Privacy Policy of 996bet – Your Data, Protected

1. Introduction

This Privacy Policy describes how the platform 996bet, accessible at 996bet.best, collects, uses, stores, shares, and protects the personal data of users who register for and use the platform's services in Brazil.

By creating an account on 996bet, making a deposit via Pix, or simply browsing the platform, you agree to the practices described in this document. We recommend reading it in full, but here's the short version: your data is used solely to operate the platform, is never sold to third parties, and you have full control over it as provided by the LGPD.

---

2. Data Controller

The controller of personal data for 996bet users is the legal entity responsible for operating the 996bet.best platform. To exercise your rights as a data subject under the LGPD, the point of contact is 996bet's Data Protection Officer (DPO), reachable at privacidade@996bet.best.

996bet appoints a Data Protection Officer (DPO) as required by Article 41 of the LGPD. The DPO is the official point of contact for all requests relating to personal data, including requests for access, correction, deletion, portability, and withdrawal of consent.

---

3. What Data We Collect

996bet collects personal data in different ways depending on how you interact with the platform. Below is an organized summary of the types of data collected and how each is obtained:

Category	Data Collected	How It's Collected
Sign Up	Full name, CPF, date of birth, email address, mobile phone number, full residential address	Provided by the user at registration
Verification (KYC)	Government-issued ID (RG, CNH, or Passport), proof of address, verification selfie	Submitted by the User for mandatory verification prior to the first withdrawal
Financial	Pix key, card details (only the last 4 digits stored), deposit and withdrawal history	Automatically generated from transactions carried out on the platform
Betting & Gaming	Complete betting history, games accessed, amounts wagered, wins and losses, and gaming sessions	Automatically generated through use of the platform
Technical	IP address, device type, operating system, browser, app version, session duration	Automatically collected by the platform's log systems
Communications	Support chat history, emails sent and received, service ratings	Recorded in 996bet's CRM and support systems
Preferences	Notification preferences, favorite sports, selected language	Configured by the user in the account dashboard

996bet does not collect sensitive data such as racial origin, religious belief, biometric data beyond what is necessary for identity verification, or health-related data, except where directly relevant to applying responsible gambling tools with the User's explicit consent.

---

4. Why We Use Your Data

Every piece of data collected has a specific purpose. 996bet does not collect information indiscriminately. Below are the purposes for which your data is used:

• Account operation: create and maintain your active account, process logins, authenticate sessions, and enable access to all platform features;
• Processing financial transactions: process deposits via Pix, boleto bancário, credit/debit card, PicPay and Mercado Pago, as well as withdrawals via Pix or TED bank transfer;
• Identity verification: verify your identity, confirm you are at least 18 years old, and fulfill anti-money laundering obligations (Law No. 9.613/1998);
• Bet and game management: record bets, calculate results, pay out winnings and maintain a complete history for dispute resolution;
• Service communications: send deposit and withdrawal confirmations, betting result notifications, security alerts, and terms updates;
• Customer support: answer questions, resolve complaints, and maintain an interaction history to ensure continuity of service;
• Responsible gambling: monitor behavioral patterns to identify signs of problem gambling and offer protective resources, in accordance with the tools available on the Responsible Gaming;
• Fraud prevention: detect and prevent platform misuse, unauthorized access, duplicate account creation, and suspicious activity;
• Platform improvement: analyze usage data in aggregate and anonymized form to identify improvements to the user experience;
• Compliance with legal obligations: comply with requirements from regulatory authorities, court orders, and applicable tax obligations.

---

5. Legal Basis for Data Processing

The LGPD requires that all personal data processing have a justified legal basis. 996bet grounds the processing of your data on the following bases set out in Article 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): the majority of data processing is based on the need to perform the contract entered into when you accept the Terms and Conditions and use 996bet's services — including registration, betting, payments, and support;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification, anti-money laundering compliance, retention of financial records, and cooperation with regulatory authorities in the betting sector;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, product improvement using anonymized data, and relevant service communications;
• Consent (art. 7, I): for marketing communications and promotions by email or SMS, when you explicitly opt in through your account preference settings.

For data processed on the basis of consent, you may withdraw that consent at any time without affecting any processing carried out beforehand. Withdrawal can be done in your account settings or by contacting the DPO.

---

6. Data Sharing with Third Parties

996bet does not sell personal data. Data is shared with third parties only in the situations described below, always with contractual guarantees of adequate protection:

• Payment processors: to process financial transactions via Pix (Banco Central), credit/debit card, PicPay and Mercado Pago. These partners receive only the data strictly necessary to process each transaction;
• Game providers: slots and live casino providers (such as Pragmatic Play, NetEnt, and Evolution Gaming) receive an anonymous session identifier to record results. They do not receive any personally identifiable data;
• Identity verification services: certified KYC platforms that assist with document verification and fraud prevention, under data processing agreements with confidentiality clauses;
• Cloud infrastructure: hosting and storage providers certified to internationally recognized security standards, operating under data processing agreements that ensure LGPD compliance;
• Legal authorities: when required by court order, determination of a competent regulatory authority, or a legal obligation under Brazilian law.

---

7. How Long We Retain Your Data

Personal data is retained for as long as necessary for the purposes that justify it, subject to mandatory minimum legal retention periods:

• Registration and identity data: retained while the account is active and for a minimum of 5 years after closure, in line with regulatory obligations in the betting sector and anti-money laundering requirements;
• Financial transaction history: retained for a minimum of 5 years after each transaction, as required by Brazilian tax and financial legislation;
• Betting history: retained for 3 years after each bet, for dispute and regulatory audit purposes;
• Support records: retained for 2 years after each support ticket is closed;
• Technical log data: retained for 12 months for security and incident investigation purposes;
• Marketing consent data: retained while consent is active or for 2 years after withdrawal, for proof-of-consent purposes.

Once retention periods expire, data is securely deleted or irreversibly anonymized and can no longer be linked to the original user.

---

8. Cookies and Tracking Technologies

996bet uses cookies and similar technologies to ensure the platform works correctly, remember your preferences, and analyze usage behavior in aggregate. The types of cookies used are listed below:

You can manage your non-essential cookie preferences directly in the consent banner that appears on your first visit to the platform, or through your browser settings. Disabling essential cookies may prevent normal use of the platform.

996bet does not use third-party behavioral advertising cookies or share browsing data with ad networks.

---

9. Minors

996bet is a betting platform intended exclusively for adults aged 18 and over. The platform does not knowingly collect, process, or store personal data from minors.

If the User provides false information about their age during registration, the account will be closed immediately once the discrepancy is identified during the identity verification (KYC) process, and the data will be deleted in accordance with applicable legal retention periods.

If you are the guardian of a minor and believe they may have created an account on 996bet, please contact support immediately via live chat or by emailing suporte@996bet.best for preventive account closure and data deletion.

---

10. Information Security

996bet implements technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or improper destruction. Key measures include:

• 256-bit SSL/TLS encryption on all data transmissions;
• Passwords stored with secure hashing (bcrypt) — no 996bet employee has access to your password in plain text;
• Compliance with the PCI-DSS standard for payment data;
• Role-based access controls with a least-privilege principle;
• Continuous infrastructure monitoring for intrusion detection;
• Regular penetration testing (pentests) by specialized security teams;
• Encrypted backups with geographically distributed storage;
• Regular staff training on information security and phishing.

In the event of a security incident that compromises your personal data, 996bet will notify the National Data Protection Authority (ANPD) within 72 hours of confirming the incident, as required by the LGPD. You will also be notified by email if the incident poses a significant risk to your rights and freedoms.

---

11. Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as a data subject, a broad set of rights that can be exercised at any time. 996bet is committed to responding to all requests within 15 calendar days:

To exercise any of these rights, send a written request to our data protection officer at privacidade@996bet.best, providing your full name, CPF, and a description of the right you wish to exercise. For your security, we may request identity verification before processing your request.

---

12. International Data Transfers

Some infrastructure and service providers used by 996bet may be located outside Brazil. When this is the case, 996bet ensures that international data transfers comply with the requirements of article 33 of the LGPD, through:

• Transfer to countries whose level of data protection has been recognized as adequate by the ANPD;
• Existence of specific contractual data protection clauses with the recipient, equivalent to the requirements of the LGPD;
• International certifications held by the recipient (such as ISO 27001) that demonstrate an adequate level of protection.

996bet does not carry out international data transfers for purposes beyond what is strictly necessary to operate the platform, such as cloud storage, payment processing, and the provision of certified casino games.

---

13. Updates to This Policy

996bet may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or platform improvements. Version history is maintained internally, and the date of the most recent update is always displayed at the top of this document.

When changes are material to your rights as a data subject — such as a change in the purpose of use, a new type of data being collected, or a new third-party sharing arrangement — 996bet will notify users by email at least 7 days before the new version takes effect.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree, you may request account closure before the effective date, as described in the Terms and Conditions.

---

14. Contact & Data Protection Officer (DPO)

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you may contact 996bet through the following channels:

• Data Protection Officer (DPO): privacidade@996bet.best – for requests regarding access, correction, deletion, portability, and withdrawal of consent;
• General support: suporte@996bet.best — for general privacy questions or any other aspect of the platform;
• Live chat: available 24 hours a day directly on the platform, with an average response time of under 2 minutes.

The response time for formal LGPD rights requests is up to 15 calendar days from receipt of a complete, identified request. For requests requiring more complex analysis, this deadline may be extended by a further 15 days, with formal notice to the requester explaining the reason for the extension.

If, after contacting 996bet, you feel your rights have not been properly addressed, you may file a complaint directly with the National Data Protection Authority (ANPD), as provided in Article 55-J of the LGPD.

996bet appreciates the trust you place in our platform. Privacy is a commitment we take seriously — not because we have to, but because a platform its users don't trust with their data doesn't deserve to be used. If this document hasn't answered your question, our team is in the chat right now, available in Portuguese, with no wait time.