Privacy Policy of 542bet — LGPD and Data Protection

1 Data Controller

The controller of the personal data collected on this platform is 542bet, the operator of the platform available at 542bet.best. For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), 542bet is the entity responsible for decisions regarding the processing of personal data of its users registered in Brazil.

Throughout this document, "we," "our," and "542bet" refer to the platform operator. "You," "your," and "data subject" refer to the registered user whose data is processed. "Personal data" has the meaning assigned by Article 5 of the LGPD — any information relating to an identified or identifiable natural person.

The controller's contact channel for privacy matters is suporte@542bet.best, available 24 hours a day.

2 Data We Collect

The 542bet collects personal data in the following categories, always for specific and legitimate purposes:

The 542bet does not collect sensitive data as defined under article 11 of the LGPD (data concerning health, racial or ethnic origin, religious beliefs, political opinions, trade union membership, or genetic or biometric data) except where required to fulfil anti-money laundering obligations mandated by law.

3 How We Use Your Data

Each piece of data collected by the 542bet has a specific and legitimate purpose. We do not use data for purposes other than those listed here without informing you in advance and, where required, obtaining your consent:

• Account operation: create and maintain your active account, authenticate your access, process your registration, and verify your identity.
• Financial transaction processing: process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and withdrawals to your bank account at Nubank, Itaú, Bradesco, Banco do Brasil, or any other Brazilian bank.
• Service delivery: provide Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, volleyball), slots, crash games, live casino, and all other platform features.
• Fraud and money laundering prevention: detect suspicious behavior, verify identity, and meet KYC and AML (Anti-Money Laundering) regulatory obligations.
• Customer support: answer your questions, resolve technical issues, and handle complaints via live chat and email.
• VIP program and promotions: calculate points, cashback, and VIP Program benefits, and send personalized promotional communications when you have opted in to receive them.
• Platform improvement: analyze usage patterns in an aggregated and anonymized form to improve platform usability, performance, and features.
• Compliance with legal obligations: respond to requests from competent public authorities, court orders, and regulatory determinations applicable to the betting sector in Brazil.

The 542bet does not use your data for behavioral analysis for third-party targeted advertising, credit scoring unrelated to platform use, or any other purpose not listed above.

4 Legal Basis for Processing

The LGPD requires that all personal data processing be grounded in one of the legal bases set out in article 7. 542bet 542bet bases the processing of your data on the following legal grounds:

• Contract performance (art. 7, V): processing registration and financial data is necessary to perform the contract entered into when you signed up — including account operation, deposit and withdrawal processing, and access to games and services.
• Compliance with a legal obligation (art. 7, II): data required for KYC, AML, and identity verification is processed to fulfill legal obligations imposed on the betting operator.
• Legitimate interest (art. 7, IX): technical data (IP, device) and usage data are processed on the basis of 542bet's legitimate interest in maintaining platform security, preventing fraud, and improving services, always with due regard for users' rights and expectations.
• Consent (art. 7, I): for marketing communications, promotions, and newsletters, processing is based on the consent you gave at registration or later updated in your account preferences. You may withdraw this consent at any time.

5 Data Sharing with Third Parties

The 542bet does not sell, transfer, or rent users' personal data. Data sharing occurs only in the situations described below, with partners and operators acting under our instruction and bound by contractual confidentiality and security obligations:

• Payment providers: to process Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago transactions. These providers receive only the data strictly necessary to process each specific transaction.
• Game providers: Pragmatic Play, Hacksaw Gaming, NetEnt, PG Soft, and other development studios receive an anonymized session identifier to process each game round. They do not receive your name, tax ID, or banking details.
• Fraud prevention services: specialized KYC and AML providers that assist with identity verification and suspicious activity detection, acting as processors under 542bet's instructions.
• Technology infrastructure: cloud hosting providers and security services that process data as part of the platform's technical infrastructure, always under contracts containing data protection clauses.
• Public authorities: when required by law, court order, or determination of a competent regulatory authority. In such cases, 542bet shares only the data specifically requested and, where legally permitted, notifies the user of the request.

6 Data Retention and Deletion

The 542bet retains personal data only for as long as necessary for the purposes for which it was collected, or to fulfil specific legal obligations. General retention periods are:

• Registration and active account data: for the entire period the account remains active, plus the time required after closure to fulfill legal obligations.
• Financial transaction history: minimum of 5 years after the transaction, as required by anti-money laundering legislation (Law No. 9,613/1998) and the Brazilian Federal Revenue Service.
• KYC records: minimum of 5 years after account closure, as required by industry regulation.
• Technical logs (IP, sessions): up to 6 months, unless an active fraud investigation or legal request requires otherwise.
• Betting history: for the duration of the account plus 2 years after closure to resolve any potential disputes.
• Support communications: 2 years after account closure.

Once retention periods expire, data is securely deleted or irreversibly anonymized. You may request early deletion of your data when no legal obligation prevents it by emailing suporte@542bet.best.

7 Cookies & Tracking Technologies

The platform 542bet uses cookies and similar technologies to ensure the platform functions correctly, personalize your experience, and analyze usage on an aggregate basis. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — maintaining login sessions, language preferences, and security. They cannot be disabled without impairing platform functionality.
• Performance cookies: collect anonymous information about how you use the platform — which pages you visit, how long you stay, where you click — to help improve usability. Data is aggregated and does not identify you individually.
• Functionality cookies: remember your preferences — such as favorite games, betting settings, and notification preferences — to personalize your experience on 542bet.

The 542bet does not use third-party tracking cookies for behavioral advertising. You can manage your cookie preferences through your browser settings (Chrome, Safari, Firefox, Edge) or via your account settings on the platform. Disabling essential cookies may affect platform functionality.

8 Data Security

The 542bet implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction:

• 256-bit SSL encryption: all communications between the user's device and 542bet's servers are encrypted — the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil.
• Encryption at rest: sensitive data such as CPF numbers and banking information is stored in encrypted form on our servers.
• Internal access control: access to user data is role-restricted and fully logged. No team member has unrestricted access to data without documented, audited justification.
• Continuous monitoring: automated systems monitor suspicious activity around the clock, including unauthorized access attempts and anomalous transaction patterns.
• Secure backups: data backups are maintained in encrypted form across geographically distributed locations to ensure availability and recovery in the event of an incident.
• Incident response plan: in the event of a data breach that may affect your rights, 542bet will notify the ANPD and the affected individuals within the deadlines established by the LGPD — as a general rule, within 72 hours of becoming aware of the incident.

Despite all measures in place, no security system is infallible. The 542bet cannot guarantee absolute security, but is committed to acting diligently and transparently in the event of any security incident.

9 International Data Transfers

Some of our technology partners and infrastructure providers may process data on servers located outside Brazil. When this occurs, the 542bet ensures that the transfer is carried out in compliance with Article 33 of the LGPD, through:

• Contracts with specific clauses providing personal data protection equivalent to Brazilian standards;
• Transfer to countries recognized by the ANPD as providing an adequate level of data protection;
• Use of standard contractual clauses approved by the ANPD where applicable.

The game providers partnering with 542bet — such as Pragmatic Play and Hacksaw Gaming — operate under licenses from regulated jurisdictions (Malta, Gibraltar) that maintain data protection standards compatible with those required by the LGPD. These providers receive only anonymized session identifiers, with no personally identifiable data from Brazilian bettors.

10 Protection of Minors

The platform 542bet is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If you suspect that someone under 18 has created an account or provided data to 542bet, please contact us immediately at suporte@542bet.best so we can take the necessary steps, including account closure and data deletion.

11 How to Exercise Your Rights (LGPD)

To exercise any of your rights as a personal data subject under the LGPD, follow the steps below:

• By email: send a message to suporte@542bet.best with the subject line "LGPD Rights — [request type]", including your full name, registered CPF, and a detailed description of the right you wish to exercise.
• Via live chat: access the 24-hour support chat on the platform and let the agent know you wish to exercise a right under the LGPD.

After receiving your request, the 542bet will send a receipt confirmation and process the request within 15 calendar days. In more complex cases — such as verifying the requester's identity or reviewing the data involved — the deadline may be extended by a further 15 days, with prior notice to the data subject.

The 542bet may request proof of identity before fulfilling requests to access, correct, or delete data, to ensure that information is provided only to the legitimate data subject. This verification is done by cross-referencing the CPF and other registration details — we will never ask for your password.

If your request is not resolved satisfactorily, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

12 Data Protection Officer (DPO)

As required by Article 41 of the LGPD, the 542bet has appointed a Data Protection Officer (DPO) responsible for:

• Receive and address complaints and communications from data subjects and provide clarifications;
• Receive communications from the ANPD and take the necessary measures;
• Train 542bet staff on data protection practices;
• Carry out any other duties assigned by the controller or established under supplementary regulations.

Contact with the DPO of 542bet can be reached by email at suporte@542bet.best with the subject line "DPO — Data Protection". The DPO's full identity is available upon formal request.

13 Changes to this Privacy Policy

The 542bet may update this Privacy Policy periodically to reflect changes in our practices, applicable laws, or platform features. When changes are material to your rights or to how your data is used, you will be notified by email and/or via a platform notice at least 15 days before the new version takes effect.

Changes required by immediate legal obligations may be implemented without prior notice, with users notified at the time of implementation. Continued use of the platform after the new version's effective date constitutes acceptance of the updated terms.

The current version of this Privacy Policy will always be available at 542bet.best/privacy-policy, with the date of the most recent update clearly shown at the top of the document. Previous versions may be requested through support for reference purposes.