Bet7 Privacy Policy — Your Data, Protected

1. Who We Are — Controller Identification

Bet7 (hereinafter "bet7", "we", or "platform") is the controller of the personal data collected and processed in connection with the services provided at bet7.cash. As the data controller, bet7 determines the purposes and means of processing the personal data of registered users, in accordance with the General Data Protection Law (LGPD, Law 13.709/2018).

This Privacy Policy applies to all bet7 platform users residing in Brazil, regardless of the device used to access it — mobile, tablet, or computer. By creating an account on bet7, you confirm that you have read and agreed to this policy in its current version.

For privacy-related questions or requests, you can reach our team by email at contato@bet7.cash or via live chat, available 24 hours a day on the platform.

2. Data We Collect

Bet7 collects personal data at different points during your interaction with the platform. Below, we detail each category of data collected and the context in which the collection takes place:

2.1 Registration Data

When you create an account on bet7, we collect the following information:

• Full name;
• Email address;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Mobile phone number (optional, but required for two-factor authentication);
• Access password (stored in encrypted format — bet7 does not have access to your password in plain text).

2.2 Identity Verification Data (KYC)

To process withdrawals, bet7 is legally required to verify your identity. As part of this process, we collect:

• Photo ID (RG, CNH, or Passport);
• Selfie holding the document next to your face;
• Proof of residence issued within the last 90 days.

2.3 Payment Data

To process deposits and withdrawals, we collect information related to financial transactions, such as:

• Pix key used (CPF, email, phone number, or random key);
• Bank details for TED transfers (bank, branch, account number — where applicable);
• Credit or debit card information processed in tokenized form by our partner payment processor — bet7 does not store your full card number.

2.4 Platform Usage Data

Automatically, during your use of the platform, we collect:

• IP address and approximate geographic location;
• Browser type and version, and operating system;
• Betting history, games played, and transactions made on the account;
• Pages visited, session duration, and interface interactions;
• Cookie data and session identifiers.

3. How We Use Your Data

Personal data collected by bet7 is used exclusively for the following purposes:

Bet7 does not use your personal data for purposes other than those listed above without prior notice and, where applicable, obtaining your express consent.

4. Legal Basis for Data Processing

All personal data processing carried out by bet7 has a legal basis defined under the LGPD. The main legal bases used are:

• Contract performance (Art. 7, V): when processing is necessary to deliver the services you signed up for on the platform — such as processing bets, deposits, and withdrawals;
• Legal obligation (Art. 7, II): when the law requires us to collect and retain certain data — such as KYC information for anti-money laundering compliance (Law 9.613/1998) and financial records required under Brazilian tax legislation;
• Legitimate interest (Art. 7, IX): when processing is necessary for the legitimate interests of bet7 or third parties, provided those interests do not override your rights and freedoms — such as fraud analysis, platform security, and improving the user experience;
• Consent (Art. 7, I): when processing depends on your express authorization — such as receiving marketing communications by email or SMS. You may withdraw this consent at any time.

5. Sharing Data with Third Parties

Bet7 does not sell, rent, or share your personal data to third parties for commercial purposes. Data sharing occurs only in the following specific and necessary situations:

5.1 Essential Service Providers

To operate the platform, bet7 works with technology partners that process data on our behalf, always subject to data processing agreements compatible with the LGPD:

• Payment processors: to process deposits and withdrawals via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago;
• Identity verification providers (KYC): specialized services for identity document analysis and validation;
• Cloud infrastructure providers: data storage servers and systems with recognized security certifications;
• Data analytics tools: for platform performance monitoring — using anonymized data wherever possible.

5.2 Legal Obligations

Bet7 may share your data with government authorities, regulatory bodies, or the judiciary when required by law, court order, or a legally grounded investigation. In such cases, data is shared only to the extent required by the legal obligation.

5.3 Protection of Rights

In situations involving fraud prevention, anti-money laundering efforts, or the protection of the platform's legitimate interests and those of its users, data may be shared with partner entities in the financial sector in accordance with Banco Central do Brasil regulations and applicable anti-corruption legislation.

6. Data Storage and Retention

Personal data collected by bet7 is stored on secure servers with restricted access protocols and continuous monitoring. Retention periods vary depending on the data category and the purpose of processing:

• Registration and active account data: kept for as long as the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 (five) years after each transaction, as required by the Financial Activities Control Council (COAF) and Brazilian tax legislation;
• KYC data (identity verification): retained for the period the account is active plus 5 years after closure, as required by law;
• Usage data and access logs: retained for up to 12 months for security and audit purposes, in accordance with the Brazilian Internet Civil Framework (Law 12.965/2014);
• Support communications: kept for up to 3 years after the ticket is closed, for reference and quality purposes.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. You may request early deletion of your data, provided there is no legal obligation that prevents the request from being fulfilled.

7. Information Security

Bet7 employs a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

• 256-bit SSL/TLS Encryption: all communications between your device and the platform are encrypted in transit;
• Encryption at rest: sensitive data stored on bet7's servers is encrypted using industry-recognized algorithms;
• Least-privilege access control: only the staff and systems that require a specific piece of data to perform their function have access to it;
• Continuous monitoring: intrusion detection systems and anomalous behavior analysis operate around the clock to identify and respond to security incidents;
• Two-factor authentication (2FA): available to all users as an additional layer of account protection;
• Periodic audits: bet7's security infrastructure is reviewed regularly by internal teams and, where applicable, by external specialists.

In the event of a security incident that may pose a significant risk or harm to data subjects, bet7 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, providing details on the nature of the incident, the data involved, and the measures taken.

8. Cookies and Tracking Technologies

Bet7 uses cookies and similar technologies to ensure the platform functions correctly, analyze usage, and personalize the user experience. Below, we detail the types of cookies used:

8.1 Essential Cookies

Required for the platform's basic functionality — such as keeping your session active after login, ensuring the betting slip works correctly, and applying security settings. These cookies cannot be disabled without affecting your ability to use the platform.

8.2 Performance & Analytics Cookies

Used to analyze how users interact with the platform — which pages are visited most, which features are used most, and where errors occur. Collected data is aggregated and anonymized, with no individual user identification.

8.3 Functionality Cookies

These allow the platform to remember user preferences — such as language, odds display settings, and other customizations — for a more consistent experience across sessions.

8.4 Cookie Management

You can manage your cookie preferences at any time in your browser settings. Most browsers allow you to block or delete cookies from specific sites. Keep in mind that disabling essential cookies may prevent some bet7 platform features from working correctly.

9. Your Rights as a Data Subject

Brazil's LGPD gives you, as the owner of personal data processed by bet7, a set of rights that can be exercised at any time. Here's what you can request:

To exercise any of these rights, contact bet7 via the live chat available 24 hours a day on the platform or by email at contato@bet7.cash. Requests will be responded to within 15 business days from the date of receipt, as established by the LGPD.

If your request goes unaddressed or you receive an unsatisfactory response, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil.

10. Data of Minors

Bet7 is a betting and adult entertainment platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors.

If we determine that an account was created by a person under the age of 18, the account will be immediately closed, the data will be deleted, and any financial transactions carried out will be reversed. Parents and guardians should enable parental controls on their devices to prevent minors from accessing the platform.

If you believe a minor has created an account on bet7, please contact us immediately at contato@bet7.cash so we can act promptly.

11. International Data Transfer

Some of bet7's partner service providers — such as cloud infrastructure providers and payment processors — may process data on servers located outside Brazil. When this occurs, bet7 ensures that the international transfer complies with LGPD requirements, specifically:

• The destination country offers an adequate level of data protection as assessed by the ANPD; or
• The transfer is supported by specific contractual clauses that guarantee the data subject the same rights provided under the LGPD; or
• The data subject has given specific, informed consent for the transfer.

Bet7 keeps a record of all international data transfers carried out and can provide information about them upon request from the data subject.

12. Changes to this Privacy Policy

Bet7 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or platform features. All changes are communicated to users at least 7 days in advance by email and through a visible notice on the platform, before taking effect.

The date of the most recent update to this policy is always shown at the top of this page. We recommend reviewing this document periodically to stay informed about how bet7 handles your personal data.

Continued use of the platform after the effective date of any changes constitutes acceptance of those changes. If you do not agree with a change, you may close your account before the new version takes effect.

13. Contact, Data Protection Officer (DPO) & Complaints

To exercise your rights as a data subject, clarify questions about this policy, or file complaints regarding bet7's handling of your personal data, please use the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the bet7.cash platform;
• Email: contato@bet7.cash — for detailed privacy-related requests, please include "Privacy & LGPD" in the subject line for priority routing to the data protection officer;

Bet7's Data Protection Officer (DPO) is responsible for ensuring LGPD compliance on the platform, handling communications from data subjects, and maintaining the contact channel with the National Data Protection Authority (ANPD). Privacy-related requests are responded to within 15 business days.

If your request is not resolved to your satisfaction, you have the right to file a complaint directly with the ANPD at gov.br/anpd. bet7 cooperates fully with any investigations conducted by the regulatory authority.