Q9bet Privacy Policy – Data Protection and LGPD

1Who controls your data

For the purposes of the General Data Protection Law (LGPD – Lei nº 13.709/2018), Q9Bet is the controller of the personal data of users registered on its platform. As the controller, Q9Bet determines the purposes and means by which personal data is processed, always within the limits established by Brazilian law.

To exercise your rights as a data subject or for any questions about how your personal information is handled at Q9Bet, you can reach us via the 24-hour live chat on the platform or by email at suporte@q9bet.world. Requests related to the LGPD are handled within 15 calendar days.

2What data does q9bet collect

Q9bet collects only the information necessary to operate its services securely and efficiently. The data collected falls into the following categories:

Identification and registration data

• Full name;
• CPF (Individual Taxpayer Registration with the Brazilian Federal Revenue Service);
• Date of birth;
• Full residential address;
• Brazilian mobile phone number;
• Email address.

Financial and transaction data

• Pix key registered to your CPF for withdrawal processing;
• Partial credit or debit card details (only the last four digits and card brand — full numbers are never stored on q9bet's servers);
• History of deposits and withdrawals made on the platform;
• Sports betting and casino game history;
• Current account balance.

Identity verification data

• Government-issued photo ID (RG, CNH, or Brazilian passport) when requested;
• Proof of residence issued within the last 90 days when requested;
• Selfie or photo for identity verification where applicable.

Usage and browsing data

• Access IP address;
• Browser type and version or device used;
• Operating system;
• Pages visited and features accessed on the q9bet platform;
• Session times and durations;
• Data from cookies and similar technologies (detailed in section 6 of this Policy).

3How Q9Bet uses your data

Every piece of data Q9Bet collects has a specific and legitimate purpose. Below are all the ways your information is used:

Platform operation

To create and manage your account, process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, register and settle your Sports Betting wagers on Brasileirão, Copa do Brasil, Libertadores, NBB, UFC, and other competitions, and provide access to the online casino featuring slots, roulette, blackjack, baccarat, and crash games.

Identity verification and fraud prevention

To confirm that you meet q9bet's eligibility requirements — particularly being of legal age (18 or older) and resident in Brazil — and to detect and prevent fraudulent activity, money laundering, and platform misuse. q9bet uses automated behavioral pattern analysis systems to identify anomalous activity.

Legal obligation compliance

To comply with obligations imposed by Brazilian law, including Central Bank of Brazil regulations on anti-money laundering, betting sector rules, and judicial or administrative orders issued by competent authorities.

Communication and support

To respond to your support requests via live chat, send transaction and bet confirmations, communicate important updates about your account or Q9Bet's Terms and Conditions, and share information about promotions and platform news — provided you have not opted out of such communications.

Platform improvement

To analyze usage patterns on the Q9Bet platform, identify features that need improvement, test new functionality, and optimize the overall experience — especially mobile navigation, which is the primary access method for Brazilian users.

Responsible gambling

To monitor usage patterns that may indicate problem gambling behavior and, when identified, proactively direct users to responsible gambling tools or specialized support resources.

4Legal basis for data processing

The LGPD requires that every personal data processing operation have a defined legal basis. At q9bet, data processing is carried out under the following grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance – Processing is necessary to provide the services you agreed to when creating a Q9Bet account, including bet processing, deposits, and withdrawals;
• Compliance with a legal or regulatory obligation – Data required to comply with regulations from the Central Bank of Brazil, the Federal Revenue Service, and other applicable rules governing the betting sector in Brazil;
• Legitimate interest – For fraud prevention, platform security, service improvement, and relevant account communications, always respecting your rights and reasonable expectations;
• Consent – For sending Q9Bet marketing communications and promotions, which can be withdrawn at any time through your account settings or by contacting support.

5Data sharing with third parties

Q9Bet does not sell, rent, or trade users' personal data. Information is shared with third parties only in the following situations:

Service providers required for operations

Q9Bet works with technology partners that provide essential services to the platform's operation — including payment processors that handle transactions via Pix, boleto, and card, casino game providers, and sports odds suppliers. These partners have access only to the information strictly necessary to deliver the contracted service and are contractually prohibited from using that data for any other purpose.

Legal obligations and competent authorities

Q9bet shares data when required by law or by judicial or administrative order from competent Brazilian authorities — such as the Banco Central do Brasil, the Receita Federal, the Ministério da Fazenda, or the courts. Such sharing is carried out solely to the extent necessary to comply with the legal requirement.

What does not happen

Q9bet does not share personal data with marketing or advertising companies for targeting purposes. It does not provide data to credit analysis platforms. It does not transfer user information to other betting operators or casinos. These limits are firm commitments, not generic promises.

6Cookies and tracking technologies

Q9Bet uses cookies and similar technologies to ensure the platform runs correctly and to improve the user experience. The types of cookies used are:

• Essential cookies – Required for the platform to function correctly. These include session cookies that keep you logged in to your Q9Bet account while browsing. They cannot be disabled without affecting the platform's basic functionality;
• Performance cookies – Collect anonymous information about how users interact with the q9bet platform — which pages are most visited, where errors occur, and how long certain features take to load. This data is used exclusively to improve the platform;
• Preference cookies – Store settings you have chosen, such as language and display preferences, so they do not need to be reconfigured on each visit;
• Analytical cookies – Used to understand aggregated user behavior on the platform and inform product decisions. Data is processed in an aggregated and anonymized form.

You can manage cookie settings through Q9Bet's platform preference panel or through your browser settings. Disabling non-essential cookies does not affect the platform's core functionality.

7Data storage and security

Q9Bet users' personal data is stored on servers protected by multiple layers of security. The key technical and organizational measures Q9Bet has in place to protect your information are:

• 256-bit SSL encryption across all communications between the user's device and the platform;
• Encrypted storage of passwords — q9bet never stores passwords in plain text;
• Restricted access controls — only employees with a verified operational need are granted access to certain categories of personal data;
• Continuous monitoring of unauthorized access attempts and anomalous activity within the systems;
• Security audits conducted periodically to identify and address vulnerabilities;
• Regular backups stored in a secure environment separate from the main system.

In the event of a security incident that could result in risk or harm to users, Q9Bet will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes established by the LGPD.

8How long data is retained

Q9bet retains users' personal data for as long as necessary for the purposes that justified its collection, observing the minimum periods required by Brazilian law:

• Registration and identification data is retained for the full duration of the active account and for up to 5 years after closure, in accordance with compliance requirements and anti-money laundering regulations;
• Financial transaction records (deposits via Pix, boleto, credit card, PicPay, and Mercado Pago, and withdrawals) are retained for a minimum of 5 years after each transaction, in accordance with Banco Central do Brasil regulations;
• Betting history is retained for up to 5 years for audit purposes and compliance with regulatory obligations;
• Access data and security logs are retained for up to 6 months, and may be extended if an investigation is ongoing;
• Support communications are retained for up to 2 years for quality and reference purposes.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the individual can no longer be identified.

9Your rights as a data subject under the LGPD

The General Data Protection Law grants you, as a data subject, a set of rights that Q9Bet is fully committed to upholding. You may exercise any of these rights via live chat (available 24/7) or by emailing suporte@q9bet.world:

Requests to exercise LGPD rights are handled by q9bet within 15 calendar days of receipt. In cases that require additional identity verification before a response can be issued, you will be notified within 5 business days of the estimated completion timeframe.

10Users under 18

Q9Bet is a platform exclusively for users aged 18 and over residing in Brazil. We do not knowingly collect personal data from minors. If we become aware that a minor's data has been collected — for example, due to a false age declaration during registration — the account will be immediately closed, the data will be deleted, and any deposits will be returned to the original payment method.

If you are the legal guardian of a minor and believe they created a q9bet account using false information, please contact us immediately via live chat or at suporte@q9bet.world so we can take the necessary steps as quickly as possible.

11International data transfers

To operate some of its services — such as providing casino games from international providers and using cloud infrastructure — q9bet may transfer certain user data to servers located outside Brazil. When this occurs, q9bet ensures that:

• The transfer occurs only to countries or organizations that offer a level of personal data protection equivalent to that required under the LGPD;
• Contracts with international partners include specific data protection clauses aligned with the requirements of Brazilian law;
• Data transferred is limited to the minimum necessary for the operation of the specific service and does not include complete financial information.

Q9Bet does not transfer complete identification data — such as CPF, RG, or detailed banking information — to servers located outside Brazil.

12Changes to this Privacy Policy

Q9Bet may periodically update this Privacy Policy to reflect changes in Brazilian data protection legislation, updates to the services offered, or improvements to the platform's security practices.

Any significant update will be communicated via your registered email and through a notice on the platform at least 10 days before taking effect. The date of the most recent update is shown at the top of this page. Continued use of Q9Bet after the effective date of any changes will be considered acceptance of the updated Policy.

If the changes involve significant modifications to how we process data based on your consent — such as new purposes of use — we will request your specific consent before the changes take effect.

13Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concern related to the handling of your personal information at Q9Bet, you can reach us through the following channels:

• Live chat — Available 24 hours a day, every day, directly on the Q9Bet platform. Support provided exclusively in Portuguese. For LGPD requests, please state at the start of the chat that it is a data privacy request;
• Email — suporte@q9bet.world. For LGPD requests, use the subject line "LGPD Request – [request type]" to ensure priority handling. Response time: up to 15 calendar days.

Q9bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the LGPD on the platform. The DPO can be reached through the same channels listed above, indicating that the matter concerns data protection.