Privacy Policy of 912bet – LGPD

The 912bet is the controller of the personal data collected and processed in accordance with this Policy. We operate the sports betting and online casino platform available at 912bet.best, intended exclusively for Brazilian users aged 18 and over.

The data protection officer (DPO) of 912bet can be reached at any time at contato@912bet.best for questions related to privacy, the exercise of data subject rights, and any complaints regarding the processing of personal data carried out by the platform.

The 912bet applies the principle of data minimization and collects only the information necessary for each specific purpose. The categories of data processed by the platform are listed below:

Sensitive data – such as racial origin, political opinion, health information, or sexual orientation – is not collected by 912bet under any circumstances.

The data collected by 912bet are used exclusively for the purposes listed below. No data is processed for purposes incompatible with the objectives disclosed at the time of collection:

• Service delivery: account creation and management, processing of Sports Betting and casino game wagers, progressive jackpots, slots, and other platform products;
• Financial processing: deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago; withdrawals via Pix and TED to accounts at banks including Nubank, Itaú, Bradesco, Caixa, and Banco do Brasil;
• Identity verification (KYC): confirming that the user is who they claim to be, preventing fraud, and meeting regulatory requirements;
• Anti-money laundering: monitoring of transaction patterns in accordance with legal requirements applicable to the sector;
• Responsible gambling: monitoring of behavioral patterns to identify possible signs of problem gambling and trigger appropriate protection tools;
• Account communications: transaction notifications, security alerts, registration confirmations, and operational communications;
• Marketing opt-in: sending promotions, offers, and news to users who have expressly consented to receiving such communications — with an easy opt-out option available at any time;
• Platform improvement: analysis of aggregated and anonymized data to understand usage patterns and improve the user experience on 912bet.

As required by the LGPD, all personal data processing carried out by 912bet relies on one of the legal bases set out in article 7 of Law No. 13.709/2018. The main bases we rely on are:

• Contract performance (art. 7º, V): processing necessary to deliver the Sports Betting and online casino services contracted by the user upon registering on the platform;
• Compliance with a legal obligation (art. 7, II): data processed to meet regulatory, tax, anti-money laundering, and identity verification requirements imposed by Brazilian law;
• Consent (Art. 7, I): for marketing communications and non-essential cookies, we collect express consent and provide a clear mechanism for withdrawal;
• Legitimate interest (art. 7, IX): for purposes such as platform security, fraud prevention, and service improvement, provided that 912bet's interests do not override the fundamental rights and freedoms of the data subject.

The 912bet does not sell, rent, or transfer users' personal data to third parties for commercial or advertising purposes. Data is shared only in the strictly necessary situations listed below:

• Payment processors: financial data is shared with Pix, boleto, card, and wire transfer payment processing providers solely to enable transactions authorized by the user. All partners are contractually required to protect data in accordance with the LGPD;
• Game providers: casino software providers (such as Microgaming, NetEnt, Pragmatic Play, and Evolution Gaming) receive only the technical identifiers required to operate the games. No complete personally identifiable information is shared unless strictly necessary;
• Identity verification (KYC): specialist providers for document and CPF validation who assist in the account verification process, contractually bound to the same level of data protection as 912bet;
• Legal obligation: data may be shared with competent authorities (Federal Revenue, Federal Police, COAF, Judiciary) when required by law, court order, or official investigation;
• Protection of rights: in the event of a dispute, proven fraud, or legal proceedings, relevant data may be used to defend the rights of 912bet or other users.

No data is transferred outside Brazil without adequate protections equivalent to those required by the LGPD, except where required by law or where the user has given express consent.

The 912bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and carry out performance analysis. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform, such as maintaining authenticated sessions and security preferences. They cannot be disabled without compromising your use of 912bet;
• Analytical cookies: collect aggregated, anonymized data on how users navigate the platform, enabling us to identify areas for improvement. We use analytics tools with enhanced privacy settings;
• Preference cookies: store settings chosen by the user, such as language and notification preferences, so they don't need to be reconfigured on every visit;
• Marketing cookies (opt-in): used only with the user's express consent for relevant communication personalization. Consent can be withdrawn at any time in the account settings.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning properly. For non-essential cookies, consent can be withdrawn at any time without affecting your access to the services of 912bet.

Protecting user data is an operational priority for 912bet. We implement multiple layers of technical and organizational security to protect information against unauthorized access, loss, alteration, or improper disclosure:

• Encryption in transit: all communication between the user's device and 912bet's servers is protected by 256-bit SSL/TLS encryption — the same standard adopted by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil;
• Encryption at rest: sensitive data stored on 912bet's servers is encrypted at rest using robust algorithms;
• Access control: only employees with a specific operational need have access to personal data, and that access is logged and audited on a regular basis;
• Enhanced authentication: the platform supports two-factor authentication (2FA) for additional protection of user accounts;
• Continuous monitoring: automated systems monitor suspicious access attempts and anomalous patterns 24 hours a day;
• Security testing: we conduct periodic vulnerability and penetration assessments to identify and remediate potential weaknesses before they can be exploited.

The 912bet retains personal data for as long as necessary to fulfill the purposes described in this Policy. The general retention periods applied are:

• Registration and identity data: retained for as long as the account remains active. After account closure, identification data is kept for 5 years to meet legal and tax obligations;
• Financial data and transaction history: retained for 5 years after the last transaction, in compliance with Brazilian Federal Revenue requirements and anti-money laundering legislation;
• Betting and gaming history: retained for 2 years after the last activity for responsible gambling purposes and dispute resolution;
• Technical access logs: retained for 6 months in accordance with the Brazilian Internet Civil Framework (Lei nº 12.965/2014);
• Marketing data (consent): retained while consent remains active. After consent is withdrawn, deleted within 30 days.

Once retention periods expire, data is securely and irreversibly deleted or anonymized so that the data subject can no longer be identified. Early deletion requests will be fulfilled to the extent they do not conflict with the legal obligations of 912bet.

The 912bet facilitates the exercise of all rights guaranteed under the LGPD. To exercise any right relating to your personal data, you may:

• Live chat: access the platform and start a conversation with our support team, available 24 hours a day in Brazilian Portuguese;
• Email: send your request to contato@912bet.best with the subject line "Privacy – [your right]" and your registered CPF for identification purposes;
• User area: some operations, such as updating contact details and managing marketing consent, can be done directly in your account settings.

The 912bet responds to all rights requests within 15 business days from the date of receipt, as established by the LGPD. If additional information is needed to identify the data subject, the deadline runs from the date that information is confirmed.

If you believe 912bet has not adequately addressed your request, you may file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing compliance with the LGPD in Brazil.

The 912bet is an online betting and casino platform intended exclusively for users aged 18 and over. Registration and use of our services by anyone under 18 is strictly prohibited.

To enforce this requirement, 912bet verifies the user's CPF at registration and may request additional identity documents during the KYC verification process. Any account identified as belonging to a minor will be closed immediately and the data will be deleted.

If you are the parent or guardian of a child or teenager and suspect they have accessed the 912bet, please contact us immediately at contato@912bet.best or via live chat. We will handle the matter with top priority and full seriousness.

The 912bet may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or service improvements. The "Last updated" date at the top of this page indicates when the current version was published.

For material changes that affect the rights of data subjects or substantially modify how we process data, 912bet will notify users with an active account via their registered email at least 15 days before the changes take effect.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated practices described in the revised Policy. If you do not agree with the changes, you may close your account and request deletion of your data as described in Section 9 of this document.

Previous versions of this Policy are archived and can be requested by emailing contato@912bet.best for reference or comparison purposes.

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you may contact 912bet through the following channels:

• DPO Email: contato@912bet.best – for formal LGPD rights requests, privacy complaints, and data processing inquiries;
• Live chat: available 24 hours a day, 7 days a week, directly on the 912bet.best platform – for general inquiries and immediate support in Brazilian Portuguese;
• Email subject: use "Privacy – [request type]" in the subject line so your message is routed directly to the data protection officer.

The 912bet commits to responding to all privacy-related requests within the deadlines established by the LGPD, handling each case with seriousness, transparency, and respect for the data subject.