Privacy Policy 816bet – Your Data Protected

For the purposes of the General Data Protection Law (LGPD – Law 13.709/2018), the controller of personal data collected on the 816bet platform, accessible at 816bet.best, is the company operating this platform, which determines the purposes and means of processing Brazilian users' information.

816bet has appointed a Data Protection Officer (DPO), responsible for serving as the communication link between the controller, data subjects, and the Brazilian National Data Protection Authority (ANPD). The DPO is also responsible for guiding employees on data protection practices and ensuring ongoing LGPD compliance.

This Privacy Policy applies to all registered users and visitors of the 816bet platform, regardless of which product they use — Sports Betting, slots, live casino, or any other service available on the platform.

816bet collects personal data at various points during your interaction with the platform. All categories of data processed and the context in which each is collected are listed below:

816bet does not collect sensitive personal data as defined under art. 5, II of the LGPD (such as health data, biometrics, sexual orientation, or religion), except where the platform is made aware of a vulnerability situation related to responsible gambling — in that case, the data is processed on the basis of legitimate interest in protecting the user.

816bet uses your personal data exclusively for the purposes described below, always grounded in one of the legal bases established under the LGPD:

• Contract performance: create and manage your account, process deposits and withdrawals via Pix and other Brazilian payment methods, settle sports bets and casino games, provide customer support in Portuguese, and send operational communications about your account.
• Compliance with a legal obligation: verify your identity (KYC) as required by gambling regulations (Law 14.790/2023) and anti-money laundering rules (Law 9.613/1998); maintain financial transaction records for the period required by Brazilian tax legislation.
• Legitimate interest: prevent fraud, detect platform misuse, identify multiple accounts, continuously improve the user experience based on platform usage behavior analysis, and ensure system security.
• Consent: sending marketing communications and promotions by email, SMS, or WhatsApp. You may withdraw this consent at any time by clicking "unsubscribe" in our emails or by contacting support.
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and trigger protective tools when necessary, in line with 816bet's responsible gambling guidelines.

816bet does not sell personal data. Information is shared only in the situations below, and always limited to the minimum necessary for each purpose:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer, we share the necessary financial data with our payment processing partners, all of whom are certified under PCI DSS standards.
• Game providers: to make slots, live casino, and other games available, we share an anonymous user identifier with our partner providers (Pragmatic Play, NetEnt, Evolution, and others). Providers do not receive your CPF, full name, or contact details.
• Identity verification providers (KYC): your identity is verified through partners specialized in regulatory compliance, who receive the necessary documents to confirm your identity and address and delete them once the process is complete.
• Regulatory authorities and government bodies: when required by law, court order, or applicable regulation, 816bet shares data with the Receita Federal, Banco Central, COAF, and other competent authorities.
• Technology providers: we use cloud infrastructure, security analysis, and fraud prevention services. These providers act solely as data processors under 816bet's instructions and are bound by data processing agreements that ensure the protection of your information.

Any new data sharing not covered by this policy will be communicated to the data subject in advance and, where required, will require your explicit consent.

816bet uses cookies and similar technologies to enhance your experience on the platform, ensure session security, and — with your consent — deliver personalized content and promotions relevant to you.

Types of cookies used:

• Essential cookies: required for the platform's basic operation — session authentication, account security, and language preference settings. They cannot be disabled without compromising platform functionality.
• Performance cookies: collect information about how users navigate 816bet (pages visited, load times, errors) to identify opportunities for technical improvement. They do not identify users individually.
• Functionality cookies: remember your usage preferences, such as your favorite sport, display settings, and in-platform search history. They improve personalization without sharing your data with third parties.
• Analytical cookies: we use aggregated data analysis to understand overall user behavior and improve our products. Data is anonymized before any analysis takes place.

You can manage your cookie preferences at any time through your browser settings. However, disabling essential cookies may prevent access to your account or compromise session security. For more on managing cookies in Chrome, Safari, Firefox, and other popular browsers in Brazil, refer to the privacy settings of the browser you use.

816bet applies robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction. Key measures in place include:

• Encryption of data in transit: all communications between your device and 816bet's servers are protected by SSL/TLS encryption with 256-bit keys.
• Encryption of data at rest: sensitive data stored at rest — especially KYC documents and financial data — is encrypted on our servers, rendering it unreadable even in the event of unauthorized physical access.
• Role-based access control (RBAC): only employees with a proven operational need are granted access to specific categories of personal data, and all access is logged for audit purposes.
• Two-factor authentication (2FA): available to all 816bet users and mandatory for internal administrative access. We strongly recommend enabling 2FA on your account.
• Continuous monitoring: automated threat detection systems monitor 816bet's servers and network around the clock, with an incident response team on standby to act immediately whenever an anomaly is detected.
• Periodic security testing: we conduct penetration testing and security audits with independent specialized firms to identify and remediate vulnerabilities before they can be exploited.

Despite all these measures, no system is 100% immune to incidents. If you suspect unauthorized access to your 816bet account, contact our 24/7 live chat support immediately so we can block access and investigate the situation as a top priority.

The LGPD grants you, as the data subject of personal data processed by 816bet, the following rights, all exercisable free of charge:

• Confirmation and access: find out whether 816bet processes your personal data and, if so, receive a full copy of the information we hold about you.
• Correction: request the update or correction of any data that is inaccurate, incomplete, or out of date.
• Anonymization, blocking, or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
• Portability: receive your data in a structured, interoperable format for transfer to another controller, where technically feasible.
• Deletion of consent-based data: request the deletion of data processed on the basis of your consent, such as data used to send marketing communications.
• Information on data sharing: know which companies or entities 816bet has shared your personal data with.
• Consent withdrawal: withdraw consent given for processing based on that legal basis, without affecting the lawfulness of any processing carried out prior to withdrawal.
• Objection: object to processing carried out on the basis of legitimate interest, provided there is no legal obligation requiring it.
• Review of automated decisions: request human review of any decision made exclusively by automated means that affects your interests, such as an account block triggered by a fraud detection system.

816bet retains users' personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, always respecting the minimum retention periods required by Brazilian law.

Once retention periods expire, data is securely and irreversibly deleted from all systems — including backups — or anonymized so it can no longer be linked to the data subject.

The 816bet platform is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process requires age confirmation, and 816bet conducts identity verification (KYC) to confirm a user's actual age before authorizing the first withdrawal.

If 816bet determines that an account was created by someone under 18, the account will be immediately closed and the personal data will be deleted from our systems. Any deposited balance will be refunded to the original payment method, minus any winnings obtained during the irregular use of the platform.

If you are a parent or legal guardian and believe a minor may have created an 816bet account using false information, please contact our 24/7 support immediately so we can investigate and take urgent action.

816bet may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable legislation, or services offered. Any changes will be communicated at least 15 days before taking effect, through:

• Email notification to all registered users with an active account.
• Prominent notice on the 816bet platform homepage.
• Revision date updated at the top of this page.

Continued use of the platform after changes take effect constitutes acceptance of the updated version of this policy. If you disagree with the changes, you may close your account and request an export or deletion of your data before the effective date.

For changes that involve a significant shift in how your personal data is processed, or that require new consent, we will ask for your express agreement before the new practices are applied to your account.