Pg8bet Privacy Policy: Your Data, Protected

The pg8bet collects the personal data necessary to deliver its services securely, meet legal obligations, and personalize the player experience. The data collected falls into three main categories:

Data provided directly by the user at registration:

• Full name as it appears on a government-issued ID;
• CPF (Individual Taxpayer Registration);
• Date of birth;
• Full residential address (street, number, unit, neighborhood, city, state, ZIP code);
• Active email address;
• Brazilian mobile number;
• Identity documents submitted during the KYC process (national ID, driver's license, or passport) and proof of address.

Financial and transaction data:

• Pix key, bank details for withdrawal processing (bank, branch, account number, CPF);
• History of deposits, withdrawals, and bets placed on the platform;
• Payment method used in each transaction (Pix, boleto, credit/debit card, PicPay, Mercado Pago, TED).

Usage and browsing data collected automatically:

• IP address and approximate geographic location;
• Device type, operating system, and browser used;
• Pages visited, session duration, and features accessed;
• Cookies and session identifiers (detailed in section 6).

The pg8bet collects only the data strictly necessary for the purposes described in this policy, in line with the data minimization principle established by the LGPD.

The personal data collected by pg8bet are used exclusively for the following purposes, each grounded in a legal basis established by the LGPD:

• Create and manage your account — verify your identity, process your registration, and keep your profile up to date on the platform;
• Process deposits and withdrawals — securely execute financial transactions via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED;
• Identity verification (KYC) — confirm that each account belongs to a single, real account holder aged 18 or over, as required by regulation;
• Prevent fraud and money laundering — monitor suspicious activity and fulfill legal obligations for the prevention of financial crimes (AML/CFT);
• Offer player support — identify the user when they contact support and resolve questions and issues efficiently;
• Personalize the experience — adapt game suggestions, promotions, and communications based on your usage history, always respecting your preferences;
• Operational communications — send notifications about transactions, platform updates, changes to terms, and promotions — only when you have opted in to receive them;
• Comply with legal obligations — comply with requests from judicial, regulatory, or tax authorities in accordance with applicable Brazilian law;
• Improve the platform — analyze usage patterns in aggregated, anonymized form to improve features and the overall experience on the pg8bet.

The pg8bet does not use your personal data for purposes not described above without obtaining your prior and express consent.

The pg8bet does not sell, rent, or trade users' personal data with third parties. Sharing occurs only in the situations described below, always for the purpose of operating the platform or fulfilling legal obligations:

• Payment processors: required financial data is shared with the payment gateways that process transactions via Pix, boleto, card, PicPay, Mercado Pago, and TED. All processors are contractually required to handle data with the same level of protection mandated by the LGPD;
• Identity verification (KYC) providers: specialized document verification partners receive only the data strictly necessary to confirm the user's identity, with no access to betting history or account balance;
• Technology and infrastructure providers: companies providing servers, cloud hosting, and security analytics tools have limited technical access to data — only to the extent required to deliver the service and under a confidentiality agreement;
• Competent authorities: pg8bet complies with court orders, requests from regulatory bodies, and inquiries from Brazilian tax authorities as required by law — user consent is not required in these situations;
• Game and casino providers: in some Live Casino games, minimal technical data (anonymous session identifier) may be shared with the game provider for technical operation. No identifiable personal data is transmitted beyond what is strictly necessary.

In all cases of data sharing, the pg8bet contractually requires all third parties involved to maintain data protection standards compatible with the LGPD and to use the information solely for the specific purpose that justified the sharing.

The pg8bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations. The general retention periods are:

• Registration and identity data (KYC): retained for at least 5 years after account closure, in accordance with anti-money laundering requirements (Law No. 9.613/1998) and industry regulations;
• Financial transaction history: retained for 5 years for tax audit purposes, regulatory compliance, and dispute resolution;
• Betting records and gaming activity: retained for 5 years after the last account activity;
• Browsing data and cookies: retained as described in the cookies section, generally for short session periods or up to 12 months for analytical cookies;
• Support communications: kept for up to 2 years after the case is resolved, for reference and quality control;
• Data from accounts closed by self-exclusion: retained for the minimum legal period to prevent new registrations using the same CPF, protecting the user themselves.

Once the applicable retention periods expire, data is securely deleted or permanently anonymized, making it impossible to identify the data subject. The pg8bet conducts periodic reviews of stored data to ensure that only necessary information is retained.

Protecting player data is a technical and organizational priority at pg8bet. The security measures in place include:

• 256-bit SSL/TLS Encryption across all communications between the user's device and the platform's servers — the same standard used by Brazil's largest digital banks;
• Encryption at rest for sensitive data stored in our databases, including financial information and identity documents;
• Role-based access control: only staff with a proven operational need have access to personal data, and that access is logged and audited;
• Two-factor authentication (2FA) available to users and mandatory for all staff with access to internal systems;
• Continuous threat monitoring: automated systems monitor suspicious access attempts, intrusion attempts, and anomalous behavior 24 hours a day;
• Penetration testing conducted periodically by independent specialized firms to identify and remediate vulnerabilities before they can be exploited;
• Incident response plan: in the event of a data breach, the pg8bet will notify the National Data Protection Authority (ANPD) and affected users within the deadlines established by the LGPD.

Despite the robust measures in place, no system is 100% breach-proof. The pg8bet recommends that users also follow good security practices: use a strong, unique password for your account, enable 2FA, and never share your credentials with anyone.

The pg8bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and collect aggregated analytical data. Learn about the types used:

• Essential cookies: essential for the platform's basic operation — keeping your session active after login, processing deposits and withdrawals securely, and saving your language preferences. These cannot be disabled without affecting your use of the platform;
• Performance and analytics cookies: collect data on how users navigate the platform — most visited pages, session duration, errors encountered — always in aggregate and anonymized form. Used exclusively to improve the pg8bet;
• Functionality cookies: store your preferences — such as your preferred view in the tips section or your favorite slots games — to personalize your experience;
• Security cookies: detect suspicious login behavior and unauthorized access attempts, keeping your account protected.

You can manage your cookie preferences in your browser settings. Disabling non-essential cookies does not affect access to the platform's core features. Disabling essential cookies may prevent login and transactions from functioning correctly.

The pg8bet does not use third-party advertising tracking pixels or share browsing data with external advertising platforms.

The General Data Protection Law (LGPD — Law No. 13.709/2018) guarantees you, as a personal data subject, the following rights regarding information processed by the pg8bet:

• Access: request confirmation that your data is being processed and obtain a copy of the information stored about you;
• Correction: request the update or correction of incomplete, inaccurate, or outdated data;
• Deletion: request the deletion of your personal data when there is no longer a legal basis for its processing — except for data that pg8bet is required to retain for a period defined by law;
• Anonymization: request that unnecessary data be anonymized, making your identification impossible;
• Portability: receive your data in a structured, machine-readable format for transfer to another controller, where technically feasible;
• Data sharing information: find out which third parties pg8bet has shared your data with and for what purpose;
• Consent withdrawal: withdraw consent previously given for specific purposes, such as receiving marketing communications;
• Objection: object to processing carried out on the basis of legitimate interest when there is a relevant personal reason.

To exercise any of these rights, please contact the pg8bet via email contato@pg8bet.best with the subject line "LGPD Request" and include your full name and CPF. The pg8bet responds to all requests within the legal deadline of 15 days. For more complex cases, the deadline may be extended with written justification.

If you feel your rights have not been respected, you may also file a complaint with the National Data Protection Authority (ANPD) through the authority's official website.

The pg8bet is a platform exclusively intended for users aged 18 and over. Registration by minors is strictly prohibited and no data from minors is intentionally collected.

The measures in place to prevent access by minors include:

• Mandatory CPF collection at registration — which allows us to verify the account holder's date of birth against official databases;
• Identity verification (KYC) process with photo ID analysis, where each user's date of birth is individually confirmed;
• Monitoring of behavioral patterns that may indicate use by a minor.

If the pg8bet identify that data from a minor was inadvertently collected — for example, through use of a third party's adult CPF — the account will be immediately suspended, the data deleted, and the balance frozen for review. Legal guardians who identify misuse by a minor in their care must immediately contact pg8bet support. pg8bet via live chat or by emailing contato@pg8bet.best.

In certain operational situations, the data of pg8bet players pg8bet may be transferred to servers or partners located outside Brazil — for example, cloud infrastructure providers or certain live casino game providers.

In these cases, the pg8bet adopts the following safeguards to protect your data:

• Transfers to countries or international organizations that the ANPD recognizes as providing a level of data protection adequate to the LGPD;
• Specific contractual data protection clauses with international recipients, ensuring a level of protection equivalent to that required under Brazilian law;
• Data minimization for transfers — only the information strictly necessary for the specific service being provided is sent abroad.

The pg8bet prioritizes, wherever possible, providers with infrastructure based in Brazil or in European Union countries with data protection regulations internationally recognized as adequate.

The pg8bet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official channel for:

• Questions about how the platform handles personal data;
• Requests to exercise data subject rights (access, correction, deletion, portability, etc.);
• Complaints about privacy practices;
• Communications from the National Data Protection Authority (ANPD).

How to contact pg8bet's DPO:

• Email: contato@pg8bet.best (subject: "DPO — Privacy Request")
• Live chat: available 24 hours on the platform — request a transfer to the privacy team

The DPO responds to all requests within the legal deadline of 15 calendar days. For complex requests requiring deeper legal or technical analysis, the deadline may be extended — but you will always be kept informed of the progress and the new estimated timeframe. No privacy-related request goes unanswered at pg8bet.

The pg8bet may update this Privacy Policy periodically to reflect legal, regulatory, or platform practice changes. Any significant update will be communicated to users at least 7 days in advance, by email and with a visible notice on the platform.

The date of the last update is always shown at the top of this document. We recommend reviewing this policy periodically to stay informed about how your data is handled.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy. If you disagree with the changes, you have the right to close your account before the effective date — your available real BRL balance will be refunded in full via Pix.

Previous versions of this Privacy Policy are archived by the pg8bet and may be made available upon request to the DPO. This document is governed by the laws of the Federative Republic of Brazil, with jurisdiction in the court of the company's registered address for the resolution of any disputes.