Privacy Policy – a66bet: How We Take Care of Your Data

1. Who We Are — The Data Controller

For the purposes of the LGPD, the a66bet (accessible at a66bet.best) acts as controller of its users' personal data. This means we are the ones who define the purposes and means of processing your data.

The official contact channel for privacy-related matters is the email suporte@a66bet.best or the live chat available on the platform. To exercise your rights under the LGPD, see section 12 of this Policy.

2. What Personal Data We Collect

The a66bet only collects the data necessary to provide the contracted services, verify identities, meet legal obligations, and continuously improve the platform experience. The categories of data processed are:

2.1 Registration Data

• Full name
• CPF
• Date of birth
• Email address
• Mobile number
• Full residential address
• Account password (stored in encrypted format — never in plain text)

2.2 Identity Verification Data (KYC)

• Photo ID document image (National ID, Driver's License, or Passport)
• Selfie for liveness check verification
• Proof of address
• Proof of ownership of the payment method, when requested

2.3 Financial Data

• Pix key used for deposits and withdrawals
• Partial credit or debit card details (full card data is processed exclusively by certified payment partners — a66bet does not store the complete card number)
• Deposit, withdrawal, and transaction history on the platform

2.4 Platform Activity Data

• Sports betting history (sport, market, amount, result)
• Casino game history (titles played, amounts wagered, results)
• Game preferences and favorite sports
• Responsible gambling settings defined by the user

2.5 Technical & Browsing Data

• IP address
• Browser type and version
• Operating system and device model
• Pages visited and session duration
• Session and preference cookies

3. How We Collect Your Data

Data is collected through the following means:

• Registration form: data provided directly by you when creating your account at a66bet.
• KYC Process: documents submitted by the user in response to identity verification requests.
• Financial transactions: data generated when making deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, or TED bank transfer.
• Platform usage: data generated automatically as you browse, place bets on sporting events such as Brasileirão, Libertadores, and UFC, or play in the live casino.
• Cookies and similar technologies: as detailed in Section 10 of this Policy.
• Support communications: data provided through live chat conversations or by email.

4. How We Use Your Data

The a66bet uses your personal data solely for the following purposes:

Purpose	Data Used
User account creation and management	Registration data, CPF, email, mobile number
Identity verification (KYC)	Documents, selfie, proof of address
Processing deposits and withdrawals	Pix key, card details (partial), financial history
Provision of betting and casino services	Betting history, game preferences
Fraud and money laundering prevention	IP address, device, financial behavior patterns
Compliance with legal and regulatory obligations	CPF, documents, financial history
Customer support	Account data, transaction history, betting history
Platform improvement and personalized experience	Browsing data, preferences, and usage history
Account communications (notifications, security alerts)	Email, mobile number
Responsible gambling (alerts, limits, self-exclusion)	Betting history, user-defined settings

The a66bet does not use your personal data for third-party direct marketing, profile selling, or any purpose not listed above.

5. Legal Basis for Processing (LGPD)

All data processing carried out by a66bet has a legal basis set out in the LGPD (Art. 7 and Art. 11):

• Contract performance (Art. 7º, V): data required to provide betting, casino, payment processing, and customer support services.
• Legal obligation (Art. 7, II): data required to comply with Brazilian law, including anti-money laundering regulations (Law No. 9,613/98) and tax obligations.
• Legitimate interest (Art. 7, IX): browsing and behavioral data used for fraud prevention, platform security, and service improvement.
• Consent (Art. 7º, I): for sending optional promotional communications. Consent may be withdrawn at any time from the account dashboard.

6. Sharing Data with Third Parties

The a66bet may share your personal data with the following categories of third parties, always for a specific and proportionate purpose:

6.1 Payment Partners

To process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED bank transfers, your financial data is transmitted to payment processors certified by the Central Bank of Brazil. These partners act as data operators under a66bet's instructions and are bound by contractual confidentiality and security obligations.

6.2 Casino Game Providers

To allow you to play slots, live tables, crash games, and other titles, minimal session data is transmitted to game providers (such as Pragmatic Play, Evolution Gaming, and Spribe). This data is limited to what is strictly necessary to launch and record each round.

6.3 Infrastructure and Security Providers

Cloud hosting, security monitoring, and fraud prevention services may have technical access to anonymized or pseudonymized data. These providers are contractually prohibited from using the data for any other purpose.

6.4 Competent Authorities

The a66bet may be legally required to share data with Brazilian law enforcement, judicial, or regulatory authorities when a valid legal order exists. No data is voluntarily shared with authorities without formal legal basis.

7. International Data Transfers

Some of our technology partners and casino game providers have infrastructure located outside Brazil. When your data is transferred abroad, the a66bet adopts the safeguards required by the LGPD (Art. 33), including standard contractual clauses that ensure the same level of protection applied in Brazil.

International data transfers are limited to what is strictly necessary to provide our services — game session data and, where applicable, identity verification data for KYC services with global operations.

8. How Long We Retain Your Data

Retention periods vary according to the nature of the data and applicable legal obligations:

• Active account data: retained for as long as the account remains active and the contracted services are in use.
• Financial and transaction data: retained for a minimum of 5 (five) years after the transaction, as required by tax legislation and anti-money laundering regulations.
• KYC documents: retained for a minimum of 5 (five) years after account closure, in accordance with regulatory obligations.
• Browsing data and access logs: retained for up to 6 (six) months, unless required for fraud investigation or by court order.
• After account closure: personal data is anonymized or deleted at the end of the applicable legal retention period, except where extended retention is required by order of a competent authority.

9. Data Security

The a66bet implements technical and organizational measures proportionate to the risk to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. The main measures in place include:

• 256-bit SSL/TLS encryption across all communications between your device and our servers.
• Encryption at rest for sensitive data stored in our databases.
• Role-based access control (RBAC) — only employees with a legitimate need have access to specific data.
• Two-factor authentication available for all user accounts.
• Continuous monitoring of access and suspicious activity across our systems.
• Periodic security audits conducted by our internal team and, where applicable, by external auditors.
• Incident response plan to notify affected users and the National Data Protection Authority (ANPD) in the event of a relevant incident, within the timeframes set out by the LGPD.

No system is 100% immune to risk. If you suspect unauthorized access to your account, contact a66bet support immediately a66bet via live chat.

10. Cookies and Similar Technologies

The a66bet uses cookies and similar technologies to ensure the platform functions correctly and to enhance your experience. The cookie categories used are:

10.1 Strictly Necessary Cookies

Essential for the platform's basic operation — including authentication, session security, and maintaining your betting slip. These cannot be disabled without affecting the platform's functionality.

10.2 Performance & Analytics Cookies

These collect information about how users interact with the platform — which pages are visited most, where errors occur, and how navigation can be improved. Data is aggregated and anonymized. The use of these cookies can be managed in the account settings panel.

10.3 Preference Cookies

These store your interface preferences — such as language, odds settings, and favorite sports — so you don't have to reset them every time you log in.

The a66bet does not use third-party tracking cookies for advertising purposes without the user's explicit consent. You can manage your cookie preferences through the account settings panel or your browser settings.

11. Minors

The services of a66bet are intended exclusively for individuals aged 18 (eighteen) or older. The platform does not knowingly collect personal data from minors. The identity verification process (KYC) is applied to all users specifically to ensure compliance with this requirement.

If you become aware that a minor has created an account or used the services of a66bet, please contact our support team immediately at suporte@a66bet.best. The account will be closed and the data deleted once the situation is confirmed.

12. Your Rights as a Data Subject

The LGPD grants you, as the data subject, the following rights regarding the processing carried out by a66bet:

• Access (Art. 18, II): request confirmation that your data is being processed and obtain a copy of the data we hold about you.
• Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion (Art. 18, IV): request the anonymization or deletion of unnecessary data or data processed in violation of the LGPD, subject to applicable legal retention periods.
• Portability (Art. 18, V): request the transfer of your data to another service provider in a structured, interoperable format.
• Withdrawal of consent (Art. 18, IX): withdraw consent given for processing activities based on that legal basis — such as receiving promotional communications.
• Right to information on sharing (Art. 18, VII): request information about the public and private entities with which a66bet shares your data.
• Right to Object (Art. 18, §2º): object to processing carried out on the basis of legitimate interest where it has a disproportionate impact on your rights.

13. Data Protection Officer (DPO)

Under Art. 41 of the LGPD, the a66bet has appointed a Data Protection Officer (DPO), responsible for:

• Accept complaints and communications from data subjects and provide clarifications.
• Guide a66bet employees and contractors on data protection practices.
• Carry out any other responsibilities assigned by the controller or established by supplementary regulations.

You can reach the Data Protection Officer by email at privacidade@a66bet.best or via the platform's live chat, selecting the topic "Privacy and Personal Data".

14. Changes to This Privacy Policy

The a66bet may update this Privacy Policy periodically to reflect changes in services, legislation, or security practices. Material changes will be communicated to users via their registered email or through an in-platform notification at least 7 (seven) days before taking effect.

The date of the latest update is always shown at the top of this document. Continued use of the platform after the effective date of any changes constitutes acceptance of the new version of the Policy. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data in accordance with the applicable legal timeframes.

For any questions about this Policy or how your data is handled, our support team is available in English 24 hours a day via live chat at a66bet.best.