Back to documentation

Privacy Policy

BR Tokens Privacy Policy: what personal data we collect, what we use it for, how long we keep it and how to exercise your rights under Brazil’s LGPD.

Last updated: July 2026

1.0.0 Who we are

BR Tokens ("we", "our", or "platform") is a web software platform for competitive gaming communities, operated on the domain brtokens.net, with Discord integration and tools for player identity verification, statistics, profile, and moderation.

This Privacy Policy describes how we process personal data when you use our website, player profile, authentication integrations, and related services.

Data controller: BR Tokens
Controller contact: [email protected]

2.0.0 Scope

This policy applies to:

  • The brtokens.net website and subpages (including profile, documentation, and authorized administrative panel);
  • Authentication via Discord and Epic Games;
  • Player verification, statistics, balance, and features linked to BR Tokens's official Discord server.

This policy does not cover third-party websites or services (Discord, Epic Games, payment providers). Each has its own policy.

3.0.0 Data we collect

We may collect and process the categories below, according to platform use:

3.1.0 Authentication data (Discord)

When you sign in with Discord, we may receive:

  • Discord account identifier (discordId);
  • Username and display name;
  • Email address (when authorized by Discord);
  • Avatar;
  • OAuth access tokens (stored encrypted on the server to maintain your session).

3.2.0 Authentication data (Epic Games)

When you link your Epic Games account, we may receive:

  • Epic account identifier (Epic Account ID);
  • Display name associated with the account;
  • OAuth tokens (stored encrypted), for synchronization and validation of the link.

Primary purpose: verify player identity, prevent ban evasion, and securely associate the Epic account with Discord.

3.3.0 Game verification data

  • Nicknames provided or obtained via authorized integrations;
  • History of previous nicknames (when applicable);
  • Verified games, verification date, and method used (manual or Epic);
  • Links between Discord account and external game identifiers.

3.4.0 Platform usage data

  • Match statistics (wins, losses, streaks, ranking);
  • Match history and amounts involved in mediated matches;
  • Balance, financial movements, and deposit/withdrawal records (when applicable);
  • Profile preferences and clan data, when you use those features.

3.5.0 Technical and security data

  • IP address (on login and in sensitive operations);
  • Session records, administrative audit logs, and security events;
  • Device/browser information via technical session cookies.

4.0.0 How we use your data

We use personal data to:

  • Authenticate you on the site and keep your session secure;
  • Operate the platform: profile, statistics, history, and balance;
  • Verify players and assign roles on Discord;
  • Prevent fraud, penalty evasion, duplicate accounts, and abuse;
  • Mediate disputes, warnings, and administrative processes;
  • Process deposits and withdrawals, when you use those features;
  • Comply with legal obligations and respond to authority requests, when required by law;
  • Improve security, stability, and operation of the services.

We process data based on the hypotheses of Law No. 13.709/2018 (LGPD), including:

  • Performance of a contract or preliminary procedures (use of the platform and services requested by you);
  • Legitimate interest (security, fraud prevention, integrity of matches and the community);
  • Consent (when applicable, for example when authorizing Discord/Epic login or optional features);
  • Compliance with a legal or regulatory obligation, when necessary.

6.0.0 Sharing with third parties

We do not sell your personal data. We may share limited information with:

Third partyReason
DiscordOAuth authentication and role management on the server
Epic GamesOAuth authentication and account verification
Payment providersDeposit processing (e.g., Mercado Pago), when you use that feature
Hosting and infrastructureDatabase storage and service execution

We only share what is necessary for the stated purpose. External providers have their own privacy policies.

7.0.0 Data retention

We retain data for as long as necessary to:

  • Provide the services and comply with this policy;
  • Resolve disputes, enforce rules, and prevent fraud;
  • Meet legal, tax, or audit obligations.

Records of warnings, bans, Epic links, and verification history may be kept for an extended period when necessary for community protection and prevention of recurrence, especially in cases of fraud or penalty evasion.

When there is no longer a legitimate need, data will be deleted or anonymized, unless otherwise required by law.

8.0.0 Security

We adopt technical and organizational measures to protect data, including:

  • Encryption of sensitive tokens (Discord and Epic OAuth);
  • Secure session authentication on the site;
  • Administrative access control (RBAC);
  • Audit records for sensitive actions.

No system is 100% secure. We recommend that you protect your Discord and Epic accounts with a strong password and additional authentication when available.

9.0.0 Cookies and similar technologies

We use cookies and session storage that are strictly necessary to:

  • Keep you authenticated on the site;
  • Protect OAuth flows (Discord and Epic);
  • Ensure basic platform operation.

We do not use third-party behavioral advertising cookies under this policy. You may manage cookies in your browser, but disabling them may prevent login.

10.0.0 Your rights (LGPD)

You may request, under the LGPD:

  • Confirmation of the existence of processing;
  • Access to data;
  • Correction of incomplete or outdated data;
  • Anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance;
  • Portability, when applicable;
  • Information about sharing;
  • Withdrawal of consent, when processing is based on it.

To exercise your rights, send an email to [email protected] with the subject "Privacy / LGPD" and identify your Discord account (ID or username).

We will respond within a reasonable time, in accordance with applicable law.

11.0.0 Children and adolescents

The platform is not intended for persons under 16 years of age without adequate supervision. If we identify improper processing of a minor's data, we may delete the account and associated data.

12.0.0 International transfer

Some providers (Discord, Epic Games, hosting) may process data outside Brazil. In such cases, we adopt measures compatible with the LGPD and applicable contracts with suppliers.

13.0.0 Changes to this policy

We may update this Privacy Policy periodically. The "Last updated" date at the top will be revised. Relevant changes may be communicated on the site or on Discord.

Continued use of the platform after publication of changes constitutes awareness of the new conditions, except when the law requires specific consent.

14.0.0 Contact

For privacy questions, LGPD requests, or matters related to this policy:

Email: [email protected]

For operational support (disputes, reports, and day-to-day assistance), also use BR Tokens's official Discord server.


Related documents: