1991bet Privacy Policy – Data Protection and LGPD

A 1991bet is the operator responsible for processing the personal data collected through the platform available at 1991bet.best. Under the LGPD, we are the controller — the company that decides how and why your data is processed.

This Privacy Policy applies to all users who interact with 1991bet — whether to register, bet on the Brasileirão Série A, play Aviator, Spaceman, or any other crash game, use the VIP Program, make deposits via Pix or boleto bancário, or simply browse the platform.

By creating an account on 1991bet and accepting our Terms and Conditions, you are also acknowledging and agreeing to this Privacy Policy. If you have any questions about any part of this document, please contact us at privacidade@1991bet.best before using the platform.

1991bet collects different categories of data depending on how you interact with the platform. Below are the main categories and examples of data collected in each context:

1991bet does not collect sensitive data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where strictly required by law and with your express consent.

Each piece of data collected by 1991bet has a specific, declared purpose. There is no generic collection "for future use" without justification. The main purposes are:

• Account creation and management: Validate your registration, authenticate your access, and maintain your preferences and settings — including VIP Program deposit limits and responsible gaming configurations.
• Processing financial transactions: Process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago; process withdrawals to your Pix key registered with Nubank, Itaú, Bradesco, or another bank; maintain transaction history for tax and legal purposes.
• Providing betting and gaming services: Recording bets on Brasileirão, Copa do Brasil, and other events; processing rounds of crash games such as Aviator, Spaceman, and JetX; calculating and applying cashback under the VIP Program; managing bonuses and their rollover requirements.
• Identity verification (KYC): Meet legal obligations related to anti-money laundering and counter-terrorism financing, verify eligibility (18 or over, resident in Brazil), and confirm ownership of the bank accounts used for withdrawals.
• Security and fraud prevention: Detect and prevent unauthorized account use, creation of multiple accounts, use of bots, and other conduct prohibited under 1991bet's Terms and Conditions.
• Service communications: Send account-related notifications (deposit and withdrawal confirmations, security alerts, Terms updates). These communications are essential to the service and cannot be disabled.
• Promotional communications (with consent): Send personalized offers, updates on crash games, Brasileirão promotions, and VIP Program benefits — only when you have expressly authorized receipt of such communications.
• Compliance with legal obligations: Respond to requests from competent authorities and fulfill the tax and regulatory obligations applicable to betting and gaming platforms in Brazil.

The LGPD requires that all personal data processing have an identified legal basis. 1991bet relies on the following legal bases, as set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): The processing required to operate your account, handle bets, execute Pix payments, and process withdrawals. Without this data, it is not possible to provide the service you signed up for when creating your 1991bet account.
• Consent (art. 7, I): For promotional communications, offer personalization, and the use of non-essential cookies. You may withdraw this consent at any time without affecting your account's core functionality.
• Compliance with legal obligation (art. 7, II): For identity verification (KYC), retention of financial records in accordance with Brazilian tax legislation, and compliance with requests from authorities.
• Legitimate interest (art. 7, IX): For platform security purposes, fraud prevention, detection of multiple accounts, and protection of 1991bet's rights — always proportionately and in respect of your fundamental rights.

A 1991bet does not sell personal data. Data sharing occurs only when strictly necessary for the operation of the service, always under contracts that impose confidentiality and security obligations equivalent to our own. The categories of third parties with whom your data may be shared are:

• Payment providers: To process deposits and withdrawals via Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago. These providers receive only the data required to carry out the specific transaction.
• Game providers: Companies such as Spribe (Aviator, Mines), Pragmatic Play (Spaceman), SmartSoft Gaming (JetX), and other crash games, slots, and live casino providers receive only the minimum data necessary to authenticate your gaming session and process bets and winnings.
• KYC and anti-fraud providers: Identity verification platforms used to confirm eligibility and prevent fraud. These providers operate as data processors under 1991bet's instructions.
• IT infrastructure services: Hosting, cloud storage, and security service providers that support the platform's technical operations.
• Authorities and regulatory bodies: When required by court order, request from a competent law enforcement or regulatory authority, or by legal obligation. 1991bet only discloses data upon formal request and within the limits of the law.

No data is shared with third-party advertising companies for targeting or behavioral tracking purposes outside the 1991bet platform.

1991bet employs a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, accidental or unlawful disclosure, or destruction:

• Encryption in transit: All communications between your device (mobile or desktop) and 1991bet's servers are protected by TLS/SSL with 256-bit ciphers. This applies to registration, login, Pix transactions, withdrawals, and any other interaction with the platform.
• Encryption at rest: Sensitive data stored on 1991bet's servers — including identity documents submitted for KYC and financial data — is encrypted at rest using modern security standards.
• Access control: Only employees with a verified operational need have access to user data, and all such access is recorded in audit logs. Administrative access requires multi-factor authentication.
• Security monitoring: 1991bet's infrastructure is continuously monitored by intrusion detection and anomaly analysis tools. Security incidents are investigated and resolved with the highest priority.
• Regular testing: The platform undergoes periodic penetration testing and vulnerability assessments carried out by teams specializing in web and mobile application security.

In the event of a security incident that may pose a risk or cause harm to data subjects, 1991bet will notify affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes and in the manner required by the LGPD.

1991bet retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to applicable minimum legal retention periods:

• Registration data and account history: Retained for as long as your account is active and for up to 5 years after closure, in accordance with legal obligations and the statute of limitations for civil claims.
• Financial records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of the transaction, as required by Brazilian tax and accounting legislation.
• KYC documents (ID, selfie, proof of address): Retained for the duration of the account and for 5 years after closure, in accordance with anti-money laundering legislation (Law No. 9,613/1998).
• Support communication records: Retained for 2 years from the closure of the support ticket, for quality assurance and potential dispute resolution purposes.
• Technical data (access logs, IP): Retained for a minimum of 6 months as required by the Brazilian Internet Civil Rights Framework (Lei nº 12.965/2014), and for longer periods when necessary for fraud investigations or as required by law.

Once the applicable retention period expires, data is deleted or anonymized in a way that cannot be reversed to identify you as an individual.

The LGPD grants you, as the holder of personal data processed by 1991bet, a robust set of rights that can be exercised at any time through your account panel or via privacidade@1991bet.best:

1991bet uses cookies and similar technologies to ensure the platform functions correctly, personalize your experience, and — with your consent — understand how you use the service in order to continuously improve it.

• Essential cookies: Required for the basic operation of the platform — session authentication, maintaining your login state, and gaming preferences. These cannot be disabled without affecting account functionality.
• Security cookies: Used to detect suspicious behavior, identify unauthorized access attempts, and protect your account against fraud. These are part of 1991bet's essential security measures.
• Performance cookies (with consent): They collect anonymous data on how users navigate the platform — which sections of the Live Casino or crash games are most visited, loading times across different devices and browsers. They help 1991bet improve the experience for all Brazilian users.
• Personalization cookies (with consent): They allow 1991bet to tailor content display to your preferences — such as highlighting Brasileirão odds for frequent football bettors, or showing crash games on the home screen for users who prefer Aviator.

You can manage your cookie preferences through the account privacy settings panel. Essential and security cookies cannot be disabled. For all others, consent may be withdrawn at any time.

1991bet is a Sports Betting and casino gaming platform intended exclusively for users aged 18 and over residing in Brazil. We do not intentionally collect personal data from individuals under 18 years of age.

During registration, we request your date of birth and carry out an eligibility check. If we determine that an account was created by a minor, the account is closed immediately, the collected data is deleted within 30 days (except for records needed for the incident investigation), and any real-money deposit balance is refunded.

If you believe a minor has created an account on 1991bet, please notify our team immediately at suporte@1991bet.best or via our 24-hour live chat. We will take the necessary steps as a priority.

Some of the partner service providers of 1991bet — such as cloud infrastructure platforms and game providers like Spribe, Pragmatic Play, and SmartSoft Gaming — may process data on servers located outside Brazil.

When such an international transfer occurs, 1991bet ensures that:

• The destination country provides an adequate level of personal data protection, as assessed by the ANPD or by internationally recognized equivalent authorities; or
• Specific contractual clauses with the recipient partner are in place to ensure protection equivalent to that required by the LGPD, including confidentiality obligations, purpose limitation, and incident notification requirements; or
• The transfer is necessary for the performance of the service agreement with 1991bet, such as when game rounds are processed by certified providers.

The list of key countries where data may be processed by our partners includes European Union member states (with equivalent protection under the GDPR), Malta, Gibraltar, and other jurisdictions with internationally recognized gaming regulation.

1991bet may update this Privacy Policy to reflect changes in the services offered, in Brazilian data protection legislation, or in internal data processing practices.

Changes that materially affect your rights — such as new processing purposes, new types of data collected, or new third-party sharing arrangements — will be communicated with at least 15 days' notice by email to the address registered on your account. For such material changes, we will request new consent where the legal basis requires it.

Minor updates (text corrections, clarifications that do not change the scope of processing) may be published without prior notice. The date of the last update is always shown at the top of this page.

Continued use of the platform after the changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure before the effective date by emailing suporte@1991bet.best.

To exercise your rights as a data subject, ask questions about this Privacy Policy, request information about how your data is processed, or report a potential security incident, the available channels are:

• Privacy Email (DPO): privacidade@1991bet.best — dedicated channel for LGPD-related requests. Response time of up to 15 business days.
• General Support Email: suporte@1991bet.best — for general questions about your account, Pix deposits, withdrawals, and betting. Response time of up to 4 hours.
• Live Chat: Available 24 hours a day, 7 days a week, through your account dashboard. For urgent privacy requests (such as emergency account blocking), live chat is the fastest channel.

If your request is not satisfactorily resolved through 1991bet's channels, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), pursuant to art. 18, §1 of the LGPD.