509bet Privacy Policy – Your Data Protected

1. Who We Are (Data Controller)

The 509bet is the controller of personal data collected through the platform available at 509bet.best. We are responsible for defining the purposes and means of processing the personal information of all players registered on the platform.

This Privacy Policy applies to all interactions you have with 509bet: when registering, when making deposits via Pix or other methods, when placing sports bets on Brasileirão, Libertadores, Copa do Brasil, volleyball, MMA, or any other sport, when playing slots, blackjack, roulette, or crash games in the casino section, and when contacting platform support.

By using any feature of the platform, you acknowledge that you have read and understood the privacy practices described in this document. If you have any questions, please contact us at contato@509bet.best before continuing to use the services of the 509bet.

2. Data We Collect

The 509bet collects only the data necessary to operate the platform securely and fulfill the legal obligations applicable to the betting and gaming sector in Brazil. The categories of data collected are:

2.1 Registration Data

• Full name;
• CPF (Individual Taxpayer Registration);
• Date of birth;
• Full residential address (street, number, complement, ZIP code, city, state);
• Email address;
• Cell phone number;
• Access password (stored in encrypted form — never as plain text).

2.2 Identity Verification Data (KYC)

• Identity document image (RG, CNH, or passport);
• Proof of residence;
• Liveness selfie (when requested for high-value withdrawals).

2.3 Financial Data

• Pix key (CPF, email, phone number, or random key);
• Bank details for TED transfers (bank, branch, account number);
• Deposit and withdrawal history including amounts, dates, and methods used;
• Credit or debit card data (processed directly by the financial institution; 509bet does not store the full card number).

2.4 Platform Usage Data

• Sports betting and casino game history;
• Verticals accessed (football, volleyball, blackjack, slots, etc.);
• Login times and access frequency;
• Devices used (type, operating system, browser version);
• IP address and approximate geographic location;
• Session and browsing data within the platform.

2.5 Communication Data

• Chat and email support conversation history;
• Feedback and reviews submitted voluntarily;
• Record of opens and clicks on emails sent by 509bet (when tracking is enabled in your email client).

3. How We Use Your Data

The 509bet uses the personal data collected solely for the purposes described below. No data is used for purposes not covered by this policy without your prior consent:

4. Legal Basis for Data Processing

The 509bet bases the processing of personal data on the following legal grounds set out in the LGPD (Art. 7):

• Contract performance (Art. 7, V) – processing is necessary to provide the contracted services: account creation, bet processing, and financial transactions;
• Compliance with a legal or regulatory obligation (Art. 7, II) – data such as CPF, financial history, and KYC documents are processed to comply with legal requirements in the betting sector and under Brazilian anti-corruption and tax legislation;
• Legitimate interest (Art. 7, IX) – usage and browsing data are analyzed to prevent fraud, enhance security, and improve the platform, provided this does not override the rights and freedoms of the data subject;
• Consent (Art. 7, I) – marketing communications and the use of non-essential cookies require express consent, which may be withdrawn at any time.

5. Data Sharing with Third Parties

The 509bet does not sell players' personal data. Sharing with third parties only occurs in the situations below, always with contractual guarantees of protection equivalent to those adopted by the platform:

5.1 Operational Service Providers

• Payment processors – to process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED. These partners receive only the minimum data necessary to complete the transaction;
• Casino game providers – for providing live tables and slot, crash, and other available game titles. Providers receive an anonymized player identifier, with no complete personal data;
• Identity verification services (KYC) – for document validation submitted prior to the first withdrawal, with platforms that follow international data security standards;
• Cloud infrastructure and hosting – servers and data storage systems used to keep the platform running, with contracts that include data protection clauses.

5.2 Legal Obligations

The 509bet may share data with government authorities, regulatory bodies, or judicial entities when required by law, court order, or formal request issued by a competent authority. In such cases, we share only the data specifically requested, within the timeframe and scope set by the request.

6. Cookies and Tracking Technologies

The 509bet uses cookies and similar technologies to improve the browsing experience, keep sessions active, and analyze platform usage. The types of cookies used are:

6.1 Essential Cookies

Strictly necessary for the basic operation of the platform — such as keeping you logged in during a session, remembering language preferences, and securing the betting form. These cookies cannot be disabled without impairing your use of 509bet.

6.2 Performance Cookies

Collect information on how players use the platform — most visited pages, session duration, errors encountered — so that the technical team at 509bet can identify and fix issues and improve overall performance. This data is collected in anonymized and aggregated form.

6.3 Functionality Cookies

Allow the platform to remember player preferences, such as odds display format (decimal or fractional) and favorite sports. They enable a personalized experience without needing to reconfigure the platform on every visit.

6.4 Marketing Cookies (with Consent)

Used to personalize marketing communications and measure campaign effectiveness. These cookies are only activated with your explicit consent. You may withdraw consent at any time through the cookie settings on the platform or via the opt-out link included in each marketing communication.

To manage cookies, go to your browser settings. Disabling essential cookies may prevent certain features of the 509bet.

7. Data Retention and Deletion

The 509bet retains personal data only for as long as necessary for the purposes described in this policy, in compliance with applicable legal retention periods:

• Registration and KYC data – retained for the duration of the active account and for up to 5 years after closure, in compliance with tax and anti-money laundering obligations;
• Financial history – retained for 5 years after each transaction, as required by Brazilian tax law;
• Betting and game history – retained for 2 years after the last account activity, unless a longer retention period is legally required;
• Support data – retained for 2 years after the support interaction is closed;
• Cookies and session data – essential cookies expire at the end of the session; performance and functionality cookies have a maximum lifespan of 12 months.

Once retention periods expire, data is securely deleted or anonymized, making it impossible to identify the account holder. Data subject to legal retention obligations cannot be deleted before the end of the applicable legal period, even if you request account deletion.

8. Information Security

The 509bet adopts technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures currently in place are:

• TLS/HTTPS encryption for all communications between the player's device and 509bet's servers;
• Password hashing with modern algorithms — passwords are never stored in plain text;
• Two-factor authentication (2FA) available to all players as an additional layer of account access protection;
• Continuous monitoring of suspicious access attempts and intrusion attempts with automatic blocking;
• Internal access controls role-based access — only staff with a genuine need can access personal data, with a log kept of every access;
• Periodic security audits conducted by internal teams and external specialized firms;
• Incident response plan with procedures for notifying affected data subjects and the National Data Protection Authority (ANPD) in the event of a significant data breach, as required by the LGPD.

9. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (Law No. 13,709/2018) grants you, as the data subject whose personal data is processed by 509bet, the following rights:

To exercise any of these rights, send an email to contato@509bet.best with the subject line "Privacy Request – LGPD", stating the right you wish to exercise along with your identification details. The response deadline is up to 15 business days. For complex requests, this deadline may be extended by an additional 15 days, with prior notice of the reason for the extension.

If you believe that 509bet did not adequately address your request, you may file a complaint with the National Data Protection Authority (ANPD) through the official federal government website.

10. Minors

The platform of 509bet is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If we identify that an account was created by someone under 18, the account is immediately closed and all collected data is deleted from our systems, except for the minimum records required for legal compliance purposes.

If you suspect that a minor has created an account on the 509bet using your data or someone else's data, please contact us immediately at contato@509bet.best so we can take the necessary steps.

11. International Data Transfers

Some of the service providers of 509bet — such as cloud infrastructure providers and international live casino game suppliers — may be located outside Brazil. In such cases, data transfers are carried out with the following safeguards:

• Contracts with specific data protection clauses equivalent to those required under the LGPD;
• Transfers only to countries or organizations that offer a level of protection compatible with Brazilian law;
• Data sharing is limited to the minimum necessary to deliver the specific service, with no transfer of non-essential sensitive data.

The 509bet does not transfer data to countries without adequate data protection regulatory frameworks without the contractual safeguards described above.

12. Changes to This Privacy Policy

The 509bet may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or security system improvements. All material changes will be communicated to players with active accounts via email at least 7 days before taking effect.

The date of the last update is always displayed at the top of this document. Continued use of the platform after the effective date of the updated policy constitutes acceptance of the new practices described. We recommend reviewing this page periodically to stay informed about how the 509bet protects your data.

13. Contact & Data Protection Officer (DPO)

For any questions, requests related to your rights as a data subject, or complaints regarding the processing of personal data by 509bet, please reach out through one of the channels below:

• Email (privacy): contato@509bet.best — subject: "Privacy Request – LGPD"
• General support: live chat available 24 hours a day, 7 days a week within the platform
• Related terms: Terms and Conditions and Responsible Gambling

The data protection officer of the 509bet is responsible for ensuring that data subject requests are answered within legal deadlines and that internal data processing practices comply with the LGPD. All privacy-related communications are handled with priority and confidentiality.