Privacy Policy of s8bet — Your Data Protected in Brazil

1. Who Controls Your Data

The s8bet, operated under the domain s8bet.wine, is the controller of the personal data collected through the platform and all its associated services — Sports Betting, live casino, poker, slots, crash games, and account-related communications.

As the data controller, s8bet is responsible for defining the purposes and means by which personal data is processed, always in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable data protection regulations in Brazil.

To exercise any rights regarding your data or to contact our Data Protection Officer (DPO), please use the following channels:

• Online chat: Available 24 hours a day, directly on the platform;
• Email: contato@s8bet.wine — with the subject line "Data Protection / LGPD".

2. What Personal Data We Collect

S8bet collects personal data at different points during your interaction with the platform. Each category is detailed below.

2.1 Data You Provide Directly

This is the information you voluntarily provide when creating your account, making transactions, or reaching out to support:

• Identification: Full name, CPF, date of birth;
• Contact: Email address, phone number;
• Address: ZIP code, city, state, and full address (requested during identity verification);
• Documents: Copy of a government-issued ID or passport and proof of address (required for KYC verification before the first withdrawal);
• Financial: Pix key, credit/debit card details (only the last 4 digits are stored — full card data is processed by certified gateways and never stored on our servers), and digital wallet details such as Mercado Pago and PicPay;
• Communication: Messages sent to support via chat or email.

2.2 Automatically Collected Data

When you access and use the s8bet platform, some data is collected automatically by our systems:

• Device: Device type (mobile, tablet, desktop), operating system, device model;
• Browsing: IP address, browser type and version, pages visited, and time spent on each page;
• Geolocation: Approximate country and city, inferred from IP address;
• Cookies and similar technologies: Session data, browsing preferences, and authentication information;
• Platform behavior: Betting history, games accessed, and interactions with promotions and bonuses.

2.3 Third-Party Data

In some cases, we may receive data about you from external sources, such as payment service providers (to confirm Pix, boleto, or card transactions) and fraud prevention tools that check for unusual behavior patterns.

3. How We Use Your Data

S8bet uses the data collected exclusively for the purposes listed below, each with a legal basis provided for under the LGPD:

4. Data Sharing with Third Parties

S8bet may share personal data with third parties in the following situations — always limited to what is strictly necessary for the specific purpose:

4.1 Service Providers (Data Processors)

Companies that provide essential services to the platform's operation and are contractually required to process data only in accordance with s8bet's instructions:

• Payment gateways: To process transactions via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay;
• Cloud infrastructure providers: For secure hosting of the platform's data and code;
• Game providers: Providers of slots, Live Casino, and crash games, which receive only the session identifiers required for the games to function technically;
• Analytics tools: For platform performance and stability monitoring, with no transmission of identifiable data;
• Fraud prevention services: To detect unusual access and transaction patterns.

4.2 Legal and Regulatory Obligations

S8bet may be required to share data with government authorities, betting market regulators, or the Brazilian judiciary when mandated by law, court order, or a competent authority. In such cases, s8bet will notify the user whenever legally permitted to do so.

4.3 What s8bet Never Does

• Never sells your personal data to third parties;
• Never shares your information with marketing companies without your prior consent;
• Never transfers data to countries without an adequate level of protection, without the contractual safeguards required by the LGPD;
• Never uses your data to generate credit scores or any financial profile outside the context of the platform.

5. Cookies and Tracking Technologies

S8bet uses cookies and similar technologies to ensure the platform works correctly, personalize the user experience, and analyze site performance.

5.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function — session authentication, security, and bet slip management. These cannot be disabled.
• Performance cookies: Collect information about how users interact with the platform (most visited pages, load times) to enable technical improvements. Data is aggregated and anonymized.
• Functional cookies: These store preferences such as language, interface settings, and betting filters to personalize your experience on future visits.
• Analytical cookies: Used to understand browsing behavior at an aggregate level and improve s8bet's product portfolio.

5.2 Cookie Management

You can manage your cookie preferences directly in your browser settings. Keep in mind that disabling non-essential cookies may affect some platform features, but will not block basic access to s8bet. For marketing cookies (if enabled), you can withdraw your consent at any time in your account settings.

6. Data Security

S8bet implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or improper destruction.

6.1 Technical Measures

• TLS/SSL Encryption: All communication between your device and s8bet's servers is encrypted using the TLS 1.3 protocol;
• Data-at-rest encryption: Sensitive data stored on our servers is encrypted using AES-256;
• Financial data: Full card numbers are never stored on s8bet's systems — processing is handled exclusively by PCI-DSS certified gateways;
• Secure authentication: Passwords are stored using salted hash algorithms — not even our internal team has access to your password in plain text;
• Access monitoring: Intrusion detection systems and continuous monitoring for suspicious access to user data.

6.2 Organizational Measures

• Access to users' personal data is restricted to employees who need it to perform their job functions;
• All staff with access to personal data undergo regular privacy and information security training;
• Contracts with third-party data processors include specific data protection and confidentiality clauses;
• S8bet conducts regular security assessments to identify and address vulnerabilities.

7. Data Retention and Deletion

S8bet retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by legal and regulatory obligations.

7.1 Retention Periods

• Active account data: Retained for as long as the account remains active on the platform;
• Financial transaction data: Retained for up to 5 years after account closure, as required by Brazilian tax and anti-money laundering legislation;
• Betting history: Retained for up to 5 years for audit and regulatory compliance purposes;
• Identity verification documents (KYC): Retained for up to 5 years after account closure;
• Access and security logs: Retained for up to 6 months, which may be extended in the event of an active investigation;
• Support communications: Retained for up to 2 years for quality assurance and dispute resolution.

7.2 Data Deletion

Upon requesting the closure of your s8bet account, data that does not need to be retained for legal compliance purposes will be deleted or anonymized within 30 days of account closure confirmation. Data that must be retained for legal purposes is kept for the applicable period and then permanently deleted.

You may also request the deletion of specific data that is not required for your account to function or to meet legal obligations — these requests are assessed on a case-by-case basis and responded to within the timeframe established by the LGPD.

8. Your Rights as a Data Subject

The LGPD grants you a robust set of rights over your personal data processed by s8bet. All of these rights can be exercised free of charge by contacting our team.

In the highlights section below this page, you'll find a visual summary of each right. In detail:

• Confirmation and access: You can confirm whether we process your data and request a full copy of the information we hold about you;
• Correction: Request the update or correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or erasure: Request the anonymization or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD;
• Portability: Request the portability of your data to another service provider, through a formal request;
• Deletion of data processed under consent: Withdraw consent and request deletion of data processed on that legal basis;
• Information on data sharing: Know which public and private entities your data has been shared with;
• Right not to be subject to automated decisions: Request human review of decisions made exclusively by automated processes that affect your interests;
• Objection: Object to processing carried out on the basis of legitimate interest when you believe your fundamental rights outweigh s8bet's interest.

8.1 How to Exercise Your Rights

To exercise any of the rights listed above, contact our team via live chat (available 24h) or by emailing contato@s8bet.wine with the subject line "LGPD — [Requested Right]". s8bet will respond to your request within 15 calendar days of receipt — shorter than the 15-day maximum established by the LGPD. For more complex cases, we will transparently communicate any additional time required.

9. International Data Transfers

S8bet may use servers and service providers located outside Brazil for certain platform features — such as cloud infrastructure, game providers, and analytics tools. When this occurs, we ensure that all international data transfers comply with LGPD requirements:

• Transfers to countries with an adequate level of protection recognized by the ANPD;
• Use of standard contractual clauses that impose obligations on the data recipient equivalent to those under the LGPD;
• Recognized international data protection certifications (such as ISO 27001) held by the service providers involved.

Under no circumstances is identifiable data from Brazilian users transferred to countries without adequate safeguards. Financial data used in transactions (Pix, boleto, card) is processed entirely within Brazil by the respective payment gateways.

10. Minors

The s8bet platform is intended exclusively for users aged 18 and over. s8bet does not knowingly collect personal data from minors. If we identify that an account belongs to a minor, we close the account immediately, delete the collected data, and return any balance to the original payment method after the necessary verifications.

If you believe a minor has created an account on s8bet or provided data to the platform, please contact our compliance team immediately at contato@s8bet.wine. We will treat the matter with the highest priority.

11. Updates to This Policy

S8bet may update this Privacy Policy periodically to reflect changes in our services, Brazilian data protection legislation, or the security practices we adopt. When significant changes are made, you will be notified:

• By email sent to the address registered on your account;
• Via a prominent notice on the platform at your next login;
• By updating the "Last updated" date at the top of this page.

Continued use of the s8bet platform after updates are published constitutes acceptance of the changes made. If you disagree with the changes, you have the right to close your account and request deletion of your data as described in Section 7.

Previous versions of this Privacy Policy are available upon request to our support team.

12. Contact and Privacy Channel

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact s8bet through the following dedicated channels:

• 24h live chat: Open the platform and click the support icon — available around the clock;
• Privacy e-mail: contato@s8bet.wine — use the subject line "LGPD / Privacy" for priority support;
• VIP Manager (Gold and Diamond users): Direct contact via WhatsApp with your assigned account manager.

We are committed to responding to privacy-related requests within 15 calendar days. For security incidents that may affect your data, the notification deadline is up to 72 hours after incident confirmation — in compliance with LGPD requirements.