Privacy Policy of 011tt: Your Data Protected by the LGPD

A 011tt is the controller of personal data processed under this Privacy Policy. As controller, 011tt is responsible for all decisions regarding the processing of your personal information — defining the purposes, means, and duration of processing.

011tt is a Sports Betting and online casino platform aimed exclusively at the Brazilian market, focused on delivering the best experience for players in Brazil — with Pix payments, 24/7 support in Portuguese, and a games portfolio tailored to local preferences, including football (Brasileirão Série A, Copa do Brasil, Libertadores), basketball (NBB), MMA/UFC, e-sports, and Live Casino.

For questions related to this Privacy Policy or to exercise your rights as a data subject, please contact our team by email at suporte@011tt.net or via the live chat available 24 hours a day.

A 011tt collects different categories of personal data depending on how the user interacts with the platform. The types of data collected and when each collection takes place are listed below:

Registration data (provided directly by the user):

• Full name, date of birth, and CPF;
• Email address and mobile number;
• Full residential address (for KYC verification);
• Identity documents (national ID, driver's license, or passport) when requested for verification.

Platform usage data (collected automatically):

• IP address and approximate geolocation;
• Device type, operating system, and browser used;
• Pages visited, session duration, and browsing sequence;
• Betting history, games accessed, and amounts wagered;
• Login logs, access attempts, and account activity.

Financial data (collected during transactions):

• Pix key (CPF, phone number, email, or random key) for deposits and withdrawals;
• Partial credit or debit card details (last 4 digits only — full card data is processed by the PCI-DSS certified payment gateway and is not stored on 011tt's servers);
• Transaction history, amounts deposited, and withdrawals made.

The personal data collected by 011tt are used exclusively for the purposes described below. No data is used for any other purpose without the user's prior consent:

• Account operation: creation, management, authentication, and support for the user's account on the platform;
• Payment processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; withdrawal processing and validation;
• Identity verification (KYC): compliance with legal obligations for anti-money laundering and age verification (18+);
• Fraud prevention and security: detection of suspicious activity, multiple accounts, bot usage, and other conduct prohibited by the Terms and Conditions;
• Customer support: handling questions, complaints, and requests via chat, email, and WhatsApp;
• Operational communications: notifications about transactions, account changes, security updates, and changes to the Terms or this Policy;
• Marketing communications (with consent): sending promotions, bonuses, platform updates, and information about the VIP Program — you can unsubscribe at any time;
• Responsible gambling: monitoring usage patterns to identify potential signs of problem behavior and activate protective tools as requested by the user;
• Compliance with legal obligations: responding to requests from competent authorities, and fulfilling applicable tax and regulatory obligations.

A 011tt uses behavioral analytics systems to improve the platform experience — identifying navigation bottlenecks, testing new features, and personalizing content display. These systems operate on anonymized or pseudonymized data whenever possible.

All data processing carried out by 011tt has a defined legal basis under the LGPD. The bases used are:

• Contract performance (Art. 7, V): primary basis for processing the data required to operate the account, process bets, and handle financial transactions — without this data, the contracted service cannot be provided;
• Compliance with a legal or regulatory obligation (Art. 7, II): basis for identity verification (KYC), anti-money laundering, tax obligations, and compliance with public authorities;
• Legitimate interest (Art. 7, IX): basis for fraud prevention, platform security, service improvement, and usage behavior analysis — always limited to what is necessary and with full protection of the data subject's rights;
• Consent (Art. 7, I): basis for sending marketing communications, using non-essential cookies, and personalizing content. Consent may be withdrawn at any time without affecting other processing purposes.

A 011tt does not sell, rent, or share users' personal data with third parties for commercial purposes. Data sharing is limited to the situations and recipients listed below, all bound by confidentiality agreements and LGPD compliance:

• Certified payment gateways: financial data required to process transactions via Pix, credit/debit card, PicPay, and Mercado Pago is shared exclusively with the corresponding payment processor, under PCI-DSS standards;
• Live casino and game providers: to operate live tables and other games, minimal session data (anonymized user ID and balance) is shared with game providers, without exposing any personally identifiable information;
• Fraud prevention services: device data, IP address, and usage behavior may be processed by partners specializing in fraud detection and identity verification;
• IT infrastructure providers: servers, cloud storage, and transactional email services operate under contracts with strict data protection clauses;
• Public authorities: data is shared with government agencies, regulatory bodies, law enforcement, or judicial authorities when required by law, court order, or applicable regulation — 011tt does not provide data beyond what is strictly requested by the competent authority.

No personal data is shared with marketing partners without the user's explicit and specific consent.

The platform 011tt uses cookies and similar technologies to ensure the website functions properly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — session authentication, login persistence, language preferences, and CSRF security. These cannot be disabled without affecting your ability to use the platform;
• Performance and analytics cookies: collect anonymized data on how users navigate the platform — most visited pages, session duration, traffic source — to improve the product. These can be disabled in your account settings;
• Functional cookies: store user preferences — such as interface settings and betting filters — to personalize your experience without requiring reconfiguration on every visit;
• Marketing cookies (with consent only): used to personalize communications and measure campaign effectiveness. They are only activated after the user gives explicit consent via the cookie banner.

You can manage your cookie preferences through your 011tt account settings or through your browser settings. Disabling non-essential cookies does not affect access to the platform's core features.

A 011tt implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. The key security measures in place include:

• 256-bit SSL encryption for all communications between the user's device and the platform's servers;
• Password storage with bcrypt hashing — a one-way cryptographic function that prevents the original password from being recovered even if unauthorized access to the database occurs;
• Two-factor authentication (2FA) available and recommended for all users, mandatory for withdrawals above certain amounts;
• Continuous monitoring by automated intrusion detection and anomalous activity monitoring systems, with real-time alerts to the security team;
• Role-based access control — 011tt employees only have access to the data strictly necessary for their roles, with audit logs of all access;
• Incident response plan documented and periodically tested, including procedures for notifying the ANPD and affected data subjects in the event of a relevant incident;
• Encrypted backups in isolated environments, with regular recovery tests to ensure data integrity.

Despite all these efforts, no system is completely invulnerable. The 011tt also recommends that you follow good security practices: use a strong, unique password for your account, enable 2FA, and never share your credentials with anyone.

A 011tt retains users' personal data for as long as necessary to fulfill the purposes described in this Privacy Policy. The retention criteria are:

• Active account data: retained for as long as the user's account remains active on the platform;
• Closed account data: after voluntary account closure, 011tt retains data for the minimum period required by law — generally 5 (five) years for financial and transaction records, in accordance with tax and anti-money laundering legislation;
• KYC data (identity verification): retained for a minimum of 5 years after account closure, as required by regulation;
• Security and access logs: retained for 12 months for incident investigation and security audit purposes;
• Marketing data: deleted immediately upon withdrawal of consent or within 30 days of a deletion request.

Once the applicable retention periods expire, data is securely and irreversibly deleted or anonymized. The anonymization of historical data for statistical analysis purposes is not considered personal data processing and may be retained indefinitely.

The LGPD grants you, as the data subject, a set of rights regarding the processing of your personal information by the 011tt. You may exercise any of these rights at any time, free of charge, by contacting our support team:

• Access: request confirmation that your data is being processed by 011tt and obtain a copy of the information we hold about you;
• Correction: request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion: of unnecessary, excessive, or unlawfully processed data under the LGPD;
• Portability: request the transfer of your data to another service or product provider in a structured, commonly used format;
• Deletion: request deletion of data processed under consent — subject to retention of data required by law;
• Sharing information: obtain information about which public and private entities your data has been shared with;
• Consent withdrawal: withdraw consent for processing based on that legal ground at any time, without needing to provide a reason;
• Objection: object to processing carried out on the basis of legitimate interest when you believe your fundamental rights override the platform's interest.

Requests are responded to within 15 business days from the date of receipt. For more complex cases requiring additional investigation, 011tt will communicate an estimated completion timeline. All requests are logged for audit and compliance purposes.

The platform 011tt is intended exclusively for individuals aged 18 (eighteen) or older. 011tt does not knowingly collect personal data from anyone under 18.

If we identify that an account was created by a minor, the account will be immediately closed and any collected data will be securely deleted, except for transaction records that may be required by legal obligation. If you are the legal guardian of a minor and suspect they have created an account with 011tt, contact our support team immediately at suporte@011tt.net so we can take the necessary steps.

Some of the infrastructure and service providers used by 011tt — such as cloud servers, analytics tools, and international payment processors — may be located outside Brazil, which involves the international transfer of personal data.

When this occurs, 011tt ensures that the transfer is only made to countries that offer an adequate level of data protection or to recipients that provide sufficient guarantees through:

• Standard contractual clauses approved by the ANPD;
• Recognized data protection certifications and seals;
• Binding corporate policies that guarantee protection equivalent to the LGPD.

If you have questions about specific international transfers, contact our support team at suporte@011tt.net.

A 011tt may update this Privacy Policy periodically to reflect regulatory, operational, or technological changes. Updates follow these criteria:

• Material changes are communicated by email to all active users at least 7 (seven) days before they take effect;
• The date of the last update is always displayed at the top of this document;
• Continued use of the platform after the new version's effective date constitutes acceptance of the changes;
• If changes involve new data processing based on consent, 011tt will request explicit consent before beginning that new processing.

We recommend reviewing this Policy periodically to stay informed about how your data is handled. The current version will always be available at 011tt.net/privacy-policy.

A 011tt has appointed a Data Protection Officer (DPO), as required by the LGPD. The DPO serves as the point of contact between the platform, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, report security incidents, question data processing practices, or clarify any doubts about this Privacy Policy, contact us through the channels below:

• DPO Email: suporte@011tt.net (subject line: "Data Privacy – LGPD");
• Live chat: available 24 hours a day, 7 days a week, in Portuguese;
• Response time: up to 15 business days from receipt of the request.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe that 011tt's processing of your data violates the LGPD. More information about the ANPD is available on the authority's official website.