Bet355 Privacy Policy – How We Protect Your Data in Brazil

1. Who Controls Your Data

The controller of the personal data processed under this Policy is the company responsible for operating the platform bet355, accessible at bet355.best. The controller is responsible for determining how and for what purposes your data is collected and processed, pursuant to art. 5, item VI, of the General Data Protection Law (LGPD — Law No. 13.709/2018).

For any questions regarding the processing of your personal data, the exercise of your rights as a data subject, or to submit a formal request, you may contact bet355's Data Protection Officer (DPO) at contato@bet355.best or via live chat available on the platform, 24 hours a day.

2. What Data We Collect

2.1 Data provided directly by you

By creating an account and using the services of bet355, you directly provide the following information:

• Identification data: full name, CPF, date of birth, RG or driver's license number;
• Contact data: email address, mobile phone number, full residential address (street, number, complement, neighborhood, city, state, ZIP code);
• Verification data (KYC): government-issued photo ID, verification selfie, recent proof of address, and in some cases proof of income or source of funds;
• Financial data: registered Pix key, credit or debit card details (masked number, card brand, expiry date), bank account details for wire transfers, PicPay or Mercado Pago wallet identifier.

2.2 Automatically collected data

While you use the platform, we automatically collect:

• Access data: IP address, device type, operating system, device model, browser version;
• Location data: approximate geolocation derived from IP address for geographic eligibility verification;
• Behavioral data: pages visited, session time, clicks, bets placed, games accessed, access times;
• Transaction data: deposit and withdrawal history (method, amount in R$, date and time, status), full betting history and results;
• Cookies and identifiers: session data, language and notification preferences stored locally.

2.3 Data We Do Not Collect

Bet355 does not collect sensitive data categories such as racial or ethnic origin, religious beliefs, genetic or biometric data for unique identification, health data (beyond what is necessary for responsible gambling programs, with explicit consent), or data relating to sexual life. We also do not collect passwords in plain text — they are stored exclusively in encrypted format using an irreversible hash.

3. What We Use Your Data For

The bet355 processes your personal data on legally defined grounds under the LGPD. The table below summarizes the main purposes and their corresponding legal bases:

3.1 Marketing communications

Bet355 may send communications about promotions, bonuses, and news by email and SMS based on the consent you provided at registration. You can withdraw that consent at any time by clicking "unsubscribe" in the footer of any promotional email or by adjusting your notification preferences in your account dashboard — at no cost and with no impact on your use of the platform.

3.2 Automated decisions

Bet355 uses automated processes for fraud detection, transaction risk analysis, and identification of problematic gambling behavior patterns. If an automated decision significantly impacts your account (such as a preventive block), you have the right to request a human review of that decision, as provided under art. 20 of the LGPD.

4. Data Sharing with Third Parties

4.1 bet355 does not sell your data

The bet355 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. Full stop. Any sharing occurs exclusively in the situations described below, with appropriate controls in place.

4.2 Vendors and Operational Partners

To operate the platform, bet355 shares only strictly necessary data with the following categories of partners, all bound by confidentiality and data protection agreements:

• Game providers: companies such as Evolution Gaming and Pragmatic Play receive session data necessary to run live games (session ID, in-game balance). They do not receive full identification data or financial information;
• Payment processors: to process deposits via Pix, card, PicPay, and Mercado Pago, we share with the respective processors only the data required to complete the transaction, in compliance with the rules of the Banco Central do Brasil and the applicable payment networks;
• Identity verification providers: specialized KYC companies receive documents and selfies solely for the verification process, with retention limited to the period strictly necessary;
• IT infrastructure providers: servers, cloud services, and monitoring tools that process data under contract and without access for their own purposes;
• Analytics and security services: fraud detection and behavioral analysis tools that receive pseudonymized data.

4.3 Legal and regulatory obligations

Bet355 may share data with public authorities — such as the Receita Federal, COAF (Financial Activities Control Council), Polícia Federal, or the gambling regulatory authority — when required by law, court order, or a legitimate request from a competent authority. In such cases, bet355 shares only the minimum information necessary to fulfill the request and, where legally permitted, notifies the affected user.

4.4 International Data Transfers

Some of our technology and game providers operate infrastructure outside Brazil. When your data is transferred to other countries, bet355 ensures that the transfer takes place on the basis of standard contractual clauses that guarantee a level of protection equivalent to that required by the LGPD, in accordance with mechanisms approved by the ANPD.

5. How Long We Retain Your Data

5.1 Retention criteria

The bet355 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal and regulatory requirements. The main retention periods are:

• Active account data: retained for the full duration of your bet355 account;
• Financial transaction data: 10 years from the transaction date, as required by Brazilian tax legislation and anti-money laundering regulations;
• KYC data (verification documents): 5 years after account closure, in accordance with regulatory obligations in the betting sector;
• Betting data and gaming history: 5 years for audit purposes and dispute resolution;
• Access and security logs: 6 months for security incident analysis, which may be extended if an investigation is ongoing;
• Marketing preferences and consents: retained for as long as the account remains active and for an additional 2 years after closure as proof of consent.

5.2 After account closure

When you close your account at bet355 — whether voluntarily or through permanent self-exclusion — your identification and contact data are pseudonymized once the mandatory retention period has elapsed. This means the information remains stored for legal purposes, but is dissociated from your identity in a way that cannot easily be linked back to you, except to fulfill specific legal obligations.

6. How We Protect Your Data

6.1 Technical security measures

The bet355 implements a robust set of technical measures to protect your personal data:

• Encryption in transit: all communications between your device and bet355's servers are protected by TLS 1.3 with AES-256 encryption — the same standard used by Brazil's leading digital banks, including Nubank, Itaú, and Bradesco;
• Encryption at rest: sensitive data stored on our servers is encrypted with AES-256;
• Password hashing: passwords are stored exclusively as irreversible hashes — not even bet355 administrators have access to your password in plain text;
• Two-factor authentication (2FA): available and recommended for all users, adding an extra layer of protection to account access;
• 24/7 anti-fraud monitoring: automated system that analyzes access and transaction patterns in real time to identify suspicious activity;
• Penetration testing: bet355's infrastructure undergoes periodic security assessments conducted by independent specialized teams.

6.2 Organizational measures

Beyond technical measures, bet355 applies organizational controls to safeguard your data: personal data access is restricted to employees who need it to perform their duties; the entire team receives regular security and privacy training; confidentiality agreements are in place with all staff and vendors; and documented procedures are followed for responding to security incidents.

6.3 Security Incidents

In the event of a security incident that poses a real risk to your rights — such as a personal data breach — bet355 commits to: notifying the ANPD within the legal deadline; informing affected users by email as promptly as possible; describing the nature of the data involved and the measures taken to mitigate the impact; and providing a point of contact for further clarification.

7. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD — Law No. 13,709/2018) grants you a set of rights over your personal data. The bet355 is committed to making it easy for you to exercise these rights — promptly and without unnecessary red tape.

7.1 How to exercise your rights

To exercise any of the rights listed above, please contact us at contato@bet355.best with the subject line "LGPD Rights – [request type]". bet355 will respond within 15 business days of receiving your request. For more complex cases, this period may be extended by an additional 15 days, with prior notice.

To process your request, we may ask you to verify your identity — a necessary step to ensure we do not disclose or alter your data based on third-party requests. Verification can be done via your registered email or by submitting a photo of the ID document linked to your account.

7.2 Filing a Complaint with the ANPD

If you believe bet355 is not handling your data in compliance with the LGPD and are not satisfied with our response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), accessible through the official Brazilian federal government website.

8. Cookies and Tracking Technologies

8.1 What are cookies

Cookies are small text files stored on your device when you access the bet355. They allow the platform to recognize your device, keep your session active, and remember your preferences between visits. Rest assured: cookies are not executable programs and cannot access other files on your phone or computer.

8.2 Types of Cookies Used

8.3 How to Manage Cookies

You can manage your cookie preferences at any time through the privacy settings panel available in your bet355 account. You can also configure your browser to block or delete cookies — though disabling essential cookies may affect how the platform functions (for example, you will need to log in on every visit).

In the most common browsers, cookie settings can be found at: Chrome → Settings → Privacy and security → Cookies; Firefox → Options → Privacy & Security; Safari → Preferences → Privacy. On Android and iPhone, the settings are located within the browser app you are using.

8.4 Other trackers

In addition to cookies, bet355 may use similar technologies such as localStorage, sessionStorage, and tracking pixels for the same purposes described above. All such technologies are covered by this policy and subject to the same consent controls.

9. Minors

The services of bet355 are intended exclusively for individuals aged 18 and over. bet355 does not knowingly collect personal data from anyone under 18 and does not allow minors to create accounts or use the platform.

During registration, we collect your date of birth and verify that you meet the minimum age requirement. The KYC process includes document verification that confirms you are of legal age. Accounts created with a false date of birth to bypass age verification will be closed upon detection, with possible balance retention for review in accordance with the Terms and Conditions.

If you are a guardian and believe a minor has created a bet355 account or accessed the platform, please contact us immediately at contato@bet355.best. We will treat the matter as a priority, close the account, and delete the minor's data as quickly as possible, in compliance with applicable legal retention obligations.

We recommend that parents and guardians use parental control software on devices shared with children and teenagers to prevent access to betting platforms and other adult-only content.

10. Changes to This Policy and Contact

10.1 Privacy Policy Updates

The bet355 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or improvements to the transparency of our communications. Every update comes with a new version number and revision date, visible at the top of this document.

When an update involves significant changes to how we process your data — particularly new purposes for processing or new types of sharing — you will be notified at least 15 days in advance via your registered email and/or an in-platform notification. Continued use of bet355 after the effective date of the changes constitutes acceptance of the updated version. If you do not agree, you may close your account before that date.

10.2 How to Get in Touch

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights, you can reach us through the following official channels:

• DPO email: contato@bet355.best — subject: "Privacy / [your request]"
• Live chat: available 24 hours a day, 7 days a week, directly on the bet355 platform

Bet355 responds to personal data requests within 15 business days. For urgent matters (suspected security breach or unauthorized access), live chat is the recommended channel.