612bet Privacy Policy – LGPD and Your Data

The 612bet ("we", "our", "platform") is responsible for processing the personal data of users registered on its website and digital platform accessible at 612bet.best. As a data controller under the LGPD, the 612bet defines the purposes and means by which users' personal data is processed.

This Privacy Policy transparently describes:

• What personal data we collect and when;
• The purposes for which data is used;
• What legal basis supports each processing activity under the LGPD;
• Who your data may be shared with and under what circumstances;
• How long data is retained and how it is protected;
• What your rights are as a data subject and how to exercise them.

The platform of 612bet is directed exclusively to the Brazilian market. All data is collected and processed in compliance with the laws of the Federative Republic of Brazil, particularly the General Data Protection Law (Lei nº 13.709/2018), the Internet Civil Framework (Lei nº 12.965/2014), and the Consumer Protection Code (Lei nº 8.078/1990).

The 612bet collects personal data at different points during your interaction with the platform. Below, we detail the categories of data and the context in which they are collected:

a) Data provided directly by you:

• Registration: full name, CPF, date of birth, email address, mobile number, residential address (zip code, city, state);
• Identity verification: documents such as RG, CNH, or passport, when requested to verify the account or process withdrawals above certain amounts;
• Financial data: payment method information used – Pix key (CPF, email, mobile number, or random key), credit/debit card details processed in tokenized form, PicPay or Mercado Pago account data;
• Communications: messages sent to support via live chat or email.

b) Automatically collected data:

• Browsing data: IP address, browser type, operating system, device (mobile, tablet, desktop), screen resolution;
• Session data: pages visited, time spent, navigation sequence within the platform;
• Game data: sports betting history, slots rounds, crash games, and live roulette sessions played, amounts wagered, and results obtained;
• Transaction data: full deposit and withdrawal history, payment methods used, amounts, and timestamps;
• Cookies and similar technologies: as described in section 8 of this policy.

The personal data collected by 612bet are used exclusively for the following purposes:

The 612bet does not use personal data for purposes incompatible with those described above. If a new use becomes necessary, you will be informed in advance and, where applicable, additional consent will be requested.

The LGPD requires that all processing of personal data be grounded in one of the legal bases set out in art. 7 of the law. 612bet processes personal data based on the following legal grounds:

• Contract performance (art. 7, V): processing is necessary to provide the contracted services when you create an account and use the platform — including account management, transaction processing, and delivery of games and betting;
• Compliance with a legal obligation (art. 7, II): data processed to meet applicable legal requirements, such as anti-money laundering regulations, tax obligations, and betting industry rules;
• Legitimate interest (art. 7, IX): security analysis, fraud prevention, detection of platform misuse, and service improvement, always balanced against data subjects' rights;
• Consent (Art. 7, I): for the sending of marketing communications by email and mobile. Consent may be withdrawn at any time without affecting any other services.

Where processing is based on consent, the 612bet will keep a record of the date, method, and scope of consent, and may present it to the data subject upon request.

The 612bet does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs exclusively in the following situations:

• Payment service providers: only the minimum necessary data is shared with Brazilian payment processors (Pix via the banking system, card acquirers, PicPay, Mercado Pago) to complete financial transactions. These partners act as data processors and are contractually required to use the data solely for the specified purpose;
• Game providers: technical session information is shared with game providers (Pragmatic Play, NetEnt, Play'n GO, and others) to ensure games function correctly. Providers receive no personal identification data beyond the anonymous session identifier;
• Identity verification services: CPF and document data may be validated with Brazilian credit bureaus or identity verification services for fraud prevention purposes;
• Competent authorities: data may be disclosed to judicial, law enforcement, or regulatory authorities when required by court order, legal request, or a regulatory obligation applicable to the sector;
• External auditors: during security or compliance audits, anonymized or pseudonymized data may be reviewed by independent auditors bound by contractual confidentiality obligations.

The 612bet retains personal data only for as long as strictly necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations:

• Active account data: retained for the entire duration of the account and for up to 5 years after closure, for audit, dispute, and tax obligation purposes;
• Financial transaction history: retained for a minimum of 5 years in accordance with Brazilian anti-money laundering regulations and tax requirements;
• Support communications: retained for up to 2 years for dispute resolution and quality control purposes;
• Marketing data (with consent): retained until consent is withdrawn by the user or until 2 years of inactivity, whichever comes first;
• Browsing data and access logs: retained for up to 6 months in accordance with the Brazilian Internet Civil Rights Framework (Lei nº 12.965/2014), and may be extended by court order.

After the applicable retention period, data is anonymized or securely and irreversibly deleted. Data deletion requests submitted by users are processed in accordance with legal deadlines — see section 9 of this policy for details on exercising this right.

The 612bet implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, destruction, or improper disclosure. Key measures in place include:

• Encryption in transit: all communication between the user's browser and the servers of 612bet is protected by SSL/TLS 256-bit, ensuring that personal and financial data is never transmitted in plain text;
• Encryption at rest: sensitive data stored on servers — including identity documents and financial information — is encrypted at rest using industry-standard protocols;
• Authentication and access control: internal access to personal data is restricted to staff with a proven operational need, with mandatory multi-factor authentication for critical systems;
• Payment data tokenization: credit and debit card data is tokenized by the payment processors — the 612bet does not store the full card number in its systems;
• Monitoring and anomaly detection: automated systems monitor access patterns and transactions to identify and block suspicious activity in real time;
• Secure backups: data backups are performed regularly and stored under the same encryption and access controls applied to primary data.

In the event of a security incident that may affect users' personal data, the 612bet will notify affected individuals and the National Data Protection Authority (ANPD) within the timeframes set by the LGPD, describing the nature of the incident, the data involved, and the measures taken to mitigate the risks.

The platform of 612bet uses cookies and similar technologies to ensure the proper functioning of the site, personalize the user experience, and, with your consent, analyze usage patterns for continuous improvement. The cookie categories used are:

• Strictly necessary cookies: essential for platform operation — session authentication, bet slip maintenance, language preferences. These cannot be disabled without affecting your use of the service;
• Performance and analytics cookies: collect information about how users interact with the platform (pages visited, session time, errors encountered) in an anonymized or aggregated form. Used to improve site performance and usability;
• Functionality cookies: store user preferences to personalize the experience, such as betting settings, favorites, and notification preferences;
• Marketing cookies (with consent): used to display relevant content and personalized promotions within the 612bet. They are not used for tracking on third-party websites.

You can manage your cookie preferences in the banner displayed on your first visit to the platform or in your account settings. Rejecting non-essential cookies will not prevent you from using our services, but may limit some personalization features.

The LGPD grants data subjects a comprehensive set of rights that can be exercised at any time with the 612bet. To exercise any of the rights below, please contact us at suporte@612bet.best with the subject line "LGPD – Data Request". Requests are answered within up to 15 business days.

The services of 612bet are intended exclusively for users aged 18 and over. The platform does not intentionally collect, store, or process personal data from individuals under the age of 18.

During registration, CPF verification against Brazilian databases includes confirmation that the holder is at least 18 years old. Accounts created with false information to conceal a minor's age will be immediately cancelled upon detection, and the collected data will be deleted.

If you suspect that a minor has accessed the platform of 612bet without authorization, contact us immediately at suporte@612bet.best so we can take the necessary steps.

This Privacy Policy may be updated periodically to reflect changes in Brazilian legislation, data processing practices of the 612bet or any of its features.

Any significant changes will be communicated by email to users with an active account, at least 15 calendar days before the effective date. The most recent version of this policy, including the date of the last update, will always be available on this page.

We recommend reviewing this policy periodically. Continued use of the platform after a new version takes effect constitutes acceptance of the updated terms. If you do not agree, you may request account closure before the changes come into effect.

For any questions regarding the processing of your personal data, the exercise of your rights under the LGPD, or to report possible violations of this policy, please contact the 612bet through the channels below:

• Privacy email: suporte@612bet.best – required subject line: "LGPD – Data Request";
• Live chat: available 24/7 directly on the platform after login, for general privacy and data inquiries;
• Response time: up to 15 business days for general requests; up to 4 hours for urgent situations involving suspected account compromise.

If you believe your rights have not been adequately addressed by 612bet, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

This Privacy Policy is governed by the laws of the Federative Republic of Brazil. Any disputes shall be submitted to the jurisdiction of the user's place of residence, in accordance with the Consumer Protection Code.