618bet Privacy Policy – How We Protect Your Data

For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), the controller responsible for processing your personal data is the platform 618bet, operator of the site 618bet.best.

A 618bet is an online entertainment platform aimed at the Brazilian market, offering online casino, Sports Betting, Live Casino, progressive jackpots, slots, and crash games. All services are operated exclusively in Brazilian Reais (BRL) with support in Brazilian Portuguese.

Any questions regarding the processing of your data can be sent directly to our Data Protection Officer (DPO) through the contact channel listed in Section 10 of this Policy.

A 618bet collects only the data strictly necessary to provide its services securely and in compliance with Brazilian law. Data is collected in the following situations:

Data provided directly by you:

• Full name
• Email address
• Date of birth
• CPF (Brazilian Individual Taxpayer Registry)
• Full residential address (street, ZIP code, city, state)
• Mobile phone number
• Identity documents (RG, driver's license, or passport) provided during the KYC verification process
• Banking details and payment method information (Pix key, card details, bank account) required for deposits and withdrawals

Data collected automatically during platform use:

• IP address and approximate geolocation data
• Device type, operating system, and browser or app version
• Browsing history within the platform (pages visited, games accessed, session duration)
• Betting history and financial transaction history on the platform
• Cookie and similar technology data (detailed in section 6)
• Access logs with the date, time, and duration of each session

Data received from third parties:

• Financial transaction confirmations received from payment processors such as Pix, PicPay, Mercado Pago, and banking institutions (Nubank, Itaú, Bradesco, Banco do Brasil, among others)
• Identity verification results provided by KYC partner service providers
• Fraud prevention information provided by specialized security services

The table below summarizes the main data collected, the legal basis for processing, and the corresponding purpose:

A 618bet uses collected data solely for the purposes described in this Policy and under the applicable legal bases. Under no circumstances will your data be used for purposes incompatible with the original reason for collection without your express consent.

The main purposes of use are:

• Account operation: Creation, maintenance, and closure of your 618bet account, access authentication, and preference management.
• Transaction processing: Processing deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, and handling withdrawals to accounts held in the user's name.
• Identity verification (KYC): User identity verification to prevent fraud and money laundering, and to ensure that only users aged 18 and over access the platform.
• Customer support: Live chat and email support, with interaction history maintained for service continuity and dispute resolution.
• Responsible gambling: Usage pattern monitoring to identify possible problem gambling behaviors and trigger protective tools when necessary.
• Security and fraud prevention: Detection of unauthorized access, multiple accounts, bonus abuse, and other irregular activity.
• Platform improvement: Analysis of aggregated and anonymized usage data to understand how users interact with the platform and identify areas for improvement.
• Communications: Sending transaction confirmations, security alerts, account updates, and, with your consent, promotional communications about 618bet offers.
• Compliance with legal obligations: Maintenance of records required by Brazilian legislation applicable to the online entertainment sector.

You can manage your communication preferences at any time in your account settings or by contacting 618bet via live chat.

A 618bet does not sell, rent, trade, or share your personal data with third parties for marketing or advertising purposes on behalf of other companies. Full stop.

Your data may be shared only with the following categories of partners, strictly to the extent necessary to operate our services:

• Payment processors: Financial institutions and payment platforms (Pix operators, Mercado Pago, PicPay, card networks, and banks such as Itaú, Bradesco, Nubank, and Banco do Brasil) to securely process deposits and withdrawals.
• Game providers: Partner casino software companies (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and others) receive only the minimum data necessary to authenticate your gaming session. These providers are contractually prohibited from using your data for any other purpose.
• Identity verification (KYC) services: Specialized partners for document validation and identity verification to meet legal obligations for fraud prevention and anti-money laundering compliance.
• Security and anti-fraud providers: Systems that monitor transactions and access to protect your account and the integrity of the platform.
• Cloud and infrastructure services: Hosting and cloud storage providers that process data solely under our instructions and in compliance with the LGPD.
• Public authorities: When legally required, data may be shared with Brazilian regulatory bodies, law enforcement, or judicial authorities pursuant to a court order or express legal obligation.

All vendors and partners with access to personal data belonging to users of 618bet are subject to data processing agreements compatible with the LGPD and are required to maintain the confidentiality and security of your information.

Protecting your data is a core technical and operational priority for 618bet. We implement multiple layers of security to ensure your personal and financial information is protected against unauthorized access, loss, alteration, or improper disclosure.

The main security measures adopted by 618bet include:

• 256-bit SSL/TLS encryption: All communication between your device (mobile or desktop) and 618bet's servers is encrypted to the same standard used by Brazil's largest banks.
• Encryption at rest: Sensitive data stored on 618bet's servers – including passwords and financial information – is encrypted using modern algorithms.
• Two-factor authentication (2FA): Available to all users as an additional layer of account access protection.
• 24-hour monitoring: Automated systems and a dedicated team monitor suspicious access attempts, unusual transactions, and irregular behavior in real time.
• Data segregation: Financial data and usage data are stored in separate systems with strict access controls.
• Role-based access control: Only staff members with a legitimate need are granted access to specific personal data, and that access is monitored and audited.
• Regular security testing: 618bet's infrastructure undergoes regular penetration testing and security audits conducted by independent specialists.

Despite all measures in place, no system is 100% breach-proof. In the event of a security incident that could compromise your data, the 618bet will take the measures set out under the LGPD, including notifying the National Data Protection Authority (ANPD) and informing affected individuals where applicable.

You also share responsibility for your account's security: keep your password confidential, never share your credentials with third parties, and always log out when accessing the platform on shared devices.

A 618bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and, with your consent, display relevant content.

Types of cookies used:

• Strictly necessary cookies: Essential for the platform to function. Without them, core features such as login, session management, and transaction processing will not work. They cannot be disabled.
• Performance and analytics cookies: They collect anonymous information about how users interact with the platform (most visited pages, average session time, errors encountered). We use this information to continuously improve 618bet.
• Functionality cookies: They remember your preferences (language, preferred payment method, responsible gambling settings) to personalize your experience on future visits.
• Marketing cookies: Used to display personalized communications about 618bet promotions. They are only activated with your explicit consent and can be disabled at any time.

You can manage your cookie preferences through the settings panel available on the platform or via your browser settings. Please note that disabling strictly necessary cookies may affect how the platform functions.

A 618bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal and regulatory obligations.

The general retention criteria adopted by the 618bet are:

• Active account data: Retained for as long as your account remains active. You may request account closure and data deletion at any time, subject to applicable legal requirements.
• Financial and transaction data: Retained for a minimum of 5 (five) years after account closure, as required by Brazilian tax and anti-money laundering legislation.
• KYC documents: Retained for a minimum of 5 (five) years after the last use or account closure, in accordance with applicable regulatory obligations.
• Betting records: Retained for a minimum of 3 (three) years for audit and dispute resolution purposes.
• Security logs: Retained for up to 12 (twelve) months for security analysis and incident investigation purposes.
• Marketing data (with consent): Retained until consent is withdrawn by the user or after 2 (two) years of inactivity, whichever comes first.

Once the applicable retention period has ended, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymized data may be retained indefinitely for statistical purposes.

The General Data Protection Law (LGPD – Law No. 13.709/2018) grants you, as the data subject, a set of rights regarding your personal information processed by 618bet. We respect these rights and ensure clear, accessible ways for you to exercise them.

You have the right to:

• Confirmation and access: Confirm whether we process your data and obtain a copy of the information we hold about you.
• Correction: Request the correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion: Request that unnecessary, excessive, or non-compliant data be anonymized, blocked, or deleted.
• Portability: Receive your data in a structured, commonly used format for transfer to another service provider, where technically feasible.
• Deletion: Request the deletion of data processed on the basis of your consent, except where retention is required by law.
• Data sharing notice: Know which public and private entities your data has been shared with.
• Consent information: To be informed about the option to withhold consent and the consequences of doing so.
• Consent withdrawal: Withdraw consent given for processing based on this legal ground, at any time and without penalty.
• Objection: Object to processing carried out on the basis of legitimate interest when it does not meet your legitimate expectations.

To exercise any of these rights, contact us via the live chat available on the platform after logging in, or by email at suporte@618bet.best. We will respond within 15 (fifteen) calendar days from receipt of your request.

The services provided by 618bet are intended exclusively for users aged 18 (eighteen) and over. The platform does not knowingly collect personal data from anyone under 18.

During registration, the user declares they meet the minimum age requirement. Additionally, 618bet applies the following controls to prevent access by minors:

• Date of birth is required at registration, with automatic blocking for users under 18;
• Identity verification (KYC) process with photo ID review required before the first withdrawal;
• Monitoring usage patterns that may indicate access by minors.

Should the 618bet identifies that data has been collected from a user under 18, the account will be immediately suspended, the data will be deleted, and any deposits will be refunded. If you are the guardian of a minor and believe they may have created an account on 618bet, please contact us immediately at suporte@618bet.best.

A 618bet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is responsible for overseeing compliance with this Policy and serving as the communication channel between the 618bet, data subjects, and the National Data Protection Authority (ANPD).

To reach the privacy channel of 618bet:

• Live chat: Available on the platform 24 hours a day, 7 days a week, in Brazilian Portuguese. Log in and select the topic "Privacy & Data".
• Email: suporte@618bet.best – For requests related to rights under the LGPD, please use the subject line "LGPD – [your request]" to help us process your inquiry faster.

The standard response time for requests related to personal data is up to 15 (fifteen) calendar days from receipt. In cases of high complexity, this period may be extended by an equal amount of time, with prior notice to the data subject.

If you believe your rights as a data subject have not been properly addressed by 618bet, you may file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.