Privacy Policy of 1166bet: How We Protect Your Data

This Privacy Policy describes how 1166bet (hereinafter "we", "our platform", or simply "1166bet") collects, uses, stores, and protects the personal data of registered users or those who interact with the site https://1166bet.best and its associated services.

The 1166bet is the controller of the personal data processed under this policy, as defined by the General Data Protection Law (LGPD — Law No. 13,709/2018). This means we are responsible for determining how and why your data is processed, and we are the point of contact for exercising your rights as a data subject.

For questions related to personal data, you can reach us directly by email at privacidade@1166bet.best or through the platform's 24/7 support. We respond to all data subject requests within the timeframes established by the LGPD.

The 1166bet collects personal data at different points throughout your interaction with the platform. Full details are provided below:

We do not collect sensitive data such as racial origin, religious beliefs, biometric data, or health information, except where strictly required to fulfill a specific legal obligation — in which case you will be notified in advance.

The 1166bet uses the collected data solely for the following purposes:

• Account operation: create and maintain your account, authenticate your login, process bets, and manage your available balance on the platform.
• Financial processing: process deposits via Pix, credit/debit card, PicPay and Mercado Pago; handle withdrawals; and issue transaction receipts.
• Identity verification (KYC): confirm that you are 18 or older, that the CPF matches the account holder and that the payment methods are in your name — legal and fraud prevention requirements.
• Fraud and money laundering prevention: monitor anomalous usage patterns, identify duplicate accounts, and fulfill reporting obligations to financial authorities where applicable.
• User support: answer questions, resolve issues, and keep a service history to ensure continuity of support.
• VIP program and promotions: calculate accumulated points, credit cashback, send communications about active benefits and promotions relevant to your usage profile.
• Platform improvement: analyze aggregated and anonymized usage data to identify issues, optimize the experience, and develop new features.
• Legal compliance: meet tax obligations, respond to court orders, and comply with betting industry regulations in Brazil.

The 1166bet does not make automated decisions that produce legal effects or significant impacts without human oversight. If an account is suspended based on an automated system, the user may request a review by a human analyst through support.

Every data processing operation carried out by 1166bet is grounded in at least one of the legal bases set out in article 7 of the LGPD. The main bases we rely on are:

• Contract performance (art. 7, V): processing required to fulfill the service agreement entered into at registration — includes account creation, bet processing, and payments via Pix.
• Compliance with a legal obligation (art. 7, II): identity verification (KYC), anti-money laundering measures and compliance with any mandatory reporting obligations to authorities — legal requirements that do not depend on consent.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and service improvement based on aggregated and anonymized data, provided this does not override your fundamental rights.
• Consent (Art. 7, I): sending marketing communications, personalized promotions, and use of non-essential cookies. You may withdraw consent at any time without affecting the contracted services.

When processing is based on consent, we ensure it is freely given, informed, and unambiguous. Refusing or withdrawing consent does not prevent you from using the platform for betting and other core services — it applies only to optional marketing communications.

The 1166bet does not sell users' personal data. We share information only in the situations below, with operators duly bound by data processing agreements:

• Payment processors: to process transactions via Pix, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data necessary to complete the transaction and may not use it for any other purpose.
• Identity verification (KYC) providers: to validate CPF, confirm legal age, and verify document authenticity during withdrawal approval processes.
• Technical infrastructure providers: hosting, CDN and security services that process data as operators under our instructions and bound by the same data protection obligations.
• Public authorities: Federal Revenue Service, Central Bank, financial regulatory bodies, and judicial authorities, when required by law or court order. We notify users of such requests whenever legally permitted.

All third parties with whom we share personal data are assessed in advance for their security and privacy practices, and are contractually required to process data in accordance with the LGPD and the instructions of 1166bet.

Some of our technical service providers — such as cloud infrastructure providers — may process data on servers located outside Brazil. When this occurs, 1166bet ensures that any transfer takes place with adequate safeguards, in accordance with Article 33 of the LGPD:

• For countries whose level of protection has been recognized as adequate by the National Data Protection Authority (ANPD).
• Through standard contractual clauses approved by the ANPD that require the recipient to maintain a level of protection equivalent to that required by the LGPD.
• Based on specific security guarantees agreed upon contractually, which are auditable and reviewed periodically.

Core transaction data — especially that linked to Pix and operations within the Brazilian financial system — is processed primarily on infrastructure located in Brazil, in compliance with the requirements of the Central Bank of Brazil.

The 1166bet uses cookies and similar technologies to ensure the platform works properly and to improve the user experience. The types of cookies we use are:

• Essential cookies: required for the basic operation of the site — session authentication, language preferences, bet slip. They cannot be disabled without impairing your use of the platform.
• Analytics cookies: collect data on how users navigate the site (most visited pages, session duration, traffic sources) in an aggregated and anonymized form. We use this information to improve the platform.
• Preference cookies: remember settings chosen by the user — such as displaying odds in decimal or fractional format — so they don't need to reconfigure them on every visit.

You can manage your cookie preferences in your browser settings. Blocking essential cookies may prevent the platform from working properly — particularly login and bet processing. Analytical and preference cookies can be disabled without affecting core functionality.

The 1166bet does not use third-party cookies for behavioral advertising or retargeting purposes.

The 1166bet retains personal data for as long as necessary to fulfil the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Active account data: throughout the entire period the account remains active and for up to 5 years after it is closed, in accordance with tax obligations and anti-money laundering regulations.
• Financial transaction data (deposits and withdrawals via Pix): 5 years from the transaction date, as required by the Central Bank of Brazil and applicable tax legislation.
• Betting history: 2 years for operational purposes; after this period, it may be retained in anonymized form for statistical analysis.
• Support records: 2 years from the date the ticket is closed, to allow for follow-up and service continuity.
• KYC verification data: as required by industry regulations — minimum of 5 years after account closure.

Once legal retention periods have expired, data is securely deleted or anonymized in a way that makes re-identification of the data subject impossible.

The 1166bet implements technical and organizational measures to protect your data against unauthorized access, loss, destruction or improper disclosure. Key measures include:

• Encryption in transit: all communications between your device and the platform are protected by TLS 1.3, the most current encryption protocol available.
• Encryption at rest: sensitive data — including identification information and financial data — is stored encrypted on our servers.
• Access control: only 1166bet employees with a specific need access users' personal data, with strong authentication and a full audit log of all access.
• Payment tokenization: credit and debit card data is tokenized and never stored directly in 1166bet's systems.
• Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24 hours a day to identify suspicious activity.
• Security testing: the platform undergoes periodic security assessments, including penetration testing and code review.

In the event of a security incident that may affect user data, the 1166bet will notify the National Data Protection Authority (ANPD) and the affected data subjects within the deadlines established by the LGPD, with information about the nature of the incident and the measures taken.

The LGPD grants you, as a data subject, a set of rights that 1166bet is committed to upholding. See your rights and how to exercise them:

• Access: request confirmation that we process your data and obtain a copy of the information we hold about you.
• Correction: request the correction of incomplete, inaccurate or outdated information in your profile.
• Anonymization, blocking, or deletion: request the anonymization or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD.
• Portability: receive your data in a structured, interoperable format for transfer to another service provider, where technically feasible.
• Withdrawal of consent: withdraw consent for processing based on that legal basis — such as marketing communications — at any time, at no cost and with no impact on core services.
• Information on data sharing: request information about which public or private entities 1166bet has shared your data with.
• Objection: object to processing carried out on the basis of legitimate interest when you have valid grounds to do so.

To exercise any of these rights, contact us at privacidade@1166bet.best or through platform support, providing your full name and CPF. A 1166bet responds to data subject requests within 15 business days, as per the retention period established by the LGPD.

If you believe your rights have not been respected after contacting 1166bet, you may contact the National Data Protection Authority (ANPD) through the official federal government channels.

The 1166bet is a betting and gaming platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors.

The registration process requires a valid CPF and date of birth, and we perform checks to confirm the account holder is of legal age. Accounts created with a minor's data — whether by mistake or intentionally — will be closed immediately upon identification, the data will be deleted, and any deposits may be returned to the legal guardian after verification.

If you are a parent or legal guardian and believe a minor accessed the platform using your data or the child's data, contact support immediately so the case can be handled as a priority.

The platform at 1166bet may contain references to third-party services — such as live casino game providers, slots developers, or sports data suppliers. This Privacy Policy applies exclusively to data processing carried out by 1166bet.

When data is transferred to game providers for the operation of live casino or slots titles, this takes place in their capacity as contracted operators — acting under our instructions and bound by data protection obligations formalized in contract.

The 1166bet is not responsible for the privacy practices of third-party websites that are not contracted service providers. We recommend reviewing the privacy policy of any external service before providing your data directly to them.

The 1166bet may update this Privacy Policy to reflect changes in legislation, data processing practices or the services offered. The date of the last update is always shown at the top of this page.

Changes that reduce your rights or significantly expand the scope of data processing will be communicated via your registered email at least 15 days before taking effect. For minor changes — such as wording adjustments that do not alter the substantive content — updates may occur without prior notice, but the version date will be updated.

Continued use of the platform after any changes take effect constitutes acceptance of the new terms. If you do not agree with a change, you may close your account before the effective date.

The 1166bet has appointed a Data Protection Officer (DPO), as recommended by the LGPD, to serve as the point of contact for data subjects and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, request information about data processing, file a complaint, or contact the DPO, use the following channels:

• Privacy email: privacidade@1166bet.best
• General email: contato@1166bet.best
• Support chat: available 24 hours a day on the site, specifying that the request is related to personal data.

The response deadline for data subject requests is up to 15 business days from the receipt of a complete request including the data subject's identification details. In more complex cases, this deadline may be extended by an equal period, with notice to the data subject.

If your request is not resolved to your satisfaction by the 1166bet, you may file a complaint directly with the National Data Protection Authority (ANPD) through the official channels available on the federal government's website.