Data Protection

Privacy Policy GT210 – Data Protection & LGPD

GT210 takes your data privacy seriously. This document clearly explains what information we collect, how we use it, who we share it with, and what your rights are as a data subject under Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018).

Last updated: January 2026 · Version 2.4
In this document
Data we collect Purpose of processing Data sharing Cookies and tracking Information security Your rights (LGPD) Retention and deletion
256bitSSL Encryption
LGPDLaw 13.709/2018
0Data sales
15daysLGPD response timeframe

Plain-language summary: GT210 collects only the data necessary for you to use the platform safely. We do not sell your data. We share information only with service providers who help us operate (such as payment processors for Pix, boleto, and card) and when required by law. You have the right to access, correct, and delete your data at any time.

1. Data Controller

For the purposes of the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018), the controller responsible for processing your personal data is GT210, a Sports Betting and online casino platform accessible at gt210.net and through the official app.

GT210's Data Protection Officer (DPO) can be reached at privacidade@gt210.net or through our customer support, available 24 hours a day within the platform. All requests related to personal data must be directed to this channel to ensure proper logging and handling within the timeframes required by the LGPD.

This Privacy Policy applies to all personal data processed by GT210 in connection with use of the platform, including the website, the app, customer support, email communications, and identity verification and payment processes.

2. Data We Collect

GT210 collects personal data at various points during your interaction with the platform. The categories of data collected and the context of each collection are described below:

2.1 Data you provide directly:

  • Registration: full name, CPF, date of birth, email address, mobile number, residential address, and password;
  • Identity verification (KYC): government-issued ID (RG or CNH), a selfie for facial verification, and proof of address, when requested;
  • Financial information: payment data for deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, or TED — including Pix key, card number (stored in tokenized form), and banking details for withdrawals;
  • Support communications: chat conversation history, emails sent to contato@gt210.net, and in-app interactions.

2.2 Automatically collected data:

  • Platform usage data: betting history (sports such as Brasileirão Série A, Copa do Brasil, Libertadores, volleyball, NBB basketball, MMA/UFC; casino games such as blackjack, poker, slots, and crash games), access times, and session data;
  • Device and connection data: IP address, browser type, operating system, device model, and device identifiers;
  • Approximate location data: inferred from the IP address for regulatory compliance and fraud prevention purposes — GT210 does not access your device's GPS location without explicit permission;
  • Cookies and similar technologies: detailed in Section 6.

GT210 does not collect data in sensitive categories such as racial or ethnic origin, religious belief, political opinion, health, or sexual life, except where strictly necessary to fulfill a legal obligation (for example, documentation of responsible gambling restrictions requested by the data subject themselves).

3. Purpose of Processing

GT210 processes your personal data exclusively for the purposes described below. No data is collected without a specific and legitimate purpose:

Purpose Data used Legal basis
Account creation and management Full name, CPF, email, phone number, password Contract
Identity verification (KYC/AML) ID/Driver's License, selfie, proof of address Legal obligation
Processing deposits and withdrawals Bank details, Pix key, card data Contract
Fraud and money laundering prevention IP address, device, financial history Legal obligation
Customer Support Conversation history, account data Contract
Experience personalization Betting history, preferences Legitimate interest
Sending communications and promotions Email, mobile Consent
Responsible gambling and self-exclusion Usage history, configured limits Legal obligation
Platform analysis and improvement Anonymized or aggregated usage data Legitimate interest

GT210 does not use your personal data for purposes incompatible with those listed above without prior notice and, where applicable, a new request for consent.

4. Legal Basis for Processing

All personal data processing carried out by GT210 is grounded in at least one of the legal bases set out in the LGPD:

  • Contract performance: processing required for you to use the GT210 platform — creating an account, depositing via Pix, placing bets on the Brasileirão, withdrawing winnings;
  • Compliance with a legal obligation: identity verification (KYC), anti-money laundering (AML), tax reporting, and compliance with requests from competent authorities;
  • Legitimate interest: fraud prevention, continuous platform improvement, experience personalization, and operational security — always respecting your rights and reasonable expectations;
  • Consent: sending marketing communications, use of non-essential cookies. Consent may be withdrawn at any time without affecting your use of the platform.

When processing is based on consent, GT210 keeps a record of the consent obtained, including the date, channel, and scope. You can withdraw consent for marketing communications by clicking "Unsubscribe" in any email you receive or by accessing the notification settings in your GT210 account.

5. Data Sharing

GT210 does not sell your personal data to third parties. Sharing occurs only in the following situations and with the following categories of recipients:

  • Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED. These providers receive only the data necessary to carry out the transaction and are contractually prohibited from using the information for any other purpose;
  • Identity verification providers: specialized KYC (Know Your Customer) companies that assist in verifying user identities to comply with anti-money laundering regulations;
  • Infrastructure and technology providers: cloud hosting, cybersecurity, and platform analytics services that operate as data processors under contract with confidentiality and security obligations;
  • Public authorities and regulators: when required by law, court order, or request from competent regulatory bodies in Brazil — such as the Central Bank, the Federal Revenue Service, or the Financial Activities Control Council (COAF);
  • Legal advisors: in cases of litigation or defense of GT210's rights, using only the data strictly necessary for the situation at hand.

All third parties that receive personal data from GT210 users are bound by contractual agreements requiring compliance with LGPD obligations and the adoption of security measures appropriate to the risk level of each operation.

Important: GT210 never shares individual users' betting data with clubs, federations, or any sports organization. Betting data for Brasileirão, Copa do Brasil, or other competitions is treated as strictly confidential.

6. Cookies and Tracking Technologies

GT210 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and communications.

6.1 Types of cookies used:

  • Essential cookies: required for the platform's basic operation — session authentication, security, and language preferences. They cannot be disabled without affecting your use of GT210;
  • Performance cookies: collect aggregated and anonymized data on how users navigate the platform in order to identify improvements. This information does not identify you individually;
  • Functionality cookies: remember your preferences (such as region and odds display settings) to personalize your experience;
  • Marketing cookies: used to display relevant communications from GT210. They are only activated with your explicit consent and can be disabled at any time.

6.2 Cookie management: When you first access GT210, you will see a cookie consent panel where you can accept all cookies, customize your preferences, or decline non-essential ones. You can update your choices at any time using the privacy settings icon in the platform footer.

GT210 does not use third-party tracking cookies for off-platform advertising purposes (external retargeting) without your explicit consent.

7. Information Security

GT210 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Among the measures in place:

  • 256-bit SSL/TLS encryption: all data transmissions between your device and GT210's servers are encrypted, including registration data, financial transactions, and communications;
  • Financial data tokenization: credit and debit card numbers are tokenized — GT210 never stores the full card number in its systems;
  • Two-factor authentication (2FA): available and recommended for all accounts. With 2FA active, even if your password is compromised, unauthorized access is blocked;
  • Internal access controls: user data is accessible only to GT210 staff who require it to perform their duties. Access is controlled through role-based permissions (RBAC);
  • Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24 hours a day to identify suspicious access or attempted security breaches;
  • Regular audits: GT210's security infrastructure is periodically audited by specialized information security firms.

In the event of a security incident affecting users' personal data that poses a relevant risk or harm, GT210 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes established by the LGPD, providing information about the nature of the incident, the data involved, and the measures taken to remediate the situation.

8. Data Retention and Deletion

GT210 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. The general retention periods are:

  • Active account data: retained for as long as your account is active and for up to 5 years after closure, as required by tax and anti-money laundering legislation;
  • Financial transaction records: retained for 5 years in accordance with the regulations of the Banco Central do Brasil and the Receita Federal;
  • KYC records: retained for 5 years after the last contact or account closure, as required by COAF;
  • Support history: retained for 2 years after the support case is resolved;
  • Non-essential cookie data: retained for the validity period of each cookie, generally between 30 days and 1 year.

Once retention periods expire, data is securely deleted or anonymized in a way that no longer allows identification of the individual. You may request early deletion of your data as described in Section 10, subject to the legal grounds for mandatory retention.

9. International Data Transfers

Some service providers used by GT210 — such as cloud infrastructure providers — may be located outside Brazil. When this is the case, GT210 puts in place appropriate safeguards to ensure that the personal data of Brazilian users receives a level of protection equivalent to that required by the LGPD.

International data transfers carried out by GT210 are based on:

  • Standard contractual clauses requiring the recipient to adopt data protection measures equivalent to those under the LGPD;
  • Transfers to countries that the ANPD recognizes as providing an adequate level of data protection;
  • Necessity for the performance of the contract with you (for example, payment processing by international credit card operators).

If you would like to know which specific international providers have access to your data and what safeguards have been put in place, please contact our DPO at privacidade@gt210.net.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose data is processed by GT210, the following rights, which may be exercised at any time by emailing privacidade@gt210.net or through customer support within the platform:

Access

Request confirmation that GT210 processes your data and obtain a copy of the information we hold about you.

Correction

Request the correction of incomplete, inaccurate, or outdated information — such as the name, address, or phone number registered with GT210.

Deletion

Request the deletion of your data processed on the basis of consent, subject to mandatory legal retention periods.

Objection

Object to data processing based on legitimate interest where there is a valid reason related to your particular situation.

Restriction

Request the temporary suspension of data processing when the data is unnecessary, excessive, or handled in violation of the LGPD.

Portability

Receive your personal data in a structured, interoperable format for transfer to another controller, where technically feasible.

Sharing information

Know which public and private entities GT210 has shared your personal data with.

Withdrawal of consent

Withdraw consent given for processing based on this legal basis, without affecting your ability to use GT210's core features.

Complaint to the ANPD

File a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been adequately upheld.

How to exercise your rights: send your request to privacidade@gt210.net with a subject line identifying the right you wish to exercise (for example: "Access Request – LGPD" or "Data Deletion – LGPD"), including your full name and the CPF registered with GT210. We respond within 15 business days, as required by the LGPD.

11. Minors

GT210 prohibits registration and use of the platform by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data to GT210 or is using the platform, please contact us immediately through customer support or at privacidade@gt210.net. Upon receiving a substantiated notification, we will take the appropriate steps, including deleting the data and closing the account.

GT210 applies age verification during the registration process, including CPF confirmation and, where necessary, a request for a photo ID. Access to the platform's content is conditional on confirmation of legal age.

12. Communications and Marketing

GT210 may send communications about promotions, bonuses, platform updates, and relevant account information via email, in-app push notification, or SMS to your registered phone number. These communications are only sent to users who have given consent at the time of registration or afterward.

You can manage your communication preferences in two ways:

  • By accessing the notification settings in your GT210 account and unchecking the categories you no longer wish to receive;
  • By clicking the "Unsubscribe" or "Cancel subscription" link found in any marketing email received from GT210.

Withdrawing consent for marketing communications does not affect the receipt of essential transactional communications, such as Pix deposit confirmations, withdrawal receipts, account security alerts, and legally required notices.

GT210 never sends emails asking for your password, full credit card details, or bank transfers to personal accounts. If you receive a message like this, do not click any links and report it immediately through the platform's support — it may be a phishing attempt.

13. Changes to this Policy

GT210 may update this Privacy Policy periodically to reflect changes in our practices, new legal requirements, or improvements to our data protection processes. When changes are significant, you will be notified at least 7 days in advance by email and/or through a notice within the platform.

The current version of this Policy will always be available on this page, with the date of the last update indicated at the top of the document. Continued use of the GT210 platform after the effective date of a new version of the Policy constitutes acceptance of the changes. If you do not agree with the modifications, you may close your account and withdraw your available balance before the changes take effect.

For significant changes that involve new consent-based processing purposes, GT210 will request fresh explicit consent before beginning processing under the new purpose.

14. Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, clarify any questions about this Policy, or report any privacy-related concerns at GT210, please use the channels below:

  • DPO email: privacidade@gt210.net (response time: up to 15 business days)
  • General support: contato@gt210.net or via live chat within the platform, available 24 hours a day, 7 days a week
  • Account settings: access the privacy and communications options directly in your GT210 account dashboard

If, after contacting GT210, you feel your request was not adequately addressed, you have the right to file a complaint with the National Data Protection Authority (ANPD), as set out in Article 18, Paragraph 1 of the LGPD.

Version: 2.4  ·  Validity: January 01, 2026  ·  Platform: GT210  ·  DPO: privacidade@gt210.net

How GT210 protects your privacy in practice

Beyond this written policy, these are the concrete measures GT210 has implemented to protect your data on a day-to-day basis

Encryption on Every Transaction

Every deposit via Pix, boleto, or card and every withdrawal processed by GT210 is protected by 256-bit SSL encryption. Your financial data is never transmitted in plain text between your device and our servers. Card numbers are tokenized — we never store the full card number.

Secure Identity Verification

GT210's KYC process verifies your identity securely, using specialized partners who operate under contract with explicit data protection obligations. Your documents are verified and stored in encrypted form, with role-based access controls.

Two-Factor Authentication

With 2FA enabled on your GT210 account, a second verification step is required at login — typically a code sent to your mobile device. Even if your password is compromised, unauthorized access is blocked. We strongly recommend that all users enable 2FA.

Zero Data Sales

GT210 does not sell, rent, or monetize your personal data to third parties. This includes your betting history, financial data, and registration information. Data is only shared with operational service providers or when required by law.

Control in Your Hands

You can manage your cookie preferences, marketing communications, and privacy settings directly from your GT210 account dashboard. No support contact is needed to make changes — just update everything through the app or website.

LGPD Compliance

GT210 operates in compliance with Brazil's General Data Protection Law (Law No. 13.709/2018). We maintain processing records, have appointed a DPO, conduct privacy impact assessments, and respond to data subject requests within the legally required timeframes.

Frequently asked questions about privacy

The most common questions GT210 support receives about data and privacy

No. Your betting history — including bets placed on Brasileirão, Copa do Brasil, blackjack, poker, or any other GT210 product — is treated as strictly confidential. It is not shared with clubs, sports federations, advertisers, or any third party beyond what is strictly necessary for platform operations. Internally, access to betting history is role-restricted — only those who need it to resolve technical or support issues are granted access.

Yes. Essential cookies are required for the platform to function and cannot be disabled — they manage your login session, security, and basic preferences. Marketing and performance cookies are optional and can be declined in the consent panel shown on your first visit, or you can update your preferences at any time in GT210's privacy settings. Declining non-essential cookies does not prevent you from using any core platform feature.

After account closure, GT210 retains your data for the period required by law — generally 5 years for financial and KYC records, in accordance with Banco Central and COAF regulations. Once that period ends, data is securely deleted or anonymized. You may request early deletion of data not subject to mandatory retention by emailing privacidade@gt210.net with the subject line "Data Deletion – LGPD". We respond within 15 business days.

GT210 uses tokenization for credit and debit card data — your full card number is never stored in the platform's systems. When you make a card deposit, the data is transmitted directly to the payment processor (which operates in compliance with the PCI DSS standard), and only a token representing that card is stored, which has no value outside the platform's context. All transmission occurs via 256-bit SSL.

Yes. In the event of a security incident involving personal data that poses a relevant risk to data subjects, GT210 is required by the LGPD to notify both the National Data Protection Authority (ANPD) and the affected individuals within a reasonable timeframe. The notification will include information about the nature of the data involved, what happened, the potential risks, and the steps GT210 is taking to address and prevent recurrence. To ensure you receive any such notifications, keep your email address and phone number registered with GT210 up to date.

Related documents

Policies and pages supplementary to this Privacy Policy

Exercise your LGPD rights
Send your request to privacidade@gt210.net with your full name and CPF. We respond within 15 business days, in English, with no red tape.

Your data, protected at GT210

Bet with security and privacy at GT210

Free registration, encryption on every transaction, hassle-free Pix, and 24/7 support in Portuguese. 100% bonus on your first deposit up to R$ 500.00.

SSL 256-bit LGPD compliant Zero data sales Pix withdrawal in 15 min
Português