Privacy Policy bet456: how your data is protected

1 Who we are and what this Policy covers

This Privacy Policy describes how bet456 — a sports betting and online casino platform operating in Brazil — collects, uses, stores, and protects its users' personal data in accordance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable regulations.

By creating an account on bet456 and using any available service — betting on the Brasileirão, Copa do Brasil, MMA and UFC, live casino, crash games, slots, or any other feature — you confirm that you have read and understood this Privacy Policy and consent to the processing of your data under the terms described herein.

This Policy applies to all bet456 channels: website, Android and iOS app, live chat and email support, and any other interface through which you interact with the platform.

2 What data we collect and how

2.1 Data provided directly by you

When you create an account, make deposits, or interact with bet456 support, the following data is collected directly from you:

• Identification: full name, date of birth, CPF, gender
• Contact: email address, mobile number, residential address with ZIP code
• Verification documents (KYC): ID card, driver's license, or passport image; proof of address; selfie with document when requested
• Payment data: Pix key linked to the registered CPF; credit or debit card details (stored in tokenized format only, never in plain text); bank account details for TED transfers
• Preferences and communications: notification preferences, support communication history, submitted feedback

2.2 Data Automatically Generated Through Platform Use

While using bet456, technical data is automatically generated by the platform's systems:

• Browsing data: IP address, browser type and version, operating system, device identifier
• Session data: access time, session duration, pages visited within the platform
• Transactional data: complete history of deposits, withdrawals, and bets placed — including amount, time, market wagered, and outcome
• Behavioral data: betting patterns, access frequency, use of features such as Cash Out and live betting

2.3 Data received from third parties

In some cases, bet456 may receive data from third parties to supplement or verify the information on your account:

• Identity verification bureaus for CPF and document validation
• Payment providers such as Pix, PicPay, and Mercado Pago to confirm ownership of the payment method
• Sanction and financial restriction lists provided by Brazilian regulatory authorities

3 How we use your data

Data collected by bet456 is used exclusively for the following purposes:

Bet456 does not use your data to make automated decisions that produce significant legal effects without the possibility of human review, as guaranteed by Article 20 of the LGPD.

4 Legal bases for data processing

The LGPD requires that all personal data processing have a valid legal basis. bet456 processes your data on the following grounds:

4.1 Contract performance

Most data processing at bet456 is necessary to perform the contract established when you create an account — without your identification data, we cannot create your account; without payment data, we cannot process Pix deposits or withdrawals; without betting history, we cannot settle your winnings.

4.2 Legal obligation

Some data is processed to comply with legally mandated obligations, such as identity verification required by Sports Betting regulations in Brazil, the recording of financial transactions for tax purposes, and compliance with Central Bank requirements related to Pix.

4.3 Legitimate Interest

Bet456 processes certain data on the basis of legitimate interest — such as analyzing behavioral patterns for fraud prevention and platform improvement — provided that interest does not override the fundamental rights and freedoms of the data subject.

4.4 Consent

For marketing communications — promotional emails, bonus notifications, Copa do Brasil updates, and other events — the legal basis is your consent, which you can withdraw at any time through your account dashboard or via any email you receive from us.

5 Data sharing with third parties

Bet456 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is shared only in the situations described below, each with a specific and proportionate purpose:

5.1 Service Providers (Data Processors)

To operate the platform, bet456 works with vendors acting as data processors — meaning they handle data solely in accordance with bet456's instructions and have no authority to use it for their own purposes:

• Payment providers: Pix processors, credit/debit card gateway, Mercado Pago, and PicPay — only the data strictly necessary to process each transaction
• Identity verification providers: CPF and document validation services used in the KYC process
• Casino software providers: for live games, slots, and crash games, minimal session data is shared with the game provider to record the round result
• Cloud infrastructure: servers where data is stored, located preferably in Brazil or in countries with an adequate level of data protection
• Email and communication providers: for sending transactional emails (registration confirmation, withdrawal notification) and authorized marketing communications

All bet456 vendors are bound by contractual data protection clauses requiring a level of security consistent with the LGPD.

5.2 Competent Authorities

Bet456 may share data with public authorities, regulatory bodies, or courts when required by law, court order, or to fulfill regulatory obligations specific to the Sports Betting sector in Brazil. In such cases, only the strictly necessary data is shared, for the minimum period required.

5.3 Corporate Operations

In the event of a merger, acquisition, or corporate restructuring of bet456, user data may be transferred to the new controller, who will be bound by this Privacy Policy. Users will be notified by email at least 30 days before any such transfer takes place.

6 Data storage and security

6.1 Technical security measures

Bet456 implements the following measures to protect your data against unauthorized access, loss, destruction, or improper disclosure:

• 256-bit SSL/TLS encryption on all communications between client and server
• Passwords stored exclusively in bcrypt hash format — never as plain text
• Credit card data processed exclusively via tokenization — the full card number is never stored on bet456's servers
• Two-factor authentication available and recommended for all users
• Role-based access control — staff can only access the data required for their specific function
• Audit log records for all access to sensitive data
• Encrypted backups performed daily and stored in a separate location
• Regular penetration testing and vulnerability scanning

6.2 Incident notification

In the event of a security incident that may affect your personal data, bet456 will notify the National Data Protection Authority (ANPD) within the legally established timeframe and will inform affected users via their registered email, describing the nature of the incident, the data involved, and the measures taken to mitigate any harm.

7 Cookies and tracking technologies

7.1 What they are and how we use them

Cookies are small text files stored on your device when you access the bet456 platform. We use cookies and similar technologies for the following purposes:

• Essential cookies: required to keep your session active after login and to ensure the platform functions correctly. They cannot be disabled without compromising bet456's core functionality.
• Performance cookies: collect aggregated information about how users interact with the platform — which features are most used, where errors occur — in order to improve the overall experience. They do not identify users individually.
• Functional cookies: remember your interface preferences, such as language and notification settings, so you don't have to reconfigure them every time you log in.
• Security cookies: help identify and prevent suspicious activity, such as login attempts from unknown IPs or behavioral patterns indicative of fraud.

7.2 Cookie Controls

You can manage your cookie preferences through the consent banner displayed on your first visit to the platform, or via your browser settings. Disabling non-essential cookies does not affect the core features of bet456 — you can still log in, deposit via Pix, place bets, and withdraw as usual.

7.3 What we do not do with cookies

Bet456 does not use cookies to track your browsing on other websites, does not share cookie data with third-party advertising networks, and does not use fingerprinting technologies to identify users without consent.

8 Your rights as a data subject

The LGPD grants data subjects a set of rights that can be exercised at any time with bet456. Here is how to exercise each of them:

8.1 Right of Access

You may request a copy of all personal data that bet456 holds about you — including registration data, betting history, financial transactions, and access logs. bet456 provides this copy in a readable format (PDF or CSV) within 15 business days of the request.

8.2 Right to rectification

If any of your information is incorrect or out of date — such as an old phone number or wrong address — you can update it directly in your account dashboard for most fields. For CPF or document corrections, please contact support with the correct document.

8.3 Right to erasure

You may request the deletion of your personal data, with the following exceptions: data that must be retained to comply with a legal obligation (such as financial records required by the Receita Federal) cannot be deleted before the minimum legal retention period. Once that period has elapsed, the data is permanently deleted.

8.4 Right to data portability

You have the right to receive your data in a structured, interoperable format for transfer to another service. bet456 offers data export in JSON or CSV format upon request to privacidade@bet456.biz.

8.5 Right to object and withdrawal of consent

For data processed on the basis of consent — such as marketing communications — you can withdraw that consent at any time through your account settings or by replying "unsubscribe" to any email you receive. Withdrawal does not affect any processing carried out prior to your request.

8.6 Right to Review Automated Decisions

If an automated decision affecting your account is made — such as a block due to suspected fraud — you have the right to request a human review of that decision. Contact support and provide any information you consider relevant to the review.

9 Minors

Bet456 is a platform exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. Registration requires age confirmation, which is verified during the KYC process using the CPF and identity documents provided.

If bet456 identifies that data from a user under 18 has been inadvertently collected, the account will be closed immediately, the data will be deleted, and any deposited funds will be returned to the original payment method. If you become aware that a minor has created an account on bet456, please contact us immediately at privacidade@bet456.biz.

10 International data transfer

Bet456 prioritizes storing and processing data in Brazil. When data needs to be transferred to other countries — such as when using cloud infrastructure providers or live casino software vendors — bet456 ensures the transfer is supported by one of the legal bases permitted under the LGPD:

• Transfer to a country with an adequate level of data protection recognized by the ANPD
• Use of standard contractual clauses ensuring a level of protection equivalent to that of the LGPD
• When necessary to perform a contract with the data subject (such as processing live bets)

In all cases, data transferred internationally is limited to the minimum necessary for the specific purpose and is subject to the same security obligations described in this Policy.

11 How long we retain your data

Bet456 retains your personal data for as long as necessary for the purposes described in this Policy, in compliance with the minimum retention periods required by law:

Once the retention period expires, data is securely and irreversibly deleted from bet456's systems, including backups, unless retention is required to fulfill a subsequent legal obligation.

12 Data Protection Officer (DPO)

Bet456 has appointed a Data Protection Officer (DPO) as required by the LGPD for organizations that carry out large-scale data processing. The DPO serves as the official communication channel between bet456, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD).

The DPO's responsibilities include guiding bet456 staff on data protection practices, receiving and handling data subject complaints, and liaising with the ANPD in the event of requests or audits.

13 Updates to This Policy

Bet456 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or new services launched on the platform.

Material updates — those that significantly change how your data is processed — will be communicated by email to your registered address at least 15 days in advance. Minor updates, such as text corrections or clarifications that do not alter the meaning of any provision, may be published without prior notice.

The date and version of the latest update are always shown at the top of this document. We recommend reviewing this Policy periodically — especially after receiving an update notification from bet456.