369bet Privacy Policy: How We Protect Your Data

1. Personal Data Controller

For the purposes of the LGPD, the controller of personal data processed in connection with the 369bet platform's activities is the company responsible for operating the site 369bet.life. All decisions regarding how users' personal data is collected, used, and stored are made by this entity.

369bet's Data Protection Officer (DPO) can be reached at contato@369bet.life for any questions, requests, or complaints related to personal data processing. The standard response time for data subject requests is up to 15 calendar days, in line with the LGPD.

2. Personal Data We Collect

369bet collects personal data in the following categories, based on the nature and purpose of each operation:

Data you provide directly during registration:

• Full name as it appears on an official ID.
• CPF (Cadastro de Pessoas Físicas) — unique identifier on the platform.
• Date of birth.
• Email address.
• Mobile phone number.
• Full residential address (street, number, complement, neighborhood, city, state, and ZIP code).

Financial and transaction data:

• Pix key linked to the account (CPF, email, mobile number, or random key).
• Complete history of all deposits and withdrawals made on the platform.
• Betting history — event, market, amount wagered, odds, outcome, and win/loss.
• Credit or debit card details, when used as a deposit method (stored in tokenized form by the payment processor, with 369bet having no direct access to the full card number).

Identity verification data (KYC):

• Scanned copy of a photo ID (RG, CNH, or passport).
• Recent proof of address.
• Selfie with ID document, when requested for identity validation.

Platform browsing and usage data:

• Access IP address.
• Browser type and version.
• Operating system and device type (mobile, tablet, computer).
• Pages visited and time spent on each.
• Clicks, searches, and interactions with the 369bet interface.
• Cookie and similar tracking technology data (detailed in section 7).

369bet does not collect sensitive personal data as defined by the LGPD (such as racial origin, religious belief, political opinion, genetic data, or biometric data) except where strictly necessary for identity verification and fraud prevention — for example, a selfie with an ID document when applicable.

3. Purpose of Data Processing

369bet uses your personal data solely for the purposes described below. No data is collected without a legitimate and defined purpose:

369bet does not use your personal data for purposes incompatible with those described above without obtaining new consent or another legal basis provided for under the LGPD.

4. Legal Basis for Processing (LGPD)

All personal data processing carried out by 369bet is grounded in one of the legal bases set out in Article 7 of the LGPD. The main legal bases we rely on are:

• Contract performance (art. 7º, V): processing is necessary to fulfill the contract between you and 369bet — which includes processing your bets, crediting winnings, handling Pix deposits and withdrawals, and keeping your account active and secure.
• Compliance with a legal or regulatory obligation (art. 7, II): 369bet has legal obligations to maintain records of financial transactions, report suspicious activity to COAF, and comply with Brazilian Federal Revenue requirements. These processing activities do not require your consent.
• Legitimate interest (art. 7, IX): We use browsing data and usage history to prevent fraud, enhance platform security, and improve the user experience — always proportionately and with full respect for data subjects' rights.
• Consent (art. 7, I): for marketing communications and promotions sent by email or SMS, 369bet requests your explicit consent during registration. You may withdraw that consent at any time.

5. Data Sharing with Third Parties

369bet does not sell, rent, or trade your personal data with third parties. Data sharing occurs only in the following specific and necessary situations:

• Payment processors: to process deposits and withdrawals via Pix, credit/debit card, PicPay, or Mercado Pago, we share only the strictly necessary data with our partner payment processors. These partners operate as data processors under contract and are required to comply with the LGPD.
• Game providers: to operate slots, live casino, and crash games, minimal session data is shared with software providers (such as session identifier and available balance). No personally identifiable data is shared beyond what is technically necessary to run the games.
• Identity verification services (KYC): to verify users' identities and prevent fraud, 369bet may work with specialized document verification partners. These partners act as data processors and are subject to the same security and confidentiality obligations.
• Government and regulatory authorities: 369bet may be legally required to share data with the Brazilian Federal Revenue Service, COAF, the Federal Police, or other competent authorities when required by law, court order, or valid legal process.
• Technical support and infrastructure: cloud, hosting, and technical support providers that process data on behalf of 369bet as data processors, always under contracts containing data protection clauses.

All partners with whom 369bet shares data are selected based on security and compliance criteria, and are bound by contractual agreements that impose confidentiality and security obligations consistent with the LGPD.

6. Data Retention and Deletion

369bet retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. Retention periods vary depending on the type of data and its purpose:

• Registration and active account data: retained for as long as your account is active and for up to 5 years after closure, in accordance with legal financial record retention obligations.
• Financial transaction history (deposits and withdrawals via Pix): retained for 5 years as required by Brazil's Central Bank regulations and anti-money laundering legislation.
• Identity verification documents (KYC): retained for up to 5 years after account closure, as required by COAF.
• Browsing data and analytics cookies: retained for up to 13 months, then anonymized or deleted.
• Security and access logs: retained for up to 6 months for fraud detection and investigation purposes.

Once the retention period ends, your data is securely deleted or anonymized so you can no longer be directly identified. Deletion requests, when technically feasible and not in conflict with legal obligations, are processed within 30 business days of the request.

7. Cookies and Tracking Technologies

369bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize the content you see. The cookies we use fall into the following categories:

Essential cookies (always active): required for the platform's basic operation — session authentication, security, language preferences, and bet slip. Without these cookies, the platform will not function properly.

Analytics and performance cookies (with consent): collect information on how you use the platform to help us improve our service. Data is aggregated and anonymized.

Personalization cookies (with consent): allow 369bet to remember your preferences — such as favorite sports, displayed odds, and display settings — to personalize your experience on future visits.

You can manage your cookie preferences at any time through the privacy settings panel available on the platform. Declining non-essential cookies does not affect the core functionality of 369bet for betting and financial transactions via Pix.

8. Data Security Measures

369bet implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS encryption: all communication between your device (mobile, desktop, or tablet) and 369bet's servers is protected by bank-grade encryption.
• Encrypted storage: sensitive data — such as passwords and Pix keys — is stored using irreversible cryptographic hashing or encryption at rest. 369bet's internal team does not have access to your password in plain text.
• Two-factor authentication (2FA): available as an extra layer of account login security, using a code sent to your phone.
• Ongoing monitoring: automated systems monitor suspicious activity 24 hours a day, including unusual login attempts, atypical transactions, and betting patterns that may indicate misuse of the account.
• Internal access controls: only staff with a verified business need are granted access to users' personal data, always under logging and audit controls.
• Regular security testing: 369bet's infrastructure undergoes periodic audits and penetration testing conducted by independent specialists.

In the event of a security incident that could pose a risk or harm to data subjects, 369bet will notify the ANPD (National Data Protection Authority) and affected users within the timeframes established by the LGPD — generally within 72 hours of becoming aware of the incident.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that 369bet fully respects. You may exercise any of these rights at any time by contacting our support team:

• Right of access (art. 18, I and II): request confirmation that we process your data and obtain a copy of all personal data 369bet holds about you.
• Right to rectification (art. 18, III): request the correction of inaccurate, outdated, or incomplete data. Account details can be updated directly in your profile.
• Right to anonymization, blocking, or deletion (art. 18, IV): request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
• Right to data portability (art. 18, V): request your data in a structured, machine-readable format to transfer it to another controller.
• Right to deletion of data processed based on consent (art. 18, VI): request the deletion of data processed based on your consent — such as data used for marketing communications.
• Right to information about data sharing (art. 18, VII): request information about which public or private entities 369bet shares your data with.
• Right to withdraw consent (art. 18, IX): withdraw consent given for specific processing activities, such as receiving promotional emails from 369bet.
• Right to petition the ANPD (art. 18, VIII): if you feel your rights have not been upheld, you may file a complaint with the National Data Protection Authority.

To exercise any of these rights, contact us via the platform's live chat (available 24 hours a day, with support in English) or by email at contato@369bet.life. 369bet will respond within the legal deadline of 15 calendar days.

10. Protection of Minors

369bet's services are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from minors. Registration requires a CPF and date of birth, which are verified to confirm legal age.

If 369bet identifies by any means that a user is under 18, the account will be immediately suspended, all data will be deleted, and any balances will be returned subject to case review. If you believe a minor has created an account on the platform, please contact our support team immediately.

369bet strongly supports minor protection initiatives and has systems in place to detect registration inconsistencies, flagging potential cases for manual review by the compliance team.

11. International Data Transfer

To operate its services efficiently, 369bet may use server infrastructure and technology providers that process data in data centers located outside Brazil — particularly in countries whose legislation is recognized as adequate by the ANPD, or under the protection of specific contractual clauses.

Any international transfer of personal data carried out by 369bet complies with the conditions set out in art. 33 of the LGPD, ensuring that the level of protection in the destination country is at least equivalent to that provided under Brazilian law. 369bet does not transfer data to countries that do not offer adequate protection without putting appropriate contractual safeguards in place.

Most data belonging to 369bet's Brazilian users is processed and stored on servers located in Brazil or in European Union countries, where the General Data Protection Regulation (GDPR) provides a level of protection compatible with the LGPD.

12. Updates to this Privacy Policy

369bet may update this Privacy Policy periodically to reflect changes in its services, applicable legislation, or data processing practices. Any relevant changes will be communicated via email to the registered address and through a prominent notice on the platform.

The "last updated" date shown at the top of this page indicates when the current version was published. We recommend reviewing this document periodically. The version published on this page is always the one in effect.

Continued use of the platform after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure before the date the changes take effect.

13. Contact the Data Protection Officer (DPO)

To exercise your rights under the LGPD, clarify questions about this Privacy Policy, or file a complaint related to the processing of your personal data, please contact 369bet's Data Protection Officer (DPO) through the following channels:

• Live chat: available directly on the platform, 24 hours a day, with support exclusively in Portuguese.
• Email: contato@369bet.life — for formal requests to exercise data subject rights, with a response deadline of up to 15 calendar days.

When reaching out, please provide your full name, the CPF linked to your account, and a clear description of your request. For identity verification prior to processing sensitive requests (such as access to a full data copy or account deletion), we may ask you to present a government-issued photo ID.

For questions about the platform's general Terms and Conditions, please visit the /terms-conditions. For responsible gambling concerns, including self-exclusion, please consult /responsible-gaming.