🔒 hh22 — your data protected with 256-bit SSL and LGPD compliance 🇧🇷 Platform built for Brazilian players  |  24/7 support in Portuguese 💸 Instant Pix  |  Boleto  |  Card  |  Everything in BRL ⚽ Brasileirão, Copa do Brasil, UFC, E-sports  |  hh22 🛡️ Full compliance with the LGPD — Law No. 13,709/2018 📱 Your data is never sold  |  Full Transparency 🔒 hh22 — your data protected with 256-bit SSL and LGPD compliance 🇧🇷 Platform built for Brazilian players  |  24/7 support in Portuguese 💸 Instant Pix  |  Boleto  |  Card  |  Everything in BRL ⚽ Brasileirão, Copa do Brasil, UFC, E-sports  |  hh22 🛡️ Full compliance with the LGPD — Law No. 13,709/2018 📱 Your data is never sold  |  Full Transparency

Privacy Policy hh22 — your data, your rules

This policy explains how hh22 collects, uses, stores, and protects your personal data. We've written everything in plain language — no complicated legal jargon — because we believe you have the right to understand exactly what happens with your information.

Last updated: January 2026
LGPD Compliance
🛡️
Data Collected & Purpose
Use and sharing
Cookies & Tracking
Security & Storage
Your Rights (LGPD)
Contact & DPO
SSL 256
End-to-end encryption
LGPD
Full compliance
0
Data sold to third parties
24/7
Support for data-related queries

Six principles that guide privacy at hh22

Every data decision at hh22 is made with the Brazilian user's best interests in mind — not the platform's commercial interests.

🎯
Minimal collection with a clear purpose

Hh22 collects only the data strictly necessary to operate the platform and meet legal obligations. We don't ask for information we don't need — every piece of data collected has a clear, specific purpose, explained in this policy.

🔒
Encryption across the board

All data transmitted between your device and hh22 servers is protected with 256-bit SSL encryption — the same standard used by digital banks like Nubank and Itaú. Your financial and personal data never travels in plain text.

🚫
Your data is not a product

Hh22 does not sell, rent, or transfer your personal data to third parties for marketing or advertising purposes. Your data is used solely to operate your account, process transactions, and meet regulatory obligations. Full stop.

⚖️
Full LGPD Compliance

The General Data Protection Law (Law No. 13,709/2018) is the central reference for all data processing practices at hh22. We have a dedicated data protection officer (DPO) and internal periodic review processes to ensure ongoing compliance.

✋
You control your data

The LGPD guarantees that you can access, correct, port, or request the deletion of your data at any time. hh22 makes this process straightforward with direct support channels — no red tape and no unnecessarily long response times.

📋
Transparency with no fine print

This policy was written to be read — not to confuse. If anything is unclear, reach out to our support team and we will walk you through it. hh22 hides nothing in footnotes or deliberately convoluted paragraphs.

1Who we are — the Controller of your data

The hh22, available at hh22.best, is the controller of the personal data collected and processed under this Privacy Policy. As the controller, we are responsible for defining the purposes and means of processing your data, in accordance with the LGPD — General Data Protection Law (Law No. 13,709/2018).

To contact our privacy team or exercise your rights as a data subject, reach us at privacidade@hh22.best or the support channel available 24 hours a day on the hh22 website and app.

This Privacy Policy applies to all services offered by hh22, including Sports Betting (football, MMA and UFC, e-sports, and more), live casino, slots and crash games, as well as all customer support and communication channels on the platform.

2Data we collect

Hh22 collects different categories of data depending on how you interact with the platform:

Registration and identity data:

  • Full name;
  • CPF (Cadastro de Pessoa Física);
  • Date of birth;
  • Full residential address;
  • Email address;
  • Mobile phone number;
  • Government-issued ID (RG, CNH) when requested for KYC verification.

Financial and transactional data:

  • Registered Pix key;
  • Deposit and withdrawal history (amounts, dates, methods — Pix, bank slip, credit/debit card, PicPay, Mercado Pago);
  • History of bets and games played on the platform.

Usage and behavioral data:

  • IP address and approximate location data;
  • Device type, operating system, and browser used;
  • Pages visited, session duration, and browsing patterns on hh22;
  • Betting preferences and favorite games.

Communication data:

  • History of messages exchanged with hh22 support (chat, email, WhatsApp);
  • Communication and marketing preferences (opt-in/opt-out).

3How We Use Your Data

Hh22 uses your personal data exclusively for the following purposes:

  • Account creation and management: identity verification, fraud prevention, and compliance with eligibility rules (18 years or older, resident in Brazil with a valid CPF);
  • Transaction processing: deposits via Pix, boleto bancário, card, and digital wallets; withdrawal processing via Pix to the registered key; balance management and financial history;
  • Provision of betting and casino services: processing of Sports Betting, live casino games, slots, and crash games; bet settlement and prize crediting;
  • Account communications: notifications for deposits, withdrawals, bet results, security updates, and alerts about unusual account activity;
  • Marketing communications: sending information about hh22 promotions, bonuses, and updates — only if you have given consent to receive this type of communication, with the option to unsubscribe at any time;
  • Platform improvement: usage pattern analysis to identify errors, improve the user experience, and develop new features;
  • Compliance with legal obligations: anti-money laundering compliance (Law No. 9,613/1998), responding to requests from competent authorities, and meeting the regulatory requirements applicable to the sports betting sector in Brazil.

4Legal Basis for Data Processing

The LGPD requires that all personal data processing have a legal basis. At hh22, the legal bases used are:

  • Contract performance (Art. 7, V): processing is necessary to provide the services you contracted when you create an account and use the platform — without this data, it is not possible to process deposits, bets, or withdrawals;
  • Legal obligation compliance (Art. 7, II): certain categories of data are processed to meet legal and regulatory requirements, such as user identification (KYC), anti-money laundering measures, and tax compliance;
  • Legitimate interest (Art. 7, IX): used for purposes such as fraud prevention, account security, and platform improvement — always respecting your rights and reasonable expectations;
  • Consent (Art. 7, I): used for sending marketing communications and for non-essential cookies — you may withdraw this consent at any time.

hh22's commitment: your financial data — including your Pix key, card details, and transaction history — is stored with AES-256 encryption on restricted-access servers. No complete payment data (such as a card number) is stored on our servers — we use tokenization through PCI-DSS certified payment processors.

5Data Sharing

Hh22 does not sell your personal data to third parties under any circumstances. Data sharing occurs only in the situations described below, in a controlled manner and with contractual confidentiality guarantees:

  • Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners process only the data necessary for the transaction and are required to maintain confidentiality and comply with the LGPD;
  • Casino and game providers: to enable the operation of live casino, slots, and crash games, minimal session data may be shared with software providers. These providers do not have access to your name, CPF, or full financial details;
  • Identity verification services (KYC): to verify your identity and confirm the authenticity of submitted documents, we may use specialized verification services that operate in compliance with the LGPD and anti-fraud regulations;
  • Government and regulatory authorities: when required by law, court order, or a legitimate request from a competent Brazilian authority — such as the Central Bank, the Federal Revenue Service, or anti-money laundering agencies;
  • IT infrastructure providers: cloud, security, and monitoring service providers that support the technical operation of the platform, always under confidentiality agreements and data processing arrangements in compliance with the LGPD.

In all cases of data sharing, hh22 verifies that recipients offer adequate data protection guarantees and limits sharing to the minimum necessary for the specific purpose.

6Cookies and tracking technologies

Hh22 uses cookies and similar technologies to enhance your experience on the platform. The types of cookies used are:

  • Essential cookies: required for basic platform functionality — such as keeping your session active after login, remembering language preferences, and securing your transactions. These cookies cannot be disabled without affecting your use of the platform;
  • Analytical cookies: used to understand how users navigate hh22, identify pages with technical issues, and measure feature performance. The data collected is aggregated and anonymized — it does not identify you individually;
  • Preference cookies: store your usage preferences — such as favorite sports, betting settings, and notification preferences — so you don't have to reconfigure them every time you access the platform;
  • Marketing cookies (with consent): used only if you have given consent, to personalize communications and promotions relevant to your usage profile. You can withdraw that consent at any time in your account settings.

You can manage your cookie preferences via the banner shown on your first visit or in your account settings. Declining non-essential cookies does not affect access to the core features of the hh22 platform.

7Data storage and security

Hh22 applies technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: all communication between your device and hh22 servers is protected with TLS 1.3 / 256-bit SSL;
  • Encryption at rest: sensitive data stored on servers is encrypted using AES-256;
  • Access control: only staff members with a verified need have access to your personal data, with auditable access logs maintained at all times;
  • Security monitoring: intrusion detection systems and continuous monitoring for suspicious activity operate 24 hours a day;
  • Periodic security testing: the platform undergoes penetration testing and security audits conducted by independent specialized firms;
  • Incident response plan: in the event of a data breach that may affect your rights, hh22 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected users within the timeframes established by the LGPD.

Hh22 servers are located in ISO 27001-certified data centers with geographic redundancy to ensure service continuity and data integrity.

8Data retention

Hh22 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations:

  • Active account data: kept for as long as your account is active on the platform;
  • Financial and transactional data: retained for 5 years after account closure, in accordance with anti-money laundering regulations (Law No. 9,613/1998) and tax obligations;
  • Identity verification documents (KYC): retained for 5 years after account closure, in accordance with applicable regulations;
  • Betting and game history: retained for 5 years for audit purposes and compliance with regulatory obligations;
  • Support communication data: retained for 2 years after the support interaction is closed, for service improvement and dispute resolution purposes;
  • Analytical cookie data: retained for a maximum of 13 months, in line with industry best practices.

Once the retention period expires, your data is securely deleted or anonymized so that you can no longer be individually identified.

9Your rights as a data subject (LGPD)

The LGPD grants you the following rights regarding your personal data processed by hh22:

  • Right of access (Art. 18, II): obtain confirmation that your data is being processed and access a copy of the data hh22 holds about you;
  • Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion (Art. 18, IV): request that unnecessary or excessive data be anonymized, blocked, or deleted;
  • Portability (Art. 18, V): receive your data in a structured, interoperable format so you can transfer it to another service provider;
  • Deletion (Art. 18, VI): request the deletion of data processed on the basis of consent, except where retention is required by law;
  • Sharing disclosure (Art. 18, VII): obtain information about which entities hh22 shares your data with;
  • Withdrawal of consent (Art. 18, IX): withdraw consent for processing activities based on that legal basis — such as receiving marketing communications;
  • Right to object (Art. 18, §2): object to processing carried out on legal bases other than consent, in cases where the LGPD has not been complied with.

To exercise any of these rights, contact hh22 by email at privacidade@hh22.best or via the support chat. We handle requests within 15 business days as established by the LGPD, and may be extended in more complex cases with prior notice to the data subject.

10Data relating to minors

Hh22 is a betting and gaming platform intended exclusively to individuals aged 18 or older. We do not intentionally collect personal data from minors.

Registration requires a valid CPF and goes through age verification. If we become aware that data from a minor was collected — whether through false information provided at registration or by any other means — the account will be immediately closed, the data will be deleted, and any deposited funds will be refunded upon proof of legal guardianship.

If you are the legal guardian of a minor and suspect they have created an account on hh22, please contact us immediately at privacidade@hh22.best so we can take the necessary steps as a priority.

11Links to Third-Party Services

The hh22 platform may display links or integrations with third-party services — such as payment processors (Pix via Banco Central, Mercado Pago, PicPay) or casino game providers. This Privacy Policy applies exclusively to hh22 and does not cover the privacy practices of those third parties.

By using the payment processing or game services integrated into the hh22 platform, you are also subject to the privacy policies of the respective providers. hh22 selects partners that demonstrate a commitment to data protection, but cannot be held responsible for data processing carried out by external entities within their own systems.

We recommend reading the privacy policies of any services you use outside the hh22 environment, especially when interacting directly with your bank or digital wallet to make deposits and withdrawals.

12Updates to This Privacy Policy

Hh22 may update this Privacy Policy periodically to reflect changes in our data processing practices, new platform features, or legal obligations. When that happens:

  • The "Last updated" date at the top of this page will be changed;
  • Active users will be notified by email and/or in-app notification at least 7 days in advance, except for changes required immediately by law;
  • Significant changes that affect how your data is used or your rights as a data subject will be clearly highlighted in the notification sent to you;
  • Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

You can request the version history of this policy by emailing privacidade@hh22.best. We recommend reviewing this page periodically to stay informed about how hh22 protects your data.

13Contact, DPO & Complaints

Hh22 has appointed a Data Protection Officer (DPO) responsible for overseeing privacy practices and serving as the communication channel between data subjects and the National Data Protection Authority (ANPD).

To contact the DPO or exercise your rights as a data subject:

  • Privacy email: privacidade@hh22.best;
  • General support: suporte@hh22.best;
  • Live chat: available 24 hours a day, 7 days a week, on the hh22 website and app.

If you believe hh22 has not adequately responded to a request related to your data, or that your information is being handled in violation of the LGPD, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), through channels made available by the Brazilian federal government.

Hh22 is committed to handling all requests and complaints diligently, transparently, and within the timeframes established by applicable law.

What you can request from hh22 regarding your data

These rights are guaranteed by law and hh22 honors them with a response time of up to 15 business days.

👁️
Access to your data

Request a copy of all personal data hh22 holds about you — account details, financial history, bets placed, and platform usage data.

✏️
Data correction

If any of your registered details are incorrect or outdated — address, email, phone number — you can request a correction at any time through hh22 support.

🗑️
Data Deletion

For data processed on the basis of consent, you may request deletion. Data retained due to legal obligation (such as financial history for 5 years) cannot be deleted before the legal retention period expires.

📦
Portability

Receive your data in a structured format (CSV or JSON) to transfer it to another service. hh22 will deliver the file within 15 business days of a confirmed request.

🔕
Withdrawal of consent

Unsubscribe from marketing communications or withdraw consent for non-essential cookies at any time in your account settings — no need to contact support.

📋
Sharing information

Find out exactly which partners and service providers hh22 shares your data with, why, and what safeguards are in place. Full transparency, no exceptions.

To exercise any of these rights, send an email to privacidade@hh22.best or use the support chat available 24/7 on the website and app.

How hh22 actually handles your data day to day

Privacy policies are usually the kind of document nobody reads. Most betting platforms count on that — they use long, jargon-heavy texts precisely so people sign without understanding. At hh22, the approach is different. This section explains, in plain terms, what happens to your data in the most common day-to-day situations on the platform.

When you register on hh22

During registration, hh22 asks for your full name, CPF, date of birth, email address, and phone number. The CPF is required for two main reasons: to verify that you are 18 or older and to ensure only one account exists per person. Without this information, it is not possible to operate a betting platform responsibly and in compliance with Brazilian regulations.

Your CPF is not shared with third parties for marketing purposes and is not used to run credit bureau checks. It is stored in encrypted form on hh22's servers and accessed only by the internal systems required for identity verification and fraud prevention.

When you make a deposit via Pix

When you deposit via Pix on hh22, the transaction is processed through the Banco Central do Brasil infrastructure. hh22 receives payment confirmation with the minimum data required to identify the transaction — amount, date, time, and originating Pix key. This data is kept in your account history for 5 years, as required by anti-money laundering legislation.

Hh22 does not store full credit or debit card details on its own servers. When you use a card to deposit, the payment data passes through a PCI-DSS certified processor (the international security standard for card data), which generates a transaction token. hh22 stores only that token — never the 16-digit card number, the CVV, or the expiration date.

When you place a bet on a Brasileirão match or a UFC event

Every bet you place on hh22 is recorded in your account history — the event, market, stake, odds, and outcome. This data is used to calculate your balance, process winnings, calculate bonus rollovers, and generate your account statement. It is also used in aggregated, anonymized form for internal platform performance analysis and risk balancing.

Hh22 does not share your betting history with any third parties — not with football leagues, sports federations, the UFC, or any other sports organization. That history belongs to you and is available at any time in your account statement.

When you contact hh22 support

Support conversations — whether via chat, email, or WhatsApp — are kept on record for 2 years. This record exists to ensure that reported issues have documented history, to facilitate follow-up on ongoing requests, and to support customer service team training. These conversations are not shared with third parties and are not used for marketing analysis.

About emails and notifications sent by hh22

Hh22 sends two types of communications: transactional — deposit and withdrawal confirmations, bet results, security alerts — and marketing — promotions, bonuses, and platform updates. Transactional communications are required for your account to function and cannot be disabled. Marketing communications are based on your consent and can be cancelled at any time with a single click in any email you receive.

What happens to your data when you close your account

When you request account closure on hh22, access to the platform is blocked immediately. Registration data and financial history are retained for the mandatory legal periods — 5 years for financial and identity data. Once those periods have elapsed, your data is permanently and securely deleted from hh22's servers. If you would like written confirmation of deletion after the legal retention period, simply request it by email.

A word on real security

Security is not just a matter of technology — it's also about behavior. hh22 will never ask for your password by email, WhatsApp, phone, or any other channel. If you receive a message claiming to be from hh22 and asking for your login credentials, it is a phishing attempt. Delete the message and notify our support team immediately so we can warn other users.

We recommend using a unique password for hh22 — different from your email, bank, and other platforms — and enabling two-factor authentication when available. These two simple steps drastically reduce the risk of unauthorized access to your account, regardless of any technical measures hh22 implements on the server side.

Questions about this policy or your data?

Contact the hh22 data protection officer by email at privacidade@hh22.best. We respond within 15 business days as required by the LGPD. For general account questions, use the support chat, available 24/7. You can also review our Terms and Conditions and the Responsible Gaming.

Privacy and data questions at hh22

The most common questions about how hh22 handles your personal data.

No. hh22 does not sell, rent, or share your personal data with third parties for commercial or marketing purposes. Your data is used exclusively to operate your account, process transactions, and meet legal obligations. Sharing with third parties — such as payment processors — occurs only to the extent necessary for those services to function, always under contractual guarantees of confidentiality and LGPD compliance.

You can request deletion of your data by emailing privacidade@hh22.best with the subject line "Data Deletion Request — LGPD". hh22 will respond within 15 business days. Please note that financial and identity data must be retained for 5 years due to legal obligations (anti-money laundering regulations and tax requirements) — this data cannot be deleted before the legal retention period expires, even upon request. All other data is securely deleted once the request is confirmed.

hh22 may use your betting preferences — such as the sports and markets you bet on most — to personalize the marketing communications we send, like boosted odds promotions for the Brasileirão or UFC event bonuses. This only happens if you have given consent to receive marketing communications. You can withdraw that consent at any time in your account settings or by clicking "unsubscribe" in any email received from hh22.

No. hh22 does not store complete credit or debit card details on its own servers. When you use a card to deposit, the transaction is processed by a PCI-DSS certified payment processor. That processor generates a token to identify the transaction — hh22 stores only that token, never the 16-digit card number, CVV, or expiry date. This is the same security standard used by online retailers and food delivery apps across Brazil.

In the event of a security incident resulting in a data breach that poses potential risk to data subjects, hh22 will follow the procedures set out under the LGPD: notifying the Autoridade Nacional de Proteção de Dados (ANPD) within the legally established timeframe and directly informing affected users, explaining which data was compromised, what risks are involved, and what steps are being taken. hh22 maintains continuous monitoring systems and an incident response plan to detect and contain potential threats as quickly as possible.

Your privacy protected, your game worry-free at hh22

Create your account knowing your data is protected. Sign up in 2 minutes and bet with complete confidence.

Português