Privacy Policy of 136betcc: Your Data in Safe Hands

This Privacy Policy describes how 136betcc collects, uses, stores, shares, and protects the personal data of users who access and use the platform available at 136betcc.best, including the website, the mobile app and any other digital channel operated by the company.

The 136betcc is the controller of the personal data processed under this policy, as defined by the General Data Protection Law (LGPD – Law No. 13,709/2018). This means we are responsible for decisions regarding what data we collect, the purposes for which it is used, and how long we retain it.

This policy applies to all 136betcc users residing in Brazil, regardless of the device or channel used to access the platform. By creating an account or continuing to use our services, you acknowledge that you have read and understood the practices described here. For any questions, please contact us at suporte@136betcc.best.

The 136betcc collects only the data necessary to provide and improve our services, meet legal obligations, and ensure platform security. We never collect data without a clear and legitimate purpose.

Data We Do Not Collect

136betcc does not collect sensitive data such as racial origin, religious beliefs, health information, sexual orientation, or biometric data beyond what is strictly required for facial identity verification during the KYC process. If you voluntarily share any sensitive data through our support channel, we will handle it with the highest level of confidentiality and use it solely to resolve the matter that prompted your contact.

Each piece of data collected by 136betcc has a specific purpose. We do not use your information in ways you would not expect, or for purposes unrelated to your experience on the platform.

• Registration and authentication: verify your identity at login, protect access to your account and confirm that you meet the eligibility requirements (18 years or older, resident in Brazil, valid CPF);
• Payment processing: process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED transfers to Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, and Santander — all in Brazilian reais (R$);
• Service provision: process your sports bets (Brasileirão, Copa do Brasil, Libertadores, volleyball, UFC, NBB, e-sports, and other sports), record and settle bets, and provide access to crash games, slots, jackpots, and live casino;
• Compliance with legal obligations: comply with anti-money laundering requirements, identity verification (KYC), tax obligations with the Receita Federal, and other applicable regulatory duties in Brazil;
• Fraud prevention: detect patterns of suspicious activity, bonus abuse, unauthorized access, and any conduct that threatens the integrity of the platform or its users;
• Account communications: send transaction notifications, security alerts, bet confirmations, terms updates, and other information essential to your use of the platform;
• Marketing and promotions (with your consent): to send you offers, bonuses, enhanced odds, and platform updates – only for users who have consented to receive marketing communications;
• Ongoing platform improvement: analyze usage data in aggregated and anonymized form to identify experience improvements, fix bugs and develop new features that Brazilian players actually need;
• Responsible gambling: monitor gambling patterns to identify signs of compulsive behavior and trigger protective tools when needed, in accordance with our Responsible Gambling.

As required by the LGPD, all personal data processing must have a legal basis to justify it. 136betcc processes your data on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): processing is necessary to provide the services you signed up for when creating your account — Sports Betting, casino, Pix payments, and all other platform features;
• Compliance with a legal or regulatory obligation (art. 7º, II): registration data, KYC records and transaction history are retained to meet anti-money laundering obligations, tax regulations and any applicable regulatory requirements in the sector;
• Legitimate interest (Art. 7, IX): we use platform usage data to prevent fraud, enhance security, and improve the user experience — always in a manner consistent with your rights and reasonable expectations;
• Consent (art. 7, I): for marketing communications and the use of non-essential cookies, we request your explicit consent. You may withdraw that consent at any time without affecting your access to 136betcc's services.

The 136betcc maintains an internal record of the legal bases applied to each data processing activity, available for review by competent authorities, including the National Data Protection Authority (ANPD).

The 136betcc does not sell personal data. Period. That said, there are situations where sharing information with third parties is necessary for services to work correctly or to meet legal obligations. In such cases, sharing is always limited to the minimum necessary and subject to confidentiality and data protection agreements.

Who we may share your data with

• Payment processors: financial data is shared with the partners responsible for processing Pix, bank slips, credit and debit cards, PicPay, and Mercado Pago – solely for the purpose of executing the transactions you request;
• Identity verification (KYC) providers: specialized partners in document verification and fraud prevention who assist with the identity confirmation process required by applicable regulations;
• Game providers: crash game providers (such as Spaceman, Aviator, and JetX), slots, and live casino providers receive an anonymized user identifier for round logging purposes — they never receive your full name, CPF, or banking details;
• Competent authorities: we share data when required to do so by law, court order, or regulatory mandate, including requests from anti-money laundering authorities (COAF), the Federal Revenue Service, and other Brazilian regulatory bodies;
• Technology and infrastructure services: cloud hosting, cybersecurity, and operational analytics providers that process data solely in accordance with our instructions and under confidentiality agreements.

International Data Transfers

Some of our technology and infrastructure providers operate servers outside Brazil. When this occurs, the 136betcc ensures that any transfer is carried out with appropriate safeguards in accordance with Article 33 of the LGPD, including specific contractual data protection clauses that guarantee a level of protection equivalent to that required under Brazilian law.

The 136betcc retains your personal data only for as long as necessary to fulfill the purposes described in this policy or to meet legal and regulatory obligations. The general timeframes are:

• Registration and active account data: retained for as long as your account remains active on the platform;
• KYC and identity verification data: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering regulations applicable to the sector;
• Financial transaction history: retained for a minimum of 5 years for tax and regulatory purposes, in accordance with Brazilian law;
• Betting history: retained for a minimum of 3 years after account closure to support the resolution of any disputes;
• Access records and security logs: retained for up to 6 months, unless a judicial or regulatory order requires a longer period;
• Marketing data (with consent): retained until consent is withdrawn or the account is closed, whichever comes first.

When you close your account at 136betcc, your data is progressively anonymized or deleted in accordance with the timelines above. Data that must be retained due to legal obligations is isolated from the operational environment and is no longer used for any marketing or operational purpose.

The security of our users' data is an operational priority at 136betcc, not just a legal requirement. We continuously invest in technology and processes to ensure your information is protected against unauthorized access, improper alteration, disclosure, or destruction.

Technical Measures

• SSL/TLS encryption: all communication between your device and our servers is encrypted. The padlock in your browser is not decorative – it means your data is protected in transit;
• Financial data tokenization: credit and debit card data is never stored in plain text. We use tokenization to ensure that, even in the event of an incident, real financial data is never exposed;
• Two-factor authentication (2FA): available to all users who want an extra layer of protection at login;
• Continuous monitoring: automated anomaly detection systems monitor the platform in real time to identify unauthorized access attempts or suspicious activity;
• Separate environments: production data (real users) is fully isolated from development and testing environments.

Organizational Measures

• Access to users' personal data is restricted to employees with a verified operational need, under the principle of least privilege;
• All staff with access to personal data undergo regular training on data protection and information security;
• Confidentiality agreements are an integral part of contracts with all vendors that process data on behalf of 136betcc.

In the Event of a Security Incident

Should any incident occur that puts your personal data at risk, the 136betcc will follow the procedures required by the LGPD: notifying the National Data Protection Authority (ANPD) and informing affected users within the legally established timeframes, with clear details about what happened, which data was affected, and what steps were taken to remediate the situation.

The 136betcc uses cookies and similar technologies to keep the platform running properly, understand how users interact with it, and – with your consent – deliver more relevant communications. This section explains what they are, which ones we use, and how you can manage them.

Types of Cookies We Use

• Essential cookies: required for the platform to function. These include login session cookies, language preferences, and security settings. They cannot be disabled without affecting how the platform operates;
• Analytical cookies: collect information about how users navigate the platform — which pages they visit most, how long they spend in each section, and where they come from. Data is aggregated and anonymized. Used to improve the user experience. Requires your consent;
• Preference cookies: remember your platform preferences, such as preferred language, betting screen layout, and other customizations, improving your experience in future sessions;
• Marketing cookies (with consent): used to personalize communications and measure the effectiveness of campaigns. They are only activated with your explicit consent, which you may withdraw at any time.

How to Manage Your Cookies

You can manage your cookie preferences in the banner that appears on your first visit to the platform, as well as in your account settings under "Privacy preferences". In addition, all modern browsers allow you to manage cookies directly in their settings.

Disabling non-essential cookies does not affect your access to 136betcc. Disabling essential cookies, on the other hand, may prevent the login process and core platform features from working correctly.

The General Data Protection Law guarantees you, as the owner of your personal data, a set of rights that 136betcc is committed to respecting and facilitating the exercise of these rights. You do not need a lawyer or legal proceedings to exercise them — simply reach out through our support channel.

All data subject rights requests are handled by the 136betcc within 15 business days, as provided under the LGPD. In cases of high complexity, the deadline may be extended by an additional 15 days, with prior notice to the user. Exercising your rights is completely free of charge.

The services of 136betcc are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors. The registration process requires a CPF and date of birth, which are verified to confirm legal age before the account is activated.

If 136betcc determines that it has collected personal data from a user under 18, the account will be immediately suspended, the data will be deleted or anonymized, and any existing balance will be returned to the holder of the originating bank account. 136betcc may request additional documentation to verify account ownership before processing the refund.

If you are a guardian and suspect that a minor may have created or attempted to create an account on 136betcc, contact us immediately through our 24-hour support channel. We also recommend using parental control software on all devices shared with children and teenagers.

The 136betcc may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. All material changes will be communicated with a minimum advance notice of 30 days by registered email.

The date of the last update is always shown at the top of this page. If the changes are substantial — meaning they significantly affect how your data is processed — we will request your explicit consent before the new practices take effect for your account.

Continued use of the platform after the effective date of any communicated changes constitutes acceptance of the revised version of this policy. If you do not agree with the changes, you may request account closure before the effective date, and your data will be handled in accordance with the retention periods described in Section 6 of this policy.

The 136betcc has appointed a Data Protection Officer (DPO) as required by the LGPD for large-scale data processing operations. The DPO is the official point of contact for matters related to user privacy and compliance with Brazilian law.

For any questions regarding this Privacy Policy, the exercise of data subject rights, how we handle your data, or to report privacy-related concerns, please reach out through the channels listed below:

If you believe that 136betcc is not handling your data in compliance with the LGPD after you have attempted to resolve the matter directly with us, you may file a complaint with the National Data Protection Authority (ANPD) through the official federal government portal.