🔒 mx39 operates in compliance with the LGPD · your data is protected ⚽ Live Brasileirão on mx39 · real-time odds · instant Pix 🛡️ 256-bit SSL on all transactions · bank-grade security standard ⚡ Pix deposit: instant deposits · withdrawals in under 5 minutes 🎰 +500 games available: slots, live casino, crash games, and roulette 🏆 mx39 VIP Program: up to 20% cashback every Monday 💰 Welcome bonus: up to R$ 500.00 on your first deposit · active now 🔒 mx39 operates in compliance with the LGPD · your data is protected ⚽ Live Brasileirão on mx39 · real-time odds · instant Pix 🛡️ 256-bit SSL on all transactions · bank-grade security standard ⚡ Pix deposit: instant deposits · withdrawals in under 5 minutes 🎰 +500 games available: slots, live casino, crash games, and roulette 🏆 mx39 VIP Program: up to 20% cashback every Monday 💰 Welcome bonus: up to R$ 500.00 on your first deposit · active now
LGPD SSL 256-bit Transparency Your Rights

Privacy Policy – mx39: Data Protection and LGPD

Find out how mx39 collects, uses, and protects your personal data. Our policy is straightforward, free of unnecessary legal jargon — because you deserve to know exactly what happens with your information.

Last updated: January 2026
SSL 256-bit
LGPD Compliance
No Data Selling
Data Subject Rights
Response within 15 days
Data Deletion

What This Policy Covers – In Plain Language

Six pillars of our approach to privacy and data protection at mx39

What data we collect
We collect only what is necessary to create and maintain your account, process payments via Pix, and keep the platform secure. Name, CPF, email, date of birth, and browsing data. Nothing beyond what you need to play safely on mx39.
How we use your data
Your data is used exclusively to operate your account, process BRL deposits and withdrawals, provide personalized support, and meet legal obligations in Brazil. We never use your data for purposes not described here or for which you have not given consent.
Who we share with
Your data is never sold to third parties under any circumstances. It is only shared with essential operational partners — payment processors such as Pix and Mercado Pago — and strictly to the extent necessary to deliver the service you contracted.
How we protect your data
256-bit SSL encryption on all communications. Storage on restricted-access servers. Continuous monitoring against unauthorized access attempts. Least-privilege access policy for mx39 internal staff.
Your rights as a data subject
Under the LGPD, you may request access to, correction of, portability of, or deletion of your data at any time. Simply send an email to contato@mx39.best with the subject "LGPD Request". The response deadline is up to 15 business days, as required by Brazilian law.
Cookies and tracking
mx39 uses essential cookies to keep the platform running and analytical cookies to understand how users navigate the site and improve their experience. You can manage your cookie preferences in your browser settings. Third-party cookies for targeted advertising are disabled by default.
256-bit
SSL encryption standard applied
0
Sale of data to third parties
15 days
Maximum LGPD response time
LGPD
Law No. 13,709/2018 fully respected

This Privacy Policy describes how the platform mx39 (mx39.best) collects, uses, stores, and protects your personal data. By creating an account or using any mx39 service, you confirm that you have read and understood this policy. We apply the General Data Protection Law (LGPD – Law No. 13.709/2018) at every stage of processing your information.

1. Who We Are

The mx39 is an online betting and digital casino platform designed exclusively for the Brazilian market. We operate at mx39.best and offer Sports Betting (with a focus on Brazilian football — Brasileirão Série A, Copa do Brasil, Libertadores), e-sports, crash games, Live Casino, roulette, jackpot, and the VIP Program.

For the purposes of this Privacy Policy, mx39 acts as controller of the personal data of users registered on the platform, as defined by the LGPD. This means we are responsible for decisions about how and why your data is processed.

In specific situations — such as payment processing via Pix, PicPay, or Mercado Pago — mx39 acts as the controller regarding data processed by our partner financial institutions, which have their own privacy policies.

2. Data We Collect

2.1 Data provided directly by you

When you register and use mx39, you provide us with the following information:

  • Identification data: full name, CPF, date of birth, email address;
  • Contact details: mobile number (when provided), residential address;
  • Financial data: Pix key linked to your CPF, credit or debit card details (processed in an encrypted environment and not stored after the transaction), bank account information for wire transfers;
  • Identity documents: National ID (RG), driver's license (CNH), or passport provided during KYC verification, when required;
  • Support communications: chat history and emails exchanged with our team.

2.2 Automatically collected data

As you browse the platform, we automatically collect certain technical information:

  • IP address and approximate geographic location;
  • Device type, operating system, and browser version;
  • Pages visited, access times, and session duration;
  • Betting, deposit, withdrawal, and gaming history on the platform;
  • Cookie and similar technology data (detailed in section 8).

Mx39 collects only the data strictly necessary to provide the contracted services and meet applicable legal obligations. Data minimization is a core principle of our operation.

3. How We Use Your Data

Data collected by mx39 is used exclusively for the following purposes:

  • Account creation and management: registration, authentication, identity verification, and account maintenance;
  • Payment processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as withdrawals to the account holder's Pix key;
  • Service delivery: delivery of Sports Betting, casino games, crash games, e-sports, roulette, and jackpot;
  • VIP Program: points calculation, weekly cashback, and growing benefits based on player level;
  • Security and fraud prevention: identifying suspicious activity, preventing money laundering, and protecting other users on the platform;
  • Customer support: answering questions and resolving issues related to your account, withdrawals, or bets;
  • Communications: sending account notifications, transaction confirmations, active promotions, and relevant platform updates (you may unsubscribe at any time);
  • Compliance with legal obligations: responding to requests from Brazilian authorities in accordance with applicable legislation;
  • Platform improvement: analysis of aggregated and anonymized data to improve the user experience.

Mx39 never uses your data to make discriminatory decisions based on racial, ethnic, gender, or any other characteristic protected under Brazilian law. Your betting history is used solely to calculate VIP Program bonuses and personalize suggestions within the platform.

4. Legal Basis for Processing

All personal data processing carried out by mx39 is grounded in one of the legal bases set out in the LGPD. The primary basis used for each purpose is:

Purpose Legal Basis (LGPD)
Account creation and management Contract performance
Payment processing Contract performance
Identity verification (KYC) Compliance with a legal obligation
Anti-money laundering Compliance with a legal obligation
Sending promotional communications Consent
Behavioral analysis for platform improvement Legitimate interest
Security and Fraud Prevention Legitimate interest

When processing is based on your consent, you may withdraw it at any time without affecting any processing already carried out.

5. Data Sharing

Mx39 does not sell your personal data to third parties under any circumstances. Sharing occurs only in the situations below, always with appropriate protection:

5.1 Essential operational partners

To process payments, we share the necessary financial data with the following institutions, each with their own security and LGPD compliance policies:

  • Financial institutions for Pix processing (Nubank, Itaú, Bradesco, Banco do Brasil, and other participants in Brazil's Pix system);
  • Credit and debit card processors (for transactions with Visa, Mastercard, and Elo);
  • PicPay and Mercado Pago for transactions through those platforms;
  • Identity verification providers for the KYC process.

5.2 Technology providers

We use cloud, security, and analytics service providers that may process data on our behalf as processors, always under contract with data protection clauses compliant with the LGPD.

5.3 Legal authorities

Mx39 may be required to share data with Brazilian authorities — such as the Ministry of Finance, the Central Bank, or the Judiciary — when required by law, court order, or regulations applicable to the betting and digital entertainment sector in Brazil.

All data sharing is internally documented. You have the right to request information about who your data has been shared with over the past 12 months by contacting us at contato@mx39.best.

6. Data Security and Protection

Mx39 applies strict technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • 256-bit SSL Encryption across all communications between your device and the platform;
  • Encrypted storage of sensitive data on restricted-access servers;
  • Multi-factor authentication available to users who want an extra layer of protection;
  • Internal access controls: mx39 staff only access the data needed to perform their specific role;
  • Continuous monitoring of unauthorized access attempts and suspicious activity;
  • Security audits conducted periodically by internal and external teams;
  • Card data not stored: full credit or debit card details are not retained on our servers after the transaction is confirmed.

No security system is completely foolproof. In the event of a security incident that may affect your data, mx39 will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

You also play a role in keeping your account secure by using a strong, unique password, never sharing it with anyone, and immediately notifying mx39 of any suspected unauthorized access at contato@mx39.best.

7. Data Retention

Mx39 retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations:

  • Active account data: retained for as long as the account remains active on the platform;
  • Financial transaction data: retained for a minimum of 5 years after the transaction, as required by Brazilian tax legislation and anti-money laundering regulations;
  • Identity verification data (KYC): retained for a minimum of 5 years after account closure;
  • Betting and gaming history: retained for a minimum of 3 years for audit and dispute resolution purposes;
  • Support communications: retained for 2 years for quality assurance and dispute resolution purposes.

Once the applicable retention period has elapsed, data is securely deleted or anonymized so that the individual can no longer be identified. You may request early deletion of your data, subject to any legal retention obligations described above.

8. Cookies and Tracking Technologies

Mx39 uses cookies and similar technologies to ensure the platform functions correctly and to continuously improve the user experience. The types of cookies used are:

8.1 Essential cookies

Required for the platform's basic operation — session authentication, bet slip, language preferences, and security. They cannot be disabled without affecting your use of the platform. They do not collect data for marketing purposes.

8.2 Analytical cookies

These help us understand how users navigate mx39 — which pages are visited most, how long users spend in each section, and where any difficulties arise. Data is aggregated and anonymized before any analysis. You can disable these cookies in your browser settings.

8.3 Preference cookies

They store your usage preferences — such as theme, language, and betting settings — so you don't have to reconfigure them on every visit. They are automatically cleared when you clear your browsing data.

Mx39 does not use third-party cookies for behavioral advertising or remarketing. Tracking cookies for external partners' commercial purposes are disabled by default and will only be enabled with your explicit consent.

To manage cookies, access your browser settings. Most modern browsers — Chrome, Firefox, Safari, Edge — allow you to control cookies by type and by domain. Disabling essential cookies may prevent access to certain platform features.

9. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (Lei nº 13.709/2018) grants you, as the owner of your personal data, a set of rights that mx39 is fully committed to upholding:

Right What this means in practice
Confirmation and access You may request confirmation that we process your data and obtain a copy of the information we hold about you.
Correction If any of your information is incorrect or out of date, you can request a correction directly in your account or through support.
Anonymization or deletion Data that is unnecessary or processed without a proper legal basis may be anonymized or deleted, subject to legal retention obligations.
Portability You may request your data in a structured, machine-readable format for transfer to another controller.
Withdrawal of consent When processing is based on your consent, you may withdraw it at any time, at no cost.
Objection You may object to processing based on legitimate interest that you consider inappropriate for your situation.
Sharing information You have the right to know which entities your data has been shared with.
Complaint to the ANPD You may file complaints about the handling of your data with the National Data Protection Authority (ANPD).

To exercise any of these rights, send an email to contato@mx39.best with the subject line "LGPD Request", including your full name, registered CPF, and a detailed description of your request. The response deadline is up to 15 business days from receipt of the request, as established by the LGPD.

10. Minors

The mx39 platform is intended exclusively for individuals aged 18 or older. We do not knowingly collect personal data from minors.

If you are the legal guardian of a minor and believe they have created an account or provided data to mx39 without authorization, please contact us immediately at contato@mx39.best. We will take the necessary steps to close the account, delete the data, and, where applicable, return any deposited funds to the legal guardian upon verification.

Mx39 verifies CPF and date of birth at registration to identify and block underage accounts. Any account that circumvents this control using false documents is closed immediately upon detection.

11. International Data Transfers

Mx39 operates with a focus on the Brazilian market and prioritizes storing and processing data on servers located in Brazil or in countries that offer an adequate level of data protection as defined by the LGPD.

In specific situations — such as the use of cloud infrastructure providers — data may be transferred to servers outside Brazil. When this occurs, we ensure that:

  • The destination country offers a level of data protection compatible with the LGPD, as assessed by the ANPD;
  • Specific data protection clauses are included in the agreements with these providers;
  • The technical and organizational security measures are equivalent to those applied in Brazil.

You can request information about specific international transfers of your data by contacting contato@mx39.best with the subject line "LGPD Request – International Transfers".

12. Changes to this Privacy Policy

Mx39 may update this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements, or improvements to our approach to privacy.

When we make significant changes, we will notify you at least 15 days in advance by email (to the address registered on your account) and via an in-platform notification. The date of the last update is always shown at the top of this document.

Changes required by immediate legal obligation may take effect without prior notice, with simultaneous communication to affected users. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

We recommend reviewing this policy periodically. If you disagree with any changes, you may request account closure and deletion of your data before the effective date.

13. Contact and Data Protection Officer (DPO)

For privacy and data protection matters, mx39 has appointed a Data Protection Officer (DPO) as required by the LGPD for organizations that carry out large-scale data processing.

You can reach the DPO and our privacy team through the following channels:

The response time for personal data requests is up to 15 business days from receipt, as established by the LGPD. For urgent account security matters, our 24×7 support team responds in under 3 minutes via chat.

If you believe that mx39's processing of your data does not comply with the LGPD, you may file a complaint directly with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for enforcing the law.

Privacy and Data Questions at mx39

Straight answers to our users' most common questions

No. mx39 does not sell, rent, transfer, or otherwise commercialize your personal data with third parties under any circumstances. Data sharing occurs exclusively with essential operational partners needed to deliver the contracted services — such as financial institutions for Pix processing and identity verification providers for the KYC process — and only to the extent strictly necessary. All such partners operate under contractual agreements that include specific LGPD-compliant data protection clauses.

You can request the deletion of your personal data by emailing contato@mx39.best with the subject line "LGPD Request – Data Deletion", including your full name and registered CPF. The response period is up to 15 business days. Please note that some data must be retained by legal obligation even after account closure — particularly financial transaction records (for a minimum of 5 years, in accordance with tax and anti-money laundering legislation) and KYC identification documents. In such cases, we will inform you which data has been deleted and which must be retained, along with the applicable legal basis.

No. Full credit or debit card details — card number, CVV, and expiry date — are not stored on mx39 servers after a transaction is confirmed. Processing takes place in an SSL 256-bit encrypted environment handled directly by the payment processor, which operates in accordance with PCI-DSS industry standards. What mx39 retains is only the transaction record (amount, date, and the last four digits of the card for identification purposes) for history and dispute resolution. For recurring deposits, card tokenization is managed by the payment processor, not by mx39.

When you close your mx39 account, your profile data is deactivated and you lose access to the platform. Data is not immediately deleted in its entirety due to legal retention obligations: financial transaction records are kept for a minimum of 5 years (tax legislation), KYC identity verification data for a minimum of 5 years (anti-money laundering), and betting history for a minimum of 3 years (audit and dispute resolution). After the applicable retention period, data is securely deleted or anonymized. You may request written confirmation of the data retained and the legal grounds for its retention by emailing contato@mx39.best.

mx39 applies multiple layers of protection to ensure that only you can access your account. Key measures include: 256-bit SSL encryption across all communications, real-time monitoring of suspicious login attempts (multiple failed password attempts trigger an automatic temporary lockout), location verification for access from unfamiliar devices or regions, and the option to enable two-factor authentication (2FA) directly in your account settings. For withdrawals, verification is even stricter — Pix payouts are only released to the key linked to the CPF on your account. We recommend using a strong, unique password for mx39, enabling 2FA, and never sharing your credentials with anyone — mx39 will never ask for your password through any channel.
Our Commitment to Your Privacy at mx39

Our users' privacy is not a box-ticking compliance exercise — it is a core value at mx39. Every data processing decision is evaluated through the lens of necessity, proportionality, and respect for the individual. The LGPD sets the floor; our commitment goes further. For questions, feedback, or requests, contact us at contato@mx39.best.

Also read our Terms and Conditions

Other mx39 Policies and Information

Terms and Conditions

Terms of use, eligibility, bonuses, withdrawals, and platform conduct.

Read
Responsible Gambling

Self-exclusion tools, limits, and support resources for players.

Read
Frequently Asked Questions

Quick answers to questions about your account, withdrawals, bonuses, and games.

View FAQ
Deposits and Withdrawals

Pix, boleto, card, and more. How to deposit and withdraw in under 5 minutes.

Learn more

Play Safely and Privately at mx39

Sign up for free, claim your bonus of up to R$ 500.00, and play knowing your data is protected with 256-bit SSL encryption and fully compliant with the LGPD.

+18 | Play responsibly. Responsible Gambling

Português