A2bt Privacy Policy – Data Protection & LGPD

1. Introduction

The a2bt takes its users' privacy seriously. This Privacy Policy clearly and accessibly describes how the platform a2bt collects, uses, stores, shares, and protects the personal information of users who access and use the services available at a2bt.best.

This document was prepared in compliance with Brazil's General Data Protection Law — LGPD (Law No. 13.709, of August 14, 2018) — and other applicable regulations in Brazil. By creating an account on a2bt, make a deposit, place bets, or simply browse the platform, you confirm that you have read and understood this Privacy Policy.

This Policy is an integral part of the Terms and Conditions of a2bt by reference. In the event of a conflict between this document and the Terms, the more specific document for the matter in question shall prevail.

2. Data Controller

The controller responsible for processing personal data collected through the platform a2bt is the company operating the a2bt.best website, reachable through the contact channel available at contato@a2bt.best.

The Data Protection Officer (DPO) of a2bt can be reached at the same email address for specific matters relating to privacy, the exercise of LGPD rights, and communications with the National Data Protection Authority (ANPD).

3. Data Collected

3.1 User-Provided Data

The a2bt collects information provided directly by you during registration and use of the platform:

• Identification data: full name, date of birth, CPF, RG or CNH (for KYC verification).
• Contact details: email address, mobile phone number, residential address, and zip code (CEP).
• Financial data: registered Pix key, bank account number for wire transfer (Nubank, Itaú, Bradesco, Banco do Brasil), credit or debit card details (processed by a certified gateway — a2bt does not store the full card number).
• Verification documents: image of a national ID (RG), driver's license (CNH), or passport, proof of address, and a selfie with the document (requested during the KYC process prior to withdrawals above R$ 5,000.00).
• Communications: history of conversations with support via live chat or email.

3.2 Automatically Collected Data

By accessing the platform, the a2bt automatically collects technical data required for the operation and security of the service:

• Access data: IP address, browser type and version, operating system, device language setting.
• Usage data: pages visited, session duration, click events, bets placed, games accessed.
• Device data: unique device identifier (required for multiple-account detection and fraud prevention).
• Geolocation data: approximate location based on IP address (we do not collect GPS data without explicit permission).

3.3 Financial Transaction Data

All transactions carried out on a2bt — deposits via Pix, boleto, card, PicPay, or Mercado Pago, and withdrawals — are logged with date, time, amount in BRL (R$), payment method, and transaction status. These records are retained for the period required under Brazilian financial regulations.

4. Purpose of Processing

The a2bt uses collected personal data solely for the purposes described below. No data is processed for purposes incompatible with those stated here without the data subject's renewed consent.

The a2bt does not use personal data for automated decision-making that produces significant legal effects on the user — except in fraud detection processes, which may result in the temporary suspension of an account for manual review by the compliance team.

5. Legal Basis for Processing

The LGPD requires that all personal data processing have an explicit legal basis. a2bt a2bt processes your data based on the following legal grounds set out in Article 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): processing required to provide the contracted services — account creation, bet processing, deposits, and withdrawals.
• Compliance with a legal obligation (art. 7, II): user identification, anti-money laundering compliance, and financial records required by Banco Central do Brasil regulations.
• Legitimate interest (Art. 7, IX): ongoing platform improvement, fraud prevention, security of other users, and of a2bt.
• Consent (Art. 7, I): sending marketing communications, promotions, and news from a2bt by email or SMS — always with the option to unsubscribe via the opt-out link or through the account dashboard.

6. Data Sharing

The a2bt does not sell, rent, or trade users' personal information. Data is shared with third parties only in the following situations, always with appropriate contractual safeguards:

6.1 Service Providers

The a2bt works with technology providers that have limited access to user data for service delivery purposes — such as payment gateways (Pix, card, boleto, PicPay, Mercado Pago), casino and slots game providers, cloud infrastructure providers, and identity verification (KYC) services. All providers are contractually required to process data in accordance with the LGPD and may not use it for their own purposes.

6.2 Authorities and Legal Obligations

The a2bt may share data with Brazilian public authorities — such as the Banco Central do Brasil, Receita Federal, COAF (Financial Activities Control Council), and the Judiciary — when required by law, court order, or criminal investigation. Such disclosures are made strictly to the extent necessary and are formally documented.

6.3 Platform Protection

In cases of suspected fraud, money laundering, or serious violation of Terms and Conditions, the a2bt may share data with other betting platforms and with industry fraud prevention organizations, limited to what is necessary to protect the platform and its users.

7. Data Retention

The a2bt retains personal data for as long as necessary to fulfill the purposes for which it was collected, or for the period required by Brazilian law, whichever is longer:

Once the applicable retention period expires, data is anonymized or securely and permanently deleted. Anonymized data may be retained indefinitely for statistical purposes, with no possibility of identifying the data subject.

8. Data Security

The a2bt adopts robust technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

• 256-bit SSL encryption in all communications between the user's device and the servers of a2bt — including all financial transactions.
• Encryption at rest for sensitive data stored in our databases — passwords are stored exclusively as hashed values using the bcrypt algorithm, never in plain text.
• Role-based access control: employees of a2bt have access only to the data required for their specific roles (principle of least privilege).
• Real-time anti-fraud system monitoring transactions, access, and suspicious behavior 24 hours a day, 7 days a week.
• Two-factor authentication (2FA) available to all users — strongly recommended and optional during account setup.
• Audits and penetration testing conducted periodically by specialized information security firms.
• Incident response plan documented and tested, with clear procedures for containment, analysis, and notification in the event of a data breach.

9. Cookies and Tracking Technologies

The a2bt uses cookies and similar technologies to ensure the platform works properly, improve user experience, and understand how the platform is used. Below we explain the types of cookies we use:

9.1 Types of Cookies

9.2 Cookie Management

You can manage your cookie preferences at any time through your account settings panel or your browser settings. Disabling essential cookies may prevent the platform from functioning properly. For other cookie types, disabling them does not affect access to the core services of a2bt.

10. Your Rights as a Data Subject

The LGPD guarantees you, as the data subject whose personal data is processed by a2bt, a robust set of rights that can be exercised at any time:

11. Minors

The services of a2bt are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. CPF verification during registration serves, among other purposes, to confirm that the user has reached legal age.

If a2bt determines that data from a user under 18 was inadvertently collected, that data will be immediately deleted, the account will be closed, and any real-money balance will be returned to the legal guardian, following identity verification.

If you suspect that a minor has created an account on a2bt, please contact support via live chat or email at contato@a2bt.best. We handle these cases with the highest priority.

12. International Data Transfers

Some of the service providers used by a2bt — such as Live Casino, slots, and cloud infrastructure providers — may process data on servers located outside Brazil. When this occurs, a2bt ensures that any international transfer is carried out in compliance with the requirements of the LGPD (Articles 33 to 36):

• Transfers to countries with an adequate level of protection recognized by the ANPD; or
• Data processing agreements with standard protection clauses approved by the ANPD; or
• Specific guarantees provided by the data importer regarding a level of protection equivalent to that required by the LGPD.

The a2bt does not transfer sensitive financial data — such as Pix keys, banking details, or card numbers — to servers outside Brazil, except where strictly necessary for transaction processing by an authorized payment gateway.

13. Changes to This Policy

The a2bt may update this Privacy Policy periodically to reflect changes in its services, applicable legislation, or privacy practices. When material changes occur — those that significantly affect how your data is processed — you will be notified at least 7 days in advance via your registered email, as well as through a prominent notice in the logged-in area.

For minor changes — such as text corrections, section reorganization, or contact updates — notice will be given solely by publishing the new version on the site, with the date and version number updated at the top of this document.

Continued use of the platform after changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may close your account before the effective date — any available real balance will be released for withdrawal as normal during that period.

14. Data Protection Officer (DPO)

The a2bt has appointed a Data Protection Officer (DPO), as required by the LGPD for operators and controllers that process personal data at scale. The DPO serves as the official communication channel between a2bt, data subjects, and the National Data Protection Authority (ANPD).

The responsibilities of a2bt's DPO a2bt include: receiving and responding to data subject requests, advising the internal team on privacy best practices, conducting data protection impact assessments (DPIAs) for new products and features, and reporting security incidents to the ANPD when required.

15. Contact

To exercise your rights as a data subject, ask questions about this Privacy Policy, or raise any privacy-related concern with a2bt, use the following channels:

• Email: contato@a2bt.best — response within 15 calendar days for LGPD rights requests; within 24 business hours for general inquiries.
• Live chat: available on the platform 24 hours a day, 7 days a week — for quick questions about privacy and account security.
• Help center: section Frequently Asked Questions with answers to the most common questions about privacy and data.

If, after contacting a2bt, you believe your rights as a data subject have not been adequately addressed, you may contact the Autoridade Nacional de Proteção de Dados (ANPD) through the gov.br portal. The a2bt cooperates fully with any investigation conducted by the ANPD.