1bet Privacy Policy — Data Protection in Brazil

This Privacy Policy describes how 1bet collects, stores, uses, and protects the personal data of users on the platform available at 1bet.world. It applies to all services offered by 1bet, including Sports Betting, online casino, slots, progressive jackpots, and crash games.

By creating an account at 1bet, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data under the terms described herein. If you disagree with any part of this Policy, do not create an account or use the platform.

The 1bet acts as the operator and controller of its users' personal data. Our Data Protection Officer (DPO) can be reached at contato@1bet.world for any questions related to privacy and data processing.

The 1bet collects only the data strictly necessary to provide the platform's services, meet legal obligations, and ensure the security of all users. Data collection is carried out transparently, with a defined legal basis for each data category.

We do not collect sensitive data (such as health data, racial origin, religious beliefs, or political opinions), and we do not request access to our users' photo gallery, camera, microphone, or phone contacts.

The data collected by 1bet are used exclusively for the purposes described below. We never use your data for purposes other than those stated in this Policy without prior notice and, where required, without renewing your consent.

• Account creation and management: Registration, authentication, identity verification (KYC), and profile information management;
• Financial transaction processing: Deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, as well as withdrawals via Pix and TED bank transfer to Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian banks;
• Provision of betting and casino services: Registration and settlement of Sports Betting, odds calculation, operation of slots, jackpots, crash games, and live casino;
• Fraud prevention and security: Detection of multiple accounts, use of automation tools, unauthorized access attempts, and suspicious activity that may compromise the integrity of the platform;
• Compliance with legal and regulatory obligations: Communications to regulatory bodies, tax authorities, and courts when required by law;
• Platform experience improvement: Usage analysis to optimize features, fix bugs, and personalize the experience — such as recommending betting markets based on the user's history;
• Service communications: Notifications about deposits, withdrawals, confirmed bets, active promotions, and important platform updates;
• Customer support: Ticket logging and resolution, interaction history to ensure quality of service.

For marketing communications and promotions not directly related to the contracted service, 1bet requests specific consent during registration. You may withdraw that consent at any time through your account settings or by contacting support.

The 1bet does not sell, rent, or share your personal data with third parties for commercial purposes. We share data only when strictly necessary for platform operations or as required by law, always with the appropriate safeguards in place.

• Payment processors: We share financial data with intermediaries regulated by the Banco Central do Brasil to process deposits via Pix, credit and debit cards, boleto bancário, PicPay, and Mercado Pago, and withdrawals via Pix and wire transfer. These partners operate under contractual confidentiality and security obligations;
• Identity verification providers (KYC): For the identity verification process required by industry regulations, we share documents with specialized KYC providers, always with encryption and under data processing agreements;
• Technology and infrastructure providers: Servers, security systems, and platform performance analytics tools. All technology vendors sign data processing agreements compatible with the LGPD;
• Regulatory and judicial authorities: When required by law, court order, or request from a competent regulatory body, 1bet provides the information requested. In all cases, we aim to share only the minimum data necessary to fulfill the request;
• Fraud prevention and anti-money laundering: We may share data with competent authorities when we identify suspicious activities that may constitute financial crimes or violations of applicable regulations.

The 1bet uses cookies and similar technologies to ensure the platform works properly, improve the user experience, and analyze service performance. Below, we describe the types of cookies we use.

You can manage your cookie preferences in your account settings on the 1bet or in your mobile or desktop browser settings. Disabling non-essential cookies does not affect access to the platform's core features.

The 1bet implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction. Our security practices include:

• End-to-end encryption: All communications between your device and 1bet's servers use TLS 1.3 with 256-bit encryption — the Brazilian banking standard;
• Secure password storage: Passwords are never stored in plain text. We use modern cryptographic hashing with an individual salt per user;
• Two-factor authentication (2FA): Available and recommended for all users. When enabled, it protects account access even in the event of a password breach;
• Access monitoring: Automated systems monitor suspicious access attempts, such as logins from unusual locations or multiple failed password attempts;
• Internal access control: Only 1bet employees with a justified operational need have access to user data, always with an audit trail;
• Encrypted backups: Data is replicated across secure servers with encrypted backups to ensure continuity in the event of technical failures;
• Incident response program: In the event of any security incident that may affect personal data, 1bet notifies the affected users and the ANPD within the timeframes established by the LGPD.

Despite every effort, no security system is completely foolproof. That's why we also recommend using a strong, unique password for your 1bet account. 1bet, enable two-factor authentication and never share your login credentials with third parties.

The 1bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum retention periods required by law. The general retention criteria are:

When closing your account at 1bet, operational data is anonymized or deleted, except where retention is required by a legal or regulatory obligation. Data retained under legal obligation is kept securely and in isolation, with no use for any other purpose.

The LGPD grants you, as the owner of your personal data, a set of rights that may be exercised at any time with 1bet. See what those rights are and how to exercise them:

Data privacy is not something 1bet treats as regulatory red tape. It's a matter of respect for everyone who uses the platform. When you bet on the Brasileirão from your phone, deposit via Pix, or play Aviator late at night, you're entrusting 1bet with personal and financial information that needs to be in good hands. And that's exactly what we do: we take good care of it.

Pix has transformed the way Brazilians move money. Today, over 90% of deposits at 1bet happen via Pix — fast, free, and available 24 hours a day at every Brazilian bank, from Nubank to Banco do Brasil. When you make a deposit via Pix at 1bet, your banking data is processed by financial intermediaries regulated by the Banco Central, with end-to-end encryption. 1bet never has direct access to your bank account — Pix works as a direct transfer between your account and the platform's account, with no exposure of sensitive data.

One important point worth clarifying: the 1bet may request document verification (KYC — Know Your Customer process) before processing withdrawals above a certain amount or when there are inconsistencies in the registration. This process exists to protect you — it ensures that no one can withdraw your funds using stolen or false information. Documents submitted for KYC are encrypted, reviewed by our verification partner, and never used for any purpose other than identity verification.

The 1bet also has a clear policy on marketing communications. You will only receive promotional emails or notifications if you give explicit consent during registration. We do not spam, we do not send unsolicited messages, and we honor every request to opt out of marketing communications. If you wish to stop receiving promotional communications, simply go to your account settings or click "unsubscribe" in any email sent by the platform — the change takes effect immediately.

Finally, we want to make clear that this Privacy Policy may be updated periodically to reflect changes to 1bet, new regulatory requirements, or updates to our data protection practices. When we make significant changes, active users will be notified by email at least 7 days in advance. The date of the last update is always shown at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated Policy.

The 1bet reserves the right to update this Privacy Policy at any time to reflect changes in services, legal requirements, or our data protection practices. Whenever material changes are made, we will notify active users via their registered account email and through an in-platform notification, with a minimum of 7 days' advance notice.

To exercise any right as a data subject, clarify questions about this Policy, or report any privacy-related concern at 1bet, please contact our team:

• DPO email: contato@1bet.world (subject: "Privacy / LGPD")
• Live chat: Available 24 hours directly on the 1bet platform
• Response time: Up to 15 business days for LGPD rights requests

If you are not satisfied with our response, you have the right to file a complaint with the National Data Protection Authority (ANPD), the authority responsible for overseeing the LGPD in Brazil.