Privacy Policy of 4winbet – How We Protect You

01Who We Are — The Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the controller of personal data processed on this platform is 4winbet, responsible for the platform accessible at 4winbet.click.

The controller is the party that makes decisions about the processing of your data: what data to collect, for what purpose, how long to retain it, and with whom to share it. All such decisions are made based on the legitimate purposes described in this Privacy Policy and the obligations set out under Brazilian law.

To get in touch with 4winbet regarding privacy matters, please use the email contato@4winbet.click or the support chat available 24 hours a day on the platform.

02What Personal Data We Collect

The 4winbet collects personal data at different points of your interaction with the platform. Each category is detailed below:

2.1 Data provided directly by you

• ID: full name, date of birth, CPF, RG or CNH (for identity verification).
• Contact: email address, mobile phone number.
• Address: ZIP code, street address, city, state — required for residence verification.
• Financial data: Pix key, bank account details (Nubank, Itaú, Bradesco, Banco do Brasil, or another national bank), or credit/debit card details for processing deposits and withdrawals.
• Documents: digital copies of identity documents and proof of address, requested during KYC (Know Your Customer) verification.

2.2 Automatically collected data

• Access data: IP address, browser type and version, operating system, device used (mobile, tablet, computer).
• Usage data: pages visited, games accessed, session duration, bets placed, access times.
• Location data: approximate IP-based location, used to verify access from Brazil.
• Cookies and identifiers: session cookies, preference cookies, and device identifiers — detailed in section 9 of this policy.

2.3 Data received from third parties

• Identity verification information received from credit bureaus or CPF validation services, when required to prevent fraud.
• Transaction data from payment processors such as Mercado Pago and PicPay, limited to what is strictly necessary to confirm and record financial transactions.

03Why We Use Your Data — Purposes

Each piece of data collected by 4winbet has a specific, defined purpose. The table below summarizes the main purposes:

The 4winbet does not use your personal data for purposes incompatible with those listed above. Any new use of existing data that falls outside the original purposes will be communicated to you before it is implemented, and your consent will be requested where required.

04Legal Basis for Data Processing (LGPD)

The LGPD requires that all personal data processing have an adequate legal basis. The legal bases used by 4winbet are:

• Contract performance (art. 7, V): processing necessary to provide the contracted services — account creation, bet processing, deposits and withdrawals via Pix, boleto, or card.
• Legal obligation (art. 7, II): processing required by Brazilian law — identity verification (KYC), anti-money laundering compliance (Law No. 9.613/1998), financial record retention, and reporting to competent authorities.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, product improvement, and usage analysis — always respecting your rights and never overriding your fundamental interests.
• Consent (art. 7, I): sending marketing communications, use of analytics and advertising cookies — consent that may be withdrawn at any time without affecting access to essential services.

05Data Sharing with Third Parties

The 4winbet does not sell your personal data to third parties under any circumstances. Sharing occurs only in the situations below, all of which are necessary for the platform to operate:

• Payment processors: Mercado Pago, PicPay, and partner financial institutions receive only the data strictly necessary to process deposits and withdrawals. These partners operate under data processing agreements and may not use your information for any other purpose.
• Game providers: slots, crash games, Live Casino, and E-sports providers receive an anonymous session identifier to manage the betting flow. Your full personal data is not shared with game providers.
• Identity verification services: credit bureaus and CPF validation services used in the KYC process, solely to confirm your identity and prevent fraud.
• Competent authorities: the 4winbet may share data with the Financial Activities Control Council (COAF), the Federal Revenue Service, the Federal Police, and other Brazilian authorities when required by law or court order.
• IT service providers: companies that provide server infrastructure, cybersecurity, and technical platform analysis, all under contracts with strict confidentiality and data protection clauses.

06How We Protect Your Data

The security of your personal data is a technical and operational priority at 4winbet. The protection measures implemented include:

• 256-bit SSL encryption: all communications between your browser or mobile device and the servers of the 4winbet are encrypted, preventing data from being intercepted in transit.
• Encryption at rest: sensitive data stored on our servers — including banking details and identity documents — is encrypted to AES-256 standards.
• Access control: only employees with a specific operational need have access to personal data, with multi-factor authentication and full access logging in place.
• Continuous monitoring: automated intrusion detection and suspicious activity systems operate 24 hours a day to identify and block unauthorized access attempts.
• Penetration testing: the infrastructure of 4winbet is regularly subjected to security testing carried out by independent specialized firms.
• Secure backups: data backups are kept in separate, encrypted environments with strictly limited access.

In the event of a security incident that may affect your personal data, the 4winbet will notify you and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, providing clear information about what occurred, which data was affected, and what steps were taken.

07How Long We Retain Your Data

The 4winbet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law:

Once the retention periods above have expired and there is no legal obligation to retain the data, your information is securely and irreversibly deleted, or anonymized for aggregate statistical purposes without individual identification.

08Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the data subject, a robust set of rights that 4winbet is fully committed to upholding. You may exercise any of the rights below at any time, free of charge:

To exercise any of these rights, reach out via the support chat or send an email to contato@4winbet.click with the subject line "LGPD Rights" and the specific right you wish to exercise. We will respond within 15 days calendar days, as provided under the LGPD.

09Cookies & Tracking Technologies

The 4winbet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze usage patterns. The cookies used fall into the following categories:

• Essential cookies (always active): required for the platform's core functionality — session authentication, account security, and bet slip maintenance. These cookies cannot be disabled without compromising your use of the platform.
• Functional cookies: store your preferences such as language, display settings, and favorite game, to personalize your experience on future visits.
• Analytical cookies: collect aggregated information about how users navigate the platform — most visited pages, session duration, errors encountered — so we can improve the product. These require consent.
• Performance cookies: measure platform loading speed and identify technical bottlenecks, without collecting any personally identifiable data.

You can manage your cookie preferences directly in your browser settings — Chrome, Firefox, Safari, or the default browser on your Android or iPhone. Disabling essential cookies may affect platform functionality.

The 4winbet does not use third-party advertising cookies to track you on other sites outside the platform.

10International Data Transfer

The main servers of 4winbet are located in Brazil. In specific operational situations, some data may be processed on servers in other countries — for example, when using cloud infrastructure services from international providers or accessing games hosted by global suppliers.

When an international data transfer takes place, the 4winbet ensures that:

• The destination country provides an adequate level of data protection in line with LGPD standards, or
• Adequate contractual safeguards are in place (standard data protection clauses) with the data recipient, or
• The transfer is necessary to perform the service agreement you entered into.

In all cases, the transfer is limited to the data strictly necessary for the specific purpose, with contractual confidentiality and protection obligations equivalent to the LGPD.

11Minors

The 4winbet is a platform exclusively for users 18 and over. We do not knowingly collect personal data from minors. Registration requires date-of-birth confirmation and identity verification, which includes proof of legal age.

If we identify that a user is under 18, the account will be closed immediately, all data will be deleted, and any deposits will be refunded to the original payment method.

If you, as a legal guardian, believe that a minor has created an account on 4winbet, please contact us immediately via chat or by email at contato@4winbet.click. We will take immediate action.

12Changes to This Privacy Policy

The 4winbet may update this Privacy Policy periodically to reflect changes in our services, Brazilian legislation, or our data protection practices.

Material changes — those that affect your rights or how we use your data — will be communicated by email or in-platform notification at least 7 calendar days before they take effect. For changes required by immediate legal mandate, notice will be provided simultaneously with the effective date.

Continued use of the platform after the changes take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date by contacting support via chat.

The most current version of this Policy is always available on this page, with the date of the last update shown at the top of the document.

13Contact, DPO & Privacy Channel

For any questions, requests, or complaints regarding the processing of your personal data by 4winbet, use the following channels:

• Support chat: available 24 hours a day, 7 days a week, directly on the platform. Let us know you'd like to discuss data privacy and you'll be directed to the right team.
• Email: contato@4winbet.click — use the subject line "Data Privacy" or "LGPD Rights" to ensure your message is routed quickly to the right team.

We are committed to responding to all personal data requests within 15 calendar days, within the timeframe established by the LGPD. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice and justification provided to the requester.

The 4winbet maintains a Data Protection Officer (DPO) responsible for overseeing internal LGPD compliance and serving as the point of contact with the National Data Protection Authority (ANPD). Requests submitted through the channels above are forwarded to the DPO for review and response.