658bet Privacy Policy — Your Data, Secure

1. Who We Are — Data Controller

The controller of the personal data processed under this policy is 658bet, operator of the sports betting platform available at https://658bet.best, with official customer support via email at suporte@658bet.best.

658bet acts as the data controller as defined by the LGPD, and is responsible for decisions regarding the processing of personal data collected on the platform. For privacy and data protection matters, you may contact our Data Protection Officer (DPO) directly at the email address provided in section 13 of this policy.

2. Data We Collect

658bet collects personal data in the following situations and categories:

2.1 Data you provide during registration

• Full name;
• CPF (Individual Taxpayer Registration);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (postal code, street, city, state).

2.2 Data collected for identity verification (KYC)

• Copy of a government-issued photo ID (RG, CNH, or passport) with a legible CPF;
• Recent proof of address;
• Proof of ownership of the payment method, where applicable;
• Selfie for facial comparison, when requested during the verification process.

2.3 Financial and transactional data

• Pix key (CPF, email, phone number, or random key);
• Credit or debit card details (processed via a secure payment gateway — 658bet does not store full card numbers);
• Deposit and withdrawal history;
• Full history of bets placed on the platform.

2.4 Automatically collected data

• IP address and approximate location;
• Device type, operating system, and browser;
• Pages visited and time spent on the platform;
• Cookie and similar technology data (see section 8);
• Access logs including date, time, and actions performed on the account.

3. How We Use Your Data

The table below summarizes the purposes for which 658bet processes the personal data it collects:

4. Legal Bases for Processing (LGPD)

The LGPD requires that all personal data processing have a legal basis. 658bet relies on the following legal bases, as set out in Article 7 of Lei nº 13.709/2018:

• Contract performance (art. 7, V): processing necessary to provide the contracted services — creating an account, accepting bets, processing payments, and providing support;
• Legal obligation (Art. 7, II): compliance with regulatory requirements, including anti-money laundering rules, identity verification, and reporting to competent authorities;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and service improvement, always respecting the rights of data subjects;
• Consent (Art. 7, I): sending marketing communications and promotions, non-essential cookies. Consent may be withdrawn at any time.

5. Data Sharing

658bet does not sell personal data. Sharing only occurs in the following situations, all subject to appropriate contractual and technical controls:

5.1 Payment processors

To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers, 658bet shares the minimum necessary data with the relevant gateways and financial institutions. These partners are contractually required to protect the data and use it solely for payment processing purposes.

5.2 Technical service providers

Companies providing infrastructure services (servers, databases), security analysis, identity verification, and fraud detection may have access to the personal data necessary to perform their services. All providers sign data processing agreements with confidentiality and security clauses compatible with the LGPD.

5.3 Regulatory and legal authorities

658bet may share personal data with government authorities, regulatory bodies (such as the Ministry of Finance and the ANPD), and law enforcement agencies when legally required — for example, pursuant to a court order, legal summons, or regulatory obligation applicable to the Sports Betting market in Brazil.

5.4 Rights protection

In cases involving investigation of fraud, money laundering, bonus abuse through multiple accounts, or other violations of the Terms and Conditions, 658bet may share data with specialized fraud prevention partners and, where necessary, with the relevant authorities.

6. Data Retention

658bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following criteria:

• Active account data: retained for as long as the account remains active and for the additional period necessary to resolve any potential disputes;
• Financial and betting data: retained for a minimum of 5 years after the last transaction, as required by Brazilian tax legislation and anti-money laundering regulations;
• Identity verification (KYC) data: retained for a minimum of 5 years following account closure, in accordance with applicable regulatory requirements;
• Access and security logs: retained for 6 months a 2 years, based on the criticality of the record;
• Data processed on the basis of consent: retained until consent is withdrawn or the purpose is fulfilled.

Once retention periods expire, data is anonymized or securely deleted in a way that makes identification of the individual impossible.

7. Information Security

658bet implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

• Encryption in transit: 256-bit SSL/TLS on all communications between the user and the platform;
• Encryption at rest: sensitive data stored with encryption in the database;
• Access control: role-based access control system for internal staff, with full audit logs;
• Continuous monitoring: intrusion detection systems and anomaly monitoring running 24 hours a day;
• Security testing: periodic vulnerability assessments and penetration tests carried out by specialized teams;
• Incident response plan: documented procedure for the identification, containment, notification, and remediation of security incidents.

8. Cookies and Similar Technologies

658bet uses cookies and similar technologies to ensure the platform works correctly, analyze usage, and improve the user experience. See the types of cookies used below:

You can manage your cookie preferences in your browser settings or, for non-essential cookies, through the cookie settings panel available on the 658bet platform.

9. Users Under 18

658bet is a sports betting platform exclusively for users aged 18 years old. Intentional collection of personal data from minors is strictly prohibited and constitutes a violation of the platform's Terms and Conditions.

During the registration and identity verification (KYC) process, 658bet verifies users' dates of birth. Accounts identified as belonging to individuals under 18 will be closed immediately and the data deleted, except for any information required to fulfill legal obligations related to the identified irregularity.

If you believe a minor under 18 has created an account on 658bet, contact support immediately at suporte@658bet.best so the case can be investigated and handled as a priority.

10. Your Rights as a Data Subject (LGPD)

Under art. 18 of the LGPD, you have the following rights regarding your personal data processed by 658bet:

• Confirmation and access: confirm whether 658bet processes your data and receive a copy of it;
• Correction: request the update of incomplete, outdated, or incorrect data;
• Anonymization, blocking, or deletion: of data that is unnecessary, excessive, or processed in violation of the LGPD;
• Portability: receive your data in a structured format for portability to another provider, in accordance with ANPD regulations;
• Deletion: of data processed on the basis of consent, except where retention is required by law;
• Sharing information: find out which entities your data has been shared with;
• Withdrawal of consent: withdraw consent previously given for specific types of processing;
• Objection: to object to processing carried out under other legal bases that conflict with the LGPD;
• Review of automated decisions: request human review of decisions made solely on the basis of automated processing.

To exercise any of these rights, send an email to suporte@658bet.best with the subject line "LGPD Rights — [your full name]" and describe your request. The response deadline is up to 15 business days.

11. International Data Transfers

In some cases, personal data of 658bet users may be processed on servers or by partners located outside Brazil — for example, cloud infrastructure providers with international data centers.

When this occurs, 658bet ensures that international transfers are carried out with appropriate safeguards, in accordance with Article 33 of the LGPD, including:

• Transfer to countries with a level of data protection equivalent to Brazil's, as recognized by the ANPD;
• Use of standard contractual clauses approved by the ANPD;
• Specific contractual data protection obligations with international partners.

658bet does not transfer data to countries that do not offer adequate protection without the necessary contractual safeguards.

12. Changes to this Privacy Policy

658bet may update this Privacy Policy periodically to reflect changes in its services, Brazilian legislation (including updates to the LGPD and ANPD regulations), or internal data protection practices.

Material changes will be communicated via the registered email address and/or through a platform notification with a minimum advance notice of 10 days before it takes effect. The date of the most recent update will always be shown at the top of this page.

We recommend reviewing this policy periodically. Continued use of the platform after any notified changes constitutes acceptance of the updated version.

13. Contact, DPO & Privacy Channel

For any questions, requests to exercise your rights, or complaints related to the processing of personal data by 658bet, you can reach us through the following channels:

• Privacy email: suporte@658bet.best (subject line: "Privacy / LGPD");
• Live chat: available on the 658bet platform, 24 hours a day, 7 days a week;
• Data Protection Officer (DPO): available at the same email address suporte@658bet.best with the subject line "DPO Request".

The standard response time for privacy requests is up to 15 business days from the date a complete request is received. In more complex cases, the deadline may be extended with prior notice to the requester.