Privacy Policy of 15bet2 — Your Data Protected

The controller of the personal data processed under this Policy is the 15bet2, a sports betting and online casino platform operated under the domain https://15bet2.net, operating in the Brazilian digital entertainment and online gaming market.

For the purposes of the LGPD, the 15bet2 acts as the controller of data collected directly on the platform. Where external game providers or payment processors access data to fulfill their technical functions, they act as processors, always under a contract that requires them to follow the guidelines of this policy and the requirements of Brazilian law.

Questions about this Privacy Policy, how your data is processed, or how to exercise any right under the LGPD? Reach out through the channel listed in section 13 of this document. The 15bet2 has a designated Data Protection Officer (DPO), responsible for ensuring internal LGPD compliance and serving as the point of contact for data subjects.

The 15bet2 collects personal data in three ways: information you provide directly during registration and platform use, data automatically generated during browsing, and third-party data required for identity verification and fraud prevention.

The 15bet2 does not intentionally collect sensitive data — such as racial or ethnic origin, religious belief, political opinion, health information, or sexual orientation. If any such data is inadvertently mentioned in a support communication, it will not be stored in a categorized manner or used for any purpose.

The 15bet2 uses collected personal data exclusively for the purposes described below. We do not use your data for any purpose beyond those listed here without obtaining additional consent:

• Operate your account: process registration, authentication, Pix deposits and other payment methods, sports betting, access to slots, live casino, crash games, and all other platform services.
• Verify your identity: confirm that you are who you say you are, that you are 18 or older, and that the payment methods used belong to you — a process required by law for betting platforms.
• Process payments: process deposits and withdrawals securely, reconcile financial transactions, and prevent fraud, chargebacks, and money laundering.
• Meet legal obligations: comply with the requirements of Law No. 13,756/2018 (fixed-odds betting), the LGPD, Anti-Money Laundering legislation, and any requests from Brazilian regulatory authorities.
• Improve the platform: analyze aggregated and anonymized usage patterns to identify product improvements, optimize performance, and fix technical issues.
• Personalize the experience: recommend promotions, games, and betting markets based on your usage profile — always in a way you can disable in your account settings.
• Communicate relevant information: send account notifications, bet confirmations, security alerts, and — with your consent — promotional offers from 15bet2.
• Protect the platform and its users: detect and prevent fraud, unauthorized access, bot usage, multiple account creation, and any conduct prohibited by the Terms and Conditions.

The LGPD requires that all personal data processing be grounded in a specific legal basis. The 15bet2 processes your data based on the following legally established grounds:

• Contract performance (art. 7º, V): the processing of registration, payment, and usage data is necessary to perform the service agreement you enter into with 15bet2 when you create your account. Without this information, it is not possible to operate your account.
• Compliance with a legal obligation (art. 7º, II): identity verification (KYC), financial transaction records, and reporting to regulatory authorities are carried out to fulfill obligations imposed by Brazilian legislation on the online betting and gaming sector.
• Legitimate interest (art. 7, IX): security analysis, fraud prevention, detection of platform misuse, and product improvement are carried out on the basis of the legitimate interest of the 15bet2 and its users in keeping the platform secure and fully operational.
• Consent (art. 7, I): sending promotional communications by email or mobile — such as bonus offers and promotions from 15bet2 — is only carried out when you give your express consent. That consent can be withdrawn at any time through your account settings or by contacting support.

The 15bet2 does not sell, rent, or trade users' personal data. We share information with third parties only in the situations listed below, strictly as required for the operation of the platform:

• Payment processors: to enable deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and bank transfer (TED), we share the necessary transaction data with the providers of these services. These partners are not authorized to use your data for any purpose beyond processing the payment.
• Game providers: to provide slots, live casino with real dealers, blackjack, roulette, baccarat, and crash games, our game technology providers receive only the session data required to operate the contracted games. No payment data or identity documents are shared with them.
• Identity verification services: to verify your identity during KYC, we use specialized verification services that process documents and biometric data in compliance with the LGPD.
• Competent authorities: when required by law, court order, or determination of a competent Brazilian regulatory authority, the 15bet2 provides data to authorities. This includes situations involving suspected money laundering, fraud, or criminal activity.
• Infrastructure providers: cloud hosting services, protection against cyberattacks, and system monitoring that support the operation of the 15bet2 may have technical access to data, always under contracts that impose security and confidentiality obligations equivalent to those set out in this policy.

All third parties that receive data from users of 15bet2 are assessed for their security and privacy practices prior to engagement and are subject to specific contractual data protection clauses.

The 15bet2 uses cookies and similar technologies to ensure the platform functions correctly, understand how users interact with it, and — with your consent — personalize your gaming experience. Cookies are small files stored on your device that allow the site to remember information between sessions.

Types of cookies used by 15bet2:

• Essential cookies: required for the platform's basic functionality — authentication, game session, bet slip, and language preferences. They cannot be disabled without affecting your ability to use the platform.
• Performance cookies: collect anonymized data about how you browse the 15bet2 — which pages you visit, how long you spend in each section, and what errors occur. These help identify and resolve issues.
• Functionality cookies: remember your configuration preferences, such as deposit limits you've set, favorite games, and your recent betting history displayed in the interface.
• Personalization cookies: used, with your consent, to display relevant promotions and games based on your usage history. You can disable this type of cookie in your account or browser settings without losing access to the platform.

You can manage or block cookies in your browser settings. Essential cookies cannot be blocked without affecting the functionality of the 15bet2. Blocking performance or personalization cookies does not affect access to the platform's core features.

The 15bet2 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures in place include:

• 256-bit SSL/TLS Encryption across all connections between your device and the servers of the 15bet2, ensuring that payment data, credentials, and personal information are not intercepted in transit.
• Encryption of data at rest for sensitive information stored in our databases, including identity documents and banking data.
• Role-based access control within the team at 15bet2: only professionals with a legitimate business need have access to each data category, and all access is recorded in auditable logs.
• Multi-factor authentication available for user accounts and required for internal access to the systems of the 15bet2.
• Continuous monitoring of anomalies, unauthorized access attempts, and suspicious activity across our systems, with 24-hour incident response available.
• Periodic security audits conducted by independent specialists to identify vulnerabilities and ensure that security practices are kept up to date.

The 15bet2 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The criteria that determine retention periods are:

• Active account data: retained for the entire duration of your account at 15bet2 and for the necessary period following account closure to fulfill contractual and legal obligations.
• Financial transaction records: retained for a minimum of 5 years after the transaction, as required by anti-money laundering regulations and applicable Banco Central do Brasil rules for the sector.
• Identity verification (KYC) data: kept for a minimum of 5 years after account closure or the last transaction, as required by regulation.
• Support communications: kept for up to 2 years for quality assurance and dispute resolution purposes.
• Browsing data and cookies: most session data is deleted within 13 months.

After the applicable retention periods expire, the 15bet2 proceeds with the secure deletion or anonymization of the data, making it no longer possible to identify the account holder. Deletion requests made by the user are subject to mandatory legal retention periods — data that the law requires to be kept cannot be deleted before the applicable legal deadline, regardless of the request.

The LGPD grants you, as a personal data subject, a set of rights that the 15bet2 is fully committed to upholding. Here is what you can request at any time:

To exercise any of these rights, please contact 15bet2 via the support chat available after logging in to the platform, or by email at privacidade@15bet2.net. The standard response time is up to 15 calendar days from receipt of the request, as provided under the LGPD.

In the event of a deletion or portability request, additional identity verification may be required to ensure that no third party is improperly requesting access to or removal of your data.

The 15bet2 is a Sports Betting and online casino platform intended exclusively for users aged 18 and over. Registration, deposits, and use of any platform feature by anyone under 18 is strictly prohibited.

The 15bet2 does not intentionally collect personal data from users under 18. If we identify that an account was created or is being used by a minor, it will be closed immediately and the associated data will be deleted once the applicable legal retention requirements have been met.

If you suspect that a minor is using the platform — including with your credentials or payment card — please contact the support team at 15bet2 immediately via 24-hour chat so we can act quickly.

Some of the technology providers used by 15bet2 — including cloud infrastructure, security analysis tools, and international game providers — may store or process data on servers located outside Brazil.

When international data transfers occur, the 15bet2 applies the following safeguards to ensure that the level of protection afforded to your data meets the standards required by the LGPD:

• We exclusively engage service providers based in countries whose data protection laws are recognized as adequate, or that offer equivalent contractual safeguards.
• Inclusion of standard data protection contractual clauses in all agreements with international providers, establishing security, confidentiality, and data use limitation obligations.
• Periodic review of the privacy practices of international partners to ensure ongoing compliance with the standards required by the 15bet2 and by the LGPD.

No international data transfer involves sharing your data with third parties for commercial purposes unrelated to the platform's operation 15bet2.

The 15bet2 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to internal privacy processes.

Material changes — such as updates to data processing purposes, new types of data collected, or new partners with data access — will be communicated to you at the email address on file at least 7 days before the changes take effect.

The date of the last update to this policy is shown at the top of the document. Previous versions of the Privacy Policy of the 15bet2 may be requested from the DPO through the channel indicated in the following section.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report a privacy concern, please contact the 15bet2 through the channels below:

• Portuguese-language support chat: available 24 hours after logging into the platform. Recommended channel for general inquiries and simple requests.
• Privacy email: privacidade@15bet2.net — dedicated channel for LGPD-related requests, including data access, correction, deletion, and portability.
• General support email: suporte@15bet2.net — for general questions about your account and the platform.

The Data Protection Officer (DPO) of the 15bet2 is responsible for responding to data subject requests, communicating with the National Data Protection Authority (ANPD), and ensuring internal compliance with the LGPD. The DPO can be reached directly at dpo@15bet2.net.

If you believe that the 15bet2 did not properly handle a request or has violated your rights as a data subject, you may file a complaint directly with the National Data Protection Authority (ANPD), the federal body responsible for enforcing the LGPD in Brazil.