Win4Bet Privacy and Data Protection Policy

01Introduction

The Win4Bet knows that our bettors' trust begins long before any bet is placed. It starts the moment you decide to create an account and share your personal information with us. That is why we treat data protection not as a legal checkbox, but as a genuine commitment to every person who uses our platform.

This Privacy Policy explains, in clear and straightforward terms, how Win4Bet collects, uses, stores, protects, and may share the personal data of users registered on our platform. It applies to all services available at win4bet.net, including Sports Betting (Brasileirão Série A, Copa do Brasil, Copa Libertadores da América, volleyball, basketball, MMA/UFC, and others), crash games, live casino, slots, and any other product available on the platform.

Our operations are in full compliance with the General Data Protection Law (LGPD – Federal Law No. 13,709/2018) and with international best practices in privacy and information security. When you create an account on Win4Bet or by continuing to use our services after any update to this Policy, you confirm that you have read and understood the terms described herein.

02Who We Are – The Data Controller

For the purposes of the LGPD, Win4Bet acts as the controller of personal data collected during use of the platform. This means we are the ones who decide what data is collected, for what purpose, and how it is processed. The data protection officer (DPO – Data Protection Officer) of Win4Bet can be reached at privacidade@win4bet.net for any matter related to the processing of your personal data.

The platform Win4Bet operates exclusively for the Brazilian market, serving bettors across the entire country. All data processing activities comply with current Brazilian law, especially the LGPD, and the contractual commitments established with our technology partners ensure your data is handled with the same level of security even when processed by third-party systems.

03What Data We Collect

The Win4Bet collects different categories of data depending on how you interact with the platform. Below are the types of information we may collect:

Registration data (provided directly by you):

• Full name, CPF, date of birth, and nationality.
• Email address and mobile phone number.
• Full residential address (street, number, ZIP code, city, state).
• Identity documents (RG, CNH, or passport) for the KYC verification process.
• Proof of address for address verification.
• Banking details for processing withdrawals via Pix, TED, or other available methods.

Data generated through platform use:

• History of bets, deposits, withdrawals, and activity in crash games, slots, and live casino.
• Sport preferences, markets, and most frequently accessed times.
• IP address, device type, operating system, and browser used.
• Session data, including login time, duration, and pages visited.
• Interactions with customer support, including conversation history via live chat and email.

Data from external sources (where applicable):

• Identity verification through specialized KYC partners.
• Fraud prevention information obtained from security partners.
• Regulatory compliance data required for operating within Brazilian legal standards.

04How We Use Your Data

Every piece of data collected by Win4Bet has a specific and legitimate purpose. We never use your information for purposes not described below or that have not been the subject of your express consent:

• Account creation and management: To process your registration, verify your identity, activate your account, and ensure that only you have access to it.
• Service provision: To place bets, process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers, and to make all platform products available.
• Eligibility verification: To confirm that you are 18 or older and are authorized to use the platform in accordance with applicable rules.
• Fraud prevention and anti-money laundering: To detect and prevent irregular activity that could compromise the integrity of the platform and its users, in accordance with legal requirements for the prevention of financial crimes (AML).
• Customer support: To answer your questions, resolve technical issues, and provide support in Portuguese 24 hours a day via live chat and email.
• Account communications: To send notifications about deposits, withdrawals, settled bets, changes to terms, and security information relevant to your account.
• Marketing communications (with consent): To send promotions, bonus offers, and platform news, but only to users who have opted in to receive this type of communication. You may unsubscribe at any time.
• Responsible gambling: To monitor usage patterns that may indicate problematic behavior and, when necessary, offer support or activate the available responsible gambling tools.
• Legal and regulatory compliance: To fulfill obligations imposed by Brazilian law, including responding to requests from regulatory bodies and judicial authorities.
• Platform improvement: To analyze usage data in an aggregated, anonymous form with the goal of improving the bettor's experience, fixing issues, and developing new features.

05Legal Basis for Processing

Under the LGPD, all personal data processing must have a legal basis to justify it. Win4Bet bases the processing of your data on the following legal grounds provided by law:

• Contract performance: Processing is necessary for the delivery of the services you agreed to when creating your account — including the processing of bets, deposits, and withdrawals.
• Compliance with a legal or regulatory obligation: Certain processing operations — such as identity verification (KYC) and suspicious transaction monitoring (AML) — are required by law, regardless of your consent.
• Legitimate interest: For purposes such as fraud prevention, platform improvement, system security, and the protection of other users, provided these interests do not override your fundamental privacy rights.
• Consent: For optional purposes, such as sending marketing communications and using non-essential cookies. You may withdraw your consent at any time with no impact on your use of the platform.
• Credit protection: For analyses related to eligibility for certain promotions or transaction limits, as permitted by the LGPD.

When the legal basis is consent, you will always be clearly informed beforehand, and data collection will only take place after your affirmative action. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal, or your access to the essential services of the Win4Bet.

06Data Sharing with Third Parties

The Win4Bet does not sell your personal data to third parties under any circumstances. Information is shared only in the situations described below, always within the limits established by the LGPD and with appropriate contractual safeguards:

• Payment processing partners: To process deposits and withdrawals via Pix, boleto, cards, PicPay, Mercado Pago, and TED transfers, we share strictly necessary data with the financial institutions and payment providers involved in each transaction. These partners are bound by contractual confidentiality and security obligations.
• Identity verification (KYC) providers: To verify your identity and validate documents, we use specialized identity verification partners. The data shared is limited to what is strictly necessary for that specific process.
• Technology and infrastructure providers: To host the platform, process analytical data, and keep systems running, we use cloud and technology providers under contracts that guarantee the same level of protection applied by the Win4Bet.
• Game providers: To provide crash games, live casino, and slots from third-party providers, certain session and identification data is shared with those suppliers to ensure game integrity and transaction history.
• Fraud prevention partners: To detect and block suspicious activity, we use risk analysis systems that process behavioral data in an automated manner.
• Public authorities and regulatory bodies: When required by law, court order, or determination of a competent regulatory authority, the Win4Bet may be required to share data with government authorities. In such cases, we share only the minimum necessary to comply with the legal requirement.

07Data Retention and Deletion

The Win4Bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet specific legal obligations. Retention criteria vary by data type:

• Active account data: While your account is active, we retain all registration data and transaction history necessary to provide our services.
• After account closure: Identification data (name, CPF, documents) and financial history are retained for up to 10 years after account closure, as required by applicable tax and anti-money laundering legislation for the sector.
• Support communication data: Support chat history is retained for up to 5 years for dispute resolution and service improvement purposes.
• Marketing data: Marketing communication preferences and data are deleted or anonymized as soon as you withdraw your consent, unless another legal basis justifies their retention.
• Cookies and session data: Retention periods vary by cookie type, as detailed in the Cookies section of this Policy.

When data is no longer needed for any legitimate purpose, the Win4Bet securely deletes or anonymizes it, making it impossible to identify the data subject. You may request early deletion of your data by submitting a request to our DPO, as described in the Rights section of this Policy. Deletion requests may be denied where retention is required by law.

08Data Security

Protecting our bettors' information is one of the core technical priorities of Win4Bet. We have implemented multiple layers of security to ensure your data is protected against unauthorized access, loss, alteration, or destruction:

• SSL/TLS 256-bit encryption: All communications between your device and the servers of Win4Bet are encrypted with an SSL certificate, including financial transactions, login, and any transmission of personal data.
• Encrypted storage: Sensitive data, such as passwords and financial information, is stored in encrypted format on our servers. Passwords are never stored in plain text under any circumstances.
• Access control: Internal access to user data is restricted to staff members who require it to perform their duties. All access is logged and regularly audited.
• Anti-fraud systems: Anomaly detection tools continuously monitor the platform to identify suspicious patterns, unauthorized access attempts, and behaviors that may indicate fraud.
• Regular security testing: The platform undergoes periodic security assessments, including penetration testing and vulnerability analyses conducted by independent specialists.
• Incident response plan: In the event of a security incident affecting personal data, the Win4Bet has established procedures for containment, investigation, and notification to the relevant authorities and affected data subjects, as required by the LGPD.

09Cookies and Tracking Technologies

The Win4Bet uses cookies and similar technologies to enhance the user experience, ensure the platform functions correctly, and — with your consent — for analytics and marketing purposes. We believe that transparency about cookie use is an essential part of respecting your privacy.

When you first access the platform, a cookie consent banner will appear, allowing you to accept all cookies or manage your preferences. Essential cookies are enabled automatically as they are required for basic site functionality. For all other types, we collect your consent before activating them.

You can manage or withdraw your cookie preferences at any time in your browser settings. Disabling non-essential cookies does not affect your ability to access your account, place bets, or carry out transactions on Win4Bet.

10Minors

The Win4Bet does not allow, under any circumstances, the registration or use of the platform by anyone under 18 years of age. We do not intentionally collect or process personal data from minors.

As part of the identity verification process (KYC), the Win4Bet confirms the legal age of all users through identification documents. If an account is found to have been created by a minor, it will be immediately closed, the balance held for review, and the data deleted in accordance with applicable legal requirements.

If you believe a minor has created an account on Win4Bet, please contact our DPO immediately at privacidade@win4bet.net. We will handle the matter with priority and complete confidentiality.

11Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by Win4Bet, a comprehensive set of rights that may be exercised at any time. We are committed to responding to all requests within the legal deadline of 15 business days:

To exercise any of the rights above, submit your request in writing to our DPO at privacidade@win4bet.net, clearly identifying the right you wish to exercise and providing sufficient information for us to verify your identity before processing the request. This is necessary to protect data security and prevent third parties from improperly requesting information about your account.

12International Data Transfer

In some cases, to enable the platform's operation, user data from Win4Bet may be processed by servers or partners located outside Brazil. When this occurs, Win4Bet adopts the safeguards set out in the LGPD to ensure your data receives a level of protection equivalent to that required by Brazilian law:

• We only use countries or international organizations that the ANPD considers as providing an adequate level of protection, or
• We require international partners who process our users' data to sign standard contractual data protection clauses that safeguard the rights of Brazilian data subjects, or
• We obtain your specific consent for the transfer when none of the above options apply.

The list of countries and organizations involved in data processing is available upon request to our DPO. International game providers — such as those responsible for the crash games and live casino available on the platform — are subject to contracts that impose equivalent data protection obligations.

13Changes to this Privacy Policy

The Win4Bet may update this Privacy Policy periodically to reflect changes in our internal processes, new legal or regulatory requirements, or improvements to our privacy standards. Whenever significant changes are made, you will be notified with reasonable advance notice by email or via a prominent notice on the platform.

The date of the last update is always shown at the top of this page. We recommend reviewing this Policy periodically to stay informed about how we protect your data. Continued use of the platform after an updated version of the Policy takes effect constitutes acceptance of the changes. If you do not agree with the new terms, you may close your account and request data deletion as described in this document.

14Contact and Data Protection Officer (DPO)

For any questions, requests, or complaints regarding the processing of your personal data by Win4Bet, you may contact our Data Protection Officer (DPO):

• DPO email: privacidade@win4bet.net — we respond within 5 business days for privacy-related inquiries.
• General support: suporte@win4bet.net or via live chat on the platform, available 24 hours a day, in Portuguese.

When contacting the DPO, please include: your full name, the email address registered on your account, and a clear description of your request or question. To exercise data subject rights (access, correction, deletion, portability, etc.), your identity will need to be verified before the request is processed — this ensures that no one can request information about your account except you.

This Privacy Policy is governed by Brazilian law, in particular the General Data Protection Law (LGPD – Law No. 13.709/2018). Any disputes relating to data processing will preferably be resolved through administrative channels. If that is not possible, the courts of São Paulo – SP shall have jurisdiction.