656bet Privacy Policy – Data Protection

1Introduction and Controller Identification

This Privacy Policy describes how the 656bet, operator of the platform available at 656bet.click ("Platform"), collects, uses, stores, shares, and protects the personal data of users registered in Brazil ("Users"). By creating an account and using any service of the 656bet, you confirm that you have read and agreed to the terms of this Policy.

A 656bet acts as the controller of Users' personal data, as defined by the General Personal Data Protection Law (LGPD — Law No. 13.709/2018). This means we are responsible for all decisions related to the processing of your data: what we collect, why we collect it, and how long we retain it. The Data Protection Officer (DPO) of 656bet can be reached by email at suporte@656bet.click.

This Policy is part of the Terms and Conditions of the 656bet and should be read together with them. In the event of any conflict between documents, the more specific provision for each situation shall prevail.

2What Data We Collect

2.1 Data provided by the User at registration

To create and operate your account on the 656bet, we collect the following data provided directly by you:

• Full name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Full address (street, number, unit, neighborhood, city, state, ZIP code);
• Email address;
• Mobile number;
• Identity documents submitted during the KYC process (national ID, driver's license, or passport) and proof of address.

2.2 Usage and Browsing Data

While you use the Platform, the 656bet automatically collects technical information required for the operation and security of the service:

• IP address and approximate location (state/city);
• Device type, operating system, and browser;
• Pages visited, time spent browsing, and actions taken on the Platform;
• Betting history, financial transactions, and bonus usage;
• Session data and device identifiers (cookies, authentication tokens).

2.3 Financial Transaction Data

To process deposits and withdrawals, the 656bet collects information related to transactions made via Pix, credit and debit cards, bank slip (boleto), Mercado Pago, PicPay, or TED bank transfer. This includes the Pix key linked to your bank account, the last digits of your card, and the originating bank of transfers. No full card data is stored on the servers of the 656bet — this information is handled directly by the certified payment processors we use.

3How We Use Your Data

The data collected by 656bet are used exclusively for the following purposes:

A 656bet never uses your data for purposes incompatible with those listed above without notifying you first and, where necessary, requesting fresh consent. If you choose not to receive marketing communications, you can opt out at any time by clicking "unsubscribe" in any email you receive or by requesting it through the support chat — this does not affect your account in any way.

4Legal Basis for Processing (LGPD)

Every data processing operation carried out by the 656bet is grounded in at least one of the legal bases set out in the LGPD. The main bases we rely on are:

• Contract performance (art. 7º, V): processing is necessary for the 656bet fulfill the obligations of the terms of use accepted by the User at registration — operating the account, processing bets, and handling payments;
• Legal obligation (art. 7, II): certain processing activities are required by law, such as identity verification (KYC), anti-money laundering compliance (Law No. 9.613/1998), and adherence to sports betting regulations;
• Legitimate interest (art. 7, IX): used for purposes such as fraud prevention, Platform security, and continuous service improvement, always ensuring the User's interests are not harmed;
• Consent (art. 7, I): when processing goes beyond operational and contractual needs — such as sending marketing communications and personalizing offers — the 656bet requests explicit consent and allows you to withdraw it at any time.

You have the right to question the legal basis used for any specific processing of your data. Simply contact us at suporte@656bet.click specifying which data and which purpose you would like to understand better.

5Data Sharing with Third Parties

A 656bet does not sell, rent, or transfer Users' personal data to third parties for commercial purposes. Data sharing occurs only in the situations listed below, each with a specific and controlled purpose:

• Payment processors: Pix (Banco Central do Brasil), card acquirers, Mercado Pago, PicPay, and partner banks receive only the data strictly necessary to process each transaction. These partners operate under contracts that include data protection clauses;
• KYC providers: specialized identity verification companies that process documents to confirm Users' eligibility. Processing is strictly limited to the verification purpose;
• Game providers: for the operation of live casino, slots, and crash games, software providers receive anonymous session identifiers — not the User's full registration data;
• Competent authorities: when required by court order or regulatory or law enforcement authority, the 656bet provides the requested data as required by law, strictly within the scope of the request;
• Technology service providers: server infrastructure, security analysis, and customer support, all governed by contracts with strict confidentiality and limited data use clauses.

Any new type of sharing outside the categories above requires prior notice to the User and, where applicable, fresh consent. The 656bet requires all partners who receive personal data to maintain security standards consistent with our own.

6Cookies and Tracking Technologies

6.1 What cookies are and how we use them

Cookies are small text files stored on your device when you access the Platform. The 656bet uses cookies to keep your session active, remember your preferences, and ensure features such as live betting and the multi-bet slip work correctly. Without essential cookies, the Platform does not function properly.

We use the following types of cookies:

• Essential cookies: required for authentication, session security, and basic Platform functionality. They cannot be disabled without compromising your use of the service;
• Performance cookies: collect aggregated and anonymized data on how Users navigate the Platform, helping identify errors and improve the experience;
• Personalization cookies: remember your language preferences, favorite sports, and betting settings to streamline your experience on future visits;
• Marketing cookies: used with your consent to display relevant communications about promotions from 656bet. You can decline these cookies with no impact on your use of the Platform.

6.2 Managing cookies

You can manage your cookie preferences through your browser settings. Most modern browsers — Chrome, Firefox, Safari, Edge — let you view, block, or delete specific cookies. Please note that disabling essential cookies will prevent login and live betting from working properly on 656bet.

7Data Security

A 656bet adopts a robust set of technical and organizational measures to protect Users' personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption in all communications between your device and the Platform's servers;
• Encryption at rest for sensitive data stored in databases, including CPF, bank details, and identity documents;
• Two-factor authentication (2FA) available and recommended for all Users;
• Continuous monitoring of systems by specialized cybersecurity teams, with automatic detection of suspicious access;
• Role-based access control: only employees with a proven operational need have access to Users' personal data, always in an audited manner;
• Regular backups and incident response plan: in the event of any security incident that may affect your data, the 656bet notifies affected Users and the ANPD within the deadlines set out in the LGPD.

No security system is foolproof. That is why the 656bet combines technical measures with strict operational practices and periodic security reviews. If you notice any suspicious activity on your account, contact us immediately via live chat or at suporte@656bet.click.

8How Long We Retain Your Data

A 656bet retains Users' personal data only for as long as necessary for the purposes that led to its collection, in compliance with applicable legal retention periods. The general retention criteria are:

• Registration data and KYC documents: retained for as long as the account is active and for a minimum period of 5 years after closure, in accordance with anti-money laundering obligations (Law No. 9,613/1998);
• Betting history and financial transactions: retained for 5 years after each transaction, as required by law for tax and regulatory purposes;
• Access logs (IP and session logs): retained for 6 months, in accordance with the Marco Civil da Internet (Law No. 12.965/2014);
• Marketing communication data: retained until the User withdraws consent, or for 2 years of inactivity, whichever comes first;
• Data of users who have requested permanent self-exclusion: the CPF is kept on a restriction list to prevent re-registration, but all other personal data is minimized after the mandatory legal retention period.

Once retention periods expire, data is securely and irreversibly deleted or anonymized so that the data subject can no longer be identified. Anonymized data may be kept for statistical purposes indefinitely, as it is no longer considered personal data under the LGPD.

9Your Rights as a Data Subject

The LGPD grants you, as the data subject, a set of important rights that the 656bet is committed to fully honoring. See what you can request at any time:

• Access: obtain confirmation that we process your data and receive a full copy of the information we hold about you;
• Correction: request the update or correction of inaccurate, incomplete, or outdated data;
• Anonymization or blocking: request that unnecessary data or data processed without a legal basis be anonymized or blocked;
• Deletion: request the deletion of data processed based on your consent, subject to mandatory legal retention periods;
• Portability: receive your data in a structured format for transfer to another controller, where technically feasible;
• Data sharing information: find out which public or private entities the 656bet shared your data;
• Consent withdrawal: withdraw consent given for specific processing activities (such as marketing) at any time, without affecting your account's functionality;
• Objection: object to processing based on legitimate interest that harms your rights or interests.

To exercise any of these rights, please contact the 656bet by emailing suporte@656bet.click with your full name, CPF, and the right you wish to exercise. We will respond within a maximum of 15 calendar days, as required by the LGPD. For more complex requests, we may need to verify your identity before processing.

10Minors

A 656bet does not collect or process personal data from individuals under 18. Account registration on the Platform is strictly for adults, and the identity verification process includes date of birth confirmation. If we determine that a minor's data was collected in error, it will be deleted immediately and the account will be closed.

If you are the legal guardian of a minor and believe they have created an account on the 656bet, contact us immediately via live chat or by email at suporte@656bet.click. We will handle your case with priority and discretion.

11Policy Updates & Contact

11.1 How we notify you about changes

A 656bet may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or our data processing practices. All material updates are communicated at least 15 days in advance via the registered email address and through a prominent notice on the Platform. The date of the last revision is always shown at the top of the document.

Continued use of the Platform after an update takes effect constitutes acceptance of the new version of the Policy. If you disagree with the changes, you may close your account before the effective date and request deletion of your data, subject to any legally required retention periods.

11.2 How to contact us

For any questions, data-related requests, or to exercise your rights under the LGPD, please contact 656bet through the channels below:

• Live chat: available on the Platform 24 hours a day, 7 days a week, in Brazilian Portuguese;
• Email: suporte@656bet.click — response within 15 business days for LGPD-related requests;
• Average chat response time: less than 3 minutes.