Privacy Policy – 323bet: Your Data, Protected

1. Who We Are — Controller Identification

323bet is the brand responsible for operating the online entertainment platform available at 323bet.click. For the purposes of the General Data Protection Law (Lei nº 13.709/2018 — LGPD), 323bet acts as controller of personal data collected from players registered on the platform.

This means that 323bet determines the purposes and means by which your data is processed. Game providers, payment processors, and other partners that may receive data necessary to operate the service act as operators, under confidentiality agreements and compliance with Brazilian law.

The 323bet Data Protection Officer (DPO) is responsible for receiving and handling data subject requests and can be reached at privacidade@323bet.click, with a response time of up to 15 business days.

2. Personal Data We Collect

323bet collects the categories of data described below. Collection is proportionate — we only collect what is necessary for each specific purpose.

2.1 Registration and Identity Data

• Full name as it appears on an official ID;
• CPF (Cadastro de Pessoas Físicas da Receita Federal);
• Date of birth;
• Email address;
• Mobile number with Brazilian area code (DDD);
• Full residential address (street, number, complement, neighborhood, city, state, ZIP code).

2.2 Verification Documents (KYC)

• Image of an official government-issued ID (RG, CNH, or passport — front and back);
• Proof of address issued within the last 90 days;
• Proof of ownership of the Pix key used for deposits (bank statement or screenshot from a banking app showing your CPF).

2.3 Financial and Payment Data

• Registered Pix key (CPF, email, phone number, or random key);
• Deposit and withdrawal history (amount, date, time, transaction ID);
• Financial institution linked to the Pix key (Nubank, Itaú, Bradesco, Banco do Brasil, etc.).

323bet does not store full credit or debit card details. Should cards be accepted in the future, the integration will use tokenization through a PCI-DSS certified processor, and raw card data will never pass through 323bet's servers.

2.4 Platform Usage and Behavioral Data

• Full betting history (game, amount wagered, outcome, date, and time);
• Gaming sessions (start, end, duration, games accessed);
• Interactions with promotions and bonuses;
• Responsible gaming settings active on the account (limits, alerts, self-exclusion);
• Support contact history (tickets, chat transcripts).

2.5 Technical and Device Data

• IP address for each access;
• Device type (Android phone, iPhone, computer) and operating system;
• Browser used and version;
• Approximate geolocation data derived from IP address (state and city — not GPS);
• Cookie data and session identifiers (detailed in section 9).

3. How We Collect Data

3.1 Directly from you

Most data is provided directly by you during registration, KYC verification, deposits and withdrawals, gameplay, account preference settings, and support interactions. This data is submitted voluntarily — you decide what to provide, but withholding certain information (such as your CPF or KYC documents) will prevent access to specific platform features, such as making withdrawals.

3.2 Automatically during use

When you access 323bet through a mobile or desktop browser, we automatically collect technical device data, IP address, cookie data, and your browsing behavior within the platform. This collection is necessary to ensure account security, detect fraudulent activity, and improve the overall user experience.

3.3 Via partners and external systems

Game providers (Pragmatic Play, NetEnt, Play'n GO, Microgaming, Evolution Gaming, and others) share bet results and gaming session data with 323bet from their integrated platforms. The Pix processor confirms the status of financial transactions (approved, pending, declined) without sharing full banking details.

4. Purposes of Data Processing

323bet processes your personal data exclusively for the purposes listed below. No data is used for any purpose not covered by this Policy without prior notice and, where applicable, fresh consent.

5. Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a specific legal basis. 323bet relies on the following bases set out in Article 7 of Law No. 13.709/2018:

• Contract performance (Art. 7, V): processing required to deliver the services you agreed to when creating your account — registration, gameplay, and deposits and withdrawals via Pix;
• Compliance with a legal obligation (art. 7º, II): Mandatory KYC for anti-money laundering compliance (Lei nº 9.613/1998), retention of financial records, and responding to requests from authorities such as the Banco Central, Receita Federal, and Polícia Federal;
• Legitimate interest (art. 7º, IX): platform security, fraud detection, responsible gambling monitoring, and improvement of user experience — always balancing 323bet's interests against the data subject's rights;
• Consent (Art. 7, I): for marketing communications, personalized recommendations, and the use of analytics and advertising cookies. Consent may be withdrawn at any time without affecting your access to the platform.

6. Sharing Data with Third Parties

6.1 Who 323bet shares data with

323bet does not sell personal data. Sharing occurs exclusively in the situations below, with partners operating under confidentiality agreements and LGPD compliance obligations:

• Game providers: receive an anonymized player identifier, betting history, and limit settings in order to function correctly. They do not receive CPF numbers, identity documents, or complete financial data;
• Pix processors: receive your full name, CPF, and Pix key to validate and process financial transactions. They do not receive your betting history or any other account information;
• Infrastructure providers (cloud/hosting): store data on servers with restricted access, under contracts that prohibit use for any purpose other than hosting;
• Customer support tools: the chat platform uses account history as needed to resolve support tickets, without access to KYC documents or full payment data;
• Brazilian authorities: Banco Central, Receita Federal, Coaf (Conselho de Controle de Atividades Financeiras), Ministério da Fazenda, Polícia Federal, and other competent authorities, upon a legally grounded request.

6.2 What 323bet never does with your data

• Never sells personal data to advertisers or data brokers;
• Never shares data with other betting platforms or competing casinos;
• Never uses data from users under 18 for any purpose — accounts identified as belonging to minors are closed and their data deleted in accordance with the minimum legal retention period;
• Never uses health-related data collected in a responsible gambling context to deny services or discriminate against the player.

7. Data Retention and Deletion

7.1 How long we retain your data

Retention periods vary according to the data category and the applicable legal obligation:

7.2 After account closure

When an account is closed — by the player or by 323bet — data with no legal retention obligation is anonymized or deleted within 90 days. Data subject to minimum legal retention periods is kept in a segregated repository, inaccessible for commercial or operational use, solely to fulfill current legal obligations.

8. Information Security

323bet implements technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or accidental destruction. The main measures currently in place are described below.

8.1 In the event of a security incident

If 323bet identifies a data breach that may affect your rights and freedoms, you will be notified by email within a maximum of 72 hours after the incident is confirmed — as required by the LGPD. The notification will include the nature of the incident, the data affected, the measures taken, and the DPO's contact details for further clarification. The National Data Protection Authority (ANPD) will also be notified in accordance with regulatory deadlines.

9. Cookies and Tracking Technologies

323bet uses cookies — small text files stored in your browser — and similar technologies to ensure the platform works properly, analyze performance, and, with your consent, personalize your experience. See the types of cookies used:

9.1 How to manage your cookies

You can manage your cookie preferences at any time through the account settings panel or your browser settings. Disabling essential cookies will prevent use of the platform. Disabling optional cookies does not affect access to games or the core features of 323bet.

10. Data of Minors

323bet is an adult entertainment platform, strictly restricted to individuals aged 18 and over. We do not intentionally collect, process, or store personal data from anyone under 18.

If 323bet determines that an account belongs to a minor — by any means, including KYC verification, third-party reports, or data inconsistencies — the account will be immediately closed, the balance held for review, and the minor's data handled with the highest level of protection, with deletion carried out within the minimum period permitted by law.

If you are a parent or guardian and believe a minor in your care has created a 323bet account, contact us immediately at privacidade@323bet.click or via live chat with the account details so we can expedite closure.

11. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject whose data is processed by 323bet, a set of rights that can be exercised at any time, free of charge. See below for each right and how to exercise it:

11.1 How to exercise your rights

Send your request to privacidade@323bet.click with the subject line "LGPD Request — [your right]", including your full name, CPF, and a detailed description of what you are requesting. 323bet will respond within 15 business days. For more urgent requests, the 24h live chat can also initiate the process, which will be completed within the legal deadline.

12. International Data Transfers

Some game providers that partner with 323bet (such as Pragmatic Play, NetEnt, and Evolution Gaming) have server infrastructure outside Brazil. When data is transmitted to these overseas partners, 323bet ensures the transfer takes place under one of the safeguards set out in Article 33 of the LGPD:

• Country with a level of data protection recognized as adequate by the ANPD; or
• Standard contractual clauses that guarantee data subjects rights equivalent to those under the LGPD; or
• Global corporate rules (BCR — Binding Corporate Rules) approved by the competent supervisory authority in the recipient country.

Data transferred for Pix processing remains in Brazil, as Pix is an exclusively domestic system regulated by the Banco Central do Brasil. Financial transaction data in BRL does not leave Brazilian jurisdiction.

13. Changes to This Privacy Policy

This Policy may be updated at any time to reflect changes in data processing practices, applicable Brazilian legislation, or platform features. Material changes will be communicated by email to all active registered players at least 15 calendar days before taking effect.

For minor changes, such as correcting typos or clarifications that do not affect rights or obligations, updates may be made without prior notice. The "Last updated" date visible at the top of this page will always indicate when the current version was published.

Continued use of the platform after the effective date of any changes constitutes tacit acceptance of the updated version. If you disagree with any change, you may close your account as described in the Terms and Conditions before the effective date.

14. Contact, DPO and Support Channel

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to submit a complaint regarding 323bet's handling of your data, please use the channels below:

• DPO email (privacy matters): privacidade@323bet.click — response time: up to 15 business days;
• General email (support and other inquiries): contato@323bet.click — response time: up to 2 business days;
• 24h live chat: available on the platform after login, with an average response time under 2 minutes for operational issues.

If you are not satisfied with 323bet's response to a rights request, you may file a formal complaint with the National Data Protection Authority (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil. The ANPD's contact information is available on the official federal government portal.