Privacy Policy — brlbet0: How We Protect Your Data

For the purposes of this Privacy Policy and the LGPD (Law No. 13,709/2018), the brlbet0 — sports betting and online gaming platform accessible at brlbet0.click — acts as controller of its users' personal data.

As the data controller, brlbet0 is responsible for determining the purposes and means by which personal data is processed. All data processing operations carried out on the platform comply with the provisions of this policy and the requirements of current Brazilian law.

For questions related to the processing of your personal data, you may contact our Data Protection Officer (DPO) at contato@brlbet0.click or through the 24/7 support chat available on the platform.

The brlbet0 collects personal data at different points during your interaction with the platform. The table below summarizes the categories of data collected and the context of each collection:

The brlbet0 does not collect sensitive personal data — such as racial origin, political opinion, religious belief, or genetic or biometric data — except where strictly necessary to meet specific legal obligations, in which case the user will be informed and consulted in advance.

The brlbet0 uses collected personal data solely for the purposes listed below. No data is used for purposes not covered by this policy without your prior consent:

• Delivery of contracted services: account creation and management, processing deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago, settling bets, processing withdrawals, and transaction-related communications;
• Identity verification (KYC): confirmation that the user is over 18 years of age, a resident of Brazil, and the holder of the bank account used — a legal requirement for betting operators in Brazil;
• Anti-money laundering (AML): transaction monitoring as required by Law No. 9.613/1998 and the regulations of the Financial Activities Control Council (COAF);
• Platform security: fraud detection, multiple account identification, protection against unauthorized access, and anomalous behavior analysis;
• Experience improvement: anonymized analysis of platform usage to identify usability issues, improve features, and personalize the experience within brlbet0;
• Marketing communications: sending offers, promotions, and updates from brlbet0 — exclusively when the user has given explicit consent to receive such communications;
• Compliance with legal obligations: responding to requests from judicial, law enforcement, or regulatory authorities when legally required.

Every personal data processing operation carried out by brlbet0 is grounded in at least one of the legal bases set out in the LGPD (Art. 7 and Art. 11). Below are the main bases that underpin our operations:

• Contract performance (Art. 7, V): processing required to fulfill the sports betting service agreement you entered into upon registration — including deposit processing, bet settlement, and withdrawals;
• Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering (AML) compliance, and responses to requests from competent authorities;
• Legitimate interest (Art. 7, IX): fraud prevention, account security, behavioral analysis for platform improvement, and operational account-related communications — always respecting the rights and reasonable expectations of the data subject;
• Consent (Art. 7, I): sending marketing communications, personalizing promotional content, and using non-essential cookies — always revocable by the data subject at any time.

Where processing is based on consent, brlbet0 will request authorization in a clear, informed, and prominent manner — without making access to essential services conditional on providing that optional consent.

The brlbet0 does not sell, rent, or share users' personal data with third parties for commercial purposes. Data sharing occurs only in the cases below, always limited to what is strictly necessary for the specific purpose:

• Payment processors: data required to process deposits and withdrawals is shared with the payment operators used (Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago). These partners act as data processors under contract with confidentiality and security obligations;
• Identity verification (KYC) providers: documents submitted for verification are processed by specialized partners in compliance with the requirements of the betting industry in Brazil;
• Technology service providers: hosting infrastructure, cybersecurity, fraud analysis, and customer support — all operating under confidentiality agreements and data use restrictions;
• Public authorities: when legally required by court order, request from the Public Prosecutor's Office, COAF, or another competent authority under Brazilian law.

The brlbet0 retains users' personal data for as long as necessary to fulfill the purposes described in this policy. Retention periods vary based on the nature of the data:

• Identification and account data: retained for as long as the account remains active. After account closure, kept for up to 5 years to fulfill legal obligations and defend against judicial or administrative proceedings;
• Financial and transactional data: retained for 5 years from the date of the transaction, in accordance with Federal Revenue requirements and AML regulations;
• Identity verification documents (KYC): retained for 5 years after account closure or the last transaction, in accordance with industry regulations;
• Betting history: available to the user on the platform while the account is active. After closure, retained for 5 years;
• Marketing communication data: retained until consent is withdrawn by the user, after which they are deleted or anonymized within 30 days.

Upon closing the account on the brlbet0, the user may request the deletion of personal data not subject to any legal retention obligation. This process will be completed within 30 days of the request.

The LGPD grants you, as the data subject, a robust set of rights regarding the processing of your personal information by brlbet0. See what you can request at any time:

• Processing confirmation: find out whether brlbet0 processes your personal data;
• Access: receive a copy of the personal data that brlbet0 holds about you;
• Correction: request the update or correction of inaccurate, incomplete, or outdated data;
• Anonymization or blocking: request that unnecessary, excessive, or unlawfully processed data be anonymized or blocked;
• Portability: receive your data in a structured, interoperable format for transfer to another service provider;
• Deletion: request the deletion of data processed on the basis of consent, where there is no legal obligation to retain it;
• Consent withdrawal: withdraw consent for marketing communications or other optional processing, at any time and at no cost;
• Objection: object to processing based on legitimate interest that affects your fundamental rights and freedoms;
• Complaint to the ANPD: if you believe your rights have been violated, you may file a complaint with the National Data Protection Authority (ANPD).

To exercise any of these rights, contact us via the 24/7 chat on brlbet0 or by email at contato@brlbet0.click. The response deadline is up to 15 business days from receipt of the request.

The platform of brlbet0 uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. The cookies used fall into the following categories:

• Essential cookies: required for the platform's basic operation — session authentication, language preferences, security settings. They cannot be disabled without compromising the service's functionality;
• Performance cookies: collect anonymized information about how users interact with the platform — most visited pages, session duration, technical errors. Used exclusively for internal improvements at brlbet0;
• Functionality cookies: store user preferences — such as odds displayed in decimal or American format — to personalize the experience on future visits;
• Marketing cookies: used only when the user has given explicit consent, to display relevant communications within the brlbet0 platform.

You can manage your cookie preferences at any time through the account settings panel on the brlbet0. Disabling non-essential cookies does not affect access to betting services.

The brlbet0 implements a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or destruction:

• 256-bit SSL Encryption on all connections to the platform;
• Encryption at rest for sensitive data stored on brlbet0 servers;
• Two-factor authentication (2FA) available and recommended for all accounts;
• Anti-fraud system with 24-hour monitoring — behavioral analysis, detection of anomalous patterns, and preventive blocking when suspicious activity is identified;
• Role-based access control — only staff with a verified operational need have access to user data, and every access is recorded in an immutable log;
• Penetration testing and security audits periodic audits conducted by an independent firm;
• Incident response plan with defined procedures for notifying the ANPD and affected users within the legal deadlines in the event of a data breach.

In the event of a security incident that could pose a significant risk or harm to users, the brlbet0 will notify the ANPD and affected data subjects within 72 hours after becoming aware of the incident, in accordance with Art. 48 of the LGPD.

The brlbet0 implements age verification during the registration process as a protective measure. If you suspect that a user under 18 is accessing the platform, contact support immediately via 24/7 chat or at contato@brlbet0.click.

Parents or guardians who discover that a minor's data was inadvertently collected by brlbet0 may request the immediate deletion of such information — the request will be processed within 3 business days after the situation is confirmed.

Under certain operational circumstances, the personal data of users of brlbet0 may be transferred to or accessed by servers or partners located outside Brazil — for example, cloud infrastructure providers or cybersecurity services.

When this occurs, brlbet0 ensures that:

• Data transfers occur only to countries or international organizations that provide an adequate level of data protection, as assessed by the ANPD;
• Or, in the absence of a formal adequacy decision, the transfer is supported by specific contractual clauses that impose on the recipient the same protection standards required by the LGPD;
• The volume of data transferred is the minimum necessary for the specific operational purpose.

The brlbet0 does not carry out international data transfers to countries that do not provide adequate protection guarantees, in accordance with the LGPD criteria and ANPD guidelines.

The brlbet0 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or services offered by the platform.

In the event of significant changes — those that affect your rights or the way we process your data —, brlbet0 will take the following steps:

• Email notification at least 7 days before changes take effect;
• Prominent notice on the platform announcing the policy update;
• Update of the "last updated" date at the top of this page.

Continued use of the platform after the effective date of any changes constitutes tacit acceptance of the updated version. If you do not agree with the changes, you may close your account and request data deletion before the effective date.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or file a complaint regarding data processing by brlbet0, you have the following channels available:

• Live chat 24/7: the fastest channel — available directly on the brlbet0 platform, with an average response time of under 2 minutes;
• DPO Email: contato@brlbet0.click — for formal requests, with a response time of up to 15 business days;

If you believe your rights as a data subject have been violated and have not received a satisfactory response from brlbet0 within the established timeframes, you have the right to file a complaint with the National Data Protection Authority (ANPD), which is the authority responsible for overseeing LGPD compliance in Brazil.