Privacy Policy of 901bet — Your Data Protected

1. Introduction and Purpose of This Policy

The 901bet — sports betting and online casino platform available at 901bet.best — developed this Privacy Policy to explain clearly and accessibly how we handle the personal information of those who use our services.

This document was drawn up in accordance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018), which governs the processing of personal data in Brazil. 901bet believes that privacy is a fundamental right, and that our users' trust is built, among other things, on the transparency with which we manage the information entrusted to us.

When you create your account on 901bet, make a deposit via Pix, place a bet on the Brasileirão Série A, or access any game in our live casino, you agree to the practices described in this policy as it stands on the date of access. Whenever we make material changes, we will notify you at least 7 days in advance by email and through a prominent notice on the platform.

2. Personal Data Controller

The controller of the personal data processed under this Policy — that is, the entity that defines the purposes and means of processing — is the company responsible for operating the platform 901bet.best.

To exercise any right provided by the LGPD, clarify questions about the processing of your data, or submit a formal request to the Data Protection Officer (DPO), use the channels listed in Section 11 of this Policy.

The 901bet operates under a gaming license obtained from an internationally recognized regulatory authority and meets all financial compliance and data protection obligations required by both the gaming regulator and Brazil's LGPD.

3. What Data We Collect

The 901bet collects only the data strictly necessary to provide the platform's services securely, in compliance with applicable legislation. Collection occurs at three main points:

3.1 Data provided directly by you:

• Full name and date of birth;
• CPF (Cadastro de Pessoas Físicas);
• Full residential address including ZIP code;
• Email address and mobile phone number;
• Government-issued ID (RG, CNH, or passport) — collected during the KYC verification process;
• Pix key details (CPF, email, phone number, or random key) for processing deposits and withdrawals;
• Credit or debit card information, processed directly by certified payment gateways — 901bet does not store this data on its servers.

3.2 Data collected automatically during use:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, session duration, and features used;
• Betting history, games accessed, and amounts wagered;
• Financial transaction logs (deposits, withdrawals, bonuses);
• Behavioral patterns relevant to detecting problem gambling or suspicious activity.

3.3 Data received from third parties:

• Identity verification information from credit bureaus or document validation services, where required for the KYC process;
• Fraud prevention and anti-money laundering data from providers specialized in financial compliance.

4. How We Use Your Data

Each piece of data collected by 901bet has a specific, legitimate, and proportionate purpose. The table below summarizes the main purposes and their corresponding legal bases under the LGPD:

You can withdraw your consent to marketing communications at any time by accessing the notification settings in your account dashboard on the 901bet or by requesting removal from the email list via support. Withdrawing consent does not affect any processing carried out prior to the request.

5. Data Sharing with Third Parties

The 901bet does not sell personal data of its users to third parties, under any circumstances. Information is only shared when strictly necessary for the platform's operation, as described below:

• Payment providers: Transaction data is transmitted to payment gateways (Pix via Banco Central, card processors, PicPay, Mercado Pago) solely to process deposits and withdrawals. These partners are contractually required to handle data with the same level of protection demanded by 901bet;
• Game providers: Your username and account ID may be shared with providers such as Pragmatic Play, Evolution Gaming, or Spribe to enable access to games. No financial data is shared with game providers;
• KYC verification services: Documents submitted for identity verification are processed by partners specialized in document validation, under confidentiality agreements and in compliance with the LGPD;
• Regulatory and judicial authorities: 901bet cooperates with competent Brazilian and international authorities when there is a formal legal request, court order, or regulatory obligation to disclose information;
• Analytics tools: Anonymized browsing data is used by performance analytics tools to improve the platform experience. This data does not allow individual users to be identified.

6. Data Storage and Security

The 901bet applies robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption across all communication between the user's device and the platform's servers — both on web pages and in API calls;
• Financial data (card numbers, full banking details) are never stored on 901bet's servers — they are tokenized and processed directly by certified payment gateways;
• User passwords are stored exclusively as salted hash values — 901bet does not have access to the original password you registered;
• Restricted internal access: Only employees with a proven operational need have access to personal data, always recorded in audit logs;
• Continuous Monitoring of cyber threats with an intrusion detection system active 24 hours a day;
• Encrypted backups stored on redundant servers in separate geographic locations to ensure availability and recovery in the event of an incident.

In the event of a security incident that may pose a risk to data subjects, the 901bet will notify the National Data Protection Authority (ANPD) and affected users within the deadlines established by the LGPD, with clear information about the nature of the incident and the measures taken.

7. Cookies and Tracking Technologies

The 901bet uses cookies and similar technologies to ensure the platform functions properly, personalize the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — maintaining login sessions, bet slips, and language settings. They cannot be disabled without affecting access to the service;
• Performance cookies: Collect anonymous information about how users interact with the platform — most visited pages, session duration, errors encountered. Used exclusively to improve the 901bet experience;
• Functionality cookies: Remember your preferences — such as favorite game history, betting settings, and preferred odds format — to personalize your experience on future visits;
• Analytics cookies: Enable aggregate analysis of platform behavior through analytics tools using anonymized data.

You can manage your cookie preferences at any time through the consent banner displayed on your first visit, or via your browser settings. Disabling non-essential cookies may affect some personalization features on the platform, but will not prevent access to games and betting.

The 901bet does not use tracking cookies for behavioral advertising on third-party networks. The analytics cookies used are configured with IP anonymization, preventing individual users from being identified in statistical reports.

8. Protection of Minors

The 901bet is an adult entertainment platform intended exclusively for individuals who are 18 years of age or older. Collecting personal data from minors is expressly prohibited and contrary to this Policy.

To ensure the protection of minors, 901bet takes the following measures:

• Date of birth is required at registration, with validation that prevents users under 18 from proceeding;
• Photo ID verification during the KYC process, including analysis of the date of birth shown on the document;
• Monitoring systems that identify usage patterns inconsistent with the profile declared at registration;
• Immediate closure of accounts identified as belonging to minors, with a refund of any deposited amounts and forfeiture of any winnings obtained during the period of irregular use.

If you suspect that a minor is using the 901bet, please contact us immediately by email at suporte@901bet.best so the matter can be investigated and resolved as a priority.

9. Your Rights as a Data Subject (LGPD)

The General Personal Data Protection Law (LGPD) guarantees you, as the data subject, a set of rights regarding your personal data processed by 901bet. You may exercise any of these rights at any time through the support channel listed in section 11.

To exercise any of these rights, please contact us by email at privacidade@901bet.best with the subject line "LGPD Rights – [your right]" along with your full name and registered CPF. 901bet will respond within the 15 business days, as established by the LGPD.

10. How Long We Keep Your Data

The 901bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, or for the minimum period required by applicable law. The criteria used to determine retention periods are:

• Registration and KYC data: Retained for a minimum of 5 years after account closure, in accordance with gaming regulatory compliance and anti-money laundering obligations;
• Financial transaction history: Retained for 5 years as required by Brazilian tax and regulatory legislation;
• Betting and game history: Retained for 3 years for dispute resolution and compliance audit purposes;
• Security and access logs: Retained for 12 months for the purpose of detecting and investigating security incidents;
• Support communications: Retained for 2 years for quality assurance and recurring dispute resolution purposes;
• Marketing data (with consent): Retained while consent is active. After consent is withdrawn, data is removed from marketing lists within 30 days.

Once the applicable retention periods expire, data is securely deleted or irreversibly anonymized, so that it is no longer possible to identify the individual from the remaining information.

11. Contact the Data Protection Officer (DPO)

The 901bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and serving as a communication channel between data subjects, the company, and the ANPD.

To contact 901bet's DPO or exercise any right set out in this Policy:

• Privacy email: privacidade@901bet.best — exclusively for data protection and LGPD matters;
• General support: suporte@901bet.best or live chat available 24/7 in Brazilian Portuguese on the platform;
• Response time: Up to 15 business days for LGPD rights requests; up to 48 business hours for other privacy matters.

When reaching out to exercise your rights, please provide:

1. Full name as registered on the platform;
2. Registered CPF;
3. Account email address;
4. A clear description of the right you wish to exercise or the request you wish to make.

The 901bet may request additional information to verify your identity before processing the request — this step is necessary to ensure that data is provided exclusively to the legitimate account holder.