Privacy Policy of 80winapp —
Your Data Protected by the LGPD

1. Introduction and Data Controller

This Privacy Policy describes how the 80winapp, a Sports Betting and online casino platform accessible at 80winapp.best, collects, uses, stores, and protects the personal data of its users. This document was prepared in compliance with the Lei Geral de Proteção de Dados — LGPD (Lei nº 13.709, of August 14, 2018) and the applicable Brazilian regulatory guidelines for the betting and online gaming sector.

The 80winapp acts as the controller of personal data collected from platform users, being responsible for defining the purposes and means of processing such information. To contact our Data Protection Officer (DPO), please use the email privacidade@80winapp.best or the support available within the platform.

This policy applies to all services provided by the 80winapp: Sports Betting on Brasileirão Série A, Copa do Brasil, Libertadores, MMA, UFC, e-sports, and other events; Live Casino games; slots; crash games; and any other product available on the platform, whether accessed via mobile or desktop.

2. Data We Collect

The 80winapp collects personal data at different points during your interaction with the platform. Below are the main types of data collected and the context in which they are obtained:

2.1 Data you provide directly

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address;
• Verification documents (KYC): a photo ID (RG, CNH, or passport), proof of address, and where required, documentation confirming ownership of the payment method;
• Payment data: Pix key, credit/debit card details (stored in tokenized form by the payment processor, not directly by 80winapp), and bank account information for wire transfers;
• Support communications: content of live chat conversations, emails exchanged with the support team, and call records, where applicable.

2.2 Automatically collected data

• Access and browsing data: IP address, browser type and version, device operating system, pages visited, and session time and duration;
• Platform activity data: betting history (sports, amounts, odds, results), casino game history, and financial activity (deposits and withdrawals via Pix, bank slip, card, or wire transfer);
• Cookies and similar technologies: session data, browsing preferences, and tracking identifiers as described in Section 8 of this Policy.

3. How We Use Your Data

The 80winapp uses the personal data collected solely for the purposes listed below. No data is used for purposes incompatible with those described in this Policy without prior notice and, where applicable, without renewed consent.

• Account creation and management: verify your identity, create your registration, maintain your account history, and ensure that only you can access your data;
• Processing financial transactions: process deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and wire transfer; process withdrawals via Pix to the key linked to your CPF;
• Fulfillment of regulatory obligations: age verification (18+), anti-money laundering compliance (AML/CFT), adherence to Brazilian gambling regulations, and mandatory reporting to authorities;
• Delivering platform services: offering Sports Betting, Live Casino, slots, crash games, and other features; personalizing your experience based on your usage history;
• User support: addressing your questions, resolving disputes related to bets or payments, and processing responsible gambling requests;
• Security and fraud prevention: detect suspicious behavior, prevent unauthorized access, identify the use of multiple accounts, and protect the integrity of the platform;
• Account communications: notifications regarding deposits, withdrawals, bet results, and updates to the Terms and Conditions and Privacy Policy;
• Marketing communications (with consent): sending promotions and special offers — exclusively to users who have opted in to receive this type of communication.

4. Legal Basis for Processing

Under the LGPD, all processing of personal data requires a legal basis. The 80winapp bases the processing of your data on the following legal grounds:

• Performance of a contract (Art. 7º, V of the LGPD): most processing is necessary to fulfill the platform's terms of use that you accepted upon registration — account creation, bet processing, Pix payments, and support;
• Compliance with a legal or regulatory obligation (Art. 7º, II of the LGPD): identity verification (KYC), anti-money laundering controls, and regulatory reporting are required under Brazilian law;
• Legitimate interest (Art. 7, IX of the LGPD): fraud prevention, platform security, and usage analysis to improve our services — always with minimal impact on your privacy;
• Consent (Art. 7, I of the LGPD): for marketing communications and the use of non-essential cookies — you may withdraw this consent at any time.

5. Data Sharing

The 80winapp does not sell, rent, or share users' personal data with third parties for marketing purposes or any commercial purpose unrelated to the platform's operation. Data sharing occurs only in the situations listed below and always with contractual confidentiality safeguards:

5.1 Essential operational partners

• Payment providers: Pix processors, credit/debit card operators, PicPay, Mercado Pago, and partner banks to enable deposits and withdrawals in BRL (R$);
• Identity verification providers: KYC specialist companies that assist with document verification and CPF confirmation with the Receita Federal;
• Casino game providers: slots, live casino, and crash games providers that require minimal session data to deliver a personalized gaming experience;
• Technology infrastructure: server providers, CDN and security services that host and protect the platform.

5.2 Public authorities

The 80winapp shares data with Brazilian government authorities when legally required — such as in response to court orders, requests from the Banco Central do Brasil, the Receita Federal, COAF (Conselho de Controle de Atividades Financeiras), or other competent regulatory bodies. In such cases, data sharing strictly follows the limits of the legal determination.

6. Data Retention and Deletion

The 80winapp retains your personal data for as long as necessary to fulfill the purposes for which it was collected, taking into account applicable legal and regulatory obligations:

• Registration and KYC data: retained for as long as the account is active and for at least 5 years after closure — as required by Brazilian anti-money laundering regulations;
• Betting and financial transaction history: retained for at least 5 years for regulatory audit and dispute resolution purposes;
• Support communication data: retained for 2 years after the case is closed;
• Cookie and session data: retained for periods defined in Section 8, ranging from a single session to up to 12 months for preference cookies.

When the retention period expires and there is no longer a legal basis to keep the data, 80winapp securely deletes or irreversibly anonymizes it, so that the data subject can no longer be identified.

7. Information Security

Protecting the data of 80winapp is an operational priority, not just a regulatory requirement. The security measures in place include:

• Encryption in transit: 256-bit SSL/TLS encryption on all communications between the user and the platform;
• Encryption at rest: sensitive data stored in encrypted format on our servers;
• Role-based access control: only staff members with a proven operational need have access to users' personal data, and all access is logged in audit trails;
• Multi-factor authentication (MFA): available to users as an additional layer of account protection;
• Ongoing monitoring: automated intrusion detection systems and anomalous behavior analysis operate 24 hours a day to identify threats in real time;
• Periodic security testing: the platform conducts regular vulnerability assessments and penetration tests carried out by independent specialists.

In the event of a security incident affecting users' personal data, the 80winapp will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframe required by the LGPD, with information about the nature of the incident, the data involved, and the measures taken.

8. Cookies and Similar Technologies

The 80winapp uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored in your browser that allow the platform to recognize your session, remember your preferences, and analyze usage patterns.

Types of cookies used

• Essential cookies: required for the platform's core functionality — login, session management, bet processing, and financial transactions. They cannot be disabled without compromising your use of the platform;
• Performance cookies: collect information about how you use the platform (pages visited, session duration, errors encountered) to help us improve the service. Data is aggregated and anonymous;
• Preference cookies: remember your settings — such as language and Sports Betting market preferences — to personalize your experience on future visits;
• Analytics cookies: used to understand aggregate usage patterns and improve the products offered. Require consent and can be disabled.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent access to certain platform features, such as login and live betting. For non-essential cookies, you may withdraw your consent at any time through the privacy settings panel available in your account.

9. Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that 80winapp is committed to respecting and facilitating. You may exercise any of these rights at any time through platform support or by emailing privacidade@80winapp.best:

• Confirmation and access (Art. 18, I and II): confirm whether 80winapp processes your data and, if so, access a copy of the data stored;
• Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion (Art. 18, IV): request the anonymization or deletion of data that is unnecessary or processed in violation of the LGPD;
• Portability (Art. 18, V): receive your data in a structured, machine-readable format for transfer to another service provider, where technically feasible;
• Deletion of data processed under consent (Art. 18, VI): request the deletion of data processed based on your consent, such as marketing data;
• Information on sharing (Art. 18, VII): obtain information about the entities with which 80winapp shares your data;
• Withdrawal of consent (Art. 18, IX): withdraw consent given for processing activities based on that legal basis, such as marketing and non-essential cookies;
• Objection to processing (Art. 18, § 2º): object to processing carried out on the basis of legitimate interest, with justification.

The 80winapp responds to all data subject rights requests within 15 calendar days from the date the request is received, in accordance with the timeframe established by the LGPD. In more complex cases, the deadline may be extended, with notice provided to the requester. Note that certain rights may be limited by legal obligations — for example, data required for anti-money laundering purposes cannot be deleted before the minimum regulatory retention period.

10. Protection of Minors

The 80winapp is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. The registration process requires a date of birth and CPF, and access is blocked for users who indicate they are under 18.

Should 80winapp identifies that an account was created by a minor, the data will be immediately deleted, the account closed, and the matter reported to the relevant authorities in accordance with Brazilian law. If you are aware that a minor has used the platform, please contact our support team immediately.

11. International Data Transfers

For the platform's operation, 80winapp may use infrastructure and technology service providers located outside Brazil — such as cloud servers or international casino game providers. In these cases, data transfers comply with LGPD requirements:

• Transfers to countries offering an adequate level of protection recognized by the ANPD;
• Transfers covered by standard contractual clauses ensuring a level of protection equivalent to that of the LGPD;
• Adoption of technical and organizational safeguards equivalent to those required for data processing in Brazil.

The 80winapp keeps records of international transfers carried out and can provide detailed information about them upon request to the DPO.

12. Changes to This Policy

The 80winapp may update this Privacy Policy periodically to reflect changes in Brazilian law, our services, or our data processing practices. Any material change will be communicated at least 7 days in advance via your registered email and a prominent notice within the platform.

The current version of this Policy is always available on this page, with the date of the last update indicated at the top of the document. If you continue using the 80winapp after updates take effect will be considered acceptance of the revised terms. If you do not agree with the changes, you may close your account before the effective date and request portability or deletion of your data.