878bet Privacy Policy – Data Protection in Brazil

1. Who We Are and Who This Policy Applies To

The 878bet is the controller of personal data belonging to users who register and use the platform available at 878bet.world. This Privacy Policy applies to everyone who accesses, browses, creates an account, or carries out any transaction on 878bet, including Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, volleyball, NBB basketball, e-sports), Live Casino games, slots, poker, and crash games.

By using the platform 878bet, you confirm that you have read and understood this policy. If you are under 18, do not use the platform – 878bet's services are strictly prohibited for minors. Any questions about this policy can be sent at any time to our Data Protection Officer (DPO) at privacidade@878bet.world.

2. What Personal Data We Collect

The 878bet collects personal data at different points during your interaction with the platform. The list below describes each category, the specific data involved, and when it is collected:

878bet does not collect sensitive data such as racial or ethnic origin, religious belief, political stance, health information, or sexual orientation. We also do not request your full credit card number — we use tokenization through partners certified by the Banco Central do Brasil to process card payments securely.

3. How and Why We Use Your Data

The 878bet uses your personal data solely for the purposes described below. Data is never used for purposes not listed here, and any relevant new purpose will be communicated before it takes effect:

• Account creation and maintenance: your name, CPF, and email are required to create and maintain your account on the platform and to ensure that only you have access to it;
• Financial transaction processing: Pix, card, PicPay, Mercado Pago, bank slip, and TED data are used to process deposits and withdrawals securely and traceably, in compliance with Banco Central do Brasil requirements;
• Identity verification (KYC/AML): identity documents are collected to fulfill legal customer verification and anti-money laundering obligations in accordance with COAF guidelines;
• Provision of betting and gaming services: betting history is required to settle markets, calculate returns, apply bonus rules, and detect abusive behavior;
• Security and fraud prevention: technical data such as IP addresses and session identifiers are used to detect suspicious access, bot usage, and multiple accounts sharing the same CPF;
• Experience personalization: sports and gaming preferences are used to display relevant content within the platform, such as highlighted Brasileirão odds or personalized poker tournaments;
• Communications about promotions and news: with your consent, we send emails and push notifications about bonuses, seasonal promotions, and news. You may withdraw your consent at any time through the notifications panel or by emailing contato@878bet.world;
• Compliance with legal obligations: we may need to share data with competent Brazilian authorities in response to a court order or a legally grounded administrative request.

4. Legal Bases for Data Processing (LGPD)

The General Data Protection Law (Law No. 13,709/2018) requires that all personal data processing have a specific legal basis. The 878bet bases each data processing operation on the following legal grounds set out in articles 7 and 11 of the LGPD:

• Contract performance (art. 7, V): processing required to perform the service agreement accepted when you create your 878bet account, including bet processing, Pix payments, and market settlement;
• Compliance with a legal obligation (art. 7, II): document collection for KYC, anti-money laundering, and compliance with COAF, Banco Central, and other regulatory bodies;
• Legitimate interest (art. 7, IX): behavioral analysis on the platform for security, fraud prevention, bonus abuse detection, and non-intrusive content personalization — always taking into account that this interest does not override your fundamental rights and freedoms;
• Consent (art. 7, I): sending marketing communications and promotional notifications. Consent is collected on a granular basis during registration and can be withdrawn at any time without affecting access to any other platform services.

5. Sharing Data with Third Parties

The 878bet does not sell, rent, or trade users' personal data. Sharing only occurs in the situations described below, strictly to the extent necessary for each purpose:

• Payment processing partners: financial institutions and intermediaries certified by the Banco Central do Brasil that process transactions via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and TED receive only the minimum data required for each specific transaction;
• Game and content providers: slots providers, Live Casino, and other game suppliers receive anonymous or pseudonymized identifiers to track sessions and returns — with no access to personally identifiable user data;
• Identity verification partners: third-party KYC service providers receive document images exclusively for verification purposes and are contractually prohibited from using that data for any other purpose;
• Brazilian public authorities: in response to a court order or legally grounded administrative request issued by a competent Brazilian authority, 878bet will provide the requested data strictly in accordance with the terms of the order, without going beyond its scope;
• Auditors and legal advisors: professionals bound by confidentiality obligations who need to access data for compliance auditing, legal defense, or due diligence purposes.

All partners of 878bet that receive personal data sign data processing agreements with data protection clauses equivalent to or exceeding LGPD requirements, including a prohibition on use for their own purposes and an obligation to notify in the event of a security incident.

6. Cookies and Tracking Technologies

The platform 878bet uses cookies and similar technologies to ensure the site functions correctly, maintain authenticated sessions, and improve the user experience. The cookies used fall into the following categories:

• Essential cookies: necessary for the basic functioning of the platform – they keep your session active after login, remember your language preferences, and ensure the betting slip works correctly. They cannot be disabled without affecting the platform's functionality;
• Performance and analytics cookies: collect information about how users navigate the platform — which pages are most visited, where errors occur, and page load times — to help the technical team continuously improve the product. Data is aggregated and anonymized;
• Personalization cookies: they remember your preferences within the platform, such as favorite sports, betting filters, and layout settings, so you do not have to reconfigure everything each session;
• Marketing cookies (with consent only): used to measure the effectiveness of advertising campaigns and prevent you from seeing the same ad repeatedly. Enabled only with your explicit consent via the cookie banner on your first visit.

You can manage your cookie preferences at any time through the privacy settings panel in your account. Refusing marketing cookies does not affect your access to the services of 878bet.

7. Personal data security

The 878bet adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main measures in place are:

• 256-bit SSL/TLS encryption across all communications between your device and 878bet's servers — your data is always transmitted encrypted, making interception in transit impossible;
• Encrypted storage of sensitive data such as passwords (never stored in plain text, only as salted hashes) and financial information;
• Two-factor authentication (2FA) available to all users and strongly recommended for additional account protection;
• Role-based access control – only employees with a specific operational need are granted access to personal data, and all access is recorded in a log;
• Continuous Security Monitoring with automated systems that detect suspicious access attempts, brute-force attacks, and anomalous behavior patterns;
• Regular security testing conducted by internal teams and external auditors to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that may pose a real risk to the rights of data subjects, the 878bet will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframes established by the LGPD, with clear information about the nature of the incident, the data involved, and the measures taken to contain and remediate the situation.

8. How long we keep your data

The 878bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods. The table below summarizes the applicable retention periods:

• Identification data and active account: retained for the entire period during which the account remains active on the platform;
• Financial and transaction history: retained for a minimum of 5 years after each transaction, as required by Brazilian tax legislation and anti-money laundering regulations in force in Brazil;
• KYC Documents: retained for a minimum of 5 years after account closure, in accordance with COAF guidelines;
• Access and security logs: retained for 6 months in accordance with the Marco Civil da Internet (Law No. 12,965/2014) and for up to 2 years for internal fraud investigation purposes;
• Marketing data (with consent): retained until consent is withdrawn by the user, with no minimum mandatory period;
• After account closure: data is anonymized or deleted as applicable, retaining only what is required by law for the periods stated above.

After the applicable retention period, the 878bet performs secure data deletion using techniques that make recovery or reconstruction of the original information impossible.

9. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 878bet, a set of rights that can be exercised at any time. Below we explain each right and how to exercise it:

To exercise any of the rights listed above, submit a request to privacidade@878bet.world including your full name, registered CPF, and the specific right you wish to exercise. The 878bet will respond within 15 calendar days and may request additional identity verification to protect your account against fraudulent requests by third parties.

If you believe your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD), as set out in art. 18 of the LGPD.

10. Minors under 18

The services of 878bet are prohibited for users under 18. The platform does not intentionally collect personal data from minors. If you believe a person under 18 has created an account on 878bet, please notify us immediately at privacidade@878bet.world or via the live support chat.

Upon receiving a notification, 878bet immediately suspends access to the suspected account, launches an investigation, and, if underage use is confirmed, closes the account and deletes the collected data within 72 hours, except where retention is required by a specific legal obligation.

11. Changes to This Privacy Policy

The 878bet may update this Privacy Policy to reflect changes in data processing practices, legal requirements, or new platform features. When changes are material to the rights of data subjects, 878bet will notify active users via their registered email and/or through an in-platform notification at least 7 days before the changes take effect.

The date of the last update to this policy is always shown at the top of the document. We recommend reviewing this page periodically, especially after receiving update notifications. Continued use of the platform after changes take effect constitutes acceptance of the new terms.

If the changes reduce the rights of data subjects, the 878bet will request new consent where required, as mandated by the LGPD.

12. Contact the DPO and Support Channels

The 878bet has appointed a Data Protection Officer (DPO) as required by art. 41 of the LGPD to handle requests, questions, and complaints related to personal data processing.

The available contact channels are:

• DPO – Data Protection Officer: privacidade@878bet.world (responses within 15 calendar days);
• General support: contato@878bet.world or live chat on the platform, available 24 hours a day, 7 days a week, in Brazilian Portuguese;
• For urgent matters account security, use live chat for an immediate response.

When contacting the DPO, please include: your full name, the CPF registered with 878bet, a clear description of your request, and, if applicable, a copy of any prior correspondence on the matter. This helps us process your request more efficiently.