Privacy Policy of 3bet — Your Data Protected under the LGPD

The 3bet is a Sports Betting and online casino platform dedicated exclusively to Brazilian users, accessible at the domain 3bet-khelo.net. For the purposes of this Privacy Policy, 3bet acts as data controller as defined by the General Data Protection Law (LGPD — Law No. 13,709/2018), and is responsible for all decisions regarding the processing of users' personal data.

3bet offers Sports Betting on football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball (Superliga Masculina e Feminina), basketball (NBB and NBA), MMA and UFC, e-sports, tennis, and over 32 other sports, as well as online casino games, slots, live casino, crash games, and progressive jackpots. All financial transactions are conducted in BRL (R$), with support for Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED bank transfers.

To contact 3bet about any data privacy matter, please use the email contato@3bet-khelo.net or the live chat available on the platform.

The 3bet collects personal data at different points during your interaction with the platform. Below are the categories of data we may process:

Registration and identification data:

• Full name, date of birth, and CPF.
• Email address, mobile phone number, and home address.
• Identity documents (RG, CNH, or passport) submitted during the KYC verification process.
• Selfie or facial photo for identity validation, when requested.

Financial and transaction data:

• Registered Pix key, card details (only the last four digits and card brand are stored by 3bet — the full card number is processed exclusively by the payment gateway).
• History of deposits, withdrawals, and bets placed on the platform.
• Betting limits and responsible gambling settings configured by the user.

Browsing and usage data:

• IP address, device type, operating system, and browser used.
• Pages visited, session duration, games accessed, and markets viewed.
• Cookie data and similar tracking technologies (detailed in section 10).

Communications data:

• Content of messages exchanged with our support team via live chat or email.
• Records of complaints, requests, and feedback submitted to 3bet.

The data collected by 3bet are used for the following purposes:

• Service provision: creating and managing your account, processing bets, settling results, and handling deposits and withdrawals in BRL via Pix, boleto, card, PicPay, Mercado Pago, and TED.
• Identity verification (KYC): confirmation that you are over 18 years old, reside in Brazil, and are the holder of the payment methods used, in accordance with applicable regulations.
• Fraud prevention and anti-money laundering: transaction monitoring to detect suspicious activity, bonus abuse, multiple accounts, and other conduct prohibited by the Terms and Conditions.
• Operational communications: sending account notifications, deposit and withdrawal confirmations, security alerts, and updates about 3bet's services.
• Marketing (with consent): sending personalized offers and promotions related to Brasileirão, Copa do Brasil, and other sporting events — only if you have opted in to receive this type of communication.
• Responsible gambling: identification of behavioral patterns that may indicate problem gambling, in order to offer proactive support and activate protective tools.
• Platform improvement: aggregate analysis of browsing data to identify technical issues, optimize the user experience, and develop new features.
• Compliance with legal obligations: maintenance of records required by Brazilian law, including the Consumer Protection Code and applicable financial regulations.

The LGPD requires that all personal data processing have a specific legal basis. 3bet grounds its data processing activities on the following bases set out in Lei nº 13.709/2018:

• Contract performance (art. 7º, V): processing is necessary to provide the contracted services — account creation, bet processing, and financial transactions.
• Compliance with legal obligation (art. 7, II): identity verification, financial records, and reporting to the relevant authorities when required by law.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, monitoring of suspicious activity, and service improvement — always respecting users' rights.
• Consent (Art. 7, I): for sending marketing communications and personalized promotions. You may withdraw this consent at any time in your account settings or by email.

The 3bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Information is shared only in the situations listed below, and always with appropriate safeguards in place:

• Payment processors: to facilitate deposits and withdrawals via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED transfers. These partners receive only the data necessary to process each transaction and operate under contracts requiring confidentiality and LGPD compliance.
• Technology providers: companies that provide hosting infrastructure, cloud services, analytics tools, and technical support for platform operations. These providers act solely as data processors, following our instructions.
• Game providers: slots and casino game developers such as PG Soft, Pragmatic Play, and NetEnt receive minimal session data to ensure games function correctly and RNG audits can be carried out.
• Competent authorities: when required by law, court order, or request from a Brazilian regulatory authority, 3bet will provide the requested data — and, whenever legally permitted, will notify you of such disclosure.
• Fraud prevention: in cases of suspected fraud, money laundering, or criminal activity, we may share information with law enforcement and security authorities in Brazil.

In all data-sharing situations, 3bet requires recipients to maintain adequate security standards and to use the data solely for the specific purpose for which it was shared.

Some of the service providers and technology vendors used by 3bet may store or process data on servers located outside Brazil. When this occurs, 3bet takes the necessary measures to ensure that international data transfers comply with LGPD requirements, including:

• Execution of standard data protection contractual clauses with international service providers.
• Verification that the recipient country has data protection legislation deemed adequate by the National Data Protection Authority (ANPD), or that the recipient provides equivalent safeguards.
• Use of internationally recognized certification mechanisms and compliance seals.

If you'd like details on which providers carry out international data transfers, please reach out to our team at contato@3bet-khelo.net.

The 3bet implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, improper disclosure, or destruction:

• Encryption in transit: all communications between your device and our servers are protected by an up-to-date TLS/SSL protocol, ensuring that no data travels in a readable form to third parties.
• Encryption at rest: sensitive data stored in our systems is encrypted to current security standards.
• Access control: access to users' personal data is restricted exclusively to employees and contractors who need that information to perform their duties — with mandatory multi-factor authentication.
• Continuous monitoring: automated intrusion detection and anomaly monitoring systems operate 24 hours a day to identify suspicious activity on our servers.
• Security testing: we conduct regular penetration tests and security audits to identify and remediate vulnerabilities before they can be exploited.
• Staff training: all staff with access to personal data undergo regular information security and privacy best practices training.

The 3bet retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or to meet applicable legal obligations. The criteria used to determine retention periods include:

• Active account data: retained for as long as your account remains active on the platform.
• Financial transaction data: retained for a minimum of 5 years after the transaction, as required by Brazilian financial and tax legislation.
• Identity verification data (KYC): retained for up to 5 years after account closure, to meet regulatory obligations.
• Support and communications data: retained for up to 2 years after the ticket is closed, for record-keeping and quality purposes.
• Data for marketing purposes: retained until consent is withdrawn or the account is closed, whichever comes first.

Once the applicable retention period expires, data is anonymized — in a way that no longer allows identification of the individual — or securely and irreversibly deleted from our systems and those of our service providers.

The LGPD guarantees you a set of rights regarding your personal data processed by 3bet. See each right and how to exercise it below:

• Confirmation and access: you may request confirmation that we process your data and obtain a copy of the information we have on file.
• Correction: if your data is incomplete, incorrect, or out of date, you may request a correction directly in your account dashboard or through support.
• Anonymization, blocking, or erasure: for data that is unnecessary, excessive, or processed in violation of the LGPD, you may request any of these measures.
• Portability: you may request that your data be transferred to another service provider, in accordance with ANPD regulations.
• Erasure based on consent: if processing is based on your consent, you may request deletion of the data processed under that legal basis.
• Sharing information: you have the right to know which public and private entities your data is shared with.
• Withdrawal of consent: when processing is based on consent, you may withdraw it at any time, free of charge.
• Objection: where processing is based on legitimate interest, you may object if you identify non-compliance with the law.

To exercise any of these rights, contact us by email at contato@3bet-khelo.net or via the platform's live chat, identifying yourself and describing your request. We will respond within the timeframe established by the LGPD.

The 3bet uses cookies and similar technologies to ensure the platform works correctly, personalize the user experience, and analyze service performance. The types of cookies we use are listed below:

You can manage your cookie preferences in your browser settings or in your 3bet account privacy dashboard. Disabling essential cookies may affect the functionality of certain platform features.

The platform 3bet is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you have reason to believe that a minor has used our services, please contact us immediately at contato@3bet-khelo.net so that we can take the appropriate steps, including account closure and data deletion.

3bet uses the CPF as a mandatory age verification mechanism during registration, technically preventing minors from signing up. In addition, our KYC process includes official photo ID verification to confirm the identity and age of each user.

The 3bet may update this Privacy Policy periodically, particularly in response to changes in Brazilian data protection legislation, updates to our services, or developments in industry best practices.

When we make material changes to this policy — those that significantly affect your rights or the way we process your data — you will be notified at least 15 days in advance by email at the address registered to your account. Minor changes, such as wording corrections or contact updates, will take effect without prior notice but will always be reflected in the "Last updated" date at the top of this page.

The most current version of this Privacy Policy will always be available on this page. We recommend reviewing it periodically to stay informed about how 3bet protects your data.

The LGPD provides for the role of Personal Data Processing Officer (also known as the DPO — Data Protection Officer), responsible for serving as the communication channel between 3bet, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, clarify questions about this policy, report a security incident, or file a complaint regarding the processing of your personal data by 3bet, please contact us through the channels below:

• Email: contato@3bet-khelo.net — response time: up to 15 business days for personal data requests.
• Live chat: available 24 hours a day, 7 days a week, in Portuguese, for urgent issues related to your account and security.

If you are not satisfied with our response or believe that the processing of your data violates the LGPD, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as per the procedures available on the authority's official portal.