Bet02 Privacy Policy – LGPD Data Protection

This Privacy Policy describes how bet02 collects, uses, stores, and protects the personal data of platform users bet02.click. This document was prepared in accordance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018) and all other applicable data processing regulations in Brazil.

Bet02 believes privacy is more than a legal obligation — it is a commitment to respecting every Brazilian player. That is why this document was written in plain language, free of unnecessary legal jargon, so you know exactly what happens to your data when you use the platform.

By registering with bet02 or using any of the platform's services — Sports Betting, Live Casino, slots, crash games, poker, Pix deposits, or any other feature — you confirm that you have read and understood this Privacy Policy. If you disagree with any part of it, please contact support before continuing to use the platform.

The controller of personal data processed through the bet02.click platform is the company operating bet02, which is responsible for defining the purposes and means of data processing, in accordance with Article 5, Section VI, of the LGPD.

For all matters related to personal data processing, including the exercise of rights provided under the LGPD, the official contact channel is:

• Email: suporte@bet02.click
• Live chat: available 24/7 directly on the bet02.click platform
• Recommended subject line: "Data Privacy – [your full name]"

Bet02 has a Data Protection Officer (DPO) responsible for overseeing internal LGPD compliance and serving as the point of contact with the Autoridade Nacional de Proteção de Dados (ANPD). The DPO can be reached through the same email channel listed above.

Bet02 collects only the data necessary to provide the contracted services, verify user identity, and fulfill applicable legal obligations. The data collected falls into three categories:

Data provided by the user during registration and platform use:

• Full name and CPF (required to open an account)
• Date of birth (for age verification)
• Email address and mobile number
• Residential address (requested during KYC identity verification)
• Identity documents (RG, CNH, or passport) for the KYC process
• Banking details for processing deposits and withdrawals via Pix, credit/debit card, boleto, PicPay, Mercado Pago, or TED transfer

Data automatically generated through platform usage:

• IP address and approximate geolocation
• Device identification (type, operating system, browser)
• Betting history, games, and financial transactions
• Session data (time spent, pages visited, interactions)
• Access logs for security and audit purposes

Third-party data (in specific cases):

• Payment confirmation provided by financial processors (Pix via Banco Central, card operators)
• Identity verification data from partner credit bureaus, where required for fraud prevention

Bet02 uses collected personal data exclusively for the following purposes, always within the legal limits established by the LGPD:

The LGPD requires that every instance of personal data processing have a specific legal basis. bet02 grounds its data processing activities on the following bases set out in Article 7 of Law No. 13,709/2018:

• Contract performance: data required to deliver the contracted service — registration, bets, payments, withdrawals, and customer support.
• Compliance with a legal obligation: data required to comply with regulatory obligations in the betting industry, anti-money laundering (AML) standards, and Brazilian tax requirements.
• Legitimate interest: aggregated behavioral analysis to improve the platform, prevent fraud, and ensure operational security — always proportionate and in full respect of data subjects' rights.
• Consent: sending marketing communications, promotional notifications, and personalized offers. Consent may be withdrawn at any time without affecting access to the platform.

Bet02 does not sell, rent, or transfer personal data to third parties for their own commercial purposes. Data sharing occurs only in the situations described below, always limited to the minimum data necessary for each purpose:

• Payment processors: transaction data is shared with the financial institutions responsible for processing Pix, boleto, credit/debit cards, PicPay, and Mercado Pago, exclusively for payment authorization and settlement.
• Game providers: a user identifier (containing no sensitive personal data) is transmitted to game providers (such as Evolution Gaming and Pragmatic Play) for session logging and technical dispute resolution.
• Identity verification services: documents submitted during the KYC process are handled by certified identity verification partners, solely for the purpose of confirming age and document authenticity.
• Competent authorities: bet02 complies with orders from Brazilian judicial, law enforcement, and regulatory authorities when legally required to do so, without needing the data subject's consent in such cases.
• Infrastructure providers: cloud hosting and security services operate under contracts that prohibit the use of data for any purpose beyond what is strictly necessary for bet02's operations.

All partners with access to bet02 users' personal data are bound by data processing agreements that impose the same protection obligations required under the LGPD. bet02 conducts periodic audits of these partners to ensure ongoing compliance.

Bet02 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures in place include:

• Encryption in transit: all communications between the user's device and bet02 servers are protected by TLS 1.3 / SSL 256-bit.
• Encryption at rest: sensitive data stored on bet02 servers — such as CPF, banking details, and KYC documents — is encrypted at rest using AES-256 standards.
• Access control: access to personal data is restricted to employees with a legitimate operational need, secured by multi-factor authentication and a full audit log of all access.
• Continuous monitoring: intrusion detection systems operate 24 hours a day, with real-time alerts for any suspicious activity on bet02's servers.
• Security testing: the platform undergoes periodic penetration tests (pentests) carried out by independent firms specializing in information security.
• Incident response plan: in the event of a data breach, bet02 will notify affected data subjects and the ANPD within the timeframe established by the LGPD, including a description of the incident and the measures taken.

Bet02 retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. General retention periods are:

• Registration and KYC data: retained for the duration of the account's active period and for a minimum of 5 years after closure, in compliance with anti-money laundering regulations (Law No. 9.613/1998).
• Financial transaction history: retained for 5 years after each transaction, in accordance with Brazilian tax and regulatory requirements.
• Security and access logs: retained for 12 months for audit and incident investigation purposes.
• Marketing communication data: retained until the user withdraws consent, and may be deleted at any time upon request.
• Game session data: retained for 6 months for technical dispute resolution purposes, then anonymized for aggregated statistical analysis.

Once retention periods have been met, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified. bet02 does not retain data beyond what is necessary under any circumstances.

Bet02 uses cookies and similar technologies to enhance the browsing experience and ensure the platform functions correctly. The types of cookies used are:

• Essential cookies: required for the platform to function — session authentication, login persistence, and CSRF protection. These cannot be disabled without compromising your use of bet02.
• Performance cookies: collect anonymous information about how users interact with the platform (most visited pages, session duration, errors encountered) to help improve the product. No personally identifiable data is collected by these cookies.
• Preference cookies: remember user settings such as preferred language, game display limits, and interface preferences, personalizing the experience without requiring reconfiguration on every visit.
• Analytical cookies: used in aggregate form to understand platform usage patterns, identify improvement opportunities, and optimize coverage of events such as the Brasileirão Série A and Copa do Brasil.

Bet02 does not use tracking cookies for third-party advertising purposes. You can manage your cookie preferences in your browser settings. Disabling non-essential cookies may affect some platform features, but will not prevent you from using the core services.

The LGPD grants personal data subjects a set of rights that bet02 is fully committed to upholding. See below what you can request and how to exercise each right:

To exercise any of these rights, send an email to suporte@bet02.click with the subject line "LGPD Rights – [your full name and CPF]" or start a conversation via the platform's live chat. bet02 may request identity confirmation before processing the request to ensure data is delivered to the correct holder.

Bet02 services are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and does not permit registration or use by anyone under 18.

During the registration process, bet02 collects the user's date of birth and runs checks to confirm they are of legal age. Accounts identified as belonging to users under 18 are closed immediately, with deposited funds retained for review and returned to the legal guardians upon proof of identity.

If you become aware that a minor under 18 has created an account on bet02, please contact our support team immediately at suporte@bet02.click. bet02 takes this matter very seriously and guarantees a priority response in such cases.

In certain circumstances, personal data of bet02 users may be transferred to servers located outside Brazil, particularly in the context of cloud infrastructure and services provided by international game providers such as Evolution Gaming and Pragmatic Play.

When such a transfer takes place, bet02 ensures it is carried out in compliance with Article 33 of the LGPD, specifically:

• The recipient country must offer a level of personal data protection equivalent to that provided under the LGPD, or
• The receiving partner must be subject to specific contractual clauses that guarantee the same standards of protection required under Brazilian law.

In all cases of international data transfer, the volume of data shared is limited to the minimum necessary for the specific purpose. Sensitive data such as CPF and identity documents is never transferred to servers outside Brazil without adequate cryptographic protection.

Bet02 may update this Privacy Policy periodically to reflect changes in Brazilian law, industry practices, or platform features. Whenever changes directly affect data subjects' rights or the way data is processed, bet02 will notify users at least 7 days in advance via their registered email and through a prominent notice on the platform.

For minor updates — such as language corrections, contact detail changes, or adjustments that do not affect the substance of data processing — the document may be updated without prior notice, with a clear indication of the new effective date.

Your continued use of the bet02 platform after a new version of this Policy takes effect constitutes acceptance of the updated terms. We recommend reviewing this document periodically. A history of previous versions is available upon request from support.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or file a formal complaint regarding the handling of your data by bet02, please use the channels below:

• Privacy email: suporte@bet02.click — use the subject line "Data Privacy" or "LGPD Rights" for automatic prioritization.
• Live chat: available 24/7 directly on the bet02.click platform, with an average response time of under 2 minutes.
• Response time for privacy requests: up to 15 business days, as per Article 19 of the LGPD.

Bet02's Data Protection Officer (DPO) is the internal officer responsible for ensuring that data processing complies with this Policy and the requirements of the LGPD. The DPO also serves as the official point of contact with the Autoridade Nacional de Proteção de Dados (ANPD) for regulatory matters.

If bet02 does not respond to your request within the stated timeframe, or if you are not satisfied with the response received, you have the right to file a complaint directly with the ANPD — the federal authority responsible for enforcing the LGPD in Brazil.