Privacy Policy of 169bet

1. Who We Are and the Data Controller

This Privacy Policy describes the personal data collection, use, storage, and protection practices adopted by the platform 169bet, accessible at 169bet.click and through its mobile apps for Android and iOS.

For the purposes of the LGPD (Law No. 13,709/2018), the 169bet acts as data controller of users' personal data — meaning it defines the purposes and means by which collected information is processed. The platform's Data Protection Officer (DPO) can be reached by email at contato@169bet.click for any request related to personal data.

By creating an account on 169bet and use any service on the platform, you acknowledge that you have read and agreed to the terms of this Privacy Policy. If you have questions before signing up, contact support via live chat — available 24 hours a day, in Brazilian Portuguese.

2. What Personal Data We Collect

The 169bet collects different categories of personal data depending on how you interact with the platform. See the breakdown by category below:

Credit or debit card data is not stored on the servers of 169bet. They are processed directly by certified payment gateways (PCI DSS) and transmitted in tokenized form, meaning the full card number is never accessible to the platform.

3. How We Use Your Personal Data

The data collected by 169bet are used exclusively for the purposes described below:

• Creating and managing your account — to identify you as a unique user, control access to the platform, and keep your betting history and transaction records available to you at all times.
• Processing of deposits and withdrawals — enable transfers via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED with security and full traceability.
• Identity verification (KYC) — meet Brazilian legal obligations related to anti-money laundering and age verification (18 years of age or older).
• Experience personalization — suggest relevant sports events (Brasileirão, UFC, Libertadores, NBB) and casino games based on your usage history, when you have not opted out of this feature.
• Account communications — sending transaction confirmations, security alerts, bet result notifications, and updates on active bonuses.
• Promotional communications — sending offers, promotions, and news from 169bet, exclusively with your prior consent and with the option to unsubscribe at any time.
• Security and fraud prevention — detecting and blocking suspicious behavior, such as the creation of multiple accounts, use of bots, or activities that may constitute money laundering.
• Compliance with legal obligations — to comply with requests from competent authorities as required by Brazilian law.
• Ongoing platform improvement — analyzing aggregated, anonymized usage patterns to identify improvements to the product, interface, and services offered.

The 169bet does not use your data to make automated decisions that produce legal effects or significant impacts on your life without the possibility of human review — as provided under Article 20 of the LGPD.

4. Legal Basis for Data Processing

All data processing carried out by 169bet has a clear legal basis, as required by Article 7 of the LGPD. The bases used are:

• Contract performance — to process the data necessary to provide the services contracted when creating an account on the platform (Sports Betting, casino, payments, and support).
• Compliance with a legal or regulatory obligation — for identity verification (KYC), anti-money laundering compliance, and responses to competent authorities as required by Brazilian law.
• Legitimate interest — for platform security, fraud prevention, and service improvement purposes, where 169bet's interests do not override the rights and freedoms of the user.
• Consent — for promotional communications via email, SMS, or push notifications. You may withdraw this consent at any time without any impact on your use of the platform.

5. Sharing Data with Third Parties

The 169bet does not sell, rent, or otherwise transfer users' personal data to third parties for those parties' own commercial purposes. Data sharing occurs only in the following situations:

• Essential service providers — companies that provide technical services essential to the platform's operation, such as payment gateways (Pix, boleto, card), hosting providers, KYC and identity verification firms, and casino game providers (Evolution Gaming, Pragmatic Play, Spribe, and others). These partners are contractually required to protect data to the same standards as 169bet and to use it solely for the provision of the contracted service.
• Public authorities — when required by law, court order, or request from a competent Brazilian authority, such as the Financial Activities Control Council (COAF) in the context of money laundering investigations.
• Fraud prevention — in specific situations involving fraud investigations, platform abuse, or criminal activity, data may be shared with specialized fraud prevention entities or law enforcement authorities.

6. Data Retention & Deletion

The 169bet retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. General retention periods are:

• Active account data — retained for as long as your account remains active on the platform.
• Financial transaction data — retained for a minimum of 5 years after the transaction, as required by Brazilian financial control and anti-money laundering legislation.
• KYC data (documents) — retained for a minimum of 5 years after account closure, as required by regulatory obligations.
• Support contact details — retained for up to 2 years after the support session is closed.
• Cookie and technical access data — retained for up to 13 months, in accordance with data protection best practices.

Once the purposes and minimum legal retention periods have been fulfilled, personal data is securely deleted or anonymized, making any re-identification of the user impossible. Requests for early deletion can be submitted through the support channel of the 169bet, subject to verification that no legal obligations requiring retention are in place.

7. Information Security

The 169bet applies technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption on all communications between your device and the platform's servers.
• Passwords stored with one-way hashing — not even the support team has access to your password in plain text.
• Two-factor authentication (2FA) available to all users as an additional layer of account protection.
• Internal access to personal data is restricted to staff who need it to perform their duties, with a full log of all access recorded.
• Continuous monitoring of suspicious activity and automated systems for detecting intrusion attempts.
• Credit and debit card data is processed exclusively by PCI DSS-certified gateways — no card information is stored on 169bet's servers.
• Regular encrypted backups stored in geographically separate environments.

In the event of a security incident that may affect users' personal data, the 169bet will notify the National Data Protection Authority (ANPD) and affected users within the timeframes set by the LGPD — within 72 hours for the authority and as quickly as possible for data subjects when the risk is deemed significant.

8. Cookies & Tracking Technologies

The 169bet uses cookies and similar technologies (such as web beacons and local storage) to ensure the platform functions correctly, personalize your experience, and collect usage data in aggregate form. The types of cookies used are:

You can manage or revoke cookie permissions at any time through the cookie preferences panel available on the platform or via your browser settings. Disabling essential cookies may prevent certain features of the 169bet.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a robust set of rights that 169bet is committed to respecting and facilitating. See each right and how to exercise it below:

To exercise any of these rights, contact the DPO at 169bet by email contato@169bet.click or via live chat. The response deadline is up to 15 business days, as provided under the LGPD. If your request is not satisfactorily resolved, you may escalate the matter to the National Data Protection Authority (ANPD).

10. Minors

The platform 169bet is intended exclusively for users who are 18 years of age or older. The collection of personal data from users under 18 is not permitted and is a violation of the platform's Terms of Use.

During the registration process, 169bet requires the user's CPF and verifies their date of birth. If it is identified that a minor has created an account, the account will be immediately closed, any deposits made will be returned, and all collected data will be deleted, in accordance with the LGPD and the Child and Adolescent Statute (ECA).

If you suspect that a minor is using the platform, notify support immediately via live chat or by emailing contato@169bet.click. The 169bet treats this type of report as the highest priority.

11. International Data Transfers

Some of the service providers used by the 169bet — such as cloud hosting platforms, casino game providers (Evolution Gaming, Pragmatic Play, NetEnt, and others), and analytics tools — may process data on servers located outside Brazil.

When this occurs, the 169bet ensures that these international transfers are carried out with appropriate safeguards, including:

• Standard contractual data protection clauses between 169bet and the suppliers involved.
• Verification that destination countries offer a level of data protection equivalent to that required by the LGPD, or that specific protection mechanisms are in place.
• Inclusion of confidentiality and security obligations in all contracts with vendors that process data belonging to Brazilian users.

Under no circumstances are sensitive financial data (such as card details) stored on servers outside Brazil — this data is processed exclusively by certified Brazilian payment gateways.

12. Changes to this Privacy Policy

The 169bet may update this Privacy Policy at any time to reflect changes in Brazilian legislation, the services offered, or internal data processing practices. The date of the latest update is always shown at the top of this page.

When changes are significant — particularly those that expand the types of data collected or modify their purposes — the 169bet will notify users by email or in-platform notification at least 30 days in advance, offering the opportunity to review the changes and, where applicable, provide new consent.

Continued use of the platform after updates are published constitutes acceptance of the new version of this policy. If you disagree with the changes, you may request account closure and data deletion by contacting the support team at 169bet.

13. Contact, DPO & Privacy Channel

For any request related to personal data, the exercise of rights under the LGPD, or questions about this Privacy Policy, please contact the 169bet through the following channels:

• DPO Email: contato@169bet.click — response time of up to 15 business days for rights requests.
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — in Brazilian Portuguese.
• WhatsApp: Portuguese-language support, available 24/7 for general inquiries and urgent requests.

Requests related to the LGPD (access, correction, deletion, portability, or withdrawal of consent) should preferably be submitted by email to ensure traceability and compliance with legal deadlines. The 169bet may request identity verification before processing deletion or data portability requests, as a security measure to protect the user.

If the response from 169bet is not satisfactory, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided in Article 18, § 1, of the LGPD.