Privacy Policy of 27bet1: How Your Data Is Protected

The 27bet1 is the controller of personal data collected through the sports betting and online casino platform available at 27bet1.best, as well as through the mobile app for Android and iOS. As the data controller, 27bet1 is responsible for defining the purposes and means of processing users' personal data, in full compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018).

For any questions related to the privacy of your data, you can reach us directly at contato@27bet1.best, specifying "Data Privacy" or "LGPD" in the subject line. Our team is available 24 hours a day to respond to data protection requests.

The 27bet1 collects different categories of personal data depending on how you interact with the platform. The main categories and examples of data collected are listed below:

Financial data such as credit or debit card numbers are never stored directly on 27bet1 — are processed and tokenized exclusively by our partner payment processors (such as Mercado Pago and PicPay), which maintain their own security and compliance policies.

The 27bet1 does not collect sensitive data categories (health data, racial origin, religious beliefs, political opinions) except where strictly necessary and with explicit consent — which in practice does not occur within the scope of our services.

The personal data collected by 27bet1 are used exclusively for the following legitimate purposes:

• Service delivery: account creation and management, processing of bets and payments via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay
• Identity verification (KYC): confirm that you are over 18 years old and that your registration details are accurate, as required by fraud prevention regulations
• Security and fraud prevention: detect unauthorized access, suspicious betting patterns, and activities that violate the terms of use of 27bet1
• Responsible gambling: monitor usage patterns to identify signs of problematic behavior and proactively offer self-control tools
• Customer support: answer questions, resolve disputes, and continuously improve the experience based on user feedback
• Platform improvement: analyze aggregated and anonymized usage data to improve features, fix technical issues, and develop new functionality
• Marketing communications: send promotions, bonuses, and news from 27bet1 only for users who have opted in to receive this type of communication
• Legal obligations: comply with requirements from regulatory, tax, and judicial authorities applicable to the platform's operations in Brazil

The 27bet1 does not use your data to build automated profiles that result in significant decisions about you without human oversight — except in cases of automated fraud detection, where any adverse decision can be challenged through our support team.

The LGPD requires that any processing of personal data be grounded in a specific legal basis. The 27bet1 processes your data on the basis of the following legal grounds established by law:

• Performance of a contract: data required to provide the services you signed up for when creating an account — such as processing Pix deposits, confirming bets, and completing withdrawals
• Compliance with a legal obligation: data required by law, such as KYC information for anti-money laundering compliance and adherence to industry regulations
• Legitimate interest: processing required for platform security, fraud prevention, and service improvement, provided it does not override your fundamental rights
• Consent: for sending marketing communications and using non-essential cookies — consent that may be withdrawn at any time without affecting the contracted services
• Regular exercise of rights: processing required for defense in judicial, administrative, or arbitration proceedings

The 27bet1 shares personal data with third parties only when strictly necessary to deliver services or meet legal obligations. Your data is never sold, rented, or traded. The categories of third parties that may receive data are:

• Payment processors: Mercado Pago, PicPay, and other Pix and card providers to securely process deposits and withdrawals
• Identity verification (KYC) providers: specialized services for document validation and fraud prevention
• Game providers: live casino and slots providers that require minimal data to run the games (such as a session identifier)
• Technical infrastructure providers: hosting, cloud computing, and cybersecurity services that process data as sub-processors
• Competent authorities: courts, tax, regulatory, or public security authorities, when required by law or judicial order
• Support services: live chat and email platforms used for customer support, with access limited to the data needed to handle each request

All third parties that process data on behalf of 27bet1 are subject to data processing agreements that require security standards equivalent to our own and restrict the use of data exclusively to authorized purposes.

The personal data of users of 27bet1 are stored on servers with the following technical security measures:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption at rest for sensitive data stored in the database
• Two-factor authentication (2FA) for employee access to internal systems
• Continuous security monitoring with unauthorized access alerts
• Regular encrypted backups stored in geographically separate locations
• Role-based access control (RBAC) — only staff with a legitimate need can access specific data
• Periodic penetration testing and security audits conducted by independent third parties

In the event of a security breach that may pose a risk to data subjects, the 27bet1 is committed to notifying the National Data Protection Authority (ANPD) and affected users within the timeframe established by the LGPD — within 2 business days of becoming aware of the incident, with a description of the nature of the affected data and the measures taken.

The 27bet1 uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the site. We use the following categories of cookies:

You can configure your browser to block or delete cookies, but this may affect how some features of the 27bet1. For non-essential cookies, you can update your preferences at any time in the platform's privacy settings.

The services of 27bet1 are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors. By registering, the user confirms they are 18 or older and takes responsibility for that declaration.

If we discover that we have collected data from a person under 18 without proper consent, that data will be immediately deleted from all our systems and the associated account will be closed, with any real balance refunded to the legal guardian.

The LGPD grants you, as a data subject, a robust set of rights that 27bet1 is fully committed to upholding. See below how to exercise each of them:

• Access: request a copy of all personal data that 27bet1 holds about you — we respond within 15 business days
• Rectification: correct incomplete, inaccurate, or outdated data directly through your account profile or by email
• Deletion: request the deletion of unnecessary data or data processed in violation of the LGPD — except where retention is required by law
• Portability: receive your data in a structured, machine-readable format for transfer to another service, where technically feasible
• Consent withdrawal: withdraw previously granted consent, especially for marketing purposes, without affecting access to contracted services
• Objection: object to processing based on legitimate interest that disproportionately affects your fundamental rights
• Sharing information: know which entities your data has been or is currently shared with
• Review of automated decisions: request human review of any automated decision that has an effect on you

To exercise any of these rights, send an email to contato@27bet1.best with the subject line "LGPD Rights", identifying yourself with your full name and CPF linked to the account. The 27bet1 will respond within 15 business days. If you are not satisfied with our response, you may file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

The 27bet1 retains your personal data for as long as necessary to fulfill the purposes described in this policy. Retention periods vary depending on the nature of the data and applicable obligations:

• Account and identity data: retained for as long as the account is active and for up to 5 years after closure, as required by anti-money laundering regulations
• Financial transaction history (Pix, deposits, withdrawals): retained for 5 years in accordance with Receita Federal requirements and financial regulations
• Betting history: retained for 2 years after the last account activity for support, dispute resolution, and compliance purposes
• Customer support data: conversations and emails retained for up to 2 years after the case is closed
• Non-essential cookies: expire according to the deadlines defined for each category, generally between 30 days and 12 months
• Marketing data: retained until consent is withdrawn or the account is closed

Once the applicable retention periods have expired, data is securely deleted or anonymized in a way that makes it impossible to identify the data subject. The 27bet1 conducts periodic reviews of stored data to ensure only necessary data is being retained.

Some of the technical partners of 27bet1 — such as cloud infrastructure providers and game suppliers — may be located outside Brazil. When personal data is transferred to countries that do not offer the same level of protection guaranteed by the LGPD, the 27bet1 adopts the necessary safeguards:

• Standard contractual clauses approved by the ANPD or equivalent international instruments
• Transfers only to countries with an adequate level of protection recognized by the ANPD
• Contractually required guarantees from partners ensuring a level of data protection equivalent to Brazilian standards

You can request information about the specific safeguards applied to international data transfers involving your personal data by contacting us at contato@27bet1.best.

The 27bet1 may send marketing communications about promotions, bonuses, news, and relevant platform updates exclusively to users who have consented to receive them. These communications may be sent via email, SMS, in-app push notifications, or WhatsApp.

If you no longer wish to receive marketing communications from 27bet1, you may unsubscribe through any of the following methods:

• By clicking the unsubscribe link in any email sent by 27bet1
• By disabling communication preferences in your account notification settings
• By sending an email to contato@27bet1.best with the subject line "Unsubscribe Marketing"

Marketing communication opt-outs are processed within 5 business days. Even after opting out, the 27bet1 may send essential operational communications — such as withdrawal confirmations, security alerts, and terms updates — as these are necessary for delivering the contracted service.

The 27bet1 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or the services offered. The date of the last update is always shown at the top of this document.

Significant changes will be communicated to users by email at least 7 days before taking effect, except where urgent regulatory requirements apply. Continued use of the platform after the new version's effective date constitutes acceptance of the changes.

We recommend reviewing this policy periodically to stay informed about how the 27bet1 handles your personal data. The most up-to-date version is always available on this page.

For any questions about this Privacy Policy or the processing of your personal data, please contact 27bet1 through the following channels:

• Email: contato@27bet1.best — subject line: "Data Privacy" or "LGPD"
• Live chat: available 24 hours a day on the platform — please mention that your request relates to personal data
• WhatsApp: 24/7 support in Portuguese — please mention that it is a privacy matter

The 27bet1 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. The DPO can be reached at the same email address above, with a clear indication that the message is intended for the DPO.

If you are not satisfied with the response from 27bet1 a privacy-related request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.