009bet Privacy Policy — Your Data Protected, Clearly

1Introduction and Scope

This Privacy Policy applies to all services offered by 009bet through the 009bet.world website and any associated interface — including Sports Betting, live casino, poker, roulette, e-sports, slots, crash games, and the VIP Program. It governs the collection, use, storage, sharing, and protection of personal data for all registered users and visitors of the platform.

By accessing or using any service provided by 009bet, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your data as described herein. If you disagree with any of the practices described, we recommend that you do not use the platform's services.

2Data We Collect

The 009bet collects different categories of personal data based on how you interact with the platform. We only collect what is necessary for the purposes described in this policy — we do not collect data excessively or unnecessarily.

Financial data — such as your Pix key and credit or debit card details — is never stored in plain text. We use tokenization and payment processing partners certified by the Central Bank of Brazil to ensure your financial information is always protected.

3How We Use Your Data

The 009bet uses your personal data solely for the purposes described below. No data is used for any purpose not listed here without your prior notice and additional consent where required.

• Service delivery: process your registration, authenticate your access, record bets, handle deposits via Pix, boleto, and card, and execute withdrawals to your bank account.
• Identity verification (KYC): verify your identity, confirm you are of legal age (18 or older), and validate ownership of the payment methods used, in compliance with the sector's legal obligations.
• Fraud prevention and anti-money laundering: monitor suspicious transactions, identify duplicate accounts, and fulfill anti-money laundering (AML) obligations as required by Brazilian law.
• Customer support: address your questions and requests, resolve technical and payment issues, and track your support history for greater efficiency.
• Responsible gambling: monitor usage patterns that may indicate at-risk behavior and proactively reach out to offer support resources when needed.
• Platform improvement: analyze usage data in aggregated, anonymized form to identify opportunities to improve navigation, available games, and the overall experience.
• Marketing communications: send offers, promotions, and news by email or SMS — only to users who have opted in to receive these communications. You can unsubscribe at any time.
• Compliance with legal obligations: comply with court orders, regulatory requirements, or directives from competent authorities when required by law.

4Legal Basis for Processing

The LGPD requires that all processing of personal data have a specific legal basis. 009bet processes your data on the basis of the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance: processing is necessary to perform the service contract entered into at the time of registration — processing bets, payments, and withdrawals are direct examples.
• Compliance with a legal or regulatory obligation: identity verification (KYC), anti-money laundering (AML) compliance, and retention of financial records for legally required periods are obligations that require processing certain data regardless of consent.
• Legitimate interest: fraud prevention, platform security, and aggregated usage data analysis for service improvement are activities carried out on the basis of 009bet's legitimate interest, always respecting the rights and reasonable expectations of data subjects.
• Consent: for marketing communications, use of non-essential cookies, and other processing that goes beyond operational needs, the 009bet requests your explicit consent — which may be withdrawn at any time.

5Data Sharing

The 009bet does not sell your personal data to third parties. Period. That said, there are situations where sharing data is necessary for the platform to operate correctly or to meet legal obligations. In those cases, we share only the minimum data required, with partners who uphold equivalent protection standards.

Categories of recipients with whom data may be shared:

• Payment processors: Brazilian financial institutions and payment processors responsible for handling transactions via Pix, boleto, credit/debit card, Mercado Pago, PicPay, and TED bank transfer. These partners receive only the data necessary to process each transaction.
• Casino game providers: slots providers, live tables, and other 009bet casino games receive only the minimum technical data required to operate the games — with no access to personally identifiable information beyond what is strictly necessary.
• Identity verification services (KYC): specialized platforms for document verification and identity validation, used during the account approval process and for higher-value withdrawals.
• Technology service providers: companies that provide cloud infrastructure, cybersecurity services, and analytics tools — always under contracts that impose confidentiality and data protection obligations.
• Competent authorities: regulatory authorities, the Public Prosecutor's Office, the Federal Police, and other government agencies when required by law or court order — not at the platform's discretion, but as a legal obligation.

6Information Security

The 009bet applies strict technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Security is not a box to check — it is an ongoing priority.

Security measures adopted by 009bet:

• 256-bit SSL Encryption across all communications between your device and the platform's servers — all data is transmitted in encrypted form, making interception impossible.
• Financial data tokenization — card details and Pix keys are never stored in plain text. We use tokens that replace sensitive information within the platform environment.
• Two-factor authentication (2FA) available for your account — we strongly recommend enabling it in your security settings.
• Continuous monitoring of suspicious access attempts and anomalous activity on the platform, with automatic responses and human review when necessary.
• Internal access control — only 009bet staff members who need access to specific data to perform their duties are permitted to do so. Access is audited on a regular basis.
• Regular backups and business continuity plans to ensure data availability and recovery in the event of a technical incident.

In the event of a security incident that may pose a risk to your rights and freedoms, the 009bet will notify affected data subjects and the National Data Protection Authority (ANPD) as required by the LGPD.

7Data Retention and Deletion

The 009bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal and regulatory obligations.

General retention periods:

• Registration and identity data: retained for the duration of the account and for up to 5 years after its closure, in compliance with anti-money laundering obligations and Brazilian tax legislation.
• Financial transaction records: retained for a minimum of 5 years, as required by the regulations of the Financial Activities Control Council (COAF) and the Federal Revenue Service.
• Betting history: retained for the duration of the account and for up to 2 years after its closure for audit and dispute resolution purposes.
• Support communication data: retained for up to 2 years to ensure service quality and support dispute resolution.
• Technical and usage data: access logs are retained for up to 6 months; anonymized usage data may be retained indefinitely for statistical analysis.

Once the applicable retention periods have expired, data is securely and irreversibly deleted or anonymized. You may request the early deletion of data not required to fulfill legal obligations through the contact channels described in Section 14.

8Cookies and Tracking Technologies

The 009bet uses cookies and similar technologies to enhance your experience on the platform, keep your session active, analyze site usage and, with your consent, personalize content and communications.

Types of cookies used:

• Essential cookies: required for the basic operation of the platform — authentication, session management, security, and language preferences. They cannot be disabled without affecting how the site functions.
• Performance cookies: collect anonymized data on how you use the platform (pages visited, session duration, errors encountered) to help improve the overall experience. These require your consent.
• Functionality cookies: remember your preferences and settings to personalize your experience on future visits — such as your favorite games or betting configurations. These require your consent.
• Marketing cookies: used to measure campaign effectiveness and personalize communications. They are never used to sell your data to third parties. They require your explicit consent and can be revoked at any time.

You can manage your cookie preferences at any time through your browser settings or via the preferences panel available on the platform. Disabling essential cookies may affect the functionality of certain features of 009bet.

9Your Rights as a Data Subject

The LGPD guarantees you, as the personal data subject, a set of rights that 009bet is committed to upholding. You may exercise any of these rights at any time, free of charge, through the contact channels described in Section 14.

• Right of access: request a copy of all personal data that 009bet holds about you.
• Right to correction: request the correction of any data that is inaccurate, incomplete, or out of date.
• Right to erasure: request the deletion of personal data that is not required to fulfill legal or contractual obligations.
• Right to data portability: request the transfer of your data to another service platform, in a structured, machine-readable format.
• Right to object: object to certain data processing activities carried out on the basis of legitimate interest, particularly for marketing purposes.
• Right to withdraw consent: withdraw consent given for specific types of processing — such as marketing communications or non-essential cookies — at any time, without affecting processing that has already taken place.
• Right to information about data sharing: request information about which entities your data has been shared with.
• Right to petition the ANPD: if your request is not resolved to your satisfaction by 009bet, you have the right to file a complaint with the National Data Protection Authority (ANPD).

10Data Relating to Minors

The services of 009bet are intended exclusively for users aged 18 and over. The platform does not intentionally collect, process, or store personal data from individuals under the age of 18.

During registration, we ask for the user's date of birth to confirm they are of legal age, along with identity documents during the KYC verification process. If an account is found to have been created by someone under 18, it will be closed immediately and any deposited balance returned to the legal guardian.

If you are the guardian of a child or teenager and believe they may have created an account with 009bet, please contact us immediately via support chat or at contato@009bet.world. We will treat your case with urgency and priority.

11International Data Transfers

Some of the technology partners and service providers used by 009bet may be located outside Brazil — in countries such as the United States, the European Union, or others. When this occurs, international data transfers are carried out only under conditions that ensure an adequate level of protection equivalent to that of the LGPD.

Mechanisms used for international transfers:

• Transfer to countries with a level of protection recognized by the ANPD as equivalent to Brazil's
• Contracts with specific data protection clauses (standard contractual clauses) that impose obligations equivalent to those under the LGPD on the data recipient
• Internationally recognized compliance certifications and seals (such as ISO 27001 and SOC 2) held by recipient partners

The 009bet does not carry out international data transfers for commercial or sales purposes — only to support the technical operation of contracted services, always with appropriate safeguards in place.

12Changes to This Policy

The 009bet may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered. The date of the most recent update is always shown at the top of this page.

When significant changes occur that affect your rights or the way your data is handled, you will be notified:

• Via email sent to the address registered on your account
• Via a prominent notice on the platform the first time you log in after the update
• Via in-app notification, where applicable

Continued use of the services of 009bet after an updated policy is published constitutes acceptance of the new terms. If you do not agree with the changes, you have the right to close your account and request the deletion of your data that is not required to fulfill legal obligations.

13Data Protection Officer (DPO)

In accordance with Article 41 of the LGPD, the 009bet has appointed a Personal Data Protection Officer (DPO). The DPO is the official point of communication between the platform, data subjects, and the National Data Protection Authority (ANPD).

The responsibilities of 009bet's DPO include:

• Receive and respond to complaints and requests from data subjects
• Guide platform staff on data protection best practices
• Engage with the ANPD when required
• Monitor 009bet's compliance with the LGPD and internal privacy policies

To contact the DPO of 009bet, use the email privacidade@009bet.world with the subject line "LGPD Request — [briefly describe the matter]". All requests are responded to within 15 business days.

14Contact & Exercising Your Rights

To exercise any of the rights described in this Privacy Policy, ask questions about how your data is handled, or submit a complaint, please use one of the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the 009bet platform — support in Portuguese by a Brazilian team
• General email: contato@009bet.world — response within 24 business hours
• DPO email (privacy): privacidade@009bet.world — for formal LGPD-related requests, with a response within 15 business days

When contacting us to exercise a right under the LGPD, please have your registration details on hand so we can identify your account and process your request securely. In some cases, we may ask for an additional form of ID to verify your identity before proceeding — this is a security measure to protect you.