Privacy Policy of 83h83 — LGPD Data Protection

1. Introduction

The 83h83 ("Platform", "we", "our") operates the website 83h83.net and all associated services: Sports Betting, Live Casino, slots, poker, roulette, crash games, and progressive jackpot. This Privacy Policy describes how we collect, use, store, share, and protect the personal data of users who access and use our services.

This Policy was drafted in compliance with the General Data Protection Law (LGPD — Law 13.709/2018) and applies to all registered users and visitors of 83h83.net, regardless of the device used — whether on a desktop, Android or iOS mobile device, or any other platform.

By creating an account, making a deposit via Pix, or simply browsing the site, you are subject to the rules of this Policy. We recommend reading it in full. If you do not agree with any part of this document, you should not use the services of the 83h83.

2. Data Controller

The controller of personal data processed in connection with the services of the 83h83 is the platform itself, operated under the 83h83 brand and accessible at 83h83.net. The controller is responsible for decisions regarding the processing of users' personal data and is accountable for LGPD compliance within the platform.

For privacy and data protection inquiries, users may contact the 83h83 Data Protection Officer (DPO) as described in Section 14 of this Policy.

3. Data We Collect

The 83h83 collects personal data at different points during your interaction with the platform. The data collected is described below, grouped by category:

3.1 Registration Data

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (zip code, street, number, neighborhood, city, state).

3.2 Identity Verification Data (KYC)

• Official photo ID document (RG, CNH, or passport);
• Recent proof of address (utility bill for electricity, water, or gas, or a bank statement);
• Verification selfie (when requested to confirm identity).

3.3 Financial Data

• Pix key registered for deposits and withdrawals;
• Deposit and withdrawal history (amounts, dates, methods used);
• Partial credit or debit card details (full card data is processed directly by payment gateways and is not stored by 83h83);
• PicPay and Mercado Pago account identifiers, when used.

3.4 Usage and Behavioral Data

• Betting and gaming history (games accessed, amounts wagered, results);
• Session duration and access frequency;
• Game preferences and account settings;
• Records of interactions with customer support.

3.5 Technical Data

• IP address;
• Browser type and version;
• Operating system and device type (Android, iOS, desktop);
• Approximate geolocation information (derived from IP address);
• Cookie and similar tracking technology data (detailed in Section 9).

4. Purpose of Data Processing

The 83h83 processes personal data solely for the purposes described below. We do not use data for purposes other than those for which it was collected, except with renewed consent or a specific legal basis.

5. Legal Bases for Processing (LGPD)

As required by the LGPD, all personal data processing carried out by the 83h83 is grounded in at least one of the following legal bases:

• Contract performance (art. 7, V): processing required to deliver the services you contracted when creating your account — account management, processing deposits via Pix, boleto, card, or PicPay, processing withdrawals, and providing access to games;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and reporting to regulatory authorities as required by Brazilian law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, detection of bonus abuse, behavioral analysis for identifying responsible gambling concerns;
• Consent (art. 7, I): sending promotional and marketing communications by email or mobile. Consent may be withdrawn at any time without affecting your account or services.

6. Data Sharing with Third Parties

The 83h83 does not sell, rent, or trade users' personal data. Data is shared only in the situations described below, and solely for the purpose of operating the platform or fulfilling legal obligations:

6.1 Service Providers (Processors)

83h83 uses third-party service providers that act as data processors under the platform's direct instruction:

• Payment gateways: required to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These providers receive only the data strictly necessary to process each transaction and are subject to the same security and confidentiality obligations;
• Game providers: companies such as Evolution, Pragmatic Play, and Ezugi, which provide Live Casino games and slots. They receive anonymous session identifiers for technical game operation;
• Identity verification services: KYC platforms for document validation during the verification process;
• Cloud infrastructure: servers and cloud storage services where data is hosted with encryption;
• Customer support platforms: live chat and email tools used for customer support.

6.2 Regulatory and Judicial Authorities

The 83h83 may share personal data with government, regulatory, or judicial authorities when required by Brazilian law, by court order, or for the prevention and investigation of financial crimes such as money laundering and fraud.

7. Data Retention & Deletion

The 83h83 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. Retention periods are:

• Active account data: retained for the entire duration of the account and for up to 5 years after closure, in accordance with anti-money laundering requirements and Brazilian tax legislation;
• Financial data (transaction history): 5 years after the last transaction, in accordance with Brazilian tax legislation;
• KYC Documents: for a minimum period of 5 years following account closure, in accordance with Law 9.613/1998 (anti-money laundering);
• Support records: 2 years after the ticket is resolved;
• Technical access data (logs): 6 months from the date of generation;
• Marketing data (with consent withdrawn): deleted within 30 days of consent withdrawal.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified.

8. Information Security

The 83h83 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. Measures in place include:

8.1 Technical Measures

• Encryption in transit: all traffic between the user's device and 83h83's servers is protected by TLS 1.3;
• Encryption at rest: sensitive data stored with AES-256 encryption;
• Access control: access to personal data restricted to employees and systems with a verified need, applying the principle of least privilege;
• Multi-factor authentication: required for administrative access to systems that store personal data;
• Continuous monitoring: intrusion detection systems and anomalous behavior analysis operating 24 hours a day;
• Encrypted backups: performed on a regular basis and stored in locations separate from production.

8.2 Security Incidents

In the event of a security incident that may result in significant risk or harm to users, the 83h83 will notify the National Data Protection Authority (ANPD) and affected data subjects within the timeframes established by the LGPD, including details on the nature of the incident, the data involved, and the mitigation measures taken.

9. Cookies and Tracking Technologies

The 83h83 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and ads. The types of cookies used are listed below:

9.1 Strictly Necessary Cookies

Cookies strictly necessary for the platform to function — including authenticated session maintenance, language preferences, security settings, and fraud prevention. These cookies cannot be disabled, as they are required for you to access your account and use 83h83's services.

9.2 Performance and Analytics Cookies

Used to analyze how users navigate the site, which pages are most visited, and how to improve the overall experience. Data collected by these cookies is anonymous or pseudonymized. You may decline these cookies in your browser settings without affecting access to our services.

9.3 Functionality Cookies

These allow the platform to remember user preferences — such as favorite games, display settings, and language — for a more personalized experience.

9.4 Managing Cookies

You can manage and delete cookies at any time through your browser settings (Chrome, Safari, Firefox, etc.) or your mobile device's operating system. Disabling functional cookies may affect parts of the service. Analytics and functionality cookies can be disabled without impacting access to the platform.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, the following rights regarding the processing carried out by the 83h83:

• Confirmation and access (art. 18, I and II): confirm whether your data is being processed and access a copy of the information we hold about you;
• Correction (art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion (art. 18, IV): request the anonymization or deletion of data that is unnecessary or processed in violation of the LGPD;
• Portability (art. 18, V): request the portability of your data to another service provider, where applicable and technically feasible;
• Deletion upon withdrawal of consent (art. 18, VI): request the deletion of data processed on the basis of your consent, after revoking it;
• Right to information on sharing (art. 18, VII): obtain information about which public and private entities we share your data with;
• Right to withdraw consent (art. 18, IX): withdraw consent given for specific purposes (such as marketing) without affecting access to core services;
• Objection (art. 18, §2): object to processing carried out on the basis of legitimate interest where it conflicts with the LGPD.

10.1 How to Exercise Your Rights

To exercise any of these rights, submit a request to suporte@83h83.net with the subject line "LGPD Rights", including: your full name, registered CPF, and a clear description of the right you wish to exercise. The 83h83 will respond within 15 calendar days, as required by the LGPD. If we are unable to fulfill a request, we will explain the reason in writing.

11. Protection of Minors

The 83h83 is an entertainment platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. The registration process includes date-of-birth verification and requires supporting documentation.

If we become aware that data from a minor was inadvertently collected, we will immediately delete that information and close the corresponding account. Legal guardians who believe a minor has created an account should contact our support team immediately.

12. International Data Transfers

Some of the service providers used by 83h83 — such as cloud infrastructure providers and Live Casino game suppliers — may be located outside Brazil. When this occurs, the 83h83 adopts the safeguards required by the LGPD to ensure that the level of data protection is equivalent to that provided under Brazilian law:

• Specific contractual data protection clauses with all international service providers;
• Transfer only to countries whose data protection legislation is recognized as adequate, or to certified providers meeting equivalent standards;
• Periodic review of the safeguards in place for each international provider.

International transfers occur solely for the purposes described in this Policy and never for the sale or commercialization of data.

13. Changes to this Privacy Policy

The 83h83 may update this Privacy Policy to reflect changes in platform operations, applicable law, or data processing practices. When this happens:

• The "last updated" date at the top of this page will be revised;
• Users with active accounts will receive email notifications about relevant changes;
• For changes that significantly affect the rights of data subjects, a minimum notice period of 15 days will be provided before the new version takes effect;
• Continued use of the platform after changes are published constitutes acceptance of the updated Policy.

We recommend reviewing this page periodically. The most recent version is always available at 83h83.net/privacy-policy.

14. Data Protection Officer (DPO)

The 83h83 has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for:

• Receiving communications from data subjects and from the National Data Protection Authority (ANPD);
• Train staff and service providers on data protection best practices;
• Carry out any other duties assigned by the platform or under supplementary regulations.

To contact the DPO of the 83h83, use the email suporte@83h83.net with the subject line "DPO — Data Protection". Requests will be responded to within 15 calendar days.

If you believe that the 83h83 did not respond adequately to your request or that your rights as a data subject were not respected, you may file a complaint directly with the National Data Protection Authority (ANPD), as set forth in art. 18, §1 of the LGPD.