Ivibet1 Privacy Policy — Data Protection in Brazil

1. Data Controller

A ivibet1 acts as the controller of personal data collected from platform users, as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018). As the data controller, ivibet1 is responsible for decisions regarding the purposes and means of personal data processing.

For privacy and data protection inquiries, the official contact channel is the email privacidade@ivibet1.best. All communications regarding data subject rights must be sent to this address with the user's full identification (name and registered CPF).

2. Data We Collect

A ivibet1 only collects data necessary for platform operation, compliance with legal obligations, and improving the user experience. The data collected falls into the following categories:

Registration and identity data:

• Full name as it appears on a government-issued ID;
• CPF — required for identity verification and tax compliance;
• Date of birth — for age verification (18+);
• Full residential address including zip code;
• Brazilian mobile phone number;
• Valid email address.

Financial and transaction data:

• Pix key registered for deposits and withdrawals;
• Credit or debit card details (card number, expiry date, and CVV — stored in encrypted form by the payment processor);
• History of deposits, withdrawals, and bets placed on the platform;
• Bank account details for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil, and others).

Browsing and device data:

• Access IP address;
• Browser type and version;
• Operating system (Android, iOS, Windows, etc.);
• Pages visited within ivibet1 and session duration;
• Data from cookies and similar technologies (detailed in section 8).

Verification documents (KYC): photo of a government-issued ID (RG, CNH, or passport) and proof of address issued within the last 90 days — requested before the first withdrawal or in cases of unusual account activity.

3. Purpose of Processing

Each piece of data collected by the ivibet1 has a specific and legitimate purpose. The main purposes are:

Ivibet1 will not use your data for purposes incompatible with those described above without prior notice and, where applicable, obtaining fresh consent.

4. Legal Basis for Processing (LGPD)

All data processing carried out by ivibet1 is grounded in one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): processing required to provide the services contracted by the user upon creating an account at ivibet1 — bet processing, Pix payments, withdrawals, and support;
• Compliance with a legal obligation (art. 7º, II): collection of CPF and KYC documents as required by Brazilian anti-money laundering legislation and Central Bank of Brazil regulations;
• Legitimate interest (Art. 7, IX): security monitoring, fraud prevention, suspicious activity analysis, and platform improvement — always respecting users' rights and expectations;
• Consent (art. 7º, I): sending promotional communications, bonus emails, and optional sports match notifications — revocable at any time without affecting your use of the platform.

When consent is the legal basis, you can withdraw it at any time — simply through your account dashboard or by contacting ivibet1 support.

5. Data Sharing

A ivibet1 does not sell, rent, or trade users' personal data to third parties. Data is shared only in the situations described below and always with appropriate protection measures in place:

• Game providers: Evolution Gaming, Pragmatic Play, Spribe, SmartSoft Gaming, and others receive the minimum data necessary to operate the live tables, crash games, and slots accessed by the user. These providers are contractually required to handle data in accordance with security standards equivalent to those of ivibet1;
• Payment processors: data required to process Pix, TED, boleto, and credit/debit card transactions is shared with ivibet1's payment processor partners, all of which operate in accordance with the standards set by the Central Bank of Brazil;
• Competent authorities: ivibet1 may disclose data when required to do so by court order, request from law enforcement or tax authorities, or directive from a competent regulatory body. In such cases, we disclose only the minimum necessary and, where legally permitted, notify the user;
• Infrastructure providers: cloud computing and hosting services used to operate the platform have limited access to data, strictly for technical purposes and under strict confidentiality agreements.

6. Data Retention

A ivibet1 retains users' personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. General retention periods are:

• Active account data: for as long as the account remains active and for up to 5 years after closure, for auditing and dispute resolution purposes;
• Financial transaction history: a minimum of 5 years after each transaction, as required by tax and anti-money laundering legislation;
• KYC Documents: for the duration of the active account plus 5 years;
• Browsing data and access logs: up to 6 months, unless an ongoing security investigation requires otherwise;
• Non-essential cookie data: according to each cookie's expiration period, generally between 30 days and 1 year.

Once retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified. Anonymized data may be retained for statistical purposes without a time limit.

7. Data Security

The protection of personal data belonging to users of ivibet1 is a technical and operational responsibility taken seriously at every level of the platform. The security measures in place include:

• SSL/TLS 256-bit Encryption across all communication between the user's browser and ivibet1 servers — including login, deposits, withdrawals, and any other operation involving sensitive data;
• Secure password storage with cryptographic hashing — ivibet1 does not store passwords in plain text and has no access to the user's original password;
• Role-based access control — only staff with a specific operational need are granted access to user data, and all access is logged;
• Continuous monitoring of suspicious activity, unauthorized access attempts, and anomalous usage patterns on the platform;
• Incident response procedures — in the event of a data breach, ivibet1 notifies the National Data Protection Authority (ANPD) and affected users within the deadlines set out in the LGPD;
• Pix Transactions processed in accordance with the security protocols established by the Central Bank of Brazil, including authentication and full transaction traceability.

Despite all measures in place, no system is 100% immune to threats. If you suspect unauthorized access to your account, immediately notify support via live chat or by emailing suporte@ivibet1.best.

8. Cookies and Tracking Technologies

A ivibet1 uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and analyze service performance. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — authentication, session management, and security. They cannot be disabled without compromising your use of ivibet1;
• Analytical cookies: collect anonymous information about how users navigate the platform — most visited pages, session duration, devices used. This data is used solely to improve ivibet1;
• Preference cookies: store user-selected preferences, such as language, favorite betting limits, and notification settings;
• Security cookies: identify suspicious behavior and protect against fraud, bonus abuse, and multiple accounts per device.

You can manage your cookie preferences through your browser settings (Chrome, Safari, Firefox, etc.). Disabling essential cookies may prevent the platform from functioning correctly, including the login process and placing bets.

Ivibet1 does not use social media tracking pixels or third-party behavioral advertising tools within the authenticated platform.

9. Data of Minors

A ivibet1 is a platform exclusively for residents of Brazil aged 18 and over. We do not knowingly collect personal data from individuals under 18. Registration requires a date of birth and CPF verification, which allow us to identify cases where the age requirement is not met.

If ivibet1 determines that data belonging to a person under 18 has been collected — whether through a false declaration at registration or by any other means — that data will be deleted immediately, the account will be closed, and any deposits made will be refunded to the holder of the payment method used.

10. International Data Transfers

Some game providers and infrastructure services used by ivibet1 operate servers outside Brazil. When personal data belonging to Brazilian users is transferred abroad, ivibet1 applies the safeguards required by the LGPD to ensure the level of protection is equivalent to that provided in Brazil.

The main safeguards in place include:

• Standard data protection contractual clauses in agreements with international service providers;
• Transfers only to countries with data protection standards deemed adequate by the ANPD, or subject to specific safeguards;
• Only the data strictly necessary for the specific service is shared, with a contractual prohibition on use for any other purpose.

Game providers Evolution Gaming (headquartered in Latvia, internationally licensed), Pragmatic Play, and Spribe operate under licenses from jurisdictions internationally recognized for their data protection standards and gaming regulation.

11. How to Exercise Your Rights as a Data Subject

To exercise any of the rights guaranteed under the LGPD — access, correction, deletion, portability, withdrawal of consent, or information about data sharing — the user must:

• Submit a request by email to privacidade@ivibet1.best;
• Include in the subject line: "LGPD Request — [right type]" (e.g., "LGPD Request — Data Deletion");
• Provide your full name, CPF registered with ivibet1, and a detailed description of your request;
• Attach a copy of a government-issued ID for verification purposes (not required for simple information requests).

The response time is up to 15 business days from receipt of the complete request, as provided under Article 19 of the LGPD. In complex cases, this deadline may be extended by an additional 15 days with justification.

If you believe your rights have not been properly respected, you may file a complaint with the National Data Protection Authority (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.

12. Changes to This Policy

A ivibet1 may update this Privacy Policy to reflect changes in legislation, the services offered, or data processing practices. The last updated date shown at the top of the document always indicates the current version.

Material changes — those affecting data subjects' rights or the purposes of data processing — will be communicated by email to registered users at least 7 calendar days before taking effect. Minor changes, such as text corrections or updated contact details, may be made without prior notice.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the changes, you may exercise your data subject rights as described in section 11 or close your account by contacting support.

13. Contact, DPO, and Privacy Channel

For matters related to this Privacy Policy and the processing of personal data, ivibet1 provides the following channels:

• Privacy channel (LGPD): privacidade@ivibet1.best — for data subject rights requests, complaints, and inquiries regarding data processing;
• General support: suporte@ivibet1.best or live chat available 24 hours through the account dashboard — for general questions about your account, payments, and platform;
• Data Protection Officer (DPO): ivibet1 has appointed a DPO responsible for overseeing privacy practices and serving as the point of contact with the ANPD. The DPO can be reached at the same privacy email address above.

This Privacy Policy is governed by Brazilian law, in particular Law No. 13,709/2018 (LGPD) and other applicable regulations. Any disputes will be submitted to the courts of the district of São Paulo, State of São Paulo.