Cookie and Similar Technologies Policy

1. This version and why it replaces the previous one

This is version 2.2 of the jogodobicho.com Cookie Policy, in force since 7 October 2026. It replaces version 2.1, dated 6 October 2026, which replaced version 2.0, dated 29 September 2026, which in turn fully replaced version 1.0, dated 5 August 2026.

Version 1.0 was written as if the site were a real-money operation, with a government authorisation, verified registration and payment methods. None of that ever existed. The jogodobicho.com site is a free entertainment game: it is played with virtual chips that have no value, and there are no deposits, no withdrawals and no prizes of monetary value.

Version 1.0 also did not describe the use of cookies accurately. It left out items the site stores in the browser, among them the identifier used by our own visit counter; it presented Google Analytics, which depends on consent, as the only measurement, when that counter works without consent; it stated that account data stayed in Brazil, when the site is hosted in the United States; and it said your choice would be recorded together with the policy version and that earlier versions would remain published, which the site does not do. This version corrects those points.

Version 2.1 only changes where the notice appears at the game tables: above the table when the first game starts —not before, while the table is being set up or waiting for an opponent—, in a compact form that makes room for the game instead of covering its buttons; if the game does not fit with the notice (a small screen, a phone held sideways or heavy zoom), the notice appears when you leave the table. The options, the buttons and what is stored have not changed.

Version 2.2 completes the list in section 4, which was presented as complete and was not: it was missing jdb_mesa:… —the table you are sitting at, so you return to it if you reload the page— and jdb_bg_piel, which stored the backgammon board style and which the site now removes. It adds jdb_bg_fichas, where your choice of backgammon checkers is kept. Nothing else changed.

Legal basis: Lei 13.709/2018 (LGPD), art. 6, VI (transparency)

2. Who is responsible and where this policy applies

The party responsible for the jogodobicho.com site, under the Jogo do Bicho brand, and for processing the data described here is [to be provided], with its address at [to be provided].

This policy applies to the pages of the jogodobicho.com domain. Third-party and partner sites you reach from here have their own policies, and this one does not apply to them.

It complements the Privacy Policy, which describes all the personal data processing done by the site, including account and gameplay data.

Legal basis: Lei 13.709/2018 (LGPD), art. 9, III and IV

3. Cookies and similar technologies, in brief

A cookie is a small text file that a site asks the browser to keep and that the browser sends back to the site on later visits. It is not a program: it does not run anything on your device or read your files.

This site makes little use of cookies as such and more use of two other browser technologies that do a similar job. This policy treats all three the same way:

• Cookies: sent to the server with every request. The site sets a single cookie of its own, for the language; the Google Analytics cookies only exist if you accept audience measurement.
• Local storage (localStorage): stays in the browser until it is erased and is not sent to the server by itself. This is where your session credential is kept.
• Session storage (sessionStorage): the same as the above, but it disappears when the tab is closed.

Legal basis: Lei 13.709/2018 (LGPD), art. 5, I

4. What the site stores in your browser

This is the complete list of what the site writes to the browsers of visitors and players as of this version. If you find in your browser any item from this site that is not listed here, let us know through the channels in section 10.

Each line reads: name — where it is kept — type — what it is for — how long it lasts. “Until erased” means: until you clear the site’s data in your browser or, where stated, until the site itself removes the item.

• jdb_lang — first-party cookie — preference — keeps the language of the last page you opened (/pt, /es or /en), so the site opens in it on your next visit — 365 days, renewed on every page opened.
• jdb_token — local storage — necessary — your session credential, which proves to the server who is making each request. If you play without an account, the site automatically creates a guest account on the server, with no email or password, and keeps its credential here — until you log out, until the credential expires (the site removes it when the server rejects it) or until erased.
• jdb_user — local storage — necessary — written when you log in or create an account: the account identifier and email plus a few technical fields (account type, status and the site the account belongs to), used to build the screen — until you log out, until the session expires or until erased.
• jdb_cookies — local storage — necessary — keeps your choice about audience measurement (yes or no) and the date and time of that choice — until erased.
• jdb_sid — local storage — own measurement, without consent — a random browser identifier used by the visit counter described in section 5 — until erased.
• jdb.casino.mudo — local storage — preference — remembers whether you turned off the sound of the casino games and the tables — until erased.
• jdb.sorteo.muted — local storage — preference — remembers whether you turned off the draw sound on the jogo do bicho board — until erased.
• jdb_bg_fichas — local storage — preference — remembers which checkers you chose for backgammon (black and white, or animals). It only affects your screen: it does not change what your opponent sees — until erased.
• jdb_op_slug — session storage — necessary — only when the site is shown inside a partner’s site: identifies that partner, so the following pages in the same tab keep its brand and settings — until the tab is closed.
• jdb_embed — session storage — necessary — only when the site is shown inside a partner’s site: marks that the tab is in that mode — until the tab is closed.
• jdb_mesa:backgammon, jdb_mesa:generala and jdb_mesa:truco — session storage — necessary — written when you sit at a table and renewed with every update of the game: the table’s identifier and the time, so you return to it if you reload the page or switch language — removed when you leave with “Leave”, when the game ends while you are at the table, or when you close the tab. If you leave the page any other way, it stays in that tab until you close it or open that game again: if the table is still open, you return to it; if not, or if more than 30 minutes have passed without updates, it is removed.
• _ga and _ga_Q5TG9VEP4L — Google Analytics cookies, set on the site’s domain by Google’s script — measurement, only with your consent — tell one browser from another and keep the measurement state (section 5) — duration set by Google, whose default is 2 years.
• rf_token, rf_refresh and rf_user_id — local storage — left over from an earlier version — they belonged to a single sign-on between sites that no longer works here. The site does not create these keys: if they exist in your browser, it may read rf_refresh to try to renew the session, and it removes all three when you log out or when the session expires.
• jdb_bg_piel — local storage — left over from an earlier version — it stored the backgammon board style. The site no longer uses it and removes it the next time you open backgammon.

Legal basis: Lei 13.709/2018 (LGPD), art. 9, I and II · Lei 12.965/2014 (Marco Civil da Internet), art. 7, VIII

5. Audience measurement: our own counter and Google Analytics

The site measures page usage in two ways, and they follow different rules.

Our own visit counter. For every page you open, the browser sends our server the address of the page, with any parameters it has, and the jdb_sid identifier. The server stores the page path, any campaign parameters (utm_), the jdb_sid identifier and the date and time. It also stores the full identification string the browser sends (user-agent) and the address of the page the request came from (referer), which, since the request is made by the site itself, is normally the full address of the page you opened, parameters included. From the browser identification it works out the device type, the operating system and the browser, with their versions, and whether the visit looks like it comes from a robot; from the IP address it works out the approximate location (country, region, city and time zone). The IP address is not stored in that record: only a cryptographic digest of it is kept, computed with a secret value.

That record does not include your account: the counter does not send the session credential. The figures are used to count visits and visitors and to see which pages and campaigns are used, in an internal administration dashboard.

The counter works without asking for consent and does not depend on the choice you make in the cookie notice. If you delete jdb_sid, a new identifier is created on the next page; if you block the site’s local storage, visits are still counted, but without an identifier.

The approximate location is worked out with a geolocation database installed on the server itself or, when it is not available, with the external service ip-api.com, which in that case receives the IP address.

Google Analytics 4. It is only loaded if you accept audience measurement in the cookie notice. In that case, the browser downloads Google’s script, sets the _ga and _ga_Q5TG9VEP4L cookies and sends Google data about your browsing, such as the pages opened, the device and browser type and where the visit came from. Google processes that data under its own terms, and that processing may take place outside Brazil.

Until you accept, Google’s script is not loaded and those cookies are not set.

Legal basis: Lei 13.709/2018 (LGPD), art. 7, I, and art. 8, §5 (Google Analytics) · Lei 13.709/2018 (LGPD), art. 9, I, II and V

6. How to accept, refuse and change your mind

On your first visit a notice appears with three buttons: “Accept all”, “Only necessary” and “Preferences”. It sits at the bottom of the page. At the game tables it appears above the table when the first game starts —not before, while the table is being set up or waiting for an opponent—, in a compact form that makes room for the game instead of covering its buttons; if the game does not fit with the notice (a small screen, a phone held sideways or heavy zoom), the notice appears when you leave the table. Refusing takes the same single click as accepting. Under “Preferences” there is one option, “Audience measurement”, which starts unticked if you have not chosen yet, and a “Save preferences” button.

The notice does not block the site: you can browse and play without answering it. Once you choose, it does not come back on every visit, only if you clear the site’s data in your browser.

Your choice is kept only in your browser (jdb_cookies), with the date and time. It is not sent to our server and is not linked to a version of this policy.

You can change your mind at any time through the “Cookie preferences” link in the page footer. When you withdraw consent, Google’s script is no longer loaded from the next time the page loads; if it was already loaded in the open tab, it may remain active there until you reload or close the tab. The site does not delete _ga cookies that were already set: delete them through your browser (section 9).

Refusing measurement changes nothing in how the site or the games work. No data kept in your browser takes part in drawing the results.

Legal basis: Lei 13.709/2018 (LGPD), art. 8, caput and §5 · Lei 13.709/2018 (LGPD), art. 18, IX · Lei 12.965/2014 (Marco Civil da Internet), art. 7, IX

7. What is recorded on the server, outside your browser

Some information is recorded simply because you access the site and does not depend on anything kept on your device. Deleting cookies does not delete it.

Where: the site and its database run on DigitalOcean servers located in the United States. The data described in this policy is therefore processed outside Brazil.

Retention: this version does not set a retention period for the web server logs or for the visit counter records, and at present there is no automatic deletion of the visit counter records.

These records are:

• Web server logs: for every request, except those for some image files, the server notes technical data such as the IP address, the date and time, the address requested and the browser identification. They are used to run the site and to investigate errors and abuse.
• Visit counter records, described in section 5.
• Account and gameplay data, including guest accounts, described in the Privacy Policy.

Legal basis: Lei 13.709/2018 (LGPD), art. 9, I and II · Lei 12.965/2014 (Marco Civil da Internet), art. 7, VIII

8. Third parties and links to other sites

The only third party that sets cookies through this site is Google, and only with your consent (section 5). The site does not set advertising cookies and does not send browsing data to data brokers or ad networks.

Besides Google and DigitalOcean, which hosts the site (section 7), the following third parties may receive data about your browsing, in the situations described:

• ip-api.com, a geolocation service: may receive your IP address when the server needs to work out your country or approximate location (visit counter, deciding whether to show the home-page affiliate ticker and block, registration and login); the lookup is made without encryption (HTTP).
• TheLotter, only for visitors outside Brazil: the home page may show a ticker and an affiliate block with the jackpots of international lotteries offered by the TheLotter site. Visitors in Brazil, or visitors whose country cannot be determined, are not shown them; to decide, the server works out the country from the IP address, without storing it in the database. The ticker and the block do not set cookies. If you click a lottery, the site opens TheLotter in another tab, with parameters that identify this site as the source, and records the click on buylotto.com (the lottery chosen, the language and a random click code). When a lottery clicked in the ticker has no known page on TheLotter, buylotto.com opens instead, without that record.
• The “Partners” section of the home page, shown to all visitors: cards for other sites, among them BuyLOTTO. When you click the Quini and SuperOnce cards, the address that opens carries your session credential, if there is one, so you arrive already signed in. The other cards, including BuyLOTTO’s, are ordinary links: they open the site in another tab without carrying the credential.

Legal basis: Lei 13.709/2018 (LGPD), art. 9, V

9. How to control everything from your own browser

Besides the cookie notice, your browser lets you view and delete the cookies and data this site stores, including the necessary ones, and browse in an incognito or private window, where everything is erased when the window is closed.

Blocking the site’s storage prevents the session credential from being kept, and without it you cannot log in or play. Clearing the site’s data leaves this browser without the session (a guest session is lost, together with its chips, and a new one is created on the next game), makes the cookie notice appear again, erases the sound preferences and generates a new visit counter identifier.

Clearing browser data does not erase what is on the server (section 7) and does not close your account; that is done in your profile, under “Close account”.

The settings are usually found here:

• Google Chrome: Settings, Privacy and security, Cookies and other site data.
• Mozilla Firefox: Settings, Privacy and Security, Cookies and Site Data.
• Safari: Preferences or Settings, Privacy.
• Microsoft Edge: Settings, Cookies and site permissions.
• Mobile browsers: the same options appear in the settings menu of the browser app.

10. Your rights and how to contact us

You withdraw consent for Google Analytics yourself, in the cookie notice (section 6), without having to ask.

For any other request there is currently no screen on the site: write through the site’s contact form or to contacto@jogodobicho.com. Data protection matters may also be sent to [to be provided].

If you believe your rights have not been respected, you may lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

The main rights the LGPD grants you over this data are:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or out-of-date data;
• anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• deletion of data processed on the basis of your consent;
• information about whom the data is shared with;
• withdrawal of consent.

Legal basis: Lei 13.709/2018 (LGPD), art. 18, caput, items I to IX, and §1

11. Changes to this policy

When what the site stores in the browser, or who receives that data, changes, this policy is updated and given a new version and date, shown at the top of the document.

The site publishes only the current version of each document; earlier versions are not available on it.

Your choice about audience measurement does not depend on the version of this policy: it remains valid until you change it or clear the site’s data.