The 27gcom processes your personal data with transparency and accountability. This document explains what information we collect, how we use it, how long we retain it, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018).
Six principles that guide how personal information is handled on the platform.
All data is transmitted with 256-bit SSL encryption — the same standard used by major Brazilian banks such as Itaú, Bradesco, and Nubank. This means that personal information, passwords, and banking details cannot be intercepted by third parties during transmission. The 27gcom also stores passwords using irreversible hashing: not even our internal team has access to your actual password.
The 27gcom never sells, rents, or shares your personal data with third parties for marketing or advertising purposes. Your data is used solely to operate your account, process payments, and fulfill legal obligations. This commitment has no exceptions — regardless of the commercial value any third party may offer.
The 27gcom follows the principle of data minimization: we collect only what is strictly necessary to operate the platform securely. We do not ask for unnecessary information during registration. Every required field has a clear, lawful purpose — identification, fraud prevention, or payment processing.
The platform operates in full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018). This includes a defined legal basis for each processing activity, appointment of a Data Protection Officer (DPO), respect for data subjects' rights, and formal processes for handling access, correction, and deletion requests.
Within 27gcom, access to user data is restricted to personnel with a verified operational need — support, compliance, and security teams. Every access is recorded in an audit log. No staff member may access user data without formal authorization and documented justification.
Request access to, correction of, or deletion of your data on the 27gcom is simple: just reach out via live chat or email. The response time is up to 15 business days as required by the LGPD. There is no unnecessary red tape — the process is clear and straightforward, and you will receive email confirmation at every step.
The controller responsible for processing personal data collected through the platform 27gcom (accessible at https://27gcom.best) is the platform operator itself, as identified in the regulatory registration documents available upon request.
For the purposes of this Privacy Policy, any reference to "27gcom", "we", or "platform" refers to that operating entity. The 27gcom has appointed a Data Protection Officer (DPO) responsible for receiving requests related to the processing of personal data, whose contact details are provided in Section 13 of this document.
This Privacy Policy applies to all services offered by the 27gcom, including Sports Betting, online casino, slots, crash games, jackpot, and any other current or future services available on the platform.
The 27gcom collects personal data at different points during your interaction with the platform. Below are the main types of information processed:
Data provided directly by the user:
Data collected automatically during platform use:
Each piece of data collected by the 27gcom has a specific and legitimate purpose. The table below summarizes the main processing purposes:
The 27gcom does not use your personal data to build behavioral profiles for sale to third parties, for credit scoring, or for any purpose not listed above without your express consent.
The LGPD requires that all personal data processing have a defined legal basis. The 27gcom processes your data based on the following legal grounds set out in Article 7 of the LGPD:
Where processing is based on consent, users have the right to withdraw it at any time without affecting the validity of any processing carried out prior to that withdrawal. Withdrawing consent for marketing cookies, for example, has no impact on account functionality or the processing of bets and payments.
The 27gcom does not sell, rent, or transfer your personal data to third parties for commercial purposes. Full stop. Sharing occurs only in the situations described below, each with a specific purpose and contractual data protection controls:
Any new data sharing that does not fall under the categories above will be communicated to the user in advance and, where required by the LGPD, will be subject to express consent.
The personal data processed by the 27gcom are stored on secure servers with encryption at rest and strict access controls. Retention periods vary according to the purpose and applicable legal obligations:
When you request account deletion, the 27gcom anonymizes or deletes data that is not subject to mandatory retention. Data subject to legal retention periods is kept in a restricted environment, not used for any commercial purpose, until the applicable period expires.
The 27gcom implements technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. The main measures in place include:
No system is 100% breach-proof. That is why the 27gcom recommends that users create strong, unique passwords, enable 2FA, and never share their login credentials. If you suspect your account has been compromised, support is available 24 hours a day for immediate account blocking.
The 27gcom uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and analyze site usage. The types of cookies used are:
The 27gcom does not use third-party cookies for tracking on external websites. Analytics and preference cookies can be managed by the user in browser settings or through the cookie preference panel available on the platform.
The 27gcom is a platform intended exclusively for users aged 18 and over. Registration by minors is strictly prohibited and the 27gcom takes measures to prevent minors from using its services:
If the 27gcom identifies that it has collected data from a minor through any means, that data will be deleted immediately, the account will be closed, and the balance will be returned to the rightful holder upon proof of parenthood or legal guardianship. Legal guardians who identify unauthorized use by a minor may contact support for immediate action.
The 27gcom does not intentionally collect data from children or adolescents for any purpose and does not develop products aimed at this audience.
The LGPD grants data subjects a set of rights that the 27gcom respects and facilitates the exercise of your rights. You may request, at any time:
Confirm whether we process your data and receive a full copy of the information we hold about you.
Correct incomplete, inaccurate, or outdated data directly through support or your profile settings.
Request the anonymization or deletion of unnecessary or excessively processed data, except where there is a legal obligation to retain it.
Receive your data in a structured, machine-readable format for transfer to another service provider.
Withdraw consent given for marketing cookies or promotional communications at any time, at no cost.
Object to processing carried out on the basis of legitimate interest when there is a legitimate reason related to your particular situation.
To exercise any of these rights, please contact us by email at contato@27gcom.best or via the platform's live chat. The 27gcom responds within up to 15 business days, in accordance with the timeframe established by the LGPD. In more complex cases requiring additional review, the deadline may be extended with a justified notice sent to the data subject.
If you believe that the 27gcom did not adequately handle your request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.
Some of the infrastructure and service providers used by the 27gcom — such as cloud storage services and casino game providers — may have servers located outside Brazil. When this occurs, the 27gcom ensures that international data transfers comply with the legal bases authorized by the LGPD:
The 27gcom maintains an up-to-date record of all international data transfers and the applicable protection mechanisms. Detailed information about specific destination countries may be requested from the DPO.
In the event of a security incident involving users' personal data — such as unauthorized database access, information leaks, or credential compromise —, the 27gcom will follow these procedures:
The 27gcom maintains a documented Incident Response Plan that is tested on a regular basis. If you suspect your account has been compromised, contact live support immediately — the security team can block access to your account in under a minute while the situation is investigated.
The Data Protection Officer (DPO) of 27gcom is the official channel for personal data requests, questions about this Privacy Policy, and complaints regarding the handling of your information. You can reach us through the following means:
The standard response time for personal data requests is up to 15 business days from the date the request is received. In cases requiring additional technical or legal review, the deadline may be extended by a further 15 business days, with a justified notice sent to the data subject.
To help us process your request faster, please include: your full name, CPF (partially masked in emails for security), the email address linked to your account, and a clear description of your request.
The 27gcom may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable law, or the evolution of the services offered. Any material update will be communicated to users by email at least 15 days before the new terms take effect.
The most current version of this Policy will always be available at https://27gcom.best/privacy-policy, with the date of the last revision indicated at the top of the document and in the hero section header of this page. The 27gcom keeps historical versions of the Policy available for review upon request to the DPO.
Continued use of the platform after the changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may close your account in accordance with the rules set out in the Terms and Conditions and request the deletion of your data to the extent permitted by law.
The LGPD gives you real control over your data — and 27gcom makes it easy to exercise every right.
Request a complete copy of everything that 27gcom holds about you — profile, betting history, payment records, and access logs.
Outdated or incorrect data can be corrected directly through support. Name, address, email, and mobile number can be updated with simple verification.
Request deletion of your account and any data not subject to legal retention. The process is initiated within up to 5 business days of the request.
Receive your data in a structured format (JSON or CSV) for transfer to another service. The 27gcom delivers the file within 15 business days.
Disable marketing cookies and promotional communications at any time from the preferences panel — no need to close your account.
If your request is not properly handled, you have the right to file a complaint with the National Data Protection Authority.
The most common user questions about how their data is handled.
This Privacy Policy should be read together with the other documents governing the use of 27gcom:
Sports Betting and casino are entertainment and should be treated as such. The 27gcom offers responsible gambling tools accessible directly from your account settings: deposit limits, temporary breaks, and permanent self-exclusion. Never bet more than you can afford to lose. If gambling is getting out of hand, use these tools or contact support.
Prohibited for users under 18. CVV: 188 (24h, free of charge). More details at Responsible Gambling.
Your data protected by the LGPD, 256-bit SSL encryption, and zero data selling. Free registration in 2 minutes, deposits via Pix from R$ 20.00.