This document explains how 123app collects, uses, stores, and protects your personal data in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018). Please read it carefully to understand your rights and how to exercise them.
The key pillars of personal data protection at 123app, laid out clearly
123app fully complies with Brazil's General Data Protection Law (Lei nº 13,709/2018). All processes involving the collection, use, and storage of personal data follow the legal bases set out in the LGPD, in accordance with the principles of purpose, necessity, and transparency.
123app collects only the data strictly necessary to operate your account, process deposits and withdrawals via Pix and other methods, and meet legal obligations. No data is collected arbitrarily or without a clear, documented purpose.
123app never sells, rents, or transfers your personal data to third parties for commercial purposes. Data sharing only takes place when strictly necessary to operate the service or when required by law, always in accordance with the LGPD.
All data transmitted between your device and 123app servers is protected by TLS encryption. Stored data is safeguarded by strict access controls, continuous monitoring, and internal information security policies.
You can request access, correction, portability, or deletion of your data at any time through 123app support. Your rights as a data subject are honored without unnecessary red tape and within the timeframes set out by the LGPD.
In the event of a security incident that may affect your data, 123app will notify affected users and the National Data Protection Authority (ANPD) within the timeframes and formats required by the LGPD, with full transparency about what occurred and the measures taken.
The data controller responsible for processing your personal data is the company operating the platform 123app, available at https://123app.world. For the purposes of this Privacy Policy, "123app", "we", or "platform" refer to that entity.
The 123app acts as the controller of the personal data you provide when creating an account, making deposits or withdrawals, betting on sporting events such as the Brasileirão, Copa do Brasil, and Libertadores, playing at the live casino, or interacting with any other feature on the platform. As controller, 123app determines the purpose and means by which your data is processed, always in compliance with the LGPD.
For questions, rights requests, or complaints related to the processing of personal data, please contact the data protection officer (DPO) of the 123app by email privacidade@123app.world or via the 24/7 support chat available on the platform.
Summary: 123app is the controller responsible for processing your data. If you have any questions about privacy, you can reach us directly through support or via our privacy email.
The 123app collects personal data at different points during your interaction with the platform. The main types of data collected are:
Important: 123app does not store your full credit or debit card number on its servers. Sensitive payment data is processed directly by card operators and partner payment gateways, which operate under their own security standards.
The 123app uses the personal data collected solely for the purposes described below. No data is used for any purpose other than the one that originated its collection without a new legal basis or your consent:
| Purpose | Data Used |
|---|---|
| Create and manage your account | Full name, CPF, email address, mobile number, date of birth |
| Processing deposits and withdrawals | Financial data, Pix key, banking details |
| Identity verification (KYC) | Government-issued ID, selfie, proof of address |
| Fraud and money laundering prevention | Registration data, IP address, transaction history |
| User support | Registration data, betting history, communications |
| Experience personalization | Usage history, gaming preferences |
| Sending communications and promotions | Email, mobile (based on your configured preferences) |
| Compliance with legal and regulatory obligations | All data required by applicable law |
| Platform analytics and improvement | Anonymized or pseudonymized usage data |
The 123app does not use your data for automated decisions that produce significant legal effects without the possibility of human review, except as permitted by the LGPD and with the corresponding safeguards in place.
All personal data processing carried out by the 123app is grounded in at least one of the legal bases established by the LGPD (Law No. 13,709/2018). The bases applied for each purpose are:
The 123app does not sell or transfer your personal data to third parties for commercial purposes. Sharing only occurs in the following situations, each with an appropriate legal basis:
All third parties that receive personal data from users of the 123app are subject to contractual confidentiality and data protection obligations equivalent to the standards applied by 123app itself.
The 123app uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — for analytics and personalization purposes. The types of cookies used are:
You can manage your cookie preferences through your browser settings or via the privacy preference panel available on the 123app platform. 123app. Declining non-essential cookies does not prevent you from using the platform's core features.
The 123app retains your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. General retention periods are:
Once mandatory retention periods expire, data is securely deleted or anonymized in a way that no longer allows you to be identified. If you request deletion of your data before a mandatory legal retention period has ended, the 123app will inform you which data must be retained and for how long, and which can be deleted immediately.
The 123app adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Key measures in place include:
Although the 123app makes every reasonable effort to protect your data, no security system is completely impenetrable. It is therefore equally important that you keep your password confidential, do not share it with anyone, and enable two-factor authentication whenever it is available on the platform.
Some of the service providers used by the 123app, such as cloud infrastructure providers or international live casino game providers, may be located outside Brazil. When this occurs, 123app ensures that any international transfer of personal data is carried out in compliance with LGPD requirements, through:
The 123app does not transfer personal data to countries that do not provide adequate protection guarantees, except in the cases expressly set out in the LGPD, such as when the transfer is necessary to perform the contract with the user.
The General Data Protection Law (LGPD) guarantees you, as the data subject whose personal data is processed by the 123app, the following rights, which may be exercised at any time:
You can request confirmation of whether 123app processes your personal data and, if so, obtain access to what data is held and for what purposes.
If any of your data is incorrect, incomplete, or out of date, you can request a correction at any time through your account settings panel or by contacting 123app support.
You may request the deletion of data processed on the basis of your consent. For data retained due to a legal obligation, 123app will inform you of the applicable retention periods before deletion.
You may request a copy of your personal data in a structured, interoperable format for transfer to another service provider, in accordance with ANPD regulations.
You may object to data processing carried out on the basis of 123app's legitimate interest when there is a reason related to your particular situation, as provided under the LGPD.
For processing based on your consent, such as receiving marketing communications, you may withdraw consent at any time, free of charge and without affecting the platform's core features.
To exercise any of these rights, please contact the 123app via support chat on the platform or by email privacidade@123app.world. 123app will respond to requests within the timeframes established by the LGPD.
The services of 123app are available exclusively to users aged 18 and over. The platform does not intentionally collect personal data from minors. If we become aware that a minor's data was inadvertently collected, it will be deleted immediately and the account will be closed.
If you believe a person under 18 has created an account or provided data to the 123app, please contact support immediately so we can take the appropriate action. 123app applies age verification during registration and may request additional documents to confirm legal age whenever there is reason to suspect a minor has registered.
With your consent, the 123app may send communications about promotions, bonuses, tournaments, and platform news via email, SMS, or in-app notifications. These communications are based on your usage history and gaming preferences, such as bets on the Brasileirão, live casino games, or poker tournament participation.
You can manage your communication preferences at any time:
Opting out of marketing communications does not affect the delivery of essential transactional messages, such as deposit confirmations, withdrawal notifications, account security alerts, and support replies — these will continue to be sent regardless of your marketing preferences.
The 123app may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. When that happens:
We recommend that you review this Policy periodically to stay informed about how 123app protects your data. Previous versions of this Policy are available upon request through support.
The 123app has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance on the platform, handling data subject requests, and serving as the communication channel with the Brazilian Data Protection Authority (ANPD).
To contact the DPO at 123app or to exercise any right provided under the LGPD:
The 123app is committed to responding to all privacy-related requests within 15 business days of receipt. This period may be extended by up to 30 additional days in complex cases, with prior notice to the requester.
Version: 1.0 · Effective Date: January 1, 2026 · DPO: privacidade@123app.world
The most common questions about personal data handling at 123app
Contact our Data Protection Officer (DPO) at privacidade@123app.world or via the 24/7 support chat available on the platform. Also read our Terms and Conditions and our Responsible Gambling.