At 21com, privacy is not a formality — it is a genuine commitment. This page clearly explains what data we collect, why we collect it, how we protect it, and what your rights are as a Brazilian user, in full compliance with the LGPD.
Official Document
Version 2.4 · Applicable to all 21com platform users in Brazil
The key points to know before reading 21com's full policy
21com collects only the data necessary to operate the platform securely: account registration, identity verification (KYC), Pix and other payment processing, and improving your experience. No excessive collection, no data gathered "just in case".
All transactions and communications between your phone or computer and 21com's servers are protected by 256-bit SSL encryption — the same standard used by digital banks like Nubank and Itaú. Your financial and personal data is always transmitted encrypted.
21com does not sell, rent, or share your personal data with third parties for commercial or advertising purposes. Data is only shared when required by law, by regulatory obligation, or to enable the payment services you use on the platform.
The General Data Protection Law (Lei 13.709/2018) gives you real rights over your information: access, correct, delete, and request portability of your data at any time. 21com respects all of these rights and responds to requests within 15 days.
21com uses essential cookies to keep the platform running and analytics cookies to understand how to improve the experience. You can manage your preferences at any time. Third-party advertising tracking cookies are not used without your consent.
Users' personal data is retained for as long as necessary to fulfill the purposes described in this policy, or for the period required by Brazilian law. After account closure and the applicable legal retention period, data is securely deleted or anonymized.
By using the 21com platform, you agree to the terms of this Privacy Policy. It is written in plain language so you know exactly what happens with your data. Take a moment to read it — it's a short, straightforward document.
For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), the 21com acts as the Personal Data Controller for users registered on the platform available at https://21com.best and on its Android and iOS apps.
The Controller is responsible for decisions regarding the processing of personal data: what data is collected, for what purpose, how long it is stored, and with whom it may be shared — always within the limits of this Privacy Policy and applicable Brazilian law.
To exercise your rights or submit any request related to personal data, contact our privacy team at contato@21com.best with "Data Protection" in the subject line.
21com collects personal data through three main channels: information you provide directly during registration and platform use, data generated automatically through your use of the website or app, and data obtained from authorized third parties in the context of security checks.
| Category | Data Collected | When It Is Collected |
|---|---|---|
| Registration | Full name, CPF, date of birth, email, phone number, address | At the time of registration on the platform |
| Verification (KYC) | Government-issued ID (RG, CNH, passport), selfie with document, proof of address | Before the first withdrawal |
| Financial | Pix key, banking details for wire transfers, deposit and withdrawal history | When making transactions on the platform |
| Platform usage | Bets placed, games accessed, session duration, internal browsing history | Automatically during use |
| Device and access | IP address, browser type, operating system, device type, time zone | Automatically on every login |
| Communications | Messages sent to support, emails, chat conversations with the 21com team | When you contact us |
Sensitive data: 21com does not collect unnecessary sensitive personal data, such as racial origin, religious belief, political opinion, or genetic data. Biometric data collected during KYC (photo and selfie) is used exclusively for identity verification and is not processed for any other purpose.
21com uses the personal data collected solely for the purposes described below. Each purpose is tied to a specific legal basis under the LGPD, detailed in Section 4:
21com does not use your data for purposes incompatible with those described above. Any significant new use will be communicated to you before it is implemented.
The LGPD requires that all personal data processing have a valid legal basis. 21com grounds the processing of user data on the following bases:
21com does not sell, rent, or trade your personal data with third parties. Sharing only occurs in the situations below, always with appropriate protections in place:
To process deposits and withdrawals via Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago, 21com shares with financial institutions and payment processors only the data strictly necessary to complete the transaction. These companies act as Data Processors and are contractually bound to protect your information.
Companies that assist in operating the platform — including cloud hosting, security data analysis, and transactional email services — are granted access to the minimum data necessary to perform their functions, under confidentiality and data protection agreements.
Live casino and slots providers operating on the 21com platform receive only the technical data needed to authenticate your game session and record results. Full identity data is never shared with game providers.
21com may share data with Brazilian authorities — the Federal Revenue Service, Central Bank, Public Prosecutor's Office, Federal Police, or judiciary — when required by law, court order, or financial crime investigation. In such cases, data sharing is strictly limited to what has been requested.
Security alert: 21com will never ask for your personal information through unofficial channels — such as unknown WhatsApp numbers, emails from domains other than @21com.best, or social media. If you receive any suspicious message requesting your details, ignore it and report it to us immediately.
21com applies robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:
Despite all these protections, no system is 100% foolproof. We therefore recommend using a strong, unique password on 21com, enabling 2FA, and never sharing your login credentials.
21com uses cookies and similar technologies to ensure the platform works correctly, understand how users navigate it, and continuously improve the experience. See the types of cookies we use:
Required for basic platform functionality. Without them, features like login, session management, betting, and payments will not work properly. These cookies cannot be disabled.
Used to understand how users interact with the platform — which pages they visit most, where they spend the most time, and which features they use most. This data is used in aggregate, anonymized form to drive product improvements. You may opt out.
Stores your platform preferences — such as selected language, favorite sports, and interface settings — so you do not have to reconfigure everything on each visit.
21com does not use third-party advertising tracking cookies (such as social media pixels or ad platforms) without your explicit consent. You can manage or withdraw your cookie preferences at any time in your account settings or by contacting us at our privacy email.
21com retains users' personal data for as long as necessary to fulfill the purposes described in this policy, or for the minimum period required by Brazilian law, whichever is longer:
Once the applicable retention periods expire, data is securely deleted or irreversibly anonymized so that the data subject can no longer be identified.
The LGPD grants you a set of rights over your personal data. 21com respects all of them and responds to requests within 15 business days:
| Right | What This Means in Practice |
|---|---|
| Access | You can request a copy of all personal data that 21com holds about you, including what data it is, why it was collected, and with whom it has been shared. |
| Correction | If any of your data is incorrect or out of date, you can request a correction at any time — for example, a change of address, a name correction, or an email update. |
| Deletion | You may request deletion of data processed on the basis of your consent. Data retained due to a legal obligation cannot be deleted before the legal deadline, but will be deleted as soon as that period expires. |
| Portability | You may request your data in a structured, machine-readable format to transfer to another controller — a right that is especially useful if you decide to move to another platform. |
| Consent withdrawal | For data processed on the basis of consent (such as marketing communications), you may withdraw that consent at any time, free of charge and without penalty, by sending an email to contato@21com.best. |
| Blocking or restriction | Where the accuracy or legality of data processing is in question, you may request a temporary suspension of the use of your data while the matter is investigated. |
| Data sharing information | You have the right to know which third parties 21com has shared or may share your data with, including details of the purposes involved. |
To exercise any of these rights, send an email to contato@21com.best with the subject line "LGPD Rights – [your right]" and your registered CPF. 21com will respond within 15 business days. For more complex cases, we may request additional identity verification to protect your account.
ANPD: If you believe your privacy rights have been violated and 21com's response was unsatisfactory, you may file a complaint with the National Data Protection Authority (ANPD), responsible for enforcing the LGPD in Brazil, through the gov.br/anpd portal.
The 21com platform is intended exclusively for individuals aged 18 years or older. 21com does not knowingly collect personal data from minors.
If you suspect that someone under 18 has created an account on the platform — whether a child, family member, or anyone else — contact our team immediately at contato@21com.best. The account will be closed immediately upon verification, the data will be deleted in accordance with legal deadlines, and any balance, if applicable, will be returned to the legal guardian after identity verification.
The identity verification (KYC) process includes date of birth confirmation and document analysis, serving as an additional barrier to prevent minors from accessing the platform.
To operate the 21com platform, some of the technology service providers we use — such as cloud infrastructure, security analysis services, and live game suppliers — may have servers located outside Brazil.
Whenever international data transfers occur, 21com ensures they take place only to countries with an adequate level of data protection, or under specific contractual clauses that require the recipient to handle the data with the same level of protection mandated by the LGPD, in accordance with Art. 33 of Law 13.709/2018.
Sensitive financial data — especially Pix details and bank transaction records — is processed and stored preferentially on servers located in Brazil, minimizing international transfers of high-risk information as much as possible.
21com may update this Privacy Policy periodically to reflect changes in Brazilian law, our data processing practices, or new platform features.
Whenever a significant change is made, you will be notified via your registered email and by a prominent notice on the platform, with at least 15 days in advance before the new version takes effect. The date of the most recent update is always shown at the top of this document.
By continuing to use 21com after the new version takes effect, you confirm that you have read and agreed to the changes. If you do not agree, you may close your account and request deletion of your data before the effective date.
The current version of this policy is always available at https://21com.best/privacy-policy.
21com has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO serves as the official communication channel between users, 21com, and the National Data Protection Authority (ANPD).
To contact 21com's DPO or for any privacy or personal data request:
Official privacy contact: contato@21com.best — always use this address for privacy and data protection matters. Responses from any other email domain are not official 21com communications.
When you create an account on any digital platform, you are entrusting your data to a third party. At 21com, we understand that trust is not a given — it must be earned through transparent practices, secure systems, and an honest approach to how we handle your information. Brazilian bettors who use 21com to bet on the Brasileirão Série A, live MMA and UFC, or slots at the casino are sharing personal, financial, and behavioral data. Treating that data with respect is not just a legal obligation — it is the bare minimum any serious platform owes its users.
Pix has become the primary deposit and withdrawal method at 21com — and for good reason. It's instant, available 24 hours a day, free for the user, and deeply embedded in everyday financial life in Brazil. But Pix also requires special care with financial data: the Pix key, associated banking details, and transaction history are sensitive pieces of information that must be protected with the same rigor as any other banking credential. At 21com, Pix data is encrypted, stored separately, and used solely to process the transactions you explicitly authorize. It is never shared with third parties beyond the financial institutions involved in the transaction.
Identity verification (KYC) is often seen by users as red tape — a tedious step before being able to withdraw. But there's a real reason for it: KYC protects you just as much as it protects the platform. When 21com confirms that an account truly belongs to the registered CPF, it prevents someone from using your data to open an account in your name, place bets with your money, and withdraw before you even notice. It's the same principle used by digital banks: identity verification is the first line of defense against identity fraud. Documents submitted for KYC are stored with encryption and accessible only to the verification team with a justified operational need.
21com analyzes data on how users interact with the platform — which sports they access most, how much time they spend in live casino sections, which betting markets they prefer. This data serves two main purposes: improving the platform experience and identifying betting patterns that may signal risk for the user. The first use is straightforward — if most users access the live casino on mobile, we prioritize improvements to the mobile interface. The second use is less obvious but equally important: if a user shifts from casual betting to a high-volume pattern with increasing frequency over a short period, this may indicate a gambling problem that 21com has a duty to address proactively. Privacy and responsible gambling are not opposing goals — they are complementary.
Brazil's General Data Protection Law (LGPD) came into force in 2020 and established a concrete set of rights for all personal data subjects. At 21com, those rights are more than words on a page. Any user can email contato@21com.best to request a copy of all the data we hold on them — and receive a complete response within 15 business days. You can request the correction of inaccurate data, ask for the deletion of data processed by consent, or withdraw authorization to receive promotional emails at any time. The LGPD reshaped the relationship between digital platforms and Brazilian users — and 21com has supported that change from day one.
21com continuously invests in security technology — encryption, anti-fraud monitoring, data segregation, and internal access controls. That said, your account security also depends on you. Use a strong, unique password for 21com — not the same one you use for email or social media. Enable two-factor authentication (2FA) in your account settings. Never share your login credentials, including with anyone claiming to be "21com support" through unofficial channels. Watch out for fake websites that mimic 21com's design — always check that the URL is https://21com.best. Our support team will never ask for your full password under any circumstances.
The concrete principles that guide how 21com handles your personal data
You know exactly what data we collect, why we collect it, and what we do with it. No fine print, no vague purposes. This policy was written to be read, not ignored.
21com collects only what it needs to deliver the services you signed up for. We do not collect data "just in case" or accumulate information without a defined purpose.
We continuously invest in encryption, threat monitoring, and internal team training. Data security is not a box to check — it is an ongoing operation at 21com.
Access, correction, deletion, portability — every right guaranteed by the LGPD is addressed within 15 days at 21com, with no red tape and no cost to the user.
Your personal data will never be sold, rented, or handed over to third parties for commercial purposes. Full stop. This commitment stands regardless of any commercial proposal.
Personal data does not stay at 21com indefinitely. Each category has a defined retention period — based on operational need or legal requirement — and is deleted or anonymized once that period ends.
Free registration in under 2 minutes. Instant Pix. Bet on football, MMA, E-sports, and Live Casino — all in English, all in BRL, with your data protected by 21com.