Betw03 Privacy Policy – Your Data, Protected

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the controller of personal data processed within the scope of services provided by the platform betw03.net is the operating company of the betw03 platform, responsible for making decisions regarding the processing of users' personal data.

This Privacy Policy applies to all services offered by betw03, including Sports Betting, Live Casino, slots, crash games, and all other products available at betw03.net and its subdomains.

To contact betw03 regarding personal data matters, please use the email contato@betw03.net. The betw03 data protection officer (DPO) can be reached at the same address with the subject line identified as "DPO – Privacy".

Betw03 collects personal data at various points during your interaction with the platform. The table below outlines the categories of data collected and the circumstances under which each collection occurs:

Betw03 does not collect sensitive data categories such as racial or ethnic origin, religious beliefs, political opinions, health data, or sexual orientation, except where expressly required by law or with the data subject's explicit consent.

Betw03 processes users' personal data for the following specific and legitimate purposes:

• Account creation and management: verify the user's identity, validate the CPF, and ensure that only users aged 18 and over can access the platform;
• Provision of betting and casino services: process bet slips, calculate returns, settle markets, and make betting history available in the account;
• Financial transaction processing: receive deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, and process withdrawals to the account holder's account;
• Fraud and money laundering prevention: monitor unusual transactions, perform KYC identity checks, and meet the due diligence obligations established under Brazilian law;
• Customer support: answer queries, resolve technical or financial issues, and maintain interaction history for future reference;
• Compliance with legal obligations: respond to requests from competent authorities, retain records required by law, and comply with directives from the ANPD, the Banco Central do Brasil, and other regulatory bodies;
• Platform improvement: analyze usage patterns to identify technical issues, improve features, and personalize the user experience based on sports preferences;
• Marketing communications: send betw03 promotions, bonuses, and news by email or mobile, strictly based on user consent — with a quick and easy unsubscribe option in every communication.

Betw03 does not use users' personal data for purposes beyond those described above without prior notice and, where required, the user's renewed consent.

The LGPD requires that all personal data processing be grounded in a lawful basis. betw03 bases its processing activities on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Performance of a contract (art. 7, V): processing necessary to perform the service agreement entered into between the user and betw03 at registration — including bet processing, financial transactions, and account management;
• Compliance with a legal or regulatory obligation (art. 7, II): processing required by Brazilian law, such as financial record retention, KYC identity verification, and compliance with requests from authorities;
• Legitimate interest (Art. 7, IX): processing necessary to prevent fraud, ensure platform security, and carry out usage analysis that improves the user experience, provided betw03's interests do not override the data subject's fundamental rights;
• Consent (art. 7, I): for optional purposes such as sending marketing communications by email or SMS. Consent may be withdrawn at any time without affecting any other essential account operations.

Betw03 does not sell users' personal data. Data sharing with third parties is strictly limited to the situations described below and is always subject to appropriate contractual safeguards to protect your data:

• Payment providers: financial institutions, card acquirers, Pix operators, and platforms such as PicPay and Mercado Pago receive only the data strictly necessary to process each transaction. All such partners are subject to Banco Central do Brasil regulations and the LGPD;
• Identity verification providers (KYC): specialized services for CPF validation, document verification, and fraud prevention receive identity data solely for verification purposes, with retention governed by their own privacy policies;
• Casino game providers: slots, Live Casino, and crash game providers receive only an anonymous session identifier — not your full name, CPF, or financial details;
• Technical infrastructure providers: hosting, CDN, and cloud data processing services operating under data processing agreements (DPAs) compatible with the LGPD;
• Brazilian public authorities: Receita Federal, Banco Central, Polícia Federal, Ministério Público, and other competent authorities, where required by law, court order, or formal investigation mandating the disclosure of data.

In all sharing scenarios, betw03 contractually requires recipient third parties to use the data solely for the specific authorized purposes and to implement security measures consistent with the platform's standards.

Betw03 uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session active, remembering language preferences, and securing your login. These cannot be disabled without affecting your ability to use the platform;
• Performance cookies: collect anonymous information about how users navigate the platform — pages visited, time spent, and errors encountered. They help betw03 identify and fix technical issues;
• Functionality cookies: allow the platform to remember individual preferences — such as favorite sports or odds display settings — to personalize each user's experience;
• Analytics cookies: used with analytics tools to understand aggregate usage patterns and improve betw03 products. Data is anonymized before processing.

You can manage your cookie preferences at any time in your browser settings. Disabling essential cookies may prevent the platform from functioning properly. For non-essential cookies, you can withdraw your consent at any time without affecting access to your betw03 account.

Betw03 implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or accidental destruction. Key measures include:

• Encryption in transit: all data transmitted between your device and betw03's servers is protected by TLS protocol with AES-256 encryption — the same standard used in internet banking in Brazil;
• Encryption at rest: sensitive data stored on betw03's servers, such as financial data and verification documents, is kept encrypted at rest;
• Access control: only betw03 staff with a legitimate business need are authorized to access users' personal data, and only through multi-factor authentication;
• Security monitoring: betw03's systems are continuously monitored to detect unauthorized access attempts, anomalous behavior, and potential vulnerabilities;
• Penetration testing: security audits and vulnerability testing are conducted periodically by specialized teams to identify and remediate potential weaknesses before they can be exploited;
• Incident response plan: betw03 maintains a formal procedure for identifying, containing, reporting, and remediating security incidents involving personal data, in full compliance with the timelines required by the LGPD.

In the event of a security incident that may pose a significant risk to users, betw03 will notify the affected data subjects and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by law.

Betw03 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following retention criteria:

• Active account data: retained for as long as the account remains active on the betw03 platform;
• Financial transaction data: retained for a minimum of 5 years after the transaction, in accordance with Brazil's Receita Federal requirements and anti-money laundering legislation (Lei nº 9.613/1998);
• Identity verification data (KYC): retained for a minimum of 5 years after account closure, in compliance with Banco Central do Brasil regulations;
• Betting records: retained for a minimum of 3 years for dispute resolution and industry regulatory compliance purposes;
• Customer support data: retained for up to 2 years after the ticket is closed, for reference and customer service quality improvement;
• Marketing communication data: deleted immediately upon withdrawal of consent, except for the record of the withdrawal itself, which is retained to demonstrate compliance.

Once the applicable retention period has ended and there is no legal obligation to keep the data, it is securely deleted or anonymized so that the individual can no longer be identified.

In some cases, betw03 may need to transfer personal data to servers or service providers located outside Brazil — for example, when using global cloud infrastructure or international security analysis services.

When this occurs, betw03 ensures that international transfers of personal data take place only under the following conditions, in accordance with Article 33 of the LGPD:

• For countries or international bodies that provide a level of personal data protection adequate to that required by the LGPD, as assessed by the ANPD;
• Through specific contractual clauses that guarantee the data subject the same rights provided under the LGPD;
• When necessary for the performance of a contract or pre-contractual steps taken at the request of the data subject;
• With the data subject's specific and explicit consent for the transfer.

Betw03 documents all international data transfers and reviews them periodically to ensure that the applicable safeguards remain adequate.

Betw03 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process includes date-of-birth verification, and withdrawals require photo ID confirmation of legal age.

If betw03 determines that data from a minor was inadvertently collected, the account will be closed immediately, the data will be deleted as quickly as possible within applicable legal limits, and any real-money deposit balance will be refunded excluding winnings derived from bonuses or promotions.

To exercise any of the rights guaranteed by the LGPD regarding your personal data processed by betw03, follow the procedure below:

• Send an email to contato@betw03.net with the subject line "LGPD Rights – [request type]";
• In the body of the email, include: your full name, the CPF registered on your betw03 account, and a clear description of what you are requesting;
• For access, deletion, or portability requests, you may be asked to confirm your identity with a document — betw03 will request only the minimum information necessary for this verification;
• Betw03 will confirm receipt of your request within 3 business days and provide a full response within 15 calendar days, as required by the LGPD.

If a request is particularly complex or a large volume of requests is received simultaneously, betw03 may extend the response deadline by an additional 15 calendar days, notifying you of the reason for the extension within the original 15-day period.

If you are not satisfied with the response you receive, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through the agency's official channels.

Betw03 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to internal platform processes.

When relevant changes occur — particularly those that expand the scope of data processing or modify users' rights — betw03 will communicate the updates at least 7 calendar days in advance, via:

• Email sent to the address registered on your betw03 account;
• Prominent notice displayed on the platform's home page during the transition period;
• In-platform notification upon login.

Continued use of the platform after the effective date of a new version of this Policy constitutes acceptance of the changes. The most current version is always the one available on this page, with the last updated date indicated at the top of the document.

Previous versions of this Privacy Policy may be requested from betw03's DPO at contato@betw03.net for historical reference.

Betw03 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance, serving as the communication channel between the platform and data subjects, and acting as the point of contact with the Autoridade Nacional de Proteção de Dados (ANPD).

To reach betw03's DPO or privacy team, use:

• Email: contato@betw03.net (subject: "DPO – Privacy" or "LGPD Rights")
• Support: available in Portuguese, with acknowledgment within 3 business days and a full response within 15 calendar days

Betw03 is committed to responding to all privacy-related requests in a transparent manner, in plain language, and within the deadlines established by the LGPD. There are no fees for exercising your data subject rights.