Privacy Policy of 00001bet — How We Protect Your Data

1. Introduction

The 00001bet is committed to protecting the privacy and personal data of all its users. This Privacy Policy describes how we collect, store, use, and protect the information you provide when using the sports betting and online casino platform available at 00001bet.best.

The 00001bet operates in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709, of August 14, 2018), Brazil's primary legal framework for data protection. All internal data processing procedures have been reviewed to ensure adherence to the requirements of this law.

This policy applies to all personal data processed by the 00001bet in the context of delivering its services: account registration, Sports Betting (football, volleyball, basketball, MMA), casino games (slots, roulette, Blackjack, crash games), deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, withdrawals, customer support, and marketing communications.

2. Data Controller

Under LGPD terminology, the controller is the person or company that decides how and why personal data is processed. Under this policy, the controller is the entity operating the platform 00001bet, responsible for the 00001bet.best website and all sports betting and online casino services offered under that brand in Brazil.

For any request related to the processing of your personal data — including requests for access, correction, deletion, or portability — you can reach us directly by email at contato@00001bet.best or via live chat available 24 hours a day on the platform. The response time for LGPD-related requests is up to 15 business days from the date of receipt.

3. Data Collected

The 00001bet collects different categories of personal data depending on how you interact with the platform. All collection follows the principle of necessity — we only collect what is strictly required for each purpose.

Data provided directly by you at registration:

• Full legal name (as shown on official ID);
• CPF (Brazilian Federal Taxpayer Registry);
• Date of birth;
• Email address;
• Brazilian mobile phone number;
• Full residential address (including ZIP code);
• Access password (stored in encrypted format — we do not have access to the original value).

Data collected during the identity verification (KYC) process:

• Photo ID document (RG, CNH, or passport);
• Proof of address;
• Selfie with ID document (when requested for additional verification).

Financial transaction data:

• Pix key registered for withdrawals;
• Partial credit or debit card details (full card data is never stored on 00001bet — we follow the PCI DSS standard);
• Deposit and withdrawal history including amounts, dates, and methods;
• Transaction identifiers from payment processors.

Platform usage data:

• Full betting history (sport, event, market, odds, amount wagered, result);
• Casino game history (title, date, amount wagered, result);
• Access logs (date, time, IP address, device used, browser);
• Gaming preferences and account settings;
• Customer support interactions (chat transcripts, emails).

4. Purpose of Data Use

The 00001bet uses your personal data solely for the purposes listed below. No data is used for purposes incompatible with what is described here without your explicit consent.

Marketing communications by email and SMS are sent only with your consent, obtained at registration or through a subsequent opt-in. You can unsubscribe at any time through the communication preferences section in your account or by clicking the unsubscribe link in any email you receive.

5. Legal Basis (LGPD)

The LGPD requires that all personal data processing have a legal basis to justify it. The 00001bet relies on the following legal bases for its data processing activities:

• Contract performance (art. 7, V of the LGPD): the primary basis for all processing necessary to deliver our services — account creation, bet processing, Pix deposits, and withdrawals;
• Compliance with a legal or regulatory obligation (art. 7, II): legal basis for identity verification (KYC), retention of financial records, and mandatory reporting to authorities in cases of suspected money laundering;
• Legitimate interest (art. 7, IX): legal basis for fraud prevention, platform security, usage pattern analysis for service improvement, and communications regarding operational account updates;
• Consent (art. 7, I): the legal basis for marketing communications, promotions, and personalized offers. Consent may be withdrawn at any time without affecting access to any other services.

6. Data Sharing

The 00001bet does not sell your personal data to third parties under any circumstances. Information is shared only in the strictly necessary cases described below:

• Partner game providers (such as Evolution and Pragmatic Play): receive only the minimum data necessary to process the game session and verify eligibility, such as a unique user identifier. They do not receive full financial data or CPF;
• Payment processors: when processing deposits via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago, the data required for the transaction is shared with the responsible processor. All partner processors comply with the PCI DSS standard for card data;
• Identity verification providers: when required for KYC document validation, we may use specialized identity verification services. These providers receive documents solely for verification purposes and do not retain them after the process is complete;
• Regulatory and legal authorities: the 00001bet cooperates with Brazilian authorities — COAF, Receita Federal, the Ministry of Finance, and the judiciary — when there is a legal obligation to provide information or when required by a valid court order;
• Technology service providers: hosting providers, email services, support chat platforms, and security analytics tools may have access to the minimum operational data needed to deliver their services. All are contractually bound to data protection standards equivalent to those in this policy.

7. Data Security

The 00001bet implements robust technical and organizational measures to protect your personal data against unauthorized access, improper alteration, accidental disclosure, or destruction.

Technical measures:

• Encryption 256-bit SSL/TLS across all communications between your device and 00001bet's servers — the same standard used by major Brazilian banks such as Itaú, Bradesco, and Banco do Brasil;
• Passwords stored as salted hash (bcrypt), making it impossible to recover the original password even in the event of unauthorized database access;
• Credit and debit card data is not stored on 00001bet — we fully comply with the PCI DSS (Payment Card Industry Data Security Standard), and data is tokenized by certified payment processors;
• Internal access controls based on the principle of least privilege — each team member can only access the data strictly necessary for their role;
• Continuous security monitoring and intrusion detection systems running 24 hours a day;
• Encrypted backups performed regularly with storage across separate geographic locations.

Organizational measures:

• Regular security and data protection training for all staff;
• Internal incident management policy with a defined protocol for notifying the ANPD and affected users in the event of a data breach, as required by the LGPD;
• Periodic security reviews and penetration testing carried out by independent specialists.

8. Data Retention

The 00001bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, always observing the applicable legal retention obligations in Brazil.

• Registration data and active account data: retained for as long as the account remains active. After account closure, data is anonymized or deleted within 90 days, except as noted below;
• Financial records (deposits, withdrawals, betting history): retained for 5 years after each transaction, as required by tax and anti-money laundering regulations under Brazilian law (Law No. 9,613/1998 and Federal Revenue Service rules);
• Identity verification (KYC) documents: retained for 5 years after account closure, in accordance with compliance obligations;
• Access records and security logs: retained for 6 months, pursuant to the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
• Customer support transcripts: maintained by 2 years for quality assurance and dispute resolution purposes;
• Marketing consent data: retained for the duration of active consent and for up to 2 years after its withdrawal, for purposes of documenting the original consent.

Once the retention period expires, data is securely deleted or irreversibly anonymized so that it can no longer be linked to you.

9. Cookies & Tracking Technologies

The 00001bet uses cookies and similar technologies to ensure the platform functions correctly, personalize your experience, and analyze usage patterns. Cookies are small text files stored on your device that allow the site to recognize your browser on subsequent visits.

Types of cookies used:

• Strictly necessary cookies: essential to the platform's operation — authentication, session management, security. They cannot be disabled without affecting how the site functions;
• Performance cookies: collect anonymized information about how users navigate the platform, which pages are most visited, and any technical errors. They help improve overall site performance;
• Preference cookies: allow the platform to remember your settings, such as language, notification preferences, and in-site browsing history;
• Fraud prevention cookies: identify patterns of suspicious behavior — such as multiple registrations from the same device — to protect the integrity of the platform and its users.

The 00001bet does not use third-party advertising cookies to track you across other sites outside the platform. Analytics cookies are configured to anonymize IP addresses before processing. You can manage cookie settings through your browser — however, blocking necessary cookies may prevent access to parts of the platform.

10. Your Rights as a Data Subject

The LGPD grants you, as the data subject, the following rights regarding the processing carried out by 00001bet. You can exercise them at any time through live chat support or by emailing contato@00001bet.best:

11. Minors

The platform 00001bet is intended exclusively for individuals who are 18 years of age or older. We do not intentionally collect personal data from individuals under 18. If you are a parent or legal guardian and believe a minor has used the platform and provided personal data, please contact 00001bet immediately via live chat or by emailing contato@00001bet.best.

As soon as we confirm that an account belongs to a user under 18, it will be immediately blocked, the data will be deleted in accordance with applicable legal obligations, and — if there is an account balance — appropriate legal steps will be taken to arrange its return.

The identity verification process (KYC) with CPF confirmation is one of the primary safeguards that 00001bet uses to prevent minors from accessing the platform. Parents and guardians should use parental control tools on children's and teenagers' devices to block access to sports betting and online casino sites.

12. Changes to This Policy

The 00001bet may update this Privacy Policy periodically to reflect changes in legislation, data handling practices, or the services offered. When that happens, the "last updated" date at the top of this page will be revised.

For changes that materially affect your rights or the way we handle your data — such as new purposes of use, new third-party sharing arrangements, or changes to the legal bases —, the 00001bet will send an email notification to registered users at least 15 days' notice before the change takes effect, giving you the opportunity to review the updates and, if necessary, revoke consents or close your account.

We recommend reviewing this policy periodically to stay informed about how your data is protected. The most current version will always be available at 00001bet.best/privacy-policy.

13. Contact and Data Protection Officer (DPO)

The 00001bet has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that process data at scale. The DPO serves as the communication channel between you, the 00001bet and the National Data Protection Authority (ANPD).

To exercise any right under the LGPD or to clarify questions about how your personal data is processed, you may reach us through the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the 00001bet.best platform — the fastest option for urgent matters;
• Email: contato@00001bet.best — for formal LGPD-related requests, please include "LGPD Request" in the subject line to ensure priority routing to the DPO;

The response time for requests related to your rights as a data subject is up to 15 business days from the confirmation of receipt. In more complex cases, such as large-volume data portability requests, the deadline may be extended with prior notice and justification.