Bet585 Privacy Policy – Data Protection and LGPD

2 Data We Collect

2.1 Data you provide directly

When you create an account on bet585 or use our services, we collect the following personal data:

• Identification: full name, CPF, date of birth, gender (optional);
• Contact: email address, mobile number;
• Address: ZIP code, street address, city, state — for compliance and verification purposes;
• Documents: ID card, driver's license or passport (digital copy), proof of address — requested during the identity verification (KYC) process;
• Payments: Pix key data, credit or debit card details (tokenized — we do not store the full card number), bank account for wire transfers;
• Communications: messages exchanged with bet585 support via live chat or email.

2.2 Automatically collected data

When you access the bet585 platform, we automatically collect certain technical data required for the service to function and remain secure:

• IP address and approximate location;
• Device type, operating system, and browser or app version;
• Pages visited, session duration, and navigation flow within the platform;
• History of bets, deposits and withdrawals made on the account;
• Cookie and similar technology data (detailed in Section 6).

2.3 Third-party data

In certain situations, bet585 may receive personal data from external sources for verification and compliance purposes — such as credit analysis bureaus, identity verification services, or competent authorities when required by law. In these cases, processing follows the same rules set out in this Policy.

3 Purposes of Processing

Bet585 processes your personal data exclusively for the following purposes:

• Account creation and management: registration, authentication, password recovery, and account-related communications;
• Service delivery: processing sports bets, casino games, balance management and transaction history;
• Payment processing: deposits via Pix, boleto bancário, credit/debit card, Mercado Pago, PicPay, and TED, plus withdrawals via Pix;
• Identity verification (KYC): confirmation that the user is who they claim to be, meets the minimum age requirement (18 years old), and is the legitimate holder of the payment methods used;
• Fraud prevention and anti-money laundering: transaction monitoring and detection of suspicious behavior as required by Brazilian law;
• User support: handling questions, complaints, and requests via chat and email in Portuguese;
• Responsible gambling: monitoring of gaming patterns to identify signs of problem behavior and to communicate available control tools;
• Promotional communications: sending offers, bonuses, and bet585 news to users who have opted in to receive this type of communication — always with an unsubscribe option;
• Platform improvement: usage analytics to improve features, fix issues, and personalize the experience;
• Compliance with legal obligations: compliance with the LGPD, tax legislation, anti-money laundering rules, and other applicable regulations.

4 Legal Basis for Processing (LGPD)

Each purpose for which bet585 processes personal data is supported by a legal basis provided under the LGPD. The main applicable bases are:

• Contract performance (Art. 7, V): processing required to fulfill Terms and Conditions accepted by the user — covers account management, betting, payments, and support;
• Compliance with a legal obligation (Art. 7, II): identity verification, anti-money laundering, tax records and responses to regulatory requests — obligations required by law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, usage analysis for product improvement, and identification of problematic gambling patterns to protect the user;
• Consent (Art. 7, I): sending promotional communications and using non-essential cookies — you may withdraw this consent at any time without affecting essential services.

5 Data Sharing

5.1 Who we share data with

Bet585 may share your personal data with the following categories of recipients, always limited to what is strictly necessary for each purpose:

• Payment processors: to process deposits and withdrawals via Pix, boleto, card, Mercado Pago, PicPay, and TED — only the information necessary for each transaction is shared;
• Identity verification providers: for document validation during the KYC process — data handled under contractual confidentiality;
• Technology providers: infrastructure, hosting, security analysis, and technical support services operating on behalf of bet585 under a confidentiality agreement;
• Casino game providers: minimum data required for the operation of live tables and slots games provided by third parties;
• Public authorities: when required by law, court order, or regulation — such as requests from the Federal Revenue Service, the Financial Activities Control Council (COAF), or the National Data Protection Authority (ANPD).

5.2 What we do not do

Bet585 never sells your personal data to third parties. We do not share data with external marketing companies for new customer prospecting without your express authorization. We do not provide data to partners for their own independent purposes without a specific legal basis.

All data sharing with service providers is governed by contractual clauses requiring the recipient to process data solely for the specific contracted purpose, maintain confidentiality, and implement appropriate security measures.

6 Cookies and Tracking Technologies

6.1 What are cookies

Cookies are small text files stored in your browser or device when you access the bet585 platform. They allow the platform to recognize your device, keep your session active, remember your preferences, and analyze how you use the service so we can continuously improve it.

6.2 Types of cookies we use

• Essential cookies: required for the platform's core functionality — authentication, session security, and language preferences. These cannot be disabled without affecting your ability to use the service;
• Performance cookies: collect anonymous data on how users navigate the platform in order to identify errors and improve the experience. They do not identify you individually;
• Functionality cookies: remember preferences such as odds display type, favorite markets, and interface settings to personalize your experience at bet585;
• Analytical cookies: measure page and feature performance to guide product decisions. We use aggregated, non-individualized data.

6.3 How to manage cookies

You can adjust your non-essential cookie preferences in your bet585 account settings or in your browser settings. Disabling essential cookies may prevent parts of the platform from functioning correctly, including login and bet processing.

7 Data Security

Bet585 adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key measures in place include:

• SSL/TLS Encryption: all communications between your device and the bet585 platform are encrypted, including pages, bets and financial transactions;
• Payment data tokenization: credit and debit card data is tokenized — we never store the full card number on our servers;
• Multi-factor authentication: internal access controls with multi-factor authentication for systems that contain user data;
• Ongoing monitoring: automated systems for anomaly detection and unauthorized access attempts operate around the clock;
• Incident Response: documented procedures for identifying, containing, and reporting data breaches — including notification to the ANPD and affected data subjects within the timeframes required by the LGPD when applicable;
• Restricted internal access: only bet585 employees with an operational need are granted access to users' personal data, and all such access is logged and audited.

8 Data Retention and Deletion

Bet585 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods. The main retention policies are:

• Active account data: retained for as long as the account remains active or a contractual relationship with bet585 exists;
• Financial and transaction data: retained for a minimum of five years after account closure, as required by Brazilian tax and anti-money laundering legislation;
• Support communication records: retained for two years for dispute resolution and service improvement purposes;
• Identity verification data (KYC): retained for the period required by applicable regulations, generally five years after the end of the relationship;
• Non-essential cookie data: up to 12 months or until you withdraw your consent, whichever comes first.

Once the applicable retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymized data may be retained for statistical purposes and product improvement.

If you request account closure, any data not subject to a mandatory legal retention period will be deleted within 30 business days of the closure being confirmed.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by bet585, the following rights, which may be exercised at any time:

How to exercise your rights

To exercise any of the rights above, contact bet585 by email at suporte@bet585.best with the subject line "LGPD Rights – [Request Type]". We will respond within the timeframe required by the LGPD, which is up to 15 days after the requester's identity has been confirmed.

In some cases, bet585 may need to verify your identity before processing a request, to ensure we are providing data or making changes for the correct data subject — and not for unauthorized third parties. This procedure is in place to protect you.

10 Users Under 18

The bet585 platform is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your minor child has created an account on bet585, please contact us immediately at suporte@bet585.best so we can take appropriate action — including closing the account and deleting the data.

Bet585 performs age verification during registration and throughout the KYC process. Any account identified as belonging to a person under 18 will be closed immediately, any real-money balance deposited will be returned to the verified payment method holder, and the matter will be handled in accordance with all applicable legal requirements.

Our marketing communications are never directed at anyone under 18. We follow responsible gambling guidelines that include strict restrictions on advertising aimed at vulnerable audiences.

11 International Data Transfers

Some service providers used by bet585 — such as cloud infrastructure providers and live casino gaming platforms — may be located outside Brazil. When this occurs, international data transfers are carried out in compliance with Article 33 of the LGPD, which permits such transfers under the following conditions:

• The destination country provides an adequate level of data protection, as assessed by the ANPD;
• Adequate contractual safeguards are in place, such as standard data protection clauses, which require the recipient to adopt protections equivalent to those required by the LGPD;
• The transfer is necessary to perform the contract with the data subject — such as in the case of live games provided by international suppliers.

Bet585 regularly reviews the data protection practices of its international service providers and updates contracts as needed to maintain compliance with the LGPD and ANPD guidelines.

12 Changes to this Privacy Policy

Bet585 may update this Privacy Policy periodically to reflect changes in our practices, the services we offer, or applicable law. When this happens, the "last updated" date at the top of this page will be revised.

For material changes that significantly affect your rights or the way we process your data, we will send a notification to the email address registered on your account at least 15 days in advance. For minor changes or those required by law with immediate effect, updating this page is sufficient.

We recommend reviewing this Policy periodically. Continued use of the bet585 platform after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account before the effective date.

13 Data Protection Officer (DPO)

In accordance with Article 41 of the LGPD, bet585 has appointed a Data Protection Officer (DPO) responsible for:

• Receive complaints and communications from data subjects and take appropriate action;
• Receive communications from the National Data Protection Authority (ANPD);
• Guide bet585 staff on the data protection practices to be followed;
• Monitor compliance with the LGPD and this Privacy Policy.

To contact bet585's DPO regarding any data protection or privacy matter:

• Email: suporte@bet585.best (subject line: "Privacy – LGPD")
• Live chat: available directly on the bet585 platform, 24 hours a day