995bet Privacy Policy — How Your Data Is Protected

995bet is a digital entertainment platform offering Sports Betting, Live Casino, slots, crash games, and other services for users aged 18 and over residing in Brazil. In the course of operating the platform, we collect and process personal data from our users — and this Privacy Policy is designed to explain that process clearly and transparently.

This policy was developed in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709, of August 14, 2018), which establishes the rights of personal data subjects and the obligations of data processors. 995bet acts as the controller of its users' personal data, as defined by the LGPD.

The scope of this policy covers all data collected during registration, platform use, financial transactions (deposits via Pix, boleto, card; withdrawals via Pix and TED), support interactions, and browsing on the 995bet website and app. Any third-party data occasionally provided by the user (such as friend referrals) is handled with the same level of care.

The controller responsible for processing personal data collected on the 995bet platform is the legal entity that operates the 995bet.life website. For the purposes of this policy, all references to "995bet" refer to that controlling entity.

The 995bet Data Protection Officer (DPO) can be reached at privacidade@995bet.life for specific matters relating to the processing of your personal data, the exercise of your rights as a data subject, or to report any privacy concern.

995bet collects personal data at different points during your interaction with the platform. Below, we detail the categories of data collected and when the collection takes place:

Sensitive data — such as health information, racial origin, or political or religious beliefs — is never collected by 995bet under any circumstances. If you voluntarily send us information of this kind (for example, in a message to our support team), it will be discarded and will not be added to any platform database.

995bet uses the personal data it collects solely for the purposes described below, all grounded in legitimate legal bases set out in the LGPD:

• Contract performance: Create and manage your account, process deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago, process withdrawals via Pix and TED to Nubank, Itaú, Bradesco, Banco do Brasil, and other banks, and record your sports bets and casino game results;
• Identity verification (KYC): To meet regulatory identity verification requirements prior to processing withdrawals, as required by the Brazilian regulated market;
• Fraud prevention: Detect suspicious behavior, use of multiple accounts, money laundering, or any activity that violates our Terms and Conditions or Brazilian law;
• Legal obligation compliance: Comply with requests from regulatory authorities, court orders, and tax obligations imposed by current Brazilian law;
• Responsible gambling: Monitor behavioral patterns that may indicate problem gambling and offer proactive support when needed, in accordance with our responsible gambling policies;
• Essential communications: Send notifications about your account, financial transaction confirmations, security alerts, and important platform updates;
• Marketing communications (with consent): Send promotions, bonus offers, and information about new games and features — only if you have consented to this type of communication. You can withdraw that consent at any time in your account settings;
• Platform improvement: Analyze aggregated and anonymized usage data to improve the experience, fix technical issues, and develop new features.

995bet does not sell users' personal data. Information is shared with third parties only in the following specific and limited situations:

• Payment processors: To process your financial transactions via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED bank transfer, we share only the strictly necessary data with our partner payment service providers. These partners are contractually required to use the data solely for the specified purpose and to apply security measures equivalent to our own;
• Game providers: To enable the operation of Live Casino tables, slots, crash games, and other games, we share account identifiers with the respective game providers (such as Evolution Gaming, Pragmatic Play, and others). This data does not include full financial information;
• Authorities and legal obligations: 995bet may be required to provide personal data to government authorities, regulatory bodies, or in compliance with a court order. We do so within the limits of the law, and never beyond what is required;
• Rights protection: When necessary to protect our legal rights, investigate fraud, or respond to litigation, we may share information with partner legal counsel — always in a restricted and controlled manner;
• Technology infrastructure providers: Companies that provide servers, cloud storage, and performance analytics tools have limited, contractually controlled access to the data required for the platform's technical operation.

In all data-sharing instances, 995bet enters into specific data processing agreements with the third parties involved, ensuring they adopt adequate security measures and use the data only for the agreed purposes.

995bet uses cookies and similar technologies to improve the platform experience, ensure correct technical functionality, and understand how users interact with the site and app. Below we explain the types of cookies we use:

• Essential cookies: Required for the platform's basic operation — maintaining login sessions, account preferences, and security. Without these cookies, the platform cannot function properly. They cannot be disabled;
• Performance cookies: They collect aggregated, anonymized data about how users navigate the site — which pages they visit, how long they spend in each section, and what technical errors occur. Used exclusively to improve the platform;
• Functionality cookies: They remember your usage preferences — such as language, configured betting limits, and preferred layout. They enhance your personalized experience without storing sensitive data;
• Responsible gambling cookies: Records active session time alerts and limit settings, so your responsible gambling preferences are preserved across sessions.

995bet does not use tracking cookies for third-party advertising, nor does it share cookie data with external advertising networks. You can manage your cookie preferences through the consent banner displayed on your first visit to the site, or through your browser settings (Chrome, Safari, Firefox) — though disabling essential cookies may prevent the platform from functioning.

Protecting your personal data is a core technical and organizational priority at 995bet. We have implemented multiple layers of security to ensure your information is safeguarded against unauthorized access, loss, alteration, or improper disclosure:

• Encryption in transit: All communication between your device and 995bet's servers is encrypted with SSL/TLS (HTTPS protocol with a 256-bit certificate). This covers the submission of registration data, financial transactions via Pix or card, and interactions with our support team;
• Encryption at rest: Sensitive data — especially CPF, financial information, and KYC documents — is stored with encryption in our databases. Access is restricted through strict permission controls;
• Two-factor authentication (2FA): Available and recommended for all accounts. When enabled, it requires additional confirmation via mobile for logins on new devices or withdrawal requests;
• Security monitoring: Our security team continuously monitors the platform to detect suspicious activity, unauthorized access attempts, and anomalous usage patterns;
• Restricted internal access: User data is accessible only to staff members who need it to perform their specific duties. All access is logged and auditable;
• Periodic security testing: 995bet's infrastructure undergoes regular penetration testing and security audits conducted by specialized firms.

In the event of a security incident that may affect your personal data, 995bet will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with details about the nature of the incident and the measures taken.

Brazil's General Data Protection Law gives you, as the owner of your personal data, a set of rights that 995bet is fully committed to upholding. See below what you can request at any time:

To exercise any of these rights, contact 995bet's DPO at privacidade@995bet.life or via live chat, available 24 hours a day. Requests are handled within up to 15 calendar days. We may ask you to verify your identity before processing certain requests, for security purposes.

995bet retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, or for the minimum period required by applicable Brazilian law. The general criteria are:

• Active account data: Retained for the full duration of the relationship — that is, for as long as your 995bet account is active and you continue using the platform;
• Financial and KYC data: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering obligations and Brazilian tax legislation;
• Betting and transaction records: Retained for a minimum of 5 years for regulatory audit purposes and dispute resolution;
• Marketing data (with consent withdrawn): Deleted or anonymized within 30 days of consent withdrawal;
• Technical and security logs: Retained for up to 12 months for security and incident investigation purposes;
• Data from accounts closed due to Terms violations: Retained for the applicable legal period and for as long as necessary to protect 995bet's rights in any disputes.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized so that it can no longer be linked to a specific individual.

The 995bet platform is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from individuals under 18, and we do not allow minors to create accounts or use our services.

If we determine that data from a minor was collected — whether due to false information provided during registration or any other reason — that data will be immediately deleted and the account will be closed. Any real-money deposit balance will be returned to the holder of the payment method used, following identity verification of the legal guardian.

In some situations, personal data from 995bet users may be transferred to or accessed by entities located outside Brazil — particularly in the context of technology infrastructure providers (cloud servers) and internationally certified Live Casino game providers.

When international data transfers occur, 995bet applies the following safeguards to ensure an adequate level of protection:

• Data transfer agreements that establish obligations equivalent to those of the LGPD for recipients;
• Transfers only to countries or organizations that offer a level of data protection equivalent to Brazil's, as assessed by the ANPD;
• Limitation to the minimum data necessary for the specific purpose of the transfer.

995bet does not transfer data to jurisdictions that do not offer adequate protections. If you have questions about specific international transfers involving your data, please contact our DPO at privacidade@995bet.life.

995bet may update this Privacy Policy periodically to reflect changes in our data processing practices, in response to regulatory updates (such as new ANPD regulations) or improvements to our internal processes.

When significant changes are made — those that materially affect how your data is collected or used — we will notify you by email at least 7 days before the new version takes effect. Minor wording changes or clarifications take effect on the date of publication, with the date at the top of the document updated accordingly.

The most current version of this Privacy Policy is always available at 995bet.life/privacy-policy. Continued use of the platform after a new version's effective date constitutes acceptance of the changes. If you do not agree with published changes, you may request account closure before the effective date.

For any matter relating to privacy, the processing of your personal data, or the exercise of your rights as a data subject, you can contact 995bet through the following channels:

• DPO (Data Protection Officer): privacidade@995bet.life — for formal LGPD-related requests, with a response time of up to 15 calendar days;
• General support: contato@995bet.life or live chat available 24 hours — for general privacy questions, with a response time of up to 24 hours;

If you believe your rights have been violated and have not received a satisfactory response from 995bet, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil.