Privacy Policy 115bet — How We Protect Your Data

For the purposes of the LGPD, the controller of the personal data collected on this platform is 115bet, responsible for operating the Sports Betting and online casino platform available at 115bet.best. 115bet determines the purposes and means of processing data belonging to registered users.

Any question regarding personal data — access, correction, portability, deletion, or objection to processing — can be directed to our Data Protection Officer (DPO) at contato@115bet.best, with the subject line "Privacy — [describe your request]". Requests are handled within 15 business days of receipt.

The 115bet collects personal data at different points during your interaction with the platform. Below are the main types of data collected and when they are collected:

115bet does not collect sensitive data beyond what is strictly required for identity verification and fraud prevention — such as identity documents. We do not collect health data, sexual orientation, religion, or any other sensitive category as defined by the LGPD.

The 115bet uses collected data exclusively for the purposes listed below. No data is used for any purpose beyond those described in this policy without the data subject's express consent.

• Create and manage your account: process your registration, verify your identity, and maintain your account activity history.
• Process deposits and withdrawals: securely process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer.
• Prevent fraud and money laundering: monitor suspicious transactions in accordance with Brazil's financial compliance legal obligations.
• Verify eligibility: confirm that the user is 18 or older and resides in Brazil, as required for the platform's operation.
• Provide customer support: answer questions, resolve issues with bets, withdrawals, and bonuses, and keep a record of all support interactions.
• Personalize your experience: display relevant promotions, suggest betting markets based on your usage history, and send you pertinent communications.
• Comply with legal obligations: respond to requests from Brazilian authorities as required by law, including tax and financial control obligations.
• Improve the platform: analyze aggregated and anonymized usage data to identify technical issues and opportunities to improve the player experience.

Betting history is kept in the player's account and can be accessed at any time in the customer area. This data is never shared with third parties for commercial purposes — it is used exclusively by 115bet for support, fraud prevention, and internal personalization.

The LGPD requires every company to identify the legal basis that authorizes the processing of personal data. The 115bet processes data based on the following legal bases set out in Article 7 of Law No. 13.709/2018:

• Performance of a contract (art. 7, V): processing is necessary to deliver the services you signed up for when you create an account and carry out deposits, withdrawals, and bets on the platform.
• Compliance with a legal obligation (art. 7, II): financial data is processed to fulfill anti-money laundering and tax compliance obligations imposed by law on companies operating in Brazil.
• Legitimate interest (Art. 7, IX): technical and usage data are processed to prevent fraud, protect platform integrity, and ensure the safety of all players.
• Consent (Art. 7, I): marketing communications, promotional emails, and bonus notifications are sent only with your explicit consent, which can be withdrawn at any time in your account settings.

The 115bet does not sell, rent, or transfer players' personal data to third parties for commercial or marketing purposes. Data is only shared in the situations described below, always with appropriate controls and safeguards in place:

• Payment processors: financial data is shared with Brazilian payment processors to carry out deposits and withdrawals via Pix, boleto, card, and other accepted methods. These partners are contractually required to use the data solely for this purpose.
• Game providers: minimal technical data (such as session identifiers) is shared with slots, Live Casino, and crash game providers to initiate and log gaming sessions. Providers do not receive your name, CPF, or banking details.
• Identity verification services (KYC): documents submitted for verification may be processed by partners specialized in regulatory compliance, under confidentiality agreements.
• Brazilian authorities: data may be disclosed to government agencies, the judiciary, or public prosecutors when legally required — for example, in money laundering or financial fraud investigations.
• Fraud prevention: data may be shared with industry fraud prevention networks to identify accounts created with fake documents or bonus abuse schemes.

Any service provider that receives player data from 115bet is bound by contractual data protection clauses that prohibit secondary use of that information for purposes beyond those described above. 115bet regularly reviews the data protection standards maintained by its vendors.

Player data security is both a technical and operational priority for 115bet. The main security measures in place include:

• 256-bit SSL Encryption: all communication between your device and 115bet's servers is encrypted. The padlock icon in your browser's address bar confirms this protection in real time.
• Encrypted storage: sensitive data such as passwords is stored in an irreversible hash format — not even 115bet's technical team has access to your original password.
• Internal access control: only employees with a specific operational need are granted access to certain categories of data. All access is logged and audited.
• Suspicious activity monitoring: automated systems monitor abnormal access patterns — multiple logins from different locations, password attempts, changes to sensitive data — and trigger additional verification checks when necessary.
• Financial data tokenization: credit card data is replaced by secure tokens generated by payment processors and never transmitted or stored in its original form on 115bet's servers.
• Backups and redundancy: data is replicated across redundant servers to ensure availability and recovery in the event of a technical incident.

In the event of a security incident that may affect players' personal data, 115bet will follow the procedure required by the LGPD: notifying the National Data Protection Authority (ANPD) and the affected data subjects within the legal timeframes, with a description of the incident, the data involved, and the measures taken to mitigate it.

The 115bet retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. General retention periods are:

• Active account data: retained for as long as the account remains active on the platform.
• Data after account closure: the financial transaction and betting history is retained for up to 5 years after account closure, as required by Brazilian tax and financial compliance regulations.
• Identity verification documents (KYC): retained for up to 5 years after account closure to handle potential requests from authorities.
• Support communication records: retained for up to 2 years after account closure.
• Marketing data (emails, notifications): deleted immediately upon withdrawal of the user's consent.
• Technical data (access logs): retained for up to 6 months for security and fraud prevention purposes.

Once the applicable retention period expires, data is permanently deleted or irreversibly anonymized. Anonymized data — which cannot be used to identify any individual — may be retained indefinitely for statistical and platform improvement purposes, as it no longer qualifies as personal data under the LGPD.

The 115bet uses cookies and similar technologies to ensure the platform functions properly, improve the browsing experience, and — with your consent — personalize the content displayed. Below are the types of cookies used:

You can manage your cookie preferences in your account settings panel or through your browser settings. Blocking essential cookies may affect login functionality and financial transactions on the platform.

The LGPD grants you, as the data subject whose personal data is processed by 115bet, a set of rights that can be exercised at any time. Each right is explained in practical terms below:

To exercise any of these rights, contact us at contato@115bet.best with the subject line "LGPD Rights — [describe your request]" or via the 24/7 live chat on the platform. Requests are handled within up to 15 business days. For account deletion requests, the process follows the steps outlined in the account closure section of the Terms and Conditions.

The 115bet is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a valid CPF, and identity verification confirms legal age before withdrawals above a certain amount are approved.

If you believe a minor has created a 115bet account — whether by using someone else's documents or providing false information — contact support immediately via live chat. The account will be preventively blocked and investigated. If the user is confirmed to be a minor, the account is closed and any deposits made are refunded to the actual holder of the payment method used.

115bet does not direct marketing content to anyone under 18 and does not use data from identified minors for any purpose other than closing the account and refunding any deposits.

The 115bet may update this Privacy Policy at any time, particularly in response to changes in the LGPD, new platform features, or updates to data processing practices. The last updated date at the top of the document always reflects the current version.

Changes that materially affect data subjects' rights — such as new categories of data collected, new third-party sharing arrangements, or changes to the legal bases for processing — will be communicated by email at least 7 days before taking effect. For minor changes, such as text corrections or clarifications, notification may be given simply by updating the date on this page.

We recommend reviewing this policy periodically, especially before making deposits or submitting new identity verification documents.

For any questions related to personal data, privacy, or the exercise of your rights as a data subject, please contact the 115bet through official channels:

• Live chat: available 24 hours a day on the platform, with an average response time of under 3 minutes — the recommended channel for urgent matters.
• DPO Email: contato@115bet.best — for formal requests regarding data access, correction, deletion, or portability, use the subject line "LGPD Rights".

All customer support is provided exclusively in Brazilian Portuguese. 115bet does not offer support through public social media channels for privacy or account security matters — use only the official channels above to keep your information safe.