Last updated: January 1, 2026

Data Protection

A321 Privacy Policy: Your Data Protected under the LGPD

No a321, privacy isn't red tape — it's respect. This document explains clearly what data we collect, why we collect it, how we protect it, and what your rights are as a Brazilian user. We've written it in plain language so you can understand everything without needing a lawyer.

What you'll find here
  • What personal data a321 collects and why
  • How your data is used and stored securely
  • Who We Share Data With (and Why We Never Sell It)
  • Cookies: what they are and how to manage them
  • Your 9 rights guaranteed under the LGPD
  • How to contact our DPO

Full LGPD Compliance

A321 operates in compliance with the General Data Protection Law (Lei 13.709/2018). We have a dedicated Data Protection Officer (DPO) and internal processes aligned with the ANPD.

256-bit SSL Encryption

All data transmissions between your device and a321's servers are protected by 256-bit SSL encryption — the same standard used by major Brazilian banks such as Itaú and Bradesco.

Your Data Is Never Sold

A321 does not sell, rent, or trade personal data with third parties for commercial purposes. Full stop. Data sharing occurs only with essential operational partners and under confidentiality agreements.

You Control Your Data

Access, correct, export, or request deletion of your data at any time directly through your account dashboard or by contacting our DPO. All your rights under the LGPD are available to you.

Configurable Cookies

Only strictly necessary cookies are enabled by default. You can manage the rest — analytics and personalization — directly in a321's privacy settings.

Minor Protection

A321 does not collect, process, or store data from users under 18 years of age under any circumstances. Accounts created by minors are closed immediately and their data permanently deleted.


Data Lifecycle

What Happens to Your Data at a321

From the moment you register to account deletion — transparency at every step.

Collected at Registration
Secure Processing
Encrypted Storage
Stated Use
Deletion Upon Request

1Introduction

This Privacy Policy describes how a321 collects, uses, stores, shares, and protects the personal data of users of the platform available at a321.world. It applies to all platform features: Sports Betting, Live Casino, crash games, poker, promotions, and any other service provided by a321.

A321 acts as the controller of its users' personal data as defined by the General Data Protection Law (Lei 13.709/2018 — LGPD). This means a321 is responsible for decisions about how and why data is processed, and assumes the corresponding legal obligations before the National Data Protection Authority (ANPD) and before you, the data subject.

By creating an account on a321, using any of the platform's services, or simply browsing the site, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of it, please do not use a321's services and reach out to our DPO for clarification before making any decisions.

Plain language: We wrote this policy in plain, straightforward English. Whenever we need to use technical LGPD terms, we'll explain what they actually mean for you in practice.

2Personal Data Controller

The controller of your personal data is the company that operates the a321 platform, responsible for the website a321.world. For privacy and data protection inquiries, please contact our Data Protection Officer (DPO) directly:

Data Protection Officer (DPO)
Responsible for ensuring a321's compliance with the LGPD
suporte@a321.world — with the subject line "Privacy / LGPD"
Live chat on the platform — available 24 hours in Portuguese

3Data We Collect

A321 collects only the data necessary to provide the contracted services and meet applicable legal obligations. We never collect superfluous or unnecessary data. The categories of data collected are:

Data you provide directly:

  • Registration data: full name, date of birth, CPF, home address, email address, and mobile number;
  • Verification documents: a copy of your RG or CNH, proof of address, and proof of payment method — requested before your first withdrawal;
  • Financial data: information about the payment method used (Pix key, partially masked card details). a321 does not store full card data — processing is handled by PCI-DSS certified partners;
  • Communications: live support chat history, sent emails, and completed forms.

Data collected automatically during use:

  • Browsing data: IP address, device type, operating system, browser, pages visited, and session duration;
  • Activity data: betting history, games accessed, deposits, withdrawals, activated bonuses, and completed transactions;
  • Approximate location data: derived from the IP address for security and regulatory compliance purposes — a321 does not collect precise device geolocation;
  • Cookies and similar technologies: detailed in section 9 of this policy.
Data Type Required? Primary Purpose
Full name and CPF YesIdentity verification and account uniqueness
Date of birth YesAge verification (18+)
Email and mobile number YesSecure communication and authentication
Payment Data YesProcess deposits and withdrawals via Pix, card, and boleto
ID Documents (RG/CNH) 1st withdrawalKYC (know your customer) and fraud prevention
Browsing data AutomaticSecurity, fraud detection, and platform improvement

4How We Use Your Data

A321 uses the data collected solely for the purposes described below. Any new use beyond what is stated here will be communicated to you in advance, with the option to refuse:

  • Service provision: creating and managing your account, processing sports bets on the Brasileirão, Libertadores, and other competitions, operating the Live Casino, crash games, and poker;
  • Payment processing: processing deposits via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED; processing withdrawals to Brazilian bank accounts;
  • Identity verification and fraud prevention: verify that you are who you say you are, that you are 18 or older, and that you are located in Brazil; detect and block suspicious activity, duplicate accounts, and money laundering;
  • Compliance with legal obligations: comply with requests from judicial and regulatory authorities in accordance with Brazilian law; maintain financial records as required by law;
  • User support: responding to questions, resolving complaints, and handling requests submitted via live chat or email;
  • Service communications: send transactional notifications (bet confirmations, withdrawals, deposits, security alerts) — these communications are mandatory and cannot be disabled;
  • Marketing communications: sending a321 promotions, bonuses, and updates — only with your explicit consent and always with an opt-out option;
  • Platform improvement: analyze aggregated and anonymized usage patterns to improve the a321 experience.

5Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing activity have a lawful basis. a321 grounds its processing activities in the following legal bases set out in Article 7 of Law 13.709/2018:

  • Contract performance (Art. 7, V): processing is necessary to fulfill the terms of service you agreed to when creating an account and using a321's services. Without this data, the service cannot be provided;
  • Compliance with a legal obligation (Art. 7º, II): certain purposes stem from a321's legal obligations, such as anti-money laundering compliance (Lei 9.613/1998) and age verification;
  • Legitimate interest (Art. 7º, IX): fraud prevention, platform security, and service improvement — always proportionate and in full respect of your rights;
  • Consent (Art. 7, I): for marketing communications and non-essential cookies — you may withdraw this consent at any time without affecting your use of the platform.

What this means for you: When the legal basis is consent, you may withdraw it at any time. For other bases — contract, legal obligation, or legitimate interest — processing may continue without your consent, but always within the stated purposes.

6Data Sharing with Third Parties

A321 does not sell, rent, or commercialize users' personal data. Data is only shared in the situations described below, always under confidentiality agreements and with guarantees that partners maintain security standards equivalent to those of a321:

  • Payment processors: certified partners who process transactions via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED. We share only the minimum data required to complete the transaction — never the user's full profile;
  • Game providers: live casino, crash games, and slots providers receive an anonymized identifier to record bets and calculate results — they do not receive your name, CPF, or financial data;
  • Identity verification services: for the KYC process, we may use specialized platforms that verify the authenticity of documents — these partners operate under professional confidentiality obligations and do not retain your data;
  • Government and judicial authorities: when required by law, court order, or request from competent Brazilian authorities. a321 only complies with formal, documented requests;
  • Auditors and legal counsel: under confidentiality obligations, for auditing, legal advisory, and regulatory compliance purposes.

Under no circumstances does a321 share your data with advertising companies, data aggregators, or any entity not directly involved in operating the services described above.

7Data Retention and Deletion

A321 retains your personal data for as long as necessary to fulfill the purposes described in this policy or as required by applicable Brazilian law:

  • Active account: while you maintain an active a321 account, your registration data, betting history, and financial transactions are retained to support the service and customer care;
  • After account closure: identification data and financial records are retained for up to 5 years after account closure, in accordance with legal requirements for anti-money laundering and tax obligations;
  • Marketing communications: deleted immediately upon unsubscription. You may unsubscribe at any time through your account dashboard or via the unsubscribe link in any email received from a321;
  • Self-exclusion data: the self-exclusion record is kept for a minimum of 5 years to prevent the account from being reopened before the agreed period — protecting you.

If you request deletion of your data and there is no legal obligation preventing it, a321 will complete the deletion within 30 days and confirm by email. When the law requires a minimum retention period, we will inform you of the exact timeframe and delete the data as soon as that period ends.

8Data Security

A321 implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

  • Encryption in transit: SSL/TLS 256-bit encryption across all communications between your device and a321 servers;
  • Encryption at rest: sensitive data stored in encrypted form on a321 servers;
  • Access control: only employees with a verified operational need can access personal data — and only after multi-factor authentication;
  • Continuous monitoring: automated systems detect suspicious access attempts and intrusion attempts in real time;
  • Security testing: a321 conducts periodic penetration tests (pentests) with specialized firms to identify and remediate vulnerabilities;
  • Incident response plan: in the event of a data breach, a321 will notify affected data subjects and the ANPD within the legal deadlines set by the LGPD.

You also play an important role in keeping your account secure. Use a strong, unique password for a321, enable two-step verification when available, never share your credentials with anyone, and contact support immediately if you suspect unauthorized access.

9Cookies and Tracking Technologies

Cookies are small text files stored on your device by your browser. a321 uses cookies to keep your session active, protect against fraud, analyze platform usage, and personalize your experience. Each category is explained below:

  • Strictly necessary cookies: essential for platform operation — login, betting session, bet slip, CSRF security. These cannot be disabled without affecting the service;
  • Analytics cookies: collect anonymized data on how users navigate a321 — pages visited, session duration, errors. Used to improve the platform. Can be disabled;
  • Personalization cookies: remember preferences such as language and display settings for a more comfortable experience. Can be disabled;
  • Security cookies: help detect suspicious behavior and protect your account from unauthorized access.
Cookie Preferences (demo)

A321 cookie preferences can be managed at any time in your account settings panel.

10Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that a321 is committed to upholding and facilitating. All requests can be submitted through our Portuguese-language support team, with a response within 15 business days:

Access

Request a copy of all personal data a321 holds about you. Delivered in a readable format within 15 days.

Correction

Update incomplete, inaccurate, or outdated data directly in your dashboard or through support.

Deletion

Request the deletion of data processed on the basis of consent. For data retained under a legal obligation, we will inform you of the applicable minimum retention period.

Portability

Export your data in a structured format (JSON or CSV) to transfer to another service, in accordance with ANPD regulations.

Consent Withdrawal

Withdraw your consent for marketing and non-essential cookies at any time — no penalties and no impact on the core service.

Sharing Information

Find out who a321 has shared your data with and for what purpose — available upon request to the DPO.

Restriction or Anonymization

Request the temporary restriction of unnecessary or excessive data while an investigation or dispute is ongoing.

Objection

Object to processing based on legitimate interests when you believe it harms your fundamental rights.

To exercise any of these rights, send an email to suporte@a321.world with the subject line "LGPD — [right name]" or reach us via live chat on the platform. Requests are handled within up to 15 business days.

11Protection of Users Under 18

A321 is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from minors. During registration, we request your date of birth and CPF, and the system automatically blocks registration attempts by users under 18.

If a321 identifies, after registration, that a user is under 18, the account will be closed immediately, the data will be deleted, and any deposited balance will be refunded to the original payment method.

If you suspect that a minor has created an account on a321, please contact our support team immediately via live chat or at suporte@a321.world.

12International Data Transfer

Some of the technology providers used by a321 — such as cloud infrastructure and game providers — may store or process data on servers located outside Brazil. When this occurs, a321 ensures the transfer is protected by:

  • Contractual data protection clauses equivalent to the LGPD;
  • Internationally recognized security certifications (ISO 27001, SOC 2);
  • Compliance with European GDPR where applicable, providing a level of protection equivalent to Brazil's LGPD.

Under no circumstances are data transferred to countries that do not offer an adequate level of protection as assessed by the ANPD. You may request details about the destination countries of your data by contacting the DPO.

13Changes to This Policy

A321 may update this Privacy Policy to reflect legal, regulatory, or operational changes. When significant changes occur, you will be notified by email at least 15 days before the new version takes effect.

The "last updated" date at the top of this page indicates when the current version was published. Previous versions are available upon request to the DPO for comparison purposes.

Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. If you disagree with the updates, you may close your account without penalty within 15 days of being notified.

14DPO Contact and Complaints

To exercise your rights, get answers about how your data is handled, or file a privacy complaint with a321, please contact our Data Protection Officer:

  • Email: suporte@a321.world — use the subject line "LGPD" for automatic prioritization;
  • Live chat: available 24 hours on the platform, with support exclusively in Portuguese;
  • Response time: up to 15 business days for data subject rights requests.

If you are not satisfied with a321's response after exhausting all internal support channels, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian federal authority responsible for enforcing the LGPD.

Related Documents

This Privacy Policy supplements the Terms and Conditions and the Responsible Gambling of a321. Read all three documents for a complete overview of your rights and our obligations.


Common Questions

Frequently Asked Questions about Privacy at a321

No, under any circumstances. a321 does not sell, rent, transfer, or commercialize users' personal data with third parties for advertising or commercial purposes. Data is only shared with essential operational partners — payment processors to handle transactions via Pix, boleto, or card, and game providers that receive only an anonymized identifier. All partners operate under confidentiality agreements and are prohibited from using your data for any other purpose.

Send an email to suporte@a321.world with the subject "LGPD — Data Deletion" or use the live chat on the platform. a321 will process your request within 30 days. If there is no legal obligation requiring retention, the data is deleted and you receive email confirmation. Some financial data must be kept for up to 5 years under anti-money laundering legislation — in that case, we will inform you exactly which data and for how long it will still be retained.

Identity verification (known as KYC — know your customer) is a requirement under Brazilian law for platforms that handle financial transactions. a321 requests an RG or CNH and proof of address before your first withdrawal to ensure winnings are sent to the right person and to meet anti-money laundering obligations. Documents are transmitted with encryption, processed by a certified platform, and are not stored indefinitely — they are deleted once verification is complete.

Yes, at any time. Click the unsubscribe link in the footer of any marketing email from a321, or go to your account dashboard and turn off promotional notifications. Removal is immediate. You will continue to receive mandatory transactional communications — such as bet confirmations, deposit notifications, and security alerts — as these are necessary for the service to function and do not constitute marketing.

After account closure, a321 retains identification data and financial records for the minimum period required by law — up to 5 years for transaction records, in compliance with anti-money laundering obligations. After that period, all data is permanently deleted. Data not subject to mandatory retention — such as browsing history and preferences — is deleted within 30 days of closure. You will receive a confirmation email detailing what has been deleted and what is still being retained due to legal obligations.

a321 uses automated systems for fraud detection and identification of suspicious behavior — such as duplicate accounts or money laundering. These automated decisions may result in alerts or preventive blocks. However, any significant action affecting your account — such as suspension or closure — undergoes human review before becoming final. If you believe you have been unfairly affected by an automated decision, contact support to request a review by an analyst.

Your Data is Protected. Now It's Time to Play.

Create your a321 account, deposit via Pix, and play with the confidence of knowing your data is protected by the LGPD and industry-leading digital security practices.

+18 • Gamble responsibly • Not permitted for users under 18

A321 Documents

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gambling. Together, these documents fully describe your rights and our obligations.

Português