Privacy Policy of a188bet – LGPD and Data Protection

For the purposes of Lei nº 13.709/2018 (LGPD), the personal data controller collected through the platform a188bet is the operating company behind a188bet.click, responsible for all decisions regarding the processing of Brazilian users' personal data.

A188bet has appointed a Personal Data Processing Officer (DPO — Data Protection Officer), as required by Article 41 of the LGPD. The DPO serves as the communication channel between the company, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights or to clarify any questions about this policy, you can contact the a188bet DPO by email at privacidade@a188bet.click or via the platform's live chat, available 24 hours a day in Portuguese. The response deadline is up to 15 calendar days from receipt of the request.

The a188bet collects personal data in the following situations and categories:

2.1 Data provided directly by the user

• Registration: full name, date of birth, CPF, residential address (street, number, complement, neighborhood, city, state, ZIP code), email, and mobile phone number;
• Identity verification (KYC): government-issued ID image (RG or CNH), selfie for identity verification, proof of address;
• Payment methods: registered Pix key, credit or debit card details (tokenized, never stored in plain text), bank account information for TED transfers;
• Support communications: live chat conversation history, and emails exchanged with the support team.

2.2 Automatically collected data

• Browsing data: IP address, browser type and version, operating system, device (mobile, desktop, tablet), pages visited, session duration;
• Behavioral data: betting history, games accessed, bonuses used, preferred categories (football, e-sports, blackjack, slots);
• Location data: country and region of access, derived from IP address (we do not collect real-time GPS location without explicit consent);
• Cookies and similar technologies: session identifiers, interface preferences, authentication tokens.

Each data processing activity carried out by a188bet has a specific purpose and a legal basis provided under the LGPD. The table below summarizes the main ones:

When the legal basis is consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent can be withdrawn through your account settings or by emailing the DPO of a188bet.

The a188bet does not sell or rent users' personal data. Sharing occurs exclusively with the following categories of partners and in the situations described:

• Payment processors: financial institutions and intermediaries such as Pix (Banco Central), card operators, PicPay, and Mercado Pago receive only the minimum data necessary to process your transactions. All operate under data processing agreements with LGPD compliance clauses;
• Casino game providers: Evolution Gaming, Pragmatic Play, and other certified providers receive session identifiers to enable live sessions. They do not receive your full financial details or CPF;
• Technology infrastructure providers: cloud hosting, CDN, and security monitoring services that process data to keep the platform running — always under confidentiality agreements and in compliance with the LGPD;
• Public authorities and regulatory bodies: when required by court order, ruling from a competent authority, Banco Central do Brasil regulations, or COAF (anti-money laundering), a188bet shares only the data strictly necessary to comply with the legal requirement;
• National Data Protection Authority (ANPD): in the event of a security incident involving significant risk, as required under the LGPD.

The a188bet uses cookies and similar technologies to ensure the platform works properly, personalize your experience, and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — maintaining your logged-in session, bet slip, and language preferences. They cannot be disabled without affecting your ability to use the platform;
• Performance cookies: collect information about how users navigate a188bet (most visited pages, errors encountered, loading times) so we can improve the experience. Data is aggregated and anonymous;
• Functionality cookies: remember your interface preferences (such as dark mode or your chosen language) so you don't have to reconfigure them on every visit;
• Analytical cookies: used to understand user behavior in aggregate — which sections are most visited, what device is used (mobile, desktop), and which region of Brazil the traffic comes from. This data is used exclusively to improve the platform.

You can manage or disable cookies through the cookie banner displayed on your first visit or via your browser settings. Disabling essential cookies may prevent login and betting from working correctly on a188bet.

The a188bet retains personal data for the minimum period necessary to fulfill each purpose for which it was collected, in accordance with mandatory legal timeframes. The general criteria are:

• Active account data: for as long as your account remains active on the platform;
• Financial transaction data (deposits and withdrawals via Pix, boleto, card): minimum of 5 years after the transaction, in accordance with tax legislation and anti-money laundering laws (Law No. 9.613/1998);
• KYC data (identity documents): at least 5 years after account closure, as required by COAF regulations;
• Betting history: minimum of 3 years for audit and dispute resolution purposes;
• Support and communications data: 2 years after the ticket or conversation is closed;
• Data based solely on consent: until consent is withdrawn by the data subject or the purpose is fulfilled, whichever comes first.

Once retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified.

The a188bet adopts appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The key measures include:

• 256-bit SSL/TLS encryption across all communications between the user's device and a188bet's servers;
• Encrypted storage password hashing using modern algorithms (bcrypt) — passwords are never stored in plain text;
• Two-factor authentication (2FA) available to all users as an additional layer of account protection;
• Role-based access control (RBAC) within internal systems — only staff with a specific need have access to certain types of data;
• Continuous monitoring monitoring of suspicious access attempts and intrusion attempts, with automatic alerts to the security team;
• Penetration testing and security audits conducted periodically by independent specialized firms;
• Regular training of the a188bet team on information security best practices and data protection.

Article 18 of the LGPD guarantees you, as the data subject whose personal data is processed by a188bet, the following rights, all of which can be exercised free of charge:

To exercise any of these rights, please contact the DPO at a188bet by email privacidade@a188bet.click or via the platform's live chat. Requests are handled within 15 calendar days. In some cases, we may ask you to confirm your identity before processing the request.

If you feel your rights have not been upheld, you may file a complaint directly with the National Data Protection Authority (ANPD), at gov.br/anpd.

The platform a188bet is strictly intended for users aged 18 and over. We do not knowingly collect, store, or process personal data from minors.

If, at the time of registration or at any later point, the account holder is identified as being under 18 years of age, the account will be immediately closed, the collected data will be deleted in accordance with the LGPD, and any remaining balance will be handled in accordance with the Terms and Conditions.

If you are the guardian of a minor and believe they have created an account at the a188bet, please contact support immediately via chat or at privacidade@a188bet.click so we can take the necessary steps without delay.

Some of the service providers used by a188bet — such as cloud infrastructure providers and live casino game suppliers — may process data on servers located outside Brazil. When this occurs, the a188bet ensures that international transfers comply with the requirements of Article 33 of the LGPD, specifically:

• The recipient country must offer a level of data protection equivalent to that of the LGPD; or
• Adequate contractual safeguards must be in place — such as standard clauses approved by the ANPD or specific data protection agreements — binding the recipient to protection obligations equivalent to those in this policy.

The a188bet maintains an up-to-date record of all international data transfers and can provide information about destinations and safeguards in place upon request to the DPO.

The platform a188bet may occasionally contain links or references to third-party websites, applications, or services — such as sports competition organizers, business partners, or content providers.

This Privacy Policy applies exclusively to the processing of data carried out by a188bet within its own environment. a188bet has no control over the privacy practices of external websites and is not responsible for the data processing carried out by those platforms after a user leaves the a188bet.click environment.

We recommend reading the privacy policy of any external website before providing your personal data.

The a188bet may update this Privacy Policy periodically to reflect changes in our data processing practices, updates to Brazilian legislation, or improvements to our information protection processes.

Whenever significant changes are made — especially those that expand data collection, modify purposes, or affect your rights — we will notify users via their registered email and/or a prominent notice on the platform at least 7 calendar days before the new terms take effect.

The date of the last update is always shown at the top of this page. The most recent version of this policy is permanently available at a188bet.click/privacy-policy.

For all matters related to privacy and your personal data at a188bet, use the channels below:

• DPO Email: privacidade@a188bet.click — for formal requests to exercise LGPD rights, questions about data processing, and incident reporting;
• Live chat: available 24 hours a day in Portuguese directly on the a188bet.click platform — for general inquiries, initial request handling, and immediate support;
• General email: contato@a188bet.click — for all other communications with the platform.

If your request involves data from a closed account or urgent situations related to the security of your data, please state this clearly in the subject line of your message so it can be prioritized by the DPO of a188bet.