R4bet Privacy and Data Protection Policy

1 Who Controls Your Data

The data controller responsible for processing the personal data collected through the platform r4bet is the operating company of the r4bet.best website, a legal entity established and operating in accordance with the legislation applicable to the sports betting and online gaming market in Brazil.

For the purposes of this Privacy Policy, references to "r4bet," "we," or "our platform" refer to the data controller responsible for the platform's operations and the processing of its users' personal information.

The Data Protection Officer (DPO) can be reached by email at contato@r4bet.best for all matters related to the processing of personal data and the exercise of data subject rights.

2 What Data r4bet Collects

2.1 Data You Provide Directly

During registration and platform use r4bet, we collect the following information that you provide directly:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile number, full residential address including ZIP code;
• Identity verification data (KYC): copy of a government-issued ID (national ID, driver's license, or passport), selfie with the document, proof of address;
• Financial data: Pix key for withdrawals, credit/debit card details for deposits (tokenized and never stored in full by r4bet), deposit and withdrawal history;
• Account data: notification preferences, responsible gambling limits configured, betting history, and casino sessions.

2.2 Automatically collected data

When accessing the platform r4bet, some data is collected automatically by our systems:

• Access data: IP address, date and time of access, pages visited, session duration;
• Device data: device type (mobile, tablet, desktop), operating system, browser model, screen resolution;
• Geolocation data: approximate location based on IP address to verify that access is coming from Brazil, as required by regulation;
• Behavioral data: clicks, browsing activity, games accessed, bets placed — used to improve user experience and detect fraud.

3 How We Use Your Data

The r4bet uses the personal data collected exclusively for the purposes described below. No data is used for purposes not set out in this policy without your prior consent:

3.1 Platform operation

• Creation, authentication, and management of your r4bet account;
• Processing deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED;
• Processing withdrawals and verifying ownership of payment methods;
• Recording and settlement of Sports Betting, Live Casino games, slots, crash games, and e-sports;
• Betting and transaction history available directly in your account area.

3.2 Security and fraud prevention

• Identity verification (KYC) for withdrawal authorization and compliance with legal obligations;
• Detection and prevention of multiple accounts, money laundering, and other fraudulent activity;
• Monitoring of access patterns to identify unauthorized access attempts;
• Compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Brazilian law.

3.3 Communications and support

• Sending transactional emails: account registration confirmation, deposits, withdrawals, and bets;
• Communications about r4bet promotions and bonuses (you may opt out of these at any time);
• Customer support via live chat, with conversation history recorded for quality control;
• Notifications about updates to the Terms and Conditions or this Privacy Policy.

3.4 Responsible gambling

• Monitoring of usage patterns to identify signs of problem gambling behavior;
• Applying deposit and session limits configured by you;
• Enforcement of temporary and permanent self-exclusions requested by the user or applied by the platform.

3.5 Platform Improvement

• Analysis of aggregated and anonymized usage data to improve the platform experience;
• Testing new features and optimizing performance based on behavioral data;
• Satisfaction surveys sent occasionally to users who have consented to participate.

4 Legal Basis for Processing

Every data processing operation carried out by r4bet is grounded in one of the legal bases set out in the LGPD (Art. 7). The table below summarizes the main legal bases used:

• Contract performance (Art. 7, V): processing required to provide platform services – registration, bet processing, deposits, and withdrawals;
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and retention of financial records as required by applicable law;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, responsible gambling monitoring, and service improvement;
• Consent (Art. 7, I): sending promotional communications and invitations to satisfaction surveys – you can withdraw your consent at any time.

5 Who We Share Your Data With

The r4bet does not sell or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only in the situations below, strictly necessary for the platform to function:

5.1 Payment Processors

To enable deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED (Nubank, Itaú, Bradesco, Banco do Brasil), the r4bet shares only the data strictly necessary with the operators of each payment method. These partners act as data processors and are contractually required to handle the information with the same level of security demanded by the LGPD.

5.2 Game and Casino Providers

To provide Live Casino games, slots, and crash games, r4bet may share session identifiers and betting data with partner providers (Pragmatic Play, Evolution, NetEnt, Play'n GO, Spribe, and others). This data is used solely for gameplay execution and does not include the user's full financial information.

5.3 Government and regulatory authorities

The r4bet will share personal data with competent Brazilian authorities whenever required by law, court order, or regulations applicable to the sports betting and online gaming market, including requests related to anti-money laundering and fraud investigations.

5.4 Identity verification partners

For identity verification (KYC), r4bet may use specialized document verification bureau services. These partners receive submitted documents solely for analysis purposes and are contractually prohibited from using that information for any other purpose.

6 Cookies and Tracking Technologies

The r4bet uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and meet security obligations. Below is a description of the types of cookies used:

6.1 Essential Cookies

Required for the platform to function properly. These include authentication session cookies (which keep you logged in), security tokens (CSRF protection), and language preference cookies. Disabling these cookies would compromise your ability to use the platform.

6.2 Performance & Analytics Cookies

Used to understand how users interact with r4bet — which pages are most visited, which games are most popular, and average session duration. Data is collected in aggregate and anonymized form. These cookies can be declined in your browser settings without affecting core functionality.

6.3 Security & Fraud Prevention Cookies

Used to identify devices in suspicious sessions, detect multiple accounts originating from the same device, and prevent automated attacks. These are essential for protecting the platform and its users.

6.4 Cookie Management

You can manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, or delete cookies individually. By disabling analytics cookies, you will no longer receive personalized advertising – the r4bet does not display third-party ads on the platform.

7 How Long We Retain Your Data

The r4bet retains personal data for as long as necessary for the purposes for which it was collected, respecting the minimum retention periods required by Brazilian law:

• Registration and identification data: for the entire duration of the account and for at least 5 years after closure, in accordance with anti-money laundering legal obligations;
• Identity verification documents (KYC): for a minimum of 5 years after the verification date or account closure, whichever is later;
• Financial records (deposits, withdrawals, bets): for a minimum of 5 years, in accordance with Brazilian financial and tax legislation;
• Access and security logs: for 6 months to 2 years, as applicable under the Marco Civil da Internet (Law No. 12.965/2014);
• Support conversation history: for 2 years after the last interaction, for quality control and potential dispute resolution purposes;
• Analytics cookie data: up to 13 months after collection, or in accordance with the user's browser settings.

Once the applicable retention periods expire, data is securely deleted or anonymized in a way that makes it impossible to identify the individual.

8 How We Protect Your Data

The security of users' personal data is a core technical and operational priority of the r4bet. We have implemented a set of technical and organizational measures to protect your information against unauthorized access, loss, alteration, or improper disclosure:

8.1 Technical Measures

• 256-bit SSL/TLS Encryption: all communications between your device and r4bet's servers are encrypted in transit;
• Encryption at rest: sensitive data at rest (such as KYC documents and financial information) is encrypted on our servers;
• Payment data tokenization: credit/debit card data is tokenized immediately – r4bet never stores your full card number;
• Two-factor authentication (2FA): available to all users as an additional layer of login security;
• Continuous monitoring: intrusion detection systems and 24-hour server monitoring to identify suspicious activity.

8.2 Organizational Measures

• Access to users' personal data is restricted to staff members who need that information to perform their duties;
• All staff with access to personal data undergo regular training on data protection and the LGPD;
• Confidentiality and data protection agreements are signed by all staff and partners with access to user information;
• Regular security reviews and internal audits to identify and address vulnerabilities.

8.3 Security Incidents

In the event of a security incident that may affect your personal data, the r4bet will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes set by the LGPD, with clear information about what happened, which data was affected, and the steps taken to remedy the situation.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights regarding your personal data processed by r4bet. You may exercise any of these rights at any time via live chat or by emailing contato@r4bet.best. We respond to all requests within 15 business days.

10 Protection of Minors

The platform r4bet is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18, and account registration requires age confirmation via CPF verification.

If r4bet identifies that data belonging to a user under 18 has been collected in error, the account will be immediately blocked, the data will be deleted, and any balance will be held pending investigation. Legal guardians who discover that their minor dependents are using the platform should contact support immediately to request account blocking and data deletion.

The mandatory identity verification required to process withdrawals also serves as an additional layer of protection, ensuring that no underage user can move funds on the platform.

11 International Data Transfers

Due to the global nature of some of the partner game providers of the r4bet (such as Pragmatic Play, Evolution, and NetEnt, which operate servers across multiple countries), session data may be transferred internationally to enable gameplay.

Any international data transfer carried out or facilitated by the r4bet complies with the requirements set out in Articles 33 to 36 of the LGPD, and is carried out only with countries that have equivalent data protection legislation, or through specific contractual clauses that guarantee the same level of protection required under Brazilian law.

Complete financial data (KYC documents, banking details, transaction history in BRL) is stored and processed on secure servers, with the necessary technical and contractual controls to ensure its protection regardless of where processing takes place.

12 Changes to this Privacy Policy

The r4bet may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or the services available on the platform.

Changes that reduce your rights or expand the use of your data for new purposes will be communicated via your registered email address and through a visible notification on the platform with at least 15 days in advance prior to its entry into force. For minor changes — such as wording corrections or clarifications that do not affect the substance of the policy — notification may be given solely by updating the date at the top of the document.

If you do not agree with the changes, you may exercise your right to data deletion and close your account before the new version takes effect. Continued use of the platform after that date constitutes implicit acceptance of the new terms.

13 Contact, DPO, and Complaints

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you may contact the r4bet through the following channels:

• Live chat: available directly on the platform, 24 hours a day, 7 days a week;
• Email: contato@r4bet.best – for privacy and data protection matters, please use the subject line "LGPD – [Your Right]" to ensure your request is prioritized;
• Data Protection Officer (DPO): the same email channel above, addressed to the DPO.

If you are not satisfied with the response from the r4bet regarding a request related to your personal data, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for enforcing the LGPD in Brazil, through the channels made available by the federal government.