  • KYC and identity verification data: retained for the period required by the applicable regulatory standards for the sector.

Once retention periods expire, data is securely and permanently deleted from the systems of hh888, so that they cannot be recovered. Data that is the subject of legal proceedings or a regulatory investigation is retained until the matter is definitively concluded.

8Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by the hh888, the following rights, which may be exercised at any time through support:

Right to Access
Request confirmation that your data is being processed and obtain a copy of the personal data hh888 holds about you.
Right to Rectification
Request the correction of incomplete, inaccurate, or outdated data in your hh888 account.
Right to Erasure
Request the deletion of data that is unnecessary or processed in violation of the LGPD, subject to applicable legal retention periods.
Right to Data Portability
Request an export of your personal data in a structured, interoperable format by submitting a formal request to the DPO.
Right to Withdraw Consent
Withdraw consent given for processing based on this legal basis (such as marketing communications) at any time, with no penalty.
Right to Information
Obtain information about the entities with which hh888 has shared your data and the legal bases used for each processing operation.

To exercise any of these rights, contact hh888 via live chat or by email at suporte@hh888.life with the subject line "LGPD Rights – [request type]". The response deadline is up to 15 business days, as set out in art. 18 of the LGPD. Complex requests or those involving large volumes of data may be subject to an extended deadline, with prior notice to the User.

If you believe hh888 has not adequately responded to a request relating to your rights as a data subject, you may file a complaint with the National Data Protection Authority (ANPD) through the gov.br/anpd portal.

9Cookies and Tracking Technologies

A hh888 uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect analytical data. The types of cookies used are:

  • Essential cookies: required for the platform to function — session authentication, bet slip state management, and basic interface preferences. They cannot be disabled without affecting your ability to use the platform.
  • Performance and analytics cookies: collect anonymous data on how Users interact with the platform — pages visited, session duration, errors encountered. Used by the hh888 team to identify improvements. Can be disabled without any impact on platform use.
  • Functionality cookies: remember User preferences — such as language, odds format, and favorite sports — to personalize the experience on future visits.

A hh888 does not use third-party tracking cookies for other companies' advertising purposes. There is no integration with third-party ad networks that track User behavior across other websites.

You can manage cookie settings through the privacy preference panel available in the platform footer, or through your browser's or app's native settings. Disabling essential cookies may prevent access to certain features of the hh888.

10Data of Minors

The services of hh888 are intended exclusively for users aged 18 and over residing in Brazil. The platform does not intentionally collect personal data from individuals under 18.

The registration process requires a date of birth, and the system automatically blocks any attempt to register by a user under 18. The identity verification (KYC) process includes age confirmation via an official photo ID.

If the hh888 identify that data from a minor has been inadvertently collected, the information will be immediately deleted and access to the platform will be blocked. If you become aware that a minor is using hh888's services, please contact support immediately so the matter can be handled as a priority.

11International Data Transfer

Some of hh888 — such as cloud infrastructure providers and gaming technology companies based outside Brazil — may process data on servers located in other countries. When this occurs, hh888 applies the following safeguards:

  • Data processing agreements with standard protection clauses equivalent to or exceeding those required by the LGPD.
  • Data transfers only to countries with an adequate level of data protection recognized by the ANPD, or with specific documented safeguards in place.
  • Data protection impact assessment (DPIA) for transfers that may pose a high risk to data subjects.

A hh888 never transfers data to countries that do not provide adequate protection guarantees, in accordance with the criteria established by the LGPD and the ANPD. The list of countries to which data may be transferred is available upon request to the DPO.

12Security Incidents and Data Breaches

A hh888 maintains an up-to-date Incident Response Plan (IRP) that defines the procedures to be followed in the event of a personal data breach. Should an incident occur that poses a relevant risk or harm to data subjects:

  • Hh888 will notify the ANPD of the incident within 72 hours of confirmation, in accordance with applicable regulatory guidelines.
  • Affected Users will be notified directly by email and/or in-app notification, with details on the nature of the incident, the data involved, the measures already taken, and recommended protective actions.
  • A detailed report of the incident, its causes, and the corrective measures taken will be documented and retained for audit purposes.

A hh888 conducts periodic incident response simulations to ensure the team is prepared to act quickly and effectively in real situations. If you identify or suspect any vulnerability on the platform, report it immediately to support or to the DPO at suporte@hh888.life.

13Changes to This Privacy Policy

A hh888 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Significant changes will be communicated at least 30 days in advance by email and via an in-platform notification.

The date of the last update to this Policy is always shown at the top of this document and in the page metadata section. Continued use of the platform after a new version of the Policy takes effect constitutes acceptance of the changes made.

Previous versions of this Policy are available upon request to the DPO for historical reference. If you do not agree with the changes made, you may request account closure and deletion of your data as described in Section 8 of this Policy.

14Contact, DPO & Privacy Channel

To exercise your rights as a data subject, ask questions about this Policy, or submit a privacy-related complaint, please contact hh888 through the following channels:

  • Live chat: available 24 hours a day, 7 days a week, within the hh888.life platform. Average response time: under 2 minutes.
  • Email — Privacy Channel: suporte@hh888.life with the subject line "Data Privacy – [request type]"
  • Email — DPO: suporte@hh888.life with the subject line "Data Privacy – DPO"

Support is provided in Brazilian Portuguese. The response deadline for data subject rights requests is up to 15 business days. For general privacy questions, the support team responds via chat within minutes.

If you do not receive a satisfactory response from hh888 within the stipulated timeframe, you may contact the National Data Protection Authority (ANPD) through the gov.br/anpd portal to file a complaint.

Privacy in Practice: What Changes for You at hh888

Privacy policies tend to be the kind of document everyone has to accept but few people actually read. At the hh888, the goal is different — to write about data protection in a way that Brazilian players can genuinely understand what happens to their information, without needing a law degree to follow along. So let's get straight to the point: what this actually means for you in practice.

When you create an account on hh888, provides basic information such as full name, CPF, email address, and phone number. This data is used to create your account, process payments via Pix, and confirm that you are 18 or older — a legal requirement to use the platform. hh888 does not use your CPF for any purpose beyond what is described in this Policy, and never shares that information with credit bureaus, marketplaces, or any other third party not directly involved in the operation of the platform.

Betting history is another common point of confusion. The hh888 records every bet you place — including the event, the market selected (match result, over/under, both teams to score), the odds, the stake, and the outcome. This data is used internally to calculate your account balance, process payments correctly, resolve disputes, and in some cases detect behavioral patterns that may indicate problem gambling — a well-being priority for hh888.

Why Does hh888 Require Identity Verification?

Identity verification — known in the industry as KYC (Know Your Customer) — is not optional for online Sports Betting and casino platforms operating in Brazil. It is a legal requirement to prevent money laundering, fraud, and access by minors. The Central Bank and anti-money laundering legislation (Law No. 9.613/1998) require companies in the financial and entertainment sectors handling monetary transactions to know and verify their customers' identities.

In practice, at the hh888, this means your first withdrawal requires submission of a photo ID (RG, CNH, or passport) and recent proof of address. The process is completed entirely within the platform — no need to send documents by email or other insecure channels. Documents are reviewed by hh888's compliance team within 24 business hours. Once approved, your verification remains valid permanently — you won't need to repeat the process for future withdrawals.

Documents submitted for verification are stored in encrypted form and can only be accessed by members of the compliance team at hh888 that have an operational need to do so. All access is recorded in an audit log. After the legally required retention period, documents are securely and permanently deleted.

Your Data and Pix: How It Works at hh888

Pix is the preferred payment method for Brazilian players at the hh888, and for good reason: it's instant for deposits, processes withdrawals in up to 5 minutes, and is available 24 hours a day, every day. From a privacy standpoint, when you use Pix at hh888, the platform records the Pix key used (which may be your CPF, email address, phone number, or random key) and the associated transaction history.

This financial data is necessary to process withdrawals, confirm that funds have reached the correct account, and — should any issue arise — provide a complete transaction trail. The hh888 does not store full credit or debit card details — when you use this payment method, only the last four digits are recorded for transaction identification purposes. Payment processing is handled directly by the partner gateway, which operates under the PCI DSS standard.

If you have any specific questions about how your data is handled at hh888, or if you wish to exercise any of the rights guaranteed under the LGPD, support is available 24 hours a day in Portuguese — via live chat within the platform or by email at suporte@hh888.life. No question is too small when it comes to the security of your information.

Security & Compliance at hh888

Technical and legal standards that protect your data in every interaction with the platform

LGPD Compliant
SSL 256-bit
2FA Available
DPO 24×7 PT
Periodic Audit
Regulated License

Frequently Asked Questions about Privacy at hh888

The most common data protection questions our support team receives

No. hh888 does not sell, rent, or share your personal data with third parties for commercial or advertising purposes. Data sharing occurs only with essential operational partners — such as payment processors and KYC providers — and solely on a contractual basis, for the purposes described in this Policy. None of your data is passed to ad networks or marketing companies without your explicit consent.

Contact hh888 support via live chat or by email at suporte@hh888.life with the subject line "Data Privacy – Deletion". hh888 will respond within 15 business days and will process the deletion of any data not subject to legal retention periods. Financial and transaction data must be retained for a minimum of 5 years under Brazilian anti-money laundering legislation — this is a legal requirement, not a choice made by hh888.

Yes. You can access your data directly through your hh888 account dashboard — betting history, transactions, registration details, and privacy settings are all available there. To request a full export of all personal data stored by hh888, submit a formal request to the DPO at suporte@hh888.life with the subject line "Data Privacy – Portability". Response time is up to 15 business days.

No. hh888 does not use third-party tracking cookies to monitor User behavior on other websites or platforms. The cookies used are essential to platform operation, internal performance, and functionality to personalize the experience within hh888. There is no integration with third-party ad networks that perform cross-site tracking.

After account closure, hh888 retains financial data and transaction history for the minimum period of 5 years required by anti-money laundering legislation. Registration data and usage history not subject to a legal retention period are securely deleted. You may request detailed information about what is retained and for how long by emailing the DPO.

Marketing communications are sent based on your consent, which may be withdrawn at any time. Go to the notification settings in your hh888 account dashboard and turn off marketing communications via email and/or push. Alternatively, click the "Unsubscribe" link in any promotional email or contact support via live chat. Withdrawing your marketing consent does not affect the receipt of important operational communications, such as transaction confirmations and security alerts.
Terms and Conditions – General Rules of Use of hh888

This Privacy Policy should be read together with the Terms and Conditions of hh888, which govern the general use of the platform, including rules on betting, bonuses, deposits, and withdrawals via Pix. In the event of any conflict between the two documents on privacy matters, this Policy prevails.

Read the full Terms & Conditions →

Your Data Protected, Your Experience Guaranteed

Hh888 treats its players' privacy with the same seriousness it applies to processing a Pix withdrawal. Create your free account and play with confidence that your information is in safe hands.

+18 only. Gamble responsibly. Betting involves the risk of financial loss.

Português