1winbet Privacy Policy – Protecting Your Data

The controller of personal data collected through the platform 1winbet is the operating entity of the site 1winbet-vip.com, responsible for defining the purposes and means of processing information belonging to registered users and visitors of the platform.

This Privacy Policy was drafted in compliance with Brazil's General Personal Data Protection Law (LGPD – Federal Law No. 13.709/2018), which governs the processing of personal data belonging to individuals residing in Brazil or whose data is processed within Brazilian territory. Where applicable, we also observe the Internet Civil Rights Framework (Law No. 12.965/2014) and other regulatory standards currently in force in Brazil.

This policy applies to all personal data collected by the 1winbet through the platform, whether in digital format or via other communication channels such as email and support chat. By using the platform, you acknowledge that you are subject to this policy and to the platform's other terms of use of 1winbet.

The 1winbet collects personal data through three main channels: information you provide directly, data automatically generated by your use of the platform, and information received from authorized third parties for identity verification.

Data provided directly by you:

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address including ZIP code;
• Identity verification data (KYC): a copy of a government-issued photo ID (RG or CNH) and proof of address, requested before your first withdrawal or in situations requiring ownership confirmation;
• Financial data: Pix key, bank details for wire transfers, credit or debit card information (tokenized — the full card number is not stored on the 1winbet);
• Communications: content of messages sent to support via live chat or email.

Automatically collected data:

• Access data: IP address, device type, operating system, browser used, and version;
• Platform behavior data: pages visited, session duration, bets placed, casino games accessed, and activity timestamps;
• Cookies and session identifiers: described in detail in section 6 of this policy.

Data received from third parties: The 1winbet may receive identity confirmations and fraud prevention information from verification partners and the financial institutions that process transactions, strictly for the purposes described in section 3.

The 1winbet processes your personal data exclusively for the following purposes:

• Account creation and management: eligibility verification, identity confirmation, and maintenance of an active account on the platform;
• Service delivery: processing of deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and wire transfer; bet settlement; bonus and promotion credits;
• Fraud and money laundering prevention: compliance with Know Your Customer (KYC) legal obligations, monitoring of suspicious transactions as required by Brazilian anti-money laundering legislation (Law No. 9,613/1998);
• Customer support: handling inquiries, disputes, and requests submitted via live chat or email;
• Platform security: detection of unauthorized access, bot prevention, and protection of betting integrity;
• Responsible gambling: monitoring of usage patterns that may indicate problem behavior, in order to trigger the responsible gaming tools available on the platform;
• Service communications: transactional notifications such as deposit confirmation, bet settlement, and withdrawal requests — with no promotional content;
• Marketing communications: emails and notifications about promotions, bonuses, and platform updates, sent only to users who have given express consent for this type of communication. You can withdraw your consent at any time in your account settings.

The LGPD requires that every personal data processing operation have a specific legal basis. The 1winbet processes personal data on the basis of the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Performance of a contract (Art. 7, V): the processing of registration data, financial data, and betting history is necessary for the performance of the service agreement between you and the 1winbet. Without this data, it is not possible to process withdrawals, credit bonuses, or settle bets;
• Compliance with a legal or regulatory obligation (Art. 7, II): data processing for identity verification (KYC), anti-money laundering compliance, and retention of transaction records is required under Brazilian legislation applicable to financial operations;
• Legitimate interest (Art. 7, IX): platform security monitoring, fraud detection, and responsible gambling pattern monitoring are based on the legitimate interest of the 1winbet and in the interest of customers themselves in a secure and trustworthy platform;
• Consent (Art. 7, I): marketing communications and promotions are sent exclusively on the basis of express consent provided at the time of registration or subsequently through account settings.

The 1winbet does not sell, rent, or transfer customers' personal data to third parties for commercial or advertising purposes. Data sharing occurs only in the cases listed below, all of which are strictly necessary for platform operations:

• Payment processors: financial data required to process deposits and withdrawals is shared with the certified financial institutions and payment processors responsible for settling transactions — Pix via Banco Central, Visa and Mastercard card processors, PicPay, Mercado Pago, and partner banks for TED transfers. Sharing is limited to the minimum necessary for each transaction;
• Identity verification providers: documents submitted for KYC verification may be processed by partners specialized in identity verification and fraud prevention, operating under confidentiality agreements and in compliance with the LGPD;
• Technology providers: cloud infrastructure, hosting, and security providers that process technical platform data under data processing agreements compliant with the LGPD;
• Competent authorities: in compliance with a court order or a request from a competent law enforcement or regulatory authority, the 1winbet may share data with Brazilian public authorities to the extent required by law. Such sharing does not require your prior consent but is subject to the legal guarantees of due process;
• Casino game developers: for live casino games and slots, anonymous session identifiers may be shared with game providers for technical operational purposes, without transmitting any personally identifiable data.

The 1winbet uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are described below:

• Essential cookies: required for the platform's basic functionality — session authentication, bet slip management, and CSRF protection. These cookies cannot be disabled without compromising your use of the platform;
• Preference cookies: store preferences you have selected, such as your preferred language and odds display settings. They make navigation easier on subsequent visits;
• Analytical cookies: collect information about how users navigate the platform — most visited pages, session duration, and traffic source. Used internally to improve the platform. Data is processed in aggregate form and does not identify individual users;
• Security cookies: help detect suspicious activity, multiple accounts on the same device, and the use of automation. Essential for platform integrity.

The 1winbet does not use third-party tracking cookies for external advertising purposes. No data collected through platform cookies is shared with ad networks or advertisers.

The 1winbet implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. Key measures include:

• 256-bit SSL encryption on all communications between the user and the platform's servers;
• Password storage using salted cryptographic hash algorithms — passwords are never stored in plain text under any circumstances;
• Sensitive financial data — such as complete banking details — is stored in isolated environments with strict access controls;
• Two-factor authentication available for additional account security;
• Continuous monitoring of system access and activity for anomaly detection;
• Documented security incident response procedures, including notification to the ANPD and affected data subjects in cases of data breaches posing significant risk, within the timeframes set by the LGPD.

No security system is completely impenetrable. The 1winbet maintains an ongoing program to assess and improve its security practices. We also recommend that you protect your account by using a strong, unique password and enabling the two-factor authentication available in your account settings.

The 1winbet retains personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations:

• Active account data: retained for as long as the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 (five) years after the transaction date, in compliance with anti-money laundering obligations under Brazilian law;
• Identity verification data (KYC): retained for a minimum of 5 (five) years after account closure, as required by regulation;
• Betting records: retained for a minimum of 5 (five) years for audit purposes and potential dispute resolution;
• Customer support data: chat and support ticket records are retained for up to 2 (two) years for quality assurance and complaint resolution purposes;
• Data collected on the basis of consent: retained until consent is withdrawn by the data subject, after which it is deleted or anonymized within a reasonable timeframe.

The LGPD grants you, as a data subject, the following rights regarding your personal data processed by the 1winbet:

• Confirmation and access: right to confirm whether the 1winbet processes your data and, if so, to access a full copy of the information held about you;
• Correction: right to request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion: right to request the anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data processed in violation of the LGPD;
• Portability: the right to receive your personal data in a structured, machine-readable format for transfer to another service provider;
• Sharing information: the right to be informed about the public and private entities with which the 1winbet has shared or may share your data;
• Information on non-consent: right to be informed of the option to withhold consent and the consequences of doing so;
• Consent withdrawal: the right to withdraw consent previously given for purposes based on that legal ground;
• Objection: right to object to processing operations carried out on the basis of legitimate interest that cause harm to you.

To exercise any of these rights, please contact the 1winbet via 24-hour live chat or by email at contato@1winbet-vip.com with the subject line "LGPD – Data Subject Request". Responses are provided within up to 15 (fifteen) business days, as stipulated by the LGPD. In cases requiring additional identity verification, we may request documentation before processing the request.

The 1winbet is a Sports Betting and online casino platform intended exclusively for users aged 18 and over. Use of the platform by minors is strictly prohibited and constitutes a violation of the service's Terms and Conditions.

The 1winbet adopts the following measures to prevent minors from accessing and using the platform:

• CPF request at registration — which allows verification of date of birth with the Federal Revenue Service;
• Photo ID verification required before the first withdrawal or whenever there is any doubt about the account holder's age;
• Monitoring of usage patterns that may indicate the account is being operated by a minor;
• Immediate account closure if it is confirmed that the account holder is under 18, with a refund of deposits made upon verification.

The 1winbet does not intentionally collect personal data from users under 18. If we identify that data from a minor has been collected, that data will be deleted immediately and the account will be closed.

The 1winbet may update this Privacy Policy periodically to reflect changes in data processing practices, legislative updates, or the evolution of services offered. Material changes will be communicated to users with active accounts via email and through a prominent notice on the platform, indicating the effective date of the new terms.

Continued use of the platform after changes take effect constitutes acceptance of the revised policy. If you do not agree with the changes, you may close your account and request a withdrawal of your available balance before the new terms come into force.

For any questions, LGPD-related requests, or to exercise your rights as a data subject, please contact the 1winbet through the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform — the fastest channel for urgent requests;
• Email: contato@1winbet-vip.com — for formal LGPD-based requests, use the subject line "LGPD – Data Subject Request". Response time is up to 15 business days.

All communications must be conducted in Brazilian Portuguese. The data protection team of the 1winbet is ready to respond clearly and without unnecessary legal jargon, ensuring you understand exactly how your rights are being upheld.