N19bet Privacy Policy – How We Handle Your Data

The n19bet is a Sports Betting and online entertainment platform operated for users residing in Brazil. As the controller of its users' personal data, the n19bet is responsible for defining how, why, and for how long that data is processed.

This Privacy Policy applies to all services offered by n19bet, including Sports Betting (Brasileirão Série A, Copa do Brasil, Libertadores, volleyball, NBB basketball, MMA, UFC, and other sports), Live Casino, slots, Poker, crash games, and all account panel features — including deposits via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED transfers, as well as Pix withdrawals.

By creating an account or using any feature of n19bet, you confirm that you have read and understood the terms of this Privacy Policy. This policy supplements the Terms and Conditions of the platform, which should be read together.

The n19bet collects personal data at different points during platform use. Below is a breakdown of what is collected and in what context:

Data you provide directly:

• Full name and CPF – required for account creation and identity verification;
• Date of birth – to confirm you are of legal age (18 or older);
• Email address – for account communications and transaction notifications;
• Mobile number – for two-factor authentication and support contact;
• Residential address – requested during KYC (know your customer) verification for withdrawals above a certain amount;
• Identity documents – RG, CNH, or Brazilian passport, requested during the verification process.

Data generated automatically during use:

• IP address and approximate location – used for security and fraud prevention;
• Device type, operating system, and browser – used to optimize the platform experience;
• Betting and financial transaction history – required for the service to function and to meet legal obligations;
• Session data and usage time – used to detect suspicious behavior and improve the platform;
• Cookie and tracking technology data – detailed in Section 6 of this policy.

Each piece of data collected by n19bet has a specific, defined purpose. The table below summarizes the main uses:

The n19bet does not use personal data for purposes beyond those listed above without first notifying the user and, where applicable, obtaining fresh consent.

The LGPD requires that all personal data processing have a defined legal basis. The n19bet uses the following legal bases set out in art. 7º of Law No. 13.709/2018:

• Contract performance (art. 7, V): Processing is necessary to fulfill the contract entered into when you create your account and use the platform's services — Sports Betting, Pix deposits, withdrawals, and Live Casino;
• Fulfillment of a legal obligation (art. 7º, II): Identity verification, anti-money laundering compliance, and reporting to regulatory authorities are legal obligations that n19bet must comply with, regardless of user consent;
• Legitimate interest (art. 7, IX): Used for platform security, fraud prevention, user experience improvement, and internal analytics, provided these interests do not conflict with the fundamental rights of data subjects;
• Consent (art. 7, I): This basis is used exclusively for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting your account access.

The n19bet does not sell its users' personal data. Sharing with third parties occurs only in the following situations, always with appropriate data protection in place:

• Payment processors: To process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED transfers, the minimum necessary data is shared with our payment processing partners. These companies may only use the data to process the specific transaction;
• Game providers: Companies that provide Live Casino, slots, and Poker games receive only the account's unique identifier (without CPF or banking details) to manage game history within each product;
• Cloud infrastructure and security: Servers, CDN, and anti-fraud systems used by n19bet have access to the technical data needed to operate the platform. All of them operate under contracts with strict confidentiality and data protection clauses;
• Regulatory and judicial authorities: The n19bet may be required by law to provide data to regulatory bodies, the Central Bank, the Federal Revenue Service, or judicial authorities, in accordance with applicable legal requirements in Brazil;
• Fraud prevention: In cases of suspected money laundering or criminal activity, data may be shared with the relevant authorities as required by law.

The n19bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and maintain session security. The cookies used fall into the following categories:

• Essential cookies: Required for the platform to function. These include the session cookie that keeps you logged in and security cookies that detect unauthorized access attempts. They cannot be disabled without affecting your use of the platform;
• Preference cookies: Store preferences such as language, preferred odds format, and interface customization. Can be disabled without affecting account access;
• Analytical cookies: Collect anonymous data on how users navigate the platform — pages visited, session duration, errors encountered. Used to improve the experience. Require consent;
• Marketing cookies: Used only with explicit consent, for personalized communications and campaign measurement. You can withdraw consent at any time through the account privacy panel.

You can manage your cookie preferences in the account settings panel on the n19bet. Browser cookies can also be managed directly through your phone or computer settings, though this may affect your experience on the platform.

The n19bet adopts technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure. Key measures include:

• 256-bit SSL encryption on all communications between your device and the platform's servers;
• Passwords stored with cryptographic hashing – no employee of n19bet has access to your password in plain text;
• Card data processed exclusively by PCI-DSS certified partners, with no direct storage on platform servers;
• Two-factor authentication available to all users as an extra layer of protection for account access and withdrawal requests;
• Continuous monitoring for suspicious access attempts and automatic blocking of IPs identified as attack sources;
• Internal data access is restricted to employees who need it to perform their specific roles, with a full log of all access;
• Periodic security tests carried out by specialized teams to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that may affect users' personal data, n19bet will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, with details on what occurred, which data was involved, and the steps taken to mitigate risks.

The n19bet retains personal data for as long as necessary to fulfill the purpose for which it was collected or to meet legal obligations. The main retention periods are:

• Active account data: Retained for the full duration of the account and for up to 5 years after closure, for audit purposes, fulfillment of legal obligations, and dispute resolution;
• Financial transaction history: Retained for 10 years after the transaction, as required by Brazilian anti-money laundering legislation (Law No. 9.613/1998);
• Identity verification documents: Retained for 5 years after account closure or after the last transaction, whichever comes later;
• Marketing data (with consent): Retained until consent is withdrawn by the user, with deletion within 30 days of revocation;
• Security and access logs: Retained for 6 months for security and incident investigation purposes.

After the periods above, data is deleted or irreversibly anonymized, unless a specific court or regulatory order requires it to be retained for an additional period.

The LGPD guarantees specific rights to any individual whose data is processed by an organization. At n19bet, you may exercise all of these rights. Here is what you can request:

The services of n19bet are intended exclusively for individuals who are 18 years of age or older. The platform does not knowingly collect personal data from anyone under 18.

During the registration process, date of birth is collected and verified to confirm the user is of legal age. Accounts created with false information suggesting the user is of legal age when they are a minor are closed immediately upon identification, with any balance from deposits verifiably made by the minor or their guardian refunded.

If you believe a user under 18 has created an account on n19bet using false information, please contact us immediately at contato@n19bet.best so the situation can be investigated and resolved with the highest priority.

Some of the infrastructure and service providers used by n19bet may operate servers outside Brazil. When personal data is transferred internationally, the n19bet ensures that such transfers only take place to countries or organizations that provide a level of data protection compatible with the LGPD, whether through:

• Adequacy decision recognized by the ANPD, confirming that the destination country offers protection equivalent to Brazil's;
• Standard contractual clauses that impose on the recipient the same data protection obligations required by the LGPD;
• International security and privacy certifications recognized by the Brazilian regulator.

The n19bet keeps records of all international data transfers and can provide information about specific destinations upon request from the data subject.

The n19bet may update this Privacy Policy periodically to reflect changes in services, legislation, or data processing practices. The date of the last update is always shown at the top of this page.

Changes that represent significant shifts in how your data is processed will be communicated by email at least 15 days before taking effect. For minor adjustments — such as text corrections or contact updates — no prior notice is required, but the update date will always reflect any change made.

Continued use of the platform after the effective date of an updated version of this policy constitutes acceptance of the changes. If you disagree with material changes, you may close your account and request a withdrawal of your available balance before the new terms take effect. To close your account, please contact n19bet via live chat or by email at contato@n19bet.best.

For any questions related to privacy and the handling of your personal data at n19bet, you can reach us through the channels below:

• Email: contato@n19bet.best – use the subject line "Privacy" or "LGPD Rights – [your CPF]" to help us route your request faster;
• Live chat: available directly on the platform, 24 hours a day, 7 days a week;
• Response time: up to 15 business days for requests to exercise data subject rights, as provided by the LGPD.

The n19bet has appointed a Data Protection Officer (DPO), as required by art. 41 of the LGPD. The DPO serves as the official communication channel with the National Data Protection Authority (ANPD) and the internal point of contact for all matters related to privacy law compliance. Requests sent to contato@n19bet.best with the subject line "Privacy" are automatically routed to the DPO for review and response.