393bet24 Privacy Policy — Data Protection in Brazil

1Who We Are and Who Controls Your Data

A 393bet24 is a Sports Betting and online entertainment platform operated for the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados Pessoais (LGPD — Law No. 13.709/2018), 393bet24 acts as Data Controller of the personal data collected from its users — meaning it is 393bet24 that defines the purposes and means of processing your data.

This Privacy Policy applies to all registered users and visitors of 393bet24.net, the Android and iOS app, and any other digital channel operated by 393bet24. By creating an account or using any feature of the platform — Sports Betting, slots, Live Casino, crash games — you confirm that you have read and understood the terms described here.

2What Personal Data We Collect

393bet24 collects personal data at different times and through different channels. Below are the categories of data we process:

The collection of biometric data or sensitive categories — such as racial origin, political opinions, health data, or sexual orientation — is not carried out by 393bet24, except when specifically required by a legal or regulatory determination applicable to the anti-money laundering sector.

Data collected from third parties: in some cases, such as identity verification (KYC), we may receive information about you from credit bureaus or authorized document verification services — solely to confirm the accuracy of the information provided during registration.

3How We Use Your Data — Purpose of Processing

A 393bet24 processes your personal data based on the legal grounds set out in the LGPD, specifically: contract performance, compliance with a legal obligation, legitimate interest, and, where applicable, consent. The specific purposes of each processing activity are:

• Account creation and management: Your identification and contact details are required to create your account, verify your identity, and ensure that only you can access your profile;
• Financial transaction processing: Banking and financial data is used exclusively to process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED — and to securely process your withdrawals to the bank account registered under the same CPF;
• Fulfillment of legal obligations (KYC/AML): Brazilian anti-money laundering legislation (Law No. 9.613/1998) and COAF regulations require us to collect and store identification data and transaction history for all users;
• Fraud prevention and security: Technical data such as IP address, device, and access patterns are analyzed to detect unauthorized access attempts, multiple-account use, and suspicious behavior;
• Product improvement and personalization: Anonymized and aggregated usage data is used to understand how the platform is used and to improve the experience — for example, which slots are most accessed or which features create the most friction;
• Transactional communications: Emails and push notifications about your account, transactions, password changes, and security updates are sent based on operational necessity — they cannot be disabled without closing your account;
• Marketing communications (with consent): Offers, bonuses, and 393bet24 news are sent only if you opted in during registration or in your profile settings. You may withdraw this consent at any time.

4Data Sharing with Third Parties

A 393bet24 does not sell, rent, assign, or otherwise commercialize your personal data with third parties for advertising or commercial purposes. Data is shared only in the following situations:

• Game providers (operators): To provide Live Casino, slots, and crash games, we share minimum session data with our certified suppliers — such as Pragmatic Play, NetEnt, Evolution Gaming, and others. These suppliers act as operators under the LGPD and are contractually bound to process data solely for that specific purpose;
• Payment processors: To process Pix, boleto, TED, and card payments, transaction data is shared with the financial institutions and payment processors involved in each operation, as required by Brazil's payment system regulated by the Banco Central;
• Identity verification services (KYC): To validate documents during registration and before the first withdrawal, we use specialized identity verification services that cross-reference the information provided against public databases and authorized bureaus;
• Public and regulatory authorities: We share data with authorities such as the Receita Federal, COAF, Banco Central, Ministério da Fazenda, and law enforcement or judicial authorities when required by law, court order, or a duly substantiated regulatory investigation;
• Technology infrastructure providers: Cloud servers, security analytics systems, and performance monitoring tools have access to technical data in the context of platform operations support, always under confidentiality agreements and data protection clauses.

All third parties with whom 393bet24 shares personal data are contractually bound to security and confidentiality standards compatible with the LGPD. We conduct periodic due diligence on our critical data vendors.

5How We Protect Your Data — Security Measures

Protecting your data is a technical and operational priority at 393bet24. We have adopted the following security measures to ensure the confidentiality, integrity, and availability of your personal data:

• End-to-end encryption: All communication between your device and our servers uses TLS 1.3 with a 256-bit SSL certificate, ensuring that no transmitted data can be intercepted or read by third parties;
• Secure storage: Sensitive data — such as passwords and banking information — is stored encrypted. Passwords are stored exclusively as irreversible hashes (bcrypt) and never in plain text;
• Two-factor authentication (2FA): Available to all users. When enabled, 2FA requires a second confirmation — via SMS or an authenticator app — in addition to your password to access your account;
• Internal access controls: Only employees with a justified operational need have access to users' personal data. Access is logged, monitored, and periodically audited;
• 24/7 Security Monitoring: Intrusion detection systems and behavioral analysis tools monitor the infrastructure in real time to identify and neutralize unauthorized access attempts;
• Incident response plan: In the event of a data breach or security incident that may affect your data, 393bet24 is committed to notifying affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

6Cookies, Tracking Technologies & Analytics

393bet24 uses cookies and similar technologies to keep the platform running properly and to improve your experience. The types of cookies used are:

• Essential cookies: Required for the platform's basic functionality — session authentication, bet slip, language settings, and account preferences. These cookies cannot be disabled without affecting your ability to use the platform;
• Performance and analytics cookies: Collect anonymized data about how you browse the site — which pages you visit, session duration, and navigation flow. This data is used solely to identify usability issues and improve the product;
• Security cookies: Log technical details such as IP address and device type to detect suspicious access and protect your account against unauthorized use;
• Preference cookies: Save personalized settings such as visual theme, preferred language, and default payment method so you don't have to reconfigure them every time you log in.

393bet24 does not use third-party cookies for advertising purposes targeted — meaning your browsing data on the platform is not shared with external ad networks for personalized advertising on other sites.

You can manage non-essential cookie preferences through your browser settings or via the settings panel in your account on the platform. Disabling essential cookies may prevent some features from working correctly.

7How Long We Retain Your Data

A 393bet24 retains your personal data for only as long as strictly necessary for the purposes for which it was collected, in compliance with the minimum retention periods established by Brazilian law:

• Identification and KYC data: A minimum of 5 (five) years after account closure, as required by anti-money laundering legislation (Law No. 9.613/1998) and COAF regulations;
• Financial transaction history: A minimum of 5 (five) years, in accordance with the Brazilian Tax Code and Central Bank of Brazil regulations;
• Usage and browsing data: Up to 2 (two) years after the last activity, for product improvement and security purposes;
• Support communications: Up to 2 (two) years after the ticket is closed, for quality assurance and dispute resolution purposes;
• Marketing data (with consent): Until the user withdraws consent or closes their account.

Once applicable retention periods have expired, data is securely deleted or irreversibly anonymized — so that it is no longer possible to identify the data subject from the remaining information.

8Your Rights as a Data Subject — LGPD

Brazil's General Data Protection Law (LGPD) guarantees you, as a data subject whose information is processed by 393bet24, the following rights, which may be exercised at any time:

To exercise any of these rights, submit a request to privacidade@393bet24.net with the subject line "LGPD Rights — [your CPF]". We will respond within 15 business days, within the timeframe established by the LGPD. We may request identity verification before processing your request to confirm it is being made by the data subject.

9Minors and Children's Data Protection

The services of 393bet24 are intended exclusively for users aged 18 and over. Collecting personal data from minors is expressly prohibited and contractually forbidden under our Terms and Conditions.

Should 393bet24 determine at any point that personal data from a minor has been collected — whether through false information provided during registration or by any other means — the data will be deleted immediately, the account will be closed, and any real balance deposited will be refunded after verification.

If you are the legal guardian of a minor and believe their data has been improperly collected by the platform, contact our team immediately at privacidade@393bet24.net. 393bet24 treats this type of request as the highest priority and responds within 24 business hours.

10How to Reach Us — Privacy Channel & DPO

393bet24 has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the internal point of contact responsible for receiving and handling personal data requests, ensuring LGPD compliance, and serving as the liaison with the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, ask questions about this policy, or submit any privacy-related request, please use the following channels:

• Privacy email (DPO): privacidade@393bet24.net — A channel dedicated exclusively to data protection matters. Response time: up to 15 business days;
• General email: contato@393bet24.net — For general questions about your account, payments, and player support;
• Live chat: Available 24 hours a day, 7 days a week, directly on the platform. For urgent account security issues, live chat is the fastest channel.

When contacting us through the privacy channel, please describe your request clearly and include: your full name, the CPF registered on the platform, and a specific description of what you wish to exercise (access, correction, deletion, etc.). We may request additional identity verification before processing your request.

11Updates to This Privacy Policy

A 393bet24 may update this Privacy Policy periodically to reflect changes in Brazilian law, platform features, or internal data processing practices. Any significant changes will be communicated by email at least 15 calendar days before taking effect.

The date of the last update is always displayed at the top of this page. We recommend reviewing this policy periodically, especially after receiving update notifications by email. By continuing to use the platform after changes take effect, you confirm that you have read and understood the updated version.

If updates involve significant changes to consent-based data processing — such as new purposes or new types of data collected — we will request your explicit consent before applying those changes to your account.