Privacy Policy of 125bet – Your Data Protected

This Privacy Policy describes how 125bet, operator of the Sports Betting and online casino platform available at 125bet.best, collects, processes, stores, and protects the personal data of its users in Brazil. This document was drafted in compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018) and applies to all players who access the platform, regardless of the device used — whether a computer, mobile phone, or tablet.

125bet acts as the controller of personal data processed in connection with platform operations, and is responsible for decisions regarding the purpose and manner of processing users' information. Technology and service providers that process data on behalf of 125bet act as operators and are bound by contracts that ensure the same level of protection applied internally.

This Policy is written in Brazilian Portuguese to ensure clarity and accessibility for all players. Technical terms are explained where necessary. The most current version of this document is always available at 125bet.best/privacy-policy, with the date of the last revision shown at the top.

125bet collects personal data at different points throughout your experience on the platform. The types of information collected are as follows:

Registration Data

• Full name and date of birth.
• CPF (Cadastro de Pessoas Físicas).
• Email address and mobile phone number.
• Full residential address, including postal code (CEP).
• Username and password created by the player themselves (passwords are stored in encrypted form and never as plain text).

Identity Verification Data (KYC)

• Official government-issued photo ID: national ID card (RG), driver's license (CNH), or passport.
• Proof of residence in the account holder's name, recently issued.
• Proof of ownership of the bank account or Pix key linked to your 125bet account.
• Selfie or photo for identity verification of the account holder, when required by the verification process.

Financial Data

• Pix key or bank details provided for deposits and withdrawals.
• Transaction history: deposits, withdrawals, amounts, and dates.
• Partial credit or debit card details (the full card number is never stored on 125bet's servers; processing is handled by PCI-DSS certified gateways).

Platform Usage Data

• Betting history, including markets, amounts, and outcomes.
• Session history for casino games, slots, and crash games such as Aviator and Spaceman.
• Account settings and preferences defined by the user.
• Records of interactions with customer support.

Technical Data

• IP address and approximate location derived from the IP.
• Device and browser type and version.
• Operating system.
• Cookie data and similar tracking technologies (detailed in Section 7).
• Access logs including the date, time, and actions performed on the platform.

Data collected by 125bet is used exclusively for the purposes listed below, each with a legal basis identified in Section 4 of this document:

• Account operation: creation, maintenance, authentication, and support of the user's account on the platform.
• Payment processing: enable deposits via Pix, boleto bancário, credit card, debit card, PicPay, Mercado Pago, and TED transfers, as well as process withdrawals to the account holder's Pix key or bank account.
• Identity verification (KYC): confirm that the user is over 18, that the information provided is accurate, and that the account is not being used for fraudulent activities.
• Fraud prevention and anti-money laundering: monitor unusual behavior patterns, identify multiple accounts, or detect misuse of the platform.
• Regulatory compliance: meet the requirements of competent Brazilian authorities in the betting and gaming sector, including the Ministry of Finance.
• Experience personalization: display Sports Betting recommendations for the Brasileirão, slots suggestions such as Fortune Tiger or Gates of Olympus, and relevant promotions based on usage history.
• Service communications: account notifications, financial transactions, terms updates, and mandatory communications.
• Marketing communications: sending offers, promotions, and 125bet news, exclusively to users who have given explicit consent. Unsubscribing is simple and takes effect immediately.
• Platform improvement: analysis of aggregated and anonymized data to identify improvements to user experience, technical stability, and new features.
• Responsible gambling: monitoring of gaming patterns to identify potentially problematic behavior and trigger protective measures when necessary.

The LGPD requires that all personal data processing have an identified legal basis. 125bet grounds the processing of your data on the following bases set out in Art. 7 of Law No. 13,709/2018:

• Performance of a contract (Art. 7, V): processing of registration, financial, and usage data is necessary to perform the contract entered into between you and 125bet when you create an account and accept the Terms & Conditions.
• Compliance with a legal obligation (Art. 7, II): identity verification, anti-money laundering controls, and reporting to regulatory authorities are legal obligations imposed on the industry.
• Legitimate interest (Art. 7, IX): fraud prevention, platform improvement, and system security are grounded in 125bet's legitimate interests, always balanced against the rights and reasonable expectations of the data subject.
• Consent (Art. 7, I): sending marketing communications and personalization based on non-essential preferences require your express consent, which may be withdrawn at any time.

125bet does not sell, rent, or trade your personal data with third parties for advertising or any other purposes unrelated to platform operations. Data sharing occurs only in the following contexts, all of which are necessary for the proper functioning of our services:

Service Providers (Operators)

Companies that provide technical services necessary for 125bet's operation, including Pix and credit card payment processors, cloud infrastructure providers, identity verification (KYC) companies, and security analysis tools. All processors are contractually bound to handle data exclusively for the authorized purposes and at the same level of protection applied by 125bet.

Game Providers

To enable access to live casino games, slots such as Fortune Tiger and Gates of Olympus, and crash games such as Aviator, minimal session data is shared with providers including Pragmatic Play, PG Soft, and Spribe. This sharing is strictly technical and necessary for gameplay to function.

Regulatory & Judicial Authorities

125bet may be legally required to share data with the Ministry of Finance, Federal Police, Federal Revenue Service, Central Bank, and other competent authorities in the context of investigations, regulatory compliance, or court orders. In such cases, data is shared only to the extent required by law, with no more information than necessary.

The personal data of 125bet users is stored on servers that meet high physical and logical security standards. The key protective measures in place include:

• 256-bit SSL encryption on all communications between the user's device and the platform's servers.
• Encryption at rest for sensitive data stored in the database, including passwords and identification information.
• Role-based access control: only staff with a legitimate business need have access to specific data categories.
• Two-factor authentication for internal systems that process user data.
• Continuous system monitoring for detection of unauthorized access or anomalous behavior.
• Penetration testing and security audits carried out periodically by specialized teams.
• Incident response plan including notification to the National Data Protection Authority (ANPD) and affected data subjects in the event of a relevant breach, within the timeframes set by the LGPD.

While 125bet takes robust security measures, no system is completely immune to risk. In the event of a security incident affecting your data, you will be notified by email at your registered address, with details about what occurred, which data was affected, and what steps were taken.

125bet uses cookies and similar technologies to enhance your experience on the platform, maintain authenticated sessions, and analyze site usage. The types of cookies we use are listed below:

You can manage and disable non-essential cookies through your browser settings. Disabling essential cookies may prevent the platform from functioning properly, including login and bet processing. Most modern browsers offer cookie control options in their privacy settings.

The LGPD grants you a set of rights regarding your personal data. 125bet is committed to making it easy to exercise these rights in a straightforward way and within the legally required timeframes:

• Confirmation and access: confirm whether 125bet processes your data and obtain a copy of the information held about you.
• Correction: request correction of data that is inaccurate, incomplete, or out of date.
• Anonymization, blocking, or deletion: request that unnecessary data or data processed in violation of the LGPD be anonymized, blocked, or deleted.
• Portability: receive your data in a structured, machine-readable format for transfer to another service, subject to applicable sector regulations.
• Sharing information: know which public or private entities 125bet has shared your data with.
• Withdrawal of consent: withdraw at any time any consent given for processing activities based on that legal ground, such as receiving marketing communications.
• Objection: object to processing activities carried out on the basis of legitimate interest that cause disproportionate harm.
• Full deletion: request complete deletion of your data after account closure, subject to the minimum retention periods required by law as described in Section 10.

To exercise any of these rights, contact us via the 24/7 live chat on the platform or send a request to suporte@125bet.best with the subject line "LGPD Rights". Requests are answered within 15 business days. For more complex cases, the deadline may be extended, with prior notice given to the requester.

125bet services are intended exclusively for users aged 18 and over. The platform does not intentionally collect or process personal data from minors. The registration process includes date-of-birth verification, and the identity verification (KYC) required before any withdrawal confirms the account holder's legal age.

If 125bet identifies that a user under 18 has accessed the platform, or that a minor's data was inadvertently collected, the account will be closed immediately, the data will be deleted without delay, and any financial transactions carried out will be investigated in accordance with internal procedures and applicable law.

125bet retains your personal data for as long as necessary for the purposes described in this Policy and to fulfill legal obligations. The retention criteria are as follows:

• Active account data: retained for as long as the account remains active on the platform.
• Data after voluntary account closure: identification data and transaction records are kept for a minimum of 5 years after account closure, in compliance with the tax and regulatory obligations applicable to the financial and betting sector in Brazil.
• Financial transaction records: retained for a minimum of 5 years for audit purposes, anti-money laundering compliance, and potential disputes.
• KYC verification data: retained for a minimum of 5 years after the last use, in accordance with regulatory requirements for the sector.
• Access and security logs: retained for 12 months for security investigation and fraud prevention purposes.
• Analytical cookie data: retained for a maximum of 13 months, as described in Section 7.

After the applicable retention period, data is securely deleted or anonymized so it can no longer be linked to a specific individual.

To provide certain services — such as games from international providers like Pragmatic Play, PG Soft, and NetEnt — and to use global cloud infrastructure, session or technical data may be processed outside Brazil. When this occurs, 125bet ensures that:

• Transfers are made only to countries or organizations that provide an adequate level of protection, as assessed by the ANPD, or that are subject to specific contractual data protection clauses.
• Data transferred is limited to the minimum necessary for the provision of the specific service.
• Recipients are contractually required to apply security measures equivalent to those adopted by 125bet in Brazil.

Personal identification data such as CPF, identity documents, and banking details are preferably processed on servers located in Brazil or in jurisdictions with recognized adequacy.

125bet may update this Privacy Policy periodically to reflect changes in its services, Brazilian data protection legislation, or information handling practices. Material changes will be communicated at least 7 days in advance via a platform notification and by email to the address registered on your account.

The current version of this Policy is always available at 125bet.best/privacy-policy, with the date of the last update clearly indicated. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may request account closure and deletion of your data as described in Section 8.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report any concerns related to the processing of your information, please use the following official 125bet channels:

• Live chat: available 24 hours a day on the platform after login, with an average response time of under 3 minutes.
• Email: suporte@125bet.best with the subject line "LGPD Rights" for requests related to personal data.

125bet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact with the National Data Protection Authority (ANPD) and with data subjects on matters related to personal data processing. Requests addressed to the DPO should be sent to suporte@125bet.best with the subject line "DPO – Data Protection".

The ANPD is the regulatory body responsible for enforcing the LGPD in Brazil. If you believe your rights as a data subject have been violated and do not receive a satisfactory response from 125bet, you have the right to file a complaint with the ANPD through its official channels.