Privacy Policy of 3tbet: Your Data in Good Hands

The controller of the personal data processed under this policy is the 3tbet, operator of the Sports Betting and online casino platform available at 3tbet.best. As the data controller, 3tbet is responsible for determining the purposes and means of processing the personal data collected.

The Data Protection Officer (DPO) of 3tbet can be reached by email at suporte@3tbet.best with the subject line "LGPD — DPO". The DPO is the point of contact between the company, data subjects, and the National Data Protection Authority (ANPD).

The 3tbet collects only the data necessary to provide, operate, and improve its services. Below is a full description of each category of data collected:

Credit or debit card data is never stored in plain text on the servers of the 3tbet. They are tokenized by the payment processor at the time of the transaction — the platform receives only a token that cannot be used to reconstruct the card number.

Every piece of data collected by 3tbet has a specific purpose. We never use data for purposes incompatible with those stated at the time of collection. The main purposes are:

• Account management: Create, verify, and maintain your user account on the platform.
• Transaction processing: Process deposits, withdrawals, and the settlement of winning bets via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers.
• Fraud prevention: Identify and prevent fraudulent activity, money laundering, multiple account creation, and other platform abuses.
• Responsible gambling: Monitor behavioral patterns to identify users who may be developing gambling-related issues and offer proactive support.
• Customer support: Answer questions, resolve issues, and handle complaints with access to the relevant history of your account.
• Service communications: Send deposit, withdrawal, betting, and other confirmations required for account operations.
• Platform improvement: Analyze usage patterns in an aggregated and anonymized way to improve the platform experience.
• Marketing communications: Send information about promotions and news — only if you have opted in to receive this type of communication.
• Legal and regulatory obligations: Comply with applicable legal requirements, such as financial transaction records and cooperation with competent authorities when legally required.

The LGPD requires that every processing of personal data have a valid legal basis. The 3tbet bases its data processing on the following legal grounds:

• Contract performance (Art. 7, V): Processing required to operate your account, handle bets, and manage financial transactions — without it, the service cannot function.
• Legal obligation (Art. 7, II): Processing required by Brazilian law, such as financial records for compliance with Central Bank regulations and anti-money laundering legislation.
• Legitimate interest (Art. 7, IX): Fraud prevention, platform security, and service improvement based on aggregated and anonymized usage data analysis.
• Consent (Art. 7, I): Sending marketing communications and using non-essential cookies. You may withdraw this consent at any time.
• Protection of life (Art. 7, VII): Monitoring of betting patterns to identify signs of problem gambling and offer support when needed.

The 3tbet may share personal data with third parties only in the following situations, all subject to appropriate contractual and technical safeguards:

• Payment processors: To process transactions via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED. These processors receive only the data strictly necessary to complete the transaction and are contractually prohibited from using it for any other purpose.
• Game providers: Companies like Spribe, Pragmatic Play, and Evolution Gaming receive anonymized session identifiers to operate the games. They do not receive users' full name, CPF, or financial data.
• Fraud prevention services: Specialized fraud detection platforms that analyze transaction patterns to protect both the platform and its users.
• Government authorities: When legally required by court order, administrative ruling, or regulatory directive from a competent Brazilian authority.
• Auditors and legal advisors: For audit and legal advisory purposes, subject to contractual confidentiality obligations.

The 3tbet does not share and will never share personal data with marketing companies, advertising platforms, or any third party for advertising purposes without your explicit consent.

The 3tbet uses cookies and similar technologies to function properly and deliver a personalized experience. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — keeping your session active, remembering your language preferences, and ensuring login security. They cannot be disabled without affecting the site's functionality.
• Performance cookies: Collect anonymized information about how users interact with the platform — which pages are most visited, where errors occur, loading times. Used exclusively to improve the platform.
• Functionality cookies: Store personalized preferences, such as display mode and odds settings, so you do not have to reconfigure them on every visit.
• Marketing cookies: Used only with your explicit consent, to personalize communications and measure the effectiveness of marketing campaigns.

You can manage your cookie preferences at any time through your browser settings or via the privacy panel available in your account settings at 3tbet. Disabling non-essential cookies will not affect your ability to use the platform's core services.

The 3tbet implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL encryption on all communications between the user and the platform.
• Sensitive data — such as identity documents and proof of residence — stored with AES-256 encryption at rest.
• Role-based access control (RBAC) — each employee only has access to the data required for their specific role.
• Mandatory multi-factor authentication for employee access to internal systems containing personal data.
• Continuous monitoring of suspicious activity across internal systems.
• Regular penetration testing and security audits conducted by specialized teams.

In the event of a security incident involving personal data, 3tbet will follow the incident response process established under the LGPD: notifying the ANPD and affected data subjects within the legal deadlines, with a clear description of what occurred, which data was affected, and what mitigation measures were taken.

The 3tbet retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. Retention periods vary by data type:

• Active account data: Retained for as long as the account is active and the user continues to use the platform.
• Financial transaction data: Retained for 5 years after the transaction, as required by Brazilian financial legislation and anti-money laundering regulations.
• KYC documents: Retained for 5 years after account closure, as required by financial compliance obligations.
• Betting history: Retained for 5 years after registration, for audit and dispute resolution purposes.
• Support communication records: Retained for 2 years after the support ticket is closed.
• Marketing data (with consent): Deleted immediately upon withdrawal of consent, or within a maximum of 30 calendar days.

Once retention periods expire, data is securely and irreversibly deleted from 3tbet, including backups, within a monthly cleanup cycle.

The 3tbet is intended exclusively for users aged 18 and over. Account creation by minors is strictly prohibited.

The 3tbet does not knowingly collect personal data from individuals under 18. If we identify that an account was created by a minor, the account will be immediately closed, all associated data will be deleted, and any deposits will be returned to the identified legal guardian.

If you suspect that a minor has created an account on 3tbet, please contact support at suporte@3tbet.best with the subject line "Minor Protection" so the case can be investigated as a priority.

Exercise your rights as a data subject at 3tbet is straightforward. Here is the process:

• By email: Send an email to suporte@3tbet.best with the subject line "LGPD — [request type]". Examples: "LGPD — Data Access", "LGPD — Data Deletion", "LGPD — Data Portability".
• Identification: To protect your account, we will include an identity verification step before processing any request. This ensures that only the legitimate account holder can exercise their rights.
• Response time: The 3tbet will respond to all requests within 15 business days, as required by the LGPD. Complex requests may require an extended timeframe, but the user will be notified within the initial 15 days.
• Free of charge: We do not charge any fee for exercising data subject rights. The service is completely free.

If you are not satisfied with the response from the 3tbet to a rights-exercise request, you may file a complaint directly with the National Data Protection Authority (ANPD) at anpd.gov.br.

In some cases, users' personal data may be transferred to servers or service providers located outside Brazil. This occurs primarily with cloud infrastructure providers and game providers with international servers.

The 3tbet ensures that all international transfers of personal data are carried out in compliance with Article 33 of the LGPD, through one of the following safeguards:

• Transfer to countries with an adequate level of data protection, as recognized by the ANPD.
• Standard data protection contractual clauses, approved by the ANPD.
• International data protection certifications recognized by the regulator.

For specific information about the destination countries for international transfers or the safeguards used, please contact the DPO at suporte@3tbet.best with the subject line "LGPD — International Transfers".

The 3tbet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered.

Material changes that affect your rights or the way your data is processed will be communicated by email and via an in-platform notification at least 7 days before they take effect. For urgent changes — such as those required in immediate response to a new legal obligation or a security incident — communication will occur as soon as possible after implementation.

The date of the last update to this policy is shown at the top of the document. Continued use of the platform after a new version takes effect constitutes acceptance of the changes made.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact 3tbet through the channels below:

• General email: suporte@3tbet.best
• DPO email (LGPD matters): suporte@3tbet.best — subject "LGPD"
• Live chat: Available directly on the platform when you are logged in, seven days a week.

If you prefer to file a complaint directly with the regulatory authority, you may contact the National Data Protection Authority (ANPD), which is responsible for overseeing compliance with the LGPD in Brazil. The ANPD's contact details are available on the official federal government portal.