Fbbet1 Privacy Policy – Data Protection in Brazil

1Introduction

The fbbet1 is a Sports Betting and online casino platform built for the Brazilian market. When you use our services — whether to bet on the Brasileirão, play slots, join the VIP Program, or reach out to support — some of your information is collected and processed to keep everything running smoothly.

This Privacy Policy is written to help you understand, clearly and without unnecessary legal jargon, exactly what happens to your personal data at fbbet1. The platform is committed to handling your information with the same care you'd expect from any serious financial or entertainment service in Brazil.

This Policy is in compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018) and with all applicable Brazilian regulations governing the sports betting and digital entertainment sector.

2Data Controller

For the purposes of this Policy and the LGPD, the fbbet1 acts as controller of its users' personal data. This means fbbet1 is responsible for decisions regarding the purpose and means of processing the data collected on the platform.

Fbbet1's Data Protection Officer (DPO) can be reached at suporte@fbbet1.best with the subject line "LGPD Request". All communications related to data subject rights are handled through this channel as a priority and responded to within the legal deadline of 15 calendar days.

3Personal Data Collected

Fbbet1 collects personal data at different points during your interaction with the platform. Below, we detail what information is collected and in what context:

3.1 Data You Provide Directly

• Registration: full name, CPF, date of birth, residential address, email, mobile number, and password;
• KYC Verification: copy of an official government-issued photo ID (RG, CNH, or passport) and proof of address;
• Financial transactions: payment method data associated with deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, or TED;
• Support communications: support history via chat, email, or WhatsApp.

3.2 Automatically collected data

• IP address and approximate location;
• Device type, operating system, and browser used;
• Browsing history within the fbbet1 platform;
• Betting and gaming history;
• Session data and authentication cookies;
• Login times and session duration.

4Purpose of Data Processing

Fbbet1 uses collected data solely for the purposes described below. Any use beyond these purposes would require your express consent or a new legal basis under the LGPD:

• Manage your account: authentication, access control, password recovery, and user profile management;
• Process transactions: deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, with full financial traceability;
• Identity verification (KYC): confirm that you are who you say you are and that you meet the platform's eligibility requirements;
• Anti-money laundering: fulfill legal transaction monitoring obligations in accordance with Brazilian anti-corruption and anti-money laundering legislation;
• Responsible gambling: identify behavioral patterns that may indicate problem gambling and proactively trigger protective tools;
• User support: log and resolve tickets, complaints, and inquiries submitted via chat, email, or WhatsApp;
• Account communications: bet confirmations, results, withdrawals, security changes, and important notices;
• Marketing communications (only with your consent): promotions, special odds, news about Brasileirão, Libertadores, slots, and the fbbet1 VIP Program;
• Product improvement: anonymous, aggregated usage analysis to identify platform and user experience improvements;
• Platform security: detect fraud attempts, unauthorized access, bots, and other malicious activity.

5Legal Basis for Processing (LGPD)

The LGPD requires that each data processing activity have a specific legal basis. At fbbet1, the main legal bases used are:

• Contract performance (Art. 7, V): to process transactions, manage your account, and deliver the services you agreed to when creating your account on the platform;
• Compliance with a legal obligation (Art. 7, II): to comply with Brazilian gambling regulations, anti-money laundering legislation, and other applicable laws;
• Legitimate interest (Art. 7, IX): for security analysis, fraud prevention, product improvement, and account-related communications – always weighted in favor of your privacy;
• Consent (Art. 7, I): for sending marketing communications and promotions. You may withdraw this consent at any time without affecting your access to the platform's other services.

6Data Sharing

Fbbet1 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Your data may only be shared in the following situations:

6.1 Essential service providers

To operate the platform, fbbet1 uses technology and financial service providers that act as data processors. These partners include payment processors (for transactions via Pix, boleto, card, PicPay, Mercado Pago, and TED), cloud infrastructure providers, and security analysis tools. All of these partners are contractually required to process your data solely for the purposes authorized by fbbet1 and in compliance with the LGPD.

6.2 Game providers

Fbbet1's partner providers (such as Pragmatic Play, NetEnt, and Microgaming) receive only the minimum technical data needed to process your gaming sessions — an anonymous session identifier, bet outcomes, and game data. They do not receive your CPF, banking details, or personally identifiable information beyond what is technically required to operate the games.

6.3 Legal Obligations

Fbbet1 may share data with Brazilian government authorities, regulatory bodies, the judiciary, or law enforcement when required by law, court order, or well-founded suspicion of criminal activity. In such cases, fbbet1 will provide only the data strictly required by the request.

7Cookies & Tracking Technologies

Fbbet1 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze site usage in aggregate.

7.1 Types of cookies used

• Essential cookies: required to keep your session authenticated and ensure account security. They cannot be disabled without affecting the platform's core functionality;
• Preference cookies: store your language, theme, and display preferences to make your experience more convenient;
• Analytical cookies: collect anonymous data on how users navigate the platform to identify improvement opportunities. Data is processed in aggregate form, without individual identification;
• Security cookies: help detect suspicious behavior, bots, and unauthorized access attempts.

7.2 Cookie Management

You can configure your browser to block or delete cookies at any time. Keep in mind that disabling essential cookies may prevent login and other critical platform features from working properly. Analytical and preference cookies can be disabled without any significant impact on functionality.

8Storage and Retention Period

Personal data collected by fbbet1 is stored on secure servers located in Brazil or in countries with a level of data protection equivalent to that required by the LGPD. Server access is restricted to authorized staff using multi-factor authentication.

8.1 Retention Periods

• Registration and KYC data: retained for as long as the account remains active and for up to 5 years after closure, as required by anti-money laundering laws;
• Financial transaction history: retained for 5 years for tax and regulatory audit purposes, in accordance with Brazilian tax legislation;
• Betting and game history: retained for 24 months after completion, and may be extended in the event of ongoing disputes or investigations;
• Support communications: kept for 12 months for quality assurance and dispute resolution purposes;
• Session cookies: automatically deleted at the end of the session or within 30 days at most.

Once the applicable retention periods expire, data is deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and product improvement purposes, with no possibility of identifying the data subject.

9Data Security

Fbbet1 continuously invests in technical and organizational measures to protect user data against unauthorized access, alteration, disclosure, or improper destruction. The key measures in place include:

• 256-bit SSL/TLS Encryption in all communications between the user and the platform;
• Encryption of data at rest on storage servers;
• Multi-factor authentication (MFA) for employee access to internal systems;
• Continuous security monitoring with intrusion detection and automated alerts;
• Periodic security audits conducted by independent third parties;
• Granular access control based on the principle of least privilege – each employee accesses only the data required for their role;
• Incident response process documented, with notification to the National Data Protection Authority (ANPD) in cases that require legal reporting.

9.1 What You Can Do to Protect Your Account

Keeping your account secure is a shared responsibility. fbbet1 recommends using a strong, unique password for the platform, never sharing your login credentials with others, enabling email notifications for account activity, and always accessing fbbet1 through the official URL.

10Your Rights as a Data Subject

The LGPD grants you a set of rights regarding your personal data processed by fbbet1. You may exercise any of these rights at any time, free of charge, by emailing suporte@fbbet1.best with the subject line "LGPD Request".

11Minors

Fbbet1 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. By creating an account, the user confirms they are 18 years of age or older.

If we identify that an account belongs to a minor – whether through a report, KYC verification, or any other means – the account will be immediately blocked. Any collected data will be deleted in accordance with applicable law, and deposited funds will be returned to the holder of the payment method used, following verification.

Parents or guardians who identify unauthorized use of the platform by minors should contact suporte@fbbet1.best immediately.

12International Data Transfer

Some of fbbet1's technology service providers may be located outside Brazil. When this occurs, fbbet1 ensures that data transfers comply with the LGPD's requirements for international transfers through one or more of the following safeguards:

• Contracts with data protection clauses equivalent to those required by the LGPD;
• Transfers to countries that provide an adequate level of data protection, as assessed by the National Data Protection Authority (ANPD);
• Certifications and international technical standards recognized by the ANPD.

In all cases, only the minimum data necessary for the specific service is transferred, and international providers are contractually required to handle data at a level of protection equivalent to that required in Brazil.

13Changes to this Privacy Policy

Fbbet1 may update this Privacy Policy periodically to reflect changes in legislation, platform practices, or the services offered. The date of the most recent update is always shown at the top of this document.

Significant changes — such as updates to the purpose of data processing or new types of data sharing — will be communicated by email to all registered users at least 7 days before taking effect. For minor changes (language updates, text corrections, addition of non-material details), notification will be made by updating the date in the header of this document.

By continuing to use the platform after a new version of this Policy takes effect, you confirm that you have read and accept the changes. If you do not agree, you may request account closure before the effective date.

14Contact, DPO & LGPD Channel

To exercise your rights as a data subject, ask questions about this Policy, or submit any complaint related to the processing of your personal data at fbbet1, please contact us through one of the channels below:

For formal LGPD rights requests, we recommend submitting by email to ensure your request is properly logged and traceable. When sending your request, please include your registered CPF, the right you wish to exercise, and the specific data your request concerns.

If you believe fbbet1 has not adequately handled an LGPD-related request, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal regulatory authority responsible for overseeing LGPD compliance in Brazil.