Privacy Policy of 211bet — your data protected with transparency

1Who we are — your data Controller

A 211bet, operated through the website 211bet.best, is the controller of the personal data collected from users who register and use the Sports Betting and online casino platform. For the purposes of the General Personal Data Protection Law (LGPD — Lei nº 13.709/2018), the controller is the entity responsible for determining the purposes and means of processing your data.

Our platform offers Sports Betting with comprehensive coverage of Brazilian football — Brasileirão Série A, Copa do Brasil, and Libertadores — as well as MMA and UFC, online casino with slots, crash games, Live Casino, roulette, blackjack, baccarat, and bingo, all exclusively tailored to the Brazilian market.

2What Personal Data We Collect

A 211bet collects only the data strictly necessary to provide its services and meet legal obligations. Collection follows the data minimization principle set out in the LGPD. See below for the categories and data collected:

Data provided directly by you

• Registration: full name, CPF, date of birth, email address, mobile number, full residential address, and account password (stored in encrypted format);
• Identity verification (KYC): a photo ID (RG, CNH, or valid passport) and proof of address, collected when necessary for fraud prevention and compliance with regulatory obligations;
• Financial data: Pix key (linked to CPF), credit or debit card details (stored in tokenized form, with no access to the full card number by 211bet), and the history of deposits and withdrawals made on the platform.

Automatically collected data

• Usage data: Sports Betting and casino game history, pages visited, features used, session duration, and interactions with the platform;
• Technical data: IP address, browser or app type and version, operating system, mobile device identifier, time zone, and approximate location data (country and state);
• Cookies and similar technologies: detailed in section 6 of this policy.

3How and why we use your data

A 211bet uses collected data exclusively for the purposes listed below. No data is processed for any purpose other than those described in this policy without the data subject's renewed consent.

Your sports betting history — including football, MMA, UFC, and other sports — is used internally to personalize your experience on the platform, such as displaying relevant odds based on your past activity. This use is aggregated and does not involve the sale or sharing of that data with third parties.

4Legal bases for processing (LGPD)

All data processing carried out by 211bet is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): most data is processed to fulfill the services you contracted when creating your account and using the platform — betting, withdrawals, support;
• Compliance with Legal Obligation (Art. 7, II): data required for KYC, anti-money laundering compliance, and reporting to regulatory authorities under Brazilian law;
• Legitimate Interest (Art. 7, IX): technical and usage data used for platform security, fraud prevention, and service improvement, provided they do not override your fundamental rights and freedoms;
• Consent (Art. 7, I): used exclusively for marketing communications. Consent may be withdrawn at any time without affecting access to the platform's services.

5Data Sharing with Third Parties

A 211bet does not sell, rent, or trade personal data with third parties. Data sharing occurs only in the strictly necessary situations listed below, always with appropriate safeguards:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, we share only the minimum data required to complete the transaction. Processors are contractually required to protect your data in accordance with the LGPD;
• Casino game providers: to display and operate slots, crash games, live casino, and other game types, minimal technical data such as session identifiers are shared with certified providers. No personally identifiable information is transmitted without a legal basis;
• Identity Verification Services (KYC): when you go through the identity verification process, your documents are handled by specialized partners operating under data protection agreements compliant with the LGPD;
• Legal and regulatory authorities: when required by law, court order, or request from a competent authority, 211bet may disclose data to applicable Brazilian authorities, such as the Receita Federal, the Conselho de Controle de Atividades Financeiras (COAF), or the Autoridade Nacional de Proteção de Dados (ANPD).

6Cookies and tracking technologies

A 211bet uses cookies and similar technologies to ensure the platform works correctly, improve user experience, and, with your consent, personalize content. The types of cookies used are:

• Strictly necessary cookies: essential for platform operation — session authentication, language preferences, login security. They cannot be disabled without compromising the functionality of the services;
• Performance and analytics cookies: collect anonymous data about how users navigate the platform (most visited pages, session duration, errors). Used to improve the overall experience. Can be declined without affecting any services;
• Personalization cookies: used to remember preferences (such as favorite sports or games) and personalize content display. Activated only with consent;
• Marketing cookies: used to measure the effectiveness of 211bet campaigns — not for third-party advertising. Activated only with express consent.

You can manage your cookie preferences at any time through the consent banner shown on your first visit or through your browser settings. Declining non-essential cookies does not affect your access to betting, withdrawals, or any core platform feature.

7How long we keep your data

A 211bet retains personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, or to meet legal obligations. General retention periods are:

• Active Account Data: retained for as long as the account is active and the services are in use;
• Financial data and transaction history: retained for at least 5 (five) years after account closure, as required by Brazilian anti-money laundering legislation and the Receita Federal;
• KYC Data (identity documents): retained for a minimum of 5 (five) years after account closure, or for the period determined by the relevant regulatory authorities;
• Communication and support data: retained for 2 (two) years for dispute resolution and service improvement purposes;
• Marketing consent data: retained for as long as consent remains active. After withdrawal, contact details are removed from marketing lists within 10 business days.

Once the applicable retention periods expire, data is deleted or irreversibly anonymized, making it impossible to identify the data subject.

8Your Rights as a Data Subject

Under the LGPD, you have the following rights regarding the personal data processed by 211bet. All rights may be exercised free of charge by emailing contato@211bet.best with the subject line "LGPD Rights":

9Information security

A 211bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Key measures in place include:

• SSL/TLS encryption on all communications between clients and servers;
• Passwords are stored in hashed format using modern algorithms — 211bet never stores your password in plain text;
• Credit card data is tokenized by PCI-DSS certified payment processors — the full card number is never stored on 211bet's servers;
• Role-based access control (RBAC) for internal staff — each employee can only access the data required for their specific role;
• Continuous security monitoring with anomaly detection and unauthorized access attempt alerts;
• Encrypted backups on a regular schedule with restoration testing;
• Two-factor authentication (2FA) is available to all players as an additional layer of account security.

In the event of a security incident that could pose a significant risk or harm to data subjects, 211bet will notify affected users and the ANPD within the timeframes and in the manner required by the LGPD.

10International Data Transfers

Some technical service providers used by 211bet — such as cloud server infrastructure and international casino game providers — may process data on servers located outside Brazil. When this occurs, 211bet ensures that:

• The transfer is made to countries or organizations with a level of data protection equivalent to that of the LGPD, as assessed by the ANPD;
• Standard contractual clauses are executed, binding the recipient to handle data with the same level of protection required under Brazilian law;
• Only the minimum necessary data is transferred, in accordance with the data minimization principle.

Financial data related to transactions via Pix, boleto bancário, PicPay, and Mercado Pago is processed exclusively within Brazil, by financial institutions regulated by the Banco Central do Brasil.

11Users Under 18

The services of 211bet are intended exclusively for individuals aged 18 (eighteen) or older. The platform does not intentionally collect, process, or store personal data from anyone under 18. Registration requires CPF verification and age confirmation by the account holder.

If 211bet determines that data from a minor was submitted — whether through fraudulent registration or any other means — that data will be deleted immediately, the account will be closed, and any available balance will be returned to the verified account holder. The incident will be reported to the relevant authorities where applicable.

If you are a parent or legal guardian and believe your child under 18 has created an account on 211bet, please contact us immediately at contato@211bet.best so we can take action with the utmost urgency.

12Changes to this Privacy Policy

A 211bet may update this Privacy Policy periodically to reflect changes in its services, applicable Brazilian legislation, or data processing practices. Material changes will be communicated with at least 7 (seven) days' notice via:

• Prominent notice on the platform's home page and in the account notifications area;
• Email notification to your registered address whenever a change directly affects the rights of data subjects;
• Update of the "Last updated" date at the top of this document.

Continued use of the platform after changes take effect constitutes acceptance of the updated Policy. If you disagree with the changes, you may close your account and request deletion of your data before the effective date, at no cost or penalty.

13Contact, DPO & How to Exercise Your Rights

To exercise any right under the LGPD, file a complaint, or get clarification on how your data is handled by 211bet, use the channels below:

• DPO (Data Protection Officer) email: contato@211bet.best — subject line: "Data Privacy" or "LGPD Rights";
• Live chat: available 24 hours a day, 7 days a week, directly on the platform;
• WhatsApp: human support in Portuguese, 24 hours a day.

Requests related to data subject rights are handled within up to 15 (fifteen) business days. For urgent matters — such as a suspected data breach or unauthorized account access — please contact us via live chat for immediate assistance.

If after contacting 211bet you feel your rights have not been properly addressed, you can file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) at www.gov.br/anpd.