Privacy Policy of abc234 – Your Data Protected

The abc234 is a Sports Betting and online casino entertainment platform dedicated to Brazilian users. We operate with the understanding that privacy is a fundamental right and that our users' trust is our most valuable asset. That is why this document is not a formality — it is a genuine reflection of how we handle the information you share with us when you create an account and use our services.

This Policy applies to all channels of abc234: the main website accessed via browser, the mobile app (Android and iOS), and any communications made by our support team via chat, email, or other channels. If you are using the platform, this Policy applies to you.

For the purposes of the LGPD, the controller — the entity responsible for decisions regarding the processing of personal data — is abc234, the operator of the platform available at abc234.best. All requests related to personal data must be directed to our Data Protection Officer (DPO), whose contact details are in Section 14 of this Policy.

By using the services of abc234, you take on the role of data subject of the personal data you provide us. The LGPD grants you a set of rights detailed in Section 11 of this document, which abc234 is fully committed to upholding.

The abc234 collects personal data at various points during your interaction with the platform. Below are the categories and specific data collected at each stage:

• Registration: full legal name as shown on an official document, CPF, date of birth, gender (optional), full residential address with zip code, email, and mobile number;
• Identity verification (KYC): document images (national ID, driver's license, or passport), proof of address, and, when required, a selfie with your document;
• Financial transactions: deposit and withdrawal data, including the Pix key used, last digits of the registered card, amount and date of each transaction, and financial institution (Nubank, Itaú, Bradesco, Banco do Brasil, among others);
• Platform usage: Sports Betting history, Live Casino sessions played, slots used, crash games, and any other activity recorded on the account;
• Technical data: IP address, browser type and version, operating system, device identifier, approximate location data, and access logs;
• Communications: content of messages exchanged with support via chat, email, or any other channel.

Each piece of data collected has a specific, justified purpose. The abc234 uses your information to:

• Creating and managing your account: your name, CPF, and date of birth are used to ensure there is only one account per person and that the user is at least 18 years old;
• Processing transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer require financial data to be processed securely;
• Identity verification: the KYC process is mandatory before the first withdrawal and is in place to protect the user and fulfill regulatory anti-money laundering obligations;
• Preventing fraud and protecting the integrity of the platform: technical data such as IP address and device identifier are used to detect suspicious access, multiple accounts, and bonus abuse;
• Provide support: your support interaction history is kept so that agents can pick up where you left off — no need to repeat yourself every time you get in touch;
• Personalize your experience: your platform usage history may be used to suggest sports, games, and promotions relevant to you, based on your browsing and activity patterns;
• Communications: your email and mobile number are used to send important account notifications (withdrawals, deposits, security alerts) and, with your consent, promotions and updates from abc234. You may opt out of marketing communications at any time.

The LGPD requires that all personal data processing have a legal basis to justify it. At abc234, the different data processing activities are carried out based on the following grounds established by law:

• Contract performance (art. 7, V): data processing required to provide the contracted services, such as account creation, deposits, Pix withdrawals, and Sports Betting;
• Legal obligation (Art. 7, II): identity verification, retention of financial records, and anti-money laundering compliance, as required by applicable Brazilian law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and service improvement, based on the legitimate interest of abc234 and its users;
• Consent (Art. 7, I): sending marketing communications and personalizing promotions, for which consent is collected at the time of registration and may be withdrawn at any time.

The abc234 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data is only shared in the following situations, all strictly necessary for the operation of the platform:

• Payment processors: financial data is shared with the institutions responsible for processing Pix, boleto, credit/debit card, PicPay, and Mercado Pago transactions, always under confidentiality and data security agreements;
• Game providers: for Live Casino games and slots to function, minimum session data is shared with providers such as Evolution Gaming, Pragmatic Play, and other certified partners. No personal identifying data is transmitted beyond what is strictly necessary for the round;
• Identity verification services: documents submitted during the KYC process may be handled by specialized identity verification partners, held to the same security and confidentiality standards we apply internally;
• Authorities and legal requirements: abc234 may be required to share data with government authorities, regulators, or oversight bodies when mandated by law, court order, or official investigation. In such cases, we share only the minimum required.

All partners that process personal data on behalf of abc234 are subject to data protection contractual clauses equivalent to or stricter than those required by the LGPD.

The abc234 retains personal data for as long as necessary to fulfill the purposes described in this Policy. The criteria that determine retention periods are:

• While your account is active: all registration, transaction, and platform usage data is retained for as long as you have an active account with abc234;
• After account closure: financial and identity records are kept for up to 5 years after account closure, as required by Brazilian anti-money laundering legislation and tax obligations;
• Access Logs: technical access records (IP, date, time) are retained for 6 months, in accordance with the Brazilian Internet Civil Framework (Law No. 12.965/2014);
• Marketing data: deleted immediately upon consent withdrawal, except where required to demonstrate compliance with legal obligations.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the individual can no longer be identified from the remaining information.

The abc234 implements a range of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: all communication between your device and abc234's servers is encrypted, including login credentials, financial transactions, and registration data;
• Access control: user data is accessible only to employees and systems that need it to carry out their specific functions. Access is controlled by multi-factor authentication and reviewed on a regular basis;
• Continuous monitoring: abc234's systems are monitored 24 hours a day to detect unauthorized access attempts, suspicious activity, and potential vulnerabilities;
• Security audits: we conduct periodic security audits, including penetration testing, to identify and remediate vulnerabilities before they can be exploited;
• Secure storage: sensitive data such as passwords is stored exclusively as a cryptographic hash — never in plain text. Identity documents are stored in a segregated environment with strictly limited access.

Despite all measures in place, no system is 100% immune to incidents. In the event of a data breach that may pose a significant risk to data subjects, the abc234 will notify the National Data Protection Authority (ANPD) and affected users within the timeframes required by the LGPD.

The abc234 uses cookies and similar technologies to ensure the proper functioning of the platform and to enhance the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality, such as keeping your session active after login and remembering language preferences. They cannot be disabled without affecting your use of the service;
• Performance cookies: collect anonymous data on how users navigate the platform — such as which pages are visited most and where errors occur — to improve technical performance. No personally identifiable data is collected through these cookies;
• Functional cookies: remember your game preferences and personal settings so you don't have to reconfigure them every time you log in;
• Marketing cookies: used to personalize communications and promotions based on your usage behavior. Enabled only with your explicit consent.

You can manage your cookie preferences in your account settings or directly through the platform's privacy dashboard. Modern browsers also allow you to block or delete cookies in their settings, though this may affect the functionality of certain features on abc234.

The abc234 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we determine that an account was created by someone under 18, the account will be closed immediately, all balances will be cancelled, and the data will be deleted, unless retention is required for investigative purposes.

We apply technical controls and identity verification to prevent minors from registering. If you are a parent or guardian and believe a minor has created an account on abc234, please contact support immediately. The matter will be handled as a priority and with complete confidentiality.

The LGPD guarantees you, as the data subject whose personal data is processed by abc234, the following rights may be exercised at any time:

• Access: you may request a copy of all personal data that abc234 holds about you;
• Correction: incomplete, inaccurate, or outdated data may be corrected upon request and submission of supporting documentation;
• Anonymization or blocking: you may request that unnecessary or excessive data be anonymized or that its use be temporarily blocked;
• Deletion: you may request the deletion of data processed based on your consent. Data processed under a legal obligation or for contract performance cannot be deleted during the applicable retention period;
• Portability: you may request that your data be transferred to another platform in a structured, commonly used format;
• Consent withdrawal: consent given for marketing communications may be withdrawn at any time, at no cost;
• Sharing notice: you may request a list of the entities with which abc234 has shared your data;
• Objection: you may object to processing carried out on the basis of abc234's legitimate interest, provided you present a valid justification.

To exercise any of these rights, please contact us at suporte@abc234.best identifying yourself as the data subject. The response deadline of abc234 is up to 15 business days from the date the request is received.

Some of the technology partners and game providers of abc234 operate servers located outside Brazil. When personal data needs to be processed by these partners, international transfers are carried out in compliance with LGPD requirements, specifically:

• The destination country offers an adequate level of data protection recognized by the ANPD, or
• The transfer is governed by standard contractual clauses that ensure data subjects receive a level of protection equivalent to that provided under Brazilian LGPD.

Under no circumstances are Brazilian financial data — such as Pix keys or R$ transaction data — transferred to partners without the safeguards described above. The abc234 maintains an up-to-date list of countries and partners involved in international data transfers, available upon request to our DPO.

The abc234 may update this Privacy Policy periodically to reflect changes in our processes, applicable law, or industry practices. Any significant changes will be communicated in advance via your registered email or through a prominent notice on the platform.

The last updated date is always shown at the top of this page. We recommend reviewing this Policy regularly to stay informed about how we handle your data. Continued use of the platform after any changes are published constitutes acceptance of the updated terms.

If any change reduces your rights over your data, you will be notified at least 15 days in advance and will have the option to close your account at no cost if you do not agree with the new terms.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to file a complaint regarding the handling of your personal information, please contact the Data Protection Officer (DPO) of abc234 through the following channels:

• Email: suporte@abc234.best — please identify the subject as "Data Protection / LGPD" so your message is routed to the DPO;
• Live chat: available 24 hours a day on the platform. Let the agent know you would like to discuss data privacy;

The response time for LGPD-related requests is up to 15 business days. Formal complaints will be addressed with detailed justifications. If you are not satisfied with the response received, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.