85bt Privacy Policy: How We Handle Your Data

1. Introduction

A 85bt has a genuine commitment to the privacy of its users. This Privacy Policy clearly and objectively describes how we collect, use, store, protect, and eventually delete the personal data of users who register and use the services of 85bt — including Sports Betting on football (Brasileirão Série A, Copa do Brasil, Libertadores), Live Casino, jackpot slots, crash games like Aviator, and all other features available on the platform.

This document was prepared in accordance with the General Personal Data Protection Law (LGPD — Law 13.709/2018) and other regulations applicable to the online betting and gaming market in Brazil. It applies to all users who access the website of 85bt, create an account, make deposits via Pix or boleto bancário, place bets, or contact support.

By using the services of 85bt, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of it, we recommend that you do not use the platform and reach out to contato@85bt.net for clarification before registering.

2. Data Controller

For the purposes of this Privacy Policy and the LGPD, the controller of users' personal data is the company operating the 85bt, headquartered in Brazil and registered in accordance with the national legislation applicable to the sports betting and iGaming market.

The Data Protection Officer (DPO) of 85bt is the official point of contact for matters related to privacy, personal data processing, and the exercise of data subject rights. The DPO can be reached at contato@85bt.net with the subject line "LGPD – [Request Type]". The response time for formal requests is up to 15 (fifteen) business days, as required by law.

3. Data We Collect

A 85bt collects personal data at various points during your interaction with the platform. Below are the categories of data that may be collected:

3.1 Registration Data

Provided directly by the user at the time of registration:

3.2 Identity Verification Data (KYC)

Collected to fulfill regulatory identity verification obligations:

3.3 Financial Transaction Data

Automatically generated with each financial transaction on the platform:

3.4 Platform Usage Data

Collected automatically as you browse and use our services:

3.5 Communication Data

Recorded during interactions with 85bt:

4. How We Use Your Data

Every piece of data collected by 85bt has a specific and legitimate purpose. The platform does not process data for purposes incompatible with those described below:

• Service provision: create and manage your account, process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, record sports bets and casino games, pay jackpots and process withdrawals;
• Identity verification (KYC): confirm that the account holder is over 18 years old, a resident of Brazil, and the rightful owner of the registered CPF, in accordance with regulatory obligations;
• Fraud and money laundering prevention: monitor transactions to detect suspicious patterns, meet the obligations of Law 9.613/1998, and comply with Bacen and Ministry of Finance regulations;
• Communication: send important account notifications, bet confirmations, security alerts, and — with your consent — promotional communications such as the welcome bonus and weekly cashback offers;
• Platform improvement: analyze aggregated usage data to identify technical issues, improve the user experience, and develop new features;
• Responsible gambling: identify usage patterns that may indicate at-risk behavior and activate the responsible gambling tools available on the 85bt;
• Compliance with legal obligations: comply with the requirements of regulatory, judicial, and tax authorities under Brazilian law.

A 85bt does not use personal data for automated decisions that produce legal effects or significantly affect the user's interests without the possibility of human review.

5. Legal Bases for Processing (LGPD)

All personal data processing carried out by 85bt is grounded in at least one of the legal bases set out in Art. 7 and Art. 11 of the LGPD:

• Contract performance — processing required for the operation of the service contracted by the user: processing deposits and withdrawals via Pix, recording bets, and paying out jackpots (Art. 7, V);
• Compliance with a legal or regulatory obligation — KYC, anti-money laundering, tax and regulatory obligations in the sports betting market (Art. 7, II);
• Legitimate interest — fraud prevention, platform security, service improvement, and aggregated usage analysis (Art. 7, IX), provided these do not override the fundamental rights and freedoms of the data subject;
• Consent — for optional processing activities, such as sending marketing communications and promotional offers. Consent may be withdrawn at any time without affecting any other contracted services (Art. 7, I).

6. Sharing Data with Third Parties

A 85bt does not sell, rent, or share users' personal data with third parties for commercial purposes. Data sharing occurs exclusively in the following situations:

• Payment processors: data strictly necessary to process transactions via Pix, boleto bancário, credit/debit card (Visa, Mastercard), PicPay, Mercado Pago, and TED through banks including Nubank, Itaú, Bradesco, and Banco do Brasil. These providers operate as data processors under contract with 85bt and may not use the information for any other purpose;
• Game providers: minimum data required to operate live casino games, slots, and crash games provided by suppliers such as Microgaming, NetEnt, and Pragmatic Play. No sensitive financial data is shared with game providers;
• Identity verification services (KYC): specialized partners in document verification and identity authentication, operating under confidentiality agreements and LGPD-compliant contracts;
• Authorities and regulatory bodies: when required by law, court order, subpoena from the Public Prosecutor's Office, Bacen, Receita Federal, or other competent Brazilian authorities. In such cases, 85bt shares only the data that is strictly requested;
• Technology infrastructure services: cloud and hosting providers that process data solely for operational purposes, under data processing agreements and confidentiality clauses.

All third parties that receive data from users of 85bt are bound by contractual confidentiality obligations and may only use the information received for the specific purposes for which they were engaged.

7. Data Retention and Deletion

A 85bt retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The retention criteria are as follows:

• Registration and active use data: retained for as long as the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 (five) years after the transaction, in accordance with tax requirements and the Anti-Money Laundering Law (Law 9.613/1998);
• KYC Data: retained for a minimum of 5 (five) years after account closure, in accordance with betting market regulations;
• Support communication records: retained for 2 (two) years for audit and dispute resolution purposes;
• Usage data and non-essential cookies: retained for a maximum of 13 (thirteen) months, in accordance with privacy best practices.

Once the applicable retention period has expired, data is securely deleted or irreversibly anonymized so that the data subject can no longer be identified. 85bt performs periodic reviews of its databases to ensure that unnecessary information is discarded within the appropriate timeframe.

When a user requests the deletion of data not required by law, the 85bt will process the request within 15 business days and will inform you which data must be retained by legal requirement and for how long.

8. Data Security

A 85bt implements robust technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, or improper disclosure:

• 256-bit SSL Encryption across all communications between the user's device and the servers of 85bt;
• Encrypted storage of passwords and sensitive data — passwords are never stored in plain text;
• Two-factor authentication (2FA) available and recommended for all users;
• Continuous monitoring of the infrastructure for real-time security incident detection and response;
• Role-based access control — only staff members with a legitimate need are granted access to users' personal data;
• Regular penetration testing carried out by specialized teams to identify and address vulnerabilities;
• Incident Response Plan which includes notifying the ANPD and affected data subjects within the timeframes established by the LGPD in the event of a significant data breach.

Despite all efforts by 85bt, no system is 100% immune to threats. In the event of a security incident that poses significant risk to users, the 85bt will notify the ANPD and affected users within 72 hours of discovery, as required by the LGPD.

9. Cookies and Tracking Technologies

A 85bt uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and analyze site usage.

The cookies used fall into the following categories:

• Essential cookies: necessary for the platform's basic operation — session authentication, form security, and transaction processing. They cannot be disabled without affecting how the site functions;
• Performance and analytics cookies: collect anonymous, aggregated data on how users navigate 85bt, helping identify technical issues and improve the experience. No personally identifiable data is collected through these cookies;
• Preference cookies: store user settings such as language, notification preferences, and the last categories accessed (football, live casino, slots, crash games);
• Marketing cookies: used only with the user's explicit consent, to personalize communications and measure campaign effectiveness. They can be disabled at any time in the cookie preferences panel.

You can manage your cookie preferences at any time through your account's privacy settings on the 85bt. Disabling non-essential cookies may limit certain platform features, but will not prevent you from using the core betting and casino services.

10. Minors

The services provided by 85bt are intended exclusively for individuals aged 18 (eighteen) years or older. The 85bt does not intentionally collect personal data from individuals under 18 and expressly prohibits platform access and use by minors.

The identity verification process (KYC) is one of the measures we use to confirm that all users meet the minimum age requirement. Any account that fails to verify age will be closed, and any real-money balance on deposit will be returned to the CPF holder on record.

If you become aware that a minor is using the 85bt, please get in touch immediately at contato@85bt.net or via live chat. The 85bt will investigate the report and take appropriate action, including immediate account termination.

For parents and guardians looking to protect minors from accessing betting platforms, we recommend enabling parental controls and content-filtering software on devices used at home. 85bt is not responsible for access by minors who use adults' devices and credentials without their knowledge.

11. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a comprehensive set of rights that 85bt is fully committed to upholding. Here is what you can request at any time:

To exercise any of these rights, please contact the DPO of 85bt at contato@85bt.net, with the subject line "LGPD – [Request Type]". Responses are provided within 15 (fifteen) business days. You may also file a complaint with the National Data Protection Authority (ANPD) if you believe your rights are not being upheld.

12. International Data Transfers

A 85bt prioritizes the storage and processing of personal data on servers located in Brazil. When international data transfers are required — for example, for technology infrastructure services or game providers headquartered in other countries — the 85bt ensures that these transfers take place within the legal parameters of the LGPD:

• Transfers only to countries that ensure an adequate level of data protection, as assessed by the ANPD;
• Where the recipient country does not offer an adequate level of protection, standard contractual clauses (model clauses) are used to ensure protection equivalent to that required by the LGPD;
• Specific agreements with each international provider establishing confidentiality, use limitation, and security obligations for transferred data.

International providers that may process data from 85bt are contractually prohibited from using this information for any purpose beyond what is strictly necessary to provide the service engaged by the platform.

13. Changes to This Privacy Policy

A 85bt may update this Privacy Policy periodically to reflect changes in our services, applicable law, or data processing practices. Material changes will be communicated at least 48 (forty-eight) hours in advance via a notice on the site and, whenever possible, by email to the address registered on your account.

The date of the most recent update is shown at the top of this page. The current version of this Privacy Policy is always the one published at 85bt.net/privacy-policy. Previous versions may be requested by emailing contato@85bt.net.

Continued use of the services provided by 85bt after an update takes effect constitutes acceptance of the new provisions. If you do not agree with the changes, you may request account closure before the effective date.