Privacy Policy of aa123bet — Your Data Protected by the LGPD

1. Data Controller

The controller responsible for processing personal data collected on the aa123bet platform is aa123bet itself, the operator of the site aa123bet.best. For the purposes of applying the LGPD, "controller" is the entity that makes decisions about data processing — what to collect, how to use it, and how long to retain it.

To exercise your rights as a data subject or to clarify any questions about this policy, you can contact our team directly by email at contato@aa123bet.best or via live chat available in your account dashboard, 24 hours a day, 7 days a week, in Brazilian Portuguese.

2. Data We Collect

2.1 Data You Provide Directly

During registration and use of the aa123bet platform, we collect the following information provided directly by the user:

• Identification data: full name, CPF, date of birth, mobile number, and email address;
• Address data: ZIP code, street address, number, unit, neighborhood, city, and state — required for proof-of-residence verification during the KYC process;
• Identity documents: images of national ID, driver's license, or passport submitted during the identity verification process;
• Financial data: registered Pix key for withdrawals, deposit source bank, and transaction history on the platform;
• Account password: stored in encrypted format — aa123bet never has access to your password in plain text.

2.2 Automatically Collected Data

When you access the aa123bet platform — whether on mobile or desktop — we automatically collect the following technical information:

• IP address and approximate geolocation (city/state);
• Device type, operating system, and browser version;
• Pages visited, session duration, bets placed, and casino games accessed;
• Session cookies and usage preference cookies (see Section 7 for details);
• Access logs with date, time, and action performed on the platform.

2.3 Third-Party Data

In some cases, aa123bet may receive information from technical partners to confirm Pix transactions, verify document validity, or cross-reference data for fraud prevention. This data is handled with the same protections applied to data collected directly.

3. How We Use Your Data

Aa123bet uses collected data exclusively for the following purposes:

• Operate the user account: create and manage your account, process login, authenticate sessions, and maintain your betting and transaction history;
• Process payments: process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; handle withdrawals via Pix or TED to accounts held at Brazilian banks;
• Identity verification (KYC): confirm that the user is over 18, holds a valid CPF, and resides in Brazil, as required by applicable gambling regulations;
• Customer support: handle support requests in Portuguese via live chat and email, resolve disputes related to bets and withdrawals, and maintain a record of customer service interactions;
• Fraud and money laundering prevention: monitor suspicious behavior patterns, identify multiple accounts, detect bot usage, and fulfill compliance obligations;
• Marketing communications: send emails and notifications about bonuses, Brasileirão promotions, and platform updates — always with an immediate opt-out option;
• Responsible gambling: identify problem gambling patterns and, when necessary, reach out to the user with information and support resources;
• Platform improvement: analyze aggregated usage data to identify technical issues, improve the live betting experience, and develop new features.

4. Legal Bases for Processing (LGPD)

All collection and use of personal data on the aa123bet platform is grounded in at least one of the legal bases set out in the LGPD (art. 7 and art. 11). The main bases we apply are:

• Contract performance (art. 7, V): data processing required to create your account, handle bets, process Pix withdrawals, and provide support is essential to fulfilling the platform's terms of use;
• Legal obligation (art. 7, II): identity verification (KYC), suspicious transaction monitoring, and anti-money laundering compliance are legal requirements that mandate the processing of certain data;
• Legitimate interest (art. 7, IX): fraud monitoring, prevention of multiple accounts, and platform security are processing activities based on the legitimate interest of aa123bet and its users;
• Consent (art. 7, I): the sending of marketing communications and promotions is based on your consent — which can be withdrawn at any time without affecting your use of the platform.

5. Data Sharing

5.1 Required Technical Partners

To operate the aa123bet platform, we share personal data only with the following types of technical partners, under contractual confidentiality and data protection clauses:

• Payment processors: to securely process Pix, boleto, TED, and credit/debit card transactions;
• Casino game providers: to validate live blackjack, slots, and crash game sessions with licensed providers;
• Identity verification services: to verify documents submitted during the KYC process;
• Cloud infrastructure and security: to host the platform's servers in line with the appropriate security standards.

5.2 Legal Authorities

Aa123bet may be legally required to share information with Brazilian governmental, law enforcement, or regulatory authorities pursuant to a court order or formal legal request. In such cases, we disclose only the minimum information required by the legal instrument and notify the user whenever permitted by law.

5.3 What We Never Share

Aa123bet no shares personal data with advertisers, advertising networks, data brokers, social media platforms, or any other company for third-party marketing purposes. Your betting data, account balance, and payment history are treated with complete confidentiality.

6. Data Security

Aa123bet implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL Encryption across all communications between the user's device and the platform's servers;
• Password encryption using irreversible hash algorithms — aa123bet does not store passwords in plain text;
• Two-factor authentication (2FA) available in the account dashboard for an extra layer of protection;
• Continuous monitoring of unauthorized access attempts, brute-force attacks, and anomalous behavior;
• Restricted Access to personal data by internal staff — only teams with a justified operational need are granted access;
• Periodic audits security and penetration testing to identify vulnerabilities before they can be exploited.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your phone or computer when you access the aa123bet platform. They help us keep your session active, remember your preferences, and understand how you use the platform so we can improve it.

7.2 Types of Cookies Used

• Essential cookies: required for the platform to function — they keep your session logged in, protect against CSRF, and enable Pix at checkout. They cannot be disabled;
• Performance cookies: collect anonymous data on how pages are used — which sections receive the most clicks, load times, and technical errors. Used to improve the experience;
• Preference cookies: remember personal settings such as language, favorite odds, and Brasileirão display preferences;
• Analytical cookies: used by analytics tools to understand aggregate browsing behavior — without identifying individual users.

7.3 How to Manage Cookies

You can manage or disable non-essential cookies through the cookie preferences panel available in the platform footer. Disabling essential cookies may affect login functionality, Pix deposits, and live betting.

8. Data Retention

Aa123bet retains users' personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with applicable legal obligations. The general retention criteria are:

• Active account: data is retained for the entire period the account is active and for up to 5 years after closure — the minimum period required by anti-money laundering legislation (Law No. 9,613/1998);
• KYC Documents: retained for up to 5 years after account closure, or longer if required by a competent authority;
• Financial transaction history: retained for 5 years for tax and compliance purposes, as required by the Receita Federal and the Banco Central do Brasil;
• Access and security logs: retained for up to 12 months for security incident investigation purposes;
• Marketing data: deleted immediately upon withdrawal of consent or account closure.

Once retention periods expire, data is either anonymized — in a way that no longer allows identification of the individual — or permanently deleted from aa123bet's systems.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, the following rights regarding information processed by aa123bet. You may exercise any of them at any time by emailing contato@aa123bet.best or via the account dashboard:

Requests are responded to within 15 business days upon receipt. For requests requiring further review, aa123bet will notify you of the extended timeframe by email. aa123bet may request identity confirmation before processing access, correction, or deletion requests to ensure the data subject's security.

10. Data of Minors

Aa123bet is a Sports Betting and online casino platform for users aged 18 and over only. We do not intentionally collect or store personal data from individuals under 18. Registration requires age confirmation, and the KYC process validates the date of birth against an official document.

If we identify that a user provided false information to bypass the age restriction, the account will be immediately closed, any bonus balance forfeited, and the minor's data removed from our systems. If you are the legal guardian of a minor who may have created an account on aa123bet, please contact our support team immediately at contato@aa123bet.best.

11. International Data Transfers

Some of aa123bet's technical partners — such as cloud infrastructure providers and live casino game suppliers — may process data on servers located outside Brazil. When this occurs, aa123bet ensures that international transfers comply with at least one of the mechanisms set out in the LGPD:

• Transfer to a country with a level of data protection equivalent to Brazil's, as recognized by the ANPD;
• Specific data protection contractual clauses included in agreements with international partners;
• Internationally recognized certifications and compliance policies for personal data protection.

Aa123bet does not transfer Brazilian users' data to jurisdictions that do not offer minimum protection standards compatible with the LGPD. Pix, boleto, and TED transaction processing takes place exclusively on infrastructure based in Brazil.

12. Updates to this Privacy Policy

Aa123bet may periodically review this Privacy Policy to reflect changes in Brazilian legislation, online betting industry practices, or platform features. The date of the last update is always shown at the top of this page.

Significant changes — such as updates to how we use your data or which partners we share it with — will be communicated by email at least 15 days before taking effect. For minor clarifying updates, publishing the new version on the platform is sufficient notice.

Continued use of aa123bet after a revised version of this policy takes effect constitutes acceptance of the new terms. If you disagree with any change, you may close your account and request deletion of your data before the effective date.

13. Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, get clarification on this policy, or report any privacy concern related to aa123bet, please reach out through the channels below:

• Live chat: available 24 hours a day in your account dashboard after login — the fastest channel for immediate responses;
• Email: contato@aa123bet.best — for data access, correction, or deletion requests;
• Response time: up to 15 business days for LGPD rights-related requests.

Aa123bet has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's privacy practices and serving as the point of contact with the ANPD (National Data Protection Authority). To contact the DPO directly, please use the email contato@aa123bet.best with the subject line "DPO — Data Protection".