sebet: Privacy Policy and Data Protection
This page explains, in a straightforward way, how sebet handles personal data in the site environment, which rights the data subject can exercise, and which points still depend on validation in the received material.
Focused reading on transparency, LGPD, and practical use of the site. Where there is unconfirmed information, the text marks it as pending review.
What this policy covers
The policy applies to the address /privacidade/ and to the use of the sebet site in Brazilian Portuguese. It organizes the points that normally appear in navigation, registration, account, promotions, support, cookies, and routes linked to games, bonuses, and contact.
The goal is simple: to inform what was confirmed in the received data and separate what still needs validation. This avoids vague promises and helps the visitor understand what can actually happen with their data.
When a detail was not provided in the current input, it should not be treated as fact. In privacy, what has not been confirmed remains pending.
Quick summary for immediate reading
The site may process data related to registration, account access, browsing, support, promotions, and PIX operations. It may also record technical information from the browser and device for operation and basic session security.
- Registration: the material confirms use of +55, password, and password confirmation.
- Account and operation: there are profile, balance, deposit, withdrawal, and VIP/Rebate/Agent areas.
- Payments: the displayed flow includes PIX and deposit ranges, but that does not define retention or recipients.
- Review needed: controller, privacy contact, retention period, and international transfers were not informed.
What personal data may be processed?
Based on what has been confirmed, sebet may handle data that the user themselves provides during registration and interactions with the site. It is not correct to assume fields that did not appear in the actual form.
Confirmed data in the received material
- Mobile number with Brazilian area code (+55);
- Password and password confirmation;
- Browsing data and account usage data, when the user accesses areas such as profile, balance, deposit, and withdrawal;
- Information sent in contact, support, or customer service;
- Data linked to campaigns, bonuses, promotions, and account activities.
What should not be assumed
- CPF;
- date of birth;
- identity documents;
- full banking details;
- biometrics;
- any field not seen in the actual form.
Under the LGPD, collection needs to match the user's real experience. The fact that a platform operates with games, PIX, or promotions does not authorize inventing fields that were not verified.
How sebet uses the data
The data may be used to allow registration, authentication, account maintenance, execution of financial operations displayed on the site, response to requests, and communication about available features or campaigns.
In an environment like sebet's, this may also include account abuse prevention, technical functionality checks, and organization of internal support flows. The central point is to keep the service running without turning every interaction into excessive collection.
- create and maintain the user's account;
- carry out access to the site areas;
- process deposit, withdrawal, or support requests when applicable;
- communicate news, bonuses, and promotions;
- retain records necessary for security, internal audit, or legal obligation, if there is a valid basis.
Legal bases for processing
The LGPD requires each activity to have an appropriate legal basis. Since the received input did not include the full legal matrix, some points remain marked as pending confirmation.
| Activity | Likely legal basis | Status |
|---|---|---|
| Registration and authentication | Performance of a contract or preliminary procedures | Pending validation |
| Site use and support | Legitimate interest, contractual performance, or consent, as applicable | Pending validation |
| Promotional communications | Consent or another applicable basis, if confirmed | Pending validation |
| Technical logging and security | Legitimate interest and compliance with a legal obligation, where applicable | Pending validation |
| PIX and financial operations | Performance of a contract and compliance with a legal obligation, according to the actual flow | Pending validation |
If the official policy already has the legal-basis matrix, this table should be adjusted to reflect the controller's actual text.
Payment Data and PIX
The visual material confirms the presence of PIX and areas such as deposit and withdrawal, with operation banners displayed. This shows the platform’s functional context, but it does not allow us to conclude how financial data is stored, how long it is kept, or which institutions participate in the flow.
It is also not correct to claim, without proof, that sebet receives or keeps complete banking data. What is safely established here is only the indication that the user can interact with a PIX payment flow within the account.
If a financial data point was not seen in the form, receipt, or official policy, it should not be treated as a confirmed part of the processing.
Information Security
Without additional verified facts, this policy does not state specific technical standards such as full encryption, SSL, 2FA, or profile-based restricted access. The text can only record what has been confirmed.
Recommended best practices for users
- use a strong and unique password;
- do not share your access code with third parties;
- check that you are on the official domain before entering data;
- be wary of messages asking for payment outside the known flow;
- protect the mobile phone and email linked to the account.
Cookies and similar technologies
The site has its own route for cookies, which indicates specific handling of the topic. Even so, the exact type of cookie, the detailed purpose, and the existence of consent management tools were not provided in the material received.
Therefore, the correct reading is this: the privacy page acknowledges that cookies and similar features may be used, but the final classification depends on the official content of /cookies/.
Sharing with third parties
There was no confirmation of a list of partners, processors, payment providers, analytics, hosting, or anti-fraud services. So names should not be invented, nor should anyone promise that “there is never any sharing”.
The most that can be said, based on the site context, is that data may circulate between operational areas necessary for registration, account, PIX, support, and compliance with legal obligations, when this is provided for in a contract or official policy.
Storage, retention, and deletion
The retention period was not provided. There is also no basis to claim immediate deletion or automatic removal at the user’s request in any scenario.
In practice, data retention usually depends on three factors: the purpose of processing, legal obligation, and the need for defense in legal proceedings or audits. If the official policy provides a specific period, it should replace this note.
International transfer
There is no confirmation of international data transfer, nor of the countries involved, nor of the protection mechanism applied. Therefore, this section remains under review.
If there is hosting outside Brazil, use of global tools, or international technical support, this must be described objectively in the final version of the policy.
Data subject rights under the LGPD
The data subject may request confirmation of processing, access, correction, anonymization, blocking, deletion where applicable, portability when applicable, information about sharing, and review of automated decisions, if any exist.
They may also request withdrawal of consent, when that is the legal basis used. This does not automatically eliminate other processing that must be retained due to legal obligation or the regular exercise of rights.
Privacy on mobile and in the browser
The site can be accessed in a mobile browser, and this changes the way you navigate, not the legal nature of the policy. No confirmed native app for iOS or Android was provided in this input, so camera, location, or push permissions should not be assumed.
If sebet offers an app through its own route, the app policy needs to explain which data the app collects, which permissions it requests, and whether the processing differs from the web version.
Protection of minors
The site presents itself as an environment for adults. In services of this type, the policy usually reinforces that minors should not create an account or submit personal data. Since the input did not include a detailed operational rule, there is no way to confirm an automatic blocking or deletion mechanism.
Changes to this policy
This page may be updated to reflect real changes in operations, technology, contact details, or legal obligations. The update date was not confirmed in the current material, so the effective version must display this information before final publication.
When there is a revision, the new wording must replace the previous one without mixing old facts with flows that have already been deactivated.
Privacy contact
The official privacy channel was not confirmed in the input received. Therefore, the safe guidance is to use only the route published on the site itself and avoid unverified channels.
If there is a data protection officer, email, form, or dedicated page, they should appear here with the same details as the official policy and the institutional footer.
Practical tips to protect your data
- always enter through sebet’s official domain;
- avoid saving your password on shared devices;
- do not send receipts or documents outside the correct channel;
- review bonus and promotion messages before clicking;
- keep the account email and mobile phone under personal control.
Frequently Asked Questions
What data does sebet confirm collecting during registration?
The material received confirms only +55, password, and password confirmation. Other fields, such as CPF, ID document, or date of birth, cannot be assumed without checking the actual form.
Does the policy already state who the controller is?
No. The controller was not identified in the data received. This point remains pending and must be validated before treating the page as the final version.
Does sebet use PIX?
Yes, the visual flow shows PIX and areas linked to deposits and withdrawals. However, that does not define which financial data is stored, for how long, or which third parties are involved.
Can I request deletion of my data?
The data subject may request deletion when there is a legal basis for it, but the LGPD allows exceptions. Data that must be kept due to legal obligation or defense of rights may remain stored.
Is there confirmed information about cookies?
There is a dedicated route for cookies, but the exact classification of the cookies and their purposes were not detailed in the source. The final content depends on the /cookies/ page.
How do I contact the privacy team?
The official channel was not confirmed in the material received. Use only the route published on the site and check whether the contact information in the final version matches the policy, the footer, and the support page.
This page was structured for objective reading and later legal review. Where the facts were not confirmed, the text keeps the status as pending instead of inventing details.
Version ready for final adjustment with controller, contact, update date, retention, and sharing effectively verified.
Need to review a specific point?
If you want to check contact, terms, cookies, or frequently asked questions, use the official channels already published on the site.
Go to official contact