988bet Privacy Policy — How We Protect Your Data

1. Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of personal data collected through the 988bet platform is the company operating the 988bet brand, which is responsible for determining the purposes and means of processing personal data of users registered in Brazil.

For questions related to personal data and privacy, reach us at suporte@988bet.express. Our team responds in Portuguese and is available 24 hours a day, 7 days a week, including weekends and national holidays.

This Privacy Policy applies to all users who access the 988bet platform at 988bet.express, through the Android or iOS mobile app, or through any other official 988bet channel.

2. Data We Collect

988bet collects personal data at different points during your interaction with the platform. Below are the categories of data collected and the contexts in which they arise:

2.1 Registration Data

When creating a 988bet account, you provide:

• Full name as it appears on your official ID document.
• CPF (Cadastro de Pessoas Físicas) issued by the Receita Federal do Brasil.
• Date of birth.
• Full residential address (street, number, unit, neighborhood, city, state, and ZIP code).
• Mobile phone number with area code.
• Valid email address.

2.2 Identity Verification Data

For withdrawal processing and compliance with anti-money laundering regulatory requirements, 988bet may request:

• Copy of a government-issued photo ID (RG, CNH, or passport).
• Proof of address issued within the last 3 months.
• Selfie with ID document for liveness verification.
• Proof of ownership of the payment method used.

2.3 Payment Data

To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, or TED bank transfer (Nubank, Itaú, Bradesco, Banco do Brasil), we collect:

• Pix key (CPF, email, phone number, or random key).
• Partial card details (masked number, expiry date, and cardholder name) — never the full CVV code.
• Banking details for TED transfers (bank, branch, and account number).
• Transaction history within the platform.

2.4 Usage and Browsing Data

Automatically during your use of the platform, we collect:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Betting history, games accessed, session duration, and usage patterns.
• Access logs with date, time, and actions performed on the platform.
• Data from cookies and similar tracking technologies (detailed in section 8).

3. How We Use Your Data

All data collected by 988bet has a specific and legitimate purpose. We use your data to:

• Account creation and management: identify and authenticate the user, and manage account balance, betting history, and platform preferences.
• Payment processing: process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer, including anti-fraud verification.
• Compliance with legal obligations: age verification (only users aged 18 and over may use the platform), anti-money laundering (AML) compliance, adherence to betting regulations, and communication with competent authorities when required by law.
• Service delivery: personalize your platform experience, display relevant odds for competitions such as Brasileirão Série A, Copa do Brasil, and Libertadores, recommend casino games based on your history, and send live betting notifications.
• Security and fraud prevention: detect suspicious behavior, protect the integrity of bets and games, and prevent misuse of the platform.
• Platform improvement: analyze aggregated usage data to improve features, fix technical issues, and develop new functionality.
• Marketing communications: send emails, push notifications, and SMS messages about 988bet promotions, bonuses, and updates — only to users who have consented to this type of communication, with an opt-out option in every message.
• Responsible gambling: monitor betting patterns that may indicate compulsive behavior and trigger protective measures in line with our responsible gambling policy.

4. Legal Bases for Processing (LGPD)

988bet always processes your personal data on the basis of one of the legal grounds provided under the LGPD. The table below summarizes the main processing activities and their corresponding legal bases:

When processing is based on consent — such as for marketing communications — you may withdraw that consent at any time without affecting your access to the platform's other services. To withdraw, update your notification settings in your account or email suporte@988bet.express with the subject line "Withdraw Marketing Consent".

5. Sharing Data with Third Parties

988bet does not sell personal data to third parties. Data is only shared in the situations listed below, always with appropriate contractual protections in place:

5.1 Payment Partners

To process financial transactions, we share the necessary data with the payment processors that operate Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data strictly required to complete the transaction and operate under data processing agreements that prohibit using that information for any other purpose.

5.2 Game Providers

To operate Live Casino games (Evolution Gaming, Pragmatic Play Live) and other digital games, we share an anonymous user identifier with our providers. These partners do not receive directly identifying information such as your CPF or banking details.

5.3 IT Service Providers

We use technology infrastructure partners — cloud hosting, cybersecurity, data analytics — who may access stored data for system maintenance purposes. All of them operate under contracts that restrict data use to the specified purposes and require security standards equivalent to those of 988bet.

5.4 Legal and Regulatory Authorities

988bet may share data with government, regulatory, or judicial authorities when required by law — for example, in money laundering investigations, court orders, or requests from betting industry regulators. In such cases, we notify the user whenever legally permitted to do so.

6. Data Storage & Security

The security of 988bet user data is treated as an operational priority, not a formality. The main technical and organizational measures currently in place are:

• SSL/TLS encryption: all communication between your device — mobile, desktop, or tablet — and 988bet's servers is encrypted using the latest SSL/TLS protocol. This ensures that data transmitted such as your CPF, password, and payment information cannot be intercepted in transit.
• Encryption of data at rest: sensitive data stored on 988bet servers — including identity verification documents and banking information — is encrypted using AES-256 algorithms.
• Access control: only employees and systems with a legitimate need can view users' personal data, always with multi-factor authentication and audit logs in place.
• Continuous monitoring: automated systems monitor unauthorized access attempts, suspicious activity, and security vulnerabilities around the clock.
• Security testing: the platform undergoes regular penetration tests (pen tests) conducted by independent security teams to identify and fix vulnerabilities before they can be exploited.
• Secure backup: data backups are performed regularly and stored in locations physically separate from the primary servers, also with encryption.

In the event of a security incident involving users' personal data, 988bet will notify the National Data Protection Authority (ANPD) and the affected users within the timeframe established by the LGPD, with information about the nature of the incident, the data involved, and the steps taken to mitigate any harm.

7. Your Rights as a Data Subject

The LGPD grants data subjects a set of rights that 988bet is committed to respecting and upholding. See below what those rights are and how to exercise them:

8. Cookies and Tracking Technologies

The 988bet platform uses cookies and similar technologies to ensure services function properly, personalize the user experience, and analyze platform usage. See the types of cookies used below:

• Essential cookies: required for the platform's core functionality — session authentication, balance display, and live table operation. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, load times, errors encountered — to improve performance. They do not identify users individually.
• Functional cookies: remember your preferences — language, betting settings, last game category visited — for a smoother experience on your next visit.
• Analytical cookies: we use analytics tools to understand aggregated platform usage patterns. Data is processed in anonymized form and is not shared with third parties for advertising purposes.

You can manage your cookie preferences in your browser settings or through the privacy panel available on the 988bet platform. Disabling essential cookies may affect access to certain services, including login and access to live tables.

9. Protection of Minors

988bet's services are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors and does not allow minors to create accounts or place bets.

During registration, we require a date of birth and perform an age verification check before processing the first withdrawal. If 988bet determines that an account was created by a minor — through self-declaration, a report, or the verification process — the account will be immediately closed, the balance frozen, and the collected data deleted, except for records needed to document the incident.

Legal guardians who believe a minor has created an account on 988bet should contact us immediately at suporte@988bet.express so we can act without delay.

10. Data Retention and Deletion

988bet retains your personal data for as long as necessary for the purposes described in this policy or as required by legal obligations. The main retention periods are:

• Registration and active account data: retained for the full duration of the account and for up to 5 years after closure, for audit purposes and compliance with legal obligations.
• Financial transaction records: retained for a minimum of 5 years, as required by tax legislation and anti-money laundering laws (Law No. 9,613/1998).
• Identity verification documents (KYC): retained for up to 5 years after account closure, or as required by applicable betting regulations.
• Access and security logs: retained for 6 months to 1 year for security and fraud investigation purposes.
• Marketing data: retained until the user withdraws consent or closes their account, whichever comes first.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the individual can no longer be identified.

11. International Data Transfers

Some of the technology service providers and game suppliers used by 988bet — such as the live casino studios of Evolution Gaming and Pragmatic Play Live — may process data on servers located outside Brazil.

When international transfers of personal data occur, 988bet ensures that:

• The destination country offers an adequate level of data protection recognized by the ANPD, or
• Specific contractual data protection clauses exist between 988bet and the recipient, equivalent to LGPD requirements, or
• The data subject has given specific consent to the international transfer after being informed of the risks involved.

International data transfers never expand the purposes for which data was originally collected. International partners are contractually prohibited from using 988bet user data for any purpose other than providing the contracted service.

12. Changes to this Privacy Policy

988bet may update this Privacy Policy periodically to reflect changes in data processing practices, in response to legal or regulatory updates, or to incorporate improvements to privacy processes.

Significant changes will be communicated by email to registered users at least 7 days before the effective date. Continued use of the platform after that date constitutes acceptance of the updated policy.

The most current version of this policy is always available on this page, with the date of the last update shown at the top. We recommend reviewing this policy periodically to stay informed about how your data is handled.

13. Contact, DPO & Privacy Channel

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact 988bet through the channels below:

• General support email: suporte@988bet.express — for general privacy inquiries, data correction requests, and marketing communication opt-outs.
• Email for LGPD requests: suporte@988bet.express with the subject line "LGPD Rights — [request type]" — for the formal exercise of rights to access, portability, deletion, and objection.
• Live chat: available 24 hours a day on the 988bet platform for quick privacy-related questions.

Our privacy team responds in Portuguese and is available to help you understand and exercise your rights. The response time for formal LGPD requests is up to 15 business days from receipt of the complete request.

If you are not satisfied with the response you receive from 988bet, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided under Article 55-J of the LGPD.