92bet Privacy Policy — Data Protection in Brazil

Who We Are — The Data Controller

The 92bet (92bet.life) is the controller of its users' personal data, as defined under the LGPD. As the controller, we are responsible for all decisions regarding the processing of personal data collected during use of the platform — from account registration through account closure.

This Privacy Policy applies to all services available at 92bet.life: Sports Betting (Brasileirão Série A, Copa do Brasil, Copa Libertadores, NBB, European football, and more), Live Casino, slots, crash games, jackpots, roulette, and all other platform features.

The Data Protection Officer (DPO) of 92bet can be reached at the same email address. The DPO is responsible for ensuring data processing complies with the LGPD and for managing communications with the National Data Protection Authority (ANPD).

Data We Collect

The 92bet collects only the data necessary for the platform to function properly and to meet legal obligations. The categories of data collected and when each is required are listed below:

Identification and registration data:

• Full name, CPF, date of birth, and gender;
• Email address and Brazilian mobile number;
• Full residential address (for KYC verification);
• Photo ID (RG, CNH, or passport) and proof of address.

Financial data:

• Pix key used for deposits and withdrawals;
• Partial credit or debit card details (last 4 digits and card brand only — the full card number is never stored on our servers);
• Transaction history: deposits, withdrawals, and bets placed.

Platform usage data:

• IP address and approximate location (state/city in Brazil);
• Device type, operating system, and browser in use;
• Pages visited, session duration, and actions taken on the platform;
• Betting history, games accessed, and interactions with promotions.

How We Use Your Data

The data collected by the 92bet are used exclusively for the purposes described below. Personal data is never used for purposes unrelated to platform operations or legal obligations:

• Account creation and management: user identification, prevention of duplicate accounts, and access control;
• Identity verification (KYC): confirmation that the user is over 18 years of age and that the information provided is accurate, as required by regulation;
• Financial transaction processing: deposits via Pix, boleto bancário, credit card, PicPay, and Mercado Pago, as well as withdrawals to accounts held in the account holder's name;
• Fraud and money laundering prevention: monitoring of atypical betting and transaction patterns, in compliance with Brazilian legislation;
• Customer support: questions answered, bet disputes resolved, and technical support via 24-hour live chat;
• Account communications: deposit and withdrawal confirmations, security alerts, and updates to terms or privacy policy;
• Marketing communications: sending information about promotions, bonuses, and news — only to users who have not opted out (opt-out available at any time in the account dashboard);
• Continuous platform improvement: analysis of aggregated and anonymized data to understand how users interact with the platform and improve the overall experience.

The 92bet does not carry out automated decision-making with significant legal effects on users, except to block suspicious access attempts or detect fraud in real time — situations in which the user always has the right to human review by contacting support.

Legal Basis for Processing (LGPD)

All personal data processing carried out by the 92bet has a specific legal basis, as required by the LGPD. The legal bases used are:

• Contract performance — processing necessary to create and operate your account, and to handle bets, deposits, and withdrawals. This is the primary basis of the relationship between you and 92bet;
• Compliance with a legal obligation — identity verification, fraud prevention, and cooperation with Brazilian authorities as required by applicable law;
• Legitimate interest — platform security improvements, fraud prevention, and usage pattern analysis to enhance the user experience. 92bet's legitimate interest never overrides users' fundamental rights;
• Consent — for sending marketing communications and for the use of non-essential cookies. Consent may be withdrawn at any time without affecting access to the platform.

Data Sharing with Third Parties

The 92bet does not sell personal data. Information is only shared with third parties in the situations below, all of which are necessary for platform operations or legal compliance:

• Payment processors: companies that process financial transactions via Pix, boleto, credit card, PicPay, and Mercado Pago. These partners receive only the data necessary to complete the transaction and are contractually required to protect your information;
• Game providers: providers of slots, crash games, Live Casino, and other games available on 92bet receive only the minimum session data required to run the game — without access to the user's full personal data;
• Identity verification services: specialized KYC companies that assist with document verification and fraud prevention, contractually bound by the same data protection obligations as 92bet;
• Competent authorities: when required by court order or a substantiated request from a Brazilian public authority — 92bet responds to such requests within the limits and procedures established by law;
• National Data Protection Authority (ANPD): mandatory notification in the event of a security incident, within the timeframe set out by the LGPD.

All partners and service providers of the 92bet that have access to personal data are selected according to strict security criteria and sign contracts with specific data protection clauses, including a prohibition on using the information for any purpose beyond what was agreed.

Data Security and Storage

The 92bet adopts a set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS encryption on all transmissions between the user's device and 92bet's servers — data in transit is never sent as plain text;
• Encryption at rest for sensitive data stored on our servers, including identity documents submitted for KYC verification;
• Restricted access controls — only staff with a specific operational need have access to certain categories of personal data, with all access fully logged;
• Two-factor authentication (2FA) available to users in the account — we recommend enabling it for additional protection;
• Continuous security monitoring with detection of unauthorized access attempts and automatic responses to suspicious behavior;
• Encrypted and redundant backups to ensure data availability in the event of a technical failure.

Cookies & Tracking Technologies

The 92bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and, with your consent, display relevant communications. The types of cookies used are:

• Essential cookies: required for the platform to function — session authentication, bet slip maintenance, and preference settings. These cannot be disabled without affecting the core functionality of 92bet;
• Performance cookies: collect anonymized data on how users navigate the platform — pages visited, load times, and technical errors. They help improve performance, especially on mobile;
• Functionality cookies: remember user preferences, such as language, odds format, and game display settings;
• Marketing cookies (with consent): allow personalized communications about 92bet promotions and news to be displayed. Only activated with your explicit consent.

You can manage your cookie preferences at any time through your browser settings or via the privacy dashboard available in your 92bet account. 92bet. Disabling essential cookies may affect platform functionality — all others are optional and can be disabled without impacting core features.

Data Retention — How Long Your Data Is Kept

The 92bet retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. General retention periods are:

• Active account data: retained for as long as the account remains active. After voluntary account closure, data is anonymized or deleted within 90 days, subject to the exceptions listed below;
• KYC Documents: retained for up to 5 years after account closure, as required by Brazilian anti-money laundering legislation;
• Financial history: deposit, withdrawal, and betting records retained for up to 5 years for tax and regulatory audit purposes;
• Support records: support conversations retained for up to 2 years for dispute resolution purposes;
• Marketing data: deleted immediately upon withdrawal of consent, or within a maximum of 30 days of the request.

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 92bet, the following rights, which may be exercised at any time:

• Access: request a copy of all personal data that 92bet holds about you;
• Correction: request the correction of incomplete, outdated, or incorrect data;
• Anonymization, blocking, or deletion: request that data which is unnecessary or processed in violation of the LGPD be anonymized, blocked, or deleted;
• Portability: receive your data in a structured, machine-readable format for transfer to another controller — upon formal request;
• Withdrawal of consent: withdraw consent given for processing based on that legal basis, such as receiving marketing communications;
• Right to object: object to processing carried out on the basis of legitimate interest that disproportionately affects your rights;
• Review of automated decisions: request human review of any automated decision that produces an effect on you;
• Sharing information: find out which entities 92bet has shared your data with.

If you believe your rights have not been adequately addressed by the 92bet, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) through the authority's official website.

Users Under 18

The services of 92bet — Sports Betting, casino, slots, crash games, and any other platform feature — are strictly prohibited for users under 18. 92bet does not knowingly collect personal data from anyone under 18.

During registration, the user declares they are over 18 years of age. This information is verified during the KYC process, which requires an identity document showing date of birth. Accounts whose holders are identified as under 18 are immediately closed and any real-money balance is returned to the legal guardian upon proof of identity.

International Data Transfer

The 92bet may use infrastructure and technology services from companies operating servers outside Brazil — such as cloud computing providers and certain gaming technology partners. When this occurs, international data transfers are carried out only under the following conditions:

• The destination country offers an adequate level of personal data protection, as assessed by the ANPD or under legislation equivalent to the LGPD;
• Existence of specific contractual data protection clauses between 92bet and the provider, guaranteeing Brazilian users the same rights set out under the LGPD;
• Adoption of binding corporate rules by the vendor, where applicable.

The 92bet keeps records of international data transfers and makes this information available upon request through the platform's privacy channel.

Changes to this Privacy Policy

The 92bet may update this Privacy Policy periodically to reflect changes in our services, Brazilian legislation — including possible updates to the LGPD and ANPD regulations — or industry best practices.

Material changes will be communicated to your registered email at least 7 days before taking effect. Minor changes, such as text corrections or clarifications that do not affect user rights, may be made without prior notice, but the update date at the top of the document will always be revised.

The most current version of this policy is always available on this page, with the date of the last update shown at the top. The Brazilian Portuguese version is the official version and takes precedence over any translation.

Contact — Privacy & DPO Channel

For any questions relating to this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, please contact the 92bet through the channels below:

• Privacy email: suporte@92bet.life (subject: "Privacy Request" or "LGPD Rights");
• Live support chat: available 24 hours a day, 7 days a week, in Portuguese — accessible after logging in to the platform;
• Data Protection Officer (DPO): responsible for overseeing data processing and managing the communication channel with the ANPD — reachable at the same email address above.

The standard response time is up to 15 business days for formal requests via email. Urgent matters related to account security or unauthorized access are handled as a priority by the chat support team, with a response time of under 3 minutes during normal hours.

If you feel your rights have not been adequately addressed by the 92bet, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD). We are committed to open dialogue and will work to resolve any issue before that becomes necessary.

Version effective from: January 15, 2026 | Replaced version from: July 2026