Privacy Policy 662bet — How We Protect Your Data

1Who we are — the data controller

This Privacy Policy describes how 662bet, operator of the platform available at https://662bet.life, processes the personal data of registered users and visitors. For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), 662bet is the controller of the personal data collected on its platform — meaning who determines the purpose and means of processing that information.

A 662bet operates as a Sports Betting and Live Casino platform focused on the Brazilian market. All services are offered in BRL and through local payment methods such as Pix, boleto bancário, and credit/debit card. The data processing described in this policy applies to all user interactions with the platform — from registration to withdrawal requests, including Sports Betting on the Brasileirão, slots sessions, live blackjack, and any other available features.

2Data we collect

A 662bet follows the principle of data minimization — we collect only the data strictly necessary for the purposes described in this policy. Below are the categories of personal data processed by the platform:

3How we collect your data

A 662bet collects personal data through three main channels:

Information you provide directly

• Registration form (name, CPF, e-mail, phone number, date of birth, address);
• KYC identity verification process (document submission);
• Registration of payment method (Pix key, card details);
• Communications with support via live chat or email;
• Participation in promotions, surveys, or loyalty programs.

Automatically collected information

• Technical device data when accessing the platform (IP address, browser, operating system, screen resolution);
• Session cookies and behavioral analytics cookies (see section 10);
• Automatic logging of all bets, deposits, withdrawals, and gaming sessions;
• Access logs for security and fraud detection purposes.

Information received from third parties

• Identity verification with the Federal Revenue Service (CPF validation);
• Payment information from processors (Pix, card acquirers);
• Anti-fraud verification data from partners specialized in digital KYC;
• Data from regulatory restriction lists (BACEN, COAF) for anti-money laundering purposes.

4Legal bases for processing

All personal data processing by 662bet is grounded in one of the legal bases set out in Article 7 of the LGPD. Below are the bases used and how they apply to our operations:

662bet does not process any personal data without a valid legal basis. If you have questions about which legal basis applies to a specific processing activity, please reach out at suporte@662bet.life.

5Purposes of processing

The personal data collected by 662bet are used exclusively for the following purposes:

Platform operation

• Creation, management, and verification of the user's account;
• Processing of deposits and withdrawals via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago;
• Registration and settlement of Sports Betting (Brasileirão, Copa do Brasil, Libertadores, volleyball, e-sports, MMA/UFC and others);
• Providing live casino games, slots, and crash games;
• Customer support via live chat and e-mail.

Security and legal compliance

• Identity verification (KYC) as required by regulations;
• Prevention and detection of fraud, money laundering, and multiple accounts;
• Compliance with obligations to Brazilian regulatory bodies (BACEN, COAF, Ministry of Finance);
• Responding to court orders or requests from competent authorities.

Responsible gambling

• Monitoring of behavioral patterns that may indicate problem gambling;
• Applying deposit limits and self-exclusion settings configured by the user;
• Proactive outreach to users showing at-risk behavior, when necessary.

Communications and marketing (with consent)

• Sending promotions, free spins, slots tournaments, and personalized offers to users who have opted in to receive communications;
• Notifications about platform updates, new games, and changes to the Terms and Conditions;
• Satisfaction surveys to improve the user experience.

6Sharing data with third parties

A 662bet does not sell personal data of users and does not share it commercially with third parties. Sharing occurs only in the following situations, all with a legal basis:

Essential service providers (operators)

662bet shares data with companies acting as operators in processing — meaning they handle data on our behalf and under our instructions, with data protection agreements in place:

• Payment processors: to process transactions via Pix, boleto, credit/debit card, PicPay, and Mercado Pago — they receive tokenized financial data;
• Digital KYC providers: for identity verification and CPF validation with the Receita Federal;
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and others receive a session identifier and betting data for game settlement purposes — without access to the user's full profile;
• Cloud infrastructure providers: for secure data storage with encryption at rest;
• Anti-fraud tools: for access pattern analysis and detection of suspicious activity.

Legal obligations

A 662bet may share data with Brazilian public authorities when required by law, court order, or request from a competent regulatory body — such as the Ministry of Finance, BACEN, COAF, the Federal Police, or the Public Prosecution Service. In such cases, data sharing is limited to what is strictly necessary to fulfill the request.

7International data transfers

Some of the service providers used by 662bet — especially game providers such as Evolution Gaming, Pragmatic Play, and NetEnt — have servers and operations outside Brazil. When this occurs, international transfers of personal data are carried out with the following safeguards:

• Data transfer agreements with standard protection clauses approved by the ANPD (National Data Protection Authority) or equivalent international standards;
• The providers involved are certified under international information security standards (ISO 27001, SOC 2, or equivalent);
• The volume of data transferred is limited to the minimum necessary for the specific service — session identifiers, not full profiles;
• Active data processing agreements (DPA) in place with all international providers.

A 662bet maintains an up-to-date record of all international data transfer flows and can provide specific information about recipients upon request to suporte@662bet.life.

8Data retention & deletion

A 662bet retains personal data for as long as necessary for the purposes described in this policy, in compliance with the minimum retention periods established by Brazilian law:

Retention periods by category

• Registration & identity data (KYC): minimum of 5 years after account closure, in accordance with anti-money laundering requirements (Law No. 9.613/1998);
• Financial transaction history (deposits and withdrawals): minimum of 5 years, in accordance with tax legislation and BACEN regulations;
• Betting history and gaming sessions: 5 years after each record, for regulatory and responsible gambling purposes;
• Technical logs (IPs, access): 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014);
• Support and communications data: 2 years after the support ticket is closed;
• Marketing data (with consent): until consent is withdrawn by the user.

Once the applicable retention period has expired, data is securely deleted or irreversibly anonymized. Anonymized data is not considered personal data under the LGPD and may be used for statistical analysis.

9Information security

A 662bet implements technical and organizational measures to protect users' personal data against unauthorized access, leaks, alteration, or destruction. Measures in place include:

Technical measures

• 256-bit SSL/TLS Encryption across all communications between the user's device and the platform's servers;
• Encryption at rest for stored sensitive data (KYC documents, financial data);
• Tokenization of credit/debit card data — full card numbers are never stored;
• Two-factor authentication (2FA) available and encouraged for all accounts;
• Continuous access monitoring and automated alerts for anomalous behavior;
• Periodic penetration testing and security audits conducted by a specialized firm.

Organizational measures

• Access to personal data restricted to employees with a legitimate need — principle of least privilege;
• Regular training for all staff on data protection and information security;
• Internal password policy and access controls;
• Security incident response plan, with notification to the ANPD and affected data subjects in the event of a significant breach.

In the event of a security incident that compromises users' personal data, 662bet will follow the procedures set out in the LGPD — notifying the ANPD and affected data subjects within the legally established timeframes, with clear information about the nature of the incident and the measures taken.

10Cookies & Trackers

A 662bet uses cookies and similar technologies to ensure the platform works correctly, analyze user behavior, and deliver a personalized experience. Cookies are small text files stored on your device.

Types of cookies used

• Essential cookies (required): necessary for the basic operation of the platform — session authentication, bet slip, language preferences. They cannot be disabled without affecting your use of the platform;
• Analytical cookies: collect aggregated information about how users navigate the platform — most visited pages, session duration, errors encountered. Used to improve the experience. Can be declined without affecting basic use;
• Functionality cookies: remember user preferences, such as favorite sports and interface settings. They improve the experience but are not essential;
• Security cookies: help detect fraud attempts, suspicious multiple logins, and unusual account activity.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from working properly — particularly login and bet processing. The 662bet does not use tracking cookies for third-party advertising purposes.

11Data relating to minors

The platform 662bet is strictly prohibited for individuals under 18 years of age. We do not intentionally collect personal data from minors. Registration requires confirmation of legal age, and the KYC process includes date-of-birth verification with official documents.

If the 662bet identifies that it has collected data from a minor — whether due to incorrect information provided during registration or following a report — the following measures will be taken immediately:

• Immediate account closure;
• Deletion of all personal data of the minor within 72 hours;
• Refund of any deposits made, net of any amounts associated with fraudulent activity;
• Notification to the relevant authorities if there is any indication of a third adult's involvement in creating the fraudulent account.

If you suspect a minor is using the platform — including with your data — contact us immediately via 24-hour live chat or by email at suporte@662bet.life.

12Your rights as a data subject

The LGPD guarantees you, as the data subject of personal data processed by 662bet, a set of rights that can be exercised at any time. All rights provided under Article 18 of Law No. 13.709/2018 are listed below:

13How to exercise your rights

To exercise any of the rights set out in Article 18 of the LGPD regarding your personal data at 662bet, follow the steps below:

1. Contact us at suporte@662bet.life with the subject line "Privacy – LGPD – [request type]", for example: "Privacy – LGPD – Access Request";
2. Include in your email: your full name, the CPF registered on the account, and a clear description of the right you wish to exercise;
3. A 662bet will respond within 15 business days from the date the request is received, in accordance with the deadline established by the LGPD;
4. In cases requiring additional identity verification, we may request supplementary documentation — the response period begins once identity has been confirmed;
5. If the request involves data that cannot be deleted due to a legal obligation, we will inform you of the reasons and the applicable retention periods.

If you are not satisfied with the response from 662bet, you may submit your complaint to the National Data Protection Authority (ANPD) through the gov.br/anpd portal.

14Responsible gambling and personal data

A 662bet uses gameplay behavior data to protect users — not just for commercial purposes. Monitoring betting history, session frequency, deposit patterns, and withdrawal behavior is part of the platform's responsible gambling tools.

How your gaming data is used to protect you

• Identification of patterns that may indicate problem gambling — such as a sudden increase in deposit frequency, escalating bet amounts following a losing streak, or attempts to withdraw shortly after large deposits;
• Verification that user-defined deposit limits are being respected;
• Enforcement and monitoring of self-exclusion periods — while self-exclusion is active, no login attempts or deposits are processed;
• Proactive outreach by the responsible gambling team to users displaying high-risk behavior, when identified by automated systems.

The data used for these analyses is processed on the basis of the legitimate interest of 662bet in protecting users' financial health and well-being, and are never shared with third parties for purposes other than the protection of the data subject.

If you'd like to set deposit limits, pause your account, or request permanent self-exclusion, contact us via 24-hour live chat or go to the Responsible Gambling of the platform. Remember: if gambling is causing problems, call 188 (CVV) at any time.

15Policy updates

A 662bet may update this Privacy Policy periodically to reflect changes in platform operations, applicable legislation, or data processing practices. The date of the last update is shown at the top of this page.

When material changes occur — such as updates to processing purposes, the types of data collected, or data subjects' rights — users will be notified by e-mail and via an in-platform notice with reasonable advance notice before the new terms take effect.

Minor changes, such as language adjustments or editorial corrections with no substantive impact on data processing, may be published directly without prior notice. Continued use of the platform after a new version is published constitutes acceptance of the updates.

We recommend reviewing this policy periodically — especially before submitting new identity verification documents or updating registered payment methods.

16Contact and DPO

For any questions, requests, or complaints regarding the processing of personal data by 662bet, use the channels below:

• DPO (Data Protection Officer) e-mail: suporte@662bet.life — subject line "Privacy – LGPD". Response time: up to 15 business days;
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — for general inquiries and urgent account matters;
• ANPD (National Data Protection Authority): if you are not satisfied with our response, you may file a complaint at gov.br/anpd.

When contacting us about privacy matters, please include your CPF registered on the platform and a detailed description of your request. This helps us identify you quickly and process your request within the legal timeframe.