This Policy explains what data 1pra collects, why it collects it, how it is used, who it is shared with — and how you can exercise your rights as a data subject. Written in plain language, without unnecessary legal jargon.
How we protect your information — a quick overview before the full details.
All data transmitted between your phone or computer and 1pra's servers is protected by 256-bit SSL encryption. Card details, CPF, betting history, and account information are never transmitted in plain text.
1pra applies all the principles of the General Data Protection Law (Law No. 13.709/2018): purpose, adequacy, necessity, transparency, and security. You have rights guaranteed by law — and 1pra respects them.
1pra does not sell, rent, or transfer personal data to third parties for commercial purposes. Any sharing necessary for service operations is carried out with contractual partners bound by the same confidentiality obligations.
You can access, correct, port, or request deletion of your data directly through the account dashboard or by emailing the DPO. Requests are processed within 15 business days in accordance with the LGPD.
We retain your data only for as long as required by law or necessary to provide the service. Upon account closure, data is anonymized or deleted in accordance with applicable legal retention periods in Brazil.
In the event of any security incident that may affect your data, 1pra will notify you and the National Data Protection Authority (ANPD) within the timeframe required by the LGPD — with clear information about what happened and what was done.
We collect only what is necessary to provide the service, meet legal obligations, and improve the platform experience.
Full name, CPF, date of birth, email address, and mobile number. Collected at registration and used for authentication, identity verification (KYC), and compliance with regulatory obligations.
ZIP code, street address, city, and state. Used to confirm Brazilian residency as required by fixed-odds betting regulations and for address verification during KYC.
Deposit and withdrawal history, payment methods used (Pix key, bank, last card digits), transaction amounts and dates. Retained for the period required under anti-money laundering legislation.
Complete betting history — events, markets, amounts, odds, and outcomes. Used for service operation, account reports, responsible gambling, and compliance with tax obligations.
IP address, device type, operating system, browser, login dates and times. Used for account security, fraud prevention, and detection of unauthorized access.
Platform usage data collected via cookies — pages visited, session duration, clicks, and interface preferences. Used to improve the user experience and personalize content.
1pra is the controller of personal data belonging to users who access and use the platform available at https://1pra.net. This Privacy Policy applies to everyone who registers, browses, or interacts in any way with 1pra's services — including Sports Betting, online casino, promotions, and customer support.
By creating an account with 1pra or continuing to use the platform after an updated version of this Policy is published, you confirm that you have read and understood the practices described here. If you disagree with any part of it, we recommend discontinuing use of our services or contacting the DPO for clarification before making any decision.
This Policy was drafted in compliance with the General Data Protection Law (Law No. 13.709/2018 — LGPD) and the regulatory rules applicable to the fixed-odds betting sector in Brazil under Law No. 14.790/2023.
During registration and while using the platform, you actively provide the following information:
When you use 1pra, some data is generated automatically by the system:
1pra uses cookies and tracking technologies for the platform's technical operation, usage analytics, and experience personalization. Full details are described in Section 9 of this Policy.
1pra uses collected data solely for the purposes described below. No data is used for purposes incompatible with the original ones without prior notice and, where required, fresh consent.
Every data processing activity at 1pra has a specific legal basis under the LGPD. The legal bases we rely on are:
1pra does not sell, rent, or transfer personal data to third parties for commercial purposes. Data sharing occurs only in the following situations:
Service providers acting on behalf of 1pra that require data access to perform their functions — such as payment processors (Pix, card, TED), KYC and identity verification providers, casino game providers, and cloud infrastructure providers. All partners are contractually required to maintain confidentiality and apply security measures equivalent to those of 1pra.
When required by law, regulation, court order, or request from a competent authority — including the Receita Federal, Ministry of Finance, Central Bank, COAF (Financial Activities Control Council), and law enforcement — 1pra provides the requested information within the legally permitted limits.
In cases of suspected fraud, money laundering, or violation of the Terms and Conditions, data may be shared with security service providers, legal counsel, and competent authorities to protect the rights of 1pra and its users.
In some cases, data may be processed outside Brazil — for example, by cloud infrastructure providers or casino game suppliers with servers abroad. When this occurs, 1pra ensures that transfers are carried out with appropriate safeguards, in accordance with art. 33 of the LGPD, including:
Most data belonging to Brazilian users is stored on servers located in Brazil or in countries recognized by the ANPD as providing an adequate level of protection.
Data retention periods vary by category and purpose of processing:
Once legal retention periods have expired, data is deleted or irreversibly anonymized so that it can no longer be linked to any identifiable individual.
1pra employs technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Key measures include:
Cookies are small text files stored in your browser or device when you access 1pra. They allow the platform to recognize your device on subsequent visits, preserving your preference settings and keeping your session active.
You can manage your cookie preferences through the 1pra settings panel or your browser settings. Disabling non-essential cookies may reduce personalization, but it will not prevent access to the platform's core features.
The LGPD grants you a set of rights over your personal data. 1pra is committed to making it easy for you to exercise those rights, with responses provided within the legal deadline of up to 15 business days.
| Right | What This Means in Practice | LGPD Legal Basis |
|---|---|---|
| Access | Request a copy of all personal data that 1pra holds about you. | Art. 18, II |
| Correction | Request the update or correction of incomplete, inaccurate, or outdated data. | Art. 18, III |
| Anonymization or Deletion | Request the anonymization or deletion of data that is unnecessary or processed without a valid legal basis. | Art. 18, IV |
| Portability | Receive your data in a structured format for transfer to another controller. | Art. 18, V |
| Sharing information | Know which third parties your data has been shared with. | Art. 18, VII |
| Consent withdrawal | Withdraw previously given consents — such as email marketing — without affecting access to other services. | Art. 18, IX |
| Objection | Object to processing based on legitimate interest where there are grounds to do so. | Art. 18, §2º |
To exercise any of these rights, contact the 1pra DPO at contato@1pra.net with the subject line "LGPD — Data Subject Request". Please provide your full name, CPF, and the right you wish to exercise. A response will be sent to the email address registered on your account within 15 business days.
If you believe your rights have not been respected, you may also file a complaint directly with the National Data Protection Authority (ANPD) through the gov.br portal.
1pra does not intentionally collect data from users under 18. The platform's services are restricted to adults, and registration requires CPF verification and a date of birth confirming legal age.
If there is any indication that a minor has created an account on 1pra, the account will be immediately suspended, the data reviewed, and — if underage use is confirmed — the account will be closed and the data deleted or reported to the relevant authorities in accordance with applicable law. If you are the guardian of a minor who may have accessed the platform without authorization, please contact 1pra support immediately via live chat or at contato@1pra.net.
1pra uses automated systems for certain operational activities — such as fraud detection, money laundering monitoring, and identification of problematic gambling patterns. These decisions are based on behavioral data from the platform and may result in alerts, temporary restrictions, or a request for manual review by a human analyst.
When an automated decision produces a significant effect on you — such as an account suspension or withdrawal block — you have the right to request a human review of that decision. To do so, contact support and explain the situation. Every review is conducted by a qualified team member with full access to the context of your case.
1pra does not use personal data to build profiles for third-party targeted advertising. Any profiling carried out serves exclusively to personalize the experience within the platform itself and for security and responsible gambling purposes.
This Privacy Policy may be updated periodically to reflect regulatory changes, platform improvements, or updates to data processing practices. The current version date appears at the top of this page.
When relevant changes are made that affect your rights or the purposes of data processing, 1pra will notify you by registered email and through an in-platform notice at least 15 days before the new version takes effect. For minor changes — such as text corrections or clarifications that do not alter the substantive content — the update may be published without prior notice.
The 1pra Data Protection Officer (DPO) is the point of contact for all matters related to this Policy and the processing of personal data. You can reach them through the following channels:
All LGPD-related requests are handled in Portuguese by qualified professionals within a maximum of 15 business days. For urgent security matters — such as suspected unauthorized account access — our 24h support channel is the fastest way to get help.
Questions, rights requests, or complaints regarding data processing: contato@1pra.net — subject line "LGPD". Response time: up to 15 business days. You may also consult our Terms & Conditions for the complete set of platform rules.
The most common questions about how your data is handled on the platform.
Sign up for free, deposit via Pix from R$ 10.00, and bet on the Brasileirão, UFC, Superliga, and over 40 sports — knowing your data is protected by the LGPD.