LGPD · Privacy · Security · Transparency
Win15 takes your data privacy as seriously as it takes the security of your transactions. Here you'll find exactly what we collect, why we collect it, and how we make sure every piece of your information stays protected.
The key highlights of this Policy — before you dive into the full text
Win15 only collects the data strictly necessary to provide the service, verify your identity, and meet legal obligations. Nothing more.
Win15 never sells or rents users' personal data to third parties for commercial purposes. That has never been our practice and never will be.
All communications are encrypted with 256-bit SSL. Financial data is processed by PCI-DSS certified gateways and is never stored on our servers.
Win15 operates in full compliance with the General Data Protection Law (Law No. 13,709/2018). You have rights and we respect them.
You can access, correct, request portability, or ask for the deletion of your personal data at any time through our support channel.
Win15 has a Data Protection Officer (DPO) available at privacidade@win15.asia for any questions related to your privacy.
This Privacy Policy describes how Win15 collects, uses, stores, and protects its users' personal data, in full compliance with the General Data Protection Law (LGPD — Lei nº 13.709/2018) and other applicable Brazilian legislation. By creating an account and using any Win15 service, you confirm that you have read and understood this Policy. If you have any questions, our Data Protection Officer is available at privacidade@win15.asia.
During registration and use of the platform, Win15 collects the following information that you provide directly:
When you access the platform, we automatically collect technical information required for the service to function and for security purposes:
The collection of financial data is necessary to process deposits and withdrawals via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and TED, and to meet legal anti-money laundering obligations (Law No. 9,613/1998). Card data is processed directly by the PCI-DSS gateway and never passes through Win15's servers.
Win15 uses collected data solely for the following purposes:
| Purpose | Description |
|---|---|
| Service delivery | Create and manage your account, process bets, bonus credits, deposits, and withdrawals via Pix and other payment methods. |
| Identity verification | Confirm that you are 18 or older, that you are the holder of the CPF provided, and that your registration details are accurate. |
| Security and fraud prevention | Detect unauthorized access, fraud attempts, bot activity, and violations of the Terms and Conditions. |
| Legal and regulatory obligations | Comply with Central Bank requirements, anti-money laundering regulations, and other obligations set out under Brazilian law. |
| Account communications | Send transaction notifications, security alerts, bet confirmations, and platform updates. |
| Responsible gambling | Monitor usage patterns to identify potential signs of problem gambling and offer control tools when appropriate. |
| Product improvement | Analyze aggregated and anonymized usage data to improve the platform, games, and user experience. |
| Marketing (with consent) | Send Win15 offers, promotions, and news — only to users who have consented to receive marketing communications. Opt-out available at any time. |
Win15 does not use personal data for any purpose beyond those described above. If we ever need to use your data for a new purpose, you will be notified and may opt out before any new processing takes place.
All collection and processing of personal data by Win15 is grounded in one of the legal bases established by the General Data Protection Law (LGPD — Law No. 13,709/2018). The legal bases used are:
The General Data Protection Law (Lei nº 13.709/2018 — LGPD) is the Brazilian legislation that governs the processing of personal data. It guarantees you — the data subject — a set of rights over your own data and places obligations on companies that handle it. Win15 applies LGPD principles across all processes involving users' personal data.
Win15 shares users' personal data only in the following situations, always limiting the information shared to the minimum necessary for each purpose:
Win15 never sells, rents, transfers, or commercializes users' personal data for third-party advertising purposes. We do not share user lists with external advertisers. We do not pass gaming behavior data to insurers or financial institutions. Any partner that receives data from Win15 is contractually prohibited from using it for any purpose beyond what was specifically agreed.
Win15 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by law:
Once the above retention periods expire, data is anonymized or securely deleted in a way that prevents re-identification of the subject. Win15 conducts periodic database reviews to ensure that no information is being retained beyond the required timeframe.
Win15 implements a robust set of technical measures to protect user data against unauthorized access, loss, alteration, or improper disclosure:
Beyond technical measures, Win15 implements organizational practices to ensure users' data is protected. Internal access to personal data is restricted based on the principle of least privilege — each team member can only access the information needed to perform their role. All staff undergo mandatory data protection training and sign confidentiality agreements. Security incidents are handled through a formal response protocol that includes notifying affected users and the ANPD (National Data Protection Authority) when legally required, within the deadlines set by the LGPD.
Your role matters: Win15 does everything in our power to protect your data, but your account security depends on you too. Use a unique, strong password for Win15, enable 2FA, never share your credentials with anyone, and avoid accessing your account on public computers or unsecured Wi-Fi networks. If you suspect unauthorized access, contact support immediately.
Cookies are small text files stored in your browser when you access Win15. They allow the platform to remember your preferences, keep you logged in between sessions, and function properly. Win15 uses several categories of cookies:
You can manage your cookie preferences through your Win15 account settings or directly in your browser settings. Disabling essential cookies may prevent the platform from working correctly. Marketing cookies can be turned off at any time with no impact on your use of the service. Win15 does not use third-party tracking cookies for behavioral advertising outside the platform.
The LGPD guarantees you, as the data subject, the following rights, which Win15 is fully committed to upholding:
Request a copy of all personal data Win15 holds about you, in a readable and organized format.
Request the correction of incomplete, inaccurate, or outdated data — such as your name, address, or phone number.
Request the deletion of data processed on the basis of consent. Data retained under a legal obligation cannot be deleted before the minimum required period.
Receive your data in a structured, interoperable format for transfer to another service, where technically feasible.
Withdraw consent given for processing based on that legal basis — such as marketing emails — at any time.
Know which third parties your data has been shared with and for what purpose, at any time upon request.
To exercise any of these rights, please contact our DPO at privacidade@win15.asia or via the 24-hour support chat. Win15 commits to responding to all data subject rights requests within 15 business days, as established by the LGPD. Requests involving the deletion of data retained under a legal obligation will receive a response explaining the applicable minimum retention period.
Win15 strictly prohibits access to and use of the platform by anyone under 18. The platform does not intentionally collect personal data from minors. If we identify that an account was created by someone under 18, the account is immediately closed and all collected data is deleted, except for what is needed to document the incident and comply with legal obligations.
If you are the legal guardian of a child or teenager and suspect that a minor may have created a Win15 account using your data or false information, please contact our support team immediately at suporte@win15.asia. We will treat the matter as an absolute priority.
Win15 uses identity verification (KYC) to confirm that all users are 18 or older. Verification is carried out through a combination of automated document analysis and human review, ensuring robust age access controls.
Win15 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Significant changes will be communicated via your registered email and through an in-platform notification at least 7 days before they take effect.
Continued use of the platform after the updated Policy's effective date constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the new version takes effect. The current version of this Policy is always the one published on this page, identified by the last updated date shown at the top of the document. Previous versions may be requested from the DPO by email.
For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you can contact Win15 through the following channels:
As required by the LGPD, Win15 has appointed a Data Protection Officer (DPO) responsible for serving as the communication channel between the platform, its users, and the Autoridade Nacional de Proteção de Dados (ANPD). The DPO can be contacted directly by email at privacidade@win15.asia. The response time for privacy-related requests is up to 15 business days.
If you feel that your rights as a data subject are not being respected by Win15, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian government body responsible for overseeing LGPD compliance. We recommend reaching out to us before contacting the ANPD so we can resolve the matter directly — but this is your right and Win15 fully respects it.
More than words: what you can verify for yourself about how Win15 handles your data privacy
All communication between you and Win15 is encrypted with TLS 1.3 (256-bit SSL). Your data travels with the same level of protection used by Brazil's leading digital banks — Nubank, Inter, C6 Bank, and Itaú all operate on this same standard.
When you deposit via credit/debit card at Win15, that data goes directly to the PCI-DSS gateway — it never passes through our servers. For Pix, only the transaction confirmation is recorded; your bank account details are never stored.
Win15 has been fully compliant with the General Data Protection Law (LGPD) since it came into effect. We have a designated DPO, documented data subject response procedures, and conduct regular privacy impact assessments for new services.
Within Win15, each team member has access only to what is strictly necessary to perform their role. No employee has broad, unrestricted access to the user database — a control that is audited on a regular basis.
Win15 has never sold and will never sell users' personal data to third parties. There is no data monetization model on our platform. Our business is entertainment — not our users' data.
In the event of any security incident that may affect personal data, Win15 follows a formal notification protocol — affected users and the ANPD are notified within the timeframes established by the LGPD, promptly and without any attempt to conceal what occurred.
How Win15 approaches data protection in day-to-day platform operations
Many companies treat a privacy policy as a mandatory legal document that no one will ever read. At Win15, the approach is different: privacy is treated as a product feature, not a bureaucratic requirement. That means when the technology team develops a new feature — whether it's a new deposit method, a game provider integration, or an improvement to the predictions system — privacy impact assessment is built into the development process from the start, not as a last-minute check before launch.
In practice, this comes down to a few concrete choices. Win15 collects only the minimum data necessary for each purpose — a principle known as "data minimization" under the LGPD. If a feature can be delivered without collecting a particular piece of data, it is. If data that was previously collected is no longer needed, it is deleted. Win15's database is not an ever-growing archive of accumulated information; it is a purpose-driven database where every field has a clear justification and a defined retention period.
Another aspect that the Win15 takes transparency seriously — keeping users fully informed about what happens with their data at every step. When you make a deposit via Pix through Nubank or Itaú, Win15 receives only the transaction confirmation — it has no access to your bank balance, your transaction history, or any other information from your bank account. When you use a credit or debit card, the data goes directly to the PCI-DSS gateway without passing through Win15's servers. This level of technical isolation exists for one reason: to minimize the volume of sensitive information that Win15 needs to handle directly.
Identity verification (KYC) is perhaps the point at which Win15 collects users' most sensitive information — identity documents and proof of address. This process is a legal requirement and exists to protect users from having their accounts accessed by third parties. Documents are processed by a partner specialized in digital verification, with dedicated security infrastructure, and are stored encrypted with access restricted to internal verification processes. No user document is accessible to Win15 staff beyond what is strictly necessary to resolve specific support cases.
Finally, it is worth addressing responsible gambling in the context of privacy. Win15 monitors usage patterns to identify potential signs of problem gambling — such as a sudden spike in betting volume, frequent deposit attempts following losses, or platform use at unusual hours. This monitoring is carried out on the basis of the platform's legitimate interest in fostering a healthy entertainment environment, and the data generated is used exclusively for that purpose. No gaming behavior information is shared with insurers, employers, financial institutions, or any third party outside Win15's operational context.
Sign up at Win15 and bet with the confidence of a platform that genuinely respects your privacy. Pix, football, slots, and Live Casino — all with real transparency.
The most common questions about how we handle your personal data
Now that you know how Win15 handles your data, create your account with confidence. Deposit via Pix from R$ 20.00 and enjoy Brasileirão, slots, poker, and live casino with real security.
Prohibited for users under 18. Gamble responsibly. Responsible Gambling