218bet Privacy Policy – How We Protect Your Personal Data

The 218bet is the controller of personal data collected through this platform. For any questions related to privacy, data protection, or the exercise of your rights as a data subject, you can reach our team through the following channels:

• Live chat: available directly on the platform, 24 hours a day, 7 days a week.
• Email: contato@218bet.click — with a response within 5 business days for privacy matters.

Our Data Protection Officer (DPO) is available to receive formal requests related to the LGPD at the email address above. Please include the subject line "LGPD – Data Subject Rights" to ensure your request is prioritized.

The 218bet only collects the data necessary to deliver our services safely and to a high standard. The data we collect falls into the following categories:

Registration and identification data:

• Full name, date of birth, and CPF.
• Email address and mobile phone number.
• Full residential address including ZIP code.
• Identification documents (RG, CNH, or passport) — required during the KYC verification process before the first withdrawal.
• Selfie with ID document, when requested for additional identity confirmation.

Financial data:

• Pix key, bank account details, or digital wallet information for processing deposits and withdrawals.
• Transaction history: deposits, withdrawals, bets, and balance movements.
• Credit or debit card details, stored in tokenized form — never as plain text.

Platform usage data:

• IP address, device type, operating system, and browser used.
• Betting and gaming history — types, amounts, timestamps, and results.
• Session duration, pages visited, and features used.
• Approximate geolocation, derived from IP address.

Every piece of data collected by 218bet has a specific and legitimate purpose. We use your information to:

• Create and manage your account: registration, authentication, account recovery, and identity verification.
• Process financial transactions: deposits via Pix, boleto, card, PicPay, Mercado Pago, and TED; withdrawal processing and receipt generation.
• Offer and personalize services: display bets and games relevant to your usage history, send promotions applicable to your profile, and improve your experience on the platform.
• Comply with legal and regulatory obligations: anti-money laundering (AML/CFT) compliance, LGPD compliance, and responding to requests from competent authorities.
• Ensure platform security: fraud detection, prevention of unauthorized access, identification of abusive behavior, and protection of all users.
• Service communications: notifications about transactions, platform updates, changes to terms, and communications related to your account.
• Customer Support: chat support, dispute handling, and resolution of reported issues.
• Platform analysis and improvement: aggregated and anonymized usage statistics for new feature development and bug fixes.

The 218bet does not use your data to build credit profiles, make automated decisions with significant legal effects without human review, or for any purpose not listed above without new explicit consent from the user.

Under the LGPD, all personal data processing must have a legal basis. The 218bet processes your data on the following legal grounds:

• Contract performance (Art. 7, V): processing necessary to provide the sports betting and casino services you agreed to when creating your 218bet account.
• Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and responding to requests from authorities in accordance with Brazilian law.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, and communications directly related to the service, provided they do not infringe on users' rights.
• Consent (Art. 7, I): sending marketing communications, promotions, and news not directly related to service delivery. You may withdraw this consent at any time in your account settings or by contacting support.

The 218bet never sells, rents, or shares your personal data with third parties for commercial purposes. We share information only in the strictly necessary situations listed below:

• Technology and infrastructure providers: hosting services, payment processing (Pix gateways, card operators), cybersecurity, and technical support — all governed by contracts that prohibit providers from using the data for their own purposes.
• Casino game providers: for live games and other titles requiring a connection to external servers, minimal technical data may be transmitted to the provider for the game to function. No complete financial data is shared with game providers.
• Identity verification services (KYC): specialized partners in document validation and sanctions list screening, as required for compliance.
• Competent authorities: when required by law, court order, or a request from a Brazilian regulatory authority with legitimate jurisdiction.
• Fraud prevention: consortia or information-sharing services related to fraud and money laundering, within specific regulatory contexts.

All third parties with which 218bet shares data with are bound by contracts requiring secure and confidential handling of information, in compliance with the LGPD.

The 218bet uses cookies and similar technologies to improve your experience on the platform, keep your session active, and collect usage data in aggregate form. The types of cookies we use are:

• Essential cookies: required for the platform to function — session authentication, betting slip, language preferences. These cannot be disabled without affecting your use of the service.
• Performance cookies: collect anonymous, aggregated data about how you navigate the platform to help us identify issues and improve the experience. They do not identify you individually.
• Functionality cookies: store your usage preferences — such as sport filters or display settings — so you don't have to reconfigure them on every visit.
• Analytics cookies: we use traffic analysis tools with anonymized data to understand general usage patterns on the platform. No individual profiles are created from this data.

The 218bet implements robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL encryption on all communications and data transmissions.
• Passwords are stored as salted hashes — 218bet has no access to your original password.
• Financial data (card numbers) stored in tokenized form by PCI-DSS certified payment gateways — never as plain text on our servers.
• Strict internal access controls: only employees with a specific operational need have access to personal data, under audit logging.
• 24-hour security monitoring with automatic intrusion and suspicious activity detection.
• Regular encrypted data backups stored on redundant infrastructure.
• Two-factor authentication (2FA) available to all users and mandatory for access to internal administrative systems.

In the event of a security incident that may affect users' data, the 218bet will notify affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

The 218bet retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum retention periods required by Brazilian law:

• Registration and KYC data: retained for the full duration of the account and for at least 5 years after closure, in compliance with anti-money laundering requirements (Law No. 9.613/1998).
• Financial transaction history: minimum of 5 years, in accordance with Brazilian tax and regulatory obligations.
• Betting and gaming history: minimum of 2 years after the last activity on the account.
• Support communication data: 2 years after the ticket is closed.
• Security and access logs: 6 months to 1 year, based on operational security requirements.

Once retention periods expire, data is anonymized or securely deleted. Anonymized data — which cannot be used to identify any individual — may be retained indefinitely for statistical and platform improvement purposes.

The LGPD grants you, as a data subject, a set of rights that 218bet is fully committed to upholding. You may exercise any of these rights via live chat or by emailing contato@218bet.click:

• Access: request confirmation of what data 218bet holds about you and receive a complete copy of that information.
• Correction: correct incomplete, inaccurate, or outdated data. Many details can be updated directly in your account settings.
• Anonymization, blocking, or deletion: request that unnecessary, excessive, or non-compliant data be anonymized, blocked, or deleted.
• Portability: receive your data in a structured, machine-readable format for transfer to another service, where technically feasible.
• Deletion upon consent withdrawal: where processing is based on consent, you may withdraw it at any time, and data processed solely on that basis will be deleted.
• Sharing information: know which third parties your data has been shared with.
• No subjection to automated decision-making: request human review of automated decisions that significantly affect your interests.
• Objection: to object to data processing based on legitimate interest when you believe your rights override the claimed interest.

Requests are handled within 15 calendar days, a period that may be extended with justification for complex cases. The 218bet does not charge any fee for exercising these rights.

Some of our technology partners — such as cloud infrastructure providers, international payment gateways, and casino game providers — may process data on servers located outside Brazil. When this occurs, the 218bet ensures that:

• Transfers occur only to countries with an adequate level of data protection recognized by the ANPD, or under standard contractual clauses that guarantee protection equivalent to the LGPD.
• Contracts with international partners include specific obligations regarding data protection, confidentiality, and restricted use.
• No international data transfer takes place without an adequate legal basis and the safeguards required by the LGPD.

Brazilian users' financial data — especially Pix and bank account information — is processed by Brazilian gateways and does not leave the country.

The platform of 218bet is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If we identify that an account was created by a minor, the account will be immediately closed, all data will be securely deleted, and any deposited funds will be returned.

If you believe a person under 18 has created an account on 218bet, please contact us immediately via live chat or at contato@218bet.click. We will take the necessary steps promptly.

The 218bet may update this Privacy Policy to reflect changes in our services, new legal requirements, or improvements to our data protection practices. Material changes will be communicated at least 7 days in advance via your registered email and/or a prominent notice within the platform.

The most recent version of this policy will always be available on this page, with the date of the last update shown at the top. Continued use of the platform after any changes take effect constitutes acceptance of the updated version. If you disagree with a change, you may exercise your rights as a data subject — including requesting data deletion — before the new version comes into force.

For questions about this policy or the handling of your data, contact our team via 24-hour chat or by email at contato@218bet.click, using the subject line "Privacy Policy – Inquiry".