31bet Privacy Policy – Protecting Your Data

31bet is a sports betting and digital entertainment platform accessible at 31bet.click, intended exclusively for Brazilian users aged 18 and over. For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), 31bet operates as controller of the personal data collected on the platform — meaning it is 31bet that determines the purposes and means of processing your information.

For any questions, requests, or to exercise your rights regarding the processing of your personal data, you can reach our privacy channel directly:

• Email: suporte@31bet.click
• Live chat: available on the platform 24 hours a day, 7 days a week
• Message subject: "Privacy – [describe your request]"

31bet responds to data subject requests within 15 (fifteen) calendar days of receipt, as required by the LGPD. For more complex cases requiring additional verification, the deadline may be extended with prior notice to the data subject.

31bet collects personal data in the following situations and categories:

Data you provide directly when creating your account:

• Full name as it appears on your identity document;
• CPF (Individual Taxpayer Registration);
• Date of birth;
• Email address;
• Mobile phone number;
• Residential address (requested for identity verification purposes).

Data collected for identity verification (KYC):

• Copy of a government-issued ID (national ID card, driver's license, or passport);
• Proof of residence issued recently;
• Selfie with ID document, when requested for identity verification.

Financial and transaction data:

• Pix key (CPF, email, phone number, or random key) registered for withdrawals;
• History of deposits and withdrawals made on the platform;
• Credit or debit card details (stored in tokenized form via a certified payment processor — 31bet does not store your full card number);
• Betting history, including amounts, events, and outcomes.

Data collected automatically during use of the platform:

• IP address and approximate geolocation data;
• Device type, operating system, and browser used;
• Pages visited, session duration, and browsing patterns on the platform;
• Data from cookies and similar technologies (detailed in Section 6).

Personal data collected by 31bet is used exclusively for the following purposes:

• Account operation and maintenance: create and manage your profile, process logins, handle password recovery, and maintain your activity history on the platform;
• Processing financial transactions: process deposits via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago; process withdrawals via Pix to any Brazilian bank (Nubank, Itaú, Bradesco, Banco do Brasil, Inter, and others);
• Identity verification: confirm that the account holder is over 18 years of age, a resident of Brazil, and that the information provided is accurate, in compliance with the regulatory requirements applicable to the betting market;
• Fraud and money laundering prevention: monitor suspicious activity, validate the source of funds, and fulfill obligations under Law No. 9,613/1998 and COAF regulations;
• User support: verify the account holder's identity when handling live chat or email support requests, and keep a record of support interactions;
• Account communications: send registration confirmations, transaction notifications, security alerts, and operational communications related to your use of the platform;
• Promotional communications: send offers, promotions, and news from 31bet — only to users who have given explicit consent. You can opt out at any time;
• Compliance with legal obligations: respond to requests from competent judicial, tax, or regulatory authorities, as provided under Brazilian law;
• Responsible gambling: monitor usage patterns to identify signs of problematic behavior and trigger protective tools when necessary.

31bet does not use your personal data to build consumer profiles for sale to third parties, for advertising purposes on behalf of other companies, or for any purpose not described in this policy.

All personal data processing carried out by 31bet has a legal basis under the LGPD (art. 7). The legal bases applicable to each category of data are:

• Contract performance (art. 7, V): data required to operate your account and process deposits, withdrawals, and bets — without this data, 31bet cannot provide the contracted services;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC) data, anti-money laundering measures, and reporting to regulatory authorities — obligations imposed by Brazilian legislation applicable to the sector;
• Legitimate interest (Art. 7, IX): browsing data and on-platform behavior used to improve the user experience, detect technical issues, and prevent fraud — always respecting the rights and reasonable expectations of the data subject;
• Consent (Art. 7, I): promotional communications and the use of non-essential cookies — collected with explicit consent and revocable at any time.

31bet does not sell, rent, or transfer personal data to third parties for commercial purposes. Data sharing occurs only in the situations described below, each with an appropriate legal basis:

• Payment processors: companies responsible for processing transactions via Pix, credit or debit card, boleto bancário, PicPay, and Mercado Pago receive only the data required to process each transaction. These partners are contractually obligated to protect that information and not use it for any other purpose;
• Identity verification providers: KYC-specialized companies that assist with document validation and user identity verification, in compliance with Brazilian regulatory requirements;
• Technology infrastructure providers: hosting, cloud computing, and cybersecurity services that support the operation of the 31bet platform, all bound by confidentiality and data protection agreements;
• Public authorities: when legally required by judicial authorities, the Ministry of Finance, the Federal Revenue Service, COAF, or other regulatory bodies with legal authority to request information;
• Auditors and legal advisors: professionals providing services to 31bet who are bound by professional confidentiality obligations, in specific situations involving auditing, legal counsel, or regulatory compliance.

31bet uses cookies and similar technologies to ensure the platform works properly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping the user's session active, remembering configuration preferences, and processing bets. They cannot be disabled without compromising use of the services;
• Performance cookies: collect aggregated information about how users navigate the platform — most visited pages, load times, technical errors — for service improvement purposes. They do not identify individual users;
• Functionality cookies: remember user preferences such as language, odds settings, and preferred layout, to personalize the experience;
• Analytical cookies: used to understand platform usage patterns in aggregate, without identifying individual users. Used on the basis of consent and may be declined.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may affect how the 31bet platform functions. Disabling non-essential cookies will not impact your ability to bet, deposit, or withdraw.

31bet implements robust technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, or improper disclosure:

• SSL/TLS Encryption: all communications between the user's device and 31bet's servers are encrypted in transit;
• Encryption at rest: sensitive data stored on 31bet's servers is encrypted, including identity information and payment data;
• Access control: only staff with a legitimate operational need have access to users' personal data, and that access is logged and auditable;
• Continuous monitoring: intrusion detection systems and security monitoring operate 24 hours a day to identify and respond to threats in real time;
• Payment tokenization: credit and debit card details are never stored in plain text on 31bet's servers — they are replaced by tokens generated by PCI-DSS certified payment processors.

In the event of a security incident that poses a significant risk or harm to data subjects, 31bet will notify the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD, providing information about the nature of the incident and the measures taken to mitigate its impact.

The LGPD grants you, as a personal data subject, a set of rights that 31bet is fully committed to upholding. See below what those rights are and how to exercise them:

To exercise any of these rights, contact us at suporte@31bet.click with the subject line "Privacy – [describe your right]". 31bet will respond within 15 calendar days. In some cases, we may need to verify your identity before processing the request.

The 31bet platform is intended exclusively for individuals aged 18 (eighteen) or over. 31bet does not knowingly collect, store, or process personal data from minors.

During registration, the user expressly confirms they are 18 years of age or older. Age verification is reinforced through the KYC process (identity verification with official documentation), which confirms the date of birth before withdrawals and advanced account features are unlocked.

If 31bet determines that an account was created by a minor, the account will be immediately closed, any balance will be returned to the verified account holder, and the data will be deleted in accordance with the retention periods set out in this policy. If you suspect that a minor has created an account on the platform, please report it immediately by emailing suporte@31bet.click.

Due to the global nature of certain technology services used by 31bet (such as cloud infrastructure, analytics tools, and payment processors), personal data may be transferred to or processed on servers located outside Brazil.

31bet ensures that any international data transfer occurs with the appropriate safeguards required under the LGPD, specifically:

• Transfer to countries that offer a level of data protection equivalent to Brazil's, as assessed by the ANPD;
• Use of specific contractual clauses that impose on the recipient obligations equivalent to those under the LGPD;
• Transfers necessary to perform a contract with the data subject — such as processing international payments where applicable.

Data used to process payments via Pix, boleto bancário, and transfers to Brazilian banks (Nubank, Itaú, Bradesco, Banco do Brasil, and others) is processed exclusively on infrastructure located in Brazil and is not subject to international transfers.

31bet retains personal data for as long as necessary to fulfill the purposes described in this policy, or for the period required by Brazilian law. The retention criteria by data category are:

• Active account data: retained for as long as the account remains active on the platform, plus the applicable legal retention period;
• Financial transaction history: retained for at least 5 (five) years after the transaction is completed, in compliance with Brazilian tax and regulatory obligations;
• Identity verification data (KYC): retained for at least 5 (five) years after account closure, in compliance with anti-money laundering regulations (Law No. 9,613/1998);
• Support communication data: retained for 2 (two) years for customer service record-keeping and potential dispute resolution purposes;
• Browsing data and access logs: retained for up to 12 (twelve) months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
• Non-essential cookie data: retained for the period indicated in each cookie's settings, generally between 30 days and 12 months.

Once the purpose has been fulfilled and the legal retention periods have expired, data is securely deleted or anonymized so that the individual can no longer be identified.

31bet may update this Privacy Policy periodically to reflect changes in applicable law, new platform features, or adjustments to data handling practices. Any material changes will be communicated:

• By email to all users with an active account, at least 15 days before the changes take effect;
• Via a prominent notice on the platform after the user logs in;
• By the update of the revision date shown at the top of this page.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure before the effective date, with any available real-money balance refunded via Pix.

To exercise any of the rights described in Section 8, or to file a complaint about how 31bet handles your data, please use the channels below:

• Email: suporte@31bet.click — use the subject line "Privacy – [describe your request]";
• Live chat: available on the platform 24 hours a day, 7 days a week;
• Response timeframe: up to 15 calendar days after the request is received.

If you believe that 31bet has not adequately addressed your request or that your rights have been violated, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the public authority responsible for overseeing compliance with the LGPD in Brazil.

31bet is committed to resolving any privacy-related disputes in a transparent and timely manner, avoiding the need for external proceedings wherever possible. Our privacy channel is monitored by a dedicated team, trained to respond clearly and within the legal timeframes.