Privacy Policy of the e66bt – How We Protect Your Data

1 Who We Are

The e66bt is a Sports Betting and online casino platform serving exclusively the Brazilian market. The controller of personal data processed under this Policy is e66bt, reachable at contato@e66bt.net for all data protection matters.

This Privacy Policy applies to all registered users of the platform e66bt — whether via the website or the mobile app — regardless of the product used: Sports Betting on Brasileirão Série A, Copa do Brasil, Copa Libertadores da América, slots, crash games, live casino, poker, or jackpot.

By creating an account on e66bt, the user acknowledges having read and understood this Privacy Policy and consents to the processing of their personal data under the conditions described herein, in accordance with the LGPD.

2 Data We Collect

The e66bt collects only the data necessary to provide its services and meet legal obligations. The data collected falls into the following categories:

Data provided directly by the user at registration:

• Full name;
• Date of birth;
• CPF (Brazilian individual taxpayer registration number);
• Email address;
• Mobile phone number;
• Full residential address;
• Account password (stored in hashed format — never in plain text).

Data collected during identity verification (KYC):

• Identity document image (RG, CNH, or passport);
• Proof of residence issued within the last 90 days;
• Selfie for identity validation, when requested.

Financial and transaction data:

• Pix key or bank details used for deposits and withdrawals;
• History of deposits, withdrawals, and bets placed on the platform;
• Credit or debit card details (only the last 4 digits are stored — the full card number is not retained by e66bt).

Data collected automatically during platform use:

• Access IP address;
• Device type and version, and operating system;
• Browser used;
• Pages visited and session duration;
• Activity logs for security and fraud prevention purposes;
• Approximate geolocation data (country and state only — not a precise address).

3 How We Use Your Data

Personal data collected by the e66bt are used exclusively for the following purposes:

• Account creation and management: create your account, verify your identity, and ensure that only you can access it;
• Financial transaction processing: process deposits via Pix, bank slip, credit or debit card, PicPay, and Mercado Pago, and execute withdrawals requested by the account holder;
• Identity verification and fraud prevention: fulfill KYC (Know Your Customer) obligations, detect multiple accounts, and prevent money laundering;
• Compliance with legal obligations: comply with judicial, regulatory, and competent authority requirements established under Brazilian law;
• Service improvement: analyze usage patterns to improve the user experience, platform stability, and mobile app performance;
• Relevant communications: send notifications about your account, withdrawals, deposits, and updates to the Terms and Conditions and Privacy Policy;
• Marketing communications: send promotions, bonus offers, and information about sporting events such as Copa do Brasil and Libertadores, only if you have not opted out of receiving this type of communication;
• User support: identify your account during live chat support sessions to resolve queries efficiently and securely.

The e66bt does not use your data for automated decisions that produce significant legal effects on you without the possibility of human review, as provided for under the LGPD.

4 Legal Basis for Processing

The processing of personal data by the e66bt is carried out based on the following legal grounds established under the LGPD (Article 7):

• Contract performance (art. 7, V): the processing of registration data, financial transactions, and betting history is necessary to provide the services you agreed to when creating your account on e66bt;
• Compliance with a legal obligation (Art. 7, II): KYC data, identity verification, and transaction records are processed to comply with obligations imposed by Brazilian law, including anti-money laundering rules and betting sector regulations;
• Legitimate interest (Art. 7, IX): browsing data and activity logs are processed for platform security, fraud prevention, and service improvement purposes, provided this does not override your fundamental rights;
• Consent (art. 7, I): marketing communications sent by email or mobile are based on your consent, which can be withdrawn at any time in your account settings or through the support of the e66bt.

5 Data Sharing

The e66bt does not sell, rent, or trade its users' personal data. Data is shared only in the situations described below, and always limited to the minimum information necessary:

• Payment providers: financial institutions, card operators, PicPay, Mercado Pago, and the Banco Central Pix system receive the data necessary to process deposits and withdrawals. These partners are required to protect your data in accordance with the LGPD and their own security policies;
• Game providers: companies such as Pragmatic Play, Spribe, Evolution Gaming, and other partners receive session identifiers — not your full name or CPF — to record the outcomes of slots, crash games, and live casino rounds;
• Analytics and security services: fraud detection and behavioral analysis tools that help e66bt identify suspicious activity and protect the integrity of the platform. These services receive anonymized or pseudonymized data wherever possible;
• Competent authorities: the e66bt may share data with government agencies, judicial authorities, or law enforcement when required by law, court order, or for the prevention of crimes such as money laundering;
• External auditors: Audit firms engaged to verify game compliance (such as eCOGRA and GLI) receive aggregated technical data — never personally identifiable user data.

6 Storage and Security

The data of users of e66bt are stored on servers with the following technical and organizational safeguards:

• 256-bit SSL/TLS Encryption on all connections between the user's device and the platform's servers;
• Encryption at rest for sensitive data stored in databases, including KYC documents and financial data;
• Passwords stored as secure hashes (bcrypt or equivalent) — e66bt never stores passwords in plain text, and no employee has access to your password;
• Role-based access control — only staff with an operational need have access to identifiable personal data, and all access is recorded in audit logs;
• Continuous monitoring of the infrastructure to detect unauthorized access attempts, with automatic alerts and incident response;
• Regular backups with encryption, stored separately from the main servers to ensure recovery in the event of an incident.

In the event of a security incident that may put your personal data at risk, the e66bt will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, providing details on the nature of the incident and the measures taken.

7 Cookies and Tracking Technologies

The e66bt website and app e66bt use cookies and similar technologies to ensure the platform functions correctly and to improve your experience. The types of cookies used are:

• Essential cookies: required for the basic operation of the site — keeping your session active after login, remembering language preferences, and securing transactions. They cannot be disabled without affecting your ability to use the platform;
• Performance cookies: collect information about how users interact with the platform (most visited pages, session time, errors encountered) in anonymized form, to improve the performance of the website and app;
• Functionality cookies: store your usage preferences, such as your favorite game type or betting settings, to personalize your experience;
• Marketing cookies: used to measure the effectiveness of communication campaigns related to e66bt. You can opt out of marketing cookies in your browser settings or in the app's privacy dashboard.

You can manage or disable performance, functionality, and marketing cookies through your browser or device settings. Disabling essential cookies may prevent access to certain platform features. e66bt.

8 Data Retention

The e66bt retains personal data only for as long as necessary for the purposes for which it was collected or to meet legal obligations. The retention periods are:

• Registration and active account data: kept for the full duration of the account and for up to 5 years after closure, as required by applicable regulations in the sector;
• Financial transaction records (deposits and withdrawals): retained for 5 years in accordance with Brazilian legislation on financial records and anti-money laundering;
• KYC documents: retained for the same period as account data, with secure disposal after the deadline;
• Security and access logs: retained for 12 months for incident investigation purposes;
• Marketing data: retained until you withdraw consent or request deletion.

Once applicable retention periods expire, data is securely deleted or anonymized in a way that makes re-identification of the data subject impossible.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights regarding your personal data processed by the e66bt. You may exercise any of these rights at any time via live chat or by emailing contato@e66bt.net:

The e66bt responds to rights exercise requests within 15 business days of receipt, as required under the LGPD. If a request cannot be fully fulfilled, e66bt will explain the reasons in writing.

10 Minors' Data

The e66bt is a platform restricted to users aged 18 and over. We do not intentionally collect personal data from minors. Registration by anyone under 18 is strictly prohibited under the platform's Terms and Conditions.

Should the e66bt identifies that a minor's data was provided during registration — through KYC verification or a report — the account will be immediately suspended, the data deleted, and no deposited funds will be retained (they will be refunded upon verification of ownership).

11 International Data Transfers

Some technology partners of the e66bt — including cloud infrastructure providers and security analytics tools — may be located outside Brazil. When this is the case, e66bt applies the safeguards required by the LGPD to ensure your data receives protection equivalent to that provided under Brazilian law.

The measures adopted for international transfers include:

• Execution of standard contractual clauses for data protection with the relevant partners;
• Verification that recipient countries have data protection legislation compatible with LGPD standards;
• Data minimization for transfers — only what is strictly necessary for the specific service provided by the partner;
• Contractual obligation requiring international partners not to use the data for any purpose beyond what was agreed with the e66bt.

Sensitive financial data — such as Pix keys and bank details for withdrawals — is processed exclusively by Brazilian partners and is never transferred abroad.

12 Third-Party Links and Services

The platform e66bt may contain references to partner game providers. When you access content from an external provider within the platform, you are also subject to those partners' privacy policies with respect to your game session data.

The e66bt is not responsible for the privacy practices of third parties outside the platform. We recommend reading the privacy policy of any external service before providing your personal data.

It is important to note that the e66bt does not embed links to external sites unrelated to the platform. All features — registration, Pix deposits, Sports Betting on the Brasileirão and Libertadores, slots, crash games, and withdrawals — take place within e66bt's secure environment, with no redirects to untrusted third parties.

13 Changes to this Privacy Policy

The e66bt may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services offered. Material changes will be communicated to users at least 7 days in advance by email or in-platform notification.

The date of the last update is shown at the top of this document. We recommend reviewing this Policy periodically to stay informed about how e66bt protects your data.

Continued use of the platform after changes to this Policy are published constitutes acceptance of those changes. If you do not agree with the new terms, you may close your account and request deletion of your data as described in section 9 of this document.

14 Data Protection Officer (DPO)

The e66bt has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for:

• Receive and respond to data subject requests and complaints;
• Guide the internal team on data protection practices;
• Serve as the communication channel between e66bt and the National Data Protection Authority (ANPD);
• Monitoring e66bt's ongoing compliance with the LGPD.

The Data Protection Officer can be contacted directly at the email contato@e66bt.net, with the subject line "Data Protection — DPO". Requests sent directly to the DPO will be handled with priority and responded to within the timeframe established by the LGPD.

15 Contact

To exercise your rights as a data subject, clarify questions about this Policy, or report any privacy-related concern, please contact the e66bt through the channels below:

• Live chat: available on the website and app, 24 hours a day, 7 days a week;
• Email: contato@e66bt.net — responses within 15 business days for LGPD-related requests;

If you are not satisfied with the response from the e66bt to a request for a right provided under the LGPD, you may file a complaint directly with the National Data Protection Authority (ANPD) through the channels made available by the Brazilian regulatory body.