Mzmz38 › Privacy Policy

Mzmz38 Privacy Policy – Data Protection and LGPD

At mzmz38, the privacy of Brazilian users is taken seriously — not as a formality, but as a genuine commitment. This document clearly explains what data we collect, why we collect it, how we protect it, and what your rights are as a data subject under the LGPD.

Last updated: January 2026

Mzmz38's Six Privacy Commitments

What guides data processing on the platform in practice

Full LGPD Compliance

All mzmz38 operations comply with the General Data Protection Law (Law No. 13,709/2018). Your data is collected and processed only for legitimate purposes, with a defined legal basis for each activity.

Encryption on All Transactions

All data transmitted over the internet is protected by 256-bit SSL encryption — the same standard used by major banks and financial institutions in Brazil.

No Sale of Data to Third Parties

Mzmz38 never sells, rents, or transfers users' personal data to third parties for commercial purposes. Data sharing occurs only when necessary for the service to function, and always under contractual safeguards.

Your Guaranteed Rights

You can access, correct, port, and request the deletion of your personal data at any time. mzmz38 responds to these requests within fifteen business days, at no cost.

Minimal and Necessary Data Collection

Mzmz38 collects only the data strictly necessary for account operation, payment processing via Pix, and compliance with legal obligations. Nothing beyond what the purpose requires.

Straight-Up Transparency

This policy was written to be read and understood by anyone, not just lawyers. If anything is unclear, Portuguese-language support is available 24/7 to answer any questions.

1Personal Data Controller

For the purposes of the Lei Geral de Proteção de Dados Pessoais (LGPD — Lei nº 13.709/2018), the controller of personal data collected through the platform mzmz38 is the company responsible for operating the mzmz38.click website, hereinafter referred to as "mzmz38," "we," or "platform."

Mzmz38 determines the purposes and means of processing personal data for users registered in Brazil, in accordance with applicable Brazilian law. To exercise your rights or contact the Data Protection Officer (DPO), please use the email privacidade@mzmz38.click or the live chat available 24 hours a day on the platform.

Note: this Privacy Policy is an integral part of the Terms and Conditions of mzmz38. By creating an account and using the platform, users acknowledge that they have read and understood the privacy practices described herein.

2What Personal Data We Collect

The mzmz38 collects personal data at various points throughout its relationship with the user. Collection follows the data minimization principle — we gather only what is necessary for each specific purpose. See below for the data categories and when they are collected:

Category Examples When collected
Registration data Full name, CPF, date of birth, email address, mobile number At the time of registration
Address data ZIP code, street address, city, state, country At registration or during account verification
Payment data Pix key, card details (tokenized), transaction history Upon deposit or withdrawal
Identity documents National ID, driver's license, passport, proof of address During account verification (KYC)
Platform usage data Betting history, games accessed, sessions, preferences During platform use
Technical data IP address, device type, operating system, browser Automatically upon accessing the platform
Communication data Live chat support history and emails sent to the support team During support interactions
Approximate location data City and state inferred from IP for regional compliance Automatically upon accessing the platform

Credit and debit card data is not stored directly on mzmz38's servers. This information is processed by PCI DSS-certified payment partners, who tokenize the data before any storage occurs.

3Purpose of Data Processing

The mzmz38 uses the personal data collected exclusively for the following purposes, all of which relate to the operation of the platform and compliance with legal obligations:

  • Account creation and management: registration, authentication, data updates, and operational communications regarding the user's account.
  • Payment processing: deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer; withdrawal processing via Pix; generation of receipts and financial history.
  • Service operation: availability of Sports Betting (Brasileirão, Copa do Brasil, Libertadores, MMA/UFC, basketball NBB, e-sports and more), live casino, slots, crash games, jackpots and VIP Program.
  • Identity verification (KYC): age verification, proof of Brazilian residency, and ownership of the payment methods used, as required by compliance regulations.
  • Fraud and money laundering prevention: transaction and behavior monitoring to identify and prevent suspicious activity, in compliance with Brazilian law.
  • Marketing communications: sending promotions, VIP Program news, and platform updates — only when the user has given explicit consent. You may opt out at any time.
  • Responsible gaming: monitoring of gaming patterns to identify at-risk behavior and offer self-control tools to the user.
  • Legal compliance: compliance with obligations established by Brazilian law, including the LGPD, the Consumer Protection Code, and applicable sports betting regulations.
  • Platform improvement: aggregated and anonymized usage analysis to develop new features and improve the user experience.

Mzmz38 does not use personal data for automated decision-making that produces significant legal effects without the possibility of human review.

4Legal Basis for Processing

Each data processing activity of the mzmz38 is grounded in one of the legal bases set out in the LGPD. This matters: it means mzmz38 does not process your data arbitrarily, but always with a clear legal basis.

  • Contract performance (art. 7, V of the LGPD): processing necessary to create and maintain your account, handle Pix deposits and withdrawals, record bets, and make platform services available.
  • Compliance with a legal obligation (art. 7, II of the LGPD): identity verification (KYC), anti-money laundering, restricting access by minors, and compliance with requests from competent authorities.
  • Legitimate interest (art. 7, IX of the LGPD): fraud prevention, platform security, usage analysis for technical improvements, and operational communications relevant to the user.
  • Consent (Art. 7, I of the LGPD): sending marketing communications, personalized promotions, and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the account's functionality.
Important: where the legal basis is consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to revocation, nor the operation of essential account services at mzmz38.

5Data Sharing with Third Parties

The mzmz38 does not sell users' personal data to third parties under any circumstances. Sharing occurs only to the extent strictly necessary for the platform to operate, and always with contractual data protection guarantees in place. The categories of third parties that may have access to data are:

  • Payment processors: companies such as those responsible for the Pix infrastructure, card networks, and digital wallets (PicPay, Mercado Pago) receive the data necessary to process financial transactions. These partners operate under contracts with data protection clauses compatible with the LGPD.
  • Technology providers: companies that provide server infrastructure, cybersecurity, fraud analysis, and operational tools used by mzmz38. Access is limited to the minimum necessary for each function.
  • Game providers: live casino studios and slots providers such as Evolution Gaming and Pragmatic Play receive session data necessary for the games to function. These providers are certified by independent bodies.
  • Competent authorities: data may be shared with public agencies, judicial authorities, or regulatory bodies when required by law, court order, or for anti-money laundering and fraud investigations.
  • Auditors and compliance: audit and compliance firms that periodically review mzmz38's operational practices may have access to aggregated or anonymized data.

All contracts entered into with third parties that involve the processing of personal data of users of mzmz38 include data protection clauses compatible with the LGPD, prohibiting the use of data for purposes other than those contracted.

6Data Storage and Security

User data from mzmz38 are stored on servers protected with encryption at rest and in transit. Internal access is restricted by strict authentication controls — only employees with a justified operational need can access identifiable personal data, and all such access is recorded in auditable logs.

The technical and organizational security measures implemented by mzmz38 include:

  • 256-bit SSL/TLS encryption on all connections between the user and the platform.
  • Encryption of data at rest on database servers.
  • Two-factor authentication for internal administrative access.
  • Continuous monitoring for unauthorized access attempts and security anomalies.
  • Periodic security review processes and vulnerability testing.
  • Payment card data tokenization via PCI DSS-certified partners.
  • Formal security incident response procedures, including notification to the ANPD and affected users within the legally required timeframes.

In the event of a security incident that may affect data subjects' rights, the mzmz38 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the deadlines established by the LGPD, providing details on the nature of the incident and the steps taken.

7Cookies and Tracking Technologies

The mzmz38 uses cookies and similar technologies to ensure the platform operates correctly and to improve the user experience. Cookies are small text files stored on your device by your browser. You can manage them in your browser settings at any time.

The types of cookies used by mzmz38 are:

Essential cookies — authentication and session Security cookies — fraud prevention Preference cookies — language and settings Analytical cookies — platform performance Personalization cookies — relevant offers

Essential cookies are required for the platform's basic functionality and cannot be disabled without a direct impact on your experience — including login, the bet slip, and the live casino session. All other cookies are only activated with your express consent, which can be withdrawn at any time in the platform's cookie settings.

About analytics data: data collected through analytics cookies is aggregated and anonymized before analysis. mzmz38 does not use this data to identify users individually — the goal is to understand how the platform is used overall in order to guide technical and product improvements.

8Data Retention and Deletion

The mzmz38 retains users' personal data for as long as necessary to fulfill the purposes that justified its collection, in accordance with applicable legal retention periods in Brazil. The retention criteria are as follows:

  • Active account data: kept for as long as the account remains active and for the period required to fulfill contractual and legal obligations.
  • Data after account closure: financial and identity data is retained for up to five years after account closure, as required by Brazilian anti-money laundering legislation and tax regulations.
  • Support communication data: support history is retained for up to two years to ensure continuity of service and resolve any disputes.
  • Betting and transaction data: betting records and financial transactions are retained for five years for audit and compliance purposes.
  • Responsible gaming data: in self-exclusion cases, certain data is retained for the duration of the exclusion period to prevent re-registration — in line with industry best practices.

Once the applicable retention period has ended, data is securely deleted or anonymized in a way that no longer allows the data subject to be identified. Requests for early deletion are assessed on a case-by-case basis, taking into account any legal obligations that may require the data to be retained.

9Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the data subject whose personal data is processed by the mzmz38, a set of rights that can be exercised at any time. mzmz38 responds to all requests within fifteen business days, with no fee charged for exercising these rights.

Your Eight Rights Guaranteed by the LGPD at mzmz38

How to exercise each right in practice — via support or the account dashboard

Access

Request a copy of all personal data mzmz38 holds about you, including what data is processed and for what purposes.

Correction

Request the correction of personal data that is incomplete, inaccurate, or out of date. Email and phone number changes can be made directly in the account dashboard.

Deletion

Request the deletion of data processed on the basis of your consent. For data processed under a different legal basis, mzmz38 will assess the request and inform you of the applicable legal retention period.

Portability

Receive your data in a structured, machine-readable format for transfer to another controller, under the terms regulated by the ANPD.

Information

Request information about the entities with which mzmz38 has shared or currently shares your personal data, and the reasons for each disclosure.

Consent Withdrawal

Withdraw consent given for processing based on this legal ground, such as marketing communications. Withdrawal does not affect essential account services.

Blocking

Request the temporary suspension of the processing of your data while a dispute regarding the necessity or appropriateness of that processing is under review.

Review of Automated Decisions

Request a review of decisions made exclusively by automated means that affect your interests, such as account blocks triggered by anti-fraud systems.

To exercise any of these rights, please contact us at privacidade@mzmz38.click or via live chat. Requests are handled within 15 business days at no charge.

10Minors

The mzmz38 does not collect, process, or store personal data from individuals under 18 years of age. Access to the platform is strictly limited to adults, and the registration process includes verification of the date of birth provided. Identity documents may be requested to confirm legal age before the first withdrawal or at any other time.

If mzmz38 becomes aware that data from a minor under 18 was inadvertently collected, that data will be deleted immediately and the account closed. Legal guardians who identify that a minor has used the platform should contact support at privacidade@mzmz38.click so that the necessary steps can be taken as quickly as possible.

Mzmz38 uses technological tools to identify access patterns inconsistent with the declared profile and may request additional document verification at any time, particularly when there are signs of use by minors.

11Changes to This Privacy Policy

The mzmz38 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Material changes — those that affect your rights or the way your data is processed — are communicated at least seven days in advance, via the registered email address and through an in-platform notification.

The updated version of this policy takes effect on the date indicated in the notification. Continued use of the platform after that date constitutes acceptance of the updated version. If you do not agree with the changes, you may request account closure and a refund of your real-money balance through support before the effective date.

The most recent version of this Privacy Policy is always available on this page, with the date of the last update indicated at the top of the document. Previous versions may be requested by email at privacidade@mzmz38.click for reference.

12Contact, DPO and Support Channels

The mzmz38 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance on the platform and handling data subject requests. The DPO is the point of contact for privacy-related matters, the exercise of rights, and any complaints regarding the processing of personal data.

To contact the DPO or exercise your rights under the LGPD, please use the following channels:

  • DPO Email: privacidade@mzmz38.click — a channel dedicated exclusively to privacy and data protection matters.
  • General support: suporte@mzmz38.click — for general questions about the platform, Pix withdrawals, betting, and your account.
  • Live chat: available 24 hours a day, 7 days a week, in Portuguese, with an average response time of under 3 minutes.

If you are not satisfied with mzmz38's response to your privacy requests, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under art. 55-A et seq. of the LGPD. mzmz38 encourages users to resolve any issues directly with the platform before taking action before the ANPD, but fully acknowledges each user's right to appeal to the regulatory authority.

Response commitment: all requests received through the channels above are answered within fifteen business days, in accordance with the deadline established by the LGPD. In more complex cases, mzmz38 may extend this deadline with a justified notice to the data subject.

Privacy FAQs at mzmz38

Common questions about how your data is handled on the platform

No. mzmz38 does not share users' personal data with other betting sites, competing platforms, or any company for marketing or commercial prospecting purposes. Sharing is limited to the operational partners necessary for the platform to function — such as Pix payment processors and game providers — and always under contractual data protection guarantees. Your data is never sold.

Send an email to privacidade@mzmz38.click with your full name, registered CPF, and a data deletion request. mzmz38 will respond within fifteen business days, specifying which data can be deleted immediately and which must be retained due to legal obligations — such as financial transaction records, which Brazilian law requires to be kept for up to five years. Any remaining real balance in a closed account will be returned via Pix before the data is deleted.

Full credit or debit card details are never stored directly on mzmz38's servers. When you make a card deposit, the information is processed by partners certified under the PCI DSS standard — who tokenize the data before any storage takes place. mzmz38 only retains a reference token to facilitate future transactions, never the full card number, CVV, or expiry date.

Betting and gaming session history is used to: (1) process and record placed bets; (2) calculate VIP Program cashback and automatically update VIP levels; (3) monitor gaming patterns to identify at-risk behavior and offer responsible gambling tools; (4) meet legal obligations for transaction recordkeeping; and (5) improve the platform based on aggregated, anonymized analysis. mzmz38 does not use individual betting history to influence odds or place successful bettors at a disadvantage.

Yes, at any time and without needing to provide a reason. You can opt out of marketing communications from mzmz38 in three ways: by clicking the "unsubscribe" link in the footer of any promotional email; by accessing the communication preferences in your account dashboard; or by contacting support via chat or at privacidade@mzmz38.click. The opt-out takes effect within 48 hours. Please note that essential operational communications — such as Pix withdrawal confirmations and security alerts — will continue to be sent regardless of this preference.
mzmz38's Commitment to the LGPD

Mzmz38 operates in full compliance with the General Data Protection Law (LGPD — Law No. 13,709/2018). All user data is handled with confidentiality, 256-bit SSL encryption, and a clearly defined purpose. For questions or requests regarding data access, correction, or deletion, please contact us at privacidade@mzmz38.click. Also consult our Terms and Conditions and the Responsible Gambling.

Play Safely and Privately at mzmz38

Now that you know how mzmz38 keeps your data safe, create your free account, deposit via Pix, and enjoy Brasileirão betting, live casino, and the VIP Program with rollover-free cashback — fully protected under the LGPD.

+18 | Betting and gaming involve financial risk. Play responsibly. | Responsible Gambling

Português