Atendimento 24/7
Resposta imediata a qualquer hora, sem escalar o time nem a fila noturna.
The configurable responsible gaming modules and tools that Cortex makes available and how responsibility is allocated between Cortex and the contracting operator.
1.1. Cortex is a technology provider (B2B SaaS for conversational AI, with the Atena (conversational player support), Apolo (sales/curation and governance), Deméter (analytics/insights) and Nêmesis (compliance, KYC/AML, responsible gaming and risk detection) agents, in a WebChat-only model) for regulated iGaming operators in Latin America, with Brazil as the entry market. This Policy describes the configurable responsible gaming modules and tools that Cortex makes available and how responsibility is allocated between Cortex and the contracting operator.
1.2. Allocation of responsibility (central principle). Under the Cortex business model:
1.3. This allocation is consistent with the Cortex set of documents and does not broaden it:
1.4. In the event of a conflict between this Policy and the Service Agreement (or its Annexes), the Agreement prevails (clause 2.2 of the Agreement; item 1.1 of the Compliance Statement).
This Policy is grounded in the Brazilian regulatory framework for fixed-odds betting. Cortex designs tools that support the operator in complying with these regulations; compliance itself rests with the operator.
| Regulation | Scope | How Cortex provides support |
|---|---|---|
| Lei nº 14.790, de 29/12/2023 (the “Betting Law”) | Regulates the lottery modality of fixed-odds betting (sports and online games); creates the Secretariat of Prizes and Betting (SPA/MF); establishes responsible gaming duties, prevention of gambling disorder (ludopathy), prohibition of persons under 18 and responsible advertising. | The Section 4 modules implement the legal duties in the conversational channel. |
| Portaria SPA/MF nº 1.231, de 31/07/2024 | Governs responsible gaming: self-exclusion mechanisms (temporary/permanent); deposit, bet amount and play time limit tools; alert messages/reality checks; information about support and treatment centers; customer service channel (SAC). | Atena implements self-exclusion, limits, reality checks, referral to support and conversational SAC. |
| Portaria SPA/MF nº 2.579, de 07/11/2025 and Instrução Normativa SPA/MF nº 31, de 07/11/2025 | Enhance bettor protection: specific self-exclusion (one operator) and centralized self-exclusion (all authorized platforms, via the Serpro platform); mandatory prudential self-limits on play time and amount wagered at the time of registration. Adaptation deadlines for operators (verification against the centralized base and technical adjustments for self-limits). | Atena collects/applies self-limits at registration and integrates the specific and centralized self-exclusion flows when the operator makes them available. |
| Lei nº 14.790/2023, Advertising and Promotion Chapter | Advertising directed exclusively at an adult audience; prohibition of targeting children and adolescents; responsible gaming warnings; prohibition of unfounded claims about winnings or of presenting betting as a source of income/investment/financial solution. | Brand/UX writing of the conversational flows and Atena messages observe these prohibitions; final configuration of claims rests with the operator. |
| Statute of the Child and Adolescent (Lei nº 8.069/1990) | Protection of minors; age rating applicable to betting advertising. | Prohibition of interaction with persons under 18 in the flows (Section 5). |
| LGPD (Lei nº 13.709/2018) | Processing of personal data, including responsible gaming data (self-exclusion, limits, risk signals). | Processed by Cortex as Processor, under the DPA (Annex III of the Agreement). See Section 9. |
In the design of its tools, Cortex adopts the following principles, which the operator must reflect in its operation:
The modules below are provided by Cortex and configured by the operator via parameterization (Annex I of the Agreement) and Service Order (SO). Availability, parameters and activation depend on the contracted plan and on the operator's configuration. Cortex does not set amounts, deadlines or triggers on its own; these are regulatory and business decisions of the operator.
Basis: Portaria SPA/MF nº 1.231/2024 (specific self-exclusion; prohibition of communication to a self-excluded bettor); Portaria SPA/MF nº 2.579/2025 and IN SPA/MF nº 31/2025 (centralized self-exclusion Sigap/Serpro; verification at registration/login and prohibition of communication to a self-excluded bettor). The legal characterization of judicial self-exclusion and the definition of “active readmission communication” follow those acts.
Basis: Portaria SPA/MF nº 1.231/2024 (deposit, bet and time limits); Portaria SPA/MF nº 2.579/2025 and IN SPA/MF nº 31/2025 (mandatory prudential self-limits on time and amount at registration).
Basis: Portaria SPA/MF nº 1.231/2024 (temporary voluntary exclusion mechanisms).
Basis: Portaria SPA/MF nº 1.231/2024 (regular alert messages about time/amount).
Basis: Lei nº 14.790/2023 (prevention of gambling disorder); Portaria SPA/MF nº 1.231/2024 (management tools and information about support).
Basis: the operator's duty to monitor and report (Lei nº 14.790/2023; SPA/MF regulations). Consistent with the Agreement, clauses 3.2 and 12.1.
The compliance function implemented by Nêmesis, including observance of self-exclusion (specific, centralized and judicial), the application of limits and the detection of indications of underage users and of risk signals, is subject to the same credit pool mechanism as the other agents (Atena, Apolo, Deméter): once the plan's pool is exhausted without a pack or top-up, Nêmesis is also paused, with no differentiated treatment, in accordance with the credit billing rules of the contracted plan.
This is so because the legal obligation of responsible gaming, anti-money laundering and KYC rests with the operator (Controller), under Lei nº 14.790/2023 (arts. 8º III, 26 and 29) and the applicable AML regulations (Lei nº 9.613/1998; Portaria SPA/MF nº 1.143/2024), not with Cortex, which is a technology provider. The pause of a Cortex support tool for lack of balance does not exempt, does not transfer and does not reduce that obligation: the operator must maintain a sufficient credit balance or its own contingency process (manual or from another provider) to ensure the continuity of its own responsible gaming and AML controls, regardless of the credit status contracted with Cortex.
Continuity during the pause. The pause reaches the autonomous actions of the agents, with no exception for the compliance function. The operator's human support remains available, as it consumes no credits, and the pause does not end human support already under way: what stops is the agent's autonomous initiative, not the support channel.
Basis: Lei nº 14.790/2023 (arts. 8º III, 26 and 29, the operator's obligation); Lei nº 9.613/1998 and Portaria SPA/MF nº 1.143/2024 (AML, the operator's obligation).
5.1. Fixed-odds betting is prohibited for persons under 18 (Lei nº 14.790/2023). Cortex conversational flows must not lead a person identified or declared to be under 18 to bet, deposit or open an account.
5.2. Age and identity verification (KYC) is the operator's responsibility. Atena may implement the collection and the referral to the operator's KYC flow (Agreement, clause 3.1), but Cortex is not the age verifier of last resort.
5.3. Advertising and communication conducted through the operator's channels may not be directed at children and adolescents, in accordance with the Statute of the Child and Adolescent and the applicable age rating (Section 6).
5.4. Where there is an indication that the interlocutor is under 18, the flow must interrupt the betting journey and provide appropriate guidance, as configured by the operator.
6.1. All communication directed at the bettor via Cortex agents must, in the operator's configuration, observe Lei nº 14.790/2023 and the applicable advertising regulations. It is prohibited, among others, to:
Basis for item 6.1.5: Lei nº 14.790/2023, art. 29, I (prohibition of granting an advance, anticipation, bonification or advance advantage in order to bet, even by way of promotion); Portaria SPA/MF nº 1.231/2024 (prohibition of promotion/reward conditioned on a contribution; “sign-up/welcome bonus” conditioned on a deposit prohibited since Jan/2025), CONAR, Annex X. The distinction between what remains a lawful promotion (not conditioned on a contribution) and the prohibited bonus follows those acts.
6.1-A. The prohibition of a bonus conditioned on a deposit (item 6.1.5) is treated in the product design as permanently prohibited content, a category distinct from and above “marketing behind a gate”: it is always blocked, in any channel, with no mechanism to unlock it (consistent with the business rule of the widget that implements the Atena flows).
6.2. The final content, claims and journeys are defined and approved by the operator (Agreement, clauses 4.2.2, 12.3 and 16.4). Cortex applies in the flows the tone of care and the prohibitions above as a design standard (UX writing), but does not approve or guarantee the advertising compliance of the client's operation.
6.3. Advertising self-regulation guidelines (e.g., the CONAR Annex on betting advertising) may be incorporated when the operator adopts them, as applicable to the operator's case.
7.1. Cortex flows may inform and refer the bettor to gambling disorder support channels and to the operator's SAC, in accordance with Portaria SPA/MF nº 1.231/2024 (information about support and treatment centers; maintenance of a SAC).
7.2. Reference channels (to be informed, confirmed and kept up to date by the operator in the configuration):
7.3. Cortex does not provide health care, clinical counseling or direct support to the end bettor; it only implements the referral configured by the operator.
8.1. The technology supports, it does not replace. The Cortex modules support the operator in complying with responsible gaming duties. They do not replace: (i) the operator's duty of care and regulatory responsibility; (ii) the regulatory authority (SPA/MF); (iii) clinical assessment or treatment of gambling disorder.
8.2. Risk detection is probabilistic. The detection of risk signals (item 4.5) is statistical support, subject to false positives and false negatives, and does not constitute a diagnosis. Decisions based on the signals rest with the operator.
8.3. Configuration rests with the operator. The effectiveness of the tools depends on the operator activating and configuring them correctly (parameters, triggers, limits, integrations). Tools that are not configured or are misconfigured do not produce the expected protective effect, and Cortex is not answerable for that (Annex V, item 3.1 of the Agreement).
8.4. Dependence on third parties. Availability and performance may be affected by third parties (cloud/CDN/WebChat Gateway/carriers) and by integrations with regulatory platforms (e.g., Serpro/Centralized Platform), without any responsibility of Cortex (Agreement, clauses 6.7 and 16.3).
8.5. No guarantee of the client's compliance. Cortex does not guarantee full regulatory compliance of the operator's operation (Annex V, item 3.1).
9.1. Responsible gaming data (self-exclusion status, limits, cool-offs, risk signals, referrals) are personal data and, when they reveal a sensitive behavioral/financial condition, require reinforced care.
9.2. Roles (LGPD). The operator is the Controller; Cortex is the Processor, processing these data in accordance with the operator's instructions and the DPA (Annex III of the Agreement).
9.3. Principles. Purpose, suitability, necessity/minimization, transparency, security and prevention apply. Responsible gaming data are used solely for responsible gaming and support purposes, not for marketing or commercial profiling, except under the operator's own legal basis.
9.4. Prohibition of use for training. Cortex does not use the operator's data, content, messages, logs or metadata (including responsible gaming data) to train its own or third-party models, except with express authorization in a SO (Agreement, clause 9.8). Aggregated and de-identified metrics for operational improvement are permitted.
9.5. Security and retention. The security, retention and disposal controls of the Agreement (clauses 10.3, 15) and of the Compliance Statement apply (encryption, RBAC, MFA, logs, retention of 6 to 12 months with PII minimization).
9.6. Data subject rights and incidents. The bettor's rights (art. 18 of the LGPD) are handled by the operator as Controller, with reasonable assistance from Cortex; incidents follow clause 10.4 of the Agreement and the DPA (notification within 2 business days; Resolução ANPD CD nº 15/2024 or its successor).
The operator (CONTRACTING PARTY), as the regulatory responsible party, must:
11.1. This Policy will be reviewed at least annually and whenever there is a material change in the Brazilian betting regulation (Lei nº 14.790/2023, SPA/MF Ordinances/INs) or in the Cortex modules.
11.2. Changes are recorded with a new version and date, in Cortex's document control.
11.3. Consistent with Annex E of the Compliance Statement, the current published version is available in the “Legal & Compliance” section of the website (www.cortex.je), at the URL https://www.cortex.je/jogo-responsavel.
A Atena atende o jogador no WebChat logado, responde a partir da base de conhecimento aprovada pelo operador e escala para o humano quando o caso exige julgamento.
Meu saque ainda não caiu.
Saque de R$ 500 aprovado às 14h32. O banco libera em até 2 horas.
Perfeito, obrigado!
O caso que pede julgamento chega pronto ao humano.
Resposta imediata a qualquer hora, sem escalar o time nem a fila noturna.
Cada resposta nasce da base de conhecimento aprovada pelo operador.
Jogo responsável e autoexclusão seguem a política que você define sob a Lei 14.790/2023. A Cortex aplica em toda conversa e registra que aplicou.
O caso sensível sobe para o humano com o contexto inteiro da conversa junto.
O jogador é atendido a qualquer hora no WebChat logado, com o mesmo tom e o mesmo critério — sem depender de quem está de plantão.
Seu limite de depósito está em R$ 300 por semana. Para reduzir, te passo agora para uma pessoa da equipe.
A Atena responde a partir da base aprovada do operador e consulta Deméter e Nêmesis antes de falar. Nada de improviso em saque, limite ou bônus.
Cada decisão vai para log WORM com hash encadeado e PII redigida, retido por cinco anos. Quando o regulador perguntar, a prova já está montada.
São seis os gatilhos que levam a conversa ao humano: jogo responsável, crise emocional, ameaça regulatória, falha de resolução, pedido explícito do jogador e limite sem resolução na conversa. O caso chega ao operador com o contexto inteiro, sem repetir pergunta.
Plugamos a Atena no WebChat e no backoffice que você já roda hoje.
As regras da casa viram comportamento: tom, limite, alçada e base de conhecimento.
Go-live acompanhado por 15 dias, com métrica de resolução e escalonamento à vista.
A esteira de implantação leva de 15 a 30 dias úteis, contados a partir da entrega dos seus acessos e integrações. O go-live tem 15 dias de hypercare acompanhado.
Não. A Atena responde ao volume repetitivo dentro da regra aprovada e leva ao humano os casos que pedem julgamento. O time entra com o contexto da conversa e a evidência já reunida: crise emocional, risco regulatório, exceção de contrato ou pedido do jogador.
Toda decisão vai para um log de escrita-só: o banco não aceita alterar nem apagar linha já gravada, cada registro carrega o hash do anterior, e adulterar um deles quebra a cadeia inteira — o que torna a alteração detectável, não impossível. A PII vai redigida, a retenção é de cinco anos e, ao fim dela, o dado é descartado como manda a LGPD. A trilha é exportável para auditoria.
Não. A Atena sobe sobre o WebChat e o backoffice que você já opera. A integração é por API e evento, sem trocar de stack.
A Atena aplica a política da Nêmesis: detecta sinal de risco na conversa, encaminha limite, pausa e autoexclusão, e aciona o CVV 188 em caso de crise. Base: Lei 14.790/2023 e normas da SPA/MF (Secretaria de Prêmios e Apostas do Ministério da Fazenda).
Por crédito — 1 crédito equivale a 1 resposta da Atena. Cada plano inclui mensalidade, setup igual à mensalidade e um pool mensal de créditos. O consumo acima do pool vira recarga.
Os agentes pausam, todos, inclusive os de compliance, até a recarga. Nenhuma conversa é cortada no meio: o que já começou termina, e o seu time humano continua atendendo pelo Backoffice, porque atendimento de pessoa não consome crédito. O consumo é medido por ciclo e por agente e fica consultável a qualquer momento. O operador recebe alertas automáticos quando o consumo alcança 80%, 95% e 100% do pool contratado. A obrigação legal de jogo responsável e de prevenção à lavagem de dinheiro segue sendo do operador, com ou sem crédito.