Privacy Policy of 90bet1 — How we protect your data

This Privacy Policy describes how 90bet1 collects, stores, uses, and protects the personal data of users on the platform available at 90bet1.net. By creating an account, accessing the platform, or using any of our services — Sports Betting, casino games, slots, crash games, or Live Casino — you confirm that you have read and understood this policy.

The 90bet1 is committed to transparency in how personal data is handled and to respecting the privacy of every user. This policy is written in plain language, free of unnecessary legal jargon, so that any Brazilian bettor can understand exactly what we do with their information.

For the purposes of the LGPD, the controller of the personal data collected by the platform is 90bet1, operator of the site 90bet1.net. The controller is the entity responsible for determining the purposes and means of personal data processing carried out on the platform.

To exercise your rights as a data subject, ask questions about this policy, or raise any privacy concern, you can reach us by email at contato@90bet1.net or via live chat, available 24/7 directly on the platform.

The 90bet1 collects personal data at various points during your interaction with the platform. Below are the categories of information we may collect:

Credit and debit card details are never stored directly by 90bet1 — they are tokenized by PCI-DSS certified payment processors before any transmission to our systems. The Pix key registered for withdrawals is stored securely and linked exclusively to the account holder.

The data collected by 90bet1 are used exclusively for the purposes described below. No use outside this scope takes place without the user's explicit consent:

• Account creation & management: verify identity, keep registration details up to date, and ensure secure account access;
• Processing of financial transactions: process deposits via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay, as well as execute withdrawals to the account holder;
• Provision of betting and casino services: offer Sports Betting, slots, Live Casino, crash games, and all other products available on the platform;
• Legal compliance and fraud prevention: meet regulatory obligations, identify suspicious activity, and protect the integrity of the platform;
• Customer support: answer questions, resolve issues, and log interactions for training and customer service quality improvement;
• Responsible gambling: monitor usage patterns that may indicate problematic behavior and offer appropriate support;
• Communications and marketing: send offers, bonuses, and updates — only with your consent, and with the option to unsubscribe at any time;
• Platform improvement: analyze aggregated and anonymized data to identify issues, improve the user experience, and develop new features.

The 90bet1 processes personal data based on the following legal grounds set out in the LGPD (Lei nº 13.709/2018):

• Contract performance: processing is necessary to deliver the services the user signed up for when creating an account — placing bets, processing payments, and providing support;
• Legal obligation: identity verification, anti-money laundering compliance, and other regulatory requirements oblige us to collect and retain certain data;
• Legitimate interest: fraud analysis, platform security, and monitoring of gambling behavior for responsible gambling purposes;
• Consent: sending marketing communications and promotions. Consent may be withdrawn at any time without affecting access to the platform's other services.

The 90bet1 does not sell personal data. Information is shared with third parties only in the situations described below, and always with the necessary safeguards to protect your data:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, Microgaming, Hacksaw Gaming, and Spribe receive only the minimum data required to run the games (session identifier, available balance). These providers maintain their own privacy policies and are bound by data protection agreements with 90bet1;
• Payment processors: certified payment intermediaries that process transactions via Pix, boleto, credit/debit card, Mercado Pago, and PicPay. These partners are contractually required to use the data solely for processing transactions;
• Identity verification services: KYC (Know Your Customer) tools used to verify the identity and eligibility of users. Data is used solely for verification purposes and is not retained by providers beyond the period required;
• Competent authorities: 90bet1 may disclose data when required by law, court order, or a request from a competent regulatory authority in Brazil;
• Infrastructure services: cloud and hosting providers that store data on secure servers under contractual data protection agreements.

Under no circumstances is your data shared with third-party advertising companies, data brokers, or any entity for commercial purposes not directly related to the operation of 90bet1.

The 90bet1 retains personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. The general retention periods are as follows:

• Active account data: retained for as long as the account is active or as necessary to provide the services;
• Financial transaction data: retained for a minimum of 5 years after account closure, as required by tax and anti-money laundering legislation;
• Identity verification documents: retained for the period required by applicable regulations, generally 5 years after last use;
• Support data: support history retained for 2 years for quality assurance and dispute resolution purposes;
• Marketing data: retained until consent is withdrawn by the user.

After account closure and once the applicable legal retention periods have been met, personal data is anonymized or securely deleted from the systems of 90bet1.

The 90bet1 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures in place include:

• 256-bit SSL encryption on all communications between the user's device and the platform's servers;
• Passwords stored using cryptographic hashing — no password is ever stored in plain text;
• Two-factor authentication available as an additional layer of protection for user accounts;
• Strict internal access controls — only employees with a direct operational need can access personal data, with an audit log recorded for every access;
• Continuous monitoring of intrusion attempts, brute-force attacks, and anomalous access;
• A security incident response plan that includes notifying affected users and the National Data Protection Authority (ANPD) as required by the LGPD;
• Periodic security reviews carried out by a specialized team.

Despite all these measures, no security system is completely foolproof. We recommend using a strong, unique password for your account at 90bet1, do not share your credentials with third parties, and enable two-factor authentication when available.

The 90bet1 uses cookies and similar technologies to ensure the platform works correctly, personalize the user experience, and analyze site usage. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality, such as keeping your session active and remembering language preferences. They cannot be disabled without affecting how the platform operates;
• Performance cookies: collect information about how users interact with the platform (most visited pages, load times, errors) in an aggregated and anonymized form, for technical improvement purposes;
• Functionality cookies: allow the platform to remember user preferences, such as betting settings and preferred layout;
• Analytics cookies: used internally to understand usage patterns and improve the experience — data is anonymized and not shared with third parties for advertising purposes.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning correctly. Performance and analytics cookies can be disabled without affecting core functionality.

The platform of 90bet1 is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors under 18, and we do not allow minors to create accounts or use any service on the platform.

If we become aware that personal data from a minor was inadvertently collected, we will delete that information immediately and close the associated account. If you believe a user under 18 has created an account at 90bet1, please contact us at contato@90bet1.net so we can take the necessary steps.

The LGPD grants you, as a personal data subject, a set of rights that 90bet1 is committed to respecting and facilitating the exercise of these rights. You may exercise any of them at any time via live chat or by emailing contato@90bet1.net:

• Right of access: request a copy of all personal data we hold about you;
• Right to rectification: request the correction of any data that is inaccurate, incomplete, or out of date;
• Right to deletion: request the deletion of personal data that is unnecessary or processed irregularly, subject to legally mandated retention periods;
• Right to data portability: request the transfer of your data to another service provider in a machine-readable format;
• Right to object: object to data processing carried out on the basis of legitimate interest, especially for marketing purposes;
• Right to withdraw consent: withdraw consent for processing based on that legal ground, without affecting the lawfulness of any processing carried out prior to withdrawal;
• Right to information: obtain clear information about who your data is shared with and the purpose behind each processing activity;
• Right to review: request a review of automated decisions made based on your personal data.

The 90bet1 responds to rights exercise requests within 15 business days of receipt. In more complex cases, the deadline may be extended with prior notice to the data subject.

Some of our technical partners — such as cloud infrastructure providers and game suppliers — may store or process data on servers located outside Brazil. When this occurs, 90bet1 ensures that international personal data transfers meet LGPD requirements through:

• Specific data protection contractual clauses with each international partner;
• Verification that the destination country provides an adequate level of data protection as assessed by the ANPD;
• International certifications and compliance standards held by our partners (such as ISO 27001 for information security).

No international data transfers are carried out without the necessary contractual safeguards. For information about the countries involved and the protections in place, please contact us at contato@90bet1.net.

The 90bet1 may update this Privacy Policy to reflect changes in data processing practices, new legal requirements, or improvements to how we explain our practices. Significant changes will be communicated to active users at least 7 days in advance by email or in-platform notification.

The current version of this policy is always available on this page, with the date of the last update shown at the top of the document. We recommend checking this page periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated policy.

To exercise your rights as a data subject, clarify questions about this policy, or report any privacy-related concern regarding your information at 90bet1, please reach out through the channels below:

• Email: contato@90bet1.net — responses within 15 business days for personal data requests;
• Live chat: available 24 hours a day, 7 days a week, in Portuguese, directly on the platform;
• Help Center: 90bet1.net/faq — quick answers to the most common questions about privacy, registration, and payments.

If you are not satisfied with the response you receive, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.