Privacy policy

Last updated: October 25, 2026. This is a translation of the Portuguese version, which prevails if the two differ.

This policy explains which personal data Midas CS (midascs.com.br) processes, why it processes it and what your rights are, under Brazil's General Data Protection Law (LGPD, Law 13,709/2018).

1. Controller

Kawe, an individual, in Brazil. For any privacy matter, write to kawe13k@gmail.com.

2. Data we process

• Email and account identifier: for logging in with a code and to identify your account.
• Prediction history: the teams and lineups you looked up, the format, the calculated probability and the date. We also store how many predictions you use per day.
• Subscription: the plan, the payment method (Pix, PayPal, or card through Stripe or Mercado Pago), the status, the expiry date and the subscription or payment codes at the processor.
• IP address: used for security, to limit the free prediction and to count visits. The IP is not stored; we only store a cryptographic code derived from it, which cannot be used to recover the address.
• Access dates: when the account was created and the last access.
• Sign-up source: the promotion link or the site you came from (for example, X, Facebook or Google), recorded once, when the account is created. It tells us which promotion channels work.
• Sign-up source: the promotion link or the site you came from (for example, X, Facebook or Google), recorded once, when the account is created.
• Site visits: when you open the site, we count the visit to know how many people come in each day, from which country (provided by Cloudflare) and through which link or site. So the same person isn't counted twice on the same day, we use a code made from the IP and the browser with a key that is drawn every day and deleted the next day. The IP is not stored, we don't use cookies for this, and it is not possible to know who you are or to link visits from different days.
• Referral link: if you create one, we store the chosen name and which accounts were created through it, to calculate the commission (see the Terms of use). You only see how many accounts came through your link, never who they are. To pay the commission, we use the Pix key you give us.
• Pix payments: the payer's name and bank, the amount and the date appear on our bank statement. If you send the receipt through WhatsApp or Telegram, we also receive whatever it contains and your contact on that app. We use this only to confirm the payment and activate the plan.
• PayPal payments: the payer's name and PayPal email, the amount and the date appear in our PayPal account. If you send the receipt through WhatsApp or Telegram, we also receive whatever it contains and your contact on that app. We use this only to confirm the payment and activate the plan.

We do not receive or store card numbers, CVV or bank details. They are handled directly by Stripe, Mercado Pago or PayPal.

3. What we use it for, and on what legal basis

• Providing the service (login, predictions, subscription and quotas): performance of a contract.
• Preventing fraud and abuse (limits, free prediction, refunds and chargebacks) and keeping the site secure: legitimate interest.
• Helping you through support, including by looking up your prediction and payment history: performance of a contract and legitimate interest.
• Referral program (knowing through which link each account was created, and calculating and paying the commissions): performance of a contract.
• Internal statistics on usage and promotion (for example, how many people visit the site and where visits and sign-ups come from), without identifying people: legitimate interest.
• Payment records required by law: compliance with a legal obligation.

We do not sell data, we do not use your data for advertising and we do not build profiles for marketing purposes.

4. Who we share it with

Only with providers needed to run the service, which process the data on our behalf:

• Supabase: authentication and sending the access code.
• Email provider: delivering the access code.
• Stripe and Mercado Pago: processing card payments.
• PayPal: payments from people who pay from outside Brazil.
• WhatsApp and Telegram: when you choose to send your Pix or PayPal receipt through them.
• Cloudflare: network, site delivery and protection against attacks.

Some of these providers may process data outside Brazil, for example in the United States. This follows the safeguards set out in art. 33 of the LGPD. We may also share data when the law or an order from a competent authority requires it.

5. Storage in your browser

The site only stores in your browser your login session, so you don't have to log in on every visit, the language you chose and, until you log in to your account, the source of your visit (see item 2). We do not use advertising cookies or third-party trackers.

6. How long we keep it

• Account and prediction history: as long as the account exists. After you ask for deletion, we delete it within 30 days.
• Subscription and payment records: for the period required by tax and consumer law, even after the account is deleted.
• Security records: for as long as needed to prevent fraud and abuse.
• Visit counts: up to 13 months.

7. Your rights

You can ask, at any time, for:

• confirmation that we process your data, and access to it;
• correction of your data;
• deletion of your account and data;
• portability;
• information about sharing.

To do so, write to kawe13k@gmail.com from your account's email. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

8. Security

We use an encrypted connection (HTTPS), passwordless login with a one-time code, limits against abuse and restricted, logged administrative access. No system is 100% secure. If there is a relevant incident, we will notify the people affected and the ANPD as required by law.

9. Minors

The service is not intended for people under 18.

10. Changes

This policy may be updated. Relevant changes will be announced by email or on the site.