Bet122 Privacy Policy – Data Protection and LGPD

1Who We Are and Who Controls Your Data

Bet122 is a Sports Betting and online casino platform available at bet122.best, developed exclusively for the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018), bet122 acts as the data controller of its users, being responsible for defining the purposes and means of processing the collected information.

This Privacy Policy applies to all registered bet122 users, visitors to the platform and anyone who interacts with bet122's systems, including the main website, mobile applications (where available), support channels and communications by email or phone.

Bet122 is fully committed to transparency about how your data is handled. This document was written in plain language — without unnecessary legal jargon — because we believe you have the right to clearly understand what happens with your information, not just to sign something nobody reads.

2What Data bet122 Collects

Bet122 collects personal data in the following categories, according to the stage of platform use:

2.1 Data provided directly by the user

• Identification data: full name, CPF, date of birth, nationality.
• Contact details: email address, mobile number, full residential address including ZIP code.
• Identity verification data (KYC): a copy of a government-issued photo ID (national ID card, driver's license, or passport), a selfie holding the document, and proof of address.
• Financial data: Pix key, credit or debit card details (processed in tokenized form, with no storage of the full card number), bank account details for TED transfers.
• Preference data: preferred betting categories (football, Brasileirão, Libertadores, slots, live casino, crash games), account settings and responsible gambling limits set by the user.

2.2 Automatically collected data

• Browsing data: IP address, browser type and version, operating system, pages visited, session duration, and traffic source.
• Platform usage data: betting history, games accessed, amounts wagered, results, transactions carried out, and interactions with support.
• Device data: device identifier (for mobile access), screen resolution and language preferences.
• Cookie and similar technology data: as described in Section 8 of this Policy.

3How bet122 Uses Your Data

Data collected by bet122 is used exclusively for the following purposes, all directly related to the platform's operation and the services contracted by the user:

• Account operation: create, maintain, and manage your bet122 account, granting access to Sports Betting features (Brasileirão, Libertadores, Copa do Brasil), Live Casino, slots, crash games, and the VIP program.
• Financial transaction processing: process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer, including verification of ownership of the payment methods used.
• Identity verification and fraud prevention: carry out the mandatory KYC process required to release withdrawals, and identify and prevent fraudulent use of the platform, money laundering, or access by users under 18.
• Compliance with legal and regulatory obligations: comply with requirements from competent Brazilian authorities, including the Banco Central do Brasil, the Conselho de Controle de Atividades Financeiras (COAF) and other regulatory bodies in the betting sector.
• User communication: send transaction confirmations, security alerts, notifications about the VIP program (weekly cashback, level upgrades), updates on changes to the Terms and Conditions, and — with your consent — marketing communications about relevant promotions.
• Experience personalization: tailor game recommendations, promotions, and account dashboard content based on your usage history, within the limits of the consent you have provided.
• Responsible gambling: monitor usage patterns to identify behaviors that may indicate problem gambling and trigger proactive outreach from the support team, as described in bet122's responsible gambling policy.
• Platform improvement: analyze aggregated and anonymized browsing and usage data to identify usability issues, measure performance, and inform product development decisions.

4Legal Basis for Processing (LGPD)

All personal data processing carried out by bet122 is grounded in one of the legal bases set out in Article 7 of the LGPD. Below are the applicable legal bases for each type of processing:

• Contract performance (art. 7, V): the primary basis for processing the data needed to operate the account, process bets, handle Pix deposits and withdrawals, and deliver all other bet122 features. Without this data, the service cannot be provided.
• Compliance with a legal or regulatory obligation (art. 7, II): applicable basis for the KYC process, financial records retention, and information sharing with competent authorities (COAF, Central Bank, judicial authority).
• Legitimate interest (Art. 7, IX): applicable basis for platform security monitoring, fraud prevention, usage pattern analysis for responsible gambling, and sending essential operational communications. Legitimate interest is always weighed against user rights.
• Consent (Art. 7, I): applicable basis for sending marketing communications and personalizing recommendations based on usage history. Consent is collected explicitly and may be withdrawn at any time through the account dashboard without affecting access to services.

For sensitive data — if ever collected in specific support or responsible gambling situations — the applicable legal basis will be the data subject's explicit consent (art. 11, I of the LGPD).

5Data Sharing with Third Parties

Bet122 shares personal data with third parties only when strictly necessary for the platform's operation or to fulfill legal obligations. Under no circumstances is your data sold, transferred free of charge, or used to enrich third-party commercial databases.

The categories of third parties with whom data may be shared, and the respective justifications, are:

• Payment processors: to enable deposits and withdrawals via Pix (integration with the Banco Central's SPI), boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer. Data sharing is limited to the minimum information required for each transaction.
• Game providers (casino and slots): providers of the live casino games, slots, and crash games available on bet122. Session data required to load and run the games may be transmitted to these providers. No complete personal identification data is shared without technical necessity.
• Identity verification services: partners specializing in document validation for the KYC process, acting as processors under bet122's instructions and bound by confidentiality agreements and LGPD compliance obligations.
• Technology infrastructure: hosting providers, cloud storage, and security service providers that operate bet122's technical infrastructure. All providers are contractually required to uphold the same security and confidentiality standards applied by bet122.
• Competent authorities: data may be shared with the Banco Central do Brasil, COAF, Receita Federal, Ministério Público, or judicial or law enforcement authorities when required by a formal legal, judicial, or regulatory order, without prior user consent, as provided under the LGPD.

6Information Security

Bet122 employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure. The main security layers implemented include:

• 256-bit SSL encryption: all communication between the user's device and bet122 servers is encrypted using TLS 1.3, ensuring that registration data, login credentials, Pix deposits and account queries cannot be intercepted in transit.
• Secure password storage: user passwords are stored using salted hashing (bcrypt algorithm), meaning that not even bet122's own administrators have access to your password in plain text.
• Two-factor authentication (2FA): available as an additional layer of account protection, strongly recommended for all users — especially those at the VIP Platinum and Diamond levels.
• Financial data tokenization: credit and debit card numbers are never stored in full on bet122's servers. Processing is handled via tokens generated by PCI-DSS certified payment processors.
• Continuous monitoring: automated anomaly detection systems monitor transactions and access in real time, triggering alerts and preventive blocks whenever suspicious behavior is detected.
• Internal access control: access to users' personal data within bet122 is restricted to staff who require that information to perform their duties, with an audit log maintained for all access.
• Encrypted backups: data backups are performed regularly and stored in encrypted form at locations geographically separate from the main infrastructure.

In the event of a security incident that may pose a significant risk to data subjects, bet122 is committed to notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframes set out in the LGPD and the ANPD's incident regulation.

7How Long bet122 Retains Your Data

Personal data collected by bet122 is retained only for as long as necessary to fulfill the purposes described in this Policy or to meet legal and regulatory obligations. General retention periods are:

• Registration and identification data (name, CPF, email, phone number): kept for the full duration of the account and for up to 5 years after account closure, as required by anti-money laundering legislation (Law No. 9,613/1998) and COAF regulations.
• Financial data and transaction history: retained for 5 years after each transaction, in accordance with Brazilian tax and regulatory obligations.
• KYC documents (copies of national ID, driver's license, proof of address): retained for a minimum period of 5 years after account closure, unless a court order requires retention for a longer period.
• Betting history: retained for 3 years for dispute resolution, VIP program auditing and fulfillment of obligations to game providers.
• Browsing data and analytics cookies: retained for up to 13 months from the date of collection, in line with ANPD recommendations for session data and usage analytics.
• Support communication data: live chat records and support emails are retained for 2 years for quality assurance, training, and dispute resolution purposes.

Once the applicable retention periods expire, data is permanently deleted from bet122's systems or irreversibly anonymized, making any future identification of the data subject impossible.

If you request account deletion before any of these retention periods have expired, your data will be locked for operational use but retained solely to fulfill any legal obligations still in effect. Once those obligations expire, permanent deletion is carried out automatically.

8Cookies and Tracking Technologies

Bet122 uses cookies and similar technologies to ensure the platform works correctly, analyze site usage, and — with your consent — personalize your experience. Below is a straightforward explanation of each type of cookie used:

• Essential cookies (required): are required for the platform's basic functionality — keeping your session active after login, remembering language preferences, processing transactions, and ensuring secure browsing. These cookies cannot be disabled without affecting your use of bet122.
• Analytics cookies (optional): used to measure site performance, identify pages with loading issues, understand the most common navigation flows, and make informed product improvement decisions. Data is aggregated and anonymized — bet122 does not know who you are, only how users navigate the site in general.
• Preference cookies (optional): store your display preferences, such as games marked as favorites, applied filters, and layout settings. They make your experience smoother on future visits.
• Security cookies: identify suspicious behavior such as repeated login attempts, multiple simultaneous sessions or unusual browsing patterns. These are essential to bet122's anti-fraud system and cannot be disabled.

You can manage your cookie preferences at any time through your browser settings. The most popular browsers among Brazilian users — Chrome, Firefox, Safari, and Edge — offer controls to accept, block, or delete cookies from specific sites. Disabling non-essential cookies does not prevent you from using bet122's core features.

9Minors' Data

Bet122 is an adult entertainment platform, strictly prohibited for users under 18. The platform does not intentionally collect any personal data from minors and actively takes measures to prevent registration and access by this audience.

The age verification process includes:

• A valid CPF is required at registration — the CPF allows date-of-birth verification with the Receita Federal.
• Date-of-birth confirmation on the registration form as a mandatory requirement.
• Identity document verification during the KYC process, required to unlock withdrawals, which includes age confirmation via an official photo ID.

If bet122 identifies that a user is under 18, the account will be closed immediately, all collected data will be deleted from our systems, and any deposited funds will be returned to the original payment method after verification. Anyone who suspects that a minor has registered can report it by emailing suporte@bet122.best.

Parents or legal guardians who discover that a minor has used bet122 without authorization should contact the platform's support team immediately so that the appropriate steps can be taken with the utmost urgency.

10Your Rights as a Data Subject (LGPD)

The Lei Geral de Proteção de Dados (LGPD) grants you, as the data subject whose information is processed by bet122, the following rights, exercisable at any time and at no cost:

11International Data Transfer

Bet122's technical infrastructure may involve servers and service providers located outside Brazil. When this occurs — for example, for cloud storage services or international game providers — bet122 takes steps to ensure that the level of data protection is equivalent to that required by the LGPD.

Measures in place for international data transfers include:

• Execution of specific data protection contractual clauses with all international vendors that process data from Brazilian users.
• Preference for providers located in countries recognized by the ANPD as having data protection laws adequate or equivalent to the LGPD.
• Periodic assessment of international suppliers' compliance with applicable standards.

Bet122 never transfers data to countries or jurisdictions that do not offer minimum protection guarantees equivalent to the LGPD, unless a contractual or regulatory basis legitimizes that transfer, as set out in Article 33 of the LGPD.

12Contact, DPO & Reporting Channel

Bet122 provides the following channels for privacy and data protection inquiries:

• General support 24/7: live chat on the platform, available in Portuguese, for operational questions about privacy, rights requests, and security incident reporting.
• Privacy email: suporte@bet122.best — for formal LGPD rights requests, security vulnerability disclosures, or detailed questions about this Policy.

Bet122 designates a Data Protection Officer (DPO), reachable at the email above with the subject line "Subject: DPO / Data Protection". The DPO serves as the official point of contact with the Autoridade Nacional de Proteção de Dados (ANPD) and with data subjects who wish to formally exercise their rights.

If you believe that bet122 has handled your data improperly and have not received a satisfactory response through the channels above, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory authority responsible for enforcing the LGPD in Brazil.

13Changes to this Privacy Policy

Bet122 may update this Privacy Policy periodically to reflect changes in applicable law, the services offered, or data processing practices. Any material change will be communicated with a minimum advance notice of 15 calendar days through:

• Prominent notice on the platform (banner or notification in the account dashboard).
• Email to the registered address, with a summary of the main changes in plain language.

The date of the last update is always shown at the top of this document. Continued use of bet122 after the effective date of any changes constitutes acceptance of the updated version of the Policy.

If any changes involve processing data for new purposes that require consent, bet122 will collect specific consent before beginning the new processing — it will not rely solely on continued use as acceptance.