955bet Privacy Policy – Data Protection in Brazil

For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), the controller of the personal data of platform users is the 955bet, operator of the site 955bet.xyz, focused exclusively on the Brazilian Sports Betting and online casino market.

The data controller is the entity that makes decisions regarding the processing of personal data — that is, it defines the purpose, the means of collection, the retention period, and who the information may be shared with. For any questions about the processing of your data, the official contact channel is the email contato@955bet.xyz.

The 955bet has appointed a Data Protection Officer (DPO) to serve as the communication channel between the company, data subjects, and the National Data Protection Authority (ANPD). The DPO can be reached at the same email address with the subject line "LGPD Request – DPO".

The 955bet collects only the data necessary to operate the platform securely and in compliance with the law. Below are the types of data collected and their primary purpose:

Sensitive data — such as racial origin, religious beliefs, political opinions, health data, or biometrics — are not collected by 955bet at any stage of registration or platform use.

The personal data processed by 955bet are collected in the following ways:

• Registration and identity verification: information provided directly by you when creating your account, completing the KYC form, or updating your profile;
• Financial transactions: data automatically generated when you make deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, or TED;
• Platform usage: data generated during browsing, such as pages visited, bets placed, casino games accessed, and session duration — collected automatically by the platform's systems;
• Support communications: messages exchanged via live chat or email are stored for quality assurance, security, and dispute resolution purposes;
• Cookies and similar technologies: as detailed in section 9 of this policy.

The 955bet does not purchase third-party data lists or collect data from external sources without your knowledge. Every piece of data we process comes directly from your relationship with the platform.

The 955bet uses your personal data exclusively for the following purposes:

• Platform operation: account creation and management, bet processing, casino game and jackpot operation;
• Payment processing: deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, including communication with partner payment gateways;
• Identity verification and fraud prevention: verifying that the user is who they claim to be, preventing duplicate accounts, and combating money laundering in compliance with Brazilian regulations;
• Compliance with legal obligations: reports required by regulators, responses to court orders, and data retention obligations established by law;
• Customer support: handling questions, disputes, and requests via live chat and email;
• Account communications: notifications about transactions, security changes, terms updates, and other operational notices;
• Marketing communications (with express consent only): promotions, bonuses, and updates — you can opt out at any time;
• Responsible gambling: monitoring of gambling patterns to identify potential risk situations and trigger protective tools when necessary.

The 955bet does not use your data for purposes other than those listed above without prior notice and, where applicable, without obtaining fresh consent.

Every data processing operation carried out by 955bet is grounded in one or more legal bases established under the LGPD. The bases applied are:

• Contract performance (Art. 7, V): processing necessary to provide the sports betting and casino services you signed up for when creating your account — including registration, bet processing, and payments;
• Compliance with a legal obligation (Art. 7, II): processing required by law, such as KYC verification, transaction reporting for anti-money laundering purposes, and record retention in accordance with regulatory requirements;
• Legitimate interest (Art. 7, IX): platform security, fraud prevention, duplicate account detection, and improvement of the user experience — always balanced against the rights and expectations of data subjects;
• Consent (Art. 7, I): used specifically for marketing communications and promotions. Consent may be withdrawn at any time.

The 955bet may share personal data with third parties in the following situations, always for a specific and justified purpose:

• Payment providers: Pix, boleto, card, and digital wallet gateways (PicPay, Mercado Pago) receive the data needed to process transactions. These partners are PCI DSS certified and operate under data protection agreements;
• Identity verification (KYC) providers: partners specialized in document verification and facial biometrics, engaged to carry out the user identity confirmation process;
• Casino game providers: minimum technical data (session ID, bet results) is shared with game providers (such as Pragmatic Play, NetEnt, etc.) for game operation and auditing purposes;
• Government authorities: when required by law, court order, regulation, or money laundering investigation, 955bet provides data to the relevant Brazilian authorities;
• Analytics and security companies: behavioral analysis and fraud detection tools that process technical data (IP, sessions, usage patterns) to protect the platform.

The 955bet does not sell, transfer, or make personal data available to third parties for direct marketing or any purpose not listed above. All partners that process data on behalf of 955bet are contractually required to follow the same data protection standards mandated by the LGPD.

The personal data of users of 955bet are stored on secure servers with the following protections:

• Encryption in transit: all communication between the user's browser/app and our servers uses TLS 1.3 or higher;
• Encryption at rest: data stored in databases is encrypted with AES-256 — the standard used by financial institutions;
• Access control: only employees with a verified operational need have access to personal data, with an audit log maintained for every access;
• 24/7 Monitoring: intrusion detection systems and continuous security monitoring operate every day, including weekends and public holidays;
• Regular backups: backups are performed regularly and stored in a location separate from the primary data;
• Security testing: the platform undergoes regular penetration testing (pentests) conducted by independent security firms.

No security measure is 100% foolproof. In the event of a security incident that may impact your personal data, the 955bet is committed to notifying you and the ANPD within the timeframe required by the LGPD. See more in section 13.

The 955bet retains your personal data for as long as necessary for the purposes described in this policy and to meet legal obligations. The general retention periods are:

• Active account data: retained for as long as the account remains active or as long as necessary to provide the services;
• Financial and betting records: a minimum of 5 years after account closure, as required by tax and anti-money laundering legislation;
• Identity verification documents (KYC): a minimum of 5 years after the last transaction or account closure, in accordance with Brazilian Central Bank regulations;
• Support communications: up to 2 years after the case is closed, for quality assurance and dispute resolution purposes;
• Cookie and session data: according to the purpose of each cookie — see details in section 9;
• Marketing data: deleted within 30 days of consent being withdrawn, except where a legal retention obligation applies.

Once the retention period expires, data is securely deleted or anonymized so that the data subject can no longer be identified from it.

The 955bet uses cookies and similar technologies to ensure the platform functions correctly, personalize the experience, and analyze usage behavior. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — authentication, session management, and security. They cannot be disabled without impairing your use of the service;
• Performance cookies: collect anonymous data on how users interact with the platform (pages visited, load times), used for technical improvements;
• Personalization cookies: remember your preferences — such as language, odds format, and favorite games — to enhance your experience on future visits;
• Analytics cookies: traffic analysis tools that help identify which areas of the platform are most used, always based on anonymized or pseudonymized data.

You can manage your cookie preferences through the banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies may prevent the platform from functioning properly.

The services of 955bet are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect, store, or process personal data from minors.

The registration process requires a date of birth, and identity verification (KYC) includes age confirmation via an official document. Any account found to have been created by a minor will be closed immediately upon identification, with the balance frozen and the legal guardian notified where applicable.

If you discover that a minor has created an account on 955bet, please contact us immediately at contato@955bet.xyz so the matter can be handled with the urgency it requires.

In some cases, the personal data processed by 955bet may be processed by partners whose technical infrastructure is located outside Brazil — for example, cloud hosting providers or casino game suppliers headquartered abroad.

When this occurs, the 955bet ensures that the transfer is carried out in compliance with Art. 33 of the LGPD, using one or more of the following safeguards:

• Transfer to countries with a level of data protection recognized as adequate by the ANPD;
• Standard contractual clauses requiring the recipient to provide the same level of protection mandated by the LGPD;
• Internationally recognized compliance certifications or seals.

Financial data of Brazilian users — particularly data related to Pix, boleto, and digital wallet transactions — is processed exclusively by partners operating in Brazil, subject to regulation by the Banco Central do Brasil.

To exercise any of your rights guaranteed under the LGPD, you have two options:

• Account dashboard: go to "Settings" → "Privacy" to view, correct, and manage your consents directly without needing to contact support;
• Email the DPO: send a message to contato@955bet.xyz with the subject line "LGPD Request", describing the right you wish to exercise and attaching a copy of your identity document to confirm ownership.

Response timeframes of 955bet:

• Acknowledgment of receipt: up to 2 business days;
• Full response to the request: up to 15 business days;
• For more complex cases requiring an extension: the revised deadline will be communicated by email with a justification.

All requests are handled free of charge, with no fees applied. If, for any reason, 955bet cannot fulfill a request (for example, due to a legal obligation to retain the data), you will be informed of the reason in writing.

Despite all security measures in place, no system is immune to incidents. In the event of a personal data breach that may pose a significant risk or harm to data subjects, the 955bet is committed to:

• Notify the National Data Protection Authority (ANPD) within the reasonable timeframe established by the LGPD — generally within 2 business days of confirming the incident;
• Notify affected users by email and/or account dashboard notification, with clear information about what happened, which data was affected, and what steps were taken;
• Take immediate steps to contain the incident, mitigate harm, and prevent recurrence;
• Maintain an internal record of the incident including root cause analysis and corrective measures implemented.

If you suspect unauthorized access to your account at 955bet, contact live chat support immediately. Our team can block access, reset credentials, and investigate the source of the suspicious activity in real time.

The 955bet may update this Privacy Policy periodically to reflect changes in the law, our data processing practices, or the services offered. When that happens:

• The "last updated" date at the top of this page will be revised;
• For substantial changes affecting data subjects' rights, registered users will be notified by email at least 15 days in advance;
• Minor changes — such as wording corrections or updated contact details — may be made without prior notice;
• Continued use of the platform after the new rules take effect constitutes acceptance of the updated terms.

We recommend reviewing this page periodically. If you have any questions about a change, please contact the DPO before continuing to use the services.

For any questions related to privacy and data protection, the contact channels for 955bet are:

• DPO Email: contato@955bet.xyz (subject: "LGPD Request")
• Live chat: available 24 hours a day, 7 days a week, via the chat button on the platform
• Account dashboard: "Privacy" section for access requests, corrections, and consent withdrawals

If after contacting the 955bet you feel your rights have not been adequately addressed, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as set out in Art. 18, § 1 of the LGPD.