Privacy Policy of bet765 — Your Data Protected by the LGPD

For the purposes of the General Data Protection Law (LGPD), the data controller collected by the platform bet765 is the company responsible for operating the bet765.best website and all associated services — Sports Betting, online casino, Live Casino, crash games, slots, and all other products available on the platform.

The controller is responsible for all decisions regarding the processing of users' personal data, including what data is collected, the purposes for which it is used, who it may be shared with, and how long it is retained. All data processing operations carried out by bet765 have a specific legal basis under Article 7 of the LGPD.

For privacy and data protection inquiries, the dedicated contact channel is privacidade@bet765.best. The bet765 Data Protection Officer (DPO) can also be reached at this address. The response deadline for data subject requests is up to 15 business days, as required by the LGPD.

Bet765 collects personal data at various points during your interaction with the platform. Below, we detail each data category, its source, and its primary purpose:

Credit or debit card data are not stored on bet765's servers. Card payment processing is handled entirely by PCI-DSS certified payment processors, which receive card data directly from the user via an encrypted form. bet765 receives only the payment confirmation and a tokenized transaction identifier.

Personal data collected by bet765 is used solely for the purposes described below. Any use beyond these purposes requires a new legal basis and, where applicable, fresh consent from the data subject.

• Account creation and management: Verify the user's identity, set up their profile, process registration, and maintain secure access to the platform.
• Financial transaction processing: Process deposits via Pix, boleto bancário, credit card, debit card, PicPay, and Mercado Pago; process withdrawals via Pix and TED bank transfers to accounts at Nubank, Itaú, Bradesco, Banco do Brasil, and other institutions.
• Identity verification (KYC): Verify the user's identity to fulfill legal obligations related to anti-money laundering and age verification.
• Service delivery: Offer Sports Betting, live casino, slots, crash games, and other games; process bet results and settle winnings; provide cash out and other interactive features.
• Fraud prevention and security: Detect irregular behavior, multiple accounts, bot usage, money laundering, and other platform abuses.
• Customer support: Answering questions, resolving issues with deposits or withdrawals, and handling requests related to betting and casino games.
• Marketing communications: Send promotions, bonus notifications, and platform updates — only to users who have opted in and have not subsequently opted out.
• Responsible gambling: Monitor behavioral patterns that may indicate problem gambling and activate protective tools in accordance with our responsible gambling policy.
• Compliance with legal obligations: Respond to requests from regulatory, judicial, or governmental authorities in accordance with Brazilian law.
• Service improvement: Analyze aggregated and anonymized platform usage data to improve the user experience, fix bugs, and develop new features.

The LGPD requires every personal data processing activity to have a specific legal basis. bet765 processes your data in accordance with the following legal grounds set out in art. 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): The primary legal basis for most processing activities — the user agreement you accept when creating an account. Transaction processing, account management, and the provision of Sports Betting and casino services are all covered under this basis.
• Legal obligation (Art. 7, II): bet765 is legally required to carry out KYC verification, retain financial transaction data, and cooperate with competent authorities. These processing activities do not depend on consent.
• Legitimate interest (art. 7, IX): Fraud prevention, platform security, service improvement, and operational communications (such as account security alerts) are carried out on the basis of bet765's legitimate interest, provided that interest does not override the rights and freedoms of the data subject.
• Consent (Art. 7, I): Used for marketing communications via email, SMS, and push notifications. Consent is collected separately and on a granular basis, and may be withdrawn at any time without affecting your use of the platform.

Bet765 does not sell, rent, or otherwise commercialize your personal data with third parties for advertising or marketing purposes on behalf of other companies. Data sharing is limited to what is strictly necessary for the operation of our services and occurs only with the categories of third parties described below:

• Payment processors: PCI-DSS certified payment gateways that process transactions via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago. These partners receive only the data necessary to process the specific transaction.
• Game providers: Companies such as Evolution Gaming, Pragmatic Play, NetEnt, Spribe, and Play'n GO that supply the live casino games, slots, and crash games available on bet765. Data sharing is limited to the user identifier and game session data — no complete personal data is shared.
• Identity verification providers (KYC): Specialized document verification and fraud prevention services that receive documents submitted during the KYC process. These providers act as data processors and are subject to confidentiality agreements and LGPD compliance obligations.
• Technology infrastructure providers: Cloud hosting, CDN, and security monitoring services that support the platform's technical operations. All providers are selected based on their compliance with recognized security standards.
• Competent authorities: bet765 may disclose personal data to judicial, law enforcement, tax, or regulatory authorities when required by law, court order, or a legitimate request from a competent public body. Whenever possible and permitted by law, the user will be notified of such requests.

All third parties that process personal data on behalf of bet765 are subject to contractual agreements requiring LGPD compliance and prohibiting the use of data for unauthorized purposes.

Bet765 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including statutory retention obligations. The general retention periods are:

• Active account data: Retained for as long as the account remains active. After voluntary account closure, identification and financial transaction data are retained for 5 years for compliance with legal obligations related to anti-money laundering (Law No. 9,613/1998).
• Betting and transaction history: Retained for 5 years after each transaction, as required by regulation.
• KYC documents: Retained for 5 years after account closure.
• Support communications: Retained for 2 years after the ticket is closed.
• Browsing data and cookies: Retained for periods between 30 days and 13 months, depending on the cookie type and its purpose.
• Marketing communication data: Retained for as long as consent remains active. After consent is withdrawn, contact data is moved to a suppression list to ensure no further marketing communications are sent.

Bet765 employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or destruction. The key measures currently in place include:

• 256-bit SSL/TLS encryption: All communication between your device and bet765's servers is encrypted. No data travels over the network in plain text.
• Encrypted storage: User passwords are stored using bcrypt cryptographic hashing — never in plain text. Sensitive data at rest is encrypted using AES-256.
• Two-factor authentication (2FA): Available and recommended for all users. For accounts with a withdrawal history exceeding R$ 5,000.00, 2FA is highly recommended as an additional layer of protection.
• Role-based access control: bet765 employees only access the data necessary for their specific role. No staff member has unrestricted access to all user data.
• Continuous monitoring: Platform systems are monitored around the clock by automated tools that detect intrusions, access anomalies, and suspicious behavior.
• Regular security testing: bet765 conducts periodic penetration tests and security audits to identify and remediate vulnerabilities before they can be exploited.
• Network segmentation: Production systems that store user data are isolated from development and testing networks, with access restricted by firewalls and a corporate VPN.

Despite all measures in place, no security system is completely impenetrable. bet765 is committed to notifying affected users and the National Data Protection Authority (ANPD) in the event of a security incident that may pose a significant risk to data subjects, as required by the LGPD.

Bet765 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and analyze browsing behavior.

In addition to first-party cookies, bet765 may use pixels and SDKs from analytics partners for performance measurement purposes — always in an anonymized and aggregated manner. You can manage your cookie preferences at any time in your account settings or through the consent banner displayed on your first visit to the platform.

To manage or delete cookies directly through your browser, check your browser's privacy settings. Disabling essential cookies may prevent login and other critical platform features from working correctly.

Bet765 does not intentionally collect personal data from individuals under the age of 18. The platform's services are directed exclusively at adults — registration requires a CPF and date of birth, and users under 18 are automatically blocked during the verification process.

If bet765 identifies that it has inadvertently collected data from a minor, the account will be closed immediately, the data will be deleted, and any deposits made will be refunded to the holder of the bank account used at registration.

If you are a parent or legal guardian and believe your child under 18 has created a bet765 account, please contact us immediately at privacidade@bet765.best with the registered CPF. The team will handle the case with priority and confidentiality.

Some of the technology providers and game partners used by bet765 process data on servers located outside Brazil. When this occurs, bet765 ensures that the international data transfer meets the requirements of the LGPD, specifically Article 33, which sets out the permitted conditions for international transfers.

Measures adopted for international transfers include:

• Specific contractual clauses that impose on the international recipient obligations equivalent to those under the LGPD for the protection of transferred data.
• Verification that the destination country provides an adequate level of data protection, or that the recipient offers sufficient guarantees through internationally recognized certifications.
• For gaming providers such as Evolution Gaming and Pragmatic Play — which operate live casino studios with global streaming — data sharing is limited to game session data and an anonymized user identifier, with no full personal data disclosed.

An up-to-date list of the countries to which data may be transferred and the applicable safeguards is available upon request to the DPO at privacidade@bet765.best.

The LGPD grants you, as a data subject, a set of rights that can be exercised at any time. bet765 is committed to fulfilling these rights within the deadlines established by law — within 15 business days for most requests.

To exercise any of these rights, contact bet765's DPO by email at privacidade@bet765.best, identifying yourself with your full name and registered CPF and describing your request. A response will be sent to the email address on your account within 15 business days. If the request is denied, bet765 will provide a reasoned explanation. You may also file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have been violated.

In the event of a security incident that may result in significant risk or harm to data subjects — such as unauthorized access, leakage, destruction, or improper alteration of personal data — bet765 will follow this protocol:

• Immediate containment: Identification and containment of the incident to prevent it from spreading. Activation of the security incident response team.
• Impact assessment: Assessment of the incident's scope — which data was affected, how many users were impacted, and the potential level of risk.
• ANPD notification: Notification to the National Data Protection Authority (ANPD) within 72 hours of incident confirmation, as required by Article 48 of the LGPD.
• Notification of affected data subjects: Direct email notification to users whose data was compromised, describing the incident, the data affected, and recommended steps for personal protection.
• Investigation and remediation: Full investigation into the causes of the incident and implementation of corrective measures to prevent recurrence.

If you suspect your account has been accessed without your authorization — for example, if you notice bets or transactions you did not make — contact bet765 support immediately via live chat to have your account emergency-blocked and investigated.

Bet765 may update this Privacy Policy periodically to reflect changes in data processing practices, legal or regulatory developments, new platform services or features, or improvements in clarity and completeness.

Changes that materially affect data subjects' rights or the purposes of processing will be communicated at least 15 days in advance via the registered email address and through a prominent notice on the platform. For changes required by law within a shorter timeframe, notification will be provided as soon as possible.

The date of the last update to this policy is shown at the top of this document. We recommend reviewing this policy periodically to stay informed about how your data is handled. The most recent version is always available at bet765.best/privacy-policy.

For privacy and data protection inquiries at bet765, the available contact channels are:

The Data Protection Officer (DPO) at bet765 is the official point of contact for all LGPD-related matters, including the exercise of data subject rights, questions about data processing, and complaints. The DPO can be reached by email at privacidade@bet765.best.

If you believe your rights as a data subject have not been adequately upheld by bet765, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing personal data protection in Brazil under the LGPD.