Privacy Policy of betd8 — Your Data Protected in Brazil

This Privacy Policy describes the practices of betd8 (betd8.best) as the controller of users' personal data on the platform, pursuant to the General Data Protection Law (Lei nº 13.709/2018 — LGPD).

Betd8 is the entity responsible for decisions regarding the processing of personal data collected through use of the sports betting and online casino platform. When you create an account, deposit via Pix or boleto bancário, or place bets on the Brasileirão, UFC, or any other available event, you provide personal data that is processed as described in this document.

This policy applies to all services offered by betd8, including Sports Betting, live casino, slots, crash games, the predictions section, and all features accessible via betd8.best or any mobile interface.

The betd8 collects personal data in different ways during platform use. Below are the main types of data collected and their sources:

Data provided directly by the user at registration:

• Full legal name as shown on official ID;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile number with Brazilian area code;
• Residential address (when requested for verification);
• Identity documents (national ID or driver's license) — requested only to verify withdrawals or in cases of suspected fraud.

Data collected automatically during use:

• IP address and approximate geolocation data;
• Device type, operating system, and browser version;
• Pages visited, session duration, and actions taken on the platform;
• Betting history, markets accessed, events viewed;
• Cookie and similar technology data (see Section 5).

Financial transaction data:

• Amount and date of deposits and withdrawals;
• Payment method used (Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, TED);
• Registered Pix key (CPF, email, phone number, or random key) — we never store full card details;
• Destination bank for TED withdrawals (Nubank, Itaú, Bradesco, Banco do Brasil, among others).

The betd8 uses users' personal data exclusively for the purposes listed below. We never use data for purposes inconsistent with what was stated at the time of collection:

• Account creation and management: identity verification, access authentication, account communications, and suspicious activity alerts;
• Transaction processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; withdrawals to bank accounts in Brazil; fraud and money laundering prevention;
• Betting operations: sports betting records (football, UFC, volleyball, basketball, e-sports), balance management, and winnings calculation and payout;
• Compliance with legal obligations: retention of financial data in accordance with Brazilian tax and regulatory legislation, and compliance with court orders and competent authorities;
• Marketing communications: sending emails and notifications about promotions, new markets, and events — only with explicit consent, with an opt-out option in every communication;
• Platform improvement: usage analysis to optimize the experience, identify technical issues, and develop new features;
• Responsible gambling: monitoring of behavioral patterns to identify risk situations and trigger protection tools when necessary.

The betd8 does not sell personal data. Sharing with third parties occurs only in the situations described below, always for the purpose of operating the platform or fulfilling legal obligations:

• Payment processors: financial institutions and payment intermediaries that process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED. These partners receive only the data strictly necessary to process each transaction;
• Identity verification providers: KYC (Know Your Customer) services used to verify user identity and prevent fraud — as required by anti-money laundering regulations;
• Technology infrastructure providers: cloud servers, security systems, and usage analytics tools, all operating under data protection agreements compatible with the LGPD;
• Competent authorities: when required by law, court order, fraud investigation, or regulatory compliance, betd8 may share data with Brazilian government authorities;
• Responsible gambling partners: in cases of self-exclusion, betd8 may share data with shared exclusion lists where available and required by regulation.

All service providers that receive personal data from betd8 users are contractually required to handle that information with the same level of protection demanded by the LGPD, using it solely for authorized purposes.

The betd8 uses cookies and similar technologies to ensure the platform runs correctly, improve the user experience, and analyze site usage. See the types of cookies used:

• Strictly necessary cookies: essential for platform operation — authentication, session security, and bet slip management. They cannot be disabled without affecting the site's functionality;
• Performance and analytics cookies: collect aggregate information about how users interact with the platform — most visited pages, session duration, errors encountered. Used to improve betd8. No individually identifiable data is shared with third parties for this purpose;
• Functional cookies: store user preferences such as language, odds format, and interface settings. They enhance the experience without compromising privacy;
• Marketing cookies: used only with explicit consent to personalize offers and promotions within the betd8 platform. They are not used for tracking across third-party sites.

You can manage your cookie preferences in your browser settings or through the cookie preference panel available on the platform. Disabling necessary cookies may affect essential features such as login, Pix deposits, and bet registration.

The betd8 retains personal data only for as long as necessary for the stated purposes or to meet legal obligations. General retention periods are:

• Registration and identification data: kept for the duration of the active account. After account closure, data is retained for 5 years for audit and legal compliance purposes;
• Financial transaction history (Pix, TED, card): retained for 5 years as required by Brazilian tax and regulatory legislation (Lei nº 9.613/1998 and Banco Central do Brasil regulations);
• Betting history: retained for 3 years for dispute resolution and internal audit purposes;
• Security and access logs: retained for 6 months for fraud detection and platform security purposes;
• Support communications: retained for 2 years for quality control and complaint resolution purposes;
• Analytics cookie data: retained for up to 13 months from the date of collection.

After retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. Data subject to a deletion request by the user is removed immediately, unless retention is required by law.

The betd8 adopts appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, or improper disclosure. Key security measures in place:

• Encryption in transit: all communication between the user's browser/mobile device and betd8 servers is protected by 256-bit SSL/TLS;
• Encryption at rest: stored sensitive data — including passwords (hashed) and financial data — is encrypted in the databases;
• Access control: only staff with an operational need may access users' personal data, with access logs and multi-factor authentication in place;
• Continuous monitoring: intrusion detection systems and behavior analysis are monitored 24 hours a day to identify suspicious activity;
• Security testing: the platform undergoes periodic security assessments, including penetration testing conducted by specialized teams;
• Incident management: in the event of a data breach posing a real risk to data subjects, betd8 will notify the ANPD (Autoridade Nacional de Proteção de Dados) and the affected users within the timeframes set out in the LGPD.

The General Data Protection Law (LGPD) gives the data subject — you, a user of betd8 — a set of rights over your personal data. See how to exercise each of them:

• Right of access (art. 18, I and II): request a full copy of your personal data processed by betd8, including your betting history, transactions, and registration details. Submit your request to suporte@betd8.best with the subject line "Access Request — LGPD";
• Right to correction (art. 18, III): if any personal data is incorrect, incomplete, or out of date, you may request a correction. Basic account details can be updated directly in your account settings;
• Right to anonymization, blocking, or deletion (art. 18, IV): request the anonymization or deletion of data that is unnecessary or processed in violation of the LGPD. Data subject to a legal retention obligation cannot be deleted before the applicable period expires;
• Right to data portability (art. 18, V): request your data in a structured format (CSV or JSON) for transfer to another controller. Available for data provided directly by the user;
• Right to information on sharing (art. 18, VII): request information about which public and private entities betd8 has shared your data with;
• Right to withdraw consent (art. 18, IX): withdraw consent given for processing activities based on that legal ground at any time, at no cost. Withdrawal does not affect processing carried out prior to that point;
• Right to file a complaint with the ANPD: you may file a complaint about betd8's data processing with the National Data Protection Authority (ANPD), the federal body responsible for overseeing LGPD compliance.

For all LGPD rights requests, contact us at suporte@betd8.best with a subject line beginning with "LGPD —". betd8 responds within 15 business days of receiving the request. For complex cases, this deadline may be extended by an additional 15 days, with prior notice to the user.

The betd8 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. Registration requires a CPF and date of birth, and age is verified at the time of account creation.

If we become aware that a user under 18 created a betd8 account by providing false information, the account will be closed immediately, all data will be deleted, and any existing balance will be cancelled in accordance with our Terms and Conditions.

If a legal guardian suspects that a child or teenager has created an account on betd8, please contact us immediately at suporte@betd8.best. betd8 treats this type of situation as a top priority and acts swiftly to close the account and erase the data.

The betd8 has appointed a Data Protection Officer (DPO), as required by the LGPD for data controllers. The DPO is responsible for handling communications from data subjects, guiding the internal team, and maintaining the relationship with the ANPD.

• DPO contact: suporte@betd8.best — use the subject line "LGPD — DPO" for requests addressed specifically to the Data Protection Officer;
• General support availability: 24 hours a day, 7 days a week in Brazilian Portuguese;
• Response time for LGPD requests: up to 15 business days.

Changes to this Privacy Policy: betd8 may update this policy at any time to reflect operational, legal, or regulatory changes. When changes are material to users' rights, you will be notified by email at least 7 days in advance. The latest version will always be available at betd8.best/privacy-policy with the date of the most recent update indicated.

Continued use of the betd8 platform after changes to this policy take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure through support.