Bt959 – Privacy Policy and Data Protection

The bt959, operated through the domain bt959.net, is a Sports Betting and online casino platform dedicated to the Brazilian market. For the purposes of the LGPD, bt959 acts as the data controller that you provide us when creating and using your account.

This Privacy Policy applies to all users who access, use or register on the bt959 platform, regardless of the device used — whether mobile, tablet or desktop. By creating a bt959 account, you confirm that you have read and agree to the terms of this policy.

The bt959 collects only the data necessary to deliver the platform's services securely and efficiently. The data collected falls into the following categories:

Bt959 does not collect sensitive data categories such as ethnic origin, religious beliefs, biometric data, or health information, except where expressly required by law or with the explicit consent of the data subject.

The bt959 uses the data collected for the following purposes:

• Creating and managing your account: validate registration, verify identity, ensure only one account exists per CPF, and keep data up to date;
• Process financial transactions: processing deposits via Pix, boleto, credit or debit card, PicPay, Mercado Pago, and TED, as well as processing withdrawals to the account holder's bank account;
• Operate Sports Betting and casino services: recording bets, calculating results, processing prize payments, and maintaining a complete activity history;
• Ensure security and prevent fraud: detect unauthorized access, identify suspicious behavior, prevent money laundering and meet KYC/AML obligations;
• Compliance with legal obligations: comply with requirements from regulatory, tax, and judicial authorities applicable to operations in Brazil;
• Providing customer support: address questions, resolve complaints, and improve the quality of support in Portuguese;
• Improving the platform: analyze usage patterns (in aggregated and anonymized form) to improve features and the user experience on mobile and desktop;
• Relevant communications: send account notifications, security alerts and, with your consent, promotional communications about bt959.

The bt959 processes its users' personal data on the basis of the following legal grounds established under the LGPD:

• Contract performance (Art. 7, V): processing is necessary to provide the services you agreed to when creating your bt959 account — registration, betting, deposits, and withdrawals;
• Compliance with a legal obligation (Art. 7, II): KYC data, financial records, and communications with authorities are processed to fulfill legal obligations applicable to operations in Brazil;
• Legitimate interest (Art. 7, IX): technical and usage data are processed for platform security, fraud prevention, and service improvement purposes, provided they do not override the data subject's rights;
• Consent (Art. 7, I): for sending marketing communications and using non-essential cookies, bt959 requests explicit consent, which can be withdrawn at any time.

The bt959 does not sell, rent or trade users' personal data with third parties for commercial purposes. Data is shared exclusively in the following situations:

• Essential service providers: payment partners (card processors, Pix, Mercado Pago, PicPay), KYC providers, hosting and infrastructure services — all bound by contractual obligations of confidentiality and data security;
• Game providers: companies such as Evolution Gaming, Pragmatic Play, and NetEnt receive the session identifier required to operate live tables and slots, without access to the user's full financial or identity data;
• Legal obligation: when required by a judicial, law enforcement, tax, or regulatory authority with jurisdiction in Brazil, pursuant to a formal order or summons;
• Fraud prevention: in cases of suspected money laundering or documented fraud, data may be shared with the relevant authorities as required by Brazilian law.

All partners who receive data from bt959 are contractually required to use it solely for the agreed purpose, apply appropriate security measures, and not pass that information on to other third parties.

The bt959 uses cookies and similar technologies to ensure the platform works correctly and to enhance the user experience. The cookies used fall into the following categories:

• Essential cookies: required for the platform's basic operation — login session, bet slip, language preferences. These cannot be disabled without affecting your bt959 experience;
• Performance cookies: collect anonymous data about how users navigate the platform, allowing us to identify problem pages and improve overall performance — especially on mobile;
• Functionality cookies: remember your browsing preferences to personalize your experience — such as your preferred bet type or the last game you accessed;
• Analytical cookies: used internally by bt959 to understand usage patterns and guide product decisions, always in aggregate form and without identifying individual users.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your access to bt959's core features.

Data belonging to users of bt959 are stored on servers located in Brazil or in countries with data protection laws equivalent to Brazilian standards. The security measures in place include:

• 256-bit SSL encryption across all communications between the user and the platform;
• Encryption at rest for sensitive data stored in our databases;
• Restricted access controls — only employees with a proven operational need may access users' personal data;
• Continuous monitoring for suspicious activity and unauthorized access attempts;
• Penetration testing and periodic security audits conducted by specialized firms;
• Documented incident response plan, with mandatory notification to the ANPD and affected users in the event of a significant data breach.

Despite all measures in place, no system is 100% invulnerable. bt959 is committed to acting swiftly and transparently in the event of any security incident affecting user data.

The bt959 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the following criteria:

• Active account data: retained for as long as the account is active and for as long as necessary after closure to meet legal obligations;
• Financial and transaction data: retained for at least 5 years following the last transaction, as required by tax and anti-money laundering legislation (Law No. 9,613/1998);
• KYC Records: retained for the period required by applicable regulations, generally no less than 5 years after account closure;
• Usage data and cookies: retained for up to 24 months, after which they are anonymized or deleted;
• Support communications: retained for up to 3 years for dispute resolution and service improvement purposes.

Once retention periods expire, data is securely and permanently deleted, or anonymized so that it can no longer be linked to an identifiable individual.

The LGPD grants the data subject — that is, to you, as a bt959 user — a set of rights regarding the processing of your personal information. bt959 is committed to respecting and facilitating the exercise of all these rights:

The bt959 is a Sports Betting and online casino platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors.

During registration, we ask for the user's date of birth and CPF, and the platform verifies age eligibility before granting full access. If we identify that a minor has created an account, that account will be closed immediately and any collected data will be deleted, unless otherwise required by law.

The platform bt959 may contain links to third-party services — such as game providers, support tools, or social media. This Privacy Policy applies exclusively to bt959 and does not cover the privacy practices of any linked third party.

We recommend reading the privacy policy of any external service before providing personal data to those third parties. bt959 is not responsible for data processing carried out by external platforms.

The bt959 reserves the right to update this Privacy Policy whenever necessary to reflect changes in data processing practices, updates to applicable legislation, or the evolution of the services offered.

Material changes will be communicated to your registered email address at least 15 days in advance. The date of the last revision is always shown at the top of this document. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

We recommend revisiting this page periodically to stay informed about how bt959 handles your personal data.

The bt959 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and handling data subject requests.

For any questions related to privacy and personal data processing at bt959, you can reach us through the following channels:

• Email: suporte@bt959.net (subject: "Privacy Policy" or "LGPD Rights")
• Live chat: available directly on the bt959 platform after logging in, 24 hours a day, 7 days a week

Bt959 is committed to responding to all personal data requests within 72 business hours. For complex matters requiring legal analysis, the deadline may be extended to up to 15 business days, with prior notice to the requester.