Privacy Policy

1. This version and why it replaces the previous one

This is version 2.1 of the Jogo do Bicho Privacy Policy, in force since 29 September 2026. It fully replaces version 1.0, of 5 August 2026, and version 2.0, of the same day, from which it differs in sections 5, 8 and 10: the password-recovery link is now one of the service emails (section 5), and the link to Quini and SuperOnce no longer carries your session credential but a single-use code, whose record is added to the data we keep (sections 8 and 10).

Version 1.0 described procedures, data and services that this site does not have. jogodobicho.com is a free entertainment game: the chips are virtual and have no value; they are not bought, sold, transferred or exchanged for money or prizes; and there are no deposits, no withdrawals and no prizes of value.

This version describes only what the site does with your data today. Where something does not exist — a tool, a time limit, a procedure — we say that it does not exist instead of promising it.

Legal basis: Lei nº 13.709/2018 (LGPD), arts. 6º, VI (transparency), and 9º

2. Who is responsible and how to contact us

The party responsible (the controller) for the personal data processed at jogodobicho.com is [to be provided], with its address at [to be provided]. When this Policy says “we”, it means that party.

For anything concerning your personal data, use the site’s contact form at jogodobicho.com/en/contacto, or write to [to be provided] or to our support address, contacto@jogodobicho.com. Messages sent through the form are recorded in our database.

This version does not name a data protection officer (the “encarregado”, or DPO, under the LGPD). Requests about personal data received through any of these channels are handled by the controller’s team.

Legal basis: LGPD, arts. 5º, VI and VIII, 9º, III and IV, and 41

3. What data we process

We process the data below, depending on how you use the site:

• Without signing up (guest mode): when you open the home page or a game screen without being logged in, the site automatically creates a guest account with no email, password, name or date of birth. It stores an internal identifier, the chip balance and chip movements, your plays and their results, and the IP address at the moment it was created.
• Sign-up: email address; password, stored only as a hash (bcrypt), never in readable form; first name and surname; date of birth; language; whether your email has been confirmed; phone number, only if you choose to give it — in that case it is verified with a code sent by SMS and we store whether verification was completed; the account’s country, inferred from the IP address; and the precise location of your device, only if you allow it and under the conditions in section 6.
• Acceptance: when you sign up through the site’s form, we record that you accepted the Terms of Use and this Policy — document, version, date and time, IP address, browser and language.
• Play: chip balance and movements, plays, results and history; the account’s play limits (those the site may set on its own when the account is created and those you change), the breaks and self-exclusions you request and the closure of your account, if you request it; and the start, last activity and end of your play sessions.
• Social tables (backgammon, generala and truco): your moves, the seat you take and the name shown to the other players (section 8). Table chat messages are relayed in real time to the participants and are not stored in the database.
• Security: sessions opened by logging in (IP address, browser, start and end); login attempts with a wrong password and the temporary lockouts they cause; and an audit trail of actions on the account, with IP address, browser and the state before and after each action. The web server also logs requests (IP address, date and time, requested address and browser).
• Support: the name, email address, phone number (optional) and message you send us, together with the IP address and browser it came from, the automatic classification of the message (section 5) and the text of any automatic reply sent.
• Visit statistics: the page viewed, a visitor identifier stored in your browser (section 7), the referring page, campaign parameters present in the address (utm), device type, operating system and browser, and the country, region, city and time zone inferred from the IP address. The IP address itself is not stored in that table, only a code derived from it (a hash with a secret key), and the table does not record your account identifier.

Legal basis: LGPD, arts. 5º, I, and 9º, I and II

4. What we do not process

The sign-up form does not ask for a CPF, identity document, home address, nationality, occupation or a photo of your face, and the site does not verify identity through documents or biometrics. There is no gender field.

We do not process financial data, because there is no money: the site has no deposits, withdrawals, payment methods, bank accounts or prizes of value, and it does not collect card details or details of any other payment method.

We do not send advertising by email, SMS or notification, and so we do not ask for marketing consent. The emails we send are service emails (section 5).

The site does not use artificial intelligence to classify your messages or to answer them automatically: classification uses fixed rules and automatic replies are standard texts.

Legal basis: LGPD, art. 6º, III (necessity)

5. What we use the data for, and on which legal basis

Every use has a legal basis under the LGPD. Here is the list, purpose by purpose:

• Providing the free game: creating and maintaining the guest or registered account, storing chips, plays, results and history, running the social tables and enforcing the rule that sign-up is for adults aged 18 or over only — performance of the contract, that is, of the Terms of Use (art. 7º, V).
• Confirming your email through a link and, if you give one, your phone number through an SMS code — performance of the contract (art. 7º, V).
• Sending service emails: welcome, email confirmation link, password-recovery link (only when someone requests it by entering the account’s email), the results of your plays in scheduled draws, and replies from support — performance of the contract (art. 7º, V).
• Running the responsible gaming tools: play limits (including those the site may set when the account is created), play-time reminder, session panel, breaks, self-exclusion and account closure — performance of the contract (art. 7º, V).
• Protecting the site and accounts: temporary login lockout after wrong-password attempts, a cap on contact messages per IP address, session records, the audit trail, and a periodic automatic analysis of unusual patterns in plays and chip movements, which raises internal alerts for review by a person without blocking the account or reporting anything to third parties — legitimate interest (arts. 7º, IX, and 10).
• Handling support: storing the message, classifying it automatically with fixed rules to separate automated messages (spam) from messages written by people and, when this feature is switched on, answering questions about the status of a draw or about money with a standard text — steps taken at your request (art. 7º, V) and legitimate interest (art. 7º, IX).
• Counting visits and knowing where they come from, with our own counter (section 7) — legitimate interest (art. 7º, IX).
• Inferring the country from the IP address, to record the account’s country, choose the language of result emails and decide whether a third-party advertising block may appear on the home page (section 6) — legitimate interest (art. 7º, IX).
• Measuring the audience with Google Analytics — consent (art. 7º, I), given in the cookie notice.
• Storing your device’s precise location — consent (art. 7º, I), given through the browser permission (section 6).
• Exercising or defending rights in judicial, administrative or arbitration proceedings, and complying with orders from authorities — art. 7º, II and VI.

Legal basis: LGPD, arts. 7º, I, II, V, VI and IX, and 10

6. Location: from your IP address and, if you allow it, from your device

From the IP address we infer country, region, city and time zone. For this we use a geolocation database installed on our own server (GeoLite2, by MaxMind), which does not send your IP to anyone; if that database is not available, the IP is looked up with the external service ip-api.com. At sign-up and login, when the account does not yet have a country, the IP is looked up directly with ip-api.com.

We use this for three things: visit statistics (section 7); the account’s country, which appears in the internal panel and sets the language of result emails; and deciding whether the home page may show the block advertising third-party lotteries (section 8), which is not shown to visitors in Brazil or when we cannot determine the country. In this last lookup, the country is not stored.

Your device’s precise location is optional. When you submit the sign-up form, your browser asks whether you allow it to be shared; if you refuse, sign-up continues normally. If you allow it, your browser sends our server the latitude and longitude at that moment. When sign-up creates a new account, we store those coordinates and the date of the permission; when sign-up converts a guest account, they are discarded without being stored. Today the stored location can only be seen by the team in the internal panel: it is not used in any automated decision and is not shared with third parties.

To withdraw that permission and delete the stored location, write to us through the channels in section 2.

Legal basis: LGPD, arts. 7º, I and IX, and 8º, § 5º

7. Browser storage, cookies and audience measurement

To work, the site stores in your browser the jdb_lang cookie (language) and, in local storage, your session credential (for an account or a guest), basic data about the logged-in account (identifier, email, account type and technical fields), your cookie choice and sound preferences. The full list, with how long each item lasts, is in the Cookie Policy.

Our own visit counter: for every page viewed, the site sends our server the page address and a visitor identifier (jdb_sid), generated at random and stored in your browser. This happens for all visitors, whatever choice was made in the cookie notice. You can delete this identifier by clearing the site’s data in your browser; a new one is created on the next visit.

Google Analytics 4: it is only loaded after you accept audience measurement in the cookie notice. You can change your choice at any time through the “Cookie preferences” link in the footer. If you withdraw consent, Google Analytics stops being loaded from the next full load of the site; a tab that was already open may keep sending data until it is reloaded.

Your cookie choice is stored only in your browser; it is not sent to our server.

Legal basis: LGPD, arts. 7º, I and IX, and 8º, § 5º · Lei nº 12.965/2014 (Marco Civil da Internet), art. 7º, VIII

8. Who the data is shared with

We do not sell personal data. Data reaches others in these cases:

• DigitalOcean: hosts the site’s servers and the database, and therefore processes all the data described in this Policy.
• Resend: sends the site’s emails (email address and message content) and forwards to our team, by email, the messages received through the contact form.
• Zoho: provider of the mailboxes that receive the messages you send us by email.
• Twilio: sends and checks the SMS code when you give a phone number, and receives the number for that purpose.
• Google: receives browsing data through Google Analytics, only if you accept audience measurement.
• ip-api.com: receives your IP address in the geolocation lookups described in section 6.
• The team’s work tools: to maintain the site and handle your requests, the controller’s team uses third-party software tools, including artificial intelligence assistants, which may have access to the data stored on the server while they are used for that work.
• Other players: at the social tables, the other participants see your first name and the initial of your surname; if the account has no name, the part of your email before the “@”; and, if there is neither, an automatically generated nickname. You do not choose this name, and your full surname is never shown.
• Quini and SuperOnce: when you click the cards for these sites on the home page, if you have an account with an open session and a verified email, the link carries a single-use code that expires after 60 seconds — never your session credential. That site’s server exchanges the code directly with ours and receives your identifier on this site, your email and your date of birth, with the aim of letting you enter there already identified; we keep a record of which site received them and when. Without a session, with guest access, during a break or a self-exclusion, or if the code cannot be issued, the link opens without identifying you.
• BuyLOTTO and TheLotter: when the home page shows the lottery advertising block (which is not shown to visitors in Brazil) and you click on it, the site opens thelotter.com with an affiliate code, or buylotto.com, and records the click at buylotto.com (the lottery clicked, the language and a random click identifier). Like any site you visit, they receive your IP address and technical data from your browser.
• Public authorities: when there is a court order or a request made under the law.

Legal basis: LGPD, arts. 9º, V, and 18, VII

9. Where the data is kept: international transfer

The servers that host the site and the database are in the United States, at DigitalOcean. As a result, all the data described in this Policy is transferred outside Brazil.

The other providers in section 8 — Resend, Zoho, Twilio, Google and ip-api.com — and the team’s work tools may process the data they receive outside Brazil.

Hosting and sending emails and SMS messages are necessary to provide the service you use (LGPD, art. 33, IX, read with art. 7º, V). The transfer to Google only happens if you accept audience measurement. You can ask for more information about these transfers through the channels in section 2.

Legal basis: LGPD, arts. 33, IX, and 7º, V

10. How long we keep data

We keep the data for as long as the account exists. Closing the account (the “Close account” tab in your profile) stops you from playing and topping up chips and ends open sessions, but it does not delete the data.

The only time limit the system applies on its own is this: five years after you close your account, a daily routine anonymises that account’s identifying data (email, phone number, first name, surname, date of birth, location, password and, where present, CPF, address and other registration data). The history of plays and chips remains, linked to the anonymised account.

Today there is no automatic deletion of active accounts, guest accounts, session records, the audit trail, acceptance records, the record of entries into partner sites (section 8), support messages or visit statistics: this data is kept with no set time limit.

You can ask for deletion at any time (section 11). In that case, we keep only what is necessary to comply with a legal obligation or to exercise or defend rights, and we tell you what was kept and why.

Legal basis: LGPD, arts. 15 and 16

11. Your rights and how to exercise them

Today the site has no tool in the account to download, correct or delete your data: your profile shows your data but does not let you edit it. What you can do yourself is close the account, which does not delete the data (section 10), and adjust limits and breaks. All other requests are made in writing, through the channels in section 2, preferably from the email address registered to the account. We may ask you to confirm that the request is yours before handing over or changing data.

Handling these requests is free of charge. The LGPD provides that a full access statement is delivered within 15 days of the request. If we cannot fulfil a request, we tell you why.

If the matter is not resolved with us, you can petition Brazil’s National Data Protection Authority (ANPD) and also consumer protection bodies.

Your rights under the LGPD are:

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate or out-of-date data.
• Anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law.
• Portability, under the ANPD’s regulations.
• Deletion of data processed on the basis of your consent.
• Information about who we share your data with (section 8).
• Information about the possibility of not giving consent and its consequences: refusing Google measurement or precise location changes nothing in how you can use the site.
• Withdrawal of consent.
• Objection to processing carried out without consent, where the law is not complied with.
• Review of decisions made solely by automated processing that affect your interests. The automated decisions the site makes include: refusing sign-up when the date of birth given shows an age under 18; preventing instant plays in the jogo do bicho while the registered account’s email has not been confirmed; the temporary login lockout after wrong-password attempts; enforcing play limits — those the site may set on its own when the account is created and those you set —, breaks and self-exclusion; and the classification of support messages.

Legal basis: LGPD, arts. 18, 19, II, 20 and 55-J, V

12. Security

No system is immune to failure. If a security incident occurs that may cause relevant risk or harm, the LGPD requires the controller to report it to the ANPD and to the data subjects affected. If you suspect someone has accessed your account without permission, let us know through the channels in section 2.

These are the security measures in operation today:

• Connections to the site protected by HTTPS, with HSTS, which tells the browser to use encrypted connections only.
• Passwords stored only as bcrypt hashes.
• Temporary login lockout after wrong-password attempts.
• Access to the internal panel protected by authentication.
• An audit trail of actions on accounts.
• In visit statistics, the IP address is replaced by a code derived from it (a hash with a secret key).

Legal basis: LGPD, arts. 6º, VII, 46 and 48

13. Minors

Sign-up is for adults aged 18 or over only. The date of birth is mandatory and age is calculated on our server, which refuses sign-up for anyone under 18. Your age is self-declared: we do not check documents.

Guest mode does not ask for your age. In it we process only the technical and play data described in section 3, with no name, email or date of birth.

If you know that someone under 18 has created an account, let us know through the channels in section 2.

Legal basis: LGPD, art. 14 · Lei nº 8.069/1990 (Estatuto da Criança e do Adolescente), art. 2º

14. Changes to this Policy

When this Policy changes, the new version is published on this page with a new number and a new effective date. The site shows only the version in force; a copy of the previous version can be requested through the channels in section 2.

We do not send notices of changes by email, and we do not ask existing account holders to accept again. From 29 September 2026, it is this version 2.1 that describes how the data of all accounts is processed. Whatever depends on your consent — Google measurement and precise location — still depends on the choice you made (sections 6 and 7).

Legal basis: LGPD, arts. 6º, VI, and 9º