Bet969 Privacy Policy – Your Data, Protected by the LGPD

Bet969, accessible at bet969.best, is the controller of the personal data collected and processed under this Privacy Policy. As the data controller, bet969 determines the purposes and means of processing users' personal data on the platform.

The Data Protection Officer (DPO), as required by art. 41 of the LGPD, can be reached at privacidade@bet969.best. The DPO is responsible for receiving requests from data subjects, guiding the internal team on privacy practices, and acting as the communication channel with Brazil's National Data Protection Authority (ANPD).

Bet969 collects personal data in the following categories, always observing the data minimization principle — we only collect what is strictly necessary for each specific purpose:

• Registration data: full name, CPF, date of birth, email address, mobile number, and, where applicable, full residential address.
• Identity documents: image of your RG, CNH, or passport and a selfie with the document, collected during the mandatory KYC verification process before your first withdrawal.
• Financial data: Pix key, withdrawal destination bank, deposit and withdrawal history (amount, date, method used — Pix, bank slip, credit or debit card, PicPay, Mercado Pago, TED via Nubank, Itaú, Bradesco, Banco do Brasil, and others). Full card details are tokenized by the PCI DSS gateway and never stored directly by bet969.
• Gaming data: full betting history across slots, live casino, blackjack, baccarat, roulette, crash games (Aviator, JetX), and Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, NBB, e-sports), including amounts wagered, winnings, losses, and session duration.
• Technical data: IP address, device type and version, operating system, web browser, screen resolution, pages visited, access times, and session identifiers.
• Communications: content of messages exchanged with support via live chat, email, or any other channel, including support tickets and call records where applicable.

Personal data from bet969 users is collected through the following means:

• Registration form: when creating your account, you provide your name, CPF, email, phone number, and date of birth directly.
• KYC verification process: when submitting documents to unlock your first withdrawal.
• Financial transactions: every deposit via Pix, boleto, card, PicPay, Mercado Pago, or TED automatically generates a record of the date, amount, and payment method.
• Platform usage: your bets, game choices, session duration, and browsing activity are automatically logged by bet969's systems.
• Cookies and tracking technologies: when browsing bet969.best, cookies and tracking pixels automatically collect technical data.
• Support interactions: when you reach out via live chat or email, your messages are logged for quality and security purposes.

Bet969 uses your personal data exclusively for legitimate, specific, and disclosed purposes. The main purposes are:

• Account creation and management: process your registration, authenticate logins, maintain account history, and communicate relevant changes.
• Transaction processing: confirm deposits via Pix, boleto, credit or debit card, PicPay, and Mercado Pago; process withdrawals to the Pix key or TED account linked to your CPF.
• Identity verification (KYC): verify your identity before your first withdrawal and during security reviews, in order to comply with legal anti-money laundering obligations.
• Provision of gaming services: operating slots, Live Casino, crash games, roulette, and Sports Betting; calculating and crediting winnings; managing bonuses and VIP cashback.
• Fraud prevention and security: monitor suspicious transactions and behaviors, identify multiple accounts linked to the same CPF, detect bot usage, and protect platform integrity.
• Responsible gambling: monitor gambling patterns that may indicate problematic behavior, activate protective tools, and fulfill regulatory obligations in this area.
• Service communications: sending transactional emails (deposit confirmations, withdrawal notifications, security alerts). These communications are mandatory and cannot be opted out of without closing your account.
• Personalized marketing: send bonus offers, Brasileirão promotions, Copa do Brasil campaigns, and other promotions — only with your express consent, which may be withdrawn at any time.
• Platform improvement: analyze usage data (anonymized where possible) to improve the technical experience and games catalog.

The LGPD requires that all personal data processing have a legal basis. At bet969, processing is carried out on the following grounds:

• Contract performance (art. 7, V): processing necessary to deliver the contracted service — account registration, financial transactions via Pix and other methods, game operation, and VIP bonus calculation.
• Legal obligation (art. 7, II): KYC identity verification, retention of transaction and betting records as required by anti-money laundering legislation and sports betting market regulations.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, detection of multiple accounts, and monitoring for problem gambling — always balancing bet969's interests against the rights of the data subject.
• Consent (art. 7, I): sending personalized marketing communications (bonuses, promotions, news). Consent is optional, granular, and revocable at any time with no impact on access to the service.

Bet969 implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption across all transmissions between your device and bet969's servers.
• Encryption at rest for sensitive data stored in databases (KYC documents, financial data).
• Role-based access control (RBAC): each bet969 team member only accesses the data required for their specific role.
• Multi-factor authentication required for all internal access to data systems.
• Continuous monitoring of unauthorized access attempts, with automatic alerts and an incident response protocol.
• Encrypted backups performed on a regular basis and stored in a secure location separate from the main servers.
• Periodic security audits conducted by an internal team and, annually, by a third-party information security firm.

No security measure offers absolute protection. In the event of a security incident that may impact your data, bet969 will follow the procedures described in Section 14 of this policy.

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Active account data: retained for the full duration of the contractual relationship (for as long as the account remains active).
• Financial and transaction data: retained for 5 years after account closure, in compliance with applicable Brazilian tax and anti-money laundering legislation.
• KYC Documents: retained for 5 years after account closure, as required by Law No. 9.613/1998 (Anti-Money Laundering Law) and COAF regulations.
• Access logs: retained for 6 months, pursuant to the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes.
• Marketing data (consent-based): deleted upon withdrawal of consent or account closure, whichever comes first.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized.

Bet969 shares personal data with third parties only in the following situations, always with appropriate safeguards in place:

• Payment providers: payment gateways to process transactions via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED. These partners receive only the minimum data necessary to process the transaction and are contractually bound to confidentiality and compliance with the LGPD and PCI DSS.
• Game providers: companies such as Evolution Gaming, Pragmatic Play, Playtech, and Ezugi receive anonymized or pseudonymized identifiers to operate game sessions. They do not receive your full name, CPF, or financial data.
• Identity verification services (KYC): specialized platforms for document verification and fraud prevention, contractually required to comply with the LGPD.
• Cloud infrastructure and hosting: cloud computing service providers used to host the platform, under contracts that include data protection clauses.
• Public authorities: in compliance with a court order, request from the Public Prosecutor's Office, determination by COAF, or another competent authority. bet969 will notify the user whenever legally permitted to do so before fulfilling such requests.

Some of bet969's technology partners operate or host servers outside Brazil. Whenever international transfers of personal data occur, bet969 applies the following safeguards as required by the LGPD:

• Transfer to countries or international organizations that provide a level of personal data protection equivalent to that established by the LGPD, as assessed by the ANPD.
• Use of specific contractual clauses, standard contractual clauses, or other instruments approved by the ANPD to ensure the recipient provides a level of protection equivalent to that required under Brazilian law.
• Transfer only when necessary for the performance of a contract or the exercise of legal rights.

If you would like information about specific international data transfers related to the processing of your data, please contact the DPO at privacidade@bet969.best.

Bet969 uses cookies and similar technologies for a variety of purposes. Here's what each category does:

• Strictly necessary cookies: essential for the site's basic operation — maintaining login sessions, security, and core preferences. These cannot be disabled without compromising access to the platform.
• Performance and analytical cookies: collect data on how users browse the site (most visited pages, time spent, errors encountered) to improve the experience. Data is aggregated and anonymized wherever possible.
• Functionality cookies: store user preferences, such as language and display settings, to personalize the experience on future visits.
• Security cookies: detect fraudulent access attempts, suspicious simultaneous logins, and other behaviors that may indicate account compromise.

You can manage and disable cookies in your browser settings. Most modern browsers — Chrome on Android, Safari on iPhone, Firefox — allow granular control by cookie type. Disabling non-essential cookies may affect some personalization features, but will not prevent access to the platform.

Bet969 may send marketing communications — emails about new bonuses, Brasileirão and Copa do Brasil promotions, VIP cashback, and other offers — only with express consent given during registration or later in your account settings.

If you no longer wish to receive marketing communications from bet969, you can opt out in three ways:

• By clicking the "Unsubscribe" link in the footer of any marketing email you receive.
• By adjusting your communication preferences under "My Account" > "Notifications" on the platform.
• By submitting a request to the DPO at privacidade@bet969.best.

Marketing opt-outs are processed within 5 business days. After opting out, you will continue to receive only mandatory transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts.

Bet969 services are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors.

If we determine that an account was created by a person under 18, the account will be closed immediately, all personal data will be deleted as promptly as possible (subject only to mandatory legal retention periods required for regulatory compliance), and any real-money balance deposited will be refunded upon verification of the legal guardian's identity.

To exercise any right guaranteed by the LGPD (detailed in the table above), submit a formal request to the bet969 Data Protection Officer with the following information:

• Full name and CPF registered with bet969.
• Email address linked to the account.
• A clear description of the right you wish to exercise and the specific data involved.
• A photo ID for verification purposes (national ID card, driver's license, or passport).

Bet969 will respond within 15 business days from the date the complete request is received. For complex or high-volume requests, this deadline may be extended by an additional 15 business days, with prior notice given to the data subject.

If you believe your request was not handled appropriately, you may file a complaint directly with the National Data Protection Authority (ANPD), as provided under art. 55-J, IV of the LGPD.

In the event of a security incident resulting in unauthorized access, leakage, destruction, or any form of improper handling of personal data that may pose a significant risk or harm to data subjects, bet969 will follow these procedures:

• Immediate containment of the incident and technical investigation to identify the root cause and full extent of the breach.
• ANPD notification within the deadline required by current regulations (currently 2 business days for high-risk incidents).
• Direct email notification to affected users, describing the nature of the data involved, potential consequences, and the steps taken by bet969 to mitigate the damage.
• Provision of a dedicated channel for questions from affected data subjects.

Bet969 may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or the services offered. Relevant changes will be communicated by email to all account holders at least 7 calendar days before it came into effect.

The date of the last update is displayed at the top of this page. The current version of this Privacy Policy is always the one published at bet969.best/privacy-policy. Continued use of the platform after the effective date constitutes acceptance of the changes.

If you do not agree with the changes, you may close your account before the effective date, as described in the Terms and Conditions, and request the deletion of your data by contacting the DPO.

For any questions, requests, or complaints related to the processing of personal data by bet969, please contact the Data Protection Officer (DPO):

• DPO email: privacidade@bet969.best — response time: up to 15 business days.
• General email: contato@bet969.best — for general customer support inquiries.
• Live chat: available 24/7 at bet969.best for urgent account and security matters.

For requests related to LGPD rights, please include your full name, registered CPF, and a detailed description of your request to help us process it faster.