Tech4Bet

The Challenge

Tech4Bet, an established online gaming platform, identified Brazil as a high-growth market opportunity. However, entering the Brazilian market came with significant technical and regulatory constraints that their existing single-region AWS infrastructure could not satisfy.

The primary challenges were:

• Data residency requirements: Brazilian regulations, including the Lei Geral de Protecao de Dados (LGPD), imposed strict requirements on where player data could be stored and processed. User data for Brazilian players needed to reside within Brazilian jurisdiction, and cross-border data transfers required specific legal and technical safeguards.
• Latency for local users: Tech4Bet’s existing infrastructure was hosted in US and European AWS regions. Brazilian users experienced 150-200ms latency on average, which degraded the real-time gaming experience and contributed to higher bounce rates compared to other markets.
• Disaster recovery gaps: The existing infrastructure lacked multi-AZ redundancy in some components, and there was no documented or tested disaster recovery plan for a multi-region architecture. Expanding to a new region without addressing these gaps would compound the operational risk.
• Repeatability concerns: The original infrastructure had been built through a combination of console-based provisioning and partial automation. Replicating this setup in a new region was error-prone and time-consuming without a fully codified infrastructure approach.

Tech4Bet needed a partner who could execute the regional expansion end-to-end: from compliance architecture through infrastructure deployment to ongoing operational validation.

The Solution

Remangu designed and executed a phased regional expansion that addressed compliance, performance, resilience, and operational repeatability.

Compliance-First Architecture

The architecture for the Brazilian region was designed from the ground up with LGPD compliance as a foundational requirement rather than an afterthought.

Data storage isolation was implemented using dedicated Amazon S3 buckets and Amazon RDS instances in the Sa o Paulo region (sa-east-1). Bucket policies and RDS network configurations enforced that Brazilian player data never left the region. S3 bucket policies explicitly denied any cross-region replication for buckets containing player-identifiable information.

RDS configuration used Multi-AZ deployments within sa-east-1 for high availability while maintaining data residency. Automated backups and snapshots were configured to remain within the region. Encryption at rest using AWS KMS with region-local keys ensured that even backup data met residency requirements.

Access controls enforced geographic restrictions on who could access Brazilian player data. IAM policies restricted data access to roles operating within the Brazilian region, and CloudTrail logging provided an auditable record of all data access events.

Performance Optimization with CloudFront

Amazon CloudFront was deployed as the content delivery layer for the Brazilian market, with edge locations throughout Brazil serving static assets, API responses, and game content.

Route 53 latency-based routing directed Brazilian users to the sa-east-1 origin, while geolocation routing policies ensured that DNS resolution for Brazilian domains resolved to local infrastructure. Health checks provided automatic failover to the nearest alternative region if the primary deployment experienced issues.

CloudFront caching policies were tuned specifically for Tech4Bet’s content types: long TTLs for static game assets, short TTLs for dynamic leaderboard and lobby data, and cache invalidation integrated with the deployment pipeline for application updates.

AWS WAF was integrated with the CloudFront distribution to filter malicious traffic before it reached origin servers. Rate limiting rules, bot detection, and geo-based access controls provided defense in depth without adding latency for legitimate users.

Multi-AZ Disaster Recovery

Every critical component in the Brazilian region was deployed across multiple Availability Zones:

• RDS Multi-AZ provided automatic database failover with synchronous replication, targeting a recovery time of under 60 seconds for database-level failures.
• Application tier ran across two AZs behind an Application Load Balancer, with health checks removing unhealthy instances from rotation automatically.
• S3 provided 99.999999999% durability natively, with versioning enabled for critical data buckets to protect against accidental deletion or corruption.

Disaster recovery runbooks were documented and tested for scenarios including single-AZ failure, database corruption, and full-region degradation. Quarterly DR exercises validated recovery procedures and trained Tech4Bet’s operations team on emergency procedures.

Infrastructure as Code for Repeatability

The entire Brazilian region deployment was codified in Terraform, creating a repeatable blueprint that could be used for future regional expansions. Terraform modules encapsulated region-specific configurations while maintaining consistency with the global architecture:

• Networking modules defined VPC, subnet, and security group configurations with region-appropriate CIDR ranges
• Database modules parameterized RDS configurations for regional compliance requirements
• CDN modules configured CloudFront distributions with region-specific origin and caching policies
• Monitoring modules deployed CloudWatch dashboards and alarms calibrated for regional traffic patterns

This investment in automation reduced the estimated time for future regional expansions from months to weeks.

The Results

The Brazilian region launch proceeded on schedule and met every technical and compliance objective.

100% data compliance was achieved with a clean LGPD assessment. All Brazilian player data is stored and processed within sa-east-1, with auditable access controls and encryption meeting regulatory requirements. The compliance architecture has since been reviewed by Tech4Bet’s legal counsel and external auditors without findings.

Significantly lower latency for Brazilian users was the most immediately visible improvement. Average latency dropped from 170ms to under 30ms for users in major Brazilian metropolitan areas. Player engagement metrics for the Brazilian market improved within the first month, with session duration increasing by 35% and bounce rates decreasing by 40%.

Multi-AZ disaster recovery has been validated through three quarterly DR exercises since launch. Database failover completes in under 45 seconds, and full application recovery from a simulated AZ failure completes in under 5 minutes. No data loss has occurred during any test or real incident.

On-demand scalability was demonstrated during a major promotional event in the Brazilian market, where the infrastructure scaled to handle 4x normal traffic without manual intervention. The Terraform-based infrastructure allowed Tech4Bet to adjust capacity parameters and redeploy in minutes rather than hours.