Privacy Policy of 929bet — Your Data, Protected

A 929bet is a Sports Betting and online casino platform operated for the Brazilian market, accessible at 929bet.best. For the purposes of this Privacy Policy, 929bet acts as the controller of personal data processed in connection with platform operations — meaning 929bet determines the purposes and means of processing your data.

This policy applies to all 929bet users — registered players, site visitors, and anyone who interacts with the platform via web or mobile device. It covers all personal data collected during registration, deposits made via Pix and other methods, Sports Betting, access to Live Casino, and any contact with support.

A 929bet collects only the data strictly necessary to operate the platform. Data is collected in three main ways: information you provide directly, data generated automatically through your use of the platform, and data obtained from third parties for verification purposes.

Data you provide during registration and use:

• Full name, CPF, date of birth, and email address;
• Mobile phone number and residential address (zip code, street, city, state);
• Identity documents submitted for KYC verification (national ID, driver's license, selfie with document);
• Pix key, credit or debit card details, and other payment information;
• Support communications via chat, email, and WhatsApp.

Data collected automatically during use:

• IP address, device type, operating system, and browser version;
• Betting history, games accessed, amounts wagered, and results;
• Session data: access times, duration, pages visited;
• Approximate location data derived from your IP address (we do not collect GPS data without explicit consent);
• Cookies and similar browsing tracking technologies.

Data received from third parties:

• Information from credit bureaus and government databases for CPF and identity verification;
• Data from payment processors to confirm Pix, boleto, and card transactions;
• Information from anti-money laundering lists (PEP and sanctioned individuals).

The personal data collected by 929bet are used exclusively for the following purposes:

• Account creation and management: verify your identity, process your registration, and maintain secure access to the platform;
• Transaction processing: process deposits via Pix, boleto, card, and other methods, and process withdrawals to the account holder;
• Delivery of Sports Betting and casino services: record bets, calculate odds, process winnings, and manage betting history;
• Fraud prevention and security: detect unauthorized access, identify suspicious patterns, and meet anti-money laundering obligations;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and activate protective tools when necessary;
• Customer support: answer questions, resolve disputes, and log interactions for service quality purposes;
• Operational communications: send bet confirmations, account alerts, withdrawal notifications, and information about active promotions;
• Platform improvement: analyze aggregated, anonymized usage data to improve the browsing experience, especially on mobile;
• Compliance with legal obligations: comply with requests from regulatory, judicial, or tax authorities as required under Brazilian law.

A 929bet does not use personal data to build advertising profiles for third parties or to sell information to advertisers. Data use is strictly internal and operational.

All personal data processing by 929bet has a defined legal basis under the General Data Protection Law (LGPD — Law No. 13.709/2018). The legal bases applied are:

• Contract performance (art. 7, V): processing required to create your account, handle bets, deposit and withdraw via Pix, and deliver the contracted services;
• Legal or regulatory obligation (art. 7, II): KYC identity verification, anti-money laundering compliance (Law No. 9.613/1998), tax obligations, and responses to requests from authorities;
• Legitimate interest (Art. 7, IX): fraud detection, platform security, service improvements, and operational communications — provided these do not override data subjects' rights;
• Consent (Art. 7, I): sending marketing communications, using analytical cookies, and collecting data not essential to operations — with the option to withdraw consent at any time.

A 929bet does not sell users' personal data. Sharing occurs only in the following situations, always with appropriate safeguards in place:

• Payment processors: data required to process transactions via Pix, boleto, card, PicPay, Mercado Pago, and TED is shared with the financial institutions involved — Nubank, Itaú, Bradesco, Banco do Brasil, and others. These partners are contractually bound to protect your data;
• Game and casino providers: minimal session data may be shared with live game providers to enable streaming and bet recording;
• Identity verification services: CPF and identity documents may be verified against government databases and credit bureaus to fulfill KYC obligations;
• Authorities and regulatory bodies: data may be shared with judicial, tax, law enforcement, or regulatory authorities upon formal legal request;
• Technology infrastructure providers: cloud servers and security services that process data as operators under contract with data protection clauses.

No personal data is transferred internationally without the safeguards required by the LGPD — such as standard contractual clauses or equivalent protections.

User data from 929bet are stored on secure servers with the following technical and organizational measures:

• 256-bit SSL/TLS encryption for data in transit;
• Encryption at rest for sensitive data such as passwords and financial information;
• Strict access controls — only authorized staff can access personal data, and only to the extent required by their role;
• Continuous security monitoring and intrusion detection;
• Regular backups with disaster recovery policies;
• Two-factor authentication for all administrative access.

In the event of a security incident that may compromise personal data, 929bet will notify the ANPD and affected data subjects within the timeframes set by the LGPD, providing information on what occurred, which data was affected, and the measures taken.

A 929bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and protect account security. The types of cookies used are detailed in the section above on this page.

You can manage your cookie preferences through your browser settings (Chrome, Safari, Firefox, etc.) or mobile device. Disabling analytical and functional cookies may affect some features, but won't prevent access to Sports Betting or the casino. Mandatory session and security cookies cannot be disabled without compromising account access.

929bet does not use third-party behavioral advertising tracking cookies. Any analytics data collected via cookies is used solely to improve the platform and is handled in aggregated, anonymized form wherever possible.

As the data subject whose personal data is processed by 929bet, the LGPD guarantees the rights detailed in the "What the LGPD Guarantees You" section above. To exercise any of these rights, contact our Data Protection Officer (DPO) at contato@929bet.best with the subject line "LGPD Rights", clearly stating which right you wish to exercise.

Requests are processed within 15 business days. In the case of deletion requests, 929bet may retain certain data for as long as required to meet legal obligations — such as the minimum period mandated by anti-money laundering and tax legislation. Once that period ends, the data is deleted or anonymized.

A 929bet is a betting platform intended exclusively for adults aged 18 and over. The intentional collection of personal data from minors is strictly prohibited. If 929bet identifies that a registered user is under 18, the account will be immediately closed, the data deleted, and any deposited balance refunded in accordance with withdrawal rules.

Parents or guardians who discover that a child or minor has created a 929bet account should contact support immediately to have the account closed and the data deleted.

Personal data is retained by 929bet for as long as necessary to fulfill the purposes for which it was collected, in compliance with the applicable minimum legal retention periods:

• Registration data and financial transactions: a minimum of 5 years after account closure, in line with tax and anti-money laundering obligations;
• Betting history: a minimum of 2 years for audit purposes and dispute resolution;
• Support communications: up to 2 years after the last interaction;
• Session data and analytical cookies: up to 13 months after collection;
• Fraud prevention data: for as long as required for the investigation and resolution of the case.

Once retention periods have expired, data is securely deleted or irreversibly anonymized.

A 929bet may update this Privacy Policy periodically to reflect changes in data processing practices, LGPD updates, or other applicable regulations. Material changes will be communicated by email and through a prominent notice on the platform at least 7 days in advance.

The last updated date at the top of this page always reflects the current version. We recommend checking this page periodically to stay informed. Continued use of the platform after any changes take effect constitutes acceptance of the updated policy.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concerns regarding the processing of your personal data by 929bet, please get in touch:

• DPO Email: contato@929bet.best (subject: "LGPD Rights" or "Privacy")
• Live chat: available 24 hours a day on the platform, in Portuguese
• WhatsApp: available via the platform, in Portuguese

The standard response time is up to 15 business days for data subject rights requests. General privacy inquiries are answered within 5 business days. If you are not satisfied with our response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) at gov.br/anpd.