At ka678, your personal data is handled with the same care you'd expect from any serious financial service. This document explains exactly what we collect, how we use it, how we protect it, and what your rights are as a data subject — all in full compliance with Brazil's General Data Protection Law (LGPD).
Six concrete commitments to protecting your personal data
Ka678 operates in full compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018). The entire lifecycle of your data — collection, processing, storage, and deletion — follows LGPD guidelines and ANPD directives.
All communications between your device and ka678's servers are protected with 256-bit SSL encryption — the same standard used by digital banks like Nubank and Itaú. Your data is never transmitted in plain text.
Ka678 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the strictly necessary situations described in this Policy, always with an appropriate legal basis.
Ka678 collects only the data strictly necessary to provide its services, meet legal requirements, and ensure platform security. We do not collect information without a clear, documented purpose.
You can access, correct, export, or request the deletion of your data at any time. These rights are guaranteed under the LGPD and can be exercised directly through ka678 support, without unnecessary red tape.
Your data is retained only for as long as necessary to fulfil its original purpose or to meet legal obligations. Once the applicable period expires, data is deleted or irreversibly anonymized.
A ka678 takes its users' privacy seriously. This Privacy Policy transparently describes how the ka678 platform, available at ka678.best, collects, uses, stores, shares, and protects the personal data of its members and visitors, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018) and other applicable Brazilian regulations.
When you create an account on ka678, make a deposit via Pix, bank slip, credit/debit card, PicPay, Mercado Pago or TED, or simply browse the platform, you acknowledge that certain data will be processed as described here. If you disagree with any part of this Policy, please contact our privacy team before completing your registration.
This Policy applies to all personal data of users residing in Brazil. It should be read together with the Terms & Conditions of ka678, which set the general rules for using the platform.
Ka678 collects only the data needed to operate, keep your account secure, and meet legal obligations. We don't sell your data. You can request access, correction, or deletion at any time. We use encryption across the board. We comply with the LGPD.
A ka678 collects personal data at various points during your interaction with the platform. The categories of data and the situations in which they are collected are listed below.
When you create a ka678 account, we collect:
When required for mandatory verification purposes, we collect:
To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers, we collect:
While you use the platform, we automatically collect:
Ka678 follows the principle of data minimization: we collect only the data strictly necessary for each specific purpose. We do not request information that has no direct use in platform operations or in fulfilling legal obligations.
A ka678 uses collected data exclusively for the following purposes, each supported by an appropriate legal basis under the LGPD:
| Purpose | Data Used | Legal Basis (LGPD) |
|---|---|---|
| Account creation and management | Registration, identity | Contract performance (Art. 7º, V) |
| Payment processing | Financial data, Pix, TED | Contract performance (Art. 7º, V) |
| Fraud & money laundering prevention | KYC, logs, transactions | Legal obligation (Art. 7, II) |
| Customer support | Registration, history | Contract performance (Art. 7º, V) |
| Account communications | Email, mobile number | Contract performance (Art. 7º, V) |
| Marketing communications | Email, mobile number | Consent (Art. 7, I) |
| Responsible gambling & self-exclusion | Betting history, deposits | Legal obligation & legitimate interest |
| Platform improvement | Anonymized usage data | Legitimate Interest (Art. 7, IX) |
Marketing communications from ka678 — such as emails with Brasileirão promotions, special UFC odds, or poker freerolls — are sent only to users who gave their consent at registration. You can withdraw that consent at any time through your account settings or the unsubscribe link in any email.
The LGPD requires that all personal data processing have a specific legal basis. ka678 bases its data processing activities on the following grounds under Article 7 of the LGPD:
A ka678 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is shared only in the situations below, each with an appropriate legal basis:
To process financial transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers, ka678 shares only the strictly necessary data with certified payment processors. These partners are contractually required to use data solely for transaction processing purposes, held to the same security standards ka678 upholds.
The providers of live casino games, slots, crash games, and poker available on ka678 receive only the minimum data required to manage your game session (anonymized user identifier, session balance). No identifiable personal data is shared beyond what is technically necessary to operate the game.
A ka678 may share data with government authorities, regulatory bodies, or the judiciary when required by law, regulation, court order, or directive from a competent authority. In such cases, sharing is limited to the minimum legally required.
In cases of suspected fraud, money laundering, or platform misuse, ka678 may share information with fraud prevention entities and relevant authorities, in accordance with legal obligations and legitimate security interests.
Some of the technology and game providers used by ka678 may process data on servers located outside Brazil. In such cases, ka678 contractually requires that the data receive a level of protection equivalent to that required by the LGPD, in accordance with Article 33 of the law.
A ka678 implements robust technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or improper destruction. Key measures in place include:
In the event of a security incident that may pose significant risk or harm to data subjects, ka678 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, providing details on the nature of the incident, the data involved, and the steps taken to mitigate harm.
A ka678 retains your data only for as long as necessary to fulfill the purposes described in this Policy, unless Brazilian law requires a specific retention period.
Once the applicable retention period expires, data is securely deleted or irreversibly anonymized so that it can no longer be linked to a specific individual.
If you close your ka678 account, your personal data is not deleted immediately. Legal obligations related to fraud prevention and anti-money laundering require that financial records be retained for up to 5 years. After that period, data is deleted as described above.
The LGPD grants you, as the data subject, a robust set of rights that can be exercised at any time with ka678. See each right and how to exercise it below:
To exercise any of these rights, please contact our Data Protection Officer (DPO) by email at privacidade@ka678.best or via the live chat available 24 hours a day on the platform. The ka678 will respond to all requests within the deadlines established by the LGPD.
If you believe your rights have not been properly addressed, you have the right to file a complaint with the National Data Protection Authority (ANPD), as set out in Article 18, § 1 of the LGPD.
The platform ka678 is intended exclusively for individuals aged 18 (eighteen) or older. We do not knowingly collect personal data from minors.
If, during the identity verification process (KYC), it is determined that a user is under 18 years of age, the account will be immediately closed and any collected data will be deleted or anonymized as soon as operationally possible, in compliance with minimum legal record-keeping obligations.
If you suspect that a ka678 account belongs to a minor, please contact us immediately at privacidade@ka678.best so we can investigate and take appropriate action.
A ka678 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze site usage. Below is a description of the cookie categories used:
| Type | Purpose | Required? | Duration |
|---|---|---|---|
| Maintain login session, security, and basic platform functionality | Yes | Session / 30 days | |
| Understanding how users navigate the platform to drive improvements (anonymized data) | No | Up to 2 years | |
| Remember user preferences (language, odds settings, theme) | No | Up to 1 year |
Essential cookies are required for the platform's basic functionality and cannot be disabled without affecting account access. All other cookies can be managed through your browser settings or via the privacy center in your ka678 account.
A ka678 does not use tracking cookies for third-party advertising purposes, nor does it allow ad networks to collect user data through the platform.
Payment processing is one of the most privacy-sensitive areas, and the ka678 takes specific measures to protect your financial information.
When you make a deposit or withdrawal via Pix, ka678 records the Pix key used and the transaction details (amount, date, time, originating bank) for financial control, compliance and support purposes. This data is protected at the same level applied to all personal data on the platform.
The ownership policy of ka678 requires that all deposits and withdrawals be made exclusively through accounts registered under the same CPF as the platform account. This requirement exists to protect you — preventing third parties from moving your balance without authorization.
A ka678 does not store full credit or debit card details on its servers. All processing is handled exclusively by PCI-DSS (Payment Card Industry Data Security Standard) certified processors — the highest level of card transaction security in the world. ka678 receives only a transaction confirmation token, never the full card data.
You can view the complete history of all your financial transactions on ka678 — deposits, withdrawals, bets and bonus movements — directly in the "Statement" section of your account. This history is displayed in BRL (R$) and remains available throughout the period your account is active.
Your banking details, Pix key, card data and financial history are used solely for transaction processing, fraud prevention and regulatory compliance. No financial data is used for marketing segmentation or shared with advertisers.
A ka678 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or improvements in the transparency of information provided to users.
Significant changes will be communicated at least 15 (fifteen) calendar days in advance by email to the address registered on your account. The date of the last update is always displayed at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated version.
If the changes involve new processing purposes that require consent, ka678 will request this consent explicitly before beginning any new processing activity. You will always have the option to withhold consent, with no impact on your access to the platform's core features.
A ka678 has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the National Data Protection Authority (ANPD).
To exercise your rights as a data subject, ask questions about this Policy, or submit a privacy-related complaint, please reach us through the channels below:
The standard response time for privacy-related requests is up to 15 business days, as provided under the LGPD. For more complex requests requiring in-depth review, this period may be extended by an equal amount of time, with notice to the requester.
If you believe your rights as a data subject have been violated by ka678 and have not received a satisfactory response after contacting the platform directly, you have the right to file a complaint with the ANPD, the federal authority responsible for overseeing LGPD compliance in Brazil.
Sign up to ka678 knowing your personal data is handled with care and full transparency. Real privacy — not just a policy on paper. Deposit from R$ 10.00 via Pix and enjoy a welcome bonus of up to R$ 1,500.00.