Data Protection – LGPD

Privacy Policy of 2uuuu – Your Data, Protected

2uuuu takes your personal data seriously. Here we explain what we collect, how we use it, who we share it with, and what rights you have under the LGPD.

Last updated: January 1, 2026 LGPD – Law No. 13,709/2018

How 2uuuu Looks After Your Data

Six concrete commitments that guide our entire privacy policy and the way we handle personal information.

End-to-End Encryption

All connections to 2uuuu use 256-bit SSL. Data in transit and at rest is encrypted to banking-grade standards, ensuring no personal information travels unprotected.

Full LGPD Compliance

2uuuu operates in full compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018). You have all rights guaranteed by law: access, correction, deletion, and portability of your data.

Zero Data Selling

2uuuu does not sell users' personal data to third parties under any circumstances. Your information is used solely to operate your account, process payments, and fulfill legal obligations.

Minimal and Necessary Data Collection

We collect only the information strictly necessary for you to use the platform safely. Nothing beyond what is needed to maintain your account, process your Pix transactions and comply with regulatory requirements.

Restricted & Audited Access

Your data is accessed only by 2uuuu team members who genuinely need it to perform their duties. All access is logged and regularly audited to prevent misuse.

Your Rights, Easy to Exercise

Want to access, correct or delete your data? Simply send an email to contato@2uuuu.net. Our team responds within 48 hours and fulfills your request within the legal deadline of 15 business days.

This Privacy Policy describes how 2uuuu collects, uses, stores, and protects your personal information. By creating an account or using any service on the platform, you confirm that you have read and understood this document. Please read it carefully — we wrote it in plain language, free of unnecessary legal jargon.

1Introduction

The 2uuuu is a Sports Betting and online casino platform exclusively serving the Brazilian market. We take data protection seriously — not just because the law requires it, but because we understand that user trust is what sustains any platform over the long run.

This policy was drawn up in compliance with Brazil's General Data Protection Law (LGPD, Lei nº 13.709/2018) and applies to all personal data processed by 2uuuu in connection with use of the platform, including the website, mobile app, and all services offered.

The concept of "personal data" used here follows the LGPD definition: any information relating to an identified or identifiable natural person. This includes your name, CPF, email address, mobile number, banking details used for Pix or TED, IP address, and any other information that allows you to be identified directly or indirectly.

2uuuu acts as the controller of its users' personal data, as defined in article 5, item VI, of the LGPD. All decisions about how and why your data is processed are made by 2uuuu, which is committed to doing so responsibly, transparently, and strictly within the legitimate purposes described in this policy.

2Data We Collect

The 2uuuu collects only the information necessary to operate the platform, process payments, and meet legal obligations. The table below summarizes the main types of data collected and the point in your interaction with the platform at which each is obtained.

Data Type Examples When It Is Collected
Identification data Full name, CPF, date of birth, government-issued ID (RG or CNH) Account Registration & Identity Verification (KYC)
Contact data Email address, mobile number, residential address Registration and profile updates
Financial Data Pix key, card details (processed by certified gateways), bank account details for TED Deposits & withdrawals
Platform usage data Betting history, games accessed, session duration, game preferences During Platform Use
Technical Data IP address, browser type and version, operating system, device identifier Every access to the platform
Communication data Messages exchanged with support via chat or email When you contact 2uuuu

2uuuu does not collect sensitive data, such as health information, sexual orientation, religious beliefs, or political affiliation. Data from users under 18 is never collected — any account identified as belonging to a minor is closed immediately.

Credit and debit card data is processed exclusively by PCI-DSS certified payment gateways. The 2uuuu does not store full card numbers on its own servers — only identification tokens generated by the gateway.

3How We Use Your Data

The data collected by the 2uuuu are used exclusively for the purposes described below. No data is used for purposes incompatible with the reason it was collected.

  • Operate and maintain your account: create, manage and authenticate your account on the platform, process bets, calculate results and maintain your transaction history;
  • Process payments: process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago and TED to banks such as Nubank, Itaú, Bradesco and Banco do Brasil;
  • Identity verification (KYC): confirm that you are who you say you are and that you meet the minimum eligibility requirements, including being of legal age;
  • Fraud prevention and anti-money laundering: monitor transactions and usage patterns to identify suspicious activity and fulfill our legal anti-money laundering (AML) obligations;
  • Customer Support: answer your questions, resolve issues and keep a history of your interactions with our team;
  • Relevant communications: send notifications about your account, transactions, changes to our terms, and — when you opt in — promotional communications about events and offers;
  • Platform improvement: analyze usage patterns in aggregated, anonymized form to improve the platform experience, identify technical issues and develop new features;
  • Compliance with legal obligations: respond to requests from competent regulatory, judicial, or governmental authorities, in accordance with Brazilian law.

2uuuu does not use your data to build behavioral profiles outside the platform context, does not sell it to advertisers, and does not share it with third parties for direct marketing purposes.

4Legal Basis for Processing

All personal data processing carried out by the 2uuuu has a specific legal basis provided for under the LGPD, pursuant to Article 7 of Law No. 13,709/2018. The main legal bases used are:

  • Contract performance (art. 7, V): most of the data we collect is necessary for 2uuuu to deliver the contracted services — operating your account, processing bets and executing financial transactions. Without this data, the service simply cannot function;
  • Compliance with a legal or regulatory obligation (art. 7º, II): data such as CPF, identity documents, and financial transaction records are collected and retained to fulfill legal obligations, including regulations from the Central Bank of Brazil and anti-money laundering requirements;
  • Legitimate interest (art. 7, IX): technical data such as IP addresses and access logs are processed on the basis of 2uuuu's legitimate interest in ensuring platform security, detecting fraud, and preventing unauthorized access. This interest is always balanced against your rights as a data subject;
  • Consent (art. 7, I): promotional communications by email or SMS are sent only with your express consent, which can be withdrawn at any time via the unsubscribe link or by contacting support.

Where the legal basis for processing is consent, you may withdraw it at any time without affecting any processing already carried out. Withdrawal can be done directly in your account settings or by emailing contato@2uuuu.net.

5Data Sharing

The 2uuuu does not sell personal data. Full stop. However, to operate the platform, we do need to share certain data with partners and service providers. This is done in a controlled manner, always under contracts that guarantee proper data handling in accordance with the LGPD.

The third parties with whom we may share data are:

  • Payment processors: PCI-DSS certified gateways that process deposits and withdrawals via Pix, card, boleto, PicPay, and Mercado Pago. They receive only the data necessary to complete the transaction;
  • Identity verification providers: services that assist in verifying your CPF and documents during the KYC process, in compliance with Banco Central do Brasil regulations;
  • Casino game providers: for live casino games, slots, and crash games to function properly, minimal session data is shared with the certified providers that supply these games;
  • IT Infrastructure Providers: cloud hosting and cybersecurity companies that keep the platform running. All operate under confidentiality agreements and security standards equivalent to or higher than those of 2uuuu;
  • Public authorities: the Central Bank of Brazil, the Federal Revenue Service, the Ministry of Finance, and the Judiciary may request data under Brazilian law. 2uuuu complies with these requests within the legal limits and notifies the user whenever possible;
  • Anti-fraud analysis services: systems that analyze behavioral patterns to identify fraudulent activity and protect the platform and all its users.

Any company that accesses 2uuuu user data as a data processor is contractually required to handle it in accordance with the LGPD and 2uuuu's instructions. We do not authorize the use of your data for those third parties' own purposes.

6Cookies & Tracking

The 2uuuu uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and analyze site usage in aggregate form. The types of cookies used are:

  • Essential cookies: required for the basic operation of the platform, such as keeping your session active after login and remembering basic usage preferences. These cookies cannot be disabled without affecting the platform's functionality;
  • Performance and analytics cookies: collect information about how users interact with the platform — which pages are visited most, which features are used most, and where technical errors occur. Data is used in aggregate, anonymized form to improve the platform;
  • Functionality cookies: allow the platform to remember your preferences, such as language, odds display settings, and favorite sports;
  • Security cookies: help detect suspicious activity, such as unauthorized access attempts and behavior associated with fraud.

You can manage cookie preferences at any time in your browser settings. Disabling non-essential cookies may limit certain platform features. 2uuuu does not use cookies to track user behavior outside the platform.

7Data Security

The 2uuuu implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The key security measures in place include:

  • 256-bit SSL/TLS encryption on all connections to the platform;
  • Encryption of sensitive data at rest on our servers;
  • Two-factor authentication (2FA) available for all users;
  • Role-based access control: each team member can only access the data required for their role;
  • Continuous monitoring for suspicious access attempts and cyberattacks;
  • Penetration testing and security audits conducted regularly by specialized firms;
  • PCI-DSS certification for card payment processing;
  • Security incident response plan with notification to the National Data Protection Authority (ANPD) and affected data subjects within the timeframes set out by the LGPD.

In the event of a security incident that may affect your data, the 2uuuu will notify you by email as soon as possible, describing what happened, which data was affected and what steps were taken to mitigate the risks.

8Data Retention

The 2uuuu retains your personal data for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum retention periods required by Brazilian law.

  • Active account data: retained for the full duration of your account and used to operate the contracted services;
  • Financial data and transaction records: retained for a minimum of 5 (five) years after account closure, as required by Brazilian tax law (CTN) and Banco Central do Brasil regulations on anti-money laundering;
  • Identity verification data (KYC): retained for a minimum of 5 (five) years after account closure, as required by regulatory law;
  • Access logs and technical data: retained for up to 6 (six) months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), and may be extended in the event of a judicial or regulatory investigation;
  • Support communications: retained for up to 2 (two) years after account closure for the purpose of resolving any potential disputes.

Once retention periods expire, data is securely and irreversibly deleted or anonymized so that you can no longer be identified as the data subject.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that the 2uuuu is committed to respecting and facilitating. To exercise any of these rights, simply contact us at contato@2uuuu.net or via live chat. We respond within the legal deadline of 15 calendar days.

Right of Access

Request a complete copy of all personal data 2uuuu holds about you, including how it is used and with whom it is shared.

Right of Rectification

If any of your personal data is incorrect or out of date, you can request a correction at any time. Inaccurate data puts your account at risk.

Right to Deletion

Request the deletion of data processed on the basis of your consent. Data retained due to legal obligations will be kept for the minimum required period.

Right to Data Portability

Receive your data in a structured, machine-readable format to transfer it to another controller, where technically feasible.

Right to Object

Object to data processing carried out on the basis of legitimate interest, where such processing violates your rights as a data subject.

Right to Information

Know which public or private entities 2uuuu has shared your data with, and obtain information about the possibility of withholding consent.

10Minors

The 2uuuu is a platform exclusively for individuals aged 18 and over. We do not intentionally collect personal data from anyone under 18. If we identify that an account was created by a minor, it will be immediately closed, all access will be blocked and any collected data will be deleted as soon as possible, subject to applicable legal obligations.

If you are a parent or guardian and believe your child under 18 has created an account on 2uuuu, please contact us immediately at contato@2uuuu.net. Our team will take the necessary steps within 24 hours.

2uuuu's zero-tolerance policy on underage access is not just a legal obligation — it is a non-negotiable ethical commitment. Every registration is cross-checked against the Federal Revenue Service (Receita Federal) CPF database to confirm the account holder is of legal age.

11International Data Transfers

To operate the platform, the 2uuuu may use technology infrastructure and service providers located outside Brazil. Any international transfer of personal data is carried out in compliance with Article 33 of the LGPD, ensuring that the destination country or receiving organization offers a level of data protection adequate or equivalent to Brazilian law.

International transfers carried out by 2uuuu are limited to:

  • Cloud server infrastructure — we use providers with international security certifications and data centers that comply with standards equivalent to the LGPD;
  • Overseas-based casino game providers, with whom we maintain contracts that include standard data protection contractual clauses;
  • Performance analytics and cybersecurity systems — all data transmitted is anonymized or pseudonymized before any international transfer.

In all cases, your data is protected to the same security standards described in this policy, regardless of where the processing physically takes place.

12Changes to This Policy

The 2uuuu may update this Privacy Policy periodically to reflect changes in Brazilian law, our data processing practices, or the services offered. Whenever material changes are made, you will be notified at least 7 (seven) days in advance by email and through a prominent notice on the platform.

The date of the most recent update is always shown at the top of this document. We recommend reviewing this policy periodically to stay informed about how we handle your data. Continued use of the platform after new rules take effect constitutes acceptance of the changes.

In the event of changes that expand the scope of data processing or require new consent as a legal basis, 2uuuu will explicitly request your agreement before implementing those changes to your account.

13Contact & Data Protection Officer (DPO)

To exercise any right provided under the LGPD, ask questions about this policy or report any concern related to personal data processing by the 2uuuu, get in touch through the channels below:

DPO / Privacy Email contato@2uuuu.net — Subject: "Data Privacy"
Live Chat Available 24 hours a day, 7 days a week
Response Timeframe Up to 15 calendar days for data subject requests (LGPD)
National Data Protection Authority (ANPD) You may also file complaints directly with the ANPD, the authority responsible for enforcing the LGPD in Brazil

When sending an email about data privacy, include the following in the subject line: "LGPD Request – [your full name]". This helps route your request directly to the responsible data officer and ensures it is handled within the legal deadline.

Privacy Questions at 2uuuu

The most frequently asked questions about how we handle your personal data, answered plainly and without unnecessary legal jargon.

No, under any circumstances. 2uuuu does not sell, rent, or transfer your personal data to third parties for commercial purposes. Your data is used solely to operate your account, process payments, and fulfill legal obligations. When we share data with partners — such as payment processors and infrastructure providers — it is done under contract, with a specific purpose and restrictions on how those third parties may use it.

Send an email to contato@2uuuu.net with the subject line "LGPD Request – Data Deletion" including your full name and registered CPF. Our team will process your request within 15 business days. Please note that financial data and transaction records must be retained for a minimum of 5 years as required by law — these specific records cannot be deleted before that period expires, but they will be restricted to fulfilling legal obligations after your account is closed.

No. Full credit and debit card details are not stored on 2uuuu's servers. All processing is handled by PCI-DSS certified payment gateways. What we store is only an identification token generated by the gateway — a code that references your card without exposing your actual data. This is standard practice in the payments industry and ensures that, even in the event of a security incident on our systems, your card details remain protected.

Yes. This is the right of access guaranteed by Article 18, Section I of the LGPD. Simply send an email to contato@2uuuu.net with the subject line "LGPD Request – Data Access", including your full name and CPF. You will receive a complete copy of the data we hold about you in a readable format, including which data is retained, for what purpose, and with which partners it may have been shared. The response deadline is up to 15 calendar days.

In the event of a security incident that may pose significant risk or harm to data subjects, 2uuuu will notify the National Data Protection Authority (ANPD) and affected individuals within the timeframes established by the LGPD and Resolution CD/ANPD No. 2/2022. The notification will be sent to the email address registered on your account and will include: a description of the nature of the affected data, the data protection officer's contact information, and the technical and security measures taken to mitigate the effects and risks of the incident.
Terms & Conditions

Read the full platform usage rules, covering bets, bonuses, payments and user conduct. Check the Terms & Conditions of 2uuuu.

Responsible Gaming

Tools for limit controls, self-exclusion, and support for those who need it. Visit the Responsible Gaming of 2uuuu.

Deposits & Withdrawals

Learn how payments work at 2uuuu: Pix, boleto, card, and much more. Visit the Deposits & Withdrawals.

Your Data Safe, Your Bet Worry-Free

At 2uuuu, you place your bets knowing your data is protected and your money is handled with care. Create your free account and experience the difference.

For users aged 18 and over residing in Brazil only. Play responsibly.

Português