Privacy Policy of 265bet: your data protected

A 265bet is the controller of the personal data processed under this Policy, as defined by the General Personal Data Protection Law (LGPD — Lei nº 13.709, of August 14, 2018). Access to the platform is made available through the domain 265bet.click.

This Policy applies to all data collected during use of the 265bet platform, including the website, Sports Betting services — football, Brasileirão, Libertadores, MMA, UFC, e-sports, and more — Live Casino, financial transactions via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED bank transfers, and any other features made available to users.

265bet is committed to user privacy and full compliance with the LGPD. We treat data protection as both a legal and ethical obligation, not merely a regulatory requirement.

265bet collects only the data necessary to deliver its services, meet legal obligations, and continuously improve the platform. The data collected includes:

Data provided directly by the user at registration:

• Full legal name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (street, number, complement, neighborhood, city, state, ZIP code).

Data collected during platform use:

• Betting history — sports, markets, amounts, results;
• Financial transaction history — deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED;
• IP address, device type, operating system, and browser used;
• Approximate geolocation data (city level) for regulatory compliance purposes;
• Information about your browsing behavior on the platform (pages visited, session duration, clicks);
• Access logs with date, time, and session duration.

Data collected for identity verification (KYC):

• Image of your identity document (RG, CNH, or passport);
• Selfie with your document to confirm authenticity;
• Proof of address;
• Proof of ownership of the bank account or Pix key used for withdrawals.

Personal data collected by 265bet is used exclusively for the purposes described below:

• Account creation and management: user authentication, password recovery, account-related communications, and identity verification for withdrawal processing;
• Provision of betting and casino services: processing of sports bets, live casino games, slots, and crash games, with a complete record of all transactions;
• Payment processing: deposit and withdrawal transactions via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer to Brazilian banks;
• Compliance with legal obligations: age verification (minimum 18 years), anti-money laundering compliance (Lei nº 9.613/1998), adherence to betting industry regulations in Brazil, and responding to requests from competent authorities;
• VIP Program and benefits: calculation and updating of Bronze, Silver, Gold, Platinum, and Diamond levels based on betting volume, plus weekly cashback credit;
• Responsible gambling: monitoring of behavioral patterns that may indicate problem gambling, management of deposit limits, and self-exclusion requests made by the user;
• Communications and support: sending transactional notifications (deposit confirmation, processed withdrawal), promotional communications to users who have opted in, and support via live chat;
• Security and fraud prevention: detection of suspicious access, identification of multiple accounts, and prevention of bonus abuse;
• Platform improvement: analysis of browsing and usage data to support the development of new features and the resolution of technical issues.

265bet does not use your personal data for purposes incompatible with those listed above without prior notice and, where required, obtaining new consent.

All personal data processing carried out by 265bet is grounded in one or more of the legal bases set out in Article 7 of the LGPD:

• Contract performance (art. 7º, V): registration data, betting history, and financial transaction records are processed so we can deliver the services you contracted when you create an account with 265bet;
• Compliance with a legal obligation (art. 7, II): identity verification (KYC) data, tax information, and transaction records are processed to comply with legal obligations imposed by Brazilian law, including anti-money laundering regulations and Central Bank of Brazil requirements;
• Legitimate interest (art. 7, IX): browsing data, access logs, and device information are processed for platform security, fraud prevention, and service improvement purposes, in accordance with 265bet's legitimate interests and the fundamental rights of data subjects;
• Consent (Art. 7, I): promotional and marketing communications are only sent with the user's express consent, which may be withdrawn at any time through the account settings.

265bet does not sell personal data of its users to third parties under any circumstances. Data sharing takes place only in the situations below, always to the minimum extent necessary:

• Payment processors: data required to process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer is shared with the respective payment service providers, who operate under contracts that include data protection clauses and are subject to the same LGPD obligations;
• Casino game providers: for the operation of live casino, slots, and crash games, the minimum necessary information is shared with partner game developers and operators, all of whom hold international security and privacy certifications;
• Technology service providers: cloud infrastructure providers, data analytics, and fraud prevention partners receive anonymized or pseudonymized data solely for platform security and performance purposes;
• Competent authorities: 265bet complies with lawful requests from Brazilian judicial, law enforcement, or regulatory authorities, disclosing only the data strictly necessary and within the limits set by law or court order;
• Anti-money laundering: in compliance with Law No. 9,613/1998, transaction data above the legal thresholds is reported to COAF (the Financial Activities Control Council) as required.

All third parties with whom 265bet shares data are assessed for their security and privacy practices before any partnership is formalized, and are contractually bound to comply with their LGPD obligations.

265bet adopts robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure:

• 256-bit SSL Encryption: all communication between your device and 265bet's servers is encrypted with TLS 1.3 and 256-bit keys — the same standard used by major Brazilian financial institutions;
• Encryption of data at rest: data stored on 265bet's servers is encrypted at rest, ensuring that even unauthorized physical access to the hardware does not result in data exposure;
• Role-based access control: only employees who need access to your data to perform their duties are granted access, with multi-factor authentication required for all internal systems;
• Continuous monitoring: automated systems monitor access and suspicious activity 24 hours a day, with immediate alerts sent to the security team whenever anomalies are detected;
• Periodic security testing: the platform undergoes regular security assessments, including penetration testing and code audits, to identify and remediate vulnerabilities before they can be exploited;
• Incident response plan: in the event of a data breach, 265bet has documented procedures to contain the incident, notify affected data subjects, and report to the National Data Protection Authority (ANPD) within the legally required timeframes.

265bet retains your personal data for as long as necessary for the purposes described in this Policy, in compliance with all mandatory legal retention periods:

• Registration and identity data: retained for as long as the account is active and for up to 5 years after closure, to meet legal obligations and support defense in legal proceedings;
• Financial transaction history: retained for a minimum of 5 years after each transaction, as required by anti-money laundering legislation and the Brazilian Federal Revenue Service (Receita Federal do Brasil);
• Betting history: kept for up to 3 years after account closure for audit, dispute resolution, and regulatory compliance purposes;
• Browsing data and logs: kept for up to 12 months for security and platform improvement purposes, after which they are automatically deleted or anonymized;
• Marketing communication data: kept for as long as consent remains active; deleted within 30 days of consent revocation.

Upon requesting account closure, 265bet will process the deletion of data not subject to legal retention requirements within 30 days. Data subject to legal retention periods will be kept for the required duration and then permanently deleted or irreversibly anonymized.

265bet uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — session authentication, login maintenance, and security. They cannot be disabled without compromising your use of the platform;
• Performance cookies: collect anonymous information about how users interact with the platform (pages visited, session duration, errors encountered) for technical improvement purposes. They do not identify users individually;
• Functionality cookies: remember user preferences, such as language and betting settings, to personalize your experience on future visits;
• Analytical cookies: used for aggregated analysis of browsing behavior, helping us understand which sections of the platform are most used and how to improve them. Data is always processed in anonymized form.

You can manage your cookie preferences through your browser settings or the privacy panel in your 265bet account. Disabling non-essential cookies does not affect access to the platform's core features.

Under the LGPD, as the owner of your personal data, you hold the following rights, which 265bet is fully committed to honoring:

• Confirmation and access (art. 18, I and II): you have the right to confirm whether 265bet processes your data and to access a full copy of the information we hold about you;
• Correction (Art. 18, III): if any of your data is inaccurate, incomplete, or out of date, you can request a correction at any time through your account dashboard or via support;
• Anonymization, blocking, or deletion (art. 18, IV): you may request that unnecessary, excessive, or unlawfully processed data be anonymized, blocked, or deleted;
• Portability (art. 18, V): you may request the transfer of your personal data to another service or product provider, in a structured, commonly used format;
• Erasure upon withdrawal of consent (Art. 18, VI): upon withdrawing consent for processing based on this legal ground, you may request the deletion of the corresponding data;
• Information on data sharing (art. 18, VII): you have the right to know which public and private entities 265bet shares your data with;
• Withdrawal of consent (art. 18, IX): consent for marketing communications may be withdrawn at any time, with no penalty or impact on access to our services;
• Complaint to the ANPD (art. 18, §1): you have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights are being violated.

To exercise any of these rights, please contact the 265bet Data Protection Officer at privacidade@265bet.click. Requests are responded to within 15 days. In cases where a request cannot be fulfilled immediately — for example, data subject to a legal retention period — you will receive a response explaining the reasons and the expected timeframe.

265bet's services are intended exclusively for individuals aged 18 and over. The platform actively verifies users' age during registration and does not knowingly collect, store, or process personal data from anyone under 18.

If 265bet determines that data from a minor was inadvertently collected, the following actions will be taken immediately:

• Immediate account closure;
• Deletion of all associated personal data;
• Report to the relevant authorities as required by law;
• Notification of the minor's legal guardian, where possible.

If you believe a person under 18 has created an account on 265bet, please contact our support team immediately via the platform chat or at privacidade@265bet.click so we can take the necessary steps.

In certain operational situations, data belonging to 265bet users may be processed on servers located outside Brazil — for example, in cloud infrastructures with data centers in countries that provide a high level of data protection.

When this occurs, 265bet ensures that international transfers are carried out in compliance with Article 33 of the LGPD, with appropriate safeguards in place, such as:

• Transfers only to countries whose level of data protection has been recognized as adequate by the ANPD;
• Specific contractual data protection clauses with international recipients;
• International security certifications (ISO 27001, SOC 2) required of infrastructure partners;
• Data minimization in transfers — only what is strictly necessary for the operation of the specific service.

Your data is never transferred to third parties outside Brazil for commercial or marketing purposes without your explicit consent.

265bet may update this Privacy Policy periodically to reflect changes in Brazilian law, new data processing practices, or service improvements. The "last updated" date at the top of this document will be revised whenever changes are made.

Material changes — those that significantly affect how your data is processed or that reduce your rights as a data subject — will be communicated at least 15 days in advance via your registered email and a prominent notice on the platform. You will have the opportunity to review the changes before they take effect.

Continued use of the platform after the effective date of any updated version of this Policy constitutes acceptance of the changes made.

265bet has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's privacy practices and serving as the point of contact for data subjects and the National Data Protection Authority (ANPD).

To exercise your rights or to submit questions, suggestions, or complaints related to privacy and personal data processing at 265bet, please use the channels below:

• DPO Email: privacidade@265bet.click — responses within 15 business days;
• General email: contato@265bet.click;
• Support chat: available 24 hours a day directly on the 265bet.click platform — for urgent security or privacy matters, this channel guarantees an immediate response.

If you are not satisfied with the response you receive, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.