Full LGPD compliance

GBG5 Privacy Policy – How We Protect Your Personal Data

At gbg5, privacy is more than a legal obligation — it is a commitment to every user who trusts the platform. This policy clearly and directly explains what data we collect, how it is used, who it is shared with, and what your rights are as a data subject under the General Data Protection Law (LGPD — Law No. 13.709/2018).

Last updated: January 2026 Document in Brazilian Portuguese LGPD – Law No. 13.709/2018

Quick summary: GBG5 collects only the data necessary to operate the platform — registration, payments via Pix/boleto/card, identity verification (KYC), and service improvement. Your data is never sold. You may request access, correction, or deletion at any time by emailing contato@gbg5.best. All operations are in compliance with the LGPD.

1. Introduction

This Privacy Policy describes how the GBG5, operator of the Sports Betting and online casino platform available at gbg5.best, collects, uses, stores, protects, and shares the personal data of its users. This document applies to all site visitors, registered users, bettors, and anyone who interacts with GBG5 services, whether through the browser or the mobile app.

GBG5 acts as data controller as defined by the General Personal Data Protection Law (LGPD — Law No. 13,709/2018), and is responsible for decisions regarding the processing of personal data collected on the platform. By creating an account, accessing the site, or using any GBG5 service, you confirm that you have read and agreed to the terms of this Privacy Policy.

Privacy is taken seriously at GBG5 — not just because the law requires it, but because it is the foundation of the trust users place in the platform. Every decision about data collection and use is guided by one question: is this necessary to provide a better service to the user? If the answer is no, the data is not collected.

2. Data Controller Identification

The controller responsible for processing personal data collected on the GBG5 platform is:

  • Legal name: GBG5 Entretenimento Digital Ltda.
  • Platform: gbg5.best
  • Contact email: contato@gbg5.best
  • Data Protection Officer (DPO): privacidade@gbg5.best

For any questions regarding the processing of your personal data, rights under the LGPD, or security incidents, please contact our Data Protection Officer directly at the email address above. The response period for formal requests is up to 15 calendar days from receipt.

3. Personal Data We Collect

GBG5 collects personal data at different points during the user's interaction with the platform. Below are the categories and examples of data collected:

Category Data examples Collection moment
Identification Full name, CPF, date of birth, RG Registration and KYC verification
Contact Email address, mobile number, residential address Sign Up
Financial Pix key, TED banking details, deposit and withdrawal history Financial transactions
Behavioral Betting history, favorite games, session duration, access frequency Platform usage
Technical IP address, device type, operating system, browser, approximate location Site or app access
Documentary Government-issued ID photo, selfie for facial verification, proof of address KYC Verification

GBG5 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, trade union membership, genetic or biometric data beyond what is required for identity verification, or health data, except where required by responsible gambling processes initiated by the user.

Credit and debit card data are not stored on GBG5's servers. All card transactions are processed directly by certified payment gateways in compliance with the PCI DSS standard. GBG5 receives only the transaction confirmation and has no access to card data.

4. Purpose of Data Processing

Every piece of data collected by GBG5 has a specific and legitimate purpose. Below are the main purposes for which personal data is processed:

  • Account creation and management: identity verification, prevention of duplicate accounts, and maintenance of the user profile.
  • Processing financial transactions: deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer; withdrawals to verified accounts; transaction receipts and financial history.
  • Identity verification (KYC): compliance with legal obligations related to anti-money laundering (AML/CFT) and eligibility verification (age of majority, residence in Brazil).
  • Provision of Sports Betting and casino services: placement and settlement of Sports Betting on football (Brasileirão, Libertadores, Copa do Brasil), volleyball, NBB basketball, MMA/UFC, and e-sports; access to slots, live casino, and crash games.
  • Security and fraud prevention: detection of suspicious activity, use of multiple accounts, bonus abuse, and match manipulation.
  • Communication and support: sending transaction notifications, responding to support tickets via email, chat, and WhatsApp, and sending promotional communications with an unsubscribe option.
  • Platform improvement: usage behavior analysis to improve the experience, fix bugs, and develop new features.
  • Responsible gambling: monitoring of usage patterns to identify at-risk behavior and activate protective tools such as deposit limits, alerts, and self-exclusion.
  • Legal and regulatory compliance: fulfillment of obligations under Brazilian law, including those relating to the Banco Central do Brasil, Receita Federal, and betting regulatory authorities.
6. Sharing Data with Third Parties

GBG5 does not sell, rent, or trade users' personal data with third parties for marketing or advertising purposes. Data sharing occurs only in the following situations, all with a legal basis under the LGPD:

  • Payment gateways: minimum data required to process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED through partner banks (Nubank, Itaú, Bradesco, Banco do Brasil, among others). All payment partners are certified by the Banco Central do Brasil.
  • Identity verification (KYC) providers: certified technology partners for CPF validation, document verification, and age confirmation, as required by regulation.
  • Casino game providers: only the technical data required to record game sessions and ensure the integrity of results. No financial or identifying data is shared with game providers.
  • Public and regulatory authorities: when required by law, court order, summons from a competent authority, or regulation of the betting sector in Brazil.
  • Technology infrastructure: cloud servers, cybersecurity services, and analytics tools operated by partners bound by confidentiality agreements and LGPD compliance.

Important: Any partner that receives personal data from GBG5 users is contractually required to process that data solely for the specific purpose for which it was shared and to apply security measures consistent with those required by the LGPD. GBG5 maintains data processing agreements with all suppliers that access personal data.

7. Data Retention Period

GBG5 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following criteria and minimum retention periods:

  • Registration and identification data: retained for as long as the account remains active and for a minimum of 5 years after account closure, in accordance with compliance and anti-money laundering requirements.
  • Financial history (deposits, withdrawals, and bets): retained for a minimum of 5 years after each transaction, in compliance with tax and anti-financial crime legislation.
  • Access logs and technical data: retained for 6 months, in accordance with the Marco Civil da Internet (Law No. 12.965/2014), and may be extended by court order.
  • KYC verification documents: retained for a minimum of 5 years after verification, in accordance with the rules of the Financial Activities Control Board (COAF).
  • Support communication data: retained for 2 years after the ticket is closed, for quality and compliance purposes.

Once the applicable retention period expires, data is anonymized or securely deleted so that the data subject can no longer be identified. Anonymized data may be retained indefinitely for statistical purposes and platform improvement, as it no longer constitutes personal data under the LGPD.

8. Information Security

GBG5 employs a comprehensive set of technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL/TLS Encryption across all communications between the user's device and GBG5 servers.
  • Encryption at rest for sensitive data stored in the platform's databases.
  • Two-factor authentication (2FA) available to all users who wish to enable an extra layer of account protection.
  • Role-based access control for internal staff, with access to users' personal data restricted to the minimum necessary for each role.
  • Continuous security monitoring with intrusion detection, anomaly alerts, and incident response 24 hours a day.
  • Periodic security audits carried out by independent specialized firms to identify and remediate vulnerabilities.
  • Encrypted backups performed on a regular basis and stored in geographically separate environments.

In the event of a security incident that may affect users' personal data, GBG5 commits to notifying the National Data Protection Authority (ANPD) and the affected data subjects within the timeframe required by the LGPD, providing clear information about the nature of the incident, the data involved, and the steps taken to mitigate the damage.

No technology is 100% foolproof. That is why GBG5 encourages every user to follow good security practices: use a strong, unique password for your account, enable 2FA, never share your credentials with anyone, and be wary of emails or messages asking for your password — GBG5 will never request your password through those channels.

9. Cookies, Tracking, and Similar Technologies

GBG5 uses cookies and similar technologies to ensure the platform works correctly, personalize the user experience, and analyze site performance. The types of cookies used are:

  • Essential cookies: required for the platform's core functionality, such as maintaining authenticated sessions, language preferences, and security. These cannot be disabled without affecting the site's operation.
  • Performance cookies: collect aggregated, anonymous information about how users navigate GBG5 — pages visited, session duration, errors encountered — to support ongoing platform improvements. They do not identify individual users.
  • Functional cookies: allow GBG5 to remember user preferences — such as favorite sports, preferred odds format, and display settings — to deliver a personalized experience.
  • Analytics cookies: used by traffic analytics tools to measure the reach and effectiveness of GBG5 pages. Data is processed in aggregate form and does not allow individual identification.

You can manage your cookie preferences through the cookie settings panel available in the site footer, or directly through your browser settings. Disabling essential cookies may prevent the platform from functioning normally. GBG5 does not use third-party tracking cookies for advertising purposes.

10. Protection of Minors

GBG5's services are intended exclusively to users aged 18 and over. GBG5 does not intentionally collect, process, or store personal data from individuals under 18 years of age. If an account is found to have been created by a minor, it will be immediately closed, the data will be deleted in accordance with the LGPD, and any deposited funds will be withheld as required by law.

Parents or guardians who become aware that a minor has used the GBG5 platform should contact us immediately at contato@gbg5.best so that appropriate action can be taken as quickly as possible.

Important notice: GBG5 uses age verification measures during the registration process, including CPF validation and document verification. Providing false date-of-birth information to bypass the age check constitutes fraud and will result in permanent account closure.

11. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) grants you, as the data subject whose personal data is processed by GBG5, the following rights, which may be exercised at any time:

Data access

Request a copy of all personal data GBG5 holds about you, including betting history, financial transactions, and registration information.

Data correction

Request the correction of incomplete, inaccurate, or outdated data. For identification data, supporting documentation may be required.

Data deletion

Request the deletion of personal data processed on the basis of consent. Data required to fulfill a legal or contractual obligation cannot be deleted before the minimum retention period.

Portability

Request an export of your personal data in a structured, machine-readable format (JSON or CSV) for portability to another controller.

Consent withdrawal

Withdraw consent for processing activities based on this legal ground — such as receiving marketing communications — at any time, free of charge and without any impact on your use of the platform.

Sharing information

Request information about which public and private entities GBG5 has shared your personal data with, and the legal basis under which each such sharing occurred.

To exercise any of these rights, please contact our Data Protection Officer at privacidade@gbg5.best or through support at contato@gbg5.best, clearly stating the right you wish to exercise and the data involved. GBG5 will respond within 15 calendar days. If your request is not handled to your satisfaction, you may file a complaint with the National Data Protection Authority (ANPD).

12. International Data Transfers

In certain operational situations, personal data of GBG5 users may be transferred to or processed on servers located outside Brazil — for example, when using global cloud infrastructure or cybersecurity services with international operations.

All international data transfers carried out by GBG5 comply with Article 33 of the LGPD, either because the destination country provides an adequate level of protection recognized by the ANPD, or because contractual safeguards are in place that guarantee a level of protection equivalent to that required by Brazilian law, such as standard contractual clauses.

Wherever possible, GBG5 prioritizes processing and storing data within Brazilian territory, particularly for users' sensitive identification and financial data.

13. Changes to this Privacy Policy

GBG5 reserves the right to update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or platform features. Any material change will be communicated at least 7 calendar days in advance via the registered email address and/or a prominent notification on the platform.

For minor changes — such as text corrections, updated contact details, or editorial clarifications that do not affect user rights — GBG5 may publish the modifications without prior notice, always updating the last revision date shown at the top of this document.

Continued use of the platform after changes take effect constitutes tacit acceptance of the updated policy. If you do not agree with the new terms, you must close your account before the effective date of the changes by requesting a withdrawal of your available balance.

14. Contact, Data Protection Officer (DPO), and Complaints

To exercise your rights as a data subject, clarify any questions about this Privacy Policy, or report an incident involving your personal data, please reach out through the channels below:

  • General email: contato@gbg5.best
  • DPO (Data Protection Officer) email: privacidade@gbg5.best
  • Live chat: available 24 hours a day, 7 days a week, directly on the platform at gbg5.best
  • WhatsApp: available to registered users through the channel indicated within the platform

If your request or complaint is not resolved to your satisfaction by GBG5 within the established timeframe, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing and enforcing the LGPD in Brazil.

User privacy at GBG5 is a genuine priority — not just a compliance checkbox. If you have any questions about how your data is handled, our team is ready to give you clear, straight answers. Transparency is part of what it means to be GBG5.

Privacy in Practice at GBG5

More than a policy on paper — see how data protection works in the platform's day-to-day operations.

Full LGPD Compliance

GBG5 has operated in full compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018) from day one. Every data collection, storage, and sharing process was designed with the LGPD as the baseline — not as an afterthought.

Secure Pix — No Card Data Stored

Deposits and withdrawals via Pix, boleto, card, PicPay, and Mercado Pago are processed through certified gateways. GBG5 never stores card data — it only confirms the transaction, protecting your financial information end to end.

256-Bit SSL Encryption Across the Board

All communication between your phone or computer and GBG5's servers is secured with 256-bit SSL encryption — the same standard used by Brazilian banks such as Nubank, Itaú, and Bradesco. No data is ever transmitted in plain text.

You Control Your Data

Access, correction, portability, deletion, and consent withdrawal with a simple email request. All rights under the LGPD are fully respected at GBG5, with a guaranteed response within 15 calendar days.

Your Data Is Never Sold

GBG5 does not sell, rent, or trade users' personal data. Sharing occurs only with strictly necessary operational partners — all bound by confidentiality agreements and LGPD compliance.

Dedicated DPO and Portuguese-Language Support

GBG5 has a dedicated Data Protection Officer (DPO) to handle all privacy-related matters. 24/7 support in Portuguese via chat, email, and WhatsApp for any questions about your data.

Your data is protected

Bet Safely and Privately at GBG5

Free registration in under 2 minutes. Your data protected by the LGPD. Deposits via Pix from R$ 20.00 with a 100% bonus on your first deposit up to R$ 500.00. A secure platform to bet on Brasileirão, Libertadores, UFC, and much more.

256-bit SSL · LGPD · Data never sold · 18+ only

Responsible Gambling:
Deposit limits
Time alerts
Self-Exclusion
18+ only
Learn more →
Português