Privacy Policy of 525bet – Your Data, Protected

This Privacy Policy describes how 525bet collects, stores, uses, shares, and protects the personal data of users who access and use the 525bet.best platform — including Sports Betting, online casino, Live Casino, crash games, jackpots, and all other available services.

A 525bet acts as the controller of personal data collected during platform use, pursuant to art. 5, item VI, of the General Data Protection Law (Law No. 13,709/2018 — LGPD). This means we are responsible for decisions regarding the processing of your data and for the mechanisms that ensure its protection.

By creating an account or using any service provided by 525bet, you confirm that you have read and understood this Privacy Policy. This policy is an integral part of the Terms and Conditions of the platform. If you disagree with any part of this policy, you should stop using the services and request deletion of your account.

A 525bet collects personal data in different ways throughout your relationship with the platform. The table below summarizes the data categories, purposes, and corresponding legal basis:

In addition to data you provide directly during registration and platform use, the 525bet may collect data from legitimate external sources — such as credit bureaus and anti-money laundering watchlists — for identity verification and regulatory compliance purposes. This data is handled with the same level of protection as all other data.

The personal data collected by 525bet is used solely for the purposes described below. The company does not use your data for any purpose incompatible with those listed here without obtaining fresh consent or an appropriate new legal basis.

• Delivery of contracted services: Account creation and management, sports betting processing, access to the online and Live Casino, crash games and jackpots, deposit processing via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfer, withdrawal processing.
• Identity verification (KYC): Confirm that you are who you claim to be, that you are 18 years of age or older, and that the data provided corresponds to a real individual. This verification is required under anti-money laundering protocols.
• Fraud and money laundering prevention: Monitoring of transactions and behavioral patterns to identify suspicious activity, duplicate accounts, bonus abuse, or any activity that constitutes fraud or illegal conduct.
• Customer support: Answer your questions, resolve account issues, and process refund or dispute requests.
• Account communications: Send transaction confirmations, security alerts, updates about promotions you have opted into, and relevant notifications about platform changes.
• Responsible gambling: Monitor behavioral patterns to identify potential signs of problem gambling and offer proactive support, as described on our Responsible Gambling.
• Platform improvement: Aggregated and anonymized analysis of how users interact with the platform to identify usability improvements, technical performance enhancements, and content curation opportunities.
• Compliance with legal obligations: Comply with orders from competent judicial or regulatory authorities, and maintain records required under Brazilian anti-money laundering legislation and the Marco Civil da Internet.

A 525bet does not use your personal data to build behavioral profiles for the purpose of selling advertising to third parties. Marketing communications sent by the platform relate exclusively to 525bet and you can unsubscribe at any time through your account settings or by email.

A 525bet does not sell or trade your personal data. Data is shared with third parties only in the situations listed below, always with appropriate safeguards in place:

• Payment processors: To process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED transfer, we share the necessary financial data with the payment institutions and gateways involved in each transaction. These partners are bound by contractual data protection obligations.
• Game providers: To operate slots, live casino, crash games, and jackpots from partner providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, and others), minimal technical data such as session identifiers and relevant balance are shared to enable gameplay. These companies do not receive your full identification data.
• Identity verification services: To meet KYC and anti-money laundering requirements, we may consult identity verification bureaus and lists of politically exposed or sanctioned persons.
• Public authorities: Under a court order, request from a competent regulatory authority (such as COAF or ANPD), or in compliance with a legal obligation, we may share data with Brazilian public authorities.
• IT infrastructure services: Cloud hosting providers, cybersecurity services, and technical analytics tools that support the secure operation of the platform, always under contracts that include data protection clauses compatible with the LGPD.

A 525bet adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or improper destruction. The main security measures include:

• 256-bit SSL encryption on all communications between your device and the platform.
• Passwords are stored using cryptographic hashing — 525bet has no access to your password in plain text.
• Two-factor authentication (2FA) available as an extra layer of protection for your account.
• Continuous monitoring of suspicious access attempts and intrusion attempts.
• Periodic security testing and vulnerability audits carried out by external specialists.
• Internal access control based on the principle of least privilege — only team members who require data to perform their role have access to it.
• Network and data environment segmentation across different sensitivity levels.

Despite all measures in place, no security system is entirely foolproof. In the event of a security incident involving your personal data that may pose a risk to you, 525bet will report the matter to the Autoridade Nacional de Proteção de Dados (ANPD) and to you within the timeframes required by the LGPD.

You also play an important role in keeping your account secure. We recommend using a strong, unique password for your 525bet, not to share your login credentials with anyone, and to enable two-factor authentication in your account settings.

A 525bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site usage. A cookie is a small text file stored on your device when you access the platform.

Types of cookies used by 525bet:

• Essential cookies: Required for basic platform functionality — authentication, session management, and security. These cannot be disabled without affecting the site's operation.
• Performance cookies: They collect anonymous information about how users interact with the platform — most visited pages, load times, technical errors. Data is aggregated and does not identify individual users.
• Functional cookies: They remember your preferences on the platform — language, display settings, favorite game — to personalize your experience on future visits.
• Communication cookies: Used to track whether you opened emails sent by 525bet, so we can improve the relevance of our communications. You can unsubscribe from emails at any time.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies may affect some platform features, but will not prevent basic use of 525bet.

A 525bet retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law.

• Active account: While your account is active, we retain all data necessary to provide the contracted services and fulfill our legal obligations.
• After account closure: Identification data, financial transaction history, and betting records are retained for at least 5 years after account closure, as required by Brazilian anti-money laundering legislation (Law No. 9,613/1998) and applicable tax obligations.
• Access logs: In accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), connection logs are retained for at least 1 year.
• Support communications: Support history is retained for 2 years after the ticket is closed, for quality assurance and dispute resolution purposes.
• Responsible gambling data: Self-exclusion records and configured limits are retained for at least 6 months after account closure, to prevent improper re-registration during the self-exclusion period.

Once the applicable retention periods have elapsed, data is securely deleted or anonymized so it can no longer be linked back to you as the data subject.

The Lei Geral de Proteção de Dados grants you, as the data subject whose personal data is processed by 525bet, a set of rights you may exercise at any time. Here is what you can request:

To exercise any of these rights, please contact our Data Protection Officer by email at privacidade@525bet.best with the subject line "LGPD — [Type of Request]". The 525bet will respond to your request within 15 calendar days. For more complex cases requiring additional review, we will inform you of the new estimated timeline.

The services of 525bet are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from minors and does not permit minors to use its services.

During registration, the user must confirm they are 18 years of age or older. The 525bet performs age verification during the KYC process and may request a photo ID for confirmation. Accounts created by or on behalf of minors are terminated immediately upon identification, with all accumulated balances cancelled.

If you believe a minor has misused the platform or provided personal data to 525bet, please contact our support team immediately at contato@525bet.best. We will take the necessary steps to delete your data and close the account without delay.

Some of the technology infrastructure partners used by 525bet — such as cloud hosting providers or security tools — may be located outside Brazil. When this occurs, the transfer of your data to those countries is carried out in accordance with the LGPD provisions on international data transfers.

A 525bet guarantees that international data transfers occur only to countries or organizations that provide an adequate level of personal data protection, as assessed by the ANPD, or through specific contractual mechanisms that ensure protection equivalent to that of the LGPD.

Under no circumstances will your identification, financial, or platform activity data be transferred internationally for advertising purposes or commercially shared with third parties without your explicit consent.

A 525bet may update this Privacy Policy periodically to reflect changes in Brazilian legislation, industry practices, new platform features, or ANPD decisions that affect data processing. The "last updated" date at the top of this document indicates when the current version was published.

Material changes — those that significantly affect how we process your data or the rights you hold — will be communicated by email at least 7 days before taking effect. For minor changes, such as grammatical corrections or text reorganizations with no impact on content, we will not send prior notice.

Continued use of the platform after the new version's effective date constitutes acceptance of the changes. If you disagree with the changes, you must close your account before the new version takes effect and request deletion of your data, subject to applicable legal retention periods.

A 525bet has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for handling communications from data subjects and the National Data Protection Authority.

To exercise your rights as a data subject, clarify questions about this Privacy Policy, or report any concern related to the processing of your personal data, please contact our DPO through the channels below:

• DPO Email: privacidade@525bet.best — Subject: "LGPD — [Describe your request]"
• General support email: contato@525bet.best — For general privacy questions that do not require a formal LGPD request.
• Live chat: Available directly on the platform, 24 hours a day, in Brazilian Portuguese.

Formal requests to exercise rights under the LGPD are responded to within 15 calendar days from the date of receipt. If additional time is needed, the DPO will inform you of the new estimated deadline within the initial response period.