Br333bet Privacy Policy – How We Handle Your Data

01Scope and Application of this Policy

This Privacy Policy ("Policy") describes how br333bet ("Platform", "we") collects, stores, uses, and protects the personal data of users ("you", "data subject") who access and use the services available at br333bet.best. It applies to all products and services of br333bet, including Sports Betting, online casino, crash games, slots, live casino, and all features available on the platform.

When you create an account, make a deposit, place a bet, or simply browse the br333bet, you acknowledge that you have read this Policy and consent to the processing of your data as described herein. If you do not agree with any part of this Policy, we recommend that you do not use the platform's services.

This Policy is an integral part of the Terms and Conditions of the br333bet and should be read alongside them. In the event of any conflict between the two documents regarding the processing of personal data, this Policy shall prevail.

02What Data We Collect and How

The br333bet only collects the data necessary to provide its services safely and efficiently. We do not collect unnecessary information, and we do not store data that lacks a specific, documented purpose.

Data you provide directly during registration:

• Full name
• CPF (Individual Taxpayer Registration)
• Date of birth
• Email address
• Mobile number
• Residential address (for verification and compliance purposes)
• Access password (stored in encrypted format — never as plain text)

Data collected during platform use:

• Sports betting history (Brasileirão, Libertadores, Copa do Brasil, UFC, etc.)
• Casino session history (slots, roulette, crash games, live casino)
• Financial transaction history (deposits via Pix, boleto, card; withdrawals via Pix)
• IP address and device information (phone, computer, operating system, browser)
• Date, time, and duration of usage sessions
• Account preferences and settings

Data collected for identity verification (KYC):

• Government-issued photo ID (RG, CNH, or passport)
• Proof of address
• Selfie for facial verification (when required by regulation)

03How We Use Your Data

The br333bet uses collected data exclusively for the following purposes, each supported by an appropriate legal basis under the LGPD:

The br333bet does not use your data for purposes other than those listed above without notifying you in advance and, where required, obtaining your explicit consent.

04Sharing Data with Third Parties

The br333bet does not sell users' personal data. Information is only shared with third parties when strictly necessary for platform operations or when required by law, always with appropriate safeguards in place.

The categories of recipients with whom we may share your data are:

• Payment processors: To process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago. These partners receive only the minimum data necessary to process each transaction and are contractually required to protect it.
• Game providers: Slots, live casino, and crash games providers need basic session information to operate their games on the platform. We do not share full personal data — only encrypted session identifiers.
• Identity verification services (KYC): To handle user document verification when required, we work with partners specialized in regulatory compliance.
• Competent authorities: To comply with legal obligations, we may share data with regulatory bodies, the Federal Revenue Service (Receita Federal), COAF, or law enforcement authorities when required by a court or legal order.
• IT infrastructure providers: Hosting, cloud storage, and digital security companies that support the platform's technical operations, always under contract with specific data protection clauses.

All third parties with access to user data from br333bet are contractually required to: (i) use data solely for the authorized purposes; (ii) implement appropriate security measures; (iii) not subcontract without prior authorization; and (iv) notify br333bet immediately in the event of a security incident.

05Personal Data Security

Protecting your data is both a technical and operational priority for br333bet. We have implemented multiple layers of security to minimize the risk of unauthorized access, data leaks, or misuse of your information.

The security measures implemented by br333bet include:

• 256-bit SSL/TLS Encryption in all communication between the user's device and the platform's servers.
• Passwords stored with cryptographic hashing — br333bet never stores your password in readable form, not even internally.
• Two-factor authentication (2FA) available for users who want to add an extra layer of protection to their account access.
• Continuous security monitoring with automated intrusion detection and suspicious activity monitoring systems.
• Internal access controls — only employees with a legitimate need are granted access to user data, and all access is logged in an audit trail.
• Encrypted backups of data across multiple locations to ensure availability without compromising security.
• Periodic security testing including vulnerability assessments and attack simulations.

Despite all the measures in place, no system is 100% breach-proof. We therefore recommend you also follow good digital security practices: use strong, unique passwords, never share your credentials with anyone, and enable 2FA on your br333bet.

06Cookies, Tracking & Browsing Data

The br333bet uses cookies and similar technologies to enhance the platform experience, ensure essential features work correctly, and understand how users interact with the site. See below for the types of cookies we use:

• Essential cookies: Required for the platform's basic functionality — keeping user sessions active, remembering language preferences, and ensuring secure access. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Store preferences such as preferred layout, last sport viewed (Brasileirão, football, basketball, etc.), and account settings to deliver a more personalized experience.
• Analytical cookies: They collect aggregated information about how users interact with the platform — most visited pages, session duration, navigation flow — to help improve the product. This data is anonymized wherever possible.
• Security cookies: Used to detect suspicious behavior, prevent fraud, and protect the integrity of the platform and its users.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies may affect the experience in certain areas of the platform, but will not prevent access to the core features of br333bet.

In addition to cookies, br333bet automatically collects browsing data such as IP address, device type (mobile or desktop), operating system, browser, and internet service provider. This information is used for security, technical diagnostics, and platform performance improvement — never for individual identification for external advertising purposes.

07Data Retention and Deletion

The br333bet retains users' personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with the minimum retention periods required by Brazilian law.

The criteria that determine retention periods include:

• Registration and account data: Retained for as long as the account remains active. Following voluntary account closure, basic identification data is kept for a minimum of 5 years for regulatory compliance purposes.
• Financial and transaction data: Retained for a minimum of 5 years after the last transaction, in compliance with Brazilian anti-money laundering legislation and Central Bank regulations.
• Identity verification documents (KYC): Retained for a minimum of 5 years from the date of collection, as required by law.
• Betting and game history: Kept for as long as the account is active and for up to 2 years after closure, for audit and dispute resolution purposes.
• Browsing data and security logs: Retained for up to 12 months, unless required for an ongoing security incident investigation.

When data is no longer needed and the retention period has expired, br333bet performs secure deletion or irreversible anonymization of the information, ensuring it can no longer be linked to any specific individual.

08Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) guarantees you, as the data subject, a set of rights that br333bet is committed to upholding and facilitating. You can exercise any of these rights at any time, free of charge, through the platform's support channels.

See your rights below and how to exercise them at br333bet:

09Protection of Minors

The services of br333bet are intended exclusively for individuals aged 18 and over. We do not intentionally collect personal data from anyone under 18, and we do not allow users in that age group to register or use the platform.

During registration, the user confirms they are 18 years of age or older. Age verification is carried out through the CPF provided, which is checked to confirm the date of birth. Additionally, the KYC process (identity verification using an official document) also includes confirmation of legal age.

If the br333bet identifies that data belonging to a minor under 18 has been inadvertently collected, it will take the following immediate steps:

• Immediate account closure.
• Blocking of any available balance.
• Deletion of all personal data collected from the minor, except where retention is required by a legal obligation.
• Notification to the legal guardian, where contact details can be identified.

If you suspect that someone under the age of 18 is using br333bet, please contact us immediately at suporte@br333bet.best so we can take the necessary steps.

10Data Protection Officer and How to Get in Touch

The br333bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the LGPD, as well as serving as the official point of contact for data subject requests and communications with the National Data Protection Authority (ANPD).

For any request related to your personal data — including exercising your rights under the LGPD, questions about this Policy, or reporting a privacy incident — please use the following channels:

• Data Protection Officer email: suporte@br333bet.best (subject line: "Privacy – LGPD")
• Live chat: Available on the platform after login, 24 hours a day.
• Response time: Up to 15 calendar days for LGPD rights requests; up to 72 hours for general email inquiries; under 2 minutes on average via live chat.

The br333bet is committed to responding to all requests clearly, completely, and at no cost. In exceptional cases where a request is excessive or repetitive, we may charge a reasonable administrative fee or decline to fulfill it, notifying the data subject of the reason.

This Policy may be updated periodically to reflect changes in the privacy practices of br333bet or in response to new regulations. When changes are material, we will notify you by email at least 15 days in advance. The date of the last update is always shown at the top of this document.