Privacy Policy of 176bet — LGPD & Data Protection

The 176bet is a sports betting and digital entertainment platform focused exclusively on the Brazilian market. We handle your personal data responsibly and in full compliance with Law No. 13,709/2018 — the Lei Geral de Proteção de Dados (LGPD) — and the guidelines of the Autoridade Nacional de Proteção de Dados (ANPD).

Privacy is not just a legal requirement for 176bet — is part of the transparency commitment the platform has upheld from the start. Every piece of data collected has a purpose, and you have the right to know what that purpose is, how long the data is retained, and how to request its deletion.

The 176bet collects only the data necessary to provide the contracted services and meet legal obligations. Below are the categories of data collected and their source:

The 176bet does not collect sensitive data such as racial origin, religious beliefs, health data, sexual orientation, or political opinions. Any identity document requested during the KYC process is used solely for identity verification and deleted in accordance with the applicable retention period.

The personal data collected by 176bet are used exclusively for the following purposes:

• Account creation and management: verify your identity, enable access to services, and keep your profile information up to date.
• Financial transaction processing: record deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, and process withdrawals via Pix to the registered key.
• Provision of contracted services: record sports bets, provide casino games, slots, and crash games, and maintain your account activity history.
• Fraud prevention and anti-money laundering: monitor suspicious behavior patterns in compliance with Law No. 9,613/1998 and the regulations of the Secretaria de Prêmios e Apostas (SPA/MF).
• Account communications: send transaction notifications, security alerts, and important platform updates.
• Marketing communications (with consent): send promotions, boosted odds, and updates about 176bet — only to users who have opted in to receive this type of communication. You can unsubscribe at any time from your account dashboard.
• Ongoing platform improvement: analyze usage patterns in an aggregated and anonymized form to improve features, fix technical issues, and develop new products.
• Compliance with legal and regulatory obligations: comply with requests from competent authorities as required by applicable Brazilian law.

The 176bet does not use your data for automated decisions that produce significant legal effects without human oversight, except in fraud detection cases, where human review is always available upon request to support.

The LGPD requires that every instance of personal data processing have a specific legal basis. 176bet bases the processing of your data on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): data required to create and maintain your account, process deposits and withdrawals, and record bets is processed on the basis of the contractual relationship established at the time of registration.
• Legal or regulatory obligation (art. 7, II): data required for identity verification (KYC), anti-money laundering, and compliance with SPA/MF regulations are processed on the basis of legal obligations.
• Legitimate interest (art. 7, IX): browsing and platform usage data are processed on the basis of 176bet's legitimate interest in maintaining system security, preventing fraud, and improving the user experience — always respecting the rights and reasonable expectations of data subjects.
• Consent (Art. 7, I): marketing communications and promotions are sent exclusively on the basis of explicit consent provided by the user, which may be withdrawn at any time.

The 176bet does not sell, rent, or otherwise commercialize users' personal data with third parties for advertising or commercial purposes. Data is shared only in the cases below, always under confidentiality and data protection agreements with the service providers involved:

• Payment processors: the financial data required to process deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago is shared exclusively with the financial intermediaries responsible for each transaction.
• Game providers: to provide slots, Live Casino, and Crash Games, 176bet shares session identifiers (not full personal data) with licensed providers such as Pragmatic Play, NetEnt, and Play'n GO.
• Identity verification services (KYC): documents submitted for verification are processed by specialized regulatory compliance providers, with access restricted to the minimum data necessary.
• IT Infrastructure: server providers, cybersecurity services, and uptime monitoring services that operate exclusively as processors under 176bet's instructions.
• Competent authorities: when required by law, court order, or SPA/MF regulation, data may be disclosed to the competent Brazilian authorities.

All third parties that receive data from 176bet are contractually required to handle data in compliance with the LGPD and to use it solely for the purposes for which it was shared. 176bet conducts periodic due diligence on service providers to ensure ongoing compliance.

The 176bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, observing the minimum retention periods required under Brazilian law:

• Registration and identity data: retained for as long as the account remains active and for up to 5 years after closure, as required by the Civil Code and anti-money laundering regulations.
• Financial transaction history: retained for 5 years after each transaction, in accordance with the tax and regulatory obligations applicable to betting operators in Brazil.
• Betting and gaming history: retained for 2 years from the date of each record for dispute resolution and internal audit purposes.
• Marketing communication data: retained for as long as consent remains active and deleted within 30 days of consent withdrawal.
• Access and security logs: retained for 6 months for fraud detection and security incident investigation purposes.

Once applicable retention periods expire, data is securely deleted or anonymized so it can no longer be linked to a specific individual. Data subjects may request early deletion, but such requests may not be fully honored when the data is required to meet a legal obligation.

The 176bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main measures in place include:

• AES-256 encryption for data stored at rest.
• TLS 1.3 protocol for all communication between your device and 176bet's servers.
• Financial data tokenization — full card numbers are never stored on the platform's servers.
• Role-based access control (RBAC) — only team members with an operational need can access user data.
• Continuous infrastructure monitoring with anomaly detection and automatic alerts for suspicious events.
• Penetration testing (pentest) carried out periodically by specialized cybersecurity firms.
• Multi-factor authentication is mandatory for all team members with access to critical systems.

In the event of a security incident that may affect your data, the 176bet will notify the ANPD within 2 business days of confirming an incident and will inform affected data subjects with details about what occurred, the data involved, and the measures taken.

The 176bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session authenticated, processing bets, and ensuring transaction security. These cannot be disabled without compromising the service.
• Performance cookies: collect information about how you use the platform (pages visited, session duration, errors encountered) in an anonymous and aggregated form to improve technical performance.
• Functional cookies: remember your platform preferences, such as selected language and notification settings, to personalize your experience.
• Analytical cookies (with consent): used to understand usage patterns and optimize the experience — activated only with your explicit consent via the cookie banner.

You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies may prevent critical features such as login and bet processing from working correctly. A 176bet does not use cookies for cross-platform third-party tracking without consent.

The 176bet is an entertainment platform exclusively for users aged 18 and over. The collection and processing of personal data from individuals under 18 is strictly prohibited on the platform. All users confirm they are at least 18 years of age at the time of registration.

As an additional protection measure, the 176bet requires date-of-birth verification during registration and may request a government-issued photo ID at any time to confirm the account holder's age. Accounts suspected of belonging to minors are immediately suspended pending completion of verification.

The LGPD grants you, as a data subject, a set of rights that 176bet is committed to respecting and facilitating. Here is how to exercise each of them:

Some service providers used by 176bet — such as game providers and cloud infrastructure — may be located outside Brazil. When this occurs, international data transfers follow the conditions set out in article 33 of the LGPD, primarily:

• Transfer to countries with an adequate level of data protection recognized by the ANPD.
• Specific contractual clauses that guarantee data subjects rights equivalent to those provided under Brazilian LGPD.
• Internationally recognized certifications or best-practice seals.

The 176bet maps all international data transfers and keeps contracts up to date with the providers involved. Information about specific transfers can be requested from the DPO at privacidade@176bet.best.

For any questions, rights requests, or complaints related to the processing of your personal data by 176bet, use the channels below:

• DPO (Data Protection Officer) email: privacidade@176bet.best — for requests regarding access, correction, portability, and deletion of data.
• General support: suporte@176bet.best or live chat available 24 hours on the platform.

If you believe that the processing of your data by the 176bet violates the LGPD and did not receive a satisfactory response through our internal channels, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd. 176bet cooperates fully with all ANPD investigations.

The 176bet may update this Privacy Policy to reflect changes in Brazilian legislation, data processing practices, or services offered. Material changes will be communicated via your registered email and/or a notification in your account dashboard at least 7 days before taking effect.

The date of the last update is always visible at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may request account closure before the effective date with no penalty.