Bet2 Privacy Policy – Data Protection and LGPD

This Privacy Policy describes how the bet2 collects, uses, stores, protects, and shares the personal data of users who access or use the sports betting and online casino platform available at bet2.life.

When you create an account on the bet2, make a deposit via Pix, place bets on the Brasileirão, play a round of Aviator, or reach out to our support team in Portuguese, you are sharing information with us. This policy exists so you know exactly what happens with that information — clearly, without unnecessary legal jargon.

By creating an account or using the services of bet2, you confirm that you have read and understood this Privacy Policy. If you have any questions, our support team is available 24 hours a day via live chat, in Portuguese.

The controller responsible for processing the personal data collected by the platform bet2 is the operating company of the bet2.life platform, hereinafter referred to simply as "bet2". To exercise your rights as a data subject or obtain information about how your data is processed, contact us at contato@bet2.life or via the live chat available on the platform.

The bet2 has appointed a Data Protection Officer (DPO) as required by the LGPD to oversee all personal data processing practices within the organization. You can reach the DPO directly at contato@bet2.life with the subject line "DPO – LGPD Request".

The bet2 collects personal data in different ways — provided directly by you, generated through your use of the platform, or obtained from operational partners within the limits of the law. Below is the full list by category:

Data provided directly by you:

• Full name, date of birth, and CPF — collected at registration;
• Email address and mobile phone number — for communications and authentication;
• Full residential address — for identity verification (KYC);
• Identity documents (national ID, driver's license, or passport) and proof of address — when requested during the verification process;
• Banking and payment data: Pix key, credit/debit card details, boleto account, PicPay or Mercado Pago details — used exclusively to process deposits and withdrawals;
• Communication information: messages exchanged with support via live chat or email.

Data automatically generated by your use of the platform:

• IP address, device type, operating system, and browser used;
• Approximate geographic location based on IP address (we do not use GPS);
• Sports betting and casino game history — including the amount, market, outcome and time of each transaction;
• Deposit and withdrawal history, including methods and amounts;
• Access logs: login and logout times, actions performed on the platform;
• Session data and usage preferences, such as favorite games and auto cashout settings.

Data obtained from third parties:

• Financial transaction confirmations provided by payment processors (e.g., confirmation of a received Pix);
• Identity verification data from credit bureaus or KYC services, where applicable for fraud prevention;
• Sports event data provided by certified data suppliers — used exclusively for bet settlement.

Every piece of data collected by bet2 has a specific and legitimate purpose. We do not collect information "just in case" or for undefined ends. Below are the purposes for which we process your data:

• Account creation and management: name, CPF, email and phone number are required to create, identify and securely manage your account;
• Bet and game processing: betting history is required to settle results, calculate payouts and display your transaction statement;
• Payment processing: banking and Pix details are used exclusively to process deposits and withdrawals in BRL (R$);
• Identity verification (KYC): documents are verified to prevent fraud, money laundering, and access by minors;
• Customer support: conversation history is retained to ensure continuity of service and resolution of disputes;
• Fraud prevention and security: access logs and behavioral patterns are analyzed to detect suspicious activity;
• Account communications: email and phone number are used for withdrawal notifications, security alerts and terms updates;
• Legal compliance: certain data is retained to fulfill obligations with Brazilian regulatory and judicial authorities;
• Platform improvement: anonymous, aggregated usage data is analyzed to improve the experience — never linked individually to you without necessity.

The bet2 does not use your data to build psychological profiles, sell advertising to third parties, or for any purpose beyond those described above.

The LGPD requires that every instance of personal data processing have a defined legal basis. The bet2 processes your data based on the following legal grounds set out in Article 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): the processing of identification, payment, and betting data is necessary for us to provide the contracted services when you create an account and carry out transactions on the platform;
• Compliance with a legal obligation (art. 7, II): retention of financial transaction data and identity verification are legal and regulatory requirements imposed on the betting and gaming sector in Brazil;
• Legitimate interest (art. 7, IX): analysis of access patterns for fraud prevention, platform security improvements, and personalization of responsible gambling alerts — provided these do not override your fundamental interests;
• Consent (art. 7, I): for marketing communications and optional promotions, processing only takes place with your express consent, which can be withdrawn at any time in your account settings.

The bet2 does not sell, rent, or share your personal data with third parties for commercial purposes. Sharing occurs solely in the situations described below, always under contractual data protection controls:

• Brazilian payment processors: data required to process Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers is shared with the respective service providers only to the extent necessary to complete each transaction;
• Casino game providers: when you play Aviator, JetX, Spaceman, or any other casino title, minimal session data is shared with the game provider (such as Pragmatic Play or Evolution Gaming) solely to process the round and display results correctly;
• Sports data providers: your betting data is matched against results provided by certified sports data companies for settlement purposes — without transferring your personal information to those companies;
• Identity verification services (KYC): documents submitted for verification may be processed by partners specialized in KYC, under strict confidentiality obligations and restrictions against use for any other purpose;
• Competent authorities: the bet2 responds to judicial, law enforcement or regulatory requests within the limits of Brazilian law, sharing only the data specifically requested.

All third parties with access to user data from the bet2 are contractually bound to keep that information confidential, use it solely for authorized purposes and apply appropriate security measures.

The bet2 retains your personal data for as long as necessary to fulfill the purposes described in this policy, taking into account the legal retention periods applicable to the betting and gaming sector in Brazil:

• Identification and active account data: for as long as your account remains active or until you request its closure;
• Financial transaction history (deposits, withdrawals, bets): minimum of 5 years after each transaction, in accordance with tax and anti-money laundering legislation;
• Verification documents (KYC): minimum of 5 years after account closure;
• Support communication records: 2 years after ticket closure;
• Access and security logs: 6 months, extendable if an investigation is ongoing;
• Marketing consent data: retained until consent is withdrawn by the user.

After the above retention periods expire, data is securely deleted or irreversibly anonymized, making it no longer possible to link it to your identity. Data subject to a legal retention obligation may only be deleted once the applicable legal period has elapsed.

The bet2 implements robust security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: all communications between your device and bet2 servers are protected by TLS 1.3 with a 256-bit SSL certificate — the same standard used by banks such as Nubank, Itaú, and Bradesco;
• Encryption at rest: sensitive data such as passwords (stored as bcrypt hashes), CPF numbers, and banking details are encrypted on our servers using securely managed keys;
• Two-factor authentication (2FA): available for all accounts, with support for authenticator apps (TOTP);
• Internal access control: only employees with a justified operational need are granted access to user data, within systems that maintain audited and monitored logs;
• Continuous monitoring: intrusion detection systems and behavioral analysis monitor the platform 24 hours a day;
• Periodic security testing: the infrastructure undergoes penetration testing and security audits at least once a year.

In the event of a security incident that could cause significant risk or harm to users, bet2 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the deadlines established by the LGPD.

The bet2 uses cookies — small text files stored in your browser — and similar technologies to keep the platform running and enhance your experience. The cookies we use fall into the following categories:

• Essential cookies: required for the platform's basic operation — keeping your session active, processing bets, and securing your login. They cannot be disabled without affecting your use of the platform;
• Preference cookies: store your usage preferences, such as language, game preferences, and preferred layout, so you do not need to reconfigure them on each visit;
• Analytical cookies: collect usage data in anonymized form — pages visited, session duration, errors encountered — to help us identify issues and improve the experience. We use analytics tools configured with enhanced privacy settings (no cross-site tracking);
• Security cookies: detect suspicious behavior, such as unusual login attempts or patterns indicating automated use.

The bet2 does not use behavioral advertising cookies or allow third-party ad networks to track users within the platform. You can manage cookie settings through your browser menu. Disabling non-essential cookies may limit some personalization features, but will not prevent use of core functions.

The platform of bet2 is intended exclusively for individuals aged 18 and over. Registration by minors is expressly prohibited under the Terms of Use and violates Brazilian legislation applicable to the gaming sector.

The bet2 applies age verification during the registration process and may request documentary proof at any time. Accounts identified as belonging to minors are immediately blocked, with all balances and betting history cancelled and no refund of deposited funds.

If you are a parent, guardian, or legal representative and believe that a minor has accessed or created an account on bet2, please contact our support team immediately via live chat or at contato@bet2.life. Your request will be treated as the highest priority.

The bet2 does not intentionally collect personal data from individuals under 18. Should any such data be inadvertently collected, it will be deleted immediately.

The LGPD grants you, as a data subject, a robust set of rights that bet2 is fully committed to honoring. Below you will find all your rights and how to exercise them:

To exercise any of these rights, send a request to our support team at contato@bet2.life with the subject line "LGPD Rights – [your name]" or via live chat. We will verify your identity before processing the request to ensure only you can access or modify your own data. All requests are handled free of charge and within the legally required timeframes.

If you believe your rights have not been adequately addressed by bet2has the right to file a complaint with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for enforcing the LGPD.

The General Personal Data Protection Law (LGPD — Law No. 13.709/2018) is the Brazilian legislation that establishes rules on the collection, storage, processing, and sharing of personal data. It gives Brazilian citizens real control over their information and places clear obligations on organizations that process such data.

The bet2 built its entire operation to be fully compliant with the LGPD from the outset. This includes:

• Complete mapping of all personal data collected and processed;
• Assessment and documentation of the legal basis for each type of processing;
• Appointment of a Data Protection Officer (DPO) with an available contact channel;
• Implementing processes to handle data subject requests within legally required timeframes;
• Data protection agreements with all partners and vendors that process user data;
• Periodic review of this Privacy Policy and internal data processing procedures;
• Security incident response plan with notification to the ANPD and affected data subjects.

The bet2 continuously monitors guidance and resolutions published by the ANPD and updates its practices as needed to maintain compliance with current legislation and any future amendments.

For the provision of certain services, personal data of users of the bet2 may be processed or stored on servers located outside Brazil — for example, within the infrastructure of casino game providers with international operations.

The bet2 carries out international data transfers only when:

• The destination country provides an adequate level of personal data protection, as assessed by the ANPD;
• The recipient offers adequate contractual data protection guarantees through standard clauses approved by the ANPD;
• The transfer is necessary to perform the service agreement you requested.

All international partners of bet2 that receive data from Brazilian users are contractually required to maintain protection standards equivalent to those required by the LGPD and to use the information solely for the authorized operational purposes.

The bet2 may update this Privacy Policy periodically to reflect changes in the services offered, updates to applicable Brazilian law, or improvements to our data protection practices.

Material changes — those that affect your rights as a data subject or the way we process your data — will be communicated to your registered email address at least 7 calendar days before they take effect. For minor editorial updates or clarifications that do not alter the substantive content, the update may be published directly on this page with a revised date.

The last updated date is always shown at the top of this page. If you continue using the platform after changes take effect, this will be considered acceptance of the new terms. If you disagree with any change, you may request account closure before the effective date.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report a concern related to how your information is handled, please contact our bet2 through the channels below:

• Live chat: available within the platform, 24 hours a day, 7 days a week, in Portuguese — average response time under 2 minutes;
• General email: contato@bet2.life — responses within 24 business hours;
• LGPD requests and DPO contact: contato@bet2.life with the subject line "DPO – LGPD Request" — responses within 15 business days as required by law.

Our support team operates exclusively in Portuguese, with no bots on live chat channels. The DPO is a professional dedicated to personal data protection, responsible for ensuring that all practices of the bet2 comply with the LGPD and to respond to data subjects' requests.