B2xbet Privacy Policy – LGPD Data Protection

This Privacy Policy describes how b2xbet collects, uses, stores, shares, and protects the personal data of users who access the platform available at b2xbet.best. It applies to all b2xbet services — Sports Betting, Live Casino, slots, crash games, e-sports, roulette, the VIP Program, and any other current or future platform features.

By creating an account with b2xbet or continuing to use the platform, you acknowledge that you have read and understood this policy. If you do not agree with the data processing practices described here, you should not use b2xbet's services.

For the purposes of the General Data Protection Law (LGPD), the controller of users' personal data on the platform is b2xbet, operator of the betting platform available at b2xbet.best.

B2xbet's Data Protection Officer (DPO) can be contacted to exercise rights, request clarifications, or submit complaints related to the processing of personal data, via email at suporte@b2xbet.best with the subject line "Privacy / LGPD".

This policy applies to the processing of personal data carried out by b2xbet in the context of its operations directed at the Brazilian market — including all users residing in Brazil who access the platform from any device, including mobile phones, computers, or tablets.

B2xbet collects personal data at various points during your use of the platform. Below is a detailed description of each category of data collected:

Registration data

• Full name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile number with area code;
• Residential address (requested in certain identity verification processes).

Identity verification data (KYC)

• Images of identity documents (RG, CNH, passport);
• Proof of address;
• Selfie for facial verification, when requested;
• Additional documents required by anti-money laundering regulations.

Financial and payment data

• Pix key used for deposits and withdrawals;
• Financial transaction history (deposits, withdrawals, amount, date, method);
• Data required for processing via boleto bancário, credit/debit card, PicPay, Mercado Pago, or TED;
• Name of the associated bank or financial institution (Nubank, Itaú, Bradesco, Banco do Brasil, etc.).

Platform usage and behavioral data

• Full betting history (Sports Betting, casino, Crash Games, e-sports, roulette);
• Games accessed, session duration, and frequency of use;
• Game and mode preferences most frequently used;
• Active responsible gambling settings on the account (deposit limits, session timer).

Technical and device data

• Access IP address;
• Device type and operating system (mobile, desktop, tablet);
• Browser used;
• Approximate geolocation data derived from IP address;
• Cookies and session identifiers (detailed in section 8).

Support communications

• Content of live chat conversations and emails sent to b2xbet support;
• Records of support interactions, complaints, and verification requests.

B2xbet uses the personal data collected for the following purposes:

The LGPD requires that all processing of personal data have an appropriate legal basis. b2xbet processes your personal data under the following grounds set out in Article 7 of Lei nº 13.709/2018:

• Contract performance (art. 7, V): processing is necessary to operate your account, handle bets, Pix payments, and other platform services you agreed to when registering;
• Compliance with a legal obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and retention of financial records as required by applicable law;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, responsible gambling, and service improvement — always balanced against the rights and reasonable expectations of data subjects;
• Consent (art. 7, I): sending marketing communications and promotions by email or mobile — consent may be withdrawn at any time without affecting access to other b2xbet services.

When processing is based on consent, b2xbet will request it clearly and separately from other terms of use. Withdrawing consent for marketing communications does not affect any processing already carried out on the basis of previously given consent.

B2xbet does not sell personal data to third parties. Data sharing only takes place in the situations described below, and strictly within the limits necessary for each purpose:

Payment providers

To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, b2xbet shares the necessary financial data (such as Pix key, transaction amount, and transaction ID) with the financial institutions and payment processors involved — all of which are authorized by the Banco Central do Brasil.

Game providers

Game providers integrated with b2xbet — Pragmatic Play, Evolution Gaming, NetEnt, PG Soft, Play'n GO, Microgaming, and others — may receive minimal technical data required to load and operate games on the platform (such as session identifier and available balance). These providers have their own privacy policies and are contractually required to process such data solely for the purpose of service delivery.

Identity verification

For the KYC (Know Your Customer) process, b2xbet may use specialized identity verification services that handle document images and personal data securely and confidentially, solely for the purpose of confirming the user's identity.

Authorities and legal obligations

B2xbet may disclose personal data when required by law, court order, or directive from the Financial Activities Control Council (COAF), the National Data Protection Authority (ANPD), or any other competent Brazilian authority with legal power to make such a demand.

Business transfer

In the event of a merger, acquisition, or sale of b2xbet assets, user data may be transferred as part of the transaction, always under the same protections described in this policy. Affected users will be notified by email before any such transfer takes place.

B2xbet retains personal data for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations:

• Registration and active account data: retained while the account is active and for up to 5 years after closure, in accordance with sector regulatory requirements;
• Financial records (deposits and withdrawals via Pix, boleto, card, TED): retained for at least 5 years following the transaction, in accordance with the Anti-Money Laundering Law (Law No. 9.613/1998) and Banco Central regulations;
• KYC documents: retained for up to 5 years after account closure, or for a longer period if required by a competent authority;
• Betting history: retained for up to 5 years for audit purposes and compliance with regulatory obligations;
• Support communications: retained for up to 2 years for dispute resolution purposes;
• Non-essential cookie data: in accordance with the specific retention period of each cookie, as detailed in section 8.

Once retention periods have expired and there is no legal obligation requiring continued storage, data is securely deleted or anonymized so that the account holder can no longer be identified. User requests for data deletion are handled as described in Section 9 (your rights).

B2xbet implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

In the event of a security incident

If a security incident occurs that could pose significant risk to data subjects — such as a leak of registration or financial data — b2xbet will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes established by the LGPD, within a reasonable period from the moment the incident is identified. The notification will include the nature of the data involved, the measures taken to mitigate the damage, and guidance for users on protecting their accounts.

For your added protection, b2xbet recommends using a strong, unique password for your account, enabling two-factor authentication when available, and never sharing your login credentials with anyone.

B2xbet uses cookies and similar technologies to operate the platform, improve the user experience, and meet security obligations. Below is a description of each cookie category used:

You can manage your non-essential cookie preferences through your browser or mobile device settings. Most browsers allow you to block or delete cookies — refer to the instructions for Chrome, Safari, or Firefox for your specific device. Disabling essential cookies may prevent the platform from functioning properly.

The General Data Protection Law (LGPD) guarantees you, as the data subject, a robust set of rights regarding the processing of your personal data by b2xbet. See each right and how to exercise it below:

How to exercise your rights

To exercise any of the rights listed above, please contact b2xbet's DPO by email suporte@b2xbet.best with the subject line "LGPD Rights – [request type]" (example: "LGPD Rights – Data Access"). b2xbet will respond to your request within 15 business days from the date of receipt.

To protect your privacy, we may need to verify your identity before processing your request — particularly for deletion or data portability requests. Verification is carried out in proportion to the type of request and must not be used as a barrier to exercising your rights.

If you are not satisfied with b2xbet's response, you may file a complaint with the National Data Protection Authority (ANPD), as provided under Article 55 of the LGPD.

B2xbet is a platform exclusively for users aged 18 and over. Registration, access, and use of any feature — Sports Betting, live casino, slots, crash games, e-sports, roulette, or any other service — is strictly prohibited for individuals under 18 years of age.

B2xbet does not intentionally collect personal data from minors. When a user is identified as being under 18, the account is immediately closed, all pending bets are cancelled with a full refund of the real BRL balance, and the data is handled in accordance with the LGPD's special rules for children's and adolescents' data (Chapter II, Section III of Lei nº 13.709/2018).

Age verification is carried out using the CPF and date of birth provided at registration, with additional confirmation required during the KYC process before the first withdrawal. If you believe a minor has used the platform, please contact our support team immediately.

Some service providers used by b2xbet — including game providers such as Pragmatic Play, Evolution Gaming, and NetEnt — operate server infrastructure outside Brazil. This may involve the international transfer of users' personal data for the processing of certain operations.

When such a transfer takes place, b2xbet ensures that:

• The destination country provides an adequate level of personal data protection, as assessed by the ANPD; or
• Adequate contractual safeguards exist between b2xbet and the data recipient (such as standard data protection contractual clauses); or
• The transfer falls under another applicable basis set out in article 33 of the LGPD.

To find out specifically which providers receive your data and in which countries, please contact the b2xbet DPO at suporte@b2xbet.best.

B2xbet may update this Privacy Policy periodically to reflect changes in data processing practices, Brazilian legislation, or the services offered by the platform.

In the event of material changes that affect the rights of data subjects — such as changes to processing purposes, the data collected, or sharing conditions — b2xbet will notify users at least 15 days via registered email or platform notification. The date of the most recent update will always be displayed at the top of this document.

Minor changes — such as spelling corrections, language clarifications that do not alter the substance, or updated contact details — may be made without prior notice. Continued use of b2xbet after a new version of this policy is published constitutes acceptance of the changes. If you disagree with any updates, you should close your account before the new terms take effect.

For any questions, requests to exercise your rights, or complaints related to the processing of personal data by b2xbet, please contact our Data Protection Officer:

• DPO email: suporte@b2xbet.best
• Subject: use "Privacy / LGPD – [your request]" for prioritization
• Response time: up to 15 business days
• Support language: Brazilian Portuguese

You can also reach us via the live chat available on the platform, 24 hours a day, 7 days a week. For general account questions not involving personal data — such as inquiries about bets, payments, or bonuses — our general support team is available through the same channels.

For complaints regarding the processing of personal data that are not satisfactorily resolved by b2xbet, you may contact the National Data Protection Authority (ANPD) through the official Brazilian federal government website.