Bet23 Privacy Policy – LGPD Data Protection

1. Introduction

Bet23 respects the privacy of all users and is committed to handling collected personal data in a transparent, secure manner, in full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018) and all other applicable Brazilian regulations.

This Privacy Policy clearly explains what data bet23 collects when you use the platform, how it is used, who it may be shared with, and what rights you have as a data subject. If you have any questions about this Policy, you're welcome to reach out to our support team before creating your account — we're available 24 hours a day in Portuguese.

By creating an account on bet23, making a Pix deposit, or using any feature of the platform, you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described here. If you disagree with any part of it, we recommend not using the platform — and if you already have an account, please contact us to exercise your data subject rights.

2. Who Controls Your Data

The data controller for the personal data processed under this Policy is bet23, the operator of the sports betting and online casino platform available at bet23.click. The controller is the entity responsible for determining the purposes and means of processing users' personal data.

For all matters related to personal data processing — including exercising your rights as a data subject, questions about this Policy, or requests for correction and deletion — you can reach us by email at suporte@bet23.click or via the live chat available on the platform.

Bet23 has appointed a Data Protection Officer (DPO) as required under Art. 41 of the LGPD, who can be reached at the same email address for questions specifically related to personal data protection and compliance with applicable legislation.

3. What Data We Collect

Bet23 collects different categories of data depending on how you interact with the platform. The sections below describe the types of data collected and the circumstances in which collection takes place.

3.1 Data You Provide Directly

• Registration data: full name, CPF, date of birth, email address, and password;
• Contact details: mobile phone number (when provided for verification or communication purposes);
• Address data: ZIP code, street address, city, and state (when requested for identity verification);
• Identity documents: National ID (RG), driver's license (CNH), or passport — requested only during KYC (Know Your Customer) verification, before your first withdrawal, or in security review situations;
• Financial data: Pix key, banking details for withdrawal processing, and transaction receipts when requested.

3.2 Automatically collected data

• Usage data: betting history, games accessed (football, UFC, crash games, slots, live casino), amounts wagered, and results;
• Technical data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers;
• Browsing data: pages visited on the platform, session duration, clicks, and interactions with interface elements;
• Approximate location data: derived from your IP address and used for geographic compliance — bet23 does not collect GPS location without your explicit consent.

3.3 Financial transaction data

Every transaction on bet23 — deposits via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, or TED bank transfer — generates records that include the amount, date, time, payment method used, and transaction status. These records are retained for financial reconciliation, fraud prevention, and compliance with legal obligations.

4. How We Use Your Data

Bet23 uses collected data solely for the purposes described below. We do not use personal data for any purpose other than those for which it was collected without obtaining new consent or an appropriate legal basis.

• Service delivery: create and manage your account, process deposits via Pix and other methods, process withdrawals, record bets, and provide access to the games catalog;
• Identity verification: verify the identity of the account holder using their CPF and, when necessary, additional documents, in order to meet legal obligations and prevent fraud;
• Fraud and money laundering prevention: monitor transactions and suspicious behavior to protect users and the integrity of the platform, in compliance with Brazil's anti-money laundering legislation (Law No. 9,613/1998);
• Communication: send registration confirmations, transaction notifications, security alerts, and — with your consent — communications about bet23 promotions and bonuses;
• Platform improvement: analyze aggregated usage data to identify technical issues, improve mobile performance, and enhance the overall user experience;
• Responsible gambling: monitor usage patterns to identify behaviors that may indicate problem gambling and provide proactive support, as described on our Responsible Gambling page;
• Compliance with legal obligations: respond to requests from Brazilian government authorities when required by law or court order.

5. Legal Basis for Processing (LGPD)

The LGPD (Law No. 13.709/2018) requires that all personal data processing have a valid legal basis. bet23 grounds the processing of your data on the following bases set out in Art. 7 of the law:

• Contract performance (Art. 7, V): processing is necessary to perform the service contract entered into when you create an account and accept the Terms and Conditions — this includes processing bets, deposits, and withdrawals;
• Compliance with a legal obligation (Art. 7, II): processing data such as CPF, transaction history, and identity documents is required to fulfill obligations under Brazilian law, including anti-money laundering regulations;
• Consent (Art. 7, I): marketing communications and promotions are sent based on your express consent, which you may withdraw at any time;
• Legitimate interest (Art. 7, IX): the processing of technical and usage data for security, fraud prevention, and service improvement purposes, always in accordance with your fundamental rights.

Whenever consent is the legal basis, you have the right to withdraw it at any time without affecting your core service — meaning that withdrawing consent for marketing communications has no impact on your account or the processing of your withdrawals.

6. Who We Share Your Data With

Bet23 may share personal data with third parties in the specific situations described below. Under no circumstances do we sell or transfer data for third-party advertising purposes.

6.1 Essential service providers

We share data with companies that provide services on our behalf and are required for the platform to operate:

• Payment processors: to process deposits via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and withdrawals via Pix. These partners only have access to the data necessary to complete the transaction;
• Game providers: Spribe, Pragmatic Play, SmartSoft, and other crash games, slots, and live casino providers. They receive only the minimum session data required for the games to function;
• IT infrastructure and security: hosting providers, fraud protection services, and identity verification providers that act as data processors under our instructions.

All service providers that process personal data on behalf of bet23 are contractually required to implement appropriate security measures and to use the data solely for the agreed purposes.

6.2 Government Authorities

Bet23 may disclose personal data to Brazilian public authorities — including the Federal Revenue Service, Central Bank, Ministry of Finance, and law enforcement — when required by law, court order, or regulatory mandate. In such cases, we disclose only the data strictly necessary to fulfill the request.

6.3 International Data Transfers

Some of our service providers may be located outside Brazil. When this is the case, bet23 ensures that data transfers are carried out with appropriate safeguards, in accordance with the requirements of Art. 33 of the LGPD, including standard contractual data protection clauses.

7. Cookies and Tracking Technologies

Bet23 uses cookies and similar technologies to keep the platform running properly, improve your experience, and gather analytics data. Cookies are small text files stored in your browser or on your mobile device when you visit the site.

7.1 Types of cookies used

• Strictly necessary cookies: essential for the platform to function — they keep your session active, remember your language preferences, and are required for the secure login process. They cannot be disabled without affecting how the site works;
• Analytical cookies: collect aggregated data on how users navigate the platform — most-visited pages, session duration, errors encountered. This data helps us improve mobile performance and fix technical issues;
• Functional cookies: remember your preferences — such as displayed odds, favorite sports, and interface settings — to personalize your experience on your next visit;
• Security cookies: used to detect fraud attempts, unauthorized access, and suspicious behavior that could compromise the security of your account.

7.2 Cookie management

You can manage your cookie preferences through your browser or mobile device settings. Most browsers let you block or delete cookies — check your browser's documentation (Chrome, Firefox, Safari) for specific instructions. Please note that blocking strictly necessary cookies may prevent the bet23 platform from functioning properly.

8. Data Security

Bet23 implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. Key measures include:

• 256-bit SSL/TLS encryption: all communications between your phone or computer and bet23's servers are encrypted, including registration data, Pix transactions, and gaming sessions;
• Secure password storage: user passwords are never stored in plain text — we use salted hash algorithms to ensure that, even in the event of a database breach, the original passwords cannot be recovered;
• Access authentication: strict access controls ensure that bet23 employees only access users' personal data when strictly necessary to provide support or meet legal obligations;
• Continuous monitoring: automated anomaly detection systems monitor transactions and access in real time to identify suspicious activity that may indicate fraud or unauthorized access;
• Encrypted backups: data backups are kept on separate encrypted servers, ensuring recovery in the event of a technical failure.

Despite the measures we have in place, no security system is completely infallible. In the event of a security incident that may affect your data, bet23 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes established by the LGPD, providing details about the incident and the steps taken.

You also have a role in keeping your account secure: use a strong, unique password, never share it with anyone, and contact bet23 support immediately if you suspect unauthorized access to your account.

9. How Long We Retain Your Data

Bet23 retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations.

• Active account data: retained for as long as your account is active on the platform;
• Financial transaction data: retained for a minimum of 5 years after the transaction, as required by Brazilian anti-money laundering legislation (Law No. 9.613/1998) and Central Bank regulations;
• KYC data (identity documents): retained for a minimum of 5 years after account closure, in accordance with regulatory requirements;
• Usage data and security logs: retained for up to 2 years for security analysis and dispute resolution purposes;
• Support communication data: retained for up to 3 years for customer service history and team training purposes;
• Closed account data: after account closure, we retain only the data required by law — all other data is anonymized or deleted within 90 days.

Once the applicable retention period has ended, data is securely deleted or anonymized so it can no longer be linked to the original data subject.

10. Your Rights as a Data Subject

The LGPD (Art. 18) guarantees you, as the data subject whose personal data is processed by bet23, the following rights, which may be exercised at any time by contacting our support team: