Privacy Policy of umbet1 – Your Data, Protected

The umbet1 is the Sports Betting and online casino platform available at umbet1.best, operated by a company duly incorporated under the laws of the Federative Republic of Brazil, with an active CNPJ and in compliance with Law 14.790/2023, which regulates the sports betting market in the country.

For the purposes of the LGPD (Law 13.709/2018), the umbet1 acts as controller of its users' personal data: it decides which data is collected, the purposes for which it is used, and how long it is retained. In certain situations, technical partners act as operators, processing data solely in accordance with umbet1's instructions and under a data protection agreement.

To contact the umbet1 regarding privacy matters, please send an email to suporte@umbet1.best with the subject line "Privacy – LGPD". Our team will respond within 15 business days.

The umbet1 collects only the data necessary to provide its services securely and in compliance with Brazilian law. Data is collected at different points during the user's interaction with the platform:

The umbet1 uses collected data exclusively for the purposes listed below. No data is used in any way incompatible with what was stated at the time of collection:

• Service delivery: create and manage your account, process bets, calculate results, and handle payments and withdrawals via Pix, boleto, and card in BRL.
• Identity and eligibility verification: confirm that you are at least 18 years old, a Brazil resident with a valid CPF, and not on an active self-exclusion list.
• Fraud and money laundering prevention: monitor suspicious transactions, detect multiple accounts, and fulfill COAF obligations and betting regulations (Law 14.790/2023).
• Account-related communications: notifications about withdrawals, bet confirmations, security alerts, policy updates, and responsible gambling communications.
• Marketing communications: only with express consent, sending promotions, boosted odds, and platform news. You may opt out at any time via the unsubscribe link in our emails.
• Experience personalization: display the events and markets most relevant to your betting profile, adjust the interface, and highlight odds for the sports you follow most.
• Customer support: use interaction history to streamline support and ensure continuity of service in cases of recurring issues.
• Legal and regulatory obligations: comply with court orders, requests from regulatory authorities (Ministry of Finance, ANPD, Federal Police), and statutory tax obligations.

As required by the LGPD, all personal data processing carried out by the umbet1 is grounded in one of the legal bases set out in Article 7 of Law 13.709/2018:

• Contract performance: processing necessary to fulfill the Terms and Conditions accepted by the user at registration, including account creation, bet processing, and payments.
• Compliance with a legal obligation: identity verification (KYC), anti-money laundering compliance, retention of financial records as required by Law 14.790/2023 and Central Bank regulations.
• Legitimate interest: fraud prevention, platform security, multiple account detection, system performance analysis, and continuous improvement of the user experience.
• Consent: sending marketing communications, using non-essential cookies, and personalizing promotional content. Consent may be withdrawn at any time without affecting your use of the platform.
• Credit protection: financial data verification required to authorize withdrawals above certain amounts.

The umbet1 does not sell, rent, or trade users' personal data with third parties for commercial purposes. Data sharing occurs only in the following cases, all with a clear legal basis:

• Payment processors: the data required to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago is shared with the respective payment providers, all under data protection agreements and confidentiality obligations. Card data is tokenized and never stored in plain text on umbet1's servers.
• Identity verification (KYC) providers: documents submitted for verification are processed by certified partners operating to security standards equivalent to those of umbet1. The data is used solely for identity verification and no other purpose.
• Technology and infrastructure providers: cloud hosting, anti-fraud, data analytics, and technical support services. All operate as processors under umbet1's instructions and are bound by appropriate data processing agreements.
• Regulatory and judicial authorities: in compliance with Law 14.790/2023, COAF (Financial Activities Control Council), ANPD (National Data Protection Authority), or any judicial order. umbet1 reviews each request and shares only the minimum necessary.
• Casino game providers: game session data may be shared with slots, Live Casino, and crash game providers for results auditing and compliance purposes. No personally identifiable data is shared beyond the anonymous session ID.

Under no circumstances will personal data of users of the umbet1 are shared with advertising networks, marketing companies, data brokers, or any entity that could use them for purposes unrelated to the delivery of the platform's services.

The umbet1 uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and analyze system performance. Cookies can be classified as follows:

• Essential cookies: required for the platform's basic functionality. Without them, features such as login, authenticated session management, and bet processing would not work. These cookies are always active and do not require consent.
• Functional cookies: remember your language preferences, odds format, favorite sports, and interface settings. They improve your experience without collecting behavioral data outside the platform.
• Analytical cookies: collect aggregated information about how users navigate the platform (most visited pages, session duration, errors encountered). Used to improve the product. Require consent.
• Marketing cookies: used to personalize communications and, with consent, display relevant promotions within the platform. umbet1 does not use cross-site tracking cookies for advertising purposes.

The umbet1 retains personal data for the minimum time necessary to fulfill the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Registration data and active account: for as long as the account remains active on the platform.
• Financial transaction history (BRL deposits and withdrawals): a minimum of 5 years after each transaction, as required by anti-money laundering regulations and Brazilian tax law.
• Identity verification documents (KYC): minimum of 5 years after account closure, in compliance with the regulatory obligations of Law 14.790/2023.
• Betting history: minimum of 5 years after each bet, for regulatory audit and dispute resolution purposes.
• Customer support records: 2 years after the closure of each support case.
• Non-essential cookies: maximum of 12 months, renewed only with new consent.

Once retention periods expire, data is securely deleted or irreversibly anonymized. Anonymized data (which can no longer be used to identify the user) may be retained for statistical purposes without a defined time limit.

If you request account closure before the mandatory retention periods have elapsed, the umbet1 will block access and cease active use of your data, but will retain it in storage for the minimum period required by law, as communicated in the account closure request.

The umbet1 adopts a comprehensive set of technical and organizational measures to protect user data against unauthorized access, leaks, improper alterations, and accidental destruction:

• Encryption in transit: SSL/TLS 256-bit encryption on all communications between the user and umbet1's servers.
• Encryption at rest: sensitive data stored in the database is encrypted using robust algorithms, including identity documents and financial data.
• Two-factor authentication (2FA): available and recommended for all platform users. Mandatory for withdrawals above R$ 5,000.00.
• Role-based access control: umbet1 staff members only have access to the data strictly necessary for their roles. Access to personal data is audited and logged.
• Continuous monitoring: intrusion detection systems and anomalous behavior analysis monitor the infrastructure 24 hours a day.
• Regular security testing: security audits, penetration testing, and code reviews are carried out regularly by specialized teams.
• Team Training: all staff members with access to personal data receive regular training in information security and data protection best practices.

In the event of a security incident that may compromise personal data, the umbet1 will follow its incident response protocol, notifying the ANPD and affected users within the legal deadlines established by the LGPD.

The LGPD guarantees you, as the data subject whose personal data is processed by umbet1, a set of rights that may be exercised at any time. See each one below:

• Right of access: you may request a copy of all personal data umbet1 holds about you, including registration data, betting history, transactions, and support records.
• Right to rectification: if any registered information is incorrect, incomplete, or out of date, you can request a correction directly in your account settings or through support.
• Right to Erasure: you may request the deletion of personal data processed on the basis of consent. Data whose processing is required by law (such as financial history and KYC documents) cannot be deleted within the minimum statutory retention periods.
• Right to data portability: you may request an export of your personal data in a structured format (CSV or JSON) for transfer to another controller, where technically feasible.
• Right to withdraw consent: for processing based on consent (marketing, non-essential cookies), you may withdraw at any time through your account dashboard or the unsubscribe link in our emails. Withdrawal does not affect any processing carried out prior to it.
• Right to object: you may object to processing based on legitimate interest where you believe your fundamental rights and freedoms are disproportionately affected.
• Right to information about data sharing: you have the right to know which third parties your data has been shared with and for what purpose.
• Right to petition the ANPD: if you feel your rights have not been properly addressed by umbet1, you can file a complaint directly with the National Data Protection Authority (ANPD).

The umbet1 is a Sports Betting and online casino platform intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and does not permit registration or use of its services by anyone under 18.

During registration, the date of birth is verified and the CPF provided is validated against available lookup systems to confirm that the user is of legal age. Additionally, the KYC process, mandatory for withdrawals, includes identity document verification that confirms the user's age.

If the umbet1 identify that it has collected data from a user under 18, the account will be immediately closed, the data will be deleted as quickly as possible within legal constraints, and any real balance deposited through the user's own means will be refunded. If you suspect a minor is using the platform, please contact us immediately at suporte@umbet1.best.

Some of the technology partners and infrastructure providers of umbet1 may process data on servers located outside Brazil. When this occurs, umbet1 adopts the necessary safeguards to ensure that Brazilian users' data maintains the same level of protection required by the LGPD:

• Standard data protection contractual clauses in all agreements with international partners;
• Verification that the destination country provides an adequate level of data protection, or that the partner has implemented measures equivalent to those required under the LGPD;
• Data transfer minimization: only the information strictly necessary for the provision of the specific service is shared internationally.

Financial transactions (Pix, boleto, card) are processed exclusively by partners operating in Brazil, with no payment data transferred outside the country. Betting and casino data may be processed by providers with international infrastructure, always under the data protection terms described above.

The umbet1 uses behavioral data — such as betting frequency, deposit amounts, login times, and play patterns — to identify users who may be developing problem gambling behaviors. This specific use of data has one purpose only: to protect the user, never to increase betting volume.

When the monitoring systems of the umbet1 identify concerning patterns, the platform may:

• Send responsible gambling communications with information on how to set limits;
• Display personalized alerts within the platform based on the user's usage profile;
• In extreme cases, proactively reaching out to the user to offer available self-exclusion tools.

Data related to self-exclusion and responsible gambling limits is handled with the highest level of protection and confidentiality. The fact that a user is self-excluded is never shared with third parties for commercial purposes. For more details on the available control tools, visit our Responsible Gambling.

The umbet1 may update this Privacy Policy periodically to reflect changes in Brazilian law (particularly updates to the LGPD or gambling regulations), improvements to internal security processes, or changes in data processing practices.

When changes are significant — especially those affecting user rights or introducing new processing purposes — the umbet1 will notify all users with an active account by email at least 15 days in advance, clearly indicating what has changed.

The most current version of this policy will always be available on this page, with the effective date shown at the top. If you do not agree with the proposed changes, you may exercise your right to close your account and request a refund of your real balance before the changes take effect.

The umbet1 has appointed a Data Protection Officer (DPO), as recommended by the LGPD, responsible for:

• Handling user requests regarding the exercise of rights under the LGPD;
• Advising umbet1 staff on data protection best practices;
• Serving as the point of contact with the National Data Protection Authority (ANPD) in the event of incidents or regulatory notifications;
• Oversee the platform's ongoing compliance with the LGPD and applicable sector regulations.

To contact the DPO of the umbet1, use the email suporte@umbet1.best with the subject line "DPO – Data Protection". All requests are handled confidentially and responded to within the legal deadline of 15 business days.