110bet Privacy Policy – Protecting Your Data

1Data Controller

The controller of personal data collected by the platform 110bet is the operating company responsible for the 110bet.best website. For the purposes of the LGPD (Law No. 13,709/2018), the controller is responsible for decisions related to the processing of players' personal data — including what data is collected, how long it is retained, and how it is used.

The Data Protection Officer (DPO) of 110bet can be contacted directly for matters relating to privacy and the exercise of your rights as a data subject:

• Email: privacidade@110bet.best
• General support: suporte@110bet.best
• Live chat: available 24 hours a day on the 110bet website and app

2Data We Collect

The 110bet collects only the data necessary to operate the platform, process payments, meet legal obligations, and deliver a personalized experience. The data collected falls into the following categories:

Data provided directly by you:

• Full name, date of birth, and CPF (required for registration);
• Email address and mobile number for contact and verification;
• Residential address (requested during KYC verification);
• Identity documents (national ID, driver's license, or passport) submitted during the KYC process;
• Bank details for Pix withdrawals (Pix key: CPF, phone number, email, or random key), credit/debit card data tokenized by the payment processor.

Data collected automatically during use:

• IP address and approximate geolocation (country and state);
• Device type, operating system, and browser used;
• Betting history, games accessed, and sessions on the platform;
• History of deposits and withdrawals via Pix, boleto, card, PicPay, or Mercado Pago;
• Session and performance cookies (see Section 6 for more details);
• Access logs, including date, time, and session duration.

3How We Use Your Data

The 110bet uses your personal data exclusively for the purposes listed below. No data is used for any other purpose without your explicit authorization:

• Operate and maintain your account: registration, authentication, balance management, betting history, and platform preferences;
• Process payments: deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; withdrawals via Pix to accounts at Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian financial institutions;
• Identity verification (KYC): confirm your identity, protecting your account against unauthorized access and meeting legal anti-money laundering requirements;
• Fraud prevention and security: monitor suspicious activity, detect multiple accounts linked to the same CPF, identify abuse patterns, and protect the integrity of the platform;
• Meet legal and regulatory obligations: report transactions as required by Brazilian law, and cooperate with judicial authorities when ordered by a court;
• Personalize the experience: recommend games, sports, and promotions based on your usage history at 110bet — with the option to turn off personalization at any time in the account panel;
• Service communications: notifications about processed withdrawals, credited bonuses, and account security updates — these communications are mandatory and cannot be disabled;
• Marketing (with consent only): emails, SMS, and push notifications about promotions, bonuses, and 110bet news — only for users who have opted in.

4Legal Basis for Processing (LGPD)

Every data processing operation carried out by the 110bet has a legal basis in accordance with Article 7 of the LGPD. The main legal bases used are:

• Contract performance (Art. 7, V): processing is necessary to fulfill the contract entered into with you when you created your account — to operate the platform, process bets, and pay out winnings via Pix;
• Compliance with a legal obligation (art. 7, II): KYC verification, anti-money laundering compliance, and cooperation with authorities as required by Brazilian law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and monitoring of suspicious activity — always respecting your rights and reasonable expectations as a data subject;
• Consent (Art. 7, I): sending marketing communications, personalizing recommendations, and using non-essential cookies — you can withdraw this consent at any time without affecting your access to the platform.

The 110bet does not process sensitive data (racial origin, religious belief, genetic data, biometric data, health information, sexual life, or data relating to children) unless strictly necessary for age verification, under a specific legal basis.

5Data Sharing

The 110bet does not sell or rent your personal data. Sharing only occurs in the situations described below, with partners who are contractually bound to handle your data to the same security standards we apply:

• Payment processors: to enable deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the minimum data required to process the transaction;
• Live game providers: certified providers such as Evolution and Pragmatic Play Live receive session identifiers (not personally identifiable data) to operate the live Blackjack, Roulette, and Baccarat tables;
• Technology service providers: cloud infrastructure, security monitoring, and performance analytics — governed by strict confidentiality and data protection agreements;
• Legal and regulatory authorities: when required by law, court order, or a legitimate request from a competent Brazilian authority — 110bet will notify the player whenever legally permitted before disclosing any data;
• Fraud prevention: automated fraud and money laundering detection systems that operate without unnecessary human access to personal data.

6Cookies & Tracking Technologies

The 110bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and, with your consent, personalize content. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — session authentication, security, and language preferences. These cannot be disabled without affecting your use of the platform;
• Performance cookies: collect anonymous data on how players navigate 110bet — most visited pages, load times, and technical errors. Used to improve the performance of the site and app;
• Functionality cookies: remember your preferences — such as last login, favorite games, and interface settings — to personalize your experience without requiring you to reconfigure everything on each visit;
• Marketing cookies (with consent only): used to measure the performance of 110bet's own marketing campaigns. You can decline these cookies with no impact on your account.

You can manage your cookie preferences directly through the banner shown on your first visit or through the account privacy panel. Browsers such as Chrome, Firefox, and Safari also allow you to block or clear cookies — check the settings on your phone or computer.

7Data Security

The 110bet adopts technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL Encryption across all communications between your phone/computer and our servers — the same standard used by Brazil's banking system;
• Encrypted storage of passwords using modern hashing algorithms (we never store your password in plain text);
• Role-based access control: only employees with a proven operational need may access identifiable personal data, with a full log kept of every query;
• Two-factor authentication (2FA) available to all players and mandatory for internal administrative access;
• Encrypted backups with retention in geographically separate locations, ensuring recovery in the event of an incident;
• Regular security audits conducted by internal teams and certified external partners.

In the event of a security incident that may affect your data, the 110bet commits to notifying affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 72 hours of becoming aware of the incident in situations involving significant risk.

8Data Retention and Deletion

The 110bet retains your personal data for as long as necessary to fulfill the purposes described in this policy. The criteria that determine retention periods are:

• Active account: data retained for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering requirements and tax obligations under Brazilian law;
• Financial transaction history: records of deposits and withdrawals via Pix, boleto, and other methods are retained for a minimum of 5 years for audit and compliance purposes;
• KYC verification data (documents): retained for 5 years after account closure, as required by regulation for the prevention of financial crimes;
• Access and security logs: retained for up to 6 months for security incident and fraud investigations;
• Marketing data: retained until consent is withdrawn or for a maximum of 2 years without any interaction, after which they are automatically deleted.

Once the applicable retention period expires, data is securely and irreversibly deleted or anonymized so that the data subject can no longer be identified. You may request early deletion of data not subject to legal retention obligations by submitting a formal request to the DPO.

9Your Rights as a Data Subject (LGPD)

The Lei Geral de Proteção de Dados grants you, as the data subject, the following rights regarding information processed by 110bet:

• Right of access: know what personal data we hold about you and how we use it;
• Right to correction: request the update or correction of incomplete, inaccurate, or outdated data;
• Right to erasure: request the deletion of data processed on the basis of consent, where there is no longer a need for the original purpose;
• Right to data portability: receive your data in a structured, interoperable format for transfer to another controller;
• Right to object: object to processing carried out on the basis of legitimate interest when there is a legitimate reason related to your particular situation;
• Right to withdraw consent: withdraw consent previously given for marketing, non-essential cookies, and personalization — with no impact on account use;
• Right to information about sharing: know which entities your data has been shared with;
• Right to lodge a complaint with the ANPD: if your requests are not fulfilled, you may file a complaint with the National Data Protection Authority.

To exercise any of these rights, contact our DPO by email privacidade@110bet.best or via live chat. The 110bet responds within 15 calendar days and may request identity verification before processing a request — solely to protect your data from unauthorized third-party claims.

10Minors

The platform of 110bet is intended exclusively for users aged 18 and over. The collection of personal data from individuals under 18 is neither intentional nor permitted. During registration, we request your date of birth and CPF to verify that you meet the age requirement, and KYC verification confirms your identity with an official document.

If we determine that an account was created by a minor, we immediately close the account, delete the minor's personal data as quickly as possible, and return any available balance following a compliance review. Parents or guardians who discover that a minor has been using the platform should contact us immediately via live chat or by emailing suporte@110bet.best for urgent action.

11International Data Transfer

Some of the technology service providers and live game providers used by 110bet operate servers outside Brazil. When your data is transferred to other countries, the 110bet adopts the following safeguards:

• Contracts with standard data protection clauses requiring recipients to guarantee a level of protection equivalent to that of the LGPD;
• Transfers only to countries or organizations with adequacy recognition from the ANPD, or based on specific consent;
• Contractual prohibition preventing international recipients from using data for any purpose other than those authorized by 110bet;
• Minimum data transferred — only what is strictly necessary for the specific service to function properly.

Pix payment data is processed entirely within Brazilian territory, by the Banco Central do Brasil and the financial institutions participating in the Pix system.

12Changes to This Policy

The 110bet may update this Privacy Policy periodically to reflect changes in our practices, Brazilian legislation, or the services we offer. When material changes are made, you will be notified via:

• Email to the address registered on the account, with at least 15 days' notice;
• Notification in the account panel the next time you log in;
• Notice banner on the platform's homepage throughout the transition period.

The date of the last update is always shown at the top of this page. Changes required by urgent legal obligations may take effect immediately, with retroactive notice. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

13Contact & Data Protection Officer (DPO)

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report suspected misuse of your information, please contact our Data Protection Officer:

• DPO Email: privacidade@110bet.best
• General support: suporte@110bet.best
• Live chat: available 24 hours on the 110bet website and app — support in Portuguese

The response time for data subject rights requests is up to 15 calendar days. For urgent security matters — such as suspected unauthorized account access — live support responds in under 3 minutes and can immediately lock the account while the situation is investigated.

If your request is not satisfactorily resolved by 110bet within the deadline, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided for in Article 18 of the LGPD.