Introduction: This Privacy Policy describes how 123a collects, uses, stores, and protects the personal data of users on the 123a.world platform, in accordance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018). By creating an account or using any 123a service, you confirm that you have read and understood this Policy. Questions can be sent to our 24×7 support team at any time.
1. Data We Collect
1.1 Data You Provide Directly
When you create an account at 123a or use our services, you provide us directly with certain data. This includes: full name, CPF, date of birth, email address, mobile number, residential address, and banking details required to process deposits and withdrawals via Pix, credit/debit card, PicPay, Mercado Pago, or boleto bancário. We also collect identity documents (RG, CNH, or passport) when requested for identity verification (KYC — Know Your Customer), which is required to meet our legal anti-money laundering obligations.
1.2 Automatically collected data
When you access 123a on your phone or computer, we automatically collect certain technical data needed to keep the platform running: IP address, browser type and version, operating system, device identifier, pages visited, session duration, and interface interaction events. This data is used for security, fraud prevention, platform improvement, and regulatory compliance — not to build behavioral profiles for third-party advertising.
1.3 Platform Usage Data
123a records activity carried out on the platform: betting history in football (Brasileirão, Copa do Brasil, Libertadores), e-sports (CBLOL, VCT Americas), live casino, and poker, amounts wagered, results, bonuses used, session time per product, and gaming preferences. This data is essential for operating the platform, enforcing responsible gambling policies, detecting bonus abuse, and personalizing the experience — for example, suggesting poker tournaments at the times you usually play.
What 123a does NOT collect: The platform does not request or store passwords in plain text (only encrypted hashes), does not access your phone contacts, does not read your messages, and does not monitor your activity outside the platform itself. Your behavior outside of 123a is not tracked.
2. How We Use Your Data
Data collected by 123a is used exclusively for the following purposes, each with a defined legal basis under the LGPD:
2.1 Platform operation
Processing registrations, login authentication, handling deposits via Pix and other methods, processing withdrawals, calculating and paying winnings, running casino games, poker and Sports Betting, and providing 24×7 support. Without this data, operating the platform would not be possible. Legal basis: performance of a contract.
2.2 Legal and regulatory compliance
Age verification (minimum 18 years), identity verification (KYC), anti-money laundering (AML), terrorist financing detection, compliance with court orders, and reporting required by regulatory authorities. These processes are legally mandatory and cannot be refused without restricting access to the platform. Legal basis: legal obligation.
2.3 Security and fraud prevention
Detection of multiple accounts, bot identification and automated software use, monitoring of suspicious betting patterns (poker collusion, large-scale bonus abuse), device verification, and IP-based geolocation. These measures protect all 123a players from fraud and manipulation. Legal basis: legitimate interests.
2.4 Product improvement and responsible gambling
Aggregated and anonymized analysis of platform usage to identify usability issues, improve mobile performance on 4G connections, and develop new features. Gaming behavior data also feeds 123a's responsible gambling system, which identifies risk patterns and can trigger preventive limits. Legal basis: legitimate interests.
2.5 Marketing communications (with consent)
Sending emails and notifications about promotions, guaranteed-prize tournaments, reload bonuses, and platform news — only to users who have consented to receive them. Consent can be withdrawn at any time in your account preferences, with no impact on your use of the platform. Legal basis: consent.
3. Data Sharing
123a does not sell, rent, or trade players' personal data. Data sharing occurs only in the following specific and controlled situations:
- Payment providers: minimum banking details are shared with the financial institutions required to process transactions via Pix (Banco Central do Brasil), credit/debit card (Brazilian card networks and issuing banks such as Nubank, Itaú, Bradesco, Banco do Brasil), PicPay, and Mercado Pago. Each provider has its own privacy policies and data processing agreements with 123a.
- Game providers: minimal technical session data is shared with live casino providers (such as Evolution Gaming) and slots suppliers to enable gameplay. No identifiable personal data is transferred beyond what is strictly necessary.
- Authorities and legal obligations: in response to court orders, requests from competent law enforcement or regulatory authorities, or when required by law for anti-money laundering purposes.
- Auditors and service providers: companies that provide security audit services, technical compliance analysis, or IT support — always under confidentiality agreements and with access strictly limited to what is necessary.
We never share: data with advertising networks, data brokers, third-party marketing platforms, external researchers, or any company not directly involved in operating 123a's services. If you receive communications claiming to be from 123a and asking for your data, be suspicious — the official support channel is the on-site chat or suporte@123a.world.
4. Data Security
4.1 Technical measures
123a applies a robust set of technical security measures to protect player data: SSL/TLS 256-bit encryption on all communications between the user's device and our servers, encryption of sensitive data at rest in databases, secure hashing (bcrypt) of all passwords — 123a never sees your password in plain text, two-factor authentication (2FA) available to all users, real-time security monitoring, and penetration testing conducted periodically by independent security firms.
4.2 Organizational measures
Internally, access to user data is restricted to personnel with a legitimate need (principle of least privilege). All staff with access to personal data receive security and data protection training. Documented procedures are in place for responding to security incidents, including notifying the ANPD and affected users within the timeframes required by the LGPD in the event of a data breach.
4.3 In the event of an incident
In the event of a security incident that may compromise personal data, 123a will notify the National Data Protection Authority (ANPD) and the affected users within the deadlines established by the LGPD, providing clear information about what happened, which data was affected, and what steps were taken to mitigate the damage.
5. Cookies and Tracking Technologies
5.1 What cookies are and why we use them
Cookies are small text files stored on your phone or computer when you access 123a. They are essential for several platform features — keeping your session active as you navigate between products (casino, betting, poker), saving language and interface preferences, and remembering the contents of your parlay bet slip while it's being built.
5.2 Types of Cookies Used
- Essential cookies: required for the platform's basic operation — authentication, session management, and security. They cannot be disabled without compromising your experience.
- Functional cookies: store preferences such as interface theme and responsible gambling settings. They can be disabled, but doing so may affect your experience.
- Analytical cookies: collect aggregated and anonymized data on how users interact with the platform, to support continuous improvement. They do not track you individually outside of 123a.
- Marketing cookies (with consent): used only when you consent, to personalize communications about promotions and tournaments relevant to your gaming profile.
You can manage your cookie preferences in the banner shown on your first visit or in your browser settings. Modern browsers allow you to block, delete, or restrict cookies by type and by domain.
6. Data Retention
123a does not retain personal data for longer than necessary for each purpose. The retention periods applied are:
- Active account data: retained for as long as the account remains active and for up to 5 years after closure, as required by anti-money laundering regulations (Law No. 9.613/1998).
- Financial transaction history: minimum of 5 years after each transaction, as required by the Banco Central do Brasil and applicable tax legislation.
- Support and service data: 2 years after the case is closed, for reference if it is reopened.
- Marketing data (with consent): until consent is withdrawn or the account holder requests deletion.
- Security and access logs: 12 months, for fraud detection and incident response.
At the end of the retention period, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified.
7. How to Exercise Your Rights (LGPD)
The LGPD grants you, as the data subject, a set of rights that can be exercised at any time with 123a:
- Access: request a copy of your personal data in a readable format.
- Correction: request the correction of any incorrect, outdated, or incomplete data.
- Anonymization, blocking, or deletion: request the appropriate handling of data that is unnecessary, excessive, or processed in violation of the LGPD.
- Portability: receive your data in a structured format for transfer to another service.
- Sharing information: find out which third parties your data has been shared with.
- Consent withdrawal: withdraw consent for processing based on that legal basis.
- Objection: object to processing carried out on the basis of legitimate interests.
To exercise any of these rights, contact us via 24×7 live chat or send an email to privacidade@123a.world with the subject line "LGPD Right — [type of request]". 123a responds within 15 business days, as required by law. In cases where an immediate response is not possible, you will be informed of the reason and the estimated timeframe.
123a DPO: 123a has a designated Data Protection Officer responsible for ensuring LGPD compliance and handling data subject requests. Direct contact: privacidade@123a.world.
8. Protection of Minors
123a is a platform exclusively for users aged 18 and over. We do not intentionally collect data from minors. The registration process requires a valid CPF, and 123a cross-checks the CPF provided against the declared date of birth to detect registration attempts by underage users.
If we become aware that data from a user under 18 was inadvertently collected, the account will be closed immediately, the data will be deleted, and any deposited balance will be refunded to the original payment method. Parents or guardians who discover that a minor has created an account at 123a should contact support immediately via live chat or at suporte@123a.world.
9. Changes to this Privacy Policy
123a may periodically update this Privacy Policy to reflect changes in legislation, our data processing practices, or the services we offer. Any significant changes will be communicated to your registered email address with at least 7 (seven) days' notice, with a clear highlight of what changed and why.
The date of the last update is shown at the top of this page. The version in effect is always the most recent one published at 123a.world/privacy-policy. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy. If you disagree with the changes, you may close your account and request the return of your real-money balance via Pix before the effective date, with no penalty.
10. Contact, DPO & Privacy Channel
123a provides dedicated channels for privacy and data protection inquiries:
- Live chat: available 24×7 directly on the platform — it's the fastest channel for general privacy questions.
- General support email: suporte@123a.world — for general account and usage inquiries.
- Privacy channel and DPO: privacidade@123a.world — exclusively for exercising LGPD rights, formal requests, and data protection complaints. We respond within 15 business days.
This Policy is governed by the laws of the Federative Republic of Brazil. For complaints not resolved by 123a, you may contact the Autoridade Nacional de Proteção de Dados (ANPD) through the official website gov.br/anpd.