Bet67 Privacy Policy – How We Protect Your Data

Bet67 is an online sports betting and entertainment platform available at bet67.asia, designed exclusively for Brazilian users aged 18 and over. For the purposes of this Privacy Policy, bet67 acts as the controller of personal data collected during registration and use of the platform — meaning bet67 determines the purposes and means of processing your information.

For any questions related to the privacy of your data, the exercise of your rights under the LGPD, or any queries about this document, please reach out through the following channel:

• Email: suporte@bet67.asia (subject: "Data Privacy" or "LGPD Rights")
• Live chat: Available 24 hours a day at bet67.asia
• Response time: Up to 15 business days for formal requests related to personal data

Bet67 collects different categories of data depending on how users interact with the platform. The table below describes what is collected and at what point:

Bet67 uses collected personal data solely for the purposes described below. No data is used for any purpose beyond those listed here without prior notice and, where required by the LGPD, without the user's express consent:

• Account creation and management: Your name, email, CPF, and phone number are required to uniquely identify you on the platform and ensure that each CPF corresponds to only one account.
• Processing financial transactions: Payment data — Pix key, deposit and withdrawal history — is used to process transfers securely and to track each transaction for accounting and compliance purposes.
• Identity verification (KYC): Documents are collected to confirm that the account holder is who they claim to be, protecting you against unauthorized use of your account and fulfilling legal anti-money laundering obligations.
• Customer support: Support interaction history is retained to ensure continuity of service and to resolve disputes based on accurate records.
• Security and fraud prevention: Technical data such as IP addresses and behavioral patterns are analyzed to identify suspicious activity, unauthorized access attempts, and misuse of the platform.
• Experience personalization: Your platform usage history may be used to offer game and betting recommendations relevant to your profile. You can disable this feature in your account settings.
• Marketing communications: With your consent, bet67 may send emails, SMS messages, or push notifications containing promotions, updates, and personalized offers. This consent can be withdrawn at any time.
• Compliance with legal obligations: bet67 may be legally required to retain or share data with competent authorities, such as the Financial Activities Control Council (COAF) and other regulatory bodies, when required by court or regulatory order.

The LGPD requires that all processing of personal data have a legal basis to justify it. bet67 processes your data under the following legal grounds set out in Article 7 of the LGPD:

• Performance of a contract (art. 7, V): Most data processing is necessary for bet67 to deliver the services agreed upon at registration — creating your account, processing deposits, recording bets, and completing withdrawals.
• Compliance with a legal obligation (art. 7, II): Certain data must be collected and retained for bet67 to comply with obligations imposed by Brazilian law, including anti-money laundering requirements (Law No. 9,613/1998) and sector-specific regulations.
• Legitimate interest (art. 7, IX): Technical data is processed on the basis of bet67's legitimate interest in maintaining platform security, preventing fraud, and improving service quality — provided that interest does not override your fundamental rights.
• Consent (art. 7, I): Marketing communications are only sent with your express consent, which you can give or withdraw at any time through your account settings or by emailing our support team.

Bet67 does not sell personal data. Information is only shared with third parties in the situations listed below, always under confidentiality agreements and limited to the minimum necessary for the specific purpose:

• Payment processors: To process transactions via Pix, boleto bancário, Visa and Mastercard credit and debit cards, PicPay, Mercado Pago, and TED, the necessary financial data is shared with the financial institutions and payment intermediaries responsible for each operation. Nubank, Itaú, Bradesco, Banco do Brasil, and other partner banks receive only the information strictly required to settle each transaction.
• Game providers: To offer live casino games, slots, and crash games, bet67 shares session identifiers with certified providers such as Spribe, Pragmatic Play, and Evolution. These providers do not receive personally identifiable information such as your name or CPF — only anonymous session identifiers.
• Identity verification companies: For the KYC process, documents may be reviewed by specialized identity verification partners under specific data protection and confidentiality agreements.
• Competent authorities: bet67 may be legally required to share data with regulatory, judicial, or public security authorities when compelled by a valid court or regulatory order. In such cases, bet67 will notify the user whenever legally permitted to do so.
• Infrastructure services: Cloud storage providers, security monitoring systems, and traffic analytics tools may have limited access to technical data to keep the platform running reliably and securely.

Bet67 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze service performance. The types of cookies used are:

• Essential cookies: Required for basic platform operation — maintaining your login session, bet slip, and language preferences. These cannot be disabled without affecting your use of the platform.
• Performance cookies: These collect information about how users interact with the platform — most visited pages, session duration, errors encountered — to help improve the product. They do not identify users individually.
• Personalization cookies: These store user preferences such as favorite sports, recently played games, and interface settings to deliver a more relevant experience on each visit.
• Security cookies: Used by the anti-fraud system to detect unusual access patterns, suspicious login attempts, and other activity that may indicate unauthorized use of the account.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent login and other core platform features from working correctly. Disabling non-essential cookies does not affect access to bet67's main services.

Bet67 implements rigorous technical and organizational measures to protect users' personal data against unauthorized access, alteration, unauthorized disclosure, or destruction. Key measures in place include:

• 256-bit SSL/TLS encryption on all communications between the user's device and the platform's servers.
• Passwords are stored in hashed format using modern algorithms — bet67 does not store passwords in plain text and no support agent has access to your password.
• Two-factor authentication (2FA) is available and recommended for all users, adding an extra layer of protection beyond your password.
• Continuous monitoring of suspicious access attempts, with automatic blocking and user notification after multiple failed login attempts.
• Internal access to user data is restricted by a least-privilege policy — only staff members who need the data for their specific role are granted access.
• Regular security audits and penetration tests conducted by independent specialized firms.
• A security incident response plan with notification to the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD in the event of a data breach.

Despite all the measures in place, no digital system offers absolute security. bet67 recommends that users create strong, unique passwords for their platform account, enable 2FA, and never share login credentials with anyone.

Bet67 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following criteria:

• Active account data: Retained for as long as the account is active and for up to 5 years after closure, in accordance with legal requirements for accounting record-keeping and compliance.
• Financial and transaction data: Retained for a minimum of 5 years after the last transaction, in compliance with anti-money laundering legislation and tax obligations.
• KYC verification records: Kept for a minimum of 5 years after account closure, in accordance with industry regulatory requirements.
• Support data: Support records retained for up to 2 years after case resolution for internal audit purposes.
• Cookies and browsing data: Session data is automatically deleted when you log out. Preference cookies remain valid for up to 12 months.

Once the purposes and legal retention periods have been met, data is securely and permanently deleted or irreversibly anonymized. Anonymized data may be retained for statistical purposes without identifying the user.

Some of bet67's operational partners — particularly game providers and cloud infrastructure providers — have servers located outside Brazil. In such cases, data transfers are carried out only where the destination country offers an adequate level of data protection or where contractual safeguards equivalent to those required by the LGPD are in place.

Bet67 ensures that all international transfers of personal data are supported by:

• Standard data protection contractual clauses included in agreements with international suppliers.
• Limiting the volume of data transferred to the strict minimum necessary for the operation of the specific service.
• A contractual prohibition preventing international partners from using the data for their own purposes beyond the service provided to bet67.

If you would like specific information about international data transfers related to your account, please contact us at suporte@bet67.asia.

Bet67 is a platform intended exclusively for users aged 18 and over. Registration by minors is strictly prohibited and constitutes a violation of the platform's Terms and Conditions.

Bet67 takes the following measures to prevent access by minors:

• Date of birth is verified in the registration form, with a technical restriction preventing dates indicating the user is under 18 years of age.
• A photo ID is required during the KYC process to confirm that the account holder is of legal age.
• Immediate account closure upon confirmed underage ownership, with balance returned to the legal guardian upon proof of relationship.

Bet67 does not intentionally collect data from minors. If you identify that an account has been created by a minor on the platform, please notify our support team immediately at suporte@bet67.asia so that appropriate action can be taken.

To exercise any right under the LGPD regarding your personal data processed by bet67, follow the steps below:

1. Send an email to suporte@bet67.asia with the subject "LGPD Rights – [Request Type]" — for example, "LGPD Rights – Data Access" or "LGPD Rights – Data Deletion".
2. Include in the body of the email: your full name as registered on the platform, your account email address, and a clear description of the right you wish to exercise.
3. For deletion or portability requests, additional identity verification may be required to confirm that the request is coming from the actual account holder.
4. Bet67 will formally respond within 15 business days from confirmation of receipt of your request.

If bet67's response does not adequately address your request, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for enforcing LGPD compliance in Brazil.

Bet67 may update this Privacy Policy periodically to reflect changes in legislation, services offered, security practices, or technologies used. The process for updates is as follows:

• Significant changes — those affecting how data is collected, used, or shared — are communicated by email to registered users at least 7 days before taking effect.
• Minor changes — language corrections or editorial clarifications that do not affect data processing practices — are applied directly, with the date at the top of this document updated accordingly.
• The most current version of this policy is always available at bet67.asia/privacy-policy. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

Previous versions of this Privacy Policy are available upon request to support, so users can compare what has changed between versions.

Bet67 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and the LGPD in the platform's operations. The DPO is the official point of contact for data privacy matters and can be reached by:

• Email: suporte@bet67.asia (subject: "DPO – [Request Subject]")
• Live chat: Available 24 hours at bet67.asia — request to be directed to data privacy matters

The bet67 DPO is responsible for:

• Respond to user requests related to their rights under the LGPD.
• Monitor internal compliance with the practices described in this policy.
• To serve as the point of contact with the National Data Protection Authority (ANPD) in cases of investigation or regulatory inquiry.
• Coordinate the response to security incidents involving users' personal data.