Privacy Policy of bet959 – Data Protection & LGPD

This Privacy Policy describes how bet959 collects, stores, uses, protects, and shares the personal data of users on the platform available at bet959.best. By creating an account, using any bet959 service, or simply browsing the site, you acknowledge that you have read and understood this policy.

Bet959 is a Sports Betting and online casino platform exclusively serving the Brazilian market. Our operations cover football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, basketball (NBB), MMA/UFC, e-sports, crash games, slots, and live casino. Across all these activities, we collect and process personal data to deliver our services and keep every user safe.

This policy was drafted in compliance with Brazil's General Personal Data Protection Law (LGPD – Law No. 13,709, of August 14, 2018), which governs the processing of personal data in Brazil. We are committed to handling your data with transparency, security, and respect — no fine print, no surprises.

For the purposes of the LGPD, the controller of personal data collected through the bet959 platform is the company responsible for operating bet959.best. As the data controller, bet959 is responsible for all decisions regarding the processing of your personal data — what data to collect, for what purpose, how long to retain it, and with whom to share it when necessary.

Bet959 appoints a Data Protection Officer (DPO) responsible for ensuring this policy's compliance with the LGPD and for handling data subject requests. The DPO's contact details are available in Section 13 of this policy.

This Privacy Policy applies to all personal data collected via the web platform, mobile app, registration forms, support chat, financial transactions, and any other interactions between the user and bet959.

Bet959 collects personal data at different points during your interaction with the platform. The categories of data and the contexts in which each is collected are listed below:

Bet959 does not collect sensitive data such as racial or ethnic origin, religious belief, political opinion, or genetic or biometric data, except where strictly required for identity verification under applicable law. Credit and debit card details are not stored in full on bet959's servers — payment processing is handled by certified payment gateways using tokenization technology.

Every piece of data collected by bet959 has a specific, declared purpose. We do not process data beyond what is necessary to fulfill those purposes — this is the data minimization principle established by the LGPD. The main purposes are:

• Service provision: account creation and management, bet processing, balance credits and debits, payments via Pix, boleto bancário, card, and other accepted methods, bonus distribution, and VIP Program management;
• Identity verification (KYC): age verification (minimum 18 years), bank account ownership, and fraud and money laundering prevention as required by law;
• Account security: detection of unauthorized access, monitoring of suspicious activity, and prevention of platform misuse;
• Customer support: 24h chat support, dispute resolution, handling of requests, and maintenance of communication history;
• Account communications: transaction notifications, security alerts, information about active promotions, and updates to terms and conditions;
• Continuous platform improvement: usage analysis to identify bugs, improve the mobile experience, and develop new features;
• Responsible gambling: monitoring of gaming patterns to identify risk behaviors and trigger the available self-control tools;
• Regulatory compliance: record-keeping as required by Brazilian law and responding to requests from competent authorities.

The LGPD requires that all processing of personal data be grounded in a legal basis. bet959 relies on the following legal bases for each category of processing:

• Contract performance (art. 7, V): processing required to perform the service agreement accepted by the user at registration — includes bet processing, payments, and account management;
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and restricting access to users under 18, as required by Brazilian law;
• Legitimate interest (art. 7, IX): platform security, fraud detection, performance analysis, and continuous service improvement — always respecting users' fundamental rights;
• Consent (Art. 7, I): sending marketing communications and promotional emails about new offers, and personalizing content based on declared preferences — you may withdraw this consent at any time.

Bet959 does not sell users' personal data to third parties. Data is only shared in the situations described below, always for a specific purpose and with contractual confidentiality guarantees:

• Payment processors: only the minimum financial data necessary is shared with certified payment gateways to process transactions via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago. These partners are PCI-DSS certified and handle data solely to facilitate the transaction;
• Game providers: an anonymized user identifier is shared with providers such as Pragmatic Play, Evolution Gaming, and others to enable the gaming session. No personally identifiable data is transmitted to these partners;
• Identity verification services: CPF and document data is shared with specialized KYC (Know Your Customer) providers for age verification and fraud prevention, as required by law;
• Technology infrastructure: cloud hosting providers and CDN services that process technical data to ensure platform availability and speed, always under data processing agreements (DPA);
• Public authorities: when required by law, court order, or request from a competent Brazilian authority. bet959 will notify the user of such requests whenever legally permitted.

All partners who receive data from bet959 are contractually required to process that information solely for the specific purposes for which it was shared, to implement adequate security measures, and not to share it further with third parties.

Bet959 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, or for the minimum period required by Brazilian law, whichever is longer.

Once the retention period expires, data is securely deleted or anonymized so that it can no longer be linked to a specific individual. Secure deletion includes overwriting techniques and certified destruction of physical media, where applicable.

Bet959 implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or accidental destruction. Key measures in place include:

• Encryption in transit: all connections between users and bet959 use TLS 1.3 with AES-256 ciphers, ensuring that transmitted data — including Pix transactions and registration information — cannot be intercepted;
• Encryption at rest: sensitive data stored on bet959's servers is encrypted at rest using industry standards equivalent to AES-256;
• Two-factor authentication (2FA): available to all users in the security section of their profile. bet959 strongly recommends enabling 2FA for an extra layer of protection;
• Continuous monitoring: automated intrusion detection systems and behavioral analysis tools monitor the platform around the clock to identify suspicious activity in real time;
• Periodic security testing: bet959 regularly conducts penetration tests (pentests) and vulnerability assessments, carried out by independent specialized firms;
• Internal access controls: only employees with a verified need access users' personal data, and every access is logged for audit purposes;
• Incident response plan: in the event of a data breach, bet959 will follow the protocol set out in the LGPD, notifying the ANPD and affected users within the legally required timeframes.

Bet959 uses cookies and similar technologies (such as pixels and local storage) to enhance your experience on the platform, keep sessions active, personalize content, and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — they keep you logged in during your session, remember language preferences, and ensure transaction security. These cookies cannot be disabled without compromising the site's functionality;
• Performance cookies: collect anonymous data on how users interact with the platform — pages visited, session duration, errors encountered — so bet959 can identify issues and improve the experience. No personally identifiable data is associated with these cookies;
• Functionality cookies: store your platform preferences — such as favorite game, displayed odds, and interface settings — so you don't have to reconfigure everything each time you log in;
• Marketing cookies (with consent): used to display relevant content about bet959 promotions based on your usage history. Activated only with your explicit consent.

You can manage your cookie preferences at any time through the privacy preferences panel available in the platform footer. Disabling non-essential cookies may limit some personalization features, but will not prevent you from using bet959's core functions.

The LGPD grants you, as the data subject whose personal data is processed by bet959, the following rights — all of which can be exercised free of charge and without requiring detailed justification:

Bet959 services are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from users under 18. Registration requires a date of birth and CPF, and age verification is carried out during the mandatory KYC process.

If bet959 identifies that data belonging to a user under 18 was collected without proper parental oversight or through fraudulent registration, the account will be closed immediately, the data will be deleted, and any existing balance will be returned to the original payment method, subject to legal obligations regarding the retention of records of unauthorized access attempts.

Bet959 may update this Privacy Policy periodically to reflect changes in Brazilian legislation — such as regulations from the ANPD (National Data Protection Authority) — in the technology used, or in the platform's data processing practices.

When material changes are made — those affecting your rights or the purposes for which your data is processed — you will be notified by email at least 10 days before the updated version takes effect. The date of the most recent update is always displayed at the top of this page.

Continued use of the bet959 platform after an updated version of this policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the revised version's effective date, with no penalty.

For any questions, requests, or complaints related to this Privacy Policy or to the processing of your personal data by bet959, you can reach us through the following channels:

• 24h live chat: directly on the bet959.best platform, with an average response time of under 2 minutes, available every day of the week including public holidays;
• General email: suporte@bet959.best — for general privacy inquiries, response time within 24 business hours;
• LGPD Requests: suporte@bet959.best with the subject line "LGPD Request" and your registered CPF — response within up to 15 business days as required by law.

Bet959's Data Protection Officer (DPO) is the official point of contact for LGPD-related matters. The DPO is responsible for ensuring this policy is followed internally, for handling data subject requests, and for liaising with the Autoridade Nacional de Proteção de Dados (ANPD) when required. The DPO can be reached at the same email address above, with the subject line "LGPD Request – DPO".

If you believe your rights have been violated and have not received a satisfactory response from bet959, you have the right to file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados), as provided under article 55-J of the LGPD.