Fbbet9 Privacy Policy – LGPD Data Protection

The fbbet9 is the controller responsible for processing the personal data collected through the fbbet9.best and all associated digital channels. For the purposes of the LGPD, "controller" refers to the legal entity that makes decisions regarding the processing of personal data.

The fbbet9 is a sports betting and online casino platform intended exclusively for users aged 18 and over residing in Brazil. All operations, data collection, and data processing take place in compliance with current Brazilian law, in particular:

• General Personal Data Protection Law (LGPD — Law No. 13.709/2018);
• Consumer Protection Code (Law No. 8,078/1990);
• Brazilian Internet Act (Law No. 12,965/2014);
• Decree No. 8,771/2016, which regulates the Marco Civil da Internet.

For questions, requests, or to exercise your rights regarding the processing of personal data by fbbet9, please contact us at suporte@fbbet9.best or via the live chat available 24 hours a day on the platform.

The fbbet9 collects different categories of personal data depending on how the user interacts with the platform. Collection follows the data minimization principle set out in the LGPD — we only collect what is necessary for each specific purpose.

Data provided directly by the user at registration:

• Full name;
• Date of birth;
• CPF (Individual Taxpayer Registry — Receita Federal);
• Email address;
• Mobile phone number;
• Full residential address (zip code, street, number, city, state).

Data collected during the identity verification (KYC) process:

• Image of an identification document (RG, CNH, or passport);
• Proof of residence issued within the last 90 days;
• Selfie with ID document for ownership verification;
• In specific cases, proof of source of funds.

Financial data collected during transactions:

• Pix key (CPF, email, phone number, or random key);
• Bank details for TED transfers (branch, account number, bank);
• History of deposits and withdrawals made on the platform;
• Partial credit or debit card details (never the full card number or CVV).

Data collected automatically through use of the platform:

• IP address and approximate geographic location;
• Device type, operating system, and browser used;
• Betting history, games accessed, and platform sessions;
• Cookies and browsing data as described in section 7 of this policy;
• Access logs with date, time, and session duration.

The personal data collected by fbbet9 are used solely for the purposes listed below. Any use beyond these purposes requires either new explicit consent from the data subject or another legal basis provided for under the LGPD.

Marketing communications — such as emails about promotions, new catalog additions, or VIP tournaments — are sent only with the user's explicit consent. You may unsubscribe at any time via the opt-out link in any email or through your account settings on the fbbet9.

The LGPD requires that all personal data processing have a specific legal basis. The fbbet9 processes data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): data required to create and maintain the user account, process deposits and withdrawals via Pix, boleto, or card, and deliver the contracted services;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and reporting of suspicious activities to the relevant authorities in accordance with Brazilian law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, behavioral analysis to detect misuse, and continuous improvement of fbbet9;
• Consent (Art. 7, I): sending marketing communications, personalizing VIP Program promotions, and using non-essential cookies.

The fbbet9 does not sell, rent, or trade users' personal data. Sharing occurs only in the situations described below, all with a clear legal justification and contractual data protection guarantees from the recipients:

• Payment processors: partner financial institutions and payment operators to process transactions via Pix, boleto, credit/debit card, PicPay, and Mercado Pago. We share only the data strictly necessary for each transaction;
• Identity verification (KYC) providers: companies specializing in document verification and fraud prevention, which process data under confidentiality agreements and in full compliance with the LGPD;
• Partner game providers: Pragmatic Play, Evolution Gaming, Spribe, and other content providers of fbbet9 receive only the anonymized session identifier — never the user's name, CPF, or personal details;
• Government and regulatory authorities: when required by law, court order, or applicable Brazilian regulation, fbbet9 provides data requested by competent authorities;
• IT and security service providers: companies that support the technological infrastructure of the fbbet9, always under contract with strict data protection clauses and a prohibition on use for their own purposes.

Any data sharing beyond the situations listed above requires the data subject's express and specific consent, requested in advance and in a clear manner.

The fbbet9 applies technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. The main security measures in place include:

• 256-bit SSL encryption on all connections between the user and the servers of the fbbet9 — the same standard used by Brazil's largest banks;
• Encryption at rest for sensitive data stored in the platform's databases;
• Multi-layer authentication for internal system access by the fbbet9;
• Continuous monitoring of unauthorized access attempts and behavioral anomalies across systems;
• Role-based access control — each team member only has access to the data required for their specific role;
• Encrypted backups performed regularly with storage in a secure environment;
• Periodic audits information security measures carried out by a specialized team.

In the event of a security incident that may affect users' personal data, the fbbet9 is committed to notifying affected individuals and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes required by the LGPD, providing clear information about the nature of the incident and the measures taken to mitigate it.

The fbbet9 uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and, with your consent, personalize the content you see. The types of cookies used are:

• Essential cookies: required for basic platform functionality — session authentication, form security, and language preferences. These cannot be disabled without compromising your use of the platform;
• Performance and analytics cookies: collect anonymous information about how users browse the fbbet9 to identify pages with issues and optimize the experience. Used only with consent;
• Functionality cookies: remember user preferences such as display settings, favorite games, and recent browsing history. Used only with consent;
• Security cookies: detect fraudulent access attempts, bot behavior, and suspicious activity. They are essential for protecting your account.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies may affect some features of fbbet9, but does not prevent use of the main services.

The fbbet9 retains users' personal data for as long as necessary for each specific purpose, in compliance with applicable legal retention periods. The general retention criteria are:

• Active account data: retained for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering legal obligations (Law No. 9,613/1998);
• Financial transaction records: retained for 5 years after each transaction, as required by the regulations of the Banco Central do Brasil and the Receita Federal;
• Access logs: retained for 6 months in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), and may be extended by court order;
• Identity verification documents (KYC): retained for the duration of the account plus 5 years after closure;
• Marketing communication data: retained until consent is withdrawn by the user, with deletion completed within 30 days of the request.

Once the applicable retention periods have expired, the fbbet9 proceeds with secure deletion or irreversible anonymization of the data, ensuring it can no longer be linked to a specific individual.

The LGPD grants personal data subjects a robust set of rights, all of which can be exercised at any time with the fbbet9. They are:

• Right of access: you may request a copy of all personal data that fbbet9 holds about you;
• Right to rectification: you may request the update or correction of inaccurate or outdated personal data;
• Right to erasure: you may request the deletion of personal data processed on the basis of consent, except where retention is required by law;
• Right to data portability: you may request an export of your data in a structured format for transfer to another controller;
• Right to withdraw consent: you may withdraw consent given for processing based on this legal basis at any time, at no cost;
• Right to information: you may request information about who fbbet9 shared your data and for what reason;
• Right to object: you may object to the processing of your personal data carried out on the basis of legitimate interest when such processing violates the LGPD;
• Right to review automated decisions: you may request human review of decisions made solely on the basis of automated processing that affect your interests.

To exercise any of these rights, please contact the fbbet9 via live chat (available 24 hours) or by email at suporte@fbbet9.best. O fbbet9 responds to all requests within 15 business days, as required by the LGPD. Requests that require additional identity verification may take up to 30 days.

The fbbet9 is a platform intended exclusively for users aged 18 and over. The collection and processing of data from individuals under 18 is not permitted and is never done intentionally. If we identify that a minor's data has been collected by mistake, it will be deleted immediately and the associated account will be closed.

The fbbet9 applies age verification processes at registration, including CPF validation with the Receita Federal and, where necessary, identity document checks. These controls are designed to prevent minors from accessing the platform.

Parents or guardians who suspect that a minor has accessed the fbbet9 should contact us immediately via support chat or by email suporte@fbbet9.best. O fbbet9 will take the necessary measures as a priority, including account closure and data deletion.

Some of the services used by fbbet9 — such as game providers, cloud infrastructure, or identity verification systems — may involve transferring data to servers located outside Brazil. When this occurs, fbbet9 ensures that transfers comply with article 33 of the LGPD, through:

• Transfers to countries that provide a level of personal data protection equivalent to that required by the LGPD, as assessed by the ANPD;
• Specific contractual clauses with sufficient guarantees for data protection and data subjects' rights;
• Internationally recognized security certifications or standards adopted by the recipients.

In all cases, personal data transferred internationally maintains the same level of protection guaranteed by this Privacy Policy and the LGPD. Users may request information about specific international transfers by contacting fbbet9.

The fbbet9 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Any material changes will be communicated at least 10 calendar days in advance through:

• Email notification to the address registered on your account;
• Visible notice on the homepage and account dashboard at fbbet9;
• Updating the "last updated" date at the top of this page.

Continued use of the platform after the effective date of the updated terms constitutes acceptance of the changes. If you do not agree with the changes, you may close your account and request deletion of your data, subject to legally required retention periods.

For any questions, requests, or exercise of rights related to this Privacy Policy or the processing of personal data by the fbbet9, use the channels below:

• Live chat: available 24 hours a day directly on the fbbet9 — average response time under 5 minutes;
• Privacy email: suporte@fbbet9.best — use the subject line "LGPD Request" for priority handling. Response time: up to 15 calendar days;
• Personal VIP manager: Platinum and Diamond members receive priority support for privacy matters through the exclusive VIP support channel.

The fbbet9 has appointed a Data Protection Officer (DPO) as required by the LGPD for companies of significant size. The DPO serves as the official point of contact between fbbet9, data subjects, and the ANPD. Formal requests addressed to the DPO should be sent to suporte@fbbet9.best with the subject line "Attention: DPO".

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13,709/2018). Any disputes relating to data processing will be submitted to the competent courts of the user's city of residence, in accordance with the Consumer Protection Code.