Privacy Policy of 365jogo — Your Data

1 Introduction

This Privacy Policy describes how the 365jogo — Sports Betting and online casino platform available in 365jogo.best — collects, uses, stores, shares, and protects the personal data of its Brazilian users.

By creating an account, using our services, or accessing the platform, you confirm that you have read and understand this Policy. It supplements our Terms and Conditions and forms an integral part of the agreement between you and 365jogo.

This Policy is written in Brazilian Portuguese and was drafted in compliance with the General Personal Data Protection Law — LGPD (Law No. 13,709, of August 14, 2018) and other regulations applicable to data processing within Brazilian territory.

2 Data Controller

The controller responsible for processing your personal data is 365jogo, operator of the platform 365jogo.best. For the purposes of the LGPD, the controller is the entity that makes decisions about what data to collect, how to process it, and for what purpose.

For any communication regarding personal data — exercising your rights, questions, or complaints — please contact us at contato@365jogo.best, with the subject line "Privacy" or "LGPD".

3 Data Collected

3.1 Data You Provide Directly

By creating an account or using the services of 365jogo, you provide us with:

• Full name, CPF, date of birth, and gender;
• Email address and mobile phone number;
• Full residential address (postal code, street, number, city, state);
• Identity documents for KYC verification (national ID, driver's license, or passport, and proof of address);
• Banking details for withdrawal processing (Pix key, bank, branch, and account number);
• Information provided when contacting customer support.

3.2 Automatically collected data

When you access the platform, we automatically collect:

• IP address and approximate location (city/state);
• Browser type and version, operating system, and device type;
• Pages visited, session duration, and actions taken on the platform;
• Device identifiers and session cookies;
• Platform technical performance data for diagnostic purposes.

3.3 Transaction data

We log all financial transactions carried out on the 365jogo, including deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfer, as well as withdrawals, bonus adjustments, betting history, and casino game results. These records are required for legal compliance, fraud prevention, and customer support.

4 How We Use Your Data

The 365jogo uses your personal data exclusively for the following purposes:

• Platform operation: create and manage your account, process deposits and withdrawals via Pix and other methods, and record bets and game results;
• Identity verification (KYC): confirm that you are 18 years of age or older and that the account belongs to the person listed during registration;
• Fraud and money laundering prevention: monitor transactions and activity patterns to fulfill Brazilian regulatory obligations;
• Customer support: answer questions, resolve issues, and log interactions for continuous service improvement;
• Service-related communications: account notifications, processed withdrawals, security alerts, and important updates;
• Direct marketing: send promotions, bonuses, and platform news — only with your consent and with the option to unsubscribe at any time;
• Responsible gambling: identify usage patterns that may indicate at-risk behavior and proactively offer support tools;
• Product improvement: analyze aggregated and anonymized usage data to improve the platform experience.

5 Legal Basis for Processing (LGPD)

The LGPD requires that all processing of personal data have a legal basis. 365jogo processes your data based on the following legal grounds set out in Art. 7 of Law No. 13,709/2018:

• Performance of a contract (art. 7, V): to operate your account, process deposits and withdrawals, and deliver the contracted services;
• Compliance with a legal obligation (art. 7, II): to meet the requirements of legislation such as the Anti-Money Laundering Law (Lei nº 9.613/1998) and COAF regulations;
• Legitimate interest (art. 7, IX): for fraud prevention, platform security, and service improvement — always with minimal impact on your privacy;
• Consent (art. 7º, I): to send marketing communications — you may withdraw consent at any time without affecting your access to the platform.

6 Data Sharing

The 365jogo does not sell personal data. We share information only in the following situations:

6.1 Operational partners

To operate, the platform works with vendors that process data on behalf of 365jogo, always under confidentiality and data protection agreements:

• Payment processors: to process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED — they receive only the minimum data required to complete the transaction;
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, and other providers receive an anonymous session identifier to operate the games — with no access to the player's CPF or banking details;
• Identity verification services (KYC): to validate documents during the registration and verification process;
• IT Infrastructure: servers and cloud services that host the platform — governed by confidentiality agreements and with data encrypted.

6.2 Legal obligations

We may share data with Brazilian government authorities — Receita Federal, COAF, Ministério Público, Polícia Federal — when required by law, court order, or financial crime investigation. There is no discretion in these cases: it is a legal obligation.

6.3 What we never do

The 365jogo never shares your data with marketing companies, advertisers, data brokers, social media platforms, or any third party for advertising or commercial purposes beyond the platform's own direct services.

7 Cookies and Tracking Technologies

7.1 What are cookies

Cookies are small text files stored in your browser when you access 365jogo. They allow the platform to recognize your device on return visits, keep your session active, and personalize your experience.

7.2 Types of cookies used

• Essential cookies: required for the platform's basic functionality — authentication, session management, and security. These cannot be disabled without affecting your ability to use the platform;
• Performance cookies: collect data on how you use the platform (pages visited, errors encountered) to help improve the experience. All data is aggregated and anonymized;
• Functionality cookies: remember your preferences — language, display settings — to personalize your experience;
• Analytics cookies: used to understand general usage patterns across the platform at an aggregated level. They do not identify you individually.

7.3 Managing cookies

You can manage, block, or delete cookies through your browser settings (Chrome, Safari, Firefox, etc.). Blocking essential cookies may prevent login and other critical features of 365jogo. For non-essential cookies, you may choose not to accept them without affecting your use of the platform.

8 Data Retention

The 365jogo retains personal data only for as long as necessary for the purposes described in this Policy or to fulfill legal obligations. General retention periods are:

• Active account data: retained for the full duration of the account and for up to 90 days after closure, unless otherwise required by law;
• Financial transaction data (deposits and withdrawals via Pix, boleto, etc.): retained for up to 5 years after the transaction, as required by accounting and anti-money laundering regulations;
• KYC Documents: retained for up to 5 years after account closure, in accordance with industry regulations;
• Betting and game records: retained for up to 5 years for audit and regulatory compliance purposes;
• Browsing data and cookies: retained for up to 12 months from the date of collection;
• Support communications: retained for up to 2 years for quality assurance and dispute resolution purposes.

After the periods above, data is securely deleted or anonymized in a way that makes it impossible to identify the individual.

9 Data Security

The 365jogo implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. Key measures include:

• 256-Bit SSL/TLS Encryption across all communications between your device and our servers;
• Encryption at rest for sensitive data stored in the database — CPF, banking details, and identity documents;
• Role-based access control — only staff members with a specific operational need may access personal data, and all access is recorded for audit purposes;
• Two-factor authentication for administrative access to internal systems;
• Continuous monitoring of suspicious activity across our systems and network;
• Regular security testing, including periodic vulnerability assessments and penetration testing;
• Strong password policy and regular team training on information security best practices.

In the event of a security incident affecting personal data — such as a breach or unauthorized access —, 365jogo will notify the ANPD (Autoridade Nacional de Proteção de Dados) and affected users within the timeframes required by the LGPD, with clear information about what occurred and the measures taken.

10 Exercising Your Rights (LGPD)

To exercise any of the rights provided under Art. 18 of the LGPD, please submit a request to contato@365jogo.best with the subject line "LGPD Request" and include:

1. Your full name and CPF registered with 365jogo;
2. The type of request (access, correction, deletion, portability, objection, consent withdrawal, or automated decision review);
3. Any additional details relevant to your request.

The 365jogo responds to data subject requests within 15 business days, as established by the LGPD. In cases of high complexity or a large volume of simultaneous requests, this deadline may be extended by an equal period, with prior notice to the data subject.

If you are not satisfied with our response, you may file a complaint with the ANPD — Autoridade Nacional de Proteção de Dados, the authority responsible for enforcing the LGPD in Brazil.

11 Minors

The services of 365jogo are intended exclusively for users aged 18 and over. The platform does not intentionally collect, process, or store personal data from minors.

The identity verification (KYC) process includes date-of-birth confirmation and, where necessary, government-issued ID validation, specifically to prevent access by minors. Accounts identified as belonging to users under 18 will be closed immediately, all associated data will be deleted, and any real-money balance will be returned to the verified account holder.

If you believe a minor has created an account on 365jogo, please contact us immediately at contato@365jogo.best or via the 24h chat so we can investigate and take the necessary action.

12 International Data Transfer

Some of the technology providers used by 365jogo — such as cloud server infrastructure and international game providers like Pragmatic Play and Evolution Gaming — may process data on servers located outside Brazil.

When this occurs, 365jogo ensures that transfers are only carried out to countries offering an adequate level of data protection, or under specific contractual clauses that guarantee protection equivalent to that required by the LGPD, in accordance with Art. 33 of Law No. 13,709/2018.

In all cases, data transferred is limited to the minimum necessary for service delivery, and providers are contractually bound not to use the data for any purpose beyond what is strictly required for the contracted service.

13 Changes to This Policy

The 365jogo may update this Privacy Policy at any time to reflect changes in data processing practices, updates to applicable legislation, or improvements to our processes. The "Last updated" date at the top of this page indicates the version currently in effect.

Significant changes — those that expand data collection, modify purposes, or affect your rights — will be communicated to your registered email address at least 15 days' notice. Minor changes, such as text corrections or clarifications with no practical impact, may be published without prior notice.

Continued use of the platform after an updated version of this Policy takes effect constitutes acceptance of the changes. If you do not agree with the changes, you must close your account and request data deletion before the effective date.

14 Contact & Data Protection Officer (DPO)

The 365jogo has appointed a Data Protection Officer (DPO), as required under Art. 41 of the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the ANPD.

To contact 365jogo's DPO or for any request related to personal data and privacy:

• Email: contato@365jogo.best — subject line: "Privacy" or "LGPD"
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — let us know you'd like to discuss privacy or personal data
• Help Center: Frequently Asked Questions — Privacy and LGPD section

All support is provided exclusively in Brazilian Portuguese. The response period for data subject requests is up to 15 business days, extendable by the same period in complex cases, as established by the LGPD.