00bet Privacy Policy – Data Protection in Brazil

1 Who We Are and Who Controls Your Data

A 00bet is a sports betting and online casino platform serving users exclusively in Brazil. For the purposes of the General Data Protection Law (LGPD), the 00bet acts as the Controller of personal data collected during registration, use of the platform, and financial transactions carried out by its users.

As the Controller, 00bet is responsible for defining the purposes and means by which users' personal data is processed, always in compliance with current Brazilian law, especially the LGPD (Law No. 13,709/2018). When it is necessary to engage service providers that process data on behalf of 00bet, those providers will act as Operators and will be contractually required to follow the same data protection guidelines.

2 What Data We Collect

A 00bet collects only the data necessary to provide its services and meet its legal obligations. Collected data falls into the following categories:

Data provided directly by the user

• Identification data: full name, date of birth, CPF, mobile number, email address.
• Address data: street name, number, complement, neighborhood, city, state, and ZIP code.
• Identity documents submitted during the KYC verification process: national ID (RG), driver's license (CNH), or passport, along with proof of address.
• Financial data: Pix key registered for withdrawals, data required for credit or debit card processing (handled by a certified gateway — 00bet does not store full card details).

Automatically collected data

• Access data: IP address, browser type and version, operating system, device used (mobile, tablet, or desktop).
• Platform usage data: pages visited, session duration, click events, betting and game history, and in-platform preferences.
• Cookies and similar technologies: as described in Section 6 of this Policy.

3 How We Use Your Data

The data collected by the 00bet are used exclusively for the following purposes, always in accordance with the data minimization principle established by the LGPD:

• Account creation and management: To identify the user, process registration, verify eligibility (minimum age of 18 and residence in Brazil), and keep account information up to date.
• Identity verification (KYC): Fulfillment of regulatory obligations to verify user identity before authorizing withdrawals and for anti-money laundering purposes, in accordance with Brazilian legislation.
• Financial transaction processing: To process deposits via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago, and to process withdrawals requested by the user.
• Provision of betting and casino services: To record and process sports bets (Brasileirão, Copa do Brasil, Libertadores, volleyball, NBB basketball, MMA/UFC, and others), slots, Live Casino, crash games, and all other products available on the platform.
• User support: To identify the user during support interactions and resolve queries, technical issues, or transaction disputes.
• Platform communications: For sending transactional emails (registration confirmation, withdrawal notifications, security alerts) and, with the user's consent, promotional communications about bonuses, promotions, and news from 00bet.
• Security and fraud prevention: To monitor suspicious activity, detect attempts to use multiple accounts, bonus abuse, or any activity that violates the platform's Terms and Conditions.
• Platform improvement: To analyze anonymous, aggregated usage patterns that help improve the user experience — features, performance, and new capabilities.
• Responsible gambling: To monitor gameplay patterns that may indicate problematic behavior and to apply the responsible gambling tools requested by the user.

4 Legal Basis for Data Processing

A 00bet processes users' personal data based on the following legal grounds set out in the LGPD:

• Contract performance (Art. 7, V of the LGPD): Data processing required for account creation and maintenance, bet processing, and deposits and withdrawals is carried out on the basis of the contract established between the user and 00bet at the time of registration.
• Compliance with a legal obligation (Art. 7, II of the LGPD): Data collected for identity verification (KYC), anti-money laundering, and compliance with Brazil's sports betting regulations is processed on the basis of legal obligations applicable to 00bet.
• Legitimate interest (Art. 7, IX of the LGPD): Data processing for platform security, fraud prevention, and service improvement is carried out on the basis of 00bet's legitimate interest, always balanced against users' rights and reasonable expectations.
• Consent (Art. 7, I of the LGPD): Promotional and marketing communications — such as emails about promotions and bonuses — are sent only with the user's explicit consent, which may be withdrawn at any time through the support channel or account settings.

5 Data Sharing with Third Parties

A 00bet does not sell, rent, or share users' personal data with third parties for commercial purposes. Data may only be shared in the following situations, always with appropriate contractual safeguards:

• Essential service providers: Companies that 00bet engages to operate the platform, such as payment processors (Pix, credit, and debit card gateways), cloud infrastructure providers, identity verification services, and certified casino game providers (such as Pragmatic Play, Evolution Gaming, and others). These providers act as Processors and are contractually prohibited from using the data for any other purpose.
• Legal and regulatory obligations: When required by law, court order, or regulation applicable to the betting market in Brazil, 00bet may be required to share data with competent authorities — such as the Receita Federal, the Banco Central do Brasil, or other regulatory bodies.
• Fraud prevention: In cases of suspected fraudulent activity, money laundering, or illegal use of the platform, data may be shared with competent authorities and organizations specialized in financial crime prevention, as permitted by the LGPD and Brazilian law.

6 Cookies and Tracking Technologies

A 00bet uses cookies and similar technologies to enhance the user experience on the platform, ensure session security, and analyze platform performance in an anonymous and aggregated manner. The cookies used fall into the following categories:

• Essential cookies: Required for basic platform functionality — such as keeping your session active while logged in, remembering your language preferences, and ensuring bets are processed correctly. These cookies cannot be disabled without affecting platform performance.
• Performance cookies: They collect anonymous information about how users navigate the platform — which pages are visited most, which features are used most, and where technical errors occur. The data is aggregated and does not identify individual users.
• Functional cookies: These allow the platform to remember user preferences across sessions — such as favorite sports or interface settings. Disabling these cookies may affect the personalized experience within the platform.

By accessing 00bet for the first time, you will see a notice about cookie usage with the option to accept or customize your preferences. You can update your cookie settings at any time via the cookie banner or your browser settings.

7 Data Security

A 00bet employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

• Encryption in transit: All communication between the user's device and 00bet's servers is encrypted with TLS 1.3 / 256-bit SSL, ensuring that transmitted data cannot be intercepted by third parties.
• Encryption at rest: Sensitive data stored on 00bet's servers — such as identity documents and financial information — is encrypted at rest using modern symmetric encryption algorithms.
• Access control: Access to users' personal data is restricted to employees and service providers who need that information to perform their duties. Each access is logged and periodically audited.
• Two-factor authentication: 00bet offers two-factor authentication (2FA) for user accounts, adding an extra layer of protection against unauthorized access.
• Continuous monitoring: The platform runs 24/7 monitoring systems to detect unauthorized access attempts, suspicious activity, and potential security incidents in real time.
• Regular security testing: 00bet conducts regular penetration tests and security audits to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that may affect users' data, 00bet is committed to notifying affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD.

8 How Long We Retain Your Data

A 00bet retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable legal retention periods:

• Registration and identification data: Retained for as long as the account is active and for a minimum period of 5 years after account closure, in accordance with legal anti-money laundering obligations and regulatory requirements in the betting sector.
• Financial transaction history: Retained for a minimum of 5 years, in accordance with applicable Brazilian tax legislation and financial regulations.
• Betting and gaming history: Retained while the account is active and for 2 years after closure, for audit and dispute resolution purposes.
• Access and security logs: Retained for a minimum of 6 months, in accordance with the Marco Civil da Internet (Law No. 12,965/2014).
• Marketing communications data: Retained for as long as consent remains active. Following consent withdrawal, data is removed from communication lists within 30 days.

After the applicable retention period, data is securely deleted or anonymized so that it is no longer possible to identify the user from the remaining information.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that 00bet is committed to honoring in full. All of the rights below may be exercised at any time via live chat or by emailing contato@00bet.world:

To exercise any of these rights, contact our team via live chat or at contato@00bet.world, specifying which right you wish to exercise and the details needed for us to identify your account and fulfill your request. The response deadline is up to 15 calendar days, as required by the LGPD.

If you believe your rights have not been adequately addressed, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) through its official channels.

10 Minors

The services of 00bet are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from anyone under 18. Registration by minors is expressly prohibited under 00bet's Terms and Conditions.

Should 00bet becomes aware that it has collected data from a user under 18 — whether through a false age declaration at registration or by any other means — the account will be closed immediately, the data will be deleted in accordance with applicable legal requirements, and any deposited balance will be held while the situation is investigated in line with internal procedures and applicable law.

Parents or guardians who become aware that a minor has accessed the platform must contact 00bet via live chat or by email at contato@00bet.world.

11 Changes to this Privacy Policy

A 00bet may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or services available on the platform. The date of the most recent update is always indicated at the top of this document.

When changes are significant and may materially affect users' rights, 00bet will communicate changes through a prominent notice on the platform and/or by email to the registered address, with reasonable advance notice before the new terms take effect.

Your continued use of 00bet after changes to this Policy are published constitutes acceptance of the new terms. We recommend reviewing this page periodically to stay informed about how we protect your data.

12 Contact & Data Protection Officer (DPO)

To exercise your rights under the LGPD, clarify any questions about this Privacy Policy, or report any privacy-related incident, please contact the 00bet through the channels below:

• Live Chat: Available 24 hours a day directly on the 00bet.world platform. Average response time: under 2 minutes.
• Email: contato@00bet.world — for formal LGPD rights requests, include "LGPD – [request type]" in the subject line to speed up processing.

A 00bet has appointed a Data Protection Officer (DPO) responsible for ensuring LGPD compliance and for serving as a communication channel between users and the Autoridade Nacional de Proteção de Dados (ANPD). You can reach the DPO at the email above, with the subject line "Attn: DPO." The response deadline for formal requests is up to 15 calendar days, as set out in the LGPD.