19bet Privacy Policy – How We Protect Your Data

A 19bet ("Platform", "we", or "our") is committed to protecting the privacy and personal data of all Users who access and use its sports betting and online casino services. This Privacy Policy transparently describes how 19bet collects, stores, uses, shares, and protects the personal information provided by Users in the course of using the platform.

This Policy was drafted in accordance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018), the primary data protection legislation in Brazil, and with all other regulatory standards applicable to the online betting and entertainment sector in the country.

By creating an account on 19bet, making a Pix deposit, placing a bet on the Brasileirão, or using any other service on the platform, the User confirms having read, understood, and agreed to the terms of this Privacy Policy. If you have any questions about how your data is handled, our team is available via live support chat 24 hours a day, in Portuguese.

For the purposes of the LGPD, the controller of the personal data collected by the platform is 19bet, operator of the platform accessible at 19bet.life. 19bet's Data Protection Officer (DPO) can be reached at the following email address:

The DPO is responsible for handling requests related to the exercise of data subjects' rights, clarifying questions about this Policy, and ensuring that 19bet's internal processes comply with applicable law.

19bet collects personal data in different ways during platform use. The main types of data collected and the circumstances in which this occurs are described below:

3.1 Data provided directly by the User:

• Full name, date of birth, and CPF (required for registration and age verification).
• Email address and mobile phone number (for communications and account verification).
• Full residential address (requested during the KYC process).
• Identity documents (RG, CNH, or passport) and proof of address, submitted during the KYC verification process.
• Banking and payment details (Pix key, card information), provided to process deposits and withdrawals.
• Communication preferences and account settings defined by the User.

3.2 Data collected automatically during platform use:

• IP address and device information (model, operating system, browser, screen resolution).
• Approximate geolocation data (country and state, derived from IP address).
• Browsing history within the platform (pages visited, sections accessed, session duration).
• Complete history of bets, deposits, withdrawals, and casino activity.
• Cookies and similar tracking technologies (detailed in Section 9 of this Policy).
• Access logs including date, time, and actions performed on the platform.

3.3 Third-party data:

In some cases, 19bet may receive information about the User from third-party service providers, such as identity verification and fraud prevention companies, to confirm the accuracy of the registration details provided.

A 19bet uses Users' personal data exclusively for the purposes described below, always on the basis of one of the legal grounds set out by the LGPD:

• Account creation and management: Process registration, verify identity, authenticate access, and keep account information up to date.
• Payment processing: Process deposits via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED, as well as handle withdrawals securely and quickly.
• Fraud and money laundering prevention: Monitor suspicious transactions, verify the authenticity of information, and fulfill legal anti-money laundering obligations (AML/CFT), as required by Brazilian regulations.
• Eligibility verification: To confirm that the User is 18 years of age or older and is eligible to use the platform in accordance with current regulations.
• Platform improvement: Analyze usage patterns to improve the User experience, fix technical issues, and develop new features.
• Communications: Send transactional notifications (deposit confirmation, bet results, withdrawal alerts), security alerts, and — with your consent — promotional communications about 19bet bonuses and offers.
• Responsible gambling: Monitor behavioral patterns that may indicate problem gambling and proactively offer support to the User when needed.
• Legal obligation compliance: Respond to requests from competent regulatory, judicial, or administrative authorities, as provided by law.

19bet does not use Users' data to sell to third parties, profile for external partner advertising, or for any purpose not described in this Policy without the User's express consent.

Under the LGPD, all processing of personal data must be grounded in a legal basis. 19bet processes data based on the following legal grounds set out in Art. 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): Most data is processed to enable delivery of the services the User contracted when creating their account — betting, payments, withdrawals, and casino access.
• Compliance with a legal obligation (Art. 7, II): Data such as CPF, identity documents, and transaction history are processed to meet legal and regulatory obligations, including anti-money laundering rules and betting sector regulations.
• Legitimate Interest (Art. 7, IX): Usage and technical data (IP, access logs, platform behavior) are processed based on 19bet's legitimate interest in fraud prevention and platform security.
• Consent (Art. 7, I): Marketing communications and the use of non-essential cookies are carried out only with the User's express consent, which may be withdrawn at any time.

A 19bet does not sell, rent, or trade Users' personal data. Sharing with third parties occurs only in the following circumstances, always limited to the minimum necessary:

• Payment providers: To process transactions via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED, we share the necessary financial data with our partner payment institutions and processors, all of which are held to strict security standards.
• Game providers: Casino providers such as Evolution Gaming, Pragmatic Play, NetEnt, and similar companies receive only an anonymous session identifier to record game results — they have no access to the User's full name, CPF, or banking details.
• Identity verification services: Specialized KYC companies receive copies of the documents submitted by the User solely for verification purposes, under confidentiality and data protection agreements.
• Anti-fraud systems: Fraud prevention partners receive anonymized behavioral and technical data for risk analysis, with no direct identification of the User.
• Competent authorities: 19bet may share data when required by a court order, a regulatory authority (Ministry of Finance, COAF, Federal Revenue Service), or any other legal obligation, always within the limits established by law.

19bet retains Users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The general retention criteria are:

• Active account data: Retained for as long as the User's account remains active on the platform.
• Financial and transaction data: Retained for a minimum of 5 (five) years after account closure, as required by tax legislation and anti-money laundering regulations.
• KYC documents: Retained for a minimum of 5 years after account closure or last platform use, in accordance with financial compliance regulations.
• Access logs and technical data: Retained for up to 12 months for security and fraud investigation purposes.
• Betting history: Available to the User while the account is active; archived for up to 5 years after account closure.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized. Users may request early deletion of their data by submitting a request to the DPO, except where retention is required by law.

Protecting Users' personal data is a technical and organizational priority of 19bet. The following security measures are in place:

• 256-bit SSL/TLS encryption: All communications between the User's device and 19bet's servers are encrypted, including login, financial transactions, and document submission.
• Secure storage: Sensitive data is stored on servers with restricted access controls, continuous monitoring, and encrypted backups.
• Two-factor authentication (2FA): Available to all Users as an extra layer of account security.
• Access monitoring: Automated systems monitor suspicious logins, unauthorized access attempts, and unusual activity in real time.
• Internal access control: Only 19bet staff with a specific operational need are granted access to certain data categories, in line with the principle of least privilege.
• Security testing: The platform undergoes regular audits and penetration testing carried out by specialized firms.

In the event of a security incident that may affect Users' personal data, 19bet will notify the affected individuals and the National Data Protection Authority (ANPD) within the timeframe required by the LGPD, with information about the nature of the incident, the data involved, and the measures taken.

19bet uses cookies and similar technologies to improve the browsing experience, ensure the platform functions correctly, and carry out performance analysis. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — session authentication, bet slip, and account preferences. These cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: They collect aggregated, anonymous data on how Users interact with the platform, enabling the identification and resolution of technical issues and the optimization of the browsing experience.
• Functionality cookies: Store User preferences (such as language and preferred payment method) to personalize the experience on return visits.
• Marketing cookies (optional): Used only with the User's express consent to measure campaign effectiveness and personalize promotional communications.

Users can manage cookie preferences at any time through their browser settings or via the privacy preferences panel available on the platform. Disabling essential cookies may affect the functionality of critical 19bet features.

The LGPD grants Users a set of rights over their personal data. The 19bet is committed to making the exercise of these rights straightforward and hassle-free:

The 19bet platform is intended exclusively for users aged 18 (eighteen) and over. The collection of personal data from minors is strictly prohibited and is never carried out intentionally by 19bet.

During registration, we verify the date of birth and CPF provided by the User to confirm they are of legal age. Accounts identified as belonging to minors are closed immediately, and the data collected is deleted in accordance with the platform's security procedures.

If you believe that a child or minor's data has been inadvertently collected, please contact us immediately at contato@19bet.life so the matter can be addressed as a priority.

A 19bet may periodically review and update this Privacy Policy to reflect changes in data processing practices, applicable legislation, or the scope of services offered. The date of the most recent revision is always shown at the top of this document.

When material changes affect Users' rights, 19bet will notify account holders by email at least 15 days before the new terms take effect. Continued use of the platform after that date constitutes acceptance of the changes.

Users who do not agree with the changes may request account closure and data deletion as described in Section 10 of this Policy.

For any questions, requests, or complaints regarding personal data processing by 19bet, the User may reach us through the following channels:

• DPO email: contato@19bet.life (response within up to 15 business days)
• Live support chat: available 24 hours a day, 7 days a week, directly on the 19bet platform (immediate response for general inquiries)

The User may also file complaints regarding the processing of personal data with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

We are always available to clarify any aspect of this Policy. Transparency in the handling of your data is a commitment that 19bet takes seriously — just as seriously as the security of your account, the speed of Pix withdrawals, and the quality of the betting experience on the Brasileirão and in the live casino.