48bet Privacy Policy – How We Protect Your Data

1Introduction

The 48bet values every user's privacy and recognizes that your personal data belongs to you. This Privacy Policy was written clearly and objectively so you know exactly what happens to your information when you use our Sports Betting and online casino platform.

This policy applies to all users registered on 48bet, including those who bet on football (Brasileirão, Copa do Brasil, Libertadores), e-sports, volleyball, slots, live casino, and any other service available on 48bet.best. It also applies to visitors who browse the site without a registered account.

The 48bet operates in compliance with the General Data Protection Law — LGPD (Law No. 13,709/2018), Brazil's primary legislation on privacy and personal data protection. Our commitment is to ensure your data is handled with transparency, security, and respect.

If you have any questions after reading this policy, contact our Data Protection Officer (DPO) at privacidade@48bet.best. We respond within up to 5 business days.

2Data Controller

The controller responsible for processing your personal data is 48bet, operator of the platform available at 48bet.best. The controller determines the purposes and means by which your personal data is processed.

To exercise any right under the LGPD or to ask questions about how your data is handled, you can contact our Data Protection Officer (DPO) directly through the channels listed in Section 15 of this policy.

The 48bet may work with data processors — companies that handle data on our behalf, such as payment processors (Pix, boleto, credit/debit card, PicPay, Mercado Pago) and cloud infrastructure providers. These processors operate under contract and are required to uphold the same security and confidentiality standards demanded by the LGPD.

3Data Collected

The 48bet collects only the data necessary to deliver its services safely and with quality. Data is collected in the following situations:

Data provided directly by you

• Full name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Brazilian mobile phone number;
• Full residential address in Brazil;
• Pix key registered for withdrawals;
• Identity documents (RG, CNH, or passport) — requested during the KYC verification process;
• Proof of address — requested during the KYC verification process.

Automatically collected data

• IP address and approximate geolocation data;
• Browser type and version;
• Operating system and device type (mobile, tablet, desktop);
• Pages visited within the platform and time spent browsing;
• Betting history, game activity, and financial transactions within the platform;
• Data from cookies and similar technologies (detailed in section 9).

Financial data

• Deposit and withdrawal transaction details (amount, date, method used);
• Credit or debit card details processed by certified payment gateways — 48bet does not store full card numbers;
• Identification of the financial institution used (Nubank, Itaú, Bradesco, Banco do Brasil, or others).

4Purpose of Processing

The personal data collected by 48bet are used exclusively for the following purposes:

The 48bet does not use your personal data for purposes other than those described above without your prior authorization. If we wish to use your data for a new purpose, you will be notified and may choose not to authorize it.

5Legal Basis for Processing

All personal data processing carried out by 48bet is grounded in one of the legal bases provided for under the LGPD. The primary bases used are:

• Contract performance (art. 7, V of the LGPD): we process your data to provide the services contracted at registration — betting, payments, support;
• Compliance with a legal obligation (Art. 7, II of the LGPD): identity verification (KYC), age control, and transaction reporting are required under Brazilian anti-money laundering legislation;
• Consent (Art. 7, I of the LGPD): for sending marketing communications and promotions, we rely on your express consent, which can be withdrawn at any time in your account settings;
• Legitimate interest (Art. 7, IX of the LGPD): for fraud prevention, platform security, and service improvement, provided that 48bet's interests do not override your fundamental rights.

6Data Sharing

The 48bet does not sell, rent, or trade your personal data to third parties. Data sharing occurs only in the following contexts, always with appropriate protection safeguards:

• Payment processors: companies that process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, acting as data processors under contract with 48bet;
• Infrastructure providers: cloud hosting, cybersecurity, and fraud monitoring services that support the platform's operation, all bound by contractual confidentiality clauses;
• Competent authorities: when required by law, court order, or determination of a Brazilian regulatory authority (such as the Banco Central do Brasil, the Receita Federal, or the Financial Activities Control Council — COAF);
• Responsible gambling operators: in self-exclusion situations, we may share the minimum necessary data with national problem gambling prevention systems, in accordance with applicable legislation.

7Data Retention

The 48bet retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with mandatory legal retention periods. The criteria used to determine retention periods include:

• Active account: while your account is active on the platform, your data is retained to ensure the continuous delivery of our services;
• After account closure: identification data and transaction history are retained for up to 5 years after account closure, as required by Brazilian tax and anti-money laundering legislation;
• Betting records: retained for up to 5 years for audit, dispute resolution, and regulatory compliance purposes;
• Marketing data: deleted immediately upon revocation of consent by the user;
• Access logs: retained for up to 6 months pursuant to the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).

Once retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified.

8Data Security

The 48bet adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. The main measures in place are:

• 256-bit SSL encryption: all communication between your device (phone, tablet, or computer) and the 48bet platform is protected by end-to-end encryption — the same standard used by Brazil's leading banks, including Nubank, Itaú, and Bradesco;
• Role-based access control: only employees with a legitimate need have access to user data, and all access is recorded in auditable logs;
• Two-factor authentication (2FA): available to all users as an additional layer of account protection;
• Real-time anti-fraud systems: continuous monitoring of transactions and suspicious behavior to identify and block unauthorized activity before any harm occurs;
• Periodic security audits: the platform infrastructure undergoes regular security testing by specialized teams;
• Secure password storage: user passwords are stored in hashed and salted format — 48bet has no access to your password in plain text.

9Cookies and Similar Technologies

The 48bet uses cookies and similar technologies to enhance your experience on the platform, ensure services function correctly, and analyze how features are used. Below are the types of cookies we use:

• Essential cookies: required for the platform's basic operation — maintaining your login session, remembering your betting slip, and managing security settings. They cannot be disabled without affecting your use of the platform;
• Preference cookies: store your language, theme, and display preferences to personalize your experience;
• Analytical cookies: collect anonymized data about how you navigate the platform — pages visited, session duration, clicks — so we can identify areas for improvement. Data is processed in aggregate and does not identify individual users;
• Security cookies: help detect suspicious behavior, fraud attempts, and unauthorized account access.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent some platform features from working correctly. 48bet. Disabling analytical cookies does not affect your ability to bet or play normally.

10Protection of Minors

The platform 48bet is intended exclusively for people aged 18 years of age or older. We do not intentionally collect personal data from minors and do not permit this audience to register or use the platform.

We have adopted the following measures to protect minors:

• CPF and date of birth are required at registration, with automatic age verification;
• A KYC verification process that includes identity and age confirmation before withdrawals are released;
• Monitoring of accounts suspected of belonging to minors, with immediate closure and balance hold for investigation upon identification.

11Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights over your personal data. 48bet is committed to making it easy for you to exercise all of these rights. Here is what you can request at any time:

To exercise any of these rights, contact our DPO at privacidade@48bet.best. The response deadline is up to 15 business days from the date the request is received, as provided under the LGPD.

Should the 48bet cannot handle your request or if you disagree with the response received, you have the right to file a complaint with the National Data Protection Authority (ANPD), pursuant to Article 55-A of the LGPD.

12International Data Transfers

Some of the infrastructure and data processing partners used by 48bet may be located outside Brazil. When international data transfers occur, we ensure that:

• The destination country offers an adequate level of personal data protection, as assessed by the ANPD;
• Contracts with international partners include specific data protection clauses equivalent to the requirements of the LGPD;
• Only the minimum data necessary to provide the service is transferred;
• Processing within international systems is restricted to the purposes described in this policy.

Under no circumstances will your data be transferred to countries or organizations that lack adequate data protection safeguards, as required by Article 33 of the LGPD.

13Security Incidents

In the event of a security incident that may pose a relevant risk or harm to data subjects, the 48bet commits to:

• Notify National Data Protection Authority (ANPD) within a reasonable timeframe, as defined by applicable regulations;
• Notify potentially affected users via their registered email, describing the nature of the incident, the data involved, the measures taken, and guidance on protecting their account;
• Investigate the cause of the incident and implement corrective measures to prevent recurrence;
• Document the entire incident response process as required by Article 48 of the LGPD.

If you suspect unauthorized access to your account on 48bet, change your password immediately and contact our support team via live chat or at suporte@48bet.best. Our security team is available 24 hours a day.

14Changes to this Policy

The 48bet may update this Privacy Policy periodically to reflect changes in legislation, platform practices, or technologies used. When significant changes are made, you will be notified via:

• Email sent to the address registered on the account with at least 7 days in advance before the new terms take effect;
• A prominent notice displayed on the platform at your next login following the update.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated version of the policy. The most recent version of this Privacy Policy will always be available at 48bet.best/privacy-policy, with the date of the last update shown at the top of the page.

If you do not agree with the changes, you may close your account before the effective date, following the procedure described in the Terms and Conditions.

15Contact & DPO

For any matter related to this Privacy Policy, the exercise of your rights as a data subject, or questions about how your personal information is handled, please contact us through the channels below:

The response deadline for LGPD-related requests is up to 15 business days. For urgent security issues, our chat support team responds within minutes, around the clock.