Privacy Policy of bkbbet1 — Your Data Protected by the LGPD

1Data Controller

For the purposes of this Privacy Policy and the LGPD, bkbbet1 acts as the Controller of personal data collected on the platform. This means we are responsible for defining the purposes and means of processing your information.

Bkbbet1 provides a dedicated privacy channel for the exercise of data subject rights and for communications with the Data Protection Officer (DPO). Contact details are described in Section 15 of this policy.

2Personal Data We Collect

Bkbbet1 collects personal data in various ways throughout the user's experience on the platform. Below are the categories and types of data involved:

• Registration data: Full name, CPF, date of birth, email address, Brazilian mobile number, and account password (stored in encrypted form).
• Identity data (KYC): A photo ID (RG, CNH, or passport), proof of address, and, when required, a selfie for liveness verification.
• Financial data: Information on deposits and withdrawals made — amount, method (Pix, card, boleto, PicPay, Mercado Pago, TED), and transaction date and time. Full credit/debit card details are not stored directly by bkbbet1 — they are processed by PCI-DSS certified partners.
• Platform usage data: Betting and game history, access sessions, features used, account settings, and interactions with support.
• Technical data: IP address, device type, operating system, browser, approximate location data (geolocation), and session cookies.
• Communications: Records of support chat conversations, emails exchanged with the platform, and any forms submitted by the user.

Bkbbet1 applies the principle of data minimization — we collect only what is strictly necessary for the purposes described in this policy. We do not collect sensitive data (such as racial origin, religious belief, or health data) except in specific situations and with the data subject's explicit consent.

3Purposes of Data Processing

Every piece of data collected by bkbbet1 has one or more specific purposes. We do not use your information for any purpose incompatible with those listed below:

• Platform service delivery: Creating and managing your account, processing Sports Betting transactions (football, MMA, UFC, etc.), access to slots, crash games and Live Casino, and features such as cash out and live betting.
• Payment processing: Processing of deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; withdrawal processing; financial reconciliation; and issuance of receipts.
• Identity verification and compliance: Fulfillment of KYC (Know Your Customer) obligations, anti-money laundering and counter-terrorism financing compliance, and adherence to applicable regulations.
• User support: 24h chat support, resolution of queries, betting disputes, payment issues, and account access recovery.
• Platform Security: Detection and prevention of fraud, multiple accounts, bonus abuse, and other activities that violate bkbbet1's Terms and Conditions.
• Experience improvement: Platform usage analysis to identify improvements, personalized game and betting recommendations, and development of new features.
• Marketing communications: Sending information about promotions, bonuses, new games, and sporting events — exclusively to users who have opted in to receive these communications. You can unsubscribe at any time.
• Legal obligations: Compliance with court orders, regulatory authority requests, and obligations under applicable Brazilian law.

4Legal Basis for Processing (LGPD)

Every data processing operation carried out by bkbbet1 has a legal basis under the LGPD. The main legal bases we rely on are:

• Contract performance (Art. 7, V): Processing is necessary for the performance of the service agreement entered into when you create your account. This covers account creation, bet processing, payments, and support.
• Legal or regulatory obligation (Art. 7, II): When processing is required to fulfill legal obligations, such as anti-money laundering regulations, Central Bank rules on Pix payments, and tax requirements.
• Legitimate interest (Art. 7, IX): For purposes such as platform security, fraud detection, and service improvement, provided the interests and rights of data subjects are respected.
• Consent (Art. 7, I): For marketing communications and content personalization. Consent may be withdrawn at any time without affecting any other purposes of data processing.

5Data Sharing with Third Parties

Bkbbet1 does not sell, rent, or trade your personal data with third parties for their own commercial purposes. Data sharing occurs only in the following situations:

• Payment processors: Partners responsible for processing transactions via Pix, credit/debit card, boleto, PicPay, and Mercado Pago. These partners receive only the data necessary to complete the transaction and are contractually required to protect it.
• Certified game providers: Studios such as Pragmatic Play, PG Soft, NetEnt, and others require minimal session data to operate games on the platform. No financial data is shared with game providers.
• Identity verification services: Specialized KYC partners who assist with document validation and fraud prevention, under confidentiality and data protection agreements.
• Infrastructure and technology providers: Hosting, security, data analytics, and technical support providers that operate as data processors under contract and in accordance with bkbbet1's instructions.
• Legal and regulatory authorities: When required by law, court order, or applicable regulations in Brazil. bkbbet1 may be obligated to share data with the Conselho de Controle de Atividades Financeiras (COAF), Receita Federal, Ministério Público, or other competent authorities.

In all cases of third-party data sharing, bkbbet1 requires contractual guarantees that data will be handled with the same level of security and privacy applied internally.

6Information Security

User data security is a core priority for bkbbet1. The technical and organizational measures in place include:

• 256-bit SSL/TLS encryption: All communication between your device and bkbbet1's servers is encrypted, preventing data from being intercepted in transit.
• Secure password storage: Passwords are stored exclusively as hashed values with cryptographic salt — not even bkbbet1's internal team has access to your password in plain text.
• Internal access controls: Only employees with a legitimate business need are granted access to user data, with full audit logs maintained for every access.
• Continuous monitoring: Automated systems monitor suspicious activity, fraud attempts, and anomalous behavior in real time, 24 hours a day.
• Security audits: The platform is periodically audited by specialized information security teams to proactively identify and address vulnerabilities.
• Two-factor authentication (2FA): Available as an additional layer of security for the user's account.

7Cookies and Tracking Technologies

Bkbbet1 uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — session authentication, language preferences, and bet slip items. These cannot be disabled without compromising your ability to use the platform.
• Performance and analytics cookies: They collect aggregated, anonymous data on how users interact with the platform — which pages are most visited, session duration, errors encountered — so bkbbet1 can continuously improve the experience.
• Functionality cookies: They remember user preferences such as language, display settings, and favorite market selections to personalize the experience.
• Marketing cookies: Used only with your consent, to personalize communications and in-platform ads based on your usage history.

You can manage your cookie preferences directly in your browser — Chrome, Safari, Firefox, or any other. Blocking essential cookies may prevent the platform from functioning correctly. Analytics and marketing cookies can be declined without affecting core features.

8Data Relating to Minors

Bkbbet1 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If you are a parent or guardian and believe your child under 18 has created an account or provided data to the platform, please contact bkbbet1 support immediately.

If we identify that data from a minor was inadvertently collected, the account will be immediately closed and the data will be deleted as quickly as possible, in compliance with the LGPD and the Child and Adolescent Statute (ECA).

9Data Retention and Deletion

Bkbbet1 retains users' personal data for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations, whichever is longer. The general retention criteria are:

• Active account: Data is retained for the entire period during which the account remains active on the platform.
• After account closure: Identification and financial data are retained for up to 5 years after account closure, in compliance with Brazilian anti-money laundering legislation and tax regulations.
• Financial transaction records: Retained for the period defined by applicable regulations from the Banco Central do Brasil and Receita Federal.
• Support communications: Chat and email records with support are retained for 2 years after the interaction is closed, for audit purposes and resolution of any potential disputes.
• Non-essential cookie data: Deleted according to each cookie's lifespan, which ranges from the end of the session to 12 months.

After retention periods expire, data is securely deleted or irreversibly anonymized. Anonymized data does not qualify as personal data and may be retained indefinitely for statistical purposes.

10Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that bkbbet1 is committed to upholding. See below for your rights and how to exercise them:

Bkbbet1 responds to all rights requests within 15 business days from the date of receipt. In cases of high complexity, the deadline may be extended by an additional 15 business days, with prior notice to the data subject.

If you believe your rights have not been properly addressed, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for enforcing the LGPD in Brazil.

11International Data Transfer

Given the nature of bkbbet1's operations — which involves international game providers such as Pragmatic Play, PG Soft, NetEnt, and others, as well as cloud infrastructure — it may be necessary to transfer some personal data to servers or partners located outside Brazil.

Bkbbet1 conducts international data transfers only under the following conditions:

• To countries that provide an adequate level of data protection, as recognized by the ANPD;
• For companies that adopt standard contractual clauses approved by the ANPD or equivalent global corporate rules;
• When necessary for the performance of a contract to which the data subject is a party — such as game processing by certified international providers.

In all cases of international data transfer, bkbbet1 requires the recipient to provide safeguards equivalent to those established under the LGPD for the processing of the received data.

12Marketing Communications and Preferences

With your consent, bkbbet1 may send communications about promotions, reload bonuses, new games in the catalog, sporting events (such as UFC cards, Copa do Brasil, and Brasileirão Série A), and platform features. These are sent by email, push notifications (if enabled in your browser), and, with additional consent, via WhatsApp or SMS.

• You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in every email we send.
• Communication preferences can also be managed directly from the account dashboard on bkbbet1.
• Unsubscribing from marketing does not affect essential transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts.

13Security Incidents and Notification

Even with all security measures in place, security incidents such as unauthorized access, data breaches, or system compromise can occur. In the event of an incident affecting users' personal data, bkbbet1 will follow these procedures:

• Immediate containment: Once an incident is identified, bkbbet1's security team takes immediate action to contain the impact and prevent the situation from escalating.
• Impact assessment: Identification of affected data subjects, nature of the data involved, scope of the incident, and potential risks to those affected.
• Notification to the ANPD: Incidents posing significant risk or harm to data subjects are reported to the Autoridade Nacional de Proteção de Dados within the timeframe required by the LGPD.
• Notification to data subjects: Affected users will be notified by email with details about the incident, the data involved, potential risks, and the steps taken to mitigate the impact, whenever the LGPD requires such notification.
• Corrective measures: Implementation of technical and organizational fixes to eliminate the vulnerability that caused the incident and prevent recurrence.

If you suspect your account has been compromised, contact bkbbet1 support immediately via the 24h chat to block access and initiate an investigation.

14Changes to This Privacy Policy

Bkbbet1 may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, updates to applicable Brazilian legislation, or other relevant factors.

Significant changes will be communicated to users via their registered email and/or a prominent notice on the platform at least 7 days before the new terms take effect, except in cases of security urgency or legal obligation requiring immediate implementation.

The current version of this policy will always be available on this page, with the date of the last update indicated at the top. We recommend reviewing it periodically. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

15Contact, DPO and Privacy Channel

To exercise your rights as a data subject, request information about this policy, or report any privacy or data protection concern at bkbbet1, use the channels below:

• Privacy email (DPO): privacidade@bkbbet1.best
• General support (24h chat): Available directly on the platform, around the clock
• General support email: suporte@bkbbet1.best

Bkbbet1's Data Protection Officer (DPO) is responsible for overseeing compliance with this policy, responding to data subject requests, and serving as the point of contact with the National Data Protection Authority (ANPD).

If your requests are not resolved to your satisfaction, you have the right to file a complaint directly with the ANPD through the agency's official website (gov.br/anpd).