Brazil: Willer Case Raises Concerns Over Betting Data Protection
Brazil.- 22 October 2026 | www.zonadeazar.com The disclosure of financial information concerning bets placed by lawyer Willer Tomaz has sparked debate in Brazil over personal data protection, anti-money laundering controls and the consequences of prohibiting the regulated betting market.
The case involves a technical report prepared by the Secretariat of Prizes and Betting at the Ministry of Finance (SPA/MF), containing detailed information about the lawyer’s transactions on licensed betting platforms during 2025.
The episode has also raised questions about the handling of confidential information and the authorities’ ability to supervise betting following Provisional Measure 1,394/2026.
R$5 Billion in Betting Activity Under Investigation
According to reports concerning the document, Willer Tomaz reportedly generated approximately R$5 billion in betting turnover during 2025.
The investigation also refers to:
- More than R$200 million in withdrawals.
- Approximately R$350 million in combined deposits and withdrawals.
- 12 withdrawals of R$500,000 within 18 minutes, identified as a potentially suspicious transaction pattern.
- Questions concerning anti-money laundering controls at Blaze, the betting platform involved.
Brazil’s Federal Police are investigating whether the transactions may have been used to conceal the origin of funds.
Tomaz maintains that the money came from legitimate sources. His defence also argues that much of the reported turnover resulted from repeatedly wagering the same funds.
The R$5 billion figure represents accumulated betting activity, not new deposits or confirmed losses. It does not, by itself, establish criminal wrongdoing.
Data Protection and Possible Information Leaks
The publication of individual financial records has raised concerns over access to confidential betting data.
Brazilian legislation allows the SPA/MF to receive information through the Betting Management System (Sigap), including customer identification, deposits, withdrawals and betting activity.
However, it remains unclear how the technical report reached the media.
Brazil’s General Data Protection Law (LGPD) establishes requirements governing personal data processing, although specific exceptions apply to criminal investigations.
Identifying the origin and circumstances of the disclosure will be essential to determining whether any legal obligations were breached.
Consequences of the Regulated Market Ban
The case has also highlighted an important feature of regulatory supervision: the transactions could be identified because they took place on licensed platforms.
Before the prohibition, 85 authorised companies operated 188 betting brands in Brazil.
These operators were required to verify customers’ identities and report transactions to the authorities.
Following Provisional Measure 1,394/2026, licensed operators were prohibited from continuing their activities, creating additional challenges for monitoring betting that takes place through unauthorised websites.
According to official figures cited in the analysis:
- 16,627 illegal betting websites were referred for blocking between 25 September and 9 October.
- Authorities identified 1,027 Telegram groups associated with betting.
- These groups reportedly had approximately 18.5 million members.
Next Steps and Industry Impact
The Willer case raises two interconnected issues: protecting personal information collected by regulators and maintaining effective mechanisms for identifying suspicious financial activity.
Investigators must establish whether financial irregularities or compliance failures occurred, while the circumstances surrounding the disclosure of the technical report remain unresolved.
For Brazil’s iGaming industry, the episode highlights the challenges of balancing privacy, anti-money laundering measures, institutional transparency and enforcement against illegal gambling.
Editó: @fonta
