Privacy Policy – Zero1Bet: Your Data, Protected

1. General Information and Controller Identification

This Privacy Policy describes how Zero1Bet ("Platform", "we", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "User") who use the services available at zero1bet.best — including Sports Betting on Brasileirão, Copa do Brasil, Libertadores, UFC, volleyball, basketball, and more, as well as live casino, slots, crash games, and the VIP Program.

Zero1Bet acts as Controller of personal data, as defined by the General Data Protection Law (LGPD, Law No. 13,709/2018). This means we are responsible for determining the purposes and means of processing the personal data you provide when using the platform.

This policy applies to all Zero1Bet channels: website, mobile app (Android and iOS), support chat, email, and any other interface through which you interact with the platform. By creating an account or continuing to use Zero1Bet's services after updates to this policy are published, you confirm that you have read and agree to the terms described herein.

2. Personal Data We Collect

2.1 Data provided directly by you

At registration and during your use of Zero1Bet, we collect the following personal data that you provide to us directly:

• Identification data: full name, CPF, date of birth, gender (optional);
• Contact details: email address, mobile number, full residential address (ZIP code, street, number, neighborhood, city, state);
• Identity documents: National ID (RG), driver's license (CNH), or passport — requested during the identity verification (KYC) process;
• Financial data: Pix key, bank details for processing deposits and withdrawals, transaction history on the platform;
• Communication data: content of messages exchanged with support via chat or email.

2.2 Automatically collected data

When you access Zero1Bet, we automatically collect certain technical data required for the platform to operate:

• IP address and approximate geographic location;
• Device type (mobile, tablet, desktop), operating system, and browser version;
• Session data: pages visited, time spent, clicks, and interactions on the platform;
• Device identifiers for the mobile app (Android ID, IDFA);
• Cookies and similar tracking technologies (detailed in Section 8).

2.3 Gaming and betting data

To operate the betting and casino service, we collect and store:

• Full history of sports bets and casino games;
• Account balances, bonuses, and financial transactions;
• Gaming preferences, most-used categories, and behavioral patterns for responsible gambling purposes;
• VIP Program points and level.

3. How We Use Your Personal Data

Zero1Bet uses the personal data collected for the following purposes, always in a proportionate and necessary manner:

• Platform operation: create and manage your account, process bets, settle results, and calculate payouts;
• Payment processing: process deposits and withdrawals via Pix, bank slip (boleto bancário), credit and debit card, PicPay, Mercado Pago, and TED bank transfer, including verification of account ownership;
• Identity verification (KYC): verify user identity to meet regulatory obligations related to anti-money laundering and fraud prevention;
• Responsible Gambling: monitor gambling behavior patterns to identify signs of problem gambling and proactively apply protective tools;
• User support: respond to questions, complaints, and requests via live chat and email;
• Communications: send notifications about your account, transactions, bonuses, and relevant promotions via email, SMS, or in-app push notifications — you can opt out of marketing communications at any time;
• Security and fraud prevention: detect and prevent unauthorized access, multiple-account use, and unlawful activity;
• Legal compliance: comply with legal, regulatory, and judicial obligations applicable to operations in Brazil;
• Product improvement: analyze aggregated and anonymized usage data to improve the platform experience.

Zero1Bet does not use your personal data to build marketing profiles for third parties, nor to make automated decisions that produce legal or similarly significant effects on you without the possibility of human review.

4. Legal Basis for Data Processing (LGPD)

All personal data processing carried out by Zero1Bet has a legal basis defined by the LGPD. The main legal bases we rely on are:

• Performance of a contract (art. 7, V): processing is necessary to perform the platform's terms of use — operating bets, processing payments, managing your account, and providing support;
• Compliance with a legal obligation (art. 7, II): processing is required by law — particularly for identity verification (KYC), anti-money laundering compliance, and financial record retention;
• Legitimate interest (Art. 7, IX): used for fraud prevention, platform security, and product improvement, always in a manner consistent with your rights and reasonable expectations;
• Consent (Art. 7, I): for marketing communications, use of non-essential cookies, and data sharing with analytics partners. You may withdraw consent at any time.

5. Data Sharing with Third Parties

Zero1Bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only occurs in the following situations, all of which are governed by appropriate contractual safeguards:

• Payment processors: financial data required to process transactions via Pix, boleto, credit card, and other methods is shared with the respective payment providers (Brazilian banks and fintechs authorized by the Central Bank) — only the data strictly necessary for the transaction;
• Game providers: betting history from games provided by third parties (live casino providers, crash games) is shared with those providers solely for result settlement and RTP auditing;
• Identity verification: documents submitted during the KYC process may be handled by providers specialized in digital identity verification, under confidentiality agreements;
• Analytics services: anonymized and aggregated technical data (with no personal identification) is shared with platform performance analytics tools;
• Public authorities: data is shared with competent authorities (Central Bank, Federal Revenue Service, law enforcement, and judicial authorities) when required by law or court order.

6. Personal Data Security

Zero1Bet implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. The main security measures in place include:

• 256-bit SSL/TLS encryption for all communications between your device and Zero1Bet's servers;
• Data storage on restricted-access servers with privilege controls and continuous monitoring;
• Passwords stored in hashed format — Zero1Bet does not know and cannot retrieve your password directly;
• Two-factor authentication (2FA) available for all accounts;
• Automated monitoring of suspicious activity and real-time alerts for the security team;
• Periodic security reviews and penetration testing conducted by specialized teams;
• Regular training for internal staff on data protection best practices.

Despite all measures in place, no system is 100% breach-proof. In the event of a security incident that may affect your personal data, Zero1Bet will take the steps required under the LGPD — including notifying the National Data Protection Authority (ANPD) and affected users when required by law — within the regulatory deadlines.

7. Data Retention and Deletion

Zero1Bet retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. Retention periods vary by data category:

• Registration and identity data: retained for the full duration of the account and for 5 years after closure, to comply with anti-money laundering obligations and any applicable audits;
• Betting history and financial transactions: retained for 5 years after account closure, in accordance with Brazilian financial legislation;
• Support communication data: retained for 2 years for quality assurance and dispute resolution purposes;
• Technical and session data: retained for 12 months for security analysis and product improvement;
• Non-essential cookie data: for the period defined in the consent, generally 12 to 24 months.

Once retention periods expire, data is securely deleted or anonymized so that the user can no longer be identified. Requests for early data deletion are handled in accordance with Section 9 (Your Rights).

8. Cookies and Tracking Technologies

Zero1Bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and collect analytics data. Cookies are divided into the following categories:

• Essential cookies: required for basic platform operation — session authentication, security, language preferences, and bet slip management. These cannot be disabled without affecting your use of the platform;
• Performance cookies: collect anonymous data about how you use the site (pages visited, load times, errors) to help us improve the product. They do not identify you individually;
• Analytical cookies: allow us to understand aggregate user behavior on the platform to inform product decisions. Data is processed in anonymized form;
• Preference cookies: remember your personalized platform settings, such as your selected language, preferred payment method, and notification preferences.

You can manage your cookie preferences through the consent banner displayed on your first visit or through your browser settings. Disabling essential cookies may impair the correct functioning of the platform. Disabling non-essential cookies does not affect access to Zero1Bet's core services.

9. Your Rights as a Data Subject (LGPD)

Brazil's General Data Protection Law (LGPD) grants you, as a data subject, a set of rights regarding how Zero1Bet processes your personal information. You may exercise these rights at any time by emailing privacidade@zero1bet.best or via the 24h support chat.