80win Privacy Policy – How We Protect Your Data

The 80win (hereinafter also referred to as "we" or "platform") is the controller of personal data collected during the use of services available at 80win.best, including Sports Betting, live casino, crash games, slots, and all other platform features.

This Privacy Policy applies to all users residing in Brazil who use the services of 80win and was drafted in compliance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018), the Consumer Protection Code (Law No. 8.078/1990), and other Brazilian regulations applicable to the sports betting and digital entertainment sector.

When you create an account on 80win and use our services, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree, please do not use the platform and contact our support team for guidance on how to proceed.

The 80win collects different categories of personal data depending on how you interact with the platform. Each category and its source are detailed below:

The 80win does not collect sensitive personal data such as racial origin, sexual orientation, religious beliefs, or health data, except where strictly required by law and with the data subject's explicit consent. Credit and debit card financial data is tokenized by the payment processor and the 80win does not store your full card number on its servers.

Each piece of data collected by 80win has a specific purpose and is used only as stated here. Personal data is not used for purposes not covered by this Policy without the user's renewed consent.

• Account operation: creating, maintaining, authenticating, and securing your account on the platform, including password recovery and concurrent session management;
• Payment processing: processing deposits via Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago, as well as handling withdrawals via Pix or other requested methods;
• Identity verification (KYC): fulfillment of legal obligations related to identity verification, anti-money laundering compliance, and age confirmation (18+);
• Service provision: displaying odds, processing Sports Betting on Brasileirão, UFC, Libertadores, and other markets, access to live casino and crash games;
• Transactional communications: sending registration confirmations, financial transaction receipts, account security alerts, and betting notifications;
• Marketing communications: sending promotions, special odds, and platform updates — only to users who have opted in to receive this type of communication, with the option to unsubscribe at any time;
• Responsible gambling: monitoring of usage patterns to identify behaviors that may indicate problem gambling and offer support resources;
• Legal compliance: compliance with legal and regulatory obligations, and responses to requests from competent authorities;
• Platform improvement: analysis of aggregated and anonymized data to develop new features and improve the user experience.

The LGPD requires that all personal data processing have a specific legal basis. At 80win, the different types of data processing are supported by the following legal bases:

• Contract performance: the processing required to operate your account, handle bet transactions, and process payments is based on the performance of the service agreement you accept when registering;
• Compliance with a legal obligation: identity verification (KYC), retention of financial records, and reporting to competent authorities when required by law;
• Consent: marketing communications, non-essential cookies, and processing that goes beyond what is strictly necessary to provide the service;
• Legitimate interest: fraud prevention, platform security, service improvement analytics, and responsible gambling monitoring – always ensuring that the legitimate interest does not override the data subject's fundamental rights;
• Protection of life: in exceptional situations where data must be shared to protect the life of the account holder or third parties.

The 80win does not sell personal data to third parties. Data sharing occurs only in the specific situations listed below, and always with the minimum information necessary for each purpose:

• Payment processors: necessary financial data is shared with Pix operators, card processors, and intermediaries such as PicPay and Mercado Pago to execute transactions requested by the user. These partners are contractually required to process data solely for the purpose of payment processing;
• Casino game providers: to access Live Casino games, slots, and crash games from providers such as Pragmatic Play and Evolution, minimal session data is shared for authentication and game operation. Providers do not receive the user's full identifying information;
• Technology service providers: server hosting providers, security analytics platforms, and other technical infrastructure vendors, all bound by confidentiality and data processing agreements;
• Identity verification: specialized document verification services may process document images submitted during KYC, under strict contractual confidentiality obligations;
• Competent authorities: data may be shared with the Ministry of Finance, COAF, the Federal Revenue Service, the Judiciary, and other Brazilian authorities when required by law or by judicial or administrative order;
• Audit and compliance: external auditors may have access to aggregated or anonymized data for the purposes of platform security certification and auditing.

The 80win conducts periodic assessments of its partners to ensure their data processing practices comply with the LGPD and the contractual obligations established. Any partner found to be in breach of the data processing terms is immediately disqualified.

The 80win uses cookies and similar technologies to ensure the platform works correctly, improve your browsing experience, and — with your consent — personalize content and analyze site usage. Below we explain the types of cookies we use:

• Essential cookies: required for the platform's basic operation — such as keeping your login session active, remembering language preferences, and ensuring transaction security. They cannot be disabled without impairing use of the site;
• Performance cookies: collect information about how users navigate the platform — which pages they visit, how long they spend in each section, and any errors encountered. This data is aggregated and anonymized, and used solely to improve the platform;
• Functionality cookies: remember your usage preferences — such as favorite sports, odds display format, and interface settings — to personalize your experience without requiring you to reconfigure them on every visit;
• Marketing cookies: used with your consent to display relevant promotions within the 80win platform itself. The platform does not use third-party advertising tracking cookies.

You can manage your cookie preferences at any time through your browser settings or via the privacy dashboard in your account on the 80win. Disabling non-essential cookies does not affect access to the platform's core features such as betting, deposits, and withdrawals.

The 80win implements robust technical and organizational measures to protect users' personal data against unauthorized access, improper disclosure, alteration, loss, or destruction. The key security measures in place include:

• TLS Encryption: all communication between your browser or mobile device and 80win's servers is encrypted using TLS 1.2 or higher, protecting data in transit from interception;
• Encryption at rest: sensitive data stored on our servers is encrypted, including identity documents and financial information;
• Access control: access to users' personal data is restricted to employees and systems with a legitimate need, with all access logged for audit purposes;
• Two-factor authentication: available to all users as an additional layer of protection against unauthorized account access;
• Continuous monitoring: automated systems monitor unusual access attempts, suspicious login activity, and behaviors that may indicate account compromise;
• Security testing: the platform undergoes regular penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that may affect users' personal data, 80win will follow the incident notification procedures set out in the LGPD: reporting to the Autoridade Nacional de Proteção de Dados (ANPD) within the legally required timeframe and notifying affected users with clear information about what occurred and the measures taken.

The 80win retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. Retention periods vary according to the type of data and its purpose:

• Active account data: retained for as long as the account is active and throughout the period of service use;
• Financial and transaction data: retained for a minimum of 5 years following each transaction, in accordance with Brazilian tax and anti-money laundering legislation;
• Identity verification documents (KYC): retained for a minimum of 5 years after account closure, as required by law;
• Betting data: retained for 5 years after each bet is placed, for auditing and dispute resolution purposes;
• Security and access logs: retained for 12 months for security monitoring and incident investigation purposes;
• Marketing data: deleted within 30 days of consent being withdrawn for marketing communications.

Once the applicable retention periods have expired, data is anonymized or securely and irreversibly deleted. The anonymization of historical data allows the 80win maintain aggregate statistics for service improvement without processing identifiable personal data.

The Lei Geral de Proteção de Dados (LGPD) grants you, as the owner of personal data processed by the 80win, a set of rights you can exercise at any time. See each right and how to use it below:

• Confirmation and access: you may request confirmation of whether 80win processes your data and receive a copy of all personal data we hold about you;
• Correction: you may request the correction of incomplete, inaccurate, or outdated data. Account details can be updated directly in your account settings;
• Anonymization, blocking or deletion: you may request the anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD;
• Portability: you may request the portability of your personal data to another service or product, in accordance with ANPD regulations;
• Deletion of consent-based data: you may request the deletion of data processed on the basis of your consent, subject to any legal retention obligations;
• Sharing information: you may request information about which public and private entities 80win has shared or may share your data with;
• Consent withdrawal: you may withdraw consent given for specific processing activities at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
• Objection: you may object to processing carried out on legal grounds other than consent, where such processing is not in compliance with the LGPD.

To exercise any of these rights, contact us at suporte@80win.best with the subject line "LGPD Rights" and specify the right you wish to exercise. The 80win will respond within the legal deadline of 15 days and may request additional documentation to verify the data subject's identity before processing the request.

The services of 80win are intended exclusively for users aged 18 and over residing in Brazil. The platform does not knowingly collect personal data from minors and takes active steps to verify users' age during the registration and identity verification process.

Should 80win identifies that data from a user under 18 has been inadvertently collected, that data will be immediately deleted, the account will be closed, and any existing balance will be returned to the legal guardian following identity verification.

If you are the legal guardian of a child or teenager and suspect they have created an account on 80win, please contact us immediately at suporte@80win.best. We will act promptly to close the account and delete the data.

In some cases, data processing by 80win may involve transfers to other countries, particularly when we use technology infrastructure providers or payment processors with international operations. When this occurs, 80win ensures that transfers are carried out only to countries or organizations that provide an adequate level of data protection, or under contracts that establish data protection obligations equivalent to those required by Brazilian law.

The casino game providers and international payment processors used by the 80win are subject to periodic compliance assessments against LGPD requirements for international data transfers prior to any integration.

The 80win may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or platform features. Any material update will be communicated to users by email at least 10 days before taking effect, except where the change is required by law or by order of a competent authority.

The current version of this Policy will always be available on this page, with the last updated date shown at the top of the document. We recommend reviewing this Policy periodically to stay informed about how 80win protects your data. Continued use of the platform after any changes take effect constitutes acceptance of the updated version.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or file a complaint related to the processing of your personal data, please contact 80win through the channels below:

• DPO (Data Protection Officer) Email: suporte@80win.best with the subject line "Privacy and LGPD";
• Live chat: available on the platform after login, 24 hours a day, in Portuguese;
• WhatsApp: available at the number listed in the support section of the platform.

If you are not satisfied with the response received from 80win, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) at gov.br/anpd. You may also contact your state's Procon or the consumidor.gov.br platform for matters related to the Consumer Protection Code.