Official Platform Document

1pra1 Privacy Policy – Your Data, Protected

The 1pra1 takes user privacy seriously. This document explains, in plain language, what data we collect, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with Brazil's General Data Protection Law (LGPD).

Last updated: January 2026

By using any service provided by 1pra1, you agree to the practices described in this Privacy Policy.

LGPD Compliant
256-bit SSL
No Data Selling
Your Guaranteed Rights
DPO Available

How 1pra1 Protects Your Privacy

Six concrete commitments to the security of your data

256-bit SSL encryption

All communication between your device and the servers of 1pra1 is protected with the same encryption standard used by major Brazilian digital banks — Nubank, Itaú, Bradesco, and Banco do Brasil. No information is ever transmitted in plain text.

Your Data Is Never Sold

The 1pra1 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Period. The information you provide is used solely to operate the platform, verify identity, and process payments.

LGPD Compliance

The 1pra1 operates in compliance with Brazil's General Data Protection Law (Law No. 13.709/2018). This ensures you have the right to access, correct, export, and delete your personal data at any time upon request.

Secure Storage

User data at 1pra1 are stored on servers with strict physical and logical access controls. Only authorized employees with a legitimate business need have access to users' personal information.

Control in Your Hands

You can review, update, and request deletion of your data directly through the account dashboard or by emailing suporte@1pra1.best. The 1pra1 responds to data subject requests within 15 business days.

Communication Preferences

You control which communications you want to receive from 1pra1. Promotional emails can be unsubscribed at any time from your account dashboard or via the unsubscribe link in each email. Transactional and security communications remain active as an operational requirement.

Important Notice: By creating an account or continuing to use any service offered by 1pra1, you acknowledge that you have read and agreed to this Privacy Policy in full. This document should be read together with the Terms and Conditions of the platform. If you have any questions, please contact us at suporte@1pra1.best.

1 About Us and Who Controls Your Data

The 1pra1 is a Sports Betting and online casino platform designed exclusively for the Brazilian market. The platform operator acts as the controller of personal data collected during use of the services available at 1pra1.best and any digital interface associated with the brand.

As data controller, 1pra1 is responsible for determining the purposes and means by which users' personal data is processed. All data processing decisions comply with the General Data Protection Law (LGPD — Law No. 13,709/2018) and international privacy best practices.

For questions related to privacy and data protection, you may contact the Data Protection Officer (DPO) of 1pra1 at suporte@1pra1.best, using the subject line "Data Protection – LGPD".

2 What Data We Collect

The 1pra1 collects only the data necessary to operate the platform, verify identity, process payments, and fulfill legal obligations. Below are the main types of data collected:

Category Data Collected When It Is Collected
Identification Full name, CPF, date of birth, document photo (when requested) During registration and identity verification
Contact Email, mobile number At registration
Address ZIP code, city, state, full address During identity verification
Financial Pix key, partial card details (last 4 digits), deposit and withdrawal history When carrying out financial transactions
Platform Use Betting history, games accessed, session times, browsing preferences While using the platform
Technical IP address, device type, operating system, browser, session identifiers Automatically on each access
Communication Content of messages exchanged with 1pra1 When contacting support

The 1pra1 does not collect data from sensitive categories such as ethnic origin, political opinion, religious belief, or genetic or biometric data — except where strictly required for legally mandated identity verification, with the user's explicit consent.

Payment Data

The 1pra1 does not store full credit or debit card numbers. Card transactions are processed directly by partner financial institutions holding PCI DSS certification. Pix data (key and associated bank) is stored in encrypted form exclusively for withdrawal processing.

3 How We Use Your Data

Each piece of data collected by 1pra1 has a specific and legitimate purpose. We do not process data beyond what is necessary for the stated purposes:

  • Account operation: Create and maintain your account, authenticate logins, process bets and games, calculate and credit winnings, and manage bonuses and promotions.
  • Identity verification (KYC): Confirm that you are who you say you are, that you are 18 years of age or older, and that you reside in Brazil — a legal and platform security requirement.
  • Payment processing: Process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer, with full security and traceability.
  • Fraud and money laundering prevention: Monitor usage patterns to detect suspicious activity, protect platform integrity, and meet regulatory obligations related to anti-money laundering (Law No. 9.613/1998).
  • Customer support: Answer questions, resolve issues, and keep a record of interaction history to continuously improve our support.
  • Communications: Send transaction confirmations, security alerts, policy updates, and — with your consent — promotional communications about offers from 1pra1.
  • Product improvement: Analyze aggregated and anonymized usage patterns to improve the platform, develop new features, and resolve technical issues.
  • Fulfillment of legal obligations: Comply with requests from competent authorities as required by applicable Brazilian law.

The legal basis for data processing at 1pra1 varies by purpose: contract performance (account operation and payments), legal obligation compliance (KYC, fraud prevention), legitimate interest (security and product improvement), and consent (promotional communications).

4 Sharing Data with Third Parties

The 1pra1 does not sell, rent, or share users' personal data with third parties for commercial purposes. Data sharing occurs only in the situations listed below, all of which have a legitimate legal basis:

  • Payment processors: To process deposits and withdrawals, the necessary data is shared with partner financial institutions and payment processors (Pix operators, card acquirers, PicPay, Mercado Pago). These partners process data solely for the contracted purpose and are subject to equivalent privacy obligations.
  • Game providers: To deliver live casino games, slots, and crash games, the minimum necessary data is shared with partner providers (such as Evolution Gaming, Pragmatic Play, and Spribe) for session identification and bet processing. No sensitive data beyond what is required for the gaming session is transmitted.
  • Identity verification services: To fulfill KYC obligations, 1pra1 may use specialized document verification services. Data processed through these services is handled with strict confidentiality and used solely for the purpose of verification.
  • Government authorities: The 1pra1 may share data with Brazilian law enforcement, regulatory, or judicial authorities when legally required by court order, administrative request, or regulatory obligation. In such cases, sharing is limited to the minimum necessary to fulfill the scope of the request.
  • Auditors and legal advisors: In internal audit processes, legal advisory, or due diligence, data may be accessed by professionals bound by confidentiality obligations.

International Data Transfer: Some partner providers of 1pra1 operate infrastructure in other countries. When data is transferred internationally, 1pra1 ensures that recipients adopt data protection measures equivalent to those required by the LGPD, through specific contractual clauses or recognized privacy certifications.

5 How Long We Keep Your Data

The 1pra1 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods:

  • Active account data: While the account is active on the platform, data is retained for operation and support purposes.
  • After account closure: Identification records and financial transaction data are retained for a minimum of 5 (five) years after account closure, in accordance with anti-money laundering obligations (Law No. 9,613/1998) and applicable tax regulations.
  • Support communication records: Retained for up to 2 (two) years after the interaction, for audit purposes and resolution of any disputes.
  • Technical log data: Retained for up to 6 (six) months, unless an ongoing security investigation requires otherwise.
  • Marketing data based on consent: Retained until consent is withdrawn by the user.

After retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. 1pra1 regularly reviews retained data to ensure that retention remains necessary and proportionately justified.

6 Security of Your Data

The protection of user data at 1pra1 is an operational priority, not just a legal requirement. The platform implements multiple layers of security to minimize the risk of unauthorized access, data loss, or breaches:

  • Encryption in transit: All traffic between the user's device and the servers of 1pra1 is encrypted via TLS 1.3 with a 256-bit SSL certificate.
  • Encryption at rest: Sensitive data stored on servers — including passwords (stored as hashes only) and financial data — is encrypted at rest using robust algorithms.
  • Access control: Internal access to user data is restricted to the minimum necessary for each role (principle of least privilege). Access logs are maintained and audited on a regular basis.
  • Two-factor authentication: Available to all users and mandatory for internal teams who access production data.
  • Continuous monitoring: The infrastructure of 1pra1 is monitored 24 hours a day to detect anomalies, intrusion attempts, and suspicious activity.
  • Security testing: The platform undergoes periodic security assessments, including penetration testing by specialized teams.

In the event of a security incident that may affect users' personal data, 1pra1 will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with clear information about the nature of the incident and the steps taken to mitigate it.

Your Role in Keeping Your Account Secure

Your account security also depends on you. Use strong, unique passwords, enable two-factor authentication, never share your login credentials with anyone, and be wary of any communication asking for your password — the 1pra1 never asks for passwords via email or chat. Report any suspicious activity to suporte@1pra1.best immediately.

7 Cookies and Tracking Technologies

The 1pra1 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze site performance. When you first access the platform, you will be presented with a cookie notice with configuration options.

The types of cookies used by 1pra1 are:

  • Essential cookies: Required for basic platform functionality — session authentication, security, and language preferences. These cannot be disabled without affecting your ability to use the platform.
  • Performance cookies: They collect anonymized information about how users navigate the platform to identify technical issues and improve the experience. They do not identify users individually.
  • Functionality cookies: They remember user preferences — such as the last game played or interface settings — for a more personalized experience across sessions.
  • Analytics cookies: Used with traffic analysis tools to understand platform usage patterns in aggregate. Data is anonymized prior to analytical processing.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of 1pra1, including the ability to log in and place bets.

8 Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) grants you, as the data subject, a set of rights over the information that 1pra1 holds about you. All of the rights below can be exercised through the account dashboard or by emailing suporte@1pra1.best with the subject line "LGPD Rights":

Right of Access

Request a copy of all personal data that 1pra1 holds about you, including the purpose of processing and with whom it has been shared.

Right to Rectification

Request correction of any incomplete, inaccurate, or outdated data held by 1pra1. Identification data may require submission of an up-to-date document.

Right to Erasure

Request deletion of data processed on the basis of consent. Data required to fulfill legal obligations cannot be deleted before the minimum retention period.

Right to Data Portability

Request your data in a structured, machine-readable format for portability to another controller, in accordance with ANPD regulations.

Right to Object

Object to data processing based on legitimate interest when you believe your fundamental rights and freedoms override that interest.

Right to Information

Request information about the public and private entities with which 1pra1 shared your data with and about the consequences of not providing consent.

The 1pra1 responds to LGPD rights requests within up to 15 business days of receipt. For complex requests or those requiring additional identity verification, the deadline may be extended with prior notice to the data subject. If you feel your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD).

9 Minors

The 1pra1 is an entertainment platform intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors under 18. If we identify that an account has been created by a minor, we will close the account immediately and take the necessary steps to delete any data collected.

If you are the guardian of a minor and believe they have created an account on 1pra1, please contact us immediately at suporte@1pra1.best so we can take appropriate action with the utmost urgency. Protecting children and minors is a responsibility that 1pra1 takes with absolute seriousness.

Notice to Parents and Guardians: Keep your login credentials for 1pra1 securely and out of reach of minors. Use the parental controls available on household devices to block access to betting platforms. 1pra1 is not responsible for minors accessing the platform on devices without active parental controls.

10 Changes to This Privacy Policy

The 1pra1 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or the services offered by the platform. When material changes are made, you will be notified by email at least 15 days before the new version takes effect.

For minor changes that do not materially affect your rights or how your data is handled, 1pra1 may update this document without prior notice, always keeping the last updated date visible at the top of this page.

Continued use of the platform after a new version of this Privacy Policy takes effect constitutes tacit acceptance of the changes. If you do not agree with the changes, you must close your account before the effective date stated in the notice.

Current Version

This is the version of the Privacy Policy of the 1pra1 effective as of January 2026. Previous versions may be requested from the DPO for historical reference by emailing suporte@1pra1.best with the subject line "Previous Version – Privacy Policy".

11 Contact, DPO & Complaints Channel

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concern related to the processing of your personal data by 1pra1, please reach out through the following channels:

  • DPO (Data Protection Officer) Email: suporte@1pra1.best — please include "Data Protection – LGPD" or "LGPD Rights" in the subject line for prioritized handling.
  • Live chat: Available 24 hours through the website of 1pra1 for urgent matters related to account privacy and security.
  • Account dashboard: Privacy settings, communication preferences, and data deletion requests can be initiated directly from the dashboard without needing to contact support.

If after contacting 1pra1 you feel your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil. The ANPD's contact information is available on the official federal government portal.

The 1pra1 is committed to handling all requests and complaints seriously, transparently, and within the timeframes established by the LGPD. Privacy is not an afterthought in our operation — it is a core value that guides every decision we make about how your data is handled.

Privacy FAQs at 1pra1

Common questions about how we handle your data

No. The 1pra1 does not sell, rent, or share users' personal data with third parties for commercial purposes. Your data is shared only with operational partners strictly necessary for the platform to function — such as payment processors to handle your Pix transactions and game providers for casino sessions. All such partners are contractually bound to handle your data with the same level of protection that 1pra1 applies.

You can request the deletion of your personal data by sending an email to suporte@1pra1.best with the subject line "Data Deletion – LGPD", including your CPF and full name for identity verification. The 1pra1 responds within up to 15 business days. Important: financial and identification data required to meet legal obligations (such as anti-money laundering compliance) must be retained for a minimum of 5 years after account closure, even following a deletion request — as required under Law No. 9.613/1998.

The 1pra1 does not store full credit or debit card numbers. Card transactions are processed by certified partner acquirers holding PCI DSS certification — the international security standard for card data. The Pix key linked to your account is stored in encrypted form exclusively for withdrawal processing. Your transaction history (amounts, dates, methods) is retained for support, audit, and legal compliance purposes, but does not include complete sensitive data from your payment instruments.

The 1pra1 may be legally required to share data with Brazilian government authorities — such as the Federal Revenue Service, Federal Police, or Public Prosecutor's Office — when there is a court order, valid administrative request, or applicable regulatory obligation. In such cases, sharing is strictly limited to the minimum necessary to fulfill the specific request. The 1pra1 does not grant broad or indiscriminate access to user data without legal basis. Where legally permitted, we notify the affected user about the request.

You can manage your cookie preferences through your browser settings. Non-essential cookies (analytics, personalization) can be disabled without compromising the security of your data. However, disabling essential cookies — which manage login sessions and security — may prevent the platform from functioning correctly on 1pra1, including the ability to log in, place bets, and access the account dashboard. When you first visit the platform, you will see a cookie notice where you can configure your preferences in detail.

After account closure, 1pra1 retains identification data and financial transaction records for a minimum of 5 years to comply with legal obligations related to anti-money laundering and tax requirements. Platform usage data, game history, and browsing preferences are deleted or anonymized within 90 days of account closure. Support communications are retained for up to 2 years for audit purposes. Once mandatory retention periods have expired, all remaining data is securely and permanently deleted.

Your Privacy Protected at 1pra1

Now that you know how we handle your data, create your free account and enjoy Sports Betting, live casino, and crash games on a platform built for Brazil — with Pix, support in Portuguese, and respect for your privacy at every step.

Committed to your privacy

The 1pra1 operates in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018). The entire platform uses 256-bit SSL encryption. Your personal data is never sold to third parties. To exercise your rights as a data subject, contact us at suporte@1pra1.best with the subject line "LGPD Rights". This service is intended exclusively for users aged 18 and over residing in Brazil. See also the Terms and Conditions and the Responsible Gambling.

Português