Bet24 Privacy Policy – Data Protection and LGPD

01Who We Are and What This Policy Covers

Bet24 is a Sports Betting and online casino platform available at bet24.world, operated exclusively for the Brazilian market. In this Privacy Policy, references to "bet24," "we," or "our platform" refer to the operator responsible for the platform and for the processing of Players' personal data.

This policy applies to everyone who interacts with bet24 in any way: website visitors, registered users, active players, and anyone who contacts our support team. It covers all platform products — Sports Betting, Live Casino, slots, jackpot, poker, and e-sports.

This is the current version of bet24's Privacy Policy, updated in June 2026. The version published on this page always supersedes previous versions. Material changes are communicated to Players at least 15 calendar days in advance via the registered email address.

02What Personal Data We Collect

Bet24 collects only the data necessary to operate the platform, meet legal obligations, and deliver the best possible experience to the Player. We do not collect unnecessary or excessive data. The categories of data collected are:

Sensitive data — such as racial origin, political opinion, religious belief, or health data — is never collected by bet24 under any circumstances. If, during a responsible gambling or self-exclusion request, a Player provides information related to mental health, that data is handled with enhanced confidentiality and used exclusively to protect the Player.

03How We Use Your Personal Data

Bet24 uses the data collected exclusively for the following purposes:

• Account creation and management: account registration, authentication, password recovery, identity verification (KYC), and Player profile maintenance.
• Financial transaction processing: deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED; withdrawal processing and financial reconciliation.
• Games and betting operations: Sports Betting records, casino rounds, poker hands, transaction history, and prize calculations.
• Fraud prevention and anti-money laundering: monitoring of suspicious transactions, detection of multiple accounts, and compliance with regulatory requirements under Brazilian law.
• Customer support: handling inquiries, resolving complaints, managing support tickets, and continuously improving service quality.
• Responsible gambling: identifying potentially problematic gambling patterns, enforcing limits set by the Player, and proactively communicating self-exclusion tools.
• Communications and marketing: sending promotions, platform updates, tournament notifications, and event alerts — only if the Player has not exercised their right to object to promotional communications.
• Platform improvement: browsing behavior analysis to identify improvements to the interface, mobile app performance, and the overall Player experience.
• Compliance with legal obligations: responses to orders from competent authorities, such as the Ministry of Finance, COAF, Federal Revenue Service, and the Judiciary, in accordance with applicable Brazilian law.

04Legal Basis for Data Processing

The LGPD requires that every personal data processing operation be grounded in a legal basis. At bet24, the legal bases applied are:

• Contract performance (art. 7, V): processing required to provide the services contracted by the Player upon account creation — betting, casino, poker, payments, and support.
• Compliance with a legal obligation (art. 7, II): processing required by Brazilian law, including anti-money laundering regulations, gambling regulations, and Banco Central do Brasil requirements related to Pix.
• Legitimate interest (art. 7º, IX): processing for platform security, fraud prevention, service improvement, and usage analysis, always respecting the Player's rights and legitimate expectations.
• Consent (art. 7, I): processing for sending promotional communications and marketing materials. The Player may withdraw consent at any time without affecting access to any other services.
• Protection of life (art. 7º, VII): in responsible gambling cases involving risk to the Player's health, we may process additional data for protective purposes under this legal basis.

Each processing purpose described in Section 3 has a corresponding legal basis. Players may contact our DPO (contato@bet24.world) to request detailed information about the legal basis applied to any specific processing activity.

05Data Sharing with Third Parties

Bet24 does not sell, rent, or trade Players' personal data to third parties. Data sharing occurs exclusively in the following situations and with the following categories of recipients:

• Payment partners: Pix, boleto bancário, credit and debit card processors (Visa and Mastercard), PicPay, and Mercado Pago, solely for the purpose of processing transactions requested by the Player.
• Game providers: casino, slots, poker, and e-sports technology providers (such as Microgaming, NetEnt, Pragmatic Play, and Evolution Gaming) that require session identifiers to operate their games. No complete personal identification data is shared with these providers.
• KYC and compliance services: companies specializing in identity verification and fraud prevention, which receive only the minimum data necessary for document validation and CPF verification.
• IT service providers: hosting services, CDN, security monitoring, and analytics tools contracted by bet24 for technical infrastructure, all under confidentiality agreements and required to process data exclusively on bet24's behalf.
• Competent authorities: when required by law, court order, or a Brazilian regulatory authority (Central Bank, Receita Federal, COAF, Ministry of Finance). bet24 reviews each request and shares only the minimum information required by the legal determination.

We do not transfer personal data outside Brazil, except when strictly necessary for the operation of game providers with international servers — always under contractual guarantees equivalent to those required by the LGPD.

06Cookies and Tracking Technologies

Bet24 uses cookies and similar technologies to ensure the platform operates correctly, enhance the Player experience, and — where consent has been given — personalize content and communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, user sessions, language preferences, and security. They cannot be disabled without impacting the site's functionality.
• Performance cookies: collect anonymous information about how visitors use the platform — which pages are most visited, load times, and technical errors. Used exclusively for service improvement.
• Functionality cookies: remember Player preferences, such as favorite sports, odds display format, and casino or poker room interface settings.
• Marketing cookies: used to personalize communications and, where applicable, display content relevant to the Player's profile. Activated only with explicit consent.

You can manage your cookie preferences at any time through the settings panel in your bet24 account. Modern browsers also offer cookie controls in their privacy settings. Disabling essential cookies may prevent access to certain platform features.

Bet24 does not use third-party cookies for external advertising tracking without the Player's explicit consent. Data collected via cookies is anonymized wherever possible before any internal analysis.

07Data Storage, Security, and Protection

Bet24 adopts robust technical and organizational measures to protect Players' personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place are:

• 256-bit SSL encryption across all communications between the Player's device and bet24's servers.
• Encryption at rest for sensitive data stored in our database, including KYC documents and financial information.
• Role-based access control (RBAC): only staff with a specific operational need have access to personal data, with a log kept of every access made.
• Two-factor authentication (2FA) available to all Players and mandatory for internal staff with access to systems that process personal data.
• Continuous monitoring of unauthorized access attempts, with automatic alerts and a security team available 24 hours a day.
• Encrypted backups performed regularly, stored in a location separate from the main servers.
• Penetration Testing conducted periodically by companies specialized in information security.

Bet24 platform security level:

08Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD — Law No. 13,709/2018) grants you, as the data subject, a set of rights that bet24 is committed to respecting and facilitating. Below is each right and how to exercise it:

To exercise any of the rights listed above, send an email to contato@bet24.world with the subject line corresponding to the right being requested. Include your full name, CPF, and the email address registered with bet24 to help us identify your account. bet24 does not charge any fee for the exercise of these rights.

If you feel your request was not handled satisfactorily, you have the right to file a complaint directly with the National Data Protection Authority (ANPD).

09Minors

Bet24 is an adults-only platform for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a CPF number, which is verified with the Brazilian Federal Revenue Service to confirm the user's age.

If we identify that data from a minor has been inadvertently collected, we will take the following immediate steps:

• Account closure and access blocking.
• Deletion of all collected personal data.
• Refund of any deposited amounts to the original payment source.
• Reporting to competent authorities where applicable.

If you are the guardian of a child or teenager and suspect they have accessed bet24, please contact us immediately at contato@bet24.world. We will treat this as a top priority.

10Data Retention and Deletion

Bet24 retains Players' personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. The general retention periods are:

• Active account data: retained for as long as the account remains active. After voluntary account closure, identification data is kept for 5 years to meet legal and tax obligations.
• Financial and transaction data: retained for a minimum of 5 years from the transaction date, in compliance with applicable Brazilian tax and anti-money laundering legislation.
• KYC documents: retained for 5 years after account closure or for the period required by the competent regulatory authority, whichever is longer.
• Support and communications data: retained for 2 years for quality assurance and resolution of any disputes.
• Cookies and session data: deleted according to each cookie type's settings (session, 30 days, 1 year).
• Marketing data (with consent): retained for as long as consent remains in effect. Deleted within 30 days of revocation.

Once the applicable retention period has passed, data is securely deleted or anonymized so that the individual can no longer be identified. bet24 conducts periodic reviews of stored data to ensure nothing is kept longer than necessary.

11Changes to This Policy and How to Contact Us

Bet24 may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or the services offered. Any material change will be communicated at least 15 calendar days in advance by email to the address registered on the Player's account and by notification within the platform.

Continued use of bet24 services after the notice period constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure before the new version takes effect.

The date of the last update is always shown at the top of this page. To access previous versions of this policy, contact our DPO at the email address below.

For complaints that remain unresolved after contacting bet24, Players may file a complaint with the National Data Protection Authority (ANPD) through the regulator's official website.