Bet317 Privacy Policy – LGPD Data Protection

The bet317 (accessible at bet317.best) is the controller of personal data collected during use of the platform, as defined by the LGPD (Law No. 13.709/2018). This means that the bet317 is responsible for deciding how, when, and why your data is processed — and for ensuring that such processing always stays within the legal limits and purposes set out in this Privacy Policy.

This Policy applies to all users of the bet317, regardless of the device used to access it — Android phone, iPhone, tablet, or computer — and regardless of the services used, whether Sports Betting (Brasileirão, Copa do Brasil, Libertadores, e-sports), Live Casino, crash games, slots, or any other feature available on the platform.

To get in touch regarding privacy matters and your rights as a data subject, please use the channels listed in Section 13 of this Policy.

The bet317 collects data in three main situations: when you voluntarily provide it during registration or use of the platform, automatically during browsing, and occasionally through third parties for verification purposes.

Data you provide:

• Registration: full name, CPF, date of birth, email address, mobile number, and full residential address. This information is required for account creation and eligibility verification.
• Identity verification (KYC): a photo ID (national ID card, driver's license, or passport) and proof of address, requested when necessary to process withdrawals or verify identity as required by regulation.
• Financial data: Pix key, credit or debit card details (processed by a PCI-DSS certified gateway — bet317 does not store full card numbers), bank account for TED transfers. PicPay and Mercado Pago data is managed by their respective platforms.
• Communications: content of messages exchanged with support via chat or email, retained for record-keeping and service improvement purposes.

Automatically collected data:

• IP address, browser type and version, operating system, and device model.
• In-platform browsing data: pages visited, session duration, features used, access times, and clicks.
• Betting and gaming data: complete history of bets placed, amounts wagered, markets selected, outcomes, and balances.
• Cookies and similar technologies — detailed in Section 6.

The bet317 uses your personal data exclusively for legitimate, proportionate, and necessary purposes related to the operation of the platform. No data is used for purposes other than those listed below without prior notice and, where applicable, renewed consent from the data subject:

• Account creation and management: uniquely identify the user, ensure that only one account exists per CPF, and verify eligibility to use the platform (minimum age of 18 and residence in Brazil).
• Payment processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfers through banks such as Nubank, Itaú, Bradesco, and Banco do Brasil; process withdrawals and maintain transaction records for accounting and regulatory purposes.
• Service delivery: provide Sports Betting, Live Casino, crash games, e-sports, and all features of the bet317 platform; personalize the experience based on usage history.
• Operational communications: send notifications about bets, withdrawals, bonuses, account updates, and important security alerts via e-mail, SMS, or in-app notifications.
• Security and fraud prevention: detect and prevent fraud attempts, money laundering, bonus abuse, and violations of the Terms and Conditions; fulfill legal KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations.
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling risk and trigger support protocols in line with bet317's responsible gambling policy.
• Platform improvement: analyze usage data in aggregated and anonymized form to improve features, fix bugs, and develop new functionality.
• Marketing (with consent): send communications about promotions, bonuses, and personalized offers — only to users who have opted in to receive this type of communication. You can unsubscribe at any time through your account dashboard or by contacting support.

The LGPD requires that all personal data processing have a justified legal basis. The bet317 processes your data on the basis of the following grounds set out in Art. 7º of Law No. 13.709/2018:

• Contract performance (Art. 7, V): processing is necessary to provide the services you contracted when creating your account — including sports betting, live casino, crash games, and payment processing. Without this data, the service simply cannot be delivered.
• Legal or regulatory obligation (Art. 7º, II): bet317 is legally required to collect and retain certain data for KYC, AML, anti-money laundering purposes, and reporting to competent authorities when required by court order.
• Legitimate interest (Art. 7º, IX): browsing and usage behavior data are processed based on bet317's legitimate interest in ensuring platform security, detecting fraud, and improving the user experience — always proportionately and with respect for data subjects' rights.
• Consent (Art. 7, I): for marketing communications and advanced personalization based on declared preferences, processing is carried out on the basis of your explicit consent, which may be withdrawn at any time.

The bet317 never sells your personal data. Information is shared with third parties exclusively in the situations below, always limited to what is strictly necessary for the specific purpose:

• Payment processors: financial data is shared with the institutions responsible for processing transactions — such as PCI-DSS certified credit card gateways, partner banks for TED transfers, and the PicPay and Mercado Pago platforms — solely to process deposits and withdrawals.
• Game providers: for live casino games and crash games, the minimum necessary data (session identifier and balance) is shared with technology providers (such as Evolution Gaming, Pragmatic Play Live, and Spribe) solely to operate the games. These providers are contractually prohibited from using the data for any other purpose.
• Identity verification (KYC): documents submitted for verification may be processed by partners specialized in identity verification, under a confidentiality agreement and in compliance with the LGPD.
• Authorities and legal obligations: when required by law, court order, or ruling from a competent regulatory authority, bet317 provides the necessary information and has no grounds to refuse. Users are informed whenever legally permitted.
• Infrastructure providers: cloud data hosting services under data processing agreements that ensure compliance with the same security and privacy obligations bet317 holds itself to.

All third parties that receive data from the bet317 are bound by contractual agreements that prohibit them from using this information for any purpose other than the one specified, ensuring the same level of protection guaranteed by this Policy.

The bet317 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping the session active, processing bets, and accessing the account dashboard. They cannot be disabled without affecting your ability to use the platform.
• Performance cookies: collect anonymous information about how users navigate the site — which pages are visited most, where errors occur, and page load times — to help improve the platform.
• Functional cookies: remember user preferences such as language, interface settings, and filters applied in the Sports Betting sections, so you don't have to reconfigure them on every visit.
• Marketing cookies (with consent): used to display relevant communications about bet317 promotions and bonuses. They are only activated upon the user's explicit consent.

You can manage your cookie preferences at any time through the account settings panel or through your browser settings on your phone or computer. Disabling essential cookies may prevent access to certain platform features.

The bet317 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction. The main security measures in place include:

• 256-bit SSL/TLS Encryption across all communications between your device and bet317's servers. Every data transmission — login, financial transactions, bets, and personal information — is encrypted.
• Secure password storage with high-cost cryptographic hashing. bet317 never stores passwords in plain text and has no access to your password — only to its encrypted form.
• Internal access controls based on the principle of least privilege: each bet317 team member has access only to the data strictly necessary for their specific role.
• Continuous monitoring of suspicious access attempts, anomalous activity, and patterns that may indicate attacks or misuse, with immediate response to identified incidents.
• Financial data storage in compliance with PCI-DSS standards for card data. Full card numbers are never stored on bet317's servers.
• Regular security testing, including vulnerability assessments and penetration testing carried out by specialized teams.

In the event of a security incident that may affect your personal data, the bet317 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected data subjects within the deadlines set by the LGPD, with information about the nature of the incident and the measures taken.

The bet317 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods. The criteria used to determine retention periods are:

• Registration and active account data: retained for as long as the account is active. After voluntary account closure, data is anonymized or deleted within 90 days, unless retention is required by law.
• Financial transaction records: retained for a minimum of 5 years from the transaction date, as required by Brazilian anti-money laundering legislation (Law No. 9.613/1998) and the regulations of the Banco Central do Brasil.
• Identity verification documents (KYC): retained for the period required by regulations applicable to the betting market, generally 5 years after account closure.
• Betting and gaming data: retained for 5 years for audit purposes, dispute resolution, and compliance with regulatory obligations.
• Support communication logs: retained for 2 years to ensure service quality and resolution of any complaints.
• Marketing data (where applicable): deleted or anonymized immediately upon withdrawal of consent, except where necessary to demonstrate that consent was previously given.

At the end of the applicable retention periods, data is securely deleted or irreversibly anonymized so that the data subject can no longer be identified.

The LGPD grants you, as the data subject, a set of rights that the bet317 is committed to respecting and facilitating the exercise of your rights. All of your rights and how to exercise them are listed below:

• Access (Art. 18, I and II): you may request a complete copy of all personal data bet317 holds about you, including confirmation that such processing exists.
• Correction (Art. 18, III): if any personal data is incomplete, outdated, or incorrect, you may request a correction at any time through your account panel or via support.
• Erasure (Art. 18, VI): you may request the deletion of data processed on the basis of consent. For data processed under other legal grounds (such as a legal obligation), deletion is subject to regulatory retention periods.
• Portability (Art. 18, V): you may request your data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Withdrawal of consent (Art. 18, IX): where processing is based on consent, you may withdraw it at any time at no cost. Withdrawal does not affect the legality of any processing carried out before it.
• Objection (Art. 18, VII): you may object to processing carried out on the basis of legitimate interest when you believe it infringes your fundamental rights.
• Information on sharing (Art. 18, VII): you may request a list of the entities with which bet317 has shared your data.
• Complaint to the ANPD (Art. 18, §1º): you have the right to lodge a complaint with the National Data Protection Authority (ANPD) if you believe your rights are being violated.

To exercise any of these rights, please contact the bet317 via live chat (available 24 hours a day) or by email at contato@bet317.best. The response deadline is up to 15 calendar days, as set out in the LGPD. Identity verification may be required before the request is processed.

The bet317 is a betting and gaming platform strictly prohibited for users under 18. bet317 does not knowingly collect, store, or process personal data from anyone under the age of 18.

During registration, bet317 verifies the date of birth provided and runs additional checks to confirm the user is of legal age. Accounts created with a false date of birth to bypass this requirement are closed immediately upon detection, with all balances and pending bets cancelled.

If the bet317 identify that data from a user under 18 has been collected, that data will be deleted immediately. If you suspect that someone under 18 has created an account on the platform, please notify our support team right away via live chat or by emailing contato@bet317.best.

Due to the use of globally operating technology providers — such as cloud hosting services and international live game providers — some data from bet317 may be transferred to or accessed by systems located outside Brazil.

When this occurs, the bet317 ensures that international transfers of personal data occur only to countries or organizations that offer an adequate level of protection, as assessed by the ANPD, or under specific contractual clauses that impose obligations equivalent to those required by the LGPD on the data recipient.

• All contracts with international vendors include data protection clauses aligned with the LGPD.
• Bet317 conducts periodic vendor assessments to ensure ongoing compliance.
• You may request information about specific international transfers through the DPO contact channel indicated in Section 13.

The bet317 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. The date of the last update is always shown at the top of this page and in the version label at the beginning of the document.

For substantial changes — those that reduce your rights as a data subject or significantly expand the purposes of processing — the bet317 will notify active users by email at least 15 days before a new version takes effect. For minor changes or clarifications that do not affect the substance of data processing, updating the date on this page is sufficient.

Continued use of the platform bet317 after the effective date of a new version of this Policy constitutes acceptance of the changes. If you disagree with any change, you may request account closure before the new version's effective date, with the right to withdraw your available real balance in accordance with the Terms and Conditions.

The bet317 has appointed a Data Protection Officer (DPO) as required by the LGPD, to handle requests related to personal data processing, receive communications from the ANPD, and provide guidance to team members and users on privacy best practices.

To exercise your rights as a data subject, clarify questions about this Policy, or report privacy concerns regarding your data on the bet317, use the following channels:

• Live chat: available 24/7, directly on the platform. For quick questions and urgent requests — response time under 2 minutes in most cases.
• DPO Email: contato@bet317.best — please use the subject line "LGPD Request" for priority handling. Response time of up to 15 calendar days as required by the LGPD.

If you are not satisfied with the response from the bet317 regarding a request related to your rights as a data subject, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.