Bet1970 Privacy Policy — How We Protect Your Data

This Privacy Policy describes the personal data processing practices adopted by bet1970, the company operating the Sports Betting and online casino platform available at bet1970.net and on the mobile app for Android and iOS.

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the bet1970 acts as data controller of its users — meaning it is the entity that defines the purposes and means of processing information collected during use of the platform.

Bet1970's data protection officer (DPO) can be reached at contato@bet1970.net with the subject line "Data Privacy — LGPD". Responses are provided within up to 15 calendar days, as required by law.

The bet1970 collects personal data at various points during your interaction with the platform. The main categories are listed below:

Data you provide directly during registration:

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (postal code, street, number, complement, city, state).

Financial and payment data:

• Pix key linked to the account holder's CPF;
• Bank account details for TED transfers (bank, branch, account number — exclusively for withdrawals);
• History of deposits and withdrawals made on the platform;
• Credit or debit card details (processed directly by the payment gateway and never stored on bet1970's servers).

Platform usage and behavioral data:

• Sports betting history and casino game sessions;
• Pages visited, session duration, and interactions with the interface;
• Device used (model, operating system, app version);
• IP address and approximate geolocation data;
• Game preferences and account settings.

Verification document data (KYC):

• Copy of a government-issued ID (RG, CNH, or passport) — required for account verification and withdrawals above R$ 5,000.00;
• Proof of residence issued within the last 90 days;
• Selfie with ID document — in specific cases of advanced identity verification.

The bet1970 uses the personal data collected exclusively for the following purposes:

• Account creation and management: identify the user, ensure each CPF is linked to only one active account, and keep registration details up to date;
• Provision of Sports Betting and casino services: process sports bets, casino rounds, results, and prize payouts;
• Processing deposits and withdrawals: process transactions via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED, ensuring that funds reach the correct account holder;
• Identity verification (KYC): comply with legal anti-money laundering obligations (Law No. 9.613/1998) and verify user eligibility (legal age and residence in Brazil);
• Communications: send registration confirmations, security alerts, account statements, bet result notifications, and promotional information — only when you have not opted out of receiving them;
• Security and fraud prevention: monitor suspicious activity, protect the integrity of the platform and its users, and investigate misuse;
• Responsible gambling: identify behavioral patterns that may indicate problem gambling and activate the available responsible gaming tools;
• Platform improvement: analyze aggregated and anonymized data to improve the user experience, site and app performance, and the games catalog.

The bet1970 does not use your personal data for purposes incompatible with those listed above without obtaining your prior consent.

All personal data processing carried out by bet1970 has a legal basis defined under the LGPD (Law No. 13.709/2018). The main legal bases we rely on are:

• Contract performance (art. 7, V): the processing of registration, financial, and betting data is necessary for the performance of the service agreement entered into between you and bet1970 at the time of registration;
• Compliance with a legal obligation (art. 7, II): the collection of CPF, identity documents, and financial data is required to fulfill legal obligations related to anti-money laundering, Banco Central do Brasil regulations, and tax legislation;
• Legitimate interest (art. 7, IX): the processing of usage and behavioral data for platform improvement, security, and fraud prevention is based on the legitimate interests of bet1970, provided those interests do not override the fundamental rights and freedoms of the data subject;
• Consent (art. 7, I): for sending optional marketing communications and promotions, in cases where the contract performance or legitimate interest basis does not apply.

The bet1970 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Information is shared only in the following circumstances, always within the limits of the LGPD:

• Payment processors: to process deposits and withdrawals via Pix, boleto, credit or debit card, PicPay, Mercado Pago, and TED. These partners act as data operators and are bound by confidentiality agreements and LGPD compliance obligations;
• Casino game providers: slots, live casino, and other game providers receive only anonymized session identifiers, with no personally identifiable user data;
• Identity verification (KYC) tools: document verification partners who assist in confirming user identity, operating under strict confidentiality and regulatory compliance;
• Public authorities: data may be shared with the Financial Activities Control Council (COAF), the Federal Revenue Service, the Central Bank of Brazil, or judicial authorities when required by law, court order, or duly substantiated official request;
• National Data Protection Authority (ANPD): in the event of a significant security incident or regulatory request.

All third parties with whom bet1970 shares data are contractually required to protect it to security standards equivalent to our own and to use it solely for the specified purposes.

The bet1970 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site and app performance. The types of cookies we use are:

• Strictly necessary cookies: essential for the platform to function — maintaining your logged-in session, securing the authentication token, and storing language preferences. These cannot be disabled without affecting core service functionality;
• Performance and analytics cookies: collect anonymous information about how users interact with the platform — most visited pages, errors encountered, load times. We use this data to continuously improve the experience;
• Functionality cookies: store user preferences such as default bet amount, favorite game, and dashboard settings, so you don't have to reconfigure them every time you log in;
• Game session cookies: store the session state in live casino games and slots, ensuring that if a disconnection occurs, the game can be resumed from the correct point.

You can manage cookie preferences in your browser or in the bet1970. Disabling non-essential cookies does not affect access to the platform's core features.

The personal data of users of bet1970 are stored on servers located in Brazil or in countries that offer a level of protection equivalent to the LGPD, as assessed by the ANPD. We apply the following technical and organizational measures to protect your information:

• End-to-end SSL/TLS encryption on all connections;
• Encryption at rest for stored sensitive data — including identity documents and financial data;
• Role-based access control (RBAC) — only staff with a verified operational need may access users' personal data;
• Mandatory two-factor authentication (2FA) for all bet1970 internal systems that process personal data;
• Complete audit logs of all access and operations performed on personal data;
• Continuous security monitoring 24 hours a day, 7 days a week, with real-time incident response;
• Periodic penetration testing (pentests) and vulnerability assessments conducted by independent specialized firms.

Credit and debit card data are not stored on the servers of bet1970. Processing is handled directly by PCI-DSS certified payment gateways, which maintain data in accordance with financial industry security standards.

The bet1970 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following minimum retention periods required by Brazilian law:

• Registration and identity data: minimum of 5 (five) years after account closure, as required by anti-money laundering legislation (Law No. 9,613/1998);
• Financial transaction records: minimum of 5 (five) years, in accordance with the rules of the Central Bank of Brazil and applicable tax legislation;
• Betting and gaming history: minimum of 2 (two) years for support, dispute resolution, and regulatory audit purposes;
• Access and security logs: minimum of 6 (six) months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014);
• Cookie and session data: depending on the cookie type — session cookies (which expire when you close the browser) or persistent cookies (lasting up to 12 months).

Once the retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified. Data required to comply with a court order or ongoing investigation may be retained beyond that period on a duly substantiated legal basis.

The LGPD grants you, as the data subject whose information is processed by bet1970, the following rights, exercisable at any time:

• Confirmation: know whether bet1970 processes your personal data;
• Access: obtain a copy of the personal data we hold about you;
• Correction: request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion: request the anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD;
• Portability: receive your data in a structured, interoperable format for transfer to another service provider;
• Deletion: request the deletion of data processed based on your consent, except where there is a legal obligation to retain it;
• Information on data sharing: know which entities bet1970 has shared your data with;
• Consent withdrawal: withdraw consent given for specific purposes at any time, without affecting any processing carried out prior to that withdrawal;
• Objection: object to processing carried out on legal bases other than consent, where there is non-compliance with the LGPD.

To exercise any of these rights, send an email to contato@bet1970.net with the subject line "LGPD Rights — [your right]" and include your registered CPF for identity verification. Requests are handled within 15 calendar days. In complex cases, this period may be extended by a further 15 days with justification.

The platform of bet1970 is strictly intended for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a CPF, which is verified against available databases to confirm the holder is at least 18 years old at the time of sign-up.

Should bet1970 become aware that personal data from a user under 18 was inadvertently collected, that data will be immediately deleted and the account will be closed, with any real-money balance refunded to the original deposit method following verification.

If you are a parent or legal guardian and believe that a minor has registered on bet1970, please contact our support team immediately via live chat or at contato@bet1970.net. We will treat the matter with the highest priority.

In specific situations, personal data of users of bet1970 may be transferred to servers or partners located outside Brazil — for example, cloud infrastructure providers or casino game developers based in other countries.

When this occurs, bet1970 ensures that the international transfer is carried out with the appropriate safeguards required by the LGPD, including:

• Transfer to countries or international organizations that provide a level of personal data protection adequate to that set out in the LGPD, as assessed by the ANPD;
• Use of specific contractual clauses approved by the ANPD;
• Adoption of global corporate rules (Binding Corporate Rules) where applicable.

The bet1970 does not transfer complete financial data or identity documents to servers outside Brazil. Anonymized game session data may be processed by game provider servers located abroad, with no identification of the data subject.

The bet1970 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. When changes are significant, you will be notified by registered email and/or a prominent notice on the platform at least 15 days before the new terms take effect.

The date of the last update to this Policy is always shown at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the new version of the Policy. If you do not agree with the changes, you may close your account before the effective date and request a withdrawal of your available balance.

Previous versions of this Policy may be requested by email from bet1970's DPO.

To exercise your rights as a data subject, ask questions about this Policy, or file a complaint regarding the processing of your personal data by bet1970, use the channels below:

• DPO Email: contato@bet1970.net — subject: "Data Privacy — LGPD"
• Live chat: available 24 hours a day, 7 days a week, directly on the platform or in the app — let us know you would like to discuss data privacy
• Response time: up to 15 calendar days for data subject rights requests; up to 5 business days for general privacy inquiries