932bet Privacy Policy – Data Protection in Brazil

1Who We Are — The Data Controller

For the purposes of the Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018), the controller of the personal data processed on this platform is 932bet, the company responsible for operating the 932bet.best website and all services available on it, including Sports Betting (football, Brasileirão Série A, Copa do Brasil, Libertadores, Premier League), slots, poker, live casino, and e-sports.

The controller determines the purposes and means of processing users' personal data. To exercise your rights as a data subject or for any privacy-related communication, you may contact us directly at contato@932bet.best or via the live chat available on the platform 24 hours a day.

2Data We Collect

932bet collects personal data in the following situations: at registration, during platform use, when processing financial transactions, and when users interact with support. The types of data collected and the purpose of each category are outlined below:

932bet does not collect unnecessary sensitive data — such as health information, sexual orientation, or religious beliefs. CPF is collected solely for age verification, multi-account prevention, and compliance with legal obligations related to financial transactions.

3How We Use Your Data

Personal data collected by 932bet is used exclusively for the following purposes:

• Service delivery: create and manage your account, process deposits and withdrawals via Pix, bank slip, credit/debit card, Mercado Pago and PicPay, and ensure all platform products run smoothly;
• Identity verification (KYC): to confirm the user is at least 18 years old, validate the CPF, and fulfill anti-money laundering obligations under Brazilian law;
• Security & fraud prevention: identify suspicious access, detect multiple accounts, prevent bonus abuse, and monitor betting patterns that may indicate possible collusion or manipulation;
• Service communication: send transaction confirmations, security alerts, rule updates, and account-related notifications;
• Marketing communications (with consent): send promotions, bonus offers, and 932bet news only to users who have opted in to receive this type of communication. You may unsubscribe at any time;
• Responsible gambling: monitor usage patterns to identify signs of problem gambling and trigger protective tools when necessary;
• Compliance with legal obligations: to respond to requests from competent Brazilian authorities and comply with regulatory requirements applicable to the sector.

932bet does not use your data for automated decisions that produce legal effects on you without the possibility of human review. Betting history is used for responsible gambling analysis purposes only and never to unilaterally alter the terms of service without prior notice.

4Legal Basis for Data Processing

All personal data processing carried out by 932bet has a defined legal basis as established under Article 7 of the LGPD. The legal bases used are:

• Contract performance (Art. 7, V): the processing required to create your account, handle transactions, and deliver the contracted services — Sports Betting, slots, Poker, and all other platform products;
• Compliance with a legal obligation (Art. 7, II): CPF and age verification, anti-money laundering compliance, fulfillment of court orders, and reporting to regulatory bodies as required by law;
• Legitimate Interest (Art. 7, IX): fraud prevention, platform security analysis, and monitoring of suspicious activity to protect both the company and other users;
• Consent (Art. 7, I): sending marketing communications and newsletters. Consent may be withdrawn at any time through the account dashboard or by contacting support via email.

5Data Sharing with Third Parties

932bet does not sell, rent, or transfer users' personal data to third parties for commercial or marketing purposes. Data sharing occurs only in the following situations, all of which have a legal basis and appropriate contractual safeguards:

• Payment processors: to process deposits and withdrawals, the required transaction data is shared with Pix system operators, credit and debit card processors, Mercado Pago, and PicPay. These partners are subject to their own privacy policies and to the regulations of the Banco Central do Brasil;
• Game providers: slots and Live Casino titles are provided by partners such as Pragmatic Play and PG Soft. For the games to function technically, minimal session data (user identifier, bet amount) may be transmitted to these providers;
• Technical infrastructure services: cloud hosting services, CDN, and platform performance analytics tools may process anonymized or pseudonymized technical data;
• Competent authorities: 932bet complies with court orders and requests from the Public Prosecutor's Office, Federal Police, Federal Revenue Service, and other competent Brazilian authorities as required by law. In money laundering investigations, data is reported to COAF (Financial Activities Control Council) in accordance with legal obligations;
• Identity verification (KYC) services: to verify the authenticity of submitted documents, specialized biometric or document verification partners may be used, always under a data processing agreement with confidentiality clauses.

All third parties that receive data from 932bet are contractually required to process it solely for the specific agreed purposes and to maintain a level of security equivalent to that adopted by the platform.

6International Data Transfers

Some services used by 932bet — such as cloud infrastructure and international game providers — may involve the storage or processing of data on servers located outside Brazil. When this occurs, 932bet requires that:

• The destination country provides a level of data protection compatible with that required by the LGPD;
• Or that adequate contractual safeguards are in place, such as standard data protection clauses approved by the ANPD (Autoridade Nacional de Proteção de Dados);
• The data recipient is contractually bound to process it solely for the specific agreed purpose and to apply equivalent security measures.

The majority of Brazilian users' critical data — particularly financial and identification data — is stored preferentially on servers located in Brazil or in jurisdictions with recognized adequate data protection legislation.

7Data Retention and Deletion

932bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, while also observing mandatory legal retention periods. The applicable retention periods are:

• Active account data: retained for as long as the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 years after the transaction, as required by Brazilian financial legislation and anti-money laundering regulations;
• Identification data (CPF, KYC documents): retained for 5 years after account closure to fulfill legal obligations and respond to potential investigations;
• Betting and game history: retained for 2 years after account closure for responsible gambling and regulatory compliance purposes;
• Access and security logs: retained for 6 months as required by the Brazilian Internet Civil Framework (Law No. 12.965/2014).

Once the mandatory retention period has passed, data is anonymized or permanently and securely deleted. You may request early deletion of your data when there is no longer a legal obligation to retain it — requests are reviewed and responded to within up to 15 business days.

8Information Security

Protecting the personal data of 932bet users is a core technical and operational priority. The security measures in place include:

• Encryption in transit: 256-bit SSL/TLS encryption across all pages and communications between the user's browser or mobile device and the platform's servers;
• Encryption at rest: sensitive data such as passwords are stored using secure cryptographic hashing — 932bet never stores your password in plain text;
• Access control: only employees with a proven operational need are granted access to user data, always with a full audit trail;
• Continuous monitoring: automated intrusion and anomaly detection systems run 24/7 to identify unauthorized access attempts;
• Regular security testing: the infrastructure undergoes periodic audits and penetration testing carried out by independent specialists;
• Incident response plan: in the event of a data breach that may pose a risk or harm to data subjects, 932bet will notify affected users and the ANPD within the timeframe required by the LGPD.

No security system is 100% foolproof. For this reason, 932bet also encourages users to follow good practices: use strong, unique passwords, never share your login credentials, and enable two-factor authentication when available.

9Cookies and Tracking Technologies

932bet uses cookies and similar technologies to ensure the platform functions correctly and to enhance the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session active, remembering language preferences, and securing transactions. These cannot be disabled without affecting the service's functionality;
• Performance/analytics cookies: collect anonymized information about how users navigate the platform — most visited pages, session duration, technical errors. This data is used exclusively to improve service quality;
• Preference cookies: remember individual settings such as preferred layout or game filters applied in the last session.

932bet does not use third-party behavioral advertising tracking cookies. You can manage or delete existing cookies through your browser settings. Disabling essential cookies may prevent login, financial transactions, and other critical platform features from working correctly.

10Your Rights as a Data Subject

Brazil's LGPD grants personal data subjects a set of rights that 932bet is fully committed to upholding. You may exercise any of the rights below at any time, free of charge, by contacting us at contato@932bet.best with the subject line "LGPD Request":

The response time for data subject requests is up to 15 business days. In more complex cases, 932bet may request additional information to verify the requester's identity before fulfilling the request — this is a security measure designed to protect the data subject against fraudulent requests made by third parties.

If you believe your rights have not been adequately fulfilled, you may file a complaint with the ANPD (National Data Protection Authority) through its official portal.

11Minors

932bet is an entertainment platform exclusively for users aged 18 and over. Registration requires a CPF number and date of birth, which are verified to ensure that no one under 18 can access the platform's services.

932bet does not intentionally collect personal data from anyone under 18. If we identify that an account was created by a minor, it will be closed immediately and the associated data will be deleted, except for any data that must be retained by legal obligation. If you believe a minor may have created an account on the platform, please contact support immediately at contato@932bet.best.

12Changes to This Privacy Policy

932bet may update this Privacy Policy periodically to reflect changes in its services, applicable legislation, or data processing practices. Material changes will be communicated to users via their registered email and/or a prominent notice on the platform, with at least 7 days' notice before the changes take effect.

The most up-to-date version of this policy is always available on this page, with the date of the last revision indicated at the top of the document. Continued use of the platform after changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you have the right to close your account and request deletion of your data before they come into force.

13Contact, DPO & Privacy Channel

For any questions, requests, or complaints regarding the processing of your personal data by 932bet, please use the channels below:

• Privacy email: contato@932bet.best (subject: "LGPD Request")
• Live chat: available 24 hours a day directly on the platform after login
• Response time: up to 15 business days for data subject rights requests

932bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the LGPD. The DPO is the official point of contact between the company, data subjects, and the ANPD. All communications addressed to the DPO should be sent to the privacy email with "Attention: DPO" in the subject line.