Privacy Policy bet1bet – How Your Data Is Handled

1. Who We Are and How to Contact the Data Controller

The bet1bet is the controller of personal data collected and processed under this Privacy Policy. We operate a sports betting and online casino platform focused on the Brazilian market, featuring football (Brasileirão Série A, Copa do Brasil, Libertadores), e-sports (CS2, Valorant, Free Fire, League of Legends), slots, live roulette, and other entertainment available 24 hours a day.

For questions about privacy or the processing of your personal data, you can reach us through the following channels:

• General email: contato@bet1bet.best
• Live chat: available 24/7 directly on the platform, in Portuguese
• Data Protection Officer (DPO): privacidade@bet1bet.best

Requests related to your rights as a data subject should preferably be sent to the DPO's email address, including your full name, registered CPF, and the nature of the request. We respond within the legal deadline of 15 business days.

2. What Data We Collect

The bet1bet collects personal data in different ways throughout your journey on the platform. Below are the main types of data we process:

Data provided directly by you:

• Full name, CPF, date of birth, and email address (required at registration)
• Mobile phone number and full residential address including ZIP code
• Identity documents submitted during the KYC verification process (RG, CNH, Passport)
• Proof of address and payment method details (Pix, card, PicPay, Mercado Pago, bank slip, TED transfer)
• Information provided to customer support during service interactions

Data automatically generated through platform use:

• Full history of Sports Betting and casino wagers (games, amounts, results)
• Financial transaction history (Pix deposits, withdrawals, credited bonuses)
• IP address, device type, operating system, browser, and version used
• Session data: access time, browsing duration, pages visited, and features used
• Approximate location data inferred from IP address (city and state, not GPS coordinates)
• Information on cookies and similar technologies described in section 5 of this Policy

Data received from third parties:

• Financial transaction confirmations provided by partner financial institutions (banks, Pix processors)
• Identity verification data from credit bureaus and public agencies, when used in the KYC process

3. Why we collect data and how we use it

Each piece of data collected by bet1bet serves a specific purpose. We do not collect information we do not use. The main purposes are:

The bet1bet does not use your data to build profiles for sale to external advertisers, to make fully automated decisions with legal impact on you, or for any purpose not listed above without your prior consent.

4. Legal basis for data processing

Every personal data processing operation carried out by the bet1bet is supported by at least one of the legal bases set out in the LGPD. The main legal bases we rely on are:

• Performance of a contract (Art. 7º, V): processing necessary to provide the contracted services — betting, payment processing via Pix or other methods, account management, and the VIP Program.
• Compliance with a legal or regulatory obligation (Art. 7º, II): data processed to comply with requirements from betting regulatory bodies, the Federal Revenue Service, COAF (the Financial Activities Control Council), and anti-money laundering regulations.
• Legitimate interest (Art. 7, IX): data processing for fraud prevention, platform security, product improvements, and experience personalization, provided it does not override your interests or fundamental rights.
• Consent (Art. 7, I): for sending marketing communications, using non-essential cookies, and optional processing for which we ask your explicit authorization. You may withdraw this consent at any time.

5. Cookies and similar technologies

The bet1bet uses cookies and similar technologies (such as tracking pixels and local storage) to ensure the platform functions correctly, enhance the user experience, and analyze service performance. The types of cookies we use are:

• Essential cookies: required for the platform's basic operation — maintaining the login session, keeping the bet slip functional, and securing the account. They cannot be disabled without affecting core functionality.
• Performance cookies: collect anonymous data on how users interact with the platform — which pages are visited most, where errors occur, loading times. We use this information solely to improve bet1bet.
• Functionality cookies: remember your preferences — language, favorite payment method, display settings — so you don't have to reconfigure everything each time you log in.
• Analytical cookies: used with analytics tools to understand aggregate user behavior on the platform. Data is processed in aggregate form and does not identify individual users.

You can manage your cookie preferences through the banner shown on your first visit to the platform or through your browser settings. Disabling essential cookies may affect login functionality and the ability to place bets.

The bet1bet does not use third-party cookies for behavioral advertising or to track your activity on other sites outside the platform.

6. Sharing data with third parties

The bet1bet does not sell, rent, or trade your personal data. Data is only shared with third parties in the situations below, always using the minimum information necessary for the specific purpose:

• Payment partners: Pix processors, credit and debit card operators (Visa, Mastercard, Elo), PicPay, Mercado Pago, and partner banks such as Nubank, Itaú, Bradesco, and Banco do Brasil receive only the data required to process financial transactions. These partners have their own privacy policies and are contractually obligated to protect the information they receive.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Play'n GO, and other partner providers receive an anonymized session identifier to enable gameplay. Your full personal data is never shared with game providers.
• Identity verification services: KYC companies and credit bureaus that assist with document verification during the registration and identity confirmation process.
• Authorities and regulatory bodies: data shared under legal obligation with the Receita Federal, COAF, public security authorities, and betting industry regulators, when required by law or court order.
• Technology service providers: cloud infrastructure providers, cybersecurity systems, and performance analytics tools that act as data processors under bet1bet's guidelines and are bound by data protection agreements.

In any data-sharing situation, the bet1bet contractually requires partners to handle data with the same level of protection applied internally and solely for the stated purpose.

7. Data storage and security

User data from bet1bet are stored on secure servers with the following protective measures:

• TLS/SSL encryption on all data transmissions between the user and the platform
• Encryption at rest for sensitive data stored in internal databases
• Role-based access control — only staff with a proven operational need can access personally identifiable data
• Mandatory multi-factor authentication for all administrative access to systems
• Continuous monitoring for suspicious activity and automatic alerts for out-of-pattern access
• Regular encrypted backups stored in geographically separate locations
• Penetration testing and periodic security audits conducted by specialized firms

Despite all the measures in place, no system is 100% immune to security incidents. In the event of a data breach that poses a risk to users, the bet1bet will notify affected data subjects and the ANPD within the timeframes established by the LGPD, providing full details about what occurred and the measures taken.

Your account security also depends on your own responsibility as a user: keep your password strong and unique, never share it with anyone, and contact support immediately if you suspect unauthorized access.

8. Data Retention — How Long We Keep Your Data

The bet1bet retains your personal data only for as long as necessary for each purpose. The general retention periods are:

• Active account data: retained for as long as the account remains active and for up to 5 years after closure, to meet legal and tax obligations.
• Financial and betting history: retained for a minimum of 5 years after each transaction, as required by the tax and regulatory legislation applicable to the betting industry in Brazil.
• KYC Documents: retained for the duration of the active account plus 5 years for regulatory and anti-money laundering purposes.
• Customer support data: support records retained for 2 years after the case is resolved.
• Cookie and session data: session cookies are deleted when the browser is closed; persistent cookies have a maximum lifespan of 12 months, renewable with fresh consent.
• Marketing data (with consent): retained until consent is withdrawn by the user.

Once retention periods expire, data is securely deleted or anonymized in a way that makes it impossible to identify the data subject, as required by the LGPD.

9. Your rights as a data subject

The LGPD guarantees you, as the data subject whose information is processed by the bet1bet, the following rights — all of which can be exercised free of charge through Portuguese-language support:

To exercise any of these rights, submit your request to privacidade@bet1bet.best or via the platform's live chat, providing your full name, registered CPF, and the right you wish to exercise. We respond within 15 business days. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have not been properly upheld.

10. Data of Minors

The services of the bet1bet are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and does not permit anyone under 18 to use its services.

As part of the registration and KYC verification process, we collect your date of birth and identity documents confirming legal age. Accounts created with fraudulent information to conceal underage status will be closed immediately upon detection, with any remaining balance returned to the original payment method.

If you are a parent or guardian and have identified that a minor has used the platform, please contact bet1bet support immediately at bet1bet so we can take the necessary action. We also recommend using parental control tools on devices shared with minors.

11. International Data Transfers

In certain situations, the data of users of the bet1bet may be transferred to or accessed by servers or partners located outside Brazil — for example, in operations with international game providers such as Evolution Gaming or Pragmatic Play, or with global cloud infrastructure.

In these situations, the bet1bet ensures that international data transfers take place only:

• For countries or bodies that provide an adequate level of personal data protection, as assessed by the ANPD;
• Through standard contractual clauses requiring recipients to meet data protection obligations equivalent to those under the LGPD;
• Or where the user has given specific consent for the transfer after being informed of the risks.

The bet1bet keeps records of all international transfers carried out and is prepared to inform users about them upon request, in the exercise of the right to information provided for under the LGPD.

12. Changes to this Privacy Policy

The bet1bet may update this Privacy Policy periodically to reflect changes in legislation, our data practices, or our services. Material changes will be communicated to users by registered email at least 7 days before they take effect.

The date of the last update will always be displayed at the top of this page. For changes involving new uses of your data or updates to the legal bases for processing, we will request fresh consent where applicable. Continued use of the platform after the effective date of the new terms constitutes acceptance of the updated Policy.

We recommend that you review this Policy periodically to stay informed about how your data is protected. Previous versions of this Policy are available upon request to the DPO of the bet1bet.

13. Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, report a privacy concern, ask questions about this Policy, or request information about how your data is processed, you may use the following channels:

• DPO email: privacidade@bet1bet.best — for formal LGPD rights requests and privacy matters. Response time: up to 15 business days.
• General email: contato@bet1bet.best — for general privacy inquiries. Response time: up to 2 business hours.
• Live chat: available 24 hours a day on the platform in Portuguese — for urgent matters or quick guidance.

If your requests are not handled to your satisfaction by the bet1bet, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.