75bet Privacy and Data Protection Policy

1. Introduction & Controller Identification

A 75bet ("Platform", "we", "our") respects the privacy of its users and is committed to protecting the personal data processed in connection with its sports betting, online casino, poker, and digital entertainment services. This Privacy Policy describes how 75bet collects, uses, stores, shares, and protects the information of users on the 75bet.life platform.

For the purposes of the General Personal Data Protection Law (LGPD — Law No. 13,709, of August 14, 2018), 75bet acts as controller of its users' personal data, being responsible for decisions regarding the processing of that information.

This Policy applies to all 75bet users — registered or not — who access the platform on any device, including mobile phones, tablets, or computers. By creating an account or using 75bet's services, the user confirms they have read and understood the practices described here.

2. What Personal Data We Collect

2.1 Data Provided Directly by the User

During registration and use of the platform, 75bet collects the following categories of data provided directly by the user:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile number, full residential address including ZIP code;
• Identity documents: photo ID (RG or CNH, front and back) and a selfie holding the document, collected during the identity verification (KYC) process;
• Financial data: Pix key, credit/debit card details (stored in tokenized form by the payment processor), bank account information for wire transfers;
• Declared preferences: sports and categories of interest listed in the profile.

2.2 Automatically Collected Data

In addition to data provided directly, 75bet automatically collects technical information generated during use of the platform:

• Access data: IP address, browser type and version, operating system, device model;
• Browsing data: pages visited, session duration, clicks, and navigation sequences within the platform;
• Approximate location data: inferred from IP address, without GPS collection;
• Game usage data: betting history, games accessed, amounts wagered and received, activity timestamps.

2.3 Third-Party Data

In some cases, 75bet may receive information from third parties to supplement user data, such as payment confirmations sent by processors like Pix (via Banco Central), PicPay, or Mercado Pago, or identity verification information from authorized data bureaus.

3. How We Use Your Data

75bet uses collected personal data exclusively for the following purposes:

3.1 Account Creation and Management

Your identification and contact details are required to create your account, authenticate your access, recover your password, and keep your profile settings up to date. Without this data, it is not possible to operate an individual account on the platform.

3.2 Financial Transaction Processing

Financial data — such as Pix keys, card information (tokenized), and banking details — is used to process deposits and withdrawals securely. 75bet does not store full credit card data on its own servers; this data is tokenized by our partner payment processors.

3.3 Identity Verification and Fraud Prevention

Documents submitted during the KYC process are used to verify account holder identity and prevent fraud, money laundering, underage use, and multiple account creation. This purpose is grounded in legal obligation and the platform's legitimate interest.

3.4 Compliance with Legal and Regulatory Obligations

75bet may be required to retain and share data with competent Brazilian authorities — such as the Federal Revenue Service, Central Bank, Federal Police, or Public Prosecutor's Office — when legally mandated. These cases are handled on the legal basis of legal obligation, with no additional user consent required.

3.5 Platform Improvement and Personalization

Browsing and usage data are used to understand how users interact with the platform, identify technical issues, improve performance, and personalize betting and game recommendations based on demonstrated interests. This personalization happens within the platform and does not involve selling data to third parties.

3.6 Communication & Support

The registered email and phone number are used to send account notifications (deposit confirmations, withdrawal updates, security alerts) and, with your consent, to communicate available promotions and bonuses. You can manage your communication preferences at any time from your account dashboard.

4. Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a legal basis to justify it. 75bet grounds the processing of each data category in the following legal bases set out in Article 7 of the LGPD:

• Contract performance (art. 7º, V): identification, contact, and financial data required to operate the account and process transactions are handled on the basis of the service agreement between 75bet and the user;
• Legal obligation (art. 7, II): identity verification (KYC), retention of financial records, and disclosure of information to authorities are carried out on the basis of compliance with Brazilian legal and regulatory obligations;
• Legitimate interest (art. 7, IX): browsing and platform usage data are processed for fraud prevention, security improvement, and service enhancement, based on 75bet's legitimate interests, provided those interests do not override the user's fundamental rights;
• Consent (art. 7, I): marketing communications and promotional messages sent by email or SMS are only sent with the user's express consent, which may be withdrawn at any time.

5. Data Sharing with Third Parties

75bet does not sell, rent, or trade its users' personal data. Information is only shared with third parties in the following situations, always with appropriate safeguards in place:

5.1 Payment Processors

To process deposits and withdrawals, 75bet shares the necessary financial data with payment partners — including Pix processors accredited by the Central Bank of Brazil, PicPay, Mercado Pago, and card acquirers (Visa, Mastercard, Elo). These partners act as data processors under 75bet's instruction and are bound by contractual confidentiality and security obligations.

5.2 Technology and Infrastructure Providers

Cloud service providers, data analytics tools, and customer support platforms may have access to technical and usage data to operate 75bet's infrastructure. These providers are selected under strict security criteria and operate under contracts that limit the use of information to the purposes authorized by 75bet.

5.3 Legal and Regulatory Authorities

75bet may be required to disclose personal data to Brazilian public authorities — including the Federal Revenue Service, Central Bank, and law enforcement or judicial bodies — upon formal request backed by law. In such cases, users will be notified whenever legally permitted.

5.4 Game Providers

Casino, slots, and crash game providers operating within the 75bet platform may receive technical session data (such as an anonymous user identifier and bet amounts) to process game results. These providers do not receive personally identifiable information such as name, CPF, or email.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by the browser when you access the 75bet platform. They allow the platform to recognize your device on subsequent visits and improve your overall experience.

6.2 Types of Cookies Used by 75bet

• Essential cookies: required for the platform's basic operation — session authentication, bet slip management, and security. They cannot be disabled without compromising your use of the platform;
• Performance cookies: collect anonymous data on how users navigate the platform — such as which pages are most visited and what technical errors occur — to improve performance;
• Personalization cookies: remember your preferences, such as language, favorite sports, and interface settings, to deliver a personalized experience;
• Analytical cookies: used to understand aggregate user behavior and improve the platform. Collected data is anonymized whenever possible.

6.3 Cookie Management

You can control or disable cookies in your browser settings — Chrome, Firefox, Safari, or any other. Disabling essential cookies may prevent certain parts of the platform from working correctly. 75bet does not use third-party cookies for external behavioral advertising.

7. Data Security

75bet adopts a robust set of technical and organizational measures to protect its users' personal data against unauthorized access, loss, destruction, or improper disclosure:

• Encryption in transit: all communications between your device and 75bet's servers use TLS 1.3 protocol with 256-bit SSL certification;
• Encryption at rest: sensitive data stored in our databases is encrypted using modern protection algorithms;
• Access control: only staff with a legitimate need can access user data, under multi-factor authentication and audit logging;
• Security monitoring: automated systems monitor access and transactions in real time to detect suspicious activity;
• Security testing: 75bet's infrastructure is regularly subjected to vulnerability testing and security assessments by specialized teams;
• Incident response plan: in the event of a data breach that poses a risk to users, 75bet will notify the ANPD (National Data Protection Authority) and the affected users within the timeframes established by the LGPD.

8. How Long We Retain Your Data

75bet retains users' personal data only for as long as necessary for the purposes that justify its processing, in compliance with the minimum retention periods required by Brazilian law:

• Registration and KYC data: retained for the full duration of the account and for at least 5 years after closure, in accordance with anti-money laundering obligations (Law No. 9,613/1998);
• Financial transaction records: retained for a minimum of 5 years after the transaction, in accordance with Banco Central and Receita Federal regulations;
• Betting history: retained for 5 years for audit and dispute resolution purposes;
• Access & browsing logs: retained for 6 months, as established by the Marco Civil da Internet (Law No. 12.965/2014);
• Customer support data: retained for 2 years after the support case is resolved;
• Inactive account data: accounts inactive for 24 months with a zero balance may have their data anonymized or deleted, with prior notice to the user.

Once retention periods expire, data is anonymized or securely and irreversibly deleted, unless additional retention is required by a court order or regulatory determination.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the owner of your personal data, a set of rights that 75bet is fully committed to honoring. Here is what you can request at any time:

10. Minors Under 18

The platform of 75bet is intended exclusively for users aged 18 and over. 75bet does not intentionally collect personal data from minors. The identity verification (KYC) process includes date-of-birth validation and document analysis to confirm that the account holder is of legal age.

If 75bet determines that an account belongs to a minor — whether through a report, internal review, or document verification — the account will be immediately suspended, all deposits will be returned to the original payment method, and the minor's data will be deleted from the platform's systems as soon as possible, subject to any applicable minimum legal retention periods.

11. International Data Transfers

In certain operational situations, personal data from 75bet users may be processed on servers located outside Brazil — for example, when we use cloud infrastructure providers with international data centers or game providers headquartered abroad.

When this occurs, 75bet adopts the following safeguards to ensure the protection of transferred data:

• Data processing agreements with protection clauses equivalent to those required by the LGPD;
• Preference for international partners located in countries with an adequate level of data protection recognized by the ANPD;
• Periodic compliance reviews of international partners against their contracted obligations.

75bet does not transfer personal data to countries or organizations that do not offer a level of protection compatible with the LGPD and international privacy standards.

12. Changes to this Privacy Policy

75bet may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data protection practices. Any material change will be communicated to users at least 7 (seven) days in advance via the email registered on the platform and through a prominent notice on the homepage.

Urgent changes required by legal obligation or to immediately protect users may be implemented on a shorter timeline and will be communicated as soon as possible. The date of the last update is always shown at the top of this document.

We recommend reviewing this Policy periodically to stay informed about how 75bet protects your personal information. The version currently in effect is always the one available on this page.

13. Contact, DPO & Privacy Channel

To exercise your rights as a data subject, ask questions about the processing of your data, or report any privacy concern, 75bet provides the following channels:

• Live chat on the platform: available 24 hours a day, 7 days a week, with human support in Portuguese;
• Privacy email: privacidade@75bet.life — dedicated channel for requests related to personal data and the LGPD;
• General support email: suporte@75bet.life.

75bet has appointed a Data Protection Officer (DPO), responsible for receiving communications from data subjects and from the National Data Protection Authority (ANPD), ensuring compliance with LGPD obligations. The DPO can be reached at privacidade@75bet.life.

The standard response time for data subject requests is up to 15 business days from the date the request is received. In cases requiring more detailed review, the user will be informed of the estimated response timeline.