LGPD · Privacy · Your Rights · Secure Data

Privacy Policy of k456 — your data protected

K456 takes your data privacy as seriously as it takes the security of your balance. This document clearly explains what we collect, why we use it, and what rights you have under the LGPD — no unnecessary legal jargon.

Last updated: January 2026 LGPD Lei 13.709/2018 Brazilian Portuguese
🔒
Privacy Policy
Current version — January 2026
LGPD
Lei 13.709/2018
SSL
End-to-End Encryption
11
Sections
0
Data selling
LGPD
Full compliance
256-bit
SSL encryption
0
Sale of data to third parties
15 days
To respond to LGPD requests

What you need to know about your data

K456's core commitments to the privacy and data protection of Brazilian users.

Full compliance with the LGPD

K456 operates in compliance with the General Data Protection Law (Lei 13.709/2018). Every decision regarding data collection and use has undergone specific legal review within the Brazilian context.

  • Legal basis defined for each type of data collected
  • Designated Data Protection Officer (DPO)
  • Privacy impact report maintained
Your data is never sold

K456 does not sell users' personal data to third parties for advertising or any other commercial purpose. Your data belongs to you — full stop.

  • Zero commercial sharing with advertisers
  • Processor partners under confidentiality agreement
  • Bi-annual internal data flow audit
Encryption on all transactions

All data transmitted between your device and k456 servers — including your CPF, banking details, and betting history — is protected by 256-bit SSL encryption.

  • 256-bit SSL across all platform endpoints
  • Sensitive data stored with hashing and salting
  • Penetration testing conducted periodically
You control your data

The LGPD grants you a set of rights over your own data. At k456, you can exercise all of them simply by email — no red tape, with a response time of up to 15 business days.

  • Access, correction, and data portability
  • Withdraw consent at any time
  • Data deletion upon formal request
Cookies with a declared purpose

K456 uses strictly necessary cookies for platform functionality and, with your consent, analytics cookies to improve your experience. You can manage your preferences at any time.

  • Essential cookies: session authentication and security
  • Analytical cookies only with explicit consent
  • No cross-site tracking for advertising
Communications under your control

K456 only sends marketing communications — promotions, news, game alerts — if you have explicitly consented during registration or through your account settings. You can unsubscribe at any time.

  • Mandatory opt-in for promotional communications
  • One-click unsubscribe in email
  • Manageable preferences in account settings

Your rights guaranteed by the LGPD

Lei 13.709/2018 grants you concrete rights over your personal data. Here's how to exercise them at k456.

Access

Request a complete copy of all personal data k456 holds about you. We will respond within 15 business days with a detailed report organized by data category.

Correction

If any registered information is incorrect or outdated, you can request a correction directly through support or in your account settings. Financial and identity data requires additional verification.

Deletion

Request the deletion of your personal data after account closure. Minimum data may be retained for the legally required period for regulatory compliance and anti-money laundering purposes in Brazil.

Portability

Receive your data in a structured, machine-readable format for transfer to another controller. Applies to data provided on the basis of consent or contractual performance.

Withdrawal of consent

You may withdraw your consent to any processing based on this legal ground at any time. Withdrawal does not affect processing carried out prior to it.

Sharing information

You have the right to know which entities k456 shares your data with. This policy lists all recipient categories transparently in the sharing section.

Right to object to processing

If you object to any data processing that is not strictly necessary for the performance of the service, you may formally oppose it. k456 will review the request in accordance with LGPD requirements.

How to exercise your rights

Send an email to contato@k456.best with the subject "LGPD Rights — [your right]" from your registered email address. We respond within 15 business days as required by law.

This Privacy Policy describes how k456 (k456.best) collects, uses, stores and protects the personal data of Brazilian users, in compliance with the General Data Protection Law (LGPD — Lei 13.709/2018). By creating an account or using any k456 service, you confirm that you have read and understood this document.

1 Data Controller

For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), the controller of personal data collected by the k456 platform is the operating company of the website k456.best, responsible for all decisions regarding the processing of personal data of users registered in Brazil.

K456's Data Protection Officer (DPO) can be reached through the following channel:

  • Email: contato@k456.best (subject: "DPO — Data Protection")
  • Response time: up to 15 business days for LGPD-related requests

Accountability: k456 is the sole data controller for user data for the purposes described in this policy. No business partner has access to the platform's full personal data database.

2 Data Collected

K456 collects only the data necessary to operate the platform and meet legal obligations. The data collected falls into the following categories:

Category Specific data Mandatory
Identity Full name, date of birth, CPF, identity documents (RG, CNH) Yes
Contact Email address, mobile number, residential address Yes
Financial Pix key, card data (tokenized), deposit and withdrawal history Yes
Bets Betting history, games played, amounts wagered, wins and losses Yes
Technical IP address, device type, operating system, browser, access logs Automatic
Preferences Favorite sports, notification preferences, account settings Optional

K456 does not collect data falling into sensitive categories as defined by the LGPD, such as racial origin, political opinion, health data, sexual orientation, or biometric data beyond what is strictly necessary for legal identity verification.

Financial payment data — such as credit/debit card numbers — is never stored directly on k456 servers. All processing is handled by PCI-DSS certified payment gateways, which return only secure tokens to the platform.

3 Processing Purpose

Every piece of data collected by k456 has a specific, declared purpose. No data is collected without a defined reason:

  • Registration and authentication: Verify user identity and create and maintain an active account on the k456 platform.
  • Transaction processing: Process deposits via Pix, boleto, credit/debit card, PicPay, Mercado Pago and TED bank transfer, as well as withdrawals to the Pix key registered in the user's name.
  • Legal compliance (KYC/AML): Verify user identity and the origin of funds in compliance with anti-money laundering and Know Your Customer requirements applicable in Brazil.
  • Fraud prevention: Monitor suspicious activity, detect unauthorized access, and protect the integrity of bets on the platform.
  • Operational communications: Send transaction confirmations, security alerts, and account notifications — communications that cannot be disabled as they are essential to account operation.
  • Marketing (with consent): Send promotions, bonuses, news and communications about games from the Libertadores, Brasileirão and other events available on k456 — only if you have given your consent.
  • Product improvement: Analyze aggregated and anonymized platform usage data to identify improvements to the interface and user experience.
  • Responsible gambling: Monitor usage patterns that may indicate problem gambling behavior, in line with k456's responsible gambling tools.

Minimization principle: k456 collects only the data strictly necessary for each purpose. When a feature can be delivered without collecting additional data, we choose not to collect it.

5 Data Sharing

K456 does not sell users' personal data. Sharing only occurs in the following situations, always with adequate contractual safeguards:

  • Payment processors: Minimum data required to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago and TED bank transfer to institutions such as Nubank, Itaú, Bradesco, Banco do Brasil and certified gateways. These processors act as sub-processors and are bound by data protection agreements.
  • Game providers: For Live Casino games and slots (Evolution Gaming, Pragmatic Play, Playtech), only an anonymized user identifier is shared for session purposes. No personally identifiable data is transmitted to providers.
  • Technology infrastructure: Hosting, CDN, and DDoS protection services that process data as technical operators under a confidentiality agreement with k456.
  • Regulatory and legal authorities: When required by law, court order, or request from a competent authority in Brazil, k456 provides only the data specifically requested, notifying the user when legally permitted.
  • External auditors: Security and compliance audit firms that periodically review k456's controls. Access is restricted, supervised and covered by NDA.

International transfer: Some infrastructure and game providers have servers outside Brazil. In such cases, k456 requires that the level of protection offered be equivalent to that of the LGPD, in accordance with art. 33 of Lei 13.709/2018.

6 Data Retention

K456 retains personal data for only as long as strictly necessary for each purpose, in compliance with mandatory legal retention periods in Brazil:

  • Active account data: Retained for as long as the account remains active and for up to 5 years after closure, in accordance with anti-money laundering compliance requirements (Law 9.613/1998).
  • Financial transaction records: 5 years after the transaction, in accordance with Brazilian tax and financial legislation.
  • Betting history: 5 years after the bet, for audit and dispute resolution purposes.
  • Access and security logs: 6 months, in accordance with the Brazilian Internet Civil Framework (Law 12.965/2014).
  • Marketing data (with consent): Until consent is withdrawn by the user.
  • Identity verification data (KYC): 5 years after account closure, in accordance with applicable anti-money laundering regulations.

Once the applicable retention period expires, data is securely and irreversibly deleted or anonymized so it can no longer be linked to a specific individual. Users may request early deletion of data not subject to mandatory legal retention periods.

7 Data Security

K456 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, or improper disclosure:

  • Encryption in transit: All traffic between the user's device and k456 servers is secured with TLS 1.3 (256-bit SSL).
  • Encryption at rest: Sensitive data stored on k456 servers is encrypted with AES-256.
  • Two-factor authentication (2FA): Available and encouraged for all k456 platform accounts.
  • Internal access controls: k456 employees access personal data only to the extent required by their role, with auditable access logs.
  • Security testing: Penetration testing and vulnerability scanning are carried out periodically by a specialized team.
  • Incident response plan: k456 maintains a documented procedure for detecting, containing and reporting security incidents, in accordance with art. 48 of the LGPD.

Incident notification: In the event of a security incident that may put users' rights at risk, k456 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected individuals within a reasonable timeframe, as required by the LGPD.

8 Cookies and Similar Technologies

K456 uses cookies and similar technologies (pixels, local storage) for the proper functioning of the platform and to improve the user experience. The cookie categories used are:

  • Strictly necessary cookies: Essential for authentication, session security, and basic platform functionality. These cannot be disabled, as k456 cannot operate without them. Examples: authentication token, language preferences, session identifier.
  • Analytical cookies (with consent): They collect anonymized data about how users navigate the platform — pages visited, session time, features used — to help k456 identify product improvements. Activated only with your explicit consent.
  • Preference cookies (with consent): Store preferences such as favorite sports, preferred odds, and display settings to personalize your experience at k456.

K456 does not use cross-site tracking cookies for advertising purposes, nor does it share cookie data with third-party advertising networks. You can manage your cookie preferences in the banner shown on your first visit or in your account settings at any time.

9 Minors

The k456 platform is strictly intended for individuals aged 18 years of age or older. k456 does not intentionally collect personal data from individuals under 18 and does not allow minors to register or use any service on the platform.

If k456 determines that it has collected data from a user under 18 — whether through false registration details or any other reason — the account will be immediately suspended, the data will be deleted, and the balance will be handled in accordance with the Terms and Conditions and applicable Brazilian law.

If you suspect that someone under 18 has created an account on k456, please contact our support team immediately via live chat or at contato@k456.best so the situation can be investigated and resolved.

🔞 Prohibited for minors: Registration with k456 requires a valid CPF and identity documentation confirming that the user is of legal age. Age verification is part of the platform's mandatory KYC process.

10 How to Exercise Your Rights

To exercise any right guaranteed by the LGPD regarding your personal data at k456, follow the procedure below:

  1. Send an email to contato@k456.best from the email address registered on your account.
  2. In the email subject line, use the following format: "LGPD Rights — [Right Name]" (e.g., "LGPD Rights — Data Access", "LGPD Rights — Data Deletion").
  3. In the body of the email, clearly describe what you are requesting and include your full name and registered CPF for identification.
  4. For security purposes, k456 may request additional documents to verify your identity before processing the request.
  5. You will receive a response within 15 business days, in accordance with the timeframes established by the LGPD.

If you are not satisfied with k456's response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

11 Changes to This Policy

K456 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or platform features. Any material change will be communicated to users at least 7 days in advance via registered email, along with a summary of the key updates.

The most recent version of this policy will always be available at k456.best/privacy-policy, with the last updated date shown at the top. Continued use of the k456 platform after the effective date of any new terms constitutes acceptance of the updates.

Current version: January 2026. Previous policies are archived and available upon request to k456's DPO at contato@k456.best.

Privacy isn't a detail — it's part of the product of k456

When you register at k456 and make a deposit via Pix, you are entrusting your personal and financial data to a platform. That is a responsibility k456 takes very seriously — not because the law requires it, but because it has been part of how the platform was built from day one.

The LGPD (Lei 13.709/2018) came into force in 2021 and permanently changed the data privacy landscape in Brazil. Before it, many companies collected data indiscriminately and used it for purposes never disclosed to users. k456 sees the LGPD not as a compliance cost, but as a baseline standard that reinforces the data protection practices the platform had already adopted before the law took effect.

A practical example: k456 does not store full credit card numbers on its own servers. When you use a card to make a deposit, the entire transaction is handled by a PCI-DSS certified payment gateway, which returns only a secure token to k456. This means that even in a hypothetical security incident involving k456's servers, your card financial data would not be exposed — because it simply isn't stored there.

Transparency around cookie use is another area where k456 goes beyond the minimum. Many platforms treat cookie banners as a legal formality while continuing to track users for advertising purposes. k456 does not use cross-site tracking cookies or share browsing data with ad networks. Analytics cookies that collect data on how you use the platform — which sections you visit, how long you spend in each area — are only activated with your explicit consent and used solely to improve the experience on k456, not for targeted advertising.

The data you provide to k456 when you register — your CPF, email, phone number, address — is used to operate your account, process your financial transactions in BRL, and fulfill the legal identity verification requirements in Brazil. It is not used to build an advertising profile, is not sold to other businesses, and is not cross-referenced with data from other platforms for commercial purposes. This may seem obvious, but it is not universal in the market — and k456 believes that stating it explicitly is part of the trust contract with its users.

If you exercise any of your LGPD rights — access, correction, deletion, or portability requests — k456 responds within 15 business days. The process is straightforward: one email to contato@k456.best with the right subject line. No bureaucratic forms, no endless queues, no justification required for most requests. Your data, your rules — within the limits of the law.

Questions about privacy at k456

The most common questions about how k456 handles and protects the personal data of Brazilian users.

No. k456 does not share users' personal data with other betting operators, competitors or any third-party betting company. Data sharing occurs only with the payment processors needed to handle your Pix, boleto and credit/debit card transactions, and with game providers for technical session purposes — never with full personal identification. All sharing is governed by data protection and confidentiality agreements.

After account closure, k456 retains only the data required by law: financial transaction records for 5 years (tax and anti-money laundering legislation), access logs for 6 months (Marco Civil da Internet), and KYC identity verification data for 5 years (anti-money laundering regulations). All other data — preferences, browsing history, cookies — is deleted within 30 days of account closure. You may request early deletion of data not subject to mandatory legal retention periods by emailing contato@k456.best.

No. k456 does not use your personal data to display targeted advertising on other platforms, social networks, or websites. The platform does not integrate third-party ad networks or share data with external advertisers. k456's marketing communications — when you have consented to receive them — are sent directly by email or in-platform notification, with no involvement from external advertising networks.

Your Pix key is stored in encrypted form on k456's servers and is used solely to process withdrawals you request. It is not shared with any third parties beyond the payment processors required to complete the transaction. Credit/debit card data is never stored directly by k456 — processing is handled by PCI-DSS certified gateways that return only secure tokens. Additionally, all withdrawal requests require account authentication before being processed, and any change to the registered Pix key triggers an additional security verification.

You can opt out of promotional communications from k456 in three ways: by clicking the "Unsubscribe" link in the footer of any marketing email sent by k456; by going to the notification settings in your account and turning off the communication types you no longer wish to receive; or by emailing contato@k456.best to request removal of your marketing preference. Opt-outs are processed within 5 business days. Operational communications about your account — transaction confirmations, security alerts — cannot be disabled as they are essential to the service.

Related documents: This Privacy Policy is part of the set of documents governing the use of k456, together with the Terms and Conditions and the Responsible Gambling. For questions about data protection or to exercise your LGPD rights, contact us at contato@k456.best with the subject line "LGPD Rights". Live chat support is also available 24 hours a day to clarify any aspect of this policy.

Your data protected. Your money secure. Welcome to k456

Create your account in under 2 minutes, deposit from R$ 10.00 via Pix, and bet with the confidence of a platform that respects your privacy and complies with the LGPD.

LGPD Lei 13.709/2018 SSL 256-bit Pix in up to 10 minutes 100% Bonus up to R$ 500.00
Português