Privacy Policy of aa22bet — Your Data

Aa22bet is the controller of personal data collected and processed in connection with the use of the aa22bet.net platform. As the data controller, aa22bet is responsible for defining the purposes and means of processing users' personal data, always in compliance with the LGPD and other applicable regulations in Brazil.

For any questions regarding the processing of your personal data — including requests for access, correction, portability, or deletion — please contact us by email contato@aa22bet.net or via the live chat available 24 hours a day on the platform.

This Privacy Policy applies to all services offered by aa22bet: Sports Betting, Live Casino, e-sports, crash games, slots, and any other current or future features of the platform.

Aa22bet collects different categories of data depending on how you interact with the platform. The main types of data processed are outlined below:

Aa22bet does not collect sensitive data such as health information, racial origin, religious beliefs, or political views. Card financial data is processed by PCI DSS-certified payment partners and is never stored in full on aa22bet's servers.

Aa22bet always collects data on the basis of one of the legal grounds established under the LGPD. We never collect more than what is necessary for each purpose. The legal bases we rely on are:

• Contract performance: registration, financial, and usage data are necessary to operate your account, process Pix deposits and withdrawals, and provide the betting services you signed up for;
• Compliance with a legal or regulatory obligation: KYC (identity verification) data is collected to comply with anti-money laundering (AML/CFT) requirements and regulations from the Central Bank and the Secretariat of Prizes and Betting of the Ministry of Finance;
• Legitimate interest: technical and usage data are processed to prevent fraud, ensure platform security, and improve the user experience — always with the least possible impact on your privacy;
• Consent: marketing communications via email, SMS, and push notifications require your explicit consent, which may be withdrawn at any time.

Data collected is used exclusively for the purposes described below. aa22bet does not use your data for any purpose incompatible with the reason it was originally collected:

• Account creation and management: registration, authentication, balance management, and betting history on the aa22bet platform;
• Processing financial transactions: deposits via Pix, boleto bancário, credit/debit card, Mercado Pago, PicPay, and TED; withdrawal processing and account ownership verification;
• Identity verification (KYC): confirm that you are 18 or older and that the information provided corresponds to a real person, preventing fraud and money laundering;
• Provision of betting services: offer football markets (Brasileirão Série A, Copa do Brasil, Libertadores), UFC, NBB, e-sports, Live Casino, slots, and crash games;
• Customer support: answer questions, resolve complaints, and handle responsible gambling requests via chat and email;
• Fraud prevention and security: identify suspicious behavior, detect multiple accounts, and protect the integrity of the platform and its users;
• Marketing communications (with consent): send promotions, bonuses, and aa22bet news via email, SMS, and push notifications — only if you have opted in to receive them;
• Compliance with legal obligations: maintain records required under Brazilian law and respond to requests from competent authorities.

Aa22bet does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only occurs in the following cases, always with appropriate safeguards in place:

• Payment partners: Pix, credit and debit card processors, Mercado Pago, and PicPay receive only the data strictly necessary to process each transaction. All partners are PCI DSS certified and operate under data protection agreements;
• Casino game providers: live casino, slots, and crash game providers receive an anonymous user identifier solely to record bets. We never share your name, CPF, or financial details with game providers;
• IT service providers: companies that host infrastructure, monitor security, or provide technical support to aa22bet have access only to what is necessary to perform their functions, under confidentiality and data protection agreements;
• Authorities and regulators: when required by law, court order, or request from a competent authority (Federal Police, Federal Revenue Service, Central Bank, Secretaria de Prêmios e Apostas), aa22bet may share data without prior notice to the user, as permitted by the LGPD;
• Fraud prevention: in cases involving criminal activity investigations, aa22bet may share data with other betting platforms or financial institutions as part of coordinated anti-money laundering efforts.

Aa22bet retains your personal data only for as long as necessary to fulfill the stated purposes or to comply with legal obligations. The main retention periods are:

• Active account data: for as long as your account is active and you are using aa22bet's services;
• KYC and financial transaction data: a minimum of 5 (five) years after account closure, as required by anti-money laundering regulations (AML/CFT) and the Brazilian Central Bank's rules;
• Betting records: a minimum of 5 (five) years, which may be extended in the event of an ongoing dispute or investigation;
• Customer support data: 2 (two) years after the ticket is resolved, unless related to active investigations;
• Marketing data (with consent): until you withdraw your consent or request deletion.

Once retention periods expire, data is securely deleted or anonymized for statistical purposes so that the data subject can no longer be identified.

Aa22bet applies technical and organizational measures to protect your data against unauthorized access, loss, alteration, accidental or unlawful disclosure, or destruction. The key measures in place include:

• SSL/TLS Encryption: all communications between your browser or mobile device and aa22bet's servers are encrypted using TLS 1.2 or higher;
• Encryption at rest: sensitive data stored in aa22bet's databases is encrypted, including KYC documents and financial data;
• Role-based access control: only employees with a specific business need can access user data, and that access is logged and audited on a regular basis;
• Two-factor authentication: available and recommended for all aa22bet users. Enable it in your account dashboard for an extra layer of protection;
• Continuous monitoring: intrusion detection and anomaly monitoring systems watch aa22bet's infrastructure 24 hours a day;
• Regular security testing: aa22bet conducts periodic penetration tests (pentest) and security audits to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that may put your rights at risk, aa22bet will report it to the National Data Protection Authority (ANPD) and, where applicable, notify affected users within the legally required timeframe.

Aa22bet uses cookies and similar technologies to ensure the platform runs properly, improve the user experience, and — with your consent — personalize content and analyze site usage. The types of cookies used are:

• Essential cookies: required for the platform to function properly. These include session and authentication cookies. Without them, you cannot log in, place bets, or process transactions. These cookies cannot be disabled;
• Performance and analytics cookies: collect information about how you use aa22bet — which pages you visit, how long you stay, and where you came from. This information is used in aggregate, anonymized form to improve the platform. These require your consent;
• Functionality cookies: remember your preferences — such as language, layout, and market filters — so you don't have to reconfigure them on every visit. These require your consent;
• Security and fraud prevention cookies: help identify suspicious behavior and protect your account against unauthorized access. They are treated as essential cookies.

You can manage your cookie preferences at any time through your browser settings or aa22bet's cookie preference panel. Declining non-essential cookies does not prevent you from using the platform's core features.

Aa22bet does not use social media tracking pixels or third-party fingerprinting technologies to monitor your behavior outside the platform.

The General Data Protection Law grants you, as a data subject, a set of rights that aa22bet is committed to respecting and facilitating. To exercise any of these rights, please contact us at contato@aa22bet.net — we respond within 15 business days.

Aa22bet is a betting platform intended exclusively for users aged 18 and over. The platform does not intentionally collect data from minors and has age verification mechanisms in place during registration and the KYC process.

If aa22bet determines that it has inadvertently collected data from a user under 18, it will immediately delete that data and close the associated account. Legal guardians who believe a minor may have created an aa22bet account should contact us immediately via chat or at contato@aa22bet.net.

Aa22bet actively supports the protection of minors and provides tools for responsible adults to request access restrictions to the platform where there is a risk of use by minors in their care.

In some cases, aa22bet user data may be processed or stored on servers located outside Brazil — for example, by cloud infrastructure providers or casino game providers based abroad.

In these cases, aa22bet ensures that international data transfers are carried out in compliance with the LGPD, applying the following safeguards:

• Transfer only to countries that offer a level of data protection deemed adequate by the ANPD, or;
• Use of standard contractual clauses that guarantee data subjects protection equivalent to that provided under the LGPD, or;
• Internationally recognized compliance certifications held by the data-receiving partners.

Aa22bet prioritizes technology partners that process data within Brazil wherever technically feasible, minimizing the need for international data transfers.

Aa22bet may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Material changes will be communicated by email at least 15 days before taking effect.

The most recent version of this Policy is always available at aa22bet.net/privacy-policy. The date of the last update is shown at the top of this document. Continued use of the platform after changes are published constitutes acceptance of the updated terms.

We recommend reviewing this page periodically, especially before providing new personal data to aa22bet or after receiving an update notification by email.

To exercise your rights, clarify any questions, or submit a complaint regarding the processing of your personal data, you can reach aa22bet through the following channels:

• Live Chat — available 24 hours a day, 7 days a week, directly on the platform. Instant responses for general inquiries;
• Data Protection Officer (DPO) Email — contato@aa22bet.net. Response time: up to 15 business days for formal LGPD rights requests;
• Help Center — Frequently Asked Questions with answers to the most common questions about privacy and data security.

When reaching out about privacy rights, please include in your message: your full name, the email registered with aa22bet, a clear description of your request, and, where relevant, your CPF number so we can securely locate your account.