Legal Document — Updated June 2026

CC22 Privacy Policy – Data Protection and LGPD

Know exactly what data CC22 collects, why we collect it, how we protect it, and what your rights as a data subject are. Full transparency, in Brazilian Portuguese, in compliance with the LGPD.

🔒SSL 256-bit encrypted data — CC22
📋Full LGPD Compliance — Law No. 13.709/2018 — CC22
🛡️Your data is never sold to third parties — CC22
💸Pix Deposit — Encrypted Transactions — CC22
⚽Brasileirão Série A Betting — Guaranteed Security — CC22
📱Mobile access with full privacy — CC22
🔒SSL 256-bit encrypted data — CC22
📋Full LGPD Compliance — Law No. 13.709/2018 — CC22
🛡️Your data is never sold to third parties — CC22
💸Pix Deposit — Encrypted Transactions — CC22
⚽Brasileirão Série A Betting — Guaranteed Security — CC22
📱Mobile access with full privacy — CC22
SSL 256
Encryption on All Transactions
LGPD
Compliance with Law No. 13.709/2018
0
Data Sold to Third Parties
15 days
Response Timeframe for Data Subjects
Last updated: June 2026 — Version 2.4

Our users' privacy is a genuine priority at CC22 — not just fine print in a footer that nobody reads. This Privacy Policy clearly explains what personal data CC22 collects when you use our platform, why we collect each type of data, how that data is protected, and what you can do to exercise your rights as a data subject. Read it carefully — you deserve to know exactly how your information is handled before you trust us with your account and your financial transactions.

This Policy applies to all CC22 users, regardless of how you access the platform: on your phone via Chrome or Safari, on your computer, or on any other device. By creating an account, making a Pix deposit, or simply browsing the platform, you confirm that you have read and understand how we handle your personal data. This Policy is an integral part of our Terms and Conditions.

1. Who We Are — Data Controller

CC22 is the controller of personal data collected through this platform, pursuant to the General Personal Data Protection Law (LGPD — Law No. 13.709/2018). This means CC22 determines what data is collected, for what purpose, and how long it is stored. To exercise any rights related to your data or to contact our Data Protection Officer (DPO), please use the email suporte@cc22.asia.

2. What Personal Data CC22 Collects

CC22 collects only the data strictly necessary for the purposes described in this Policy. Below are the categories of data we process:

Identification Data
  • Full legal name
  • CPF (Cadastro de Pessoas Físicas)
  • Date of birth
  • ID document number (RG, CNH, or passport)
  • Document photo (for KYC verification)
  • Selfie for identity verification
Contact Data
  • Email address
  • Mobile phone number
  • Full residential address (ZIP code, street, number, city, state)
  • Communication preferences (notifications and offers)
Financial Data
  • Pix key (CPF, email, phone number, or random key)
  • Deposit and withdrawal history
  • Payment method used (Pix, boleto, card, PicPay, Mercado Pago)
  • Bank of origin for transfers (Nubank, Itaú, Bradesco, Banco do Brasil, etc.)
  • Full betting and transaction history on the platform
Technical and Browsing Data
  • IP address
  • Browser type and version
  • Operating system and device model
  • Pages visited and session duration
  • Geolocation data (only when permitted by the user)
  • Cookies and session identifiers

3. How We Collect Your Data

CC22 collects your personal data through the following sources:

  • Platform registration: when you create an account by filling out the registration form with your name, email, CPF, and date of birth;
  • Identity verification (KYC): when you submit documents and a selfie to unlock withdrawals and full account features;
  • Financial transactions: automatically when you make deposits via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago;
  • Platform usage: automatically during browsing, via cookies, server logs, and similar technologies;
  • Customer support: when you reach out via live chat or email, the content of the conversation is recorded;
  • External sources: in some cases, we cross-check information you have provided against third-party databases for fraud prevention and regulatory compliance purposes (for example, CPF validation with the Receita Federal).

4. How CC22 Uses Your Personal Data

Every piece of data we collect has a specific, legitimate purpose. We do not collect information "just in case" or without a defined reason. Here is how we use your data:

  • Service provision: to create and manage your account, process deposits and withdrawals, record bets, and ensure the platform runs smoothly;
  • Identity verification: confirm that you are over 18 and that your information is accurate, fulfilling legal and regulatory obligations;
  • Fraud and money laundering prevention: monitor suspicious transactions, detect abnormal behavior, and protect the integrity of the platform;
  • Legal obligation compliance: to comply with requirements from the Banco Central do Brasil, the Receita Federal, the LGPD, and other regulations applicable to the betting market;
  • Communication: send transaction confirmations, security alerts, account updates, and — with your consent — personalized offers and promotions;
  • Customer support: to log and resolve requests, complaints, and inquiries submitted by you;
  • Experience personalization: tailor the content shown on the platform based on your gaming preferences — for example, featuring Brasileirão Série A matches if you frequently bet on football;
  • Product analytics and improvement: understand how users navigate CC22 to identify issues and opportunities to improve the platform.

5. Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a valid legal basis. At CC22, we process your data based on the following grounds established by law:

Legal Basis How We Apply It at CC22
Contract performance To create your account, process bets, handle Pix deposits and withdrawals — everything needed to provide the service you signed up for.
Legal obligation compliance To verify identity (KYC), prevent money laundering, and comply with Central Bank of Brazil regulations and Sports Betting legislation.
Legitimate interest For platform security, fraud prevention, behavioral analysis for abuse detection, and continuous product improvement.
Consent For sending marketing communications, personalized offers, and the use of non-essential cookies. You may withdraw this consent at any time.

6. Sharing Data with Third Parties

CC22 does not sell, rent, or trade your personal data with third parties under any circumstances. We only share data when required to deliver the service or to meet a legal obligation, and always with partners who uphold equivalent security and privacy standards:

  • Payment processors: to process transactions via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to complete the transaction;
  • Identity verification providers: to validate documents and confirm user identity during the KYC process;
  • Live casino game providers: to operate live tables (such as Evolution Gaming, Pragmatic Play Live, and Ezugi), which process technical session data required for the games to function;
  • Technology infrastructure: cloud servers and IT service providers that host and maintain the CC22 platform;
  • Public authorities: when required by law, court order, or investigation by a competent authority — such as the Federal Revenue Service, the Central Bank of Brazil, or law enforcement in cases involving financial crime.

All contracts with partners and suppliers include mandatory data protection clauses prohibiting the use of CC22 data for any purpose other than the one agreed upon.

We never sell your data: CC22 does not and will never have a business model based on monetizing users' personal data. Our only interest in collecting your data is to provide the best possible betting service in compliance with the law.

7. International Data Transfers

In some cases, CC22 users' personal data may be processed on servers located outside Brazil — for example, on cloud infrastructure operated by technology partners. When this occurs, CC22 ensures the transfer is carried out using appropriate protection mechanisms, such as standard contractual clauses or verification that the destination country offers a level of data protection equivalent to Brazil's LGPD. Under no circumstances is your data transferred to jurisdictions that lack minimum protection guarantees.

8. Data Security and Protection

CC22 applies robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper alteration:

  • SSL 256-bit encryption in all communications between your device and CC22's servers;
  • Encryption at rest for financial data and identity documents in storage;
  • Strict access controls: only CC22 employees with a specific operational need have access to sensitive data categories, and that access is audited;
  • Continuous monitoring of the platform to detect unauthorized access attempts and suspicious activity;
  • Secure authentication: passwords are stored using cryptographic hashing — not even the CC22 team has access to your password in plain text;
  • Periodic security testing: the platform undergoes regular security assessments, including penetration testing conducted by specialized external teams.

In the event of a security incident that may affect your personal data, CC22 is committed to notifying the National Data Protection Authority (ANPD) and the affected users within the timeframes established by the LGPD.

9. How Long We Retain Your Data

CC22 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by applicable law:

  • Active account data: retained for as long as your account remains active on the platform;
  • Financial data and transaction history: a minimum of 5 years after the last transaction, as required by anti-money laundering and Brazilian tax regulations;
  • Identity documents (KYC): a minimum of 5 years after account closure, for audit and regulatory compliance purposes;
  • Support records: a minimum of 2 years after the support interaction is closed;
  • Browsing data and technical logs: up to 12 months, unless needed for an ongoing security investigation.

Once the applicable retention period expires, your data is securely deleted or anonymized so that you can no longer be identified as the data subject.

10. Cookies and Tracking Technologies

CC22 uses cookies and similar technologies to ensure the platform runs smoothly and to improve the user experience. We use three categories of cookies:

10.1 Strictly necessary cookies

Essential for the platform's basic operation — such as keeping your session active after login, processing transactions, and ensuring secure browsing. These cookies cannot be disabled without affecting CC22's core functionality.

10.2 Functional cookies

These allow the platform to remember your preferences — such as your selected language, favorite sports, and odds display format. They improve your experience without collecting data for marketing purposes.

10.3 Analytics and marketing cookies

Used with your consent to understand how users navigate the platform and to personalize communications and offers. You may decline these cookies in your account's privacy settings with no impact on CC22's core features.

Manage cookies: You can manage your cookie preferences at any time through your CC22 account settings or your browser settings. Disabling analytics and marketing cookies does not affect your ability to bet, deposit, or withdraw on the platform.

11. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a robust set of rights that CC22 fully respects. See what they are and how to exercise them:

Your Right What This Means in Practice
Access You may request a complete copy of all personal data CC22 holds about you, in a readable format.
Correction If any of your information is incorrect or out of date, you can request a correction at any time — such as your address, phone number, or email.
Deletion You may request the deletion of your personal data. CC22 will honor that request unless retention is required by law or for defense in legal proceedings.
Consent withdrawal For data processed based on your consent (such as marketing emails), you may withdraw your authorization at any time, at no cost and without needing to give a reason.
Portability You may request your data in a structured, interoperable format to transfer it to another service, where technically feasible.
Blocking/Anonymization You may request the blocking or anonymization of data that is unnecessary, excessive, or processed in violation of the LGPD.
Data sharing information You have the right to know which public and private entities CC22 has shared your data with.
Objection You may object to data processing carried out on the basis of legitimate interest when you believe your fundamental rights and freedoms override CC22's interest.

To exercise any of these rights, please contact the CC22 Data Protection Officer (DPO) by email at suporte@cc22.asia, identifying yourself as the data subject and describing your request. CC22 has 15 calendar days to respond. If the request is complex or involves a large volume of data, this deadline may be extended by an additional 15 days, with prior notice and justification provided to the user.

12. Minors

CC22 is a platform restricted to users aged 18 and over. We do not intentionally collect personal data from minors. If you believe a minor has created an account or provided data to CC22, please contact us immediately at suporte@cc22.asia so the account can be closed and the data deleted. CC22 uses mandatory identity verification precisely to prevent minors from accessing the platform.

13. Changes to This Privacy Policy

CC22 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or services offered. When significant changes occur, you will be notified by email at the address registered on your account, and the new version will be published on the platform with a notice before it takes effect. The date of the last update is always shown at the top of this document. Continued use of the platform after changes are published constitutes acceptance of the updated Policy.

14. Contact, DPO & Privacy Channel

CC22 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. For any questions related to privacy and data protection, please use the channels below:

  • DPO email: suporte@cc22.asia (subject: "Privacy — LGPD")
  • Live chat: available 24 hours a day on the platform, with responses in under 2 minutes in Brazilian Portuguese

If you are not satisfied with CC22's response, you also have the right to file a complaint directly with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.

Contact our privacy team: If you have any questions about this Policy or wish to exercise your rights as a data subject, please send an email to suporte@cc22.asia or use the live chat available 24 hours a day. We respond in Brazilian Portuguese.

How CC22 Protects Your Privacy in Practice

Not just words on paper — these are real measures that work every single day

256-Bit SSL Encryption

All communication between your phone or computer and CC22's servers is encrypted using the same standard adopted by banks. Your login credentials, Pix transactions, and personal information are fully protected in transit.

Full LGPD Compliance

CC22 operates in full compliance with Law No. 13,709/2018. We have a designated DPO, a defined legal basis for each data processing activity, and documented procedures to handle your requests within 15 days.

Zero Data Selling

CC22 never sells, rents, or transfers your personal data to third parties for commercial purposes. Your data is used exclusively to provide the betting service and meet legal obligations — nothing more.

Full Control in Your Hands

Access, correct, export, or request deletion of your data at any time directly through CC22 support. Your rights under the LGPD are real and can be exercised without red tape, at no cost, and without the need for a lawyer.

Only What's Necessary, Nothing More

CC22 collects only the data strictly necessary for each purpose — the data minimization principle established by the LGPD. We do not ask for information we do not need, and every piece of data collected has a clear, documented reason.

Incident Notification

If any security incident occurs that may affect your data, CC22 will notify the ANPD and all impacted users within the legally required timeframes — with full transparency about what happened and what steps were taken.

Privacy FAQ at CC22

What users most often ask about how we handle their data

No. CC22 does not share users' personal data with other betting platforms, casinos, or any company in the same industry. The only sharing we do is with direct operational partners — such as payment processors (to complete your Pix or boleto transaction) and identity verification providers (for KYC) — and solely for the purposes described in this Policy. All of these partners are contractually prohibited from using your data for any other purpose.

The identity verification process (KYC — Know Your Customer) is a requirement under Brazilian betting market regulations and anti-money laundering rules. It ensures three important things: that you are over 18, that you are the real person behind the account (preventing identity fraud), and that financial transactions are legitimate. Without this verification, anyone could use someone else's information to open an account and move money anonymously — putting both genuine users and the integrity of the platform at risk. Your documents are stored with encryption and accessed only by CC22's compliance team.

Yes, you can request the deletion of your personal data from CC22 at any time by emailing suporte@cc22.asia. CC22 will honor the request within the bounds of the law: some data must be retained for the minimum period required by Brazilian legislation — such as financial transaction records, which must be kept for at least 5 years in accordance with Central Bank regulations and anti-money laundering rules. When CC22 is legally unable to immediately delete certain data, it will inform you exactly which data is being retained, for how long, and on what legal grounds. Once the legal retention period expires, the data is securely deleted or anonymized.

Your Pix key and the banking details linked to your CC22 account are stored with end-to-end encryption on the platform's servers. This data is never exposed in plain text — not even to CC22's internal team, outside of the specific withdrawal processing workflow. CC22 also applies the principle of least privilege: only members of the financial team with a direct operational need have access to this information, and every access is logged and audited. If you suspect your Pix key has been compromised, contact support immediately via live chat so your account can undergo a security review.

CC22 may use your betting history to personalize the communications we send — for example, highlighting Brasileirão Série A promotions if you frequently bet on football, or sharing updates about the live casino if you regularly play blackjack. This personalization only happens based on your consent, which you give when creating your account and can withdraw at any time in your account's communication settings or by emailing suporte@cc22.asia. Withdrawing consent for marketing communications has no effect on your account's functionality or the processing of your bets and transactions.

That's a fair question. LGPD compliance at CC22 shows up in concrete practices: we have a designated DPO reachable at suporte@cc22.asia, we maintain internal records of all data processing activities, we conduct impact assessments for new processes involving personal data, we provide regular data protection training to our team, and we carry out periodic security audits. When you exercise any right — access, correction, deletion — you will receive a real response within 15 days, not an automated email. If you feel your rights have not been respected, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the LGPD's supervisory body in Brazil.

Your privacy protected, your bet secured

CC22 was built with security and privacy from day one. Sign up, deposit via Pix, and bet on the Brasileirão knowing your data is in good hands.

Full LGPD Compliance · 256-bit SSL · 24/7 support in Portuguese · Minimum deposit R$ 20.00

+18 | Gamble responsibly | Responsible Gambling

Português