Privacy Policy of 967bet: your data protected by the LGPD

A 967bet is the controller of the personal data collected and processed in connection with the use of the platform. By "controller" we mean the entity that determines the purposes and means of processing personal data, as defined by the LGPD.

For any questions related to the processing of your personal data at 967bet — whether to exercise your rights as a data subject, clarify questions, or file a complaint — you can reach us directly through our support channel:

• Email: suporte@967bet.best
• Live chat: available on the platform 24 hours a day, 7 days a week, in Portuguese
• Response time: up to 15 business days for formal requests relating to personal data, as provided for under the LGPD

This Privacy Policy applies to all services offered by 967bet — Sports Betting, Brasileirão, crash games, slots, blackjack, live casino, and any other products available on the platform — as well as to the website and all official brand communication channels.

A 967bet collects only the data necessary for the safe and efficient operation of the platform. Data is collected at different points throughout your journey as a user. Below we detail the categories of data collected:

Payment data such as credit card numbers are processed directly by our payment partners certified under the PCI-DSS standard — 967bet 967bet does not store the full card number on its own servers.

A 967bet uses your personal data only for legitimate, necessary, and proportionate purposes in the operation of a betting platform. Below, we explain how each category of data is used in practice:

• Account management and authentication: your email, CPF, and password are used to securely identify you on the platform, ensuring only you can access your 967bet account;
• Bet and game processing: betting history and balance are required to correctly record and settle each bet placed on Brasileirão, crash games, slots, and all other game types;
• Payment processing: financial data is used to process deposits via Pix, Boleto Bancário, credit card, PicPay, and Mercado Pago, and to handle withdrawals within the promised timeframe;
• Identity verification (KYC/AML): identity documents are required to fulfill anti-money laundering obligations and to confirm that the account holder is at least 18 years of age;
• Fraud prevention: technical data such as IP addresses and behavioral patterns are analyzed to detect unauthorized access attempts, multiple-account use, or fraudulent behavior;
• Service communications: email and mobile number are used to send registration confirmations, security alerts, withdrawal updates, and, with your consent, information about promotions and new features;
• Customer support: our support team's conversation history is stored to ensure continuity of service and maintain quality assistance;
• Continuous platform improvement: aggregated and anonymized usage data helps us understand which features are working well and where the user experience can be improved.

A 967bet does not use your personal data for third-party behavioral advertising or to build consumer profiles for other companies.

The LGPD requires that all personal data processing have a specific legal basis to justify it. The 967bet processes your data under the following legal bases set out in Law No. 13,709/2018:

• Contract performance (art. 7, V of the LGPD): processing of registration, financial, and betting data is necessary to fulfill the contract entered into when you create an account — without this data, it is simply not possible to operate your account and process your bets;
• Compliance with a legal obligation (art. 7, II of the LGPD): identity verification (KYC), anti-money laundering compliance, and the storage of financial records are obligations imposed by Brazilian gambling legislation and financial regulation — 967bet is legally required to carry out this processing;
• Legitimate interest (Art. 7, IX of the LGPD): the processing of technical data for fraud prevention, platform security, and service improvement is carried out on the basis of the legitimate interests of 967bet and its users in maintaining a safe environment;
• Consent (art. 7, I of the LGPD): marketing communications — such as Brasileirão promotions, crash game updates, and personalized offers — are only sent with your explicit consent, which can be withdrawn at any time in your account settings.

A 967bet does not sell users' personal data. Sharing with third parties occurs only when strictly necessary for the operation of the service or as required by law. The categories of recipients are:

• Game providers (Spribe, Pragmatic Play, BGaming, and others): to run slots, crash games, and live casino rounds, minimal data such as a session identifier is transmitted to the game provider. These providers maintain their own privacy policies and security certifications;
• Payment processors: to process transactions via Pix, Boleto Bancário, PicPay, Mercado Pago, and credit card, relevant financial data is shared with payment intermediaries. These partners are legally and contractually required not to use the data for any other purpose;
• Technical infrastructure providers: servers, cloud storage, and security services that support the platform. All infrastructure partners sign data processing agreements with confidentiality and security clauses;
• Public authorities and regulatory bodies: when required by law, court order, or applicable regulation — for example, in money laundering investigations or ANPD determinations. In such cases, we share only the minimum necessary to fulfill the legal obligation;
• External auditors and consultants: professionals bound by professional secrecy and confidentiality agreements, for financial, legal, or information security audit purposes.

Any third party that receives personal data from users of 967bet is contractually required to handle this information securely, for the specific agreed purpose and in compliance with the LGPD.

A 967bet uses cookies and similar technologies — such as pixels and local browser storage — to ensure the platform functions properly, enhance the user experience, and analyze usage behavior in aggregate.

The types of cookies used are:

• Essential cookies: required for the basic functioning of the platform — authentication, session management, and bet processing. They cannot be disabled without affecting how the platform operates;
• Performance cookies: collect information on how users interact with 967bet — which pages are most visited, load times, and errors encountered. Data is aggregated and anonymized, used exclusively to improve the platform;
• Functionality cookies: allow you to personalize your experience — such as remembering language preferences, favorite odds, or display settings for casino games;
• Analytical cookies: used alongside analytics tools to understand overall user behavior and guide platform development decisions.

You can manage your cookie preferences in your browser settings. Please note that disabling essential cookies may affect the proper functioning of the 967bet, including the ability to log in and place bets.

A 967bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law.

• Registration and financial data: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering requirements and Brazilian tax legislation;
• Betting and transaction history: retained for a minimum of 5 years for regulatory, audit, and dispute resolution purposes;
• Identity documents (KYC): stored for the minimum period required by gaming regulations and anti-money laundering rules — generally 5 to 7 years after account closure;
• Customer support details: conversation history retained for 2 years after account closure for quality assurance and dispute resolution purposes;
• Technical data (access logs): retained for up to 6 months for security purposes, in accordance with Brazil's Marco Civil da Internet legislation;
• Marketing data: deleted immediately upon withdrawal of consent or account cancellation.

Once mandatory retention periods have expired, data is permanently deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical purposes without identifying the data subject.

If you request the deletion of your account at 967bet, any data for which there is no legal retention obligation will be deleted within 30 days. Data subject to a statutory retention period will be kept in a restricted manner, accessible only when required to fulfill the corresponding legal obligation.

A 967bet adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, misuse, accidental loss, or destruction. These include:

• Encryption in transit: all communications between your device and our servers use up-to-date TLS protocols, ensuring that data is always transmitted encrypted — including bets, Pix deposits, and registration details;
• Encryption at rest: sensitive data stored in our databases — such as identity documents and financial data — is encrypted at rest using modern algorithms;
• Access control: only staff members with a functional need have access to users' personal data, and all access is recorded in auditable logs;
• Two-factor authentication: available for user accounts and mandatory for internal employee access to systems containing personal data;
• Security testing: the 967bet platform undergoes regular security testing to identify and fix vulnerabilities before they can be exploited;
• Continuous monitoring: automated systems monitor the platform in real time to detect suspicious behavior and security breach attempts.

Despite all measures in place, no security system is completely infallible. In the event of a security incident affecting personal data, 967bet will notify affected users and the National Data Protection Authority (ANPD) within the deadlines established by the LGPD, with clear information about what happened and the steps taken.

The LGPD grants you, as the holder of personal data processed by 967bet, a set of rights that can be exercised at any time. See what they are:

To exercise any of these rights, please contact us at suporte@967bet.best or via the platform's live chat. We will respond within 15 business days. We may ask you to verify your identity before fulfilling the request, to ensure we are responding to the legitimate data subject.

If you are not satisfied with the response you receive, you have the right to file a complaint with the National Data Protection Authority (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.

A 967bet is a platform exclusively intended for users aged 18 and over. We do not intentionally collect, store, or process personal data from individuals under 18.

During registration, we ask for your date of birth and confirmation of legal age. The identity verification process (KYC) — which includes submitting an official photo ID — also confirms the account holder's age.

If we become aware that we have collected data from a minor under 18 without proper consent, we will immediately take the following steps:

• Account closure;
• Deletion of all collected personal data;
• Refund of any deposited balance to the original payment method, following ownership verification;
• Incident logging in accordance with applicable regulatory requirements.

Some of the partners and technology providers used by 967bet — such as cloud infrastructure providers and game suppliers — may have servers located outside Brazil. When this is the case, international data transfers comply with LGPD requirements to ensure your data remains protected.

The safeguards adopted for international transfers include:

• Standard contractual clauses: contracts with international providers include clauses requiring the same level of data protection guaranteed by the LGPD;
• Protection level assessment: we prioritize partners based in countries with data protection regulations recognized as adequate;
• Data minimization: only the data strictly necessary to provide the specific service is transferred to the international partner;
• Confidentiality agreements: all international partners sign non-disclosure and data protection agreements.

A 967bet commits to communicating any relevant changes to its international data transfer practices through this Privacy Policy.

A 967bet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. The date of the last update is always shown at the top of this page.

When we make significant changes — those that materially affect data subjects' rights or the way we use your information — we will notify you by email at least 7 days before the new rules take effect. Minor updates, such as contact information changes or wording clarifications, may take effect immediately.

Continued use of the platform after the effective date of the updated policy constitutes acceptance of the changes. If you do not agree with the changes, you have the right to close your account and request the deletion of any data not subject to a statutory retention period.

For any questions about this Privacy Policy or to exercise your rights as a data subject, please contact 967bet:

• Email: suporte@967bet.best
• Live chat: available on the platform 24 hours a day, 7 days a week, in Portuguese
• Response time: up to 15 business days for formal requests related to personal data