Privacy Policy of 234vipbet – LGPD

1Who we are and how we identify ourselves

The 234vipbet, operated under the domain 234vipbet.best, is the controller of personal data collected through the platform. For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the 234vipbet is the entity responsible for determining the purposes and means of processing your personal data.

This Privacy Policy applies to all services provided by 234vipbet, including Sports Betting, live casino games, slots, crash games, and all features related to account management and payments via Pix, bank slip, credit and debit card, and TED bank transfer.

To contact the data controller or to exercise your rights as a data subject, use the support channel available via live chat on the platform or by email at suporte@234vipbet.best.

2What personal data we collect

The 234vipbet collects only the data necessary for the proper operation of its services and to meet legal obligations. The data collected falls into the following categories:

Registration and identity data:

• Full name as shown on official ID
• CPF (Cadastro de Pessoas Físicas)
• Date of birth
• Email address
• Mobile phone number
• Full residential address (zip code, street, city, state)

Identity verification data (KYC):

• Copy of an official government-issued photo ID (national ID card, driver's license, or passport)
• Selfie for facial verification when requested by the anti-fraud system
• Proof of address in the account holder's name

Financial data:

• Pix key linked to the account's CPF
• Banking details for TED transfers (bank, branch, account number)
• Deposit and withdrawal history (amounts, dates, and methods used)
• Last 4 digits of credit or debit cards used (never the full card number)

Platform usage data:

• Full betting history (sport, event, market, amount, outcome)
• Casino, slots, and crash games session history
• IP address of each access
• Device type, operating system, and browser used
• Access times and session duration
• Chat support interactions

3How we collect your data

The 234vipbet collects your personal data through the following means:

• Directly from you: at registration, when completing your profile, during the KYC verification process, when providing payment details for deposits or withdrawals, and when contacting support.
• Automatically during platform use: IP address, device data, session cookies, and on-site browsing history are collected automatically for security, experience personalization, and fraud detection purposes.
• Through authorized third parties: Payment providers such as Pix (Banco Central do Brasil), card operators, and TED transfer systems may share data required to confirm transactions. Such sharing is always limited to the minimum necessary for financial processing.
• From public sources: in cases of anti-fraud investigation, 234vipbet may cross-reference public databases, such as the Brazilian Federal Revenue's CPF registry, solely to verify the accuracy of the information provided during registration.

4Why we use your personal data

Every piece of data collected by the 234vipbet has a specific purpose. The main purposes are:

• Account operation: create, maintain, and manage your account on the platform, including access authentication and balance control.
• Payment processing: process deposits and withdrawals via Pix, boleto bancário, credit or debit card, and TED bank transfer securely and in accordance with Banco Central do Brasil regulations.
• Identity verification (KYC): comply with the legal requirements for anti-money laundering and verify your identity before processing withdrawals above certain amounts.
• Security and fraud prevention: monitor suspicious activity and detect and prevent fraud, abusive chargebacks, multiple-account usage, and other violations of the Terms and Conditions.
• Responsible gambling: monitor usage patterns that may indicate problem gambling behavior and trigger the appropriate protection tools when needed, in accordance with our responsible gambling policy.
• Account-related communications: send transaction confirmations, security alerts, account status updates, and essential operational communications.
• Promotional communications (with consent): send offers, promotions, and news about the 234vipbet only for users who have explicitly consented to this type of communication. You can withdraw that consent at any time through the account settings menu or by contacting support.
• Compliance with legal obligations: comply with directives from competent authorities, such as the Banco Central do Brasil, the Receita Federal, and the Financial Activities Control Council (COAF), where applicable.
• Platform improvement: analyze usage data in aggregated, anonymized form to identify opportunities to improve the user experience, without linking any analysis to specific individuals.

5Legal basis for data processing (LGPD)

The LGPD requires that all personal data processing have a legal basis. The 234vipbet processes your data based on the following legal grounds set out in Article 7 of the LGPD:

• Contract performance: processing is necessary to provide the services you contracted when creating an account on the platform (art. 7, V).
• Compliance with a legal obligation: identity verification, anti-money laundering controls, and reporting to regulatory authorities are legal requirements applicable to the sector (art. 7º, II).
• Legitimate interest: anti-fraud monitoring, platform security, and service improvement are carried out on the basis of the legitimate interests of the 234vipbet, always within the bounds of data subjects' rights and reasonable expectations (art. 7º, IX).
• Consent: promotional communications and the collection of non-essential cookies are carried out solely on the basis of your express consent, which may be withdrawn at any time (art. 7º, I).

6Sharing Data with Third Parties

The 234vipbet does not sell your personal data. Sharing with third parties only occurs in the situations below, always limited to the minimum data necessary for each purpose:

• Payment providers: financial institutions such as partner banks, card operators, and the Banco Central do Brasil's Pix system receive the data necessary to process transactions. These providers operate under strict financial regulations and maintain their own privacy policies.
• Casino game providers: to provide live games, slots, and crash games, the 234vipbet shares only the game session identifier and the amount wagered with certified providers, without transmitting the user's full personal data.
• Technology and infrastructure providers: hosting, cybersecurity, and fraud analysis services that support platform operations process data under contracts with strict data protection and confidentiality clauses.
• Legal and regulatory authorities: the 234vipbet complies with court orders, requests from law enforcement authorities, and requirements from regulatory bodies such as the Banco Central do Brasil and COAF whenever legally required to do so.
• Companies in the same group: in the event of a corporate restructuring, merger, or acquisition, data may be transferred to the successor entity, with prior notice to users and the same privacy protections maintained.

In all situations involving third-party sharing, the 234vipbet contractually requires these third parties to handle data with the same level of protection described in this policy and in compliance with the LGPD.

7Cookies and Tracking Technologies

The 234vipbet uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. The cookies used fall into the following categories:

• Essential cookies: required for the basic operation of the platform — authentication, active session management, login security, and transaction processing. They cannot be disabled without compromising use of the services.
• Functional cookies: store your preferences — such as language, odds settings, and betting filters — to personalize your experience on future visits.
• Analytical cookies: collect information about how you navigate the platform — which pages you visit, how long you spend in each section, and which features you use most — in aggregated and anonymized form, to help identify improvements.
• Security cookies: detect suspicious behavior, unauthorized access attempts, and patterns associated with fraudulent activity.

You can manage your non-essential cookie preferences through the consent banner shown on your first visit or through the account privacy settings menu. Disabling essential cookies may prevent the platform from working properly.

8Data security

The 234vipbet adopts technical and organizational measures proportionate to the risks associated with processing users' personal data. The key security measures in place include:

• 256-bit SSL Encryption on all connections between the user's device and the platform's servers, preventing data from being intercepted in transit.
• Encrypted storage of sensitive data, including financial information and identity documents, with encryption keys managed under a separation-of-duties framework.
• Two-factor authentication (2FA) available to all users and strongly recommended to protect account access against unauthorized logins.
• Continuous monitoring of suspicious activity using an anti-fraud system that analyzes behavioral patterns in real time and automatically flags unusual situations for manual review.
• Internal access control strict: 234vipbet staff access users' personal data only when strictly required for their role, with an audit log recorded for every access.
• Periodic security testing, including vulnerability assessments and security configuration reviews, carried out by a specialized team.

Despite all these measures, no system is 100% immune to threats. In the event of a security incident that may affect your data, the 234vipbet will notify you and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD.

9Data retention and deletion

The 234vipbet retains your personal data for as long as necessary for the purposes described in this policy, in compliance with all mandatory legal retention periods. The retention criteria are:

• Active account data: retained for as long as the account remains active and for the period required after closure to comply with legal obligations.
• Financial and transaction data: retained for a minimum of 5 years after the last transaction, as required by Brazilian tax and anti-money laundering legislation.
• KYC verification documents: retained for a minimum of 5 years after account closure, as required by the Banco Central do Brasil for entities operating in the financial sector.
• Betting history: retained for a minimum of 1 year for dispute resolution and internal audit purposes, and for up to 5 years when associated with financial transactions.
• Access and security logs: kept for 6 months for security incident investigation purposes.
• Marketing communications data: deleted within 30 days of the user withdrawing their consent.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that it can no longer be linked to you as an individual. Early deletion may be requested through support, but is subject to confirmation that no legal obligation requires the data to be retained for the full period.

10Your rights as a data subject (LGPD)

The General Data Protection Law grants you a set of rights over your personal data. The 234vipbet makes it easy to exercise all these rights through chat support or email, with responses within 15 business days as required by the LGPD:

To exercise any of these rights, contact us via the support chat available on the platform or by email at suporte@234vipbet.best, identifying yourself as the data subject and clearly describing which right you wish to exercise. The 234vipbet may request identity verification before processing access or deletion requests, in order to protect your account from unauthorized third-party attempts.

11Users under 18

The services of 234vipbet are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors.

If you become aware that a user under 18 has created an account or provided personal data to the 234vipbet, please contact us immediately via live chat support so we can close the account and delete the minor's data as soon as the information is verified.

The 234vipbet enforces age verification at registration and during the KYC process specifically to prevent minors from accessing the platform. Any attempt to circumvent these checks results in immediate account closure and, where required, notification to the relevant authorities.

12International Data Transfers

In certain situations, the personal data of users of 234vipbet may be processed on servers or by providers located outside Brazil — particularly cloud infrastructure providers and internationally certified casino game providers.

When this happens, the 234vipbet ensures that transfers only take place to countries or organizations that provide an adequate level of personal data protection, or through the adoption of contractual clauses that impose on the recipient the same protection standards required by the LGPD.

The updated list of countries and categories of recipients to which data may be internationally transferred can be requested through support at any time.

13Changes to this Privacy Policy

The 234vipbet may update this Privacy Policy periodically to reflect changes in its services, applicable Brazilian legislation, or the platform's data processing practices.

All relevant updates will be communicated to users at least 7 days in advance via email and an in-platform notification, clearly indicating which sections were changed and the new effective date. Continued use of the platform after a new version takes effect constitutes acceptance of those changes.

The date of the most recent update is always shown at the top of this document. A history of previous versions can be requested through support for up to 90 days after each new version is published.

14Contact, DPO, and privacy channel

The 234vipbet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for matters relating to personal data processing and the exercise of your rights as a data subject.

To contact the DPO or the 234vipbet privacy team:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform. It is the fastest channel for general questions and urgent requests.
• Email: suporte@234vipbet.best — please identify the subject as "Data Privacy" or "LGPD" for direct routing to the DPO.

Requests related to data subject rights are handled within up to 15 business days, as established by the LGPD. For straightforward operational matters — such as unsubscribing from promotional emails — the turnaround is up to 2 business days.

If you believe that 234vipbet has not adequately addressed your request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.