On 3 May 2024, the Ministry of Finance, through the Secretariat of Prizes and Betting (SPA), published Ordinance SPA/MF No. 722, defining new technical and security requirements for betting systems and platforms used by fixed-odds betting operators in Brazil.
Conformity and certification
Betting operators must ensure their systems and platforms comply with standards established by the SPA, through certification by recognised entities. This certification must be renewed annually and also whenever critical system components are modified.
Data localisation and security
Betting systems and their data must be hosted in data centres in Brazil or in countries with an International Legal Cooperation Agreement with Brazil. These centres must hold ISO 27001 security certification to protect platform-controlled information. If operators store personal data abroad, express consent from data subjects is required, in accordance with the General Data Protection Law (LGPD).
Supervision and oversight
The SPA is responsible for supervising and overseeing betting systems, and platforms must ensure access to the information required for this purpose. Operators must provide operational data as required by specific regulation, ensuring transparency and regulatory compliance.
Online game rules
For online games, the ordinance requires the definition of multiplication factors on wagered amounts and the use of random generators to determine results: ensuring game integrity and predictability.
Physical terminal rules
Rules for betting at physical terminals are also established, covering bettor identification procedures and payment transaction rules: aimed at ensuring operational security and integrity while protecting bettor interests.
Significance
This regulation represents a significant advance in the structuring and security of betting and online games in Brazil, establishing rigorous standards for the operation and oversight of the sector. Operators must treat technical certification as a continuous compliance function, not a one-time administrative step.
Sources
- Portaria SPA/MF nº 722, de 2 de maio de 2024 (DOU) (2024-05-03)