9ybet Privacy Policy — Your Data, Protected

The 9ybet is the controller of the personal data collected through the platform available at 9ybet.best. As the data controller, the 9ybet determines the purposes and means of processing the personal data of its users, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018).

For any questions related to the processing of personal data, users may contact us directly at suporte@9ybet.best. The 9ybet has appointed a Data Protection Officer (DPO) responsible for handling data subject requests and ensuring compliance with applicable law.

The 9ybet collects personal data in the following situations and categories:

Data provided directly by the user

• Registration data: full name, CPF, date of birth, email address, mobile number, and full residential address.
• Verification documents: a copy of a government-issued ID (RG, CNH, or passport) and proof of address, requested during the KYC (Know Your Customer) verification process.
• Payment data: Pix key, bank slip details and credit/debit card information for processing deposits and withdrawals. Full card details are handled directly by the card networks (Visa, Mastercard) and are not stored on 9ybet.
• Support communications: messages exchanged via live chat and emails sent to platform support.

Automatically collected data

• Technical data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage data: pages visited, session duration, games accessed, bets placed, access times, and navigation sequences on the platform.
• Cookies and similar technologies: as described in Section 6 of this Policy.

All data processing carried out by 9ybet is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance — processing is necessary for account operation, bet processing, payments via Pix, and other platform features the user agreed to when registering.
• Compliance with a legal obligation — a 9ybet is legally required to collect and retain certain data for anti-money laundering purposes, identity verification, and compliance with gambling industry regulations.
• Legitimate interest — processing carried out for fraud prevention, platform security, and service improvement, provided it does not override the fundamental rights of data subjects.
• Consent — for marketing communications and non-essential cookies, which the user may withdraw consent for at any time.

The personal data collected by 9ybet are used exclusively for the following purposes:

• Account operation: creation, verification, maintenance and closure of your account on the platform.
• Processing financial transactions: deposits and withdrawals via Pix, bank slip, credit/debit card, PicPay and Mercado Pago, in compliance with Banco Central do Brasil regulations.
• Identity verification (KYC): confirm that the account holder is over 18 years of age and that the payment details belong to the same CPF registered on the account.
• Fraud prevention and anti-money laundering: transaction monitoring and behavioral pattern analysis in compliance with Law No. 9,613/1998 and COAF regulations.
• User support: handle requests, resolve issues, and respond to inquiries submitted via chat or email.
• Responsible gaming: monitor betting patterns to identify risky behavior and offer self-exclusion tools and limits, as required by industry best practices.
• Account-related communications: security notifications, transaction confirmations, login alerts, and important platform updates.
• Marketing (with consent): sending information about promotions, bonuses and news from 9ybet, only for users who have expressly consented to this type of communication.

The 9ybet does not sell personal data. Sharing only occurs in the situations below, and is always limited to the information strictly necessary:

• Payment providers: data required to process transactions via Pix (Banco Central), boleto bancário (banks such as Nubank, Itaú, Bradesco, and Banco do Brasil), cards (Visa and Mastercard), and digital wallets (Mercado Pago, PicPay).
• Game providers: partner providers such as Evolution Gaming, Pragmatic Play, and Spribe receive only the user's anonymous identifier required to operate the games — no name, CPF, or financial data.
• Identity verification services: certified KYC platforms that process document verification in compliance with the LGPD and international data protection regulations.
• Competent authorities: when required by law, court order, subpoena from the Public Prosecutor's Office or a COAF request in the context of financial crime investigations.
• Technology infrastructure: cloud hosting and cybersecurity providers that process data as sub-processors under contracts with specific data protection clauses.

All third parties with access to personal data of users of 9ybet are bound by contractual agreements requiring them to process data solely for the contracted purposes and in compliance with the LGPD.

The 9ybet uses cookies and similar technologies to ensure the platform functions properly, improve the user experience and, with your consent, personalize the content displayed.

Types of cookies used

• Essential cookies: required for the platform to function properly — session authentication, language preferences, and betting cart. They cannot be disabled without affecting site functionality.
• Performance cookies: collect anonymized information about how users navigate the platform — which pages they visit, which games they open, and where errors occur. Used exclusively to improve the user experience.
• Functionality cookies: remember your preferences (such as the game you were playing) to personalize your next session.
• Analytics cookies: performance analytics tools that generate aggregated, anonymous data about platform usage. This data never identifies an individual user.

You can manage your cookie preferences in your browser settings. Disabling non-essential cookies may affect some platform features, but will not prevent you from using the core services of the 9ybet.

The 9ybet adopts appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or accidental destruction.

• 256-bit SSL Encryption across all data transmissions between the user's device and the platform's servers.
• Data encryption at rest — sensitive information such as CPF and financial data is stored in encrypted form on our servers.
• Strict access control — only staff with a specific operational need have access to users' personal data, always through multi-factor authentication.
• Continuous security monitoring — intrusion detection systems and anomalous activity monitoring operating 24 hours a day.
• Regular penetration testing — the infrastructure of 9ybet is periodically tested by independent cybersecurity specialists.

The 9ybet retains personal data for as long as necessary to fulfill the purposes for which it was collected, observing the minimum periods required by law:

• Registration and identity data: retained for as long as the account is active and for up to 5 years after closure, as required by anti-money laundering regulations.
• Financial transaction history: retained for 5 years after each transaction, as required by the Central Bank of Brazil and applicable tax legislation.
• Betting and gaming history: retained for 12 months for operational and support purposes; anonymized aggregate data may be retained for a longer period.
• Support communications: retained for 2 years after the end of the interaction for quality assurance and dispute resolution purposes.
• Security logs: retained for 6 months for fraud detection and security incident investigation.

Once the retention period has ended, data is securely deleted or anonymized, making it impossible to identify the data subject.

The LGPD grants data subjects a set of rights that the 9ybet is committed to respecting and facilitating. To exercise any of these rights, please contact us at suporte@9ybet.best with the subject line "LGPD Rights".

• Access: confirm whether we process your data and access the full list of information we hold.
• Correction: request the update or correction of incomplete, inaccurate, or outdated data.
• Anonymization or deletion: request that unnecessary data or data processed in violation of the law be anonymized, blocked or deleted.
• Portability: receive your data in a structured format for transfer to another controller.
• Information on data sharing: find out which public and private entities we share your data with.
• Consent withdrawal: withdraw consent given for specific processing activities, without affecting the lawfulness of processing carried out prior to withdrawal.
• Objection: object to processing carried out on the basis of legitimate interest when it overrides your fundamental rights.

All requests are responded to within 15 business days. If the request cannot be fulfilled, the 9ybet will explain the reasons and outline the available means of appeal, including the option to petition the ANPD.

The services of 9ybet are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors. Registration requires a CPF and date of birth verification to block underage access.

In some situations, personal data may be transferred to servers or processors located outside Brazil — for example, for game processing by international providers such as Evolution Gaming and Pragmatic Play.

The 9ybet ensures that any international transfer of personal data is carried out in compliance with the requirements of Article 33 of the LGPD, with at least one of the following safeguards in place:

• Transfer to countries with a level of data protection equivalent to Brazil's, as recognized by the ANPD.
• Adoption of standard contractual clauses approved by the ANPD in agreements with data recipients.
• Data protection certifications or international standards recognized by the ANPD.

The 9ybet reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, in response to new legal requirements or to improve the clarity of the information provided.

Significant changes will be communicated by email to the address registered on the account, with at least 7 days' notice before taking effect. The date of the last update appears at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated Policy.

For changes involving new consent-based processing purposes, the 9ybet will request fresh, explicit consent before beginning processing for the new purpose.

The 9ybet has appointed a Data Protection Officer (DPO) to serve as the communication channel between the company, data subjects and the National Data Protection Authority (ANPD).

For any questions related to this Privacy Policy or the processing of your personal data, please get in touch:

• Email: suporte@9ybet.best
• Suggested subject: "Privacy Policy — [your request]"
• Response time: up to 15 business days

If you are not satisfied with the response from the 9ybet, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through the official channels available on the federal government portal.