Data protection

Privacy Policy of 123go – Your Data Protected

123go takes your personal data seriously and handles it with full transparency. Here you'll find exactly what we collect, why we collect it, how we use it, and what your rights are as a data subject — all in compliance with Brazil's General Data Protection Law (LGPD).

Last updated: January 2026
SSL 256-bit
Encryption on all transactions
LGPD
Law No. 13.709/2018
Zero selling
We don't sell your data
11 Sections
Full coverage

What you need to know

How 123go Takes Care of Your Data

Six concrete commitments 123go makes to every Brazilian user

Encryption Across Every Transmission

Every piece of data you send to 123go — registration details, Pix deposits, banking information — is transmitted with 256-bit SSL encryption. This means no information travels in plain text between your phone or computer and the platform's servers. The standard used is the same as that of major Brazilian banks such as Itaú and Bradesco.

Full LGPD Compliance

123go operates in full compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018). This ensures that every instance of personal data processing has a clear legal basis, that you receive complete information about how your data is used, and that you can exercise your rights as a data subject at any time.

No Sale of Data to Third Parties

123go does not sell, rent, or license its users' personal data to third parties for commercial purposes. Your registration data, betting history, and financial information exist to power the platform's services — not to generate advertising revenue for other companies.

Your Rights Are Actually Enforceable

You can request access, correction, deletion, portability, and consent withdrawal for your data at any time through our support team. No complicated forms required — just reach out via chat or email. We respond within up to 15 business days as required by the LGPD.

Minimal and Necessary Data Collection

123go collects only the data strictly necessary to provide its services: identification (name, CPF, date of birth), contact details (email, mobile number), financial transaction data, and platform usage logs. We do not collect sensitive data beyond what is required by identity verification and fraud prevention regulations.

Incident Notification

In the event of any security incident that may affect your data, 123go will notify the National Data Protection Authority (ANPD) and the affected users within the legal deadlines set out in the LGPD. Transparency in adverse situations is a non-negotiable commitment of the platform.

LGPD in practice

Your Rights as a Data Subject

The LGPD gives you real control over your personal data on 123go

Right to Access

You can request a full copy of the personal data 123go holds about you at any time — including registration details, financial transaction history, and activity logs. Simply send an email to suporte@123go.express with the subject line "Data Access Request". You will receive a response within 15 business days.

Right to Rectification

If any of your information on 123go is incorrect, outdated, or incomplete, you can request a correction at any time. Details such as your email address, mobile number, and contact information can be updated directly in your account settings. To correct your CPF or date of birth, you will need to submit supporting documentation to our support team.

Right to Erasure

You may request deletion of your personal data from 123go at any time. Deletion will be carried out except where retention is required by law — such as financial records mandated by anti-money laundering regulations, which must be kept for a minimum of 5 years. The scope and any limitations of the deletion will be communicated in the response to your request.

Right to Data Portability

You may request your data in a structured, machine-readable format (JSON or CSV) for transfer to another service. This includes registration data and transaction history available on the platform. Data portability is a right established under the LGPD, and 123go fulfills it in full upon a formal request to our support team.

Consent Withdrawal

For data processing activities based on consent — such as sending promotional communications by email or SMS — you may withdraw that consent at any time, with no need to provide a reason. You can opt out of promotional communications directly via the unsubscribe link in any email or by contacting 123go support.

Right to Information and Explanation

You have the right to know what data 123go holds about you, the purposes for which it is processed, how long it is retained, and whether it is shared with third parties — and if so, with whom and for what reason. This Privacy Policy is the primary document for exercising that right, but additional questions can be sent to support at any time.

This Privacy Policy describes how the 123go collects, uses, stores, and protects the personal data of its users. By using the platform, you confirm that you have read and understood this document. If you have any questions, please contact our support team before completing your registration.

1Data Controller

The 123go, operated under the domain 123go.express, is the controller of the personal data collected through the platform, as defined by the General Data Protection Law (Law No. 13,709/2018 — LGPD). This means 123go is responsible for determining the purposes and means of processing your personal data.

The official contact channel for privacy and data protection matters is the email suporte@123go.express, with support in Portuguese, 24 hours a day, 7 days a week. For formal requests to exercise data subject rights, we recommend sending an email with a clear subject line identifying the nature of your request.

2Data Collected

2.1 Data You Provide Directly

During registration and platform use 123go, you provide us directly with the following data:

  • Personal identification: full name, CPF, date of birth;
  • Contact: e-mail address and mobile phone number;
  • Financial data: bank account details or Pix key for processing deposits and withdrawals;
  • Verification documents: photo ID and proof of address, when requested for identity verification;
  • Communication preferences: opt-in or opt-out for promotional communications via email, SMS, and push notifications.

2.2 Automatically Collected Data

When you access and use the platform, we automatically collect:

  • Usage data: pages visited, bets placed, games used, access times, and session duration;
  • Technical data: IP address, device type, operating system, browser, and version used;
  • Location data: approximate location inferred from IP address, used exclusively for geographic eligibility verification and fraud prevention;
  • Cookies and similar technologies: as detailed in Section 8 of this Policy.
Data Category Examples Primary Purpose
Identification Name, CPF, date of birth Identity Verification
Contact Email, mobile number Operational communication
Financial Pix key, bank, transaction history Payment processing
Platform usage Bets, sessions, pages visited Product improvement
Technical IP, device, browser Security & anti-fraud

3Purposes of Processing

The 123go uses your personal data exclusively for the following purposes:

  • Provision of contracted services: creating and managing your account, processing deposits via Pix, bank slip, credit and debit card, PicPay, and Mercado Pago, settling Sports Betting wagers, and paying out winnings from Live Casino games;
  • Identity verification and fraud prevention: verification of your identity to ensure the security of your account and financial transactions, as well as prevention of multiple account creation;
  • Compliance with legal obligations: maintenance of financial records required by Brazilian anti-money laundering and counter-terrorism financing regulations;
  • Operational communications: sending registration confirmations, transaction notifications, security alerts, terms updates, and other communications essential to using the platform;
  • Promotional communications: sending offers, promotions, bonuses, and 123go news, exclusively with the user's prior consent, which may be withdrawn at any time;
  • Ongoing product improvement: aggregate analysis of usage patterns to improve the interface, mobile performance, loading speed, and the relevance of available betting markets;
  • Responsible gambling: monitoring of gaming patterns to identify potentially problematic behavior and trigger self-exclusion tools, as detailed on the Responsible Gambling.

4Legal Bases for Processing

As required by the LGPD, each processing activity involving personal data carried out by 123go is grounded in one of the following legal bases:

  • Contract performance: processing necessary to fulfill the services agreed upon at registration — bet processing, winnings settlement, and handling of deposits and withdrawals via Pix;
  • Legal obligation compliance: retention of financial and identity records as required by Brazilian financial regulations and the LGPD;
  • Legitimate interest: fraud prevention, platform security, and product improvement based on aggregated and anonymized data;
  • Consent: sending promotional communications, use of non-essential cookies, and sharing data for analytics purposes. Consent may be withdrawn at any time without penalty.

5Data Sharing with Third Parties

The 123go does not sell personal data. Sharing only occurs in the following strictly necessary situations:

5.1 Payment processing partners

To process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, we share the minimum necessary financial data with our payment processing partners. These partners are contractually required to use the data solely for the purpose of processing the transaction and to maintain security standards equivalent to those of 123go.

5.2 Infrastructure and Technology Providers

We use third-party providers for cloud hosting, transactional email delivery, fraud detection, and technical support. These providers act as data processors under the LGPD, handling information strictly according to 123go's instructions and without authorization to use the data for their own purposes.

5.3 Legal and Regulatory Obligations

123go may share data with Brazilian government authorities — such as the Federal Revenue Service, the Central Bank, and law enforcement agencies — when required by law, court order, or investigation of unlawful activity. In such cases, only the minimum data necessary to fulfill the legal requirement is disclosed.

5.4 What we don't share

123go does not share personal data with marketing companies, advertising platforms, affiliate networks, or any third party for commercial purposes unrelated to the provision of the platform's services.

6Data Retention

The 123go retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations:

  • Active account data: retained for as long as your account remains active on the platform;
  • Financial records: retained for a minimum of 5 years after account closure, in accordance with Brazilian regulatory requirements for anti-money laundering;
  • Identity verification data: retained for the period required by applicable financial regulations, generally 5 years;
  • Security and anti-fraud logs: retained for up to 2 years for incident investigation purposes;
  • Promotional communications data: deleted immediately upon withdrawal of consent, except for records of the consent itself and its revocation.

Once the applicable retention period has passed, data is securely deleted or irreversibly anonymized, making any re-identification impossible.

7Data Security

The 123go implements robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • Encryption in transit: 256-bit SSL across all communications between your device and the platform's servers — the same standard used by major Brazilian banks such as Nubank, Itaú, and Bradesco;
  • Encryption at rest: sensitive data stored on 123go's servers is encrypted even when not in transit;
  • Two-factor authentication: available to all users in account settings — highly recommended for added protection;
  • Internal access controls: only employees with a legitimate need have access to users' personal data, and that access is logged and regularly audited;
  • Security monitoring: automated intrusion detection and anomaly monitoring systems run continuously on the platform's servers;
  • Regular audits: the security infrastructure is periodically assessed by specialized teams.

No security system is 100% foolproof. In the event of a security incident resulting in a personal data breach, 123go will follow the notification procedures set out in the LGPD, notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the legally required timeframes.

8Cookies and Similar Technologies

The 123go uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored in your browser that allow the platform to recognize your device and preferences on subsequent visits.

8.1 Types of Cookies Used

  • Essential cookies: required for the platform's basic functionality — maintaining your logged-in session, CSRF protection, and the bet slip. These cannot be disabled.
  • Performance cookies: collect information about how you use the platform (pages visited, session time, errors encountered) to improve performance. They do not identify you personally — data is aggregated and anonymized.
  • Preference cookies: store your language settings, time zone, and display preferences to personalize your experience.
  • Analytics cookies: collected with your consent and used to understand browsing patterns and improve the platform's interface.

8.2 Cookie management

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may prevent the platform from functioning properly. Your browser or device settings include specific options for each type of cookie you have accepted.

9Minors

The platform 123go is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The platform uses technical age-verification measures at registration and monitors accounts showing signs of use by minors.

If you are a parent or guardian and have identified that someone under 18 has accessed the platform or registered using false information, please contact support immediately at suporte@123go.express. The account will be closed, all data belonging to the minor will be deleted, and any deposited funds will be refunded following a compliance review.

We recommend that parents and guardians use parental control tools on devices shared with children and teenagers to prevent access to online betting and casino platforms.

10How to Exercise Your Rights (LGPD)

To exercise any of the rights provided under the LGPD regarding your data on the 123go, you can:

  • Send an email to suporte@123go.express with a subject line clearly identifying the right you wish to exercise (e.g., "Data Deletion Request" or "Data Portability Request");
  • Reach out via the live chat inside the platform after logging into your account;
  • To unsubscribe from promotional communications: use the unsubscribe link in any email received from 123go.

The response deadline is up to 15 business days from the date the complete request is received, as provided by the LGPD. In more complex cases, 123go may request an extension with a reasoned justification.

If you believe your rights as a data subject have not been adequately addressed by 123go, you may file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for overseeing compliance with the LGPD in Brazil.

11Policy Updates and Contact

11.1 Policy updates

The 123go may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, or amendments to applicable laws. When material changes occur, you will be notified by e-mail and through a prominent notice on the platform, at least 7 days before the new version takes effect.

The date of the last update is always shown at the top of this page. We recommend reviewing this Policy periodically. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

11.2 Privacy contact channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please get in touch:

  • E-mail: suporte@123go.express
  • Live chat: available within the platform after login, 24 hours a day
  • Support hours: 24/7, every day, in Portuguese
Version and effective date

This version of the Privacy Policy of 123go took effect in January 2026 and fully supersedes all previous versions. In the event of any conflict with prior communications, the provisions contained herein shall prevail.

Why privacy matters

Personal Data and Trust: 123go's Approach

When you deposit R$ 50.00 via Pix at 123go to bet on the Brasileirão Série A, you are entrusting the platform not just with that money, but also with your banking details, CPF, and mobile number. That responsibility is not taken lightly. 123go was built on the premise that privacy is not an optional feature — it is a basic requirement for any financial platform that wants to be taken seriously in Brazil.

The Lei Geral de Proteção de Dados was enacted to put Brazilian citizens in control of their own data. Before the LGPD, it was common for companies to collect all kinds of information without explaining why, share it with third parties without notice, and retain it indefinitely without any criteria. The 123go did not operate that way before the LGPD, and it does not operate that way now — the law simply formalized what was already the platform's approach to user data.

In practice, this means: when you register on the 123go, we tell you exactly what data we ask for and why. CPF is required for identity verification and to ensure each account belongs to a real person — which protects all honest users from fraud. A mobile number is required for authentication and operational communications. Bank details or Pix key are required solely to process withdrawals to your account — and only your account, never to third parties.

The 123go has no commercial interest in your data beyond delivering the services you signed up for. We don't sell your betting history to data brokers. We don't share your e-mail with advertising networks. We don't cross-reference your CPF against external marketing databases. When you receive an e-mail from 123go about a promotion, it's because you opted in during registration — and you can opt out with a single click at any time.

Using your phone to access the platform raises a specific issue worth knowing about: cookies and browsing data. When you open 123go in your Android or iPhone browser, essential cookies are required to keep your session active and secure your transactions. Non-essential cookies — such as analytics — are only enabled with your consent. You can manage these preferences in your browser settings at any time, without affecting your ability to bet or withdraw.

On the technical security side, the 123go uses 256-bit SSL encryption — the same standard used by Nubank, Itaú, and Bradesco — across all communications between your device and the platform's servers. This means that even on a public Wi-Fi network, the information you send and receive travels fully encrypted. Enabling two-factor authentication in your account settings adds an extra layer of protection that we strongly recommend for all users.

Transparency about how data is used is a value that 123go brings to day-to-day operations. This Privacy Policy is written in plain language, free of excessive legal jargon, because we believe you have the right to genuinely understand how your data is used. If you still have questions after reading this document, our support team is available 24 hours a day, every day, to answer in plain terms — no red tape.

LGPD Compliance at 123go

123go processes your data in full compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018). You may exercise your rights as a data subject — access, correction, deletion, portability, and withdrawal of consent — at any time via suporte@123go.express. Also read our Terms and Conditions for the full picture of rights and responsibilities.

Common questions

Privacy Questions at 123go

No. 123go does not sell, rent, license, or transfer users' personal data to third parties for commercial purposes. Your data — CPF, mobile number, betting history, financial information — exists solely to enable the platform's services: processing Pix deposits, settling bets, processing withdrawals, and keeping your account secure. Data is shared with third parties only with payment processing partners (strictly as required for the transaction) and with legal authorities when required by law.

Simply send an email to suporte@123go.express with the subject line "Data Deletion Request", including the CPF and email address associated with your account. 123go will respond within 15 business days, specifying which data can be deleted immediately and which must be retained due to legal obligations — such as financial records, which Brazilian anti-money laundering regulations require to be kept for a minimum of 5 years. To submit a deletion request, your account must be closed (with no remaining balance or pending bets).

Your CPF is required for two main reasons. First, for identity verification — to confirm that each account belongs to a real person, which protects the entire user community against fraud, multiple accounts, and bonus abuse. Second, as part of the legal obligations that apply to financial platforms in Brazil under anti-money laundering rules, which require all customers to be identified. Your CPF is used for no other purpose and is never shared with third parties for commercial use.

You can unsubscribe from promotional emails in two ways: by clicking the "Unsubscribe" link in the footer of any promotional email received from 123go, or by contacting support via chat or email at suporte@123go.express. The opt-out is processed within 48 hours. You will continue to receive essential operational emails — such as transaction confirmations, security alerts, and important account notifications — even after unsubscribing from promotional communications, as these are necessary for the provision of the service.

123go only stores the Pix key or bank details (branch, account number, bank name) required to process your withdrawals. This data is encrypted both at rest and in transit using 256-bit SSL. Full credit card numbers are never stored on 123go's servers — card processing is handled directly by our certified payment partner, which complies with PCI DSS standards. Your transaction history (deposit and withdrawal amounts, dates) is retained for the period required by Brazilian financial regulations.

In the event of a security incident resulting in unauthorized access to personal data, 123go will follow the procedures set out in the LGPD: notifying the National Data Protection Authority (ANPD) within the legally required timeframe and contacting affected users directly by e-mail, detailing which data was exposed, what corrective measures were taken, and what steps you can take to protect yourself. 123go maintains an up-to-date incident response plan and conducts regular drills to ensure a swift response to any adverse situation.

Your data protected. Your experience, worry-free.

Sign up with 123go on a platform that takes your privacy seriously — processes withdrawals via Pix in under 2 minutes and covers football, e-sports, live blackjack, and much more.

SSL 256-bit
LGPD compliant
Instant Pix
24/7 Support

18+ | Bet Responsibly | Responsible Gambling

Português