313bet Privacy Policy – LGPD Data Protection

1. Who We Are and Who Controls Your Data

The 313bet, available at 313bet.best, is the operator of the Sports Betting and online entertainment platform for Brazilian users. For the purposes of the Lei Geral de Proteção de Dados (LGPD), 313bet is the controller of the personal data collected from users who access and use its services.

This Privacy Policy applies to all 313bet platform users, including unregistered visitors, active account holders, and former users whose data is still retained within the applicable legal retention periods. By creating an account or using any service provided by the 313bet, you confirm that you have read and fully understood this policy.

For questions, requests relating to personal data, or to contact our Data Protection Officer (DPO), please email contato@313bet.best or the live chat available 24 hours a day on the platform.

2. What Data We Collect

The 313bet collects personal data from its users in the following categories, always with a defined purpose and an established legal basis in accordance with the LGPD:

We do not collect sensitive personal data as defined by the LGPD (such as health data, racial origin, religious belief, or biometric data), except where expressly necessary and with the data subject's explicit consent for specific purposes, such as advanced identity verification.

3. How We Use Your Data

The 313bet uses the data collected solely for the purposes described below. Any use outside these purposes requires fresh consent or a new legal basis under the LGPD:

• Service delivery: create and manage your account, process Sports Betting, live bets, casino games, poker, and crash games.
• Payment processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfers; process withdrawals via Pix to the account held in the user's name.
• Identity verification and compliance: comply with Know Your Customer (KYC), anti-money laundering, and other regulatory requirements applicable to the Brazilian betting market.
• Security and fraud prevention: detect and prevent unauthorized access, multiple account use, bots, bonus abuse, and other conduct prohibited under the Terms and Conditions.
• Customer support: handle requests, resolve complaints, and provide guidance via live chat or email in Brazilian Portuguese.
• Personalization: display the sports odds and markets most relevant to you based on your usage history, such as Brasileirão football, Superliga volleyball, or UFC fights.
• Responsible gambling: monitor gambling patterns to identify potentially problematic behavior and offer self-control tools when needed.
• Promotional communications: send offers, bonuses, and news from 313bet via email or push notification, only for users who have consented to this type of communication.
• Platform improvement: analyze aggregated and anonymized usage data to improve the betting experience, technical performance, and the services offered.

4. Legal Basis for Processing (LGPD)

The 313bet processes your personal data on the basis of the following legal grounds set out in Article 7 of the Lei Geral de Proteção de Dados (Law 13.709/2018):

• Contract performance (Art. 7, V): processing is necessary to deliver the services you contracted when creating your account, including bet management, payment processing, and account communications.
• Compliance with a legal obligation (Art. 7, II): to meet regulatory, tax, and anti-money laundering requirements imposed by Brazilian law.
• Legitimate interest (Art. 7, IX): for security purposes, fraud prevention, service improvement, and protection of platform integrity, provided they do not infringe on your fundamental rights.
• Consent (Art. 7, I): for sending promotional communications and for the use of non-essential cookies. Consent may be withdrawn at any time without affecting prior activities.

5. Sharing Data with Third Parties

The 313bet does not sell, rent, or share users' personal data with third parties for commercial purposes. Data sharing occurs only in the strictly necessary situations described below, always with appropriate contractual and security safeguards:

• Payment processors: financial data is shared with Pix, boleto bancário, card, and other accepted Brazilian payment processing partners, solely to complete transactions requested by the user.
• Identity verification providers: identification data may be shared with KYC/AML partners for CPF verification, identity document checks, and fraud prevention, as required by law.
• Casino game providers: minimum technical data required to operate the slots, live roulette, blackjack, and crash games provided by third-party providers partnered with the platform.
• Competent authorities: data may be disclosed when required by law, court order, or a determination by a competent regulatory or law enforcement authority in Brazil.
• Technical infrastructure: hosting, cybersecurity, and data analytics services may process aggregated technical information to keep the platform running securely and reliably.

All third parties that process data of users of 313bet are subject to contractual confidentiality and security obligations consistent with the requirements of the LGPD.

6. Data Storage and Security

The 313bet applies strict technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or accidental destruction. Key measures in place include:

• SSL/TLS 256-bit Encryption across all communication between your device and the platform's servers.
• Encrypted storage of passwords and sensitive financial data — no password is ever stored in plain text.
• Role-Based Access Control (RBAC) — only employees with a legitimate operational need have access to users' personal data.
• Continuous monitoring of suspicious access attempts, brute-force attacks, and other security threats in real time.
• Two-factor authentication (2FA) available to all users and mandatory for internal administrative operations.
• Periodic audits security audits and penetration testing carried out by specialized teams to identify and remediate vulnerabilities before they can be exploited.

Data is stored on servers that meet high physical and logical security standards. In the event of a security incident that may affect your personal data, 313bet will notify affected users and the National Data Protection Authority (ANPD) within the deadlines established by the LGPD.

7. Cookies and Tracking Technologies

The 313bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and understand how users interact with the site. Below, we detail the types of cookies used:

• Essential cookies: required for the platform's basic operation — keeping your session active, processing bets, and securing your login. These cannot be disabled without affecting your ability to use the platform.
• Performance cookies: collect aggregated and anonymized data on how users navigate the platform, which sections are most visited, and which events generate the most interest. They help improve the experience for everyone.
• Functional cookies: remember your preferences — such as language, favorite sport, and odds display settings — to personalize your experience without requiring you to reconfigure everything on each visit.
• Communications cookies: used when you consent to receive promotional communications, so that the offers shown are more relevant to your betting profile — for example, Brasileirão promotions if you regularly bet on football.

You can manage non-essential cookie preferences in your browser settings or directly on the platform. Declining performance or functionality cookies does not prevent you from using the 313bet, but it may limit some personalization features.

8. How Long We Retain Your Data

The 313bet retains personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations. The main retention periods in place are:

• Active account data: retained for as long as the account remains active and for 5 years following its closure, in line with regulatory compliance requirements and anti-money laundering obligations.
• Financial transaction history: retained for a minimum of 5 years after each transaction, in accordance with applicable tax and regulatory requirements in Brazil.
• Betting records: retained for 5 years for audit, dispute resolution, and regulatory compliance purposes.
• Security logs: retained for 12 months for fraud detection and security incident investigation purposes.
• Communication data (support emails and chats): retained for 2 years for service quality purposes and resolution of any disputes.
• Non-essential cookie data: as defined by each cookie's specific settings, generally between 30 days and 12 months.

Once retention periods have expired, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified.

9. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 313bet, the following rights, which may be exercised at any time via live chat or by emailing contato@313bet.best:

Requests are responded to within the timeframe established by the LGPD — generally up to 15 calendar days from receipt. In cases of high complexity, this period may be extended by the same amount of time, with prior notice to the data subject. To exercise your rights, please contact us at contato@313bet.best with the subject line "LGPD Rights – [your name]".

10. International Data Transfers

In some cases, personal data of users of 313bet may be processed by servers or partners located outside Brazil — for example, in connection with cloud hosting infrastructure or international casino game providers that partner with the platform.

All international data transfers carried out by 313bet complies with the provisions of Article 33 of the LGPD, and is only carried out when:

• The destination country offers an adequate level of personal data protection, as assessed by the National Data Protection Authority (ANPD); or
• Adequate contractual safeguards are in place between 313bet and the data recipient, such as standard contractual clauses or recognized compliance certifications; or
• The transfer is necessary to perform the contract entered into with you, such as when processing a live casino game provided by an international partner.

The 313bet does not transfer data internationally to countries that do not offer adequate protection and without the required contractual safeguards.

11. Minors

The services of the 313bet are intended exclusively for individuals aged 18 or older. The platform does not knowingly collect personal data from minors.

If you are the guardian of a minor and believe they have created an account or provided personal data to the 313bet, please contact us immediately at contato@313bet.best. We will take the necessary steps to close the account and delete the minor's collected data as soon as the situation is confirmed.

12. Changes to This Privacy Policy

The 313bet may update this Privacy Policy periodically to reflect changes in the services offered, in applicable Brazilian legislation — including any sector-specific regulations for betting — or in internal data processing practices.

Any material update will be communicated to registered users by email or platform notification at least 15 days in advance, except where the change is required by an immediate legal obligation. The date of the last update is always shown at the top of this page.

Your continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. If you do not agree with the new terms, you may request account closure as described in section 11 of the Terms and Conditions.

13. Contact, DPO and LGPD Support Channel

For any questions regarding this Privacy Policy, the exercise of your rights as a data subject, or to report privacy or data security concerns, please contact 313bet through the following channels:

• Live chat: available 24 hours a day on the platform, with support in Brazilian Portuguese.
• DPO Email: contato@313bet.best — use the subject line "Privacy / LGPD" to ensure your request is handled promptly.

The Data Protection Officer (DPO) of 313bet is responsible for responding to data subject requests, liaising with the Autoridade Nacional de Proteção de Dados (ANPD), and overseeing internal LGPD compliance. All formal data subject requests are logged and addressed within the legally required timeframes.

If you believe your rights under the LGPD have been violated and have not received a satisfactory response from the 313bet, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian federal authority responsible for overseeing LGPD compliance.