Privacy Policy of Ber4bet — how we handle your data

01 Who We Are

The Ber4bet is a Sports Betting and online entertainment platform available in ber4bet.com, operated for the Brazilian market. For the purposes of this Privacy Policy, Ber4bet is the Data Controller of the personal data collected from users — meaning it defines the purposes and means by which that information is processed.

Our commitment is to handle your data responsibly, transparently, and strictly within the limits of what is necessary to provide the service you signed up for. No data is collected out of curiosity or convenience — every type of information collected has a specific purpose explained in this document.

For questions, requests, or to exercise your rights as a data subject, use the contact channels listed in Section 13 of this policy. Ber4bet's Data Protection Officer (DPO) is available to address any privacy-related inquiries.

02 Data We Collect

Ber4bet collects different categories of data depending on how you interact with the platform:

Registration and identity data:

• Full legal name as shown on official ID;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (street, number, neighborhood, city, state, ZIP code);
• Identity documents (national ID, driver's license, or passport) when requested for KYC verification.

Financial and payment data:

• Pix key linked to the registered CPF;
• Credit or debit card details (truncated number, card brand, and expiration date — we do not store the CVV);
• Transaction history: deposits, withdrawals, bonuses, and bets placed;
• Financial institution used (Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago, and others).

Usage and browsing data:

• Access IP address;
• Device type, operating system, and browser;
• Pages visited, access times, and session duration;
• Interactions with games, bets, and platform features;
• Cookies and session identifiers (detailed in section 7).

Communication data:

• History of conversations with support via live chat or email;
• Communication and notification preferences set by the user.

03 How We Use Your Data

Data collected by ber4bet is used exclusively for the following purposes:

• Account creation and management: verify your identity, keep your registration details up to date, and ensure that only you can access your account;
• Transaction processing: process deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago, as well as withdrawals to the account holder's bank account;
• Provision of betting and gaming services: provide access to the Sports Betting sections (football, e-sports, MMA/UFC, basketball, volleyball), Live Casino, slots, crash games, poker, and jackpot;
• Compliance with legal obligations: compliance with the LGPD, Brazilian gambling legislation, anti-money laundering (AML) standards, and legally required Know Your Customer (KYC) obligations;
• Security and fraud prevention: detect suspicious behavior, unauthorized access attempts, use of multiple accounts, and other conduct prohibited by the Terms and Conditions;
• Responsible gambling: monitor usage patterns to identify signs of problem gambling and offer proactive support when needed;
• Communications: send transactional notifications about your account (deposit confirmations, withdrawals, bets), security alerts, and — with your consent — personalized promotional communications;
• Product improvement: analyze aggregated, anonymized usage data to improve the platform, identify bugs, and develop new features.

Ber4bet does not use your personal data for third-party advertising, does not sell your data, and does not share it with external advertisers. Any use of data for Ber4bet's own direct marketing purposes requires the user's express consent, which can be withdrawn at any time in the account settings.

04 Legal Basis for Processing

The LGPD requires that every personal data processing operation have a specific legal basis. Ber4bet grounds the processing of your data on the following bases set out in Article 7 of Law No. 13,709/2018:

• Performance of a contract (art. 7, V): registration, identity, and payment data are required to provide the service the user signed up for when creating their account. Without this data, it is not possible to operate the account, process deposits, or process withdrawals;
• Compliance with a legal obligation (art. 7, II): data collected for KYC, AML, and regulatory compliance purposes is processed in accordance with Brazilian legislation applicable to betting platforms and the regulations of the Central Bank of Brazil;
• Legitimate interest (art. 7, IX): usage and browsing data is processed for platform security, fraud prevention, and continuous service improvement purposes, always in respect of users' fundamental rights;
• Consent (art. 7, I): marketing communications, non-essential data collection, and the use of cookies that are not strictly necessary are subject to the explicit consent of the data subject, which may be withdrawn at any time.

When processing is based on consent, Ber4bet will request that consent in a clear and specific manner, without conditioning access to the core service on acceptance of optional data collection.

05 Data Sharing

Ber4bet does not sell users' personal data to third parties. Data sharing occurs only in the specific cases outlined below, always with the minimum controls necessary to protect your privacy:

• Payment partners: financial institutions and payment processors required to handle transactions via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago receive only the data strictly necessary to complete each transaction;
• Identity verification providers: KYC and AML partners who assist with document verification and fraud prevention may receive registration data for validation purposes. All operate under a data processing agreement compatible with the LGPD;
• IT infrastructure providers: hosting, cloud computing, and digital security providers that support platform operations. These partners act as data processors as defined by the LGPD and follow our instructions regarding the handling of your information;
• Regulatory and law enforcement authorities: when required by law, court order, or request from a competent authority, ber4bet may disclose personal data to Brazilian authorities responsible for investigating financial crimes, money laundering, or other legal violations;
• Auditors and compliance partners: specialized audit and regulatory compliance firms that verify the platform's adherence to its legal obligations.

06 Storage & Security

Ber4bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, improper disclosure, or destruction. The main security measures in place include:

• 256-bit SSL/TLS Encryption across all communications between your device and the platform's servers;
• Encryption at rest for sensitive data stored on ber4bet's servers;
• Role-based access control: only staff members with a functional need have access to users' personal data, always under logging and audit controls;
• Two-factor authentication available to all users and mandatory for operators with access to internal systems;
• Continuous security monitoring with automatic detection of anomalies, suspicious access attempts, and cyberattacks;
• Encrypted backups with a retention and disaster recovery policy that is tested on a regular basis;
• Penetration testing and security audits conducted by independent firms.

Data is stored on servers located in data centers with internationally recognized security certifications. In the event of a security incident that may affect your personal data, Ber4bet will notify you and the National Data Protection Authority (ANPD) within the deadlines established by the LGPD.

No security system is foolproof. If you notice any suspicious activity related to your Ber4bet account, contact support immediately via live chat, available 24 hours a day.

07 Cookies & Tracking

Ber4bet uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session active, processing bets, and securing access. They cannot be disabled without affecting your ability to use the service;
• Performance cookies: collect anonymous data on how users navigate the platform — most visited pages, load times, and errors — for technical improvement purposes. They do not identify you individually;
• Preference cookies: store your personal settings, such as your selected language, favorite sport, and notification preferences. They make navigation smoother so you don't have to reconfigure everything each time you visit;
• Analytics cookies: used for behavioral analysis in aggregated format, without individual identification. They require your consent and may be declined without losing access to the main service.

You can manage your cookie preferences in your browser settings or through ber4bet's preference panel. Declining non-essential cookies does not prevent you from using the platform, but may affect some personalization features.

Ber4bet does not use third-party tracking pixels for external advertising purposes. Session identifiers are used exclusively for security purposes and are not shared with advertising platforms.

08 Your Rights Under the LGPD

The General Data Protection Law grants you, as a data subject, the following rights, which may be exercised at any time with ber4bet:

• Access (art. 18, II): request confirmation that ber4bet processes your data and obtain a copy of the information stored;
• Correction (art. 18, III): request the update or correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion (art. 18, IV): request the anonymization or blocking of unnecessary data or data processed in violation of the LGPD, or the deletion of personal data processed on the basis of consent;
• Data Portability (art. 18, V): request the transfer of your data to another service or product provider, subject to ANPD regulations;
• Withdrawal of consent (art. 18, IX): withdraw consent for processing based on this legal ground at any time, without affecting the lawfulness of any processing carried out before the withdrawal;
• Right to Object (art. 18, §2): object to processing carried out on the basis of legitimate interest when your rights are being violated;
• Information on sharing (art. 18, VII): be informed about the entities with which your data has been shared;
• Not to be subject to automated decisions (art. 20): request human review of decisions made solely on the basis of automated processing that affect your interests.

To exercise any of these rights, contact Ber4bet by email at privacidade@ber4bet.com or via live chat. We will respond within 15 business days, as required by the LGPD. In more complex cases, we may request additional information to verify your identity before processing the request.

If you feel your rights have not been adequately addressed by Ber4bet, you may file a complaint directly with the National Data Protection Authority (ANPD), the government authority responsible for overseeing the LGPD in Brazil.

09 Data Retention

Ber4bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with mandatory legal retention periods. The general retention criteria are:

• Active account data: retained for the entire period the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 years after the transaction, as required by Brazilian anti-money laundering legislation and tax regulations;
• KYC and identity verification data: retained for a minimum of 5 years after account closure, in accordance with regulatory obligations;
• Security and audit logs: retained for up to 12 months for security incident and fraud investigation purposes;
• Betting history: retained for the duration of the account and for up to 5 years after closure, for dispute resolution and regulatory compliance purposes;
• Support communication data: retained for 2 years after case closure for quality and training purposes.

Once applicable retention periods have expired, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified. ber4bet conducts periodic data inventory reviews to ensure no information is retained beyond the required timeframe.

10 Minors

Ber4bet is a platform exclusively for users aged 18 and over, as required by Brazilian law and the platform's Terms and Conditions. Ber4bet does not intentionally collect, store, or process data from individuals under the age of 18.

Registration requires a CPF, which is validated against official Brazilian databases to confirm legal age. Selfies with a government-issued ID may be requested during the identity verification process when there is an indication that the user may be a minor.

If Ber4bet determines that it has collected data from a user under 18, the account will be closed immediately, balances will be frozen in accordance with compliance procedures, and the data will be deleted once the necessary investigation is complete. Parents or guardians who identify an account created by a minor in their care should contact support immediately via live chat.

11 International Data Transfers

Some infrastructure services used by Ber4bet — such as cloud computing, cybersecurity, and payment processing — may involve the storage or processing of data on servers located outside Brazil.

When this occurs, Ber4bet ensures that international data transfers meet the requirements of the LGPD, specifically:

• Data is transferred only to countries or international organizations that the ANPD recognizes as providing an adequate level of protection; or
• The transfer is supported by standard contractual clauses approved by the ANPD, or by global corporate rules (Binding Corporate Rules) that guarantee a level of protection equivalent to that of the LGPD; or
• The transfer is necessary for the performance of the contract between ber4bet and the user, such as in the case of international payment processing.

Ber4bet prioritizes infrastructure partners with a presence in Brazil and operations aligned with local legislation. When the use of foreign partners is unavoidable, the controls above are mandatorily applied before any data transfer takes place.

12 Changes to This Policy

Ber4bet may periodically revise this Privacy Policy to reflect changes in Brazilian data protection legislation, new processing practices, or improvements to internal procedures. Every new version will be published on this page with an updated "Last updated" date at the top of the document.

For changes considered significant — those that materially alter the rights of data subjects or the way personal data is processed — Ber4bet will send an email notification to the address registered on the account at least 7 days before the changes take effect.

We recommend reviewing this policy periodically. Continued use of the platform after a new version is published constitutes acceptance of the changes. If you do not agree with the changes, you have the right to close your account and request deletion of your data as described in section 8.

13 Contact & Data Protection Officer (DPO)

Ber4bet has appointed a Personal Data Processing Officer (DPO — Data Protection Officer), as required by the LGPD. The DPO is the point of contact for:

• Complaints and requests from data subjects related to the processing of personal data;
• Communications from the National Data Protection Authority (ANPD);
• Internal LGPD compliance matters.

To exercise your rights as a data subject or to ask questions about this Privacy Policy, please use the channels below:

• DPO Email: privacidade@ber4bet.com — response time of up to 15 business days;
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — for urgent requests;
• General email: contato@ber4bet.com — for all other account-related inquiries.

All support is provided in Brazilian Portuguese. Ber4bet is committed to responding to all privacy-related requests within the deadlines established by the LGPD, in a complete and transparent manner.

To review the Terms and Conditions governing use of the platform, visit our Terms and Conditions page.