351bet Privacy Policy – Data Protection in Brazil

1 Introduction

This Privacy Policy describes how 351bet collects, stores, uses, shares, and protects its users' personal data. It applies to all services offered on the platform — Sports Betting, slots, crash games, Live Casino, roulette, and any other feature available on the site.

By registering on 351bet and use any service on the platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. This policy should be read alongside our Terms and Conditions.

The 351bet treats privacy as an ongoing commitment, not a bare legal requirement. We regularly review and update this policy to reflect changes in our processes, the technologies we use, and applicable Brazilian law — especially the General Data Protection Law (Law No. 13.709/2018).

2 Data Controller

The controller of personal data processed under this policy is the company operating the platform 351bet, responsible for making decisions regarding the processing of personal information of users registered on the site.

For all purposes set out under the LGPD, the official channel for communicating with the data controller is the email suporte@351bet.best, available 24 hours a day. Specific questions about data protection can be directed to the Data Protection Officer (DPO) at the same address, with the subject line "LGPD – Solicitação de Titular".

3 Data We Collect

The 351bet collects personal data at different points throughout your journey on the platform. Below, we detail the categories of data collected and the situations in which each applies:

The 351bet does not collect sensitive data such as racial origin, religious beliefs, health information, or sexual orientation. Precise geolocation data is only collected when the user grants explicit permission on their device, and solely for fraud prevention and regulatory compliance purposes.

4 How We Use Your Data

Every piece of data collected by 351bet has a specific and justified purpose. We use user information to:

• Provision of contracted services — creating and managing your account, processing deposits via Pix, credit card, Mercado Pago, PicPay, or boleto bancário, recording bets, and paying out withdrawals;
• Identity verification and regulatory compliance — the KYC process is required under Brazilian financial regulations and is designed to prevent money laundering, fraud, and misuse of the platform;
• Account security — detection of suspicious access attempts, bot protection, and fraud prevention across bets and financial transactions;
• Responsible gambling — monitoring behavioral patterns to identify signs of compulsive gambling and proactively offer support when needed;
• Communication with the user — sending notifications about transactions, account updates, changes to terms and, with your consent, promotional communications;
• Platform improvement — analysis of aggregated and anonymized data to understand how users interact with the platform and improve the overall experience;
• Compliance with legal obligations — compliance with orders issued by competent Brazilian judicial, administrative, or regulatory authorities.

The 351bet does not use personal data for purposes not listed above without first notifying the user and, where required by the LGPD, obtaining fresh consent.

5 Legal Basis for Processing

All data processing carried out by 351bet is grounded in at least one of the legal bases established under the LGPD:

• Contract performance — data required to provide the betting, casino, and payment processing services contracted by the user upon account creation;
• Legal obligation — data collected to meet regulatory requirements such as KYC, anti-money laundering (Law No. 9.613/1998), and compliance with court orders;
• Legitimate interest — security analysis, fraud prevention, and responsible gambling monitoring, provided these do not override the fundamental rights of the data subject;
• Consent — marketing communications, promotions, and the use of non-essential cookies. Consent can be withdrawn at any time without affecting your access to the platform's core services.

6 Data Sharing

The 351bet does not sell, rent, or share users' personal data with third parties for commercial or advertising purposes. Full stop. We only share information in the situations listed below, and always with the minimum data necessary for each purpose:

• Payment providers — Pix processors, Mercado Pago, PicPay, card networks (Visa, Mastercard, Elo), and banks (Nubank, Itaú, Bradesco, Banco do Brasil) receive only the data strictly necessary to process each transaction. These partners are bound by confidentiality agreements and handle data in compliance with Banco Central do Brasil regulations;
• Game providers — game studios integrated into the platform (such as Pragmatic Play, PG Soft, Hacksaw Gaming) may receive session identifiers and game data to operate the games. No personal data beyond what is necessary is shared;
• Technical service providers — companies that provide infrastructure, security, fraud analysis, and technical support services to 351bet. All operate under contracts with strict data protection clauses;
• Competent authorities — sharing with Brazilian law enforcement, judicial, or administrative authorities when required by a valid legal order. 351bet does not comply with voluntary requests without legal backing;
• Auditors and regulators — for compliance audit purposes and to meet the regulatory requirements of the Brazilian sports betting market.

In all cases of data sharing, 351bet contractually requires recipients to maintain equivalent data protection standards and to use the information solely for the authorized purpose.

7 Data Security

The 351bet implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS Encryption across all communications between your device and our servers — the same standard used by Brazil's leading digital banks;
• Encryption of data at rest for sensitive information stored in the database — including identity documents and financial data;
• Payment data tokenization — credit card data is tokenized and never stored in plain text on our systems;
• Two-factor authentication (2FA) available as an additional security layer for account login;
• Continuous Monitoring of access logs and transactions to detect unusual behavior in real time;
• Role-based access control — 351bet employees access personal data only when strictly required for their role, and all access is logged;
• Penetration testing and security audits conducted periodically by independent specialized firms.

In the event of a security incident that may pose a significant risk to data subjects, 351bet will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 72 hours of identifying the incident, where applicable.

8 Data Retention & Deletion

The 351bet retains personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The criteria used to determine retention periods are:

• Registration and identification data — retained for the entire duration of the account and for up to 5 years after closure, as required by financial regulation and anti-money laundering laws;
• Financial transaction history — retained for 5 years from the date of each transaction, in compliance with Brazilian tax and regulatory obligations;
• KYC Documents — retained for the period required by applicable financial regulations, for a minimum of 5 years after verification;
• Betting history and gaming session logs — retained for 2 years from the date of each event for support, audit, and responsible gambling purposes;
• Support communication data — retained for 2 years for quality assurance and dispute resolution purposes;
• Cookie and browsing data — in accordance with each cookie type's settings, with a maximum retention period of 2 years for preference cookies.

Once retention periods expire, data is securely deleted or irreversibly anonymized. Users may request early deletion, but such requests are subject to verification that no active legal retention obligation applies to the specific data in question.

9 Cookies & Similar Technologies

The 351bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect analytical data. The types of cookies used are:

• Essential cookies — required for the platform's basic operation, such as maintaining login sessions and language preferences. They cannot be disabled without affecting your ability to use the site;
• Performance & analytics cookies — collect anonymized data on how users interact with the platform to identify and resolve issues. They do not track personally identifiable data;
• Functionality cookies — store user preferences such as notification settings and interface configurations to personalize your experience;
• Security cookies — used to detect unauthorized access attempts and suspicious behavior that may indicate fraud or bot activity.

The 351bet does not use third-party advertising tracking cookies or share browsing data with ad platforms. When you first access the platform, you are presented with a cookie consent panel where you can set your preferences for non-essential cookies.

You can manage or revoke your cookie settings at any time through your browser's settings panel. Revoking consent for non-essential cookies does not affect the core functionality of 351bet.

10 Your Rights as a Data Subject (LGPD)

The LGPD grants you a comprehensive set of rights regarding your personal data processed by 351bet. All of these rights can be exercised by submitting a request to support — via live chat or by emailing suporte@351bet.best with the subject line "LGPD – Data Subject Request":

All requests receive a response within 15 business days from the date of receipt. The 351bet may request identity verification before fulfilling a request to ensure we are dealing with the legitimate data subject. If a request is denied, the reason will be provided in writing with the applicable legal basis.

If you feel your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the Brazilian regulatory authority responsible for enforcing the LGPD.

11 Minors

The 351bet is a platform exclusively for users aged 18 and over. We do not intentionally collect or process personal data from individuals under 18. Registration by minors is strictly prohibited and constitutes a violation of our Terms and Conditions.

If we determine that an account was created by a minor, the account will be immediately closed, all collected data will be deleted, and any balance in the account will be held until the matter is resolved in accordance with Brazilian law.

If you are the legal guardian of a minor and suspect they have created an account on 351bet, please contact support immediately via live chat or at suporte@351bet.best. The matter will be handled as a priority and with full confidentiality.

12 International Data Transfer

Some of the technology and game providers used by 351bet are headquartered or have infrastructure in other countries. When personal data of Brazilian users is transferred abroad, the 351bet adopts the following safeguards to ensure protection equivalent to that required under the LGPD:

• Transfer only to countries that provide an adequate level of data protection, as assessed by the ANPD;
• Execution of specific data protection contractual clauses with all international recipients;
• Verification that international providers follow recognized security standards such as ISO 27001 or SOC 2;
• Data minimization in transfers — only the information strictly necessary for each specific purpose is sent abroad.

Most data belonging to Brazilian users is stored on servers located in Brazil or the European Union — regions with robust data protection legislation. Any significant change to our international data transfer policy will be communicated to users in advance.

13 Changes to This Policy

The 351bet may update this Privacy Policy periodically to reflect changes in our processes, the technologies we use, Brazilian legislation, or ANPD regulatory requirements.

For changes that significantly affect how we handle your data or that reduce your protections, we will notify users at least 7 days in advance via the registered email address and a prominent notice on the platform. For minor adjustments — such as language clarifications or changes with no practical impact on users — updates may take effect immediately.

The "last updated" date at the top of this page always reflects the most recent version in effect. We recommend reviewing this policy periodically, especially when you receive notifications about updates. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

14 Contact & Data Protection Officer (DPO)

For any questions related to how your personal data is handled by 351bet — whether it is an access request, correction, deletion, complaint, or simply a question about this policy — please use the channels below:

• Live chat — available 24 hours a day, seven days a week, directly on the platform. The fastest channel for urgent matters;
• DPO Email — suporte@351bet.best with the subject line "LGPD – Data Subject Request". This is the recommended channel for formal rights requests;
• Response time — up to 15 business days for formal rights-exercise requests, as required by the LGPD; faster responses for general inquiries via chat.

The Data Protection Officer (DPO) of 351bet is the designated point of contact for all privacy and data protection matters. They are responsible for ensuring the platform's data processing complies with the LGPD and for handling data subject requests and communications from the ANPD.

Version 2.4 — January 2026. Policy governed by Law No. 13.709/2018 (LGPD).