Privacy Policy g45bet — Your Data Handled with Respect

The controller of the personal data processed under this Privacy Policy is the g45bet — Sports Betting and online casino platform operated for the Brazilian market, accessible at g45bet.net.

For the purposes of this policy, "controller" refers to the entity that makes decisions about which personal data is collected, the purposes for which it is used, and how it is protected — as defined by the LGPD (Law No. 13,709/2018, Art. 5, VI).

The personal data protection officer (DPO — Data Protection Officer) of the g45bet can be reached by email at suporte@g45bet.net for any questions related to privacy, the exercise of data subject rights, or inquiries about this policy.

The g45bet collects personal data according to the purpose of each interaction. Below are the types of data collected and at which point in the user journey they are obtained:

The g45bet does not collect sensitive data (such as biometrics, health data, or racial origin) and does not request information beyond what is necessary for the purposes described in this policy. Credit and debit card data is processed by certified payment gateways — g45bet never stores the full card number at any point.

Each data processing activity at the g45bet has a specific purpose and a corresponding legal basis, as required by Art. 7 of the LGPD. We do not process data in a generic or undefined manner:

• Identity and eligibility verification (basis: contract performance): confirm that the user is over 18 years old, a resident of Brazil, and holds a valid CPF. This verification is required to operate the account.
• Payment processing (basis: contract performance): process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED through partner banks (Nubank, Itaú, Bradesco, Banco do Brasil). Includes anti-fraud checks on all transactions.
• Platform operation and personalization (legal basis: contract performance / legitimate interest): display relevant odds, betting history, balance, and VIP Program benefits. Personalize the experience based on preferred categories — football, Live Casino, poker, slots, or crash games.
• Fraud prevention and regulatory compliance (legal basis: legal obligation / legitimate interest): detect multiple accounts, collusion at poker tables, bot usage, and suspicious activity. Comply with obligations to financial and betting regulatory bodies in Brazil.
• Customer support (legal basis: contract performance): log and resolve requests, complaints, and inquiries. Support history is retained to ensure continuity and quality of service.
• Marketing communications (basis: consent): send promotions, VIP Program news, special odds for Brasileirão or Copa do Brasil matches, and other marketing communications — only with your explicit consent. You can withdraw consent at any time in your account settings.
• Responsible gambling (basis: legal obligation / legitimate interest): monitor gambling behavior patterns to identify signs of problem gambling and proactively offer self-control tools.

The g45bet does not sell, rent, or transfer personal data to third parties for commercial purposes. Data sharing occurs only in the situations below, all of which are necessary for the platform to operate or are required by law:

• Payment providers: the minimum data required to process transactions is shared with Pix gateways, card processors, PicPay, and Mercado Pago. These partners operate under their own compliance terms with the Brazilian Central Bank and the LGPD.
• Casino and poker game providers: slots, Live Casino, and poker table providers receive only an anonymous player identifier — never a name, CPF, or financial data. Game results are processed on the servers of these certified providers.
• Identity verification services (KYC): documents submitted for verification may be processed by specialized providers in compliance with Brazilian financial sector regulations. These providers operate under contracts that include data protection clauses equivalent to LGPD requirements.
• Authorities and regulatory bodies: g45bet provides data when required by court order, a request from the Financial Activities Control Council (COAF), a directive from the Federal Revenue Service, the ANPD, or another competent authority. In such cases, we provide only the minimum required by the request.
• Security and anti-fraud tools: technical information such as IP address, access patterns, and device data may be processed by fraud detection systems. These systems do not receive personally identifiable data such as name or CPF.

All third parties that receive data from the g45bet operate under contracts that require secure handling and use restricted to the agreed purposes. g45bet conducts periodic compliance assessments with these partners.

The g45bet uses cookies and similar technologies to ensure the platform functions correctly and to improve the browsing experience. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — session management, authentication, and security. They cannot be disabled without affecting your ability to use your account.
• Performance cookies: collect anonymous information about how users navigate the platform — which pages are most visited, where errors occur, and load times. Used to improve technical performance.
• Functionality cookies: store user preferences such as language, odds format, and display settings. They improve your experience without sharing data with third parties.
• Analytics cookies: with consent, enable aggregated analysis of user behavior to improve platform features — such as which betting categories are most used on mobile.

You can manage your cookie preferences in the banner shown on your first visit to the platform, or through your account settings. Disabling analytics cookies does not affect how the platform works or your access to Sports Betting, Live Casino, poker, slots, or any other feature of the g45bet.

The g45bet implements a set of technical and organizational measures to protect players' personal data against unauthorized access, loss, destruction, or improper disclosure:

• Encryption in transit: all communications between the user's device and g45bet's servers are protected by TLS 1.3 with 256-bit encryption — the most current standard available.
• Encryption at rest: sensitive data stored on servers — including KYC documents and financial data — is encrypted at rest using bank-grade algorithms.
• Two-Factor Authentication (2FA): available and recommended for all users. VIP Gold Program members and above receive explicit guidance from their personal manager to enable 2FA.
• 24/7 anti-fraud monitoring: automated systems continuously monitor financial transactions and access patterns for suspicious behavior — login attempts from unknown IPs, unusual withdrawal activity, and collusion patterns in poker.
• Internal access controls: only g45bet staff with a direct operational need have access to players' personal data. Access is logged and periodically audited.
• Incident response plan: in the event of a data breach, g45bet will follow the protocol established by the LGPD: notifying the ANPD and affected data subjects within the legal deadline, with a description of what occurred and the measures taken.

No security system is 100% foolproof. That is why g45bet also encourages players to adopt safe practices: use unique, strong passwords, enable 2FA, and never share account credentials — especially via text messages or social media.

The g45bet retains players' personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. Retention periods are:

• Active account data: kept for as long as the account is active. Accounts inactive for more than 24 months are archived — data is held in secure storage for an additional 5 years to meet legal and tax obligations.
• Financial transaction records: retained for 10 years, as required by Brazilian tax law and the applicable Central Bank of Brazil regulations governing financial transactions.
• KYC documents: retained for up to 5 years after account closure, in accordance with COAF regulations for anti-money laundering purposes.
• Betting history: retained for 5 years after the last bet, for dispute resolution, audits, and regulatory reporting.
• Customer support records: kept for 2 years after a ticket is closed, for reference in future requests and quality control purposes.
• Analytics cookie data: retained for a maximum of 13 months, in line with industry best practices.

Once retention periods expire, data is securely deleted or anonymized so that the account holder can no longer be identified. Players may request early deletion of data not subject to a legal retention obligation — such requests are processed within 15 days.

The LGPD grants personal data subjects a set of rights that g45bet commits to fully uphold. Here is what you can request at any time:

To exercise any of these rights, please contact the data protection officer at g45bet via live chat on the platform or by email at suporte@g45bet.net. The response deadline is up to 15 calendar days, as required by the LGPD. If a request is denied — which only occurs when there is a legal retention obligation — g45bet will provide the reason in writing.

The platform g45bet is intended exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from anyone under 18.

Registration requires a valid CPF and, where necessary, identity document verification — which technically prevents minors from accessing the platform. Any account identified as belonging to a minor is immediately closed, with the real balance refunded and authorities notified where the situation requires it.

If you believe that data belonging to a minor has been inadvertently collected by the g45bet, please contact us immediately at suporte@g45bet.net. Processing of that data will be stopped and the records deleted as a top priority.

Some of the technology and service providers used by g45bet — such as live casino game providers, certified RNG systems for slots, and cloud infrastructure — may be located outside Brazil. In such cases, international data transfers are carried out in accordance with Article 33 of the LGPD, which requires that the recipient country or organization offer a level of protection equivalent to that of Brazilian law.

The g45bet ensures that all international data transfers are covered by one of the following safeguards:

• Standard contractual clauses approved by the ANPD or recognized international equivalents.
• Adequacy certifications recognized by the ANPD for the recipient country.
• Specific consent from the data subject, when none of the other legal bases apply.

Under no circumstances are Brazilian players' data transferred to jurisdictions that do not offer adequate personal data protection, as periodically assessed by the data protection officer of the g45bet.

The g45bet may update this Privacy Policy to reflect changes in Brazilian legislation (such as updates to ANPD regulations), new services added to the platform, or improvements to data protection practices.

The process for communicating material changes follows these guidelines:

• Changes that expand the scope of data processing or reduce data subjects' rights will be communicated by email at least 15 days in advance.
• The date of the last update is always displayed at the top of this page.
• Continued use of the platform after the effective date of any changes constitutes acknowledgment of the updated policy.
• If a change requires new consent for the processing of non-essential data, a consent request will be explicitly presented when you next access the platform.

Previous versions of this Privacy Policy are available upon request through g45bet for reference or dispute purposes, and will be made available within 5 business days of the request.

To exercise your rights as a data subject, get answers about this Privacy Policy, or report any security incident involving your personal data, please contact the data protection officer at g45bet:

• Email: suporte@g45bet.net (subject: "Data Privacy – LGPD")
• Live chat: available 24 hours a day, 7 days a week, directly on the platform
• Response time: up to 15 calendar days for LGPD-related requests

For urgent security matters — such as suspected unauthorized account access or a data breach — live chat support is the fastest channel, with an average response time under 2 minutes. The data protection officer reviews these situations with the highest priority.

If you do not receive a satisfactory response from g45bet within the established timeframe, you may submit a complaint to the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.