86bet Privacy Policy – LGPD Data Protection

The 86bet is the Sports Betting and online casino platform available at 86bet.express, dedicated to the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados (LGPD), the 86bet acts as the controller of personal data collected in connection with the services it provides — Sports Betting, crash games, live roulette, slots, poker, jackpot, and all related features.

As the data controller, the 86bet is responsible for defining the purposes and means of processing your personal data, for ensuring that such processing is carried out in compliance with the LGPD, and for enabling you to exercise your rights as a data subject. For any questions related to the processing of your data, please contact us at suporte@86bet.express.

The 86bet collects only the data necessary to deliver its services safely, efficiently, and in compliance with the legal obligations applicable to the betting sector in Brazil. Data is divided into the following categories:

Registration and identity data:

Identity verification data (KYC): official government-issued photo ID (RG or CNH), a selfie for facial verification, and proof of address, requested before the first withdrawal or as required by regulation.

Financial and payment data: Pix key, bank details for wire transfers (Nubank, Itaú, Bradesco, Banco do Brasil), deposit and withdrawal history, credit or debit card data processed by certified providers — never stored in plain text on 86bet.

Platform usage data: Sports Betting and game history (including crash games such as Aviator and JetX, slots, and live roulette), product preferences, session duration, markets browsed, and bets placed.

Technical data: IP address, browser or app type and version, mobile operating system, device identifiers, cookie data, and access logs.

The 86bet uses your personal data solely for legitimate purposes related to service delivery and compliance with legal obligations. The specific purposes are:

• Account creation and management: verify your identity, confirm eligibility (18 years or older, resident in Brazil), and create and maintain your active account.
• Processing financial transactions: processing deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, and executing withdrawals via Pix or TED to accounts held in the registered account holder's name.
• Identity verification (KYC) and fraud prevention: confirm that the registered details match the actual account holder, and detect and prevent fraudulent activity, money laundering, and other unlawful conduct.
• Providing betting and gaming services: recording and settling Sports Betting wagers (Brasileirão, Copa do Brasil, UFC, etc.), storing round history for Crash Games, and calculating and crediting bonuses and promotions.
• Account-related communications: send transaction confirmations, security alerts, bonus notifications, and important updates to our Terms or this Policy.
• Customer support: identify you when you reach out via chat or email, and access the relevant history to resolve your question or issue efficiently.
• Compliance with legal obligations: respond to requests from regulatory and judicial authorities in accordance with applicable Brazilian legislation governing the betting and online entertainment sector.
• Responsible gambling: monitor usage patterns to identify risky behavior and trigger protective mechanisms when needed, such as suggesting deposit limits or a temporary break.

The 86bet does not use your data to build behavioral profiles for external advertising purposes, does not sell data to third parties, and does not share it with marketing companies without your explicit consent.

All data processing carried out by 86bet is grounded in at least one of the legal bases set out in article 7 of the LGPD. The applicable basis varies depending on the specific purpose of each processing activity:

• Contract performance (art. 7, V): processing required to deliver the services you signed up for when creating an account — bet processing, Pix withdrawals, bonus crediting, and player support.
• Compliance with a legal obligation (art. 7, II): processing required by applicable Brazilian legislation governing the betting sector, anti-money laundering regulations (Law No. 9,613/1998), and LGPD requirements.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, bonus abuse detection, and protection of other 86bet users.
• Consent (art. 7, I): for optional marketing communications — you can withdraw this consent at any time through your account dashboard or by emailing suporte@86bet.express.

Where processing is based on consent, 86bet will ensure that such consent is obtained freely, in an informed, unambiguous, and documented manner. Revoking consent does not affect any processing carried out prior to the revocation.

The 86bet does not sell, rent, or trade your personal data with third parties. Data sharing only takes place in the specific situations below, always with an appropriate legal basis and the necessary security controls in place:

• Payment processors: when you deposit via Pix or request a withdrawal, your financial data is shared with the processors responsible for the transaction (Brazilian banking systems, Mercado Pago, PicPay, and others). These partners operate as data processors under contracts compatible with the LGPD.
• Game providers: to process your bets in crash games (Spribe, Pragmatic Play, SmartSoft Gaming, BGaming), slots, and other casino products, the minimum necessary data — such as session identifier and bet amount — is shared with these certified providers. No personally identifiable information beyond what is required for the session is transmitted.
• Identity verification services (KYC): to verify your identity before your first withdrawal, documents may be processed by specialized verification providers, all of which operate under confidentiality agreements and in compliance with the LGPD.
• Regulatory and judicial authorities: when required by law, court order, or request from a competent authority (such as the Central Bank of Brazil or the Financial Activities Control Council — COAF), relevant data will be provided in accordance with applicable Brazilian legislation.
• IT and infrastructure service providers: hosting, cybersecurity, and technical analysis services that support platform operations, all bound by contracts containing data protection clauses.

The 86bet employs a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Security is not an optional feature of our operation — it is built into the core architecture of the platform.

The main security measures in place are:

• 256-bit SSL/TLS encryption: all communication between your phone or computer and 86bet's servers is encrypted to the same standard used by Brazil's largest banks. Your data is never transmitted in plain text.
• Secure password storage: passwords are stored using salted hashing algorithms — never in plain text. Not even platform administrators have access to your password.
• Tokenized financial data: credit and debit card data is tokenized by payment processors and never stored on 86bet's servers in a usable format.
• Role-based access control (RBAC): only staff with a specific need have access to particular data categories — and every access is recorded in an auditable log.
• Continuous monitoring: automated systems monitor suspicious access attempts, unusual login patterns, and anomalous activity in real time.
• Two-factor authentication (2FA): available to all users and recommended as an additional layer of account protection.

In the event of a security incident affecting your personal data, 86bet will notify the Brazilian National Data Protection Authority (ANPD) and affected users within the legal timeframes set out in the LGPD, with details about what happened, which data was affected, and what steps were taken.

The 86bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. The retention policy follows these criteria:

• Active account: registration data and usage history are retained for the entire duration of your 86bet account.
• After account closure: financial transaction data is retained for up to 5 years after account closure, in compliance with Brazilian tax and anti-money laundering legislation.
• KYC data: identity verification documents are retained for up to 5 years for regulatory audit purposes.
• Support communication data: retained for up to 2 years after the ticket is resolved.
• Technical logs: access and security logs are retained for up to 6 months.

After the applicable retention period expires, data is securely deleted or anonymized in a way that prevents re-identification. If you request deletion of your data before the legal retention period ends, 86bet will delete all data not subject to mandatory retention requirements and will inform you which data must be kept under legal obligation.

The 86bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze how services are being used. Cookies are small text files stored on your phone or computer when you access the platform.

The types of cookies used are:

• Essential cookies: required for the platform's core functionality — they keep your session active while you play, secure your login, and process transactions. They cannot be disabled without affecting your use of our services.
• Performance cookies: collect anonymous data about how you use the platform — which pages you visit, how long you spend in each area, and what errors occur — so that the technical team can identify and fix issues.
• Functionality cookies: remember your usage preferences — such as language, display mode, and saved game lobby settings — so you don't have to reconfigure them every time you log in.
• Analytical cookies: allow us to understand which products (Sports Betting, Crash Games, roulette) are most used, so 86bet can focus product improvements accordingly. Data is aggregated and does not identify individual users.

The 86bet does not use third-party cookies for external behavioral advertising. Data collected through cookies is used solely to improve the experience within the platform itself.

The LGPD guarantees you a set of rights over your personal data that may be exercised at any time. 86bet is committed to responding to your requests within the legal deadlines — generally up to 15 business days from confirmation of the request.

The services of 86bet are intended exclusively for individuals aged 18 and over who are residents of Brazil. The platform does not knowingly collect personal data from anyone under 18 and does not permit minors to create accounts or use any of its services.

If we identify that data belonging to a user under 18 has been inadvertently collected, the account will be closed immediately, the data will be deleted without delay, and any deposited balance will be handled in accordance with applicable rules. Parents or legal guardians who become aware of a minor misusing the platform should contact us immediately at suporte@86bet.express so that the appropriate measures can be taken.

To provide certain services, personal data may be processed by servers or partners located outside Brazil — such as cloud infrastructure providers and international game providers (Spribe, Pragmatic Play, SmartSoft Gaming, BGaming). When this occurs, 86bet requires these partners to guarantee a level of data protection equivalent to that required by the LGPD.

International transfers are carried out based on the following safeguards:

• Standard contractual data protection clauses incorporated into agreements with international partners.
• Verification that the destination country provides an adequate level of personal data protection, as assessed by the ANPD.
• Data minimization in transfers — only the information strictly necessary for the specific service being performed is transmitted.

The 86bet does not transfer data to countries that do not offer adequate data protection guarantees, unless required by legal obligation or a Brazilian court order.

The 86bet may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. The most current version will always be available on this page, with the date of the last update shown at the top of the document.

When changes are significant — such as updates to processing purposes, the categories of data collected, or data subject rights — 86bet will notify users via their registered email at least 7 days before any changes take effect.

Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the changes. If you do not agree with the updates, you may close your account and request deletion of any data not subject to a legal retention obligation.

To exercise your rights as a data subject, report a privacy concern, submit a request related to your personal data, or contact 86bet's Data Protection Officer (DPO), 86bet, use the channels below:

• Email: suporte@86bet.express (subject: "LGPD Rights" or "Data Privacy")
• Live chat: available within the platform, 24 hours a day, 7 days a week

Our team responds in Portuguese and the turnaround time for LGPD-related requests is up to 15 business days from confirmation of the requester's identity. For urgent security matters — such as suspected unauthorized account access — responses are prioritized and handled within 24 hours.