898p Privacy Policy – Your Data Protected

The 898p, operated through the platform available at 898p.best, is the controller of personal data collected and processed in connection with the provision of Sports Betting and online casino services. As the controller, 898p is responsible for determining the purposes and means of processing its users' personal data, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018) and other applicable data protection regulations in Brazil.

This Privacy Policy applies to all users of the platform 898p — whether accessing the site via mobile or desktop browser, creating an account, making deposits or withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, or TED transfer, placing sports bets, playing slots, live casino, or poker, or interacting with any other feature on the platform.

The 898p collects different categories of personal data depending on the type of user interaction with the platform. Collection is carried out proportionally and limited to what is necessary for each purpose — the data minimization principle established under the LGPD.

Sensitive financial data, such as credit or debit card numbers, is tokenized by the payment processor and is not stored directly on the servers of 898p. Only the metadata required to confirm transactions and prevent fraud is retained.

The 898p processes users' personal data solely for the purposes described below. Any additional processing outside these purposes will require new explicit consent from the user, except as otherwise provided by law.

• Account creation and management: process registration, authenticate access, manage the user profile, and maintain the activity history on the platform.
• Service delivery: offer sports betting on Brasileirão Série A, Copa do Brasil, Copa Libertadores and other events; access to live casino, slots, poker, crash games and all other platform products.
• Payment processing: process deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED transfer; process withdrawals to the Pix key linked to the account holder's CPF.
• Identity verification (KYC): verify the user's identity before processing withdrawals and meet regulatory obligations for anti-money laundering (Law No. 9.613/1998) and counter-terrorism financing.
• Fraud prevention and security: detect and prevent fraudulent activity, platform misuse, bet manipulation, and the creation of multiple accounts.
• Responsible gaming: monitor behavioral patterns that may indicate problem gambling and take the preventive measures set out in our Responsible Gambling policy.
• Customer support: answer questions, resolve issues, and log interaction history to improve support quality.
• Operational communications: send notifications about your account, completed transactions, security updates, changes to terms, and other communications essential to the operation of the service.
• Marketing communications (with consent): send promotions, news, and personalized offers by email or SMS, only when the user has given explicit consent. Consent can be withdrawn at any time through account settings.
• Platform improvement: analyze usage data in aggregated, anonymized form to identify opportunities to improve the user experience.
• Compliance with legal obligations: respond to requests from judicial, regulatory, or governmental authorities when required under Brazilian law.

The 898p processes personal data based on the legal grounds set out in Articles 7 and 11 of the LGPD. The applicable legal basis for each processing purpose is:

• Contract performance (art. 7, V): processing required to deliver the services contracted by the user upon account creation and acceptance of the Terms and Conditions — registration, authentication, betting, payment processing, and customer support.
• Compliance with a legal obligation (Art. 7, II): KYC verification, anti-money laundering compliance (Law No. 9,613/1998), retention of transaction records as required by COAF, and other regulatory obligations applicable to the sector.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, monitoring of problem gambling patterns, service improvement based on anonymized data, and aggregated usage analysis.
• Consent (Art. 7, I): sending marketing communications and promotions by email or SMS. Consent is requested at registration and may be withdrawn at any time through the account settings or by contacting support.

The 898p does not sell, rent, or transfer users' personal data to third parties for commercial or marketing purposes. Data sharing occurs only in the situations below, limited to the minimum necessary for each purpose:

• Payment processors: companies authorized by the Banco Central do Brasil that process transactions via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED bank transfer. These processors receive only the data required to settle the transaction.
• Game providers: companies that develop slots, live casino, poker, and other games available on the platform. They receive pseudonymized session identifiers strictly necessary for the technical operation of the games.
• KYC verification providers: identity verification services used to confirm documents and registration data in accordance with regulatory requirements. They operate as data processors under contract with the 898p.
• IT infrastructure: cloud, hosting, and security service providers that process data as part of the technical operation of the platform. All operate under data processing agreements compatible with the LGPD.
• Government and judicial authorities: when required by court order, regulatory authority request, or legal mandate, the 898p will share the necessary data with the competent authorities in Brazil.
• Financial regulatory authorities: COAF (Financial Activities Control Council) and the Central Bank may receive information about suspicious transactions in accordance with legal anti-money laundering obligations.

All third parties with whom the 898p shares personal data are bound by contractual obligations of confidentiality and appropriate data handling, in line with the LGPD. The 898p does not allow partners to use user data for their own marketing purposes.

The 898p implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, accidental or unlawful loss, or destruction. The main security measures in place include:

• Encryption in transit: all communications between the user's browser and the servers of the 898p are encrypted using TLS protocol with a 256-bit SSL certificate.
• Encryption at rest: sensitive data stored in databases is encrypted at rest using robust encryption algorithms.
• Access controls: access to systems containing personal data is restricted to staff with an operational need, with mandatory multi-factor authentication and access log recording.
• Financial data tokenization: credit or debit card data is tokenized by the payment processor and is never stored on the servers of 898p in a readable format.
• Security monitoring: the platform features continuous monitoring for suspicious activity, intrusion detection systems, and documented incident response procedures.
• Security testing: the platform undergoes periodic penetration testing and security audits carried out by specialized teams.
• Staff training: all staff with access to personal data receive data protection training and follow internal information security protocols.

In the event of a security incident that may pose a relevant risk or harm to data subjects, the 898p will notify the National Data Protection Authority (ANPD) and the affected data subjects within the legally required timeframe, in accordance with art. 48 of the LGPD.

The 898p retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by applicable Brazilian legislation.

• Active account data: retained for as long as the account is active on the platform and the user is using the services.
• Financial transaction data: retained for a minimum of 5 years from the transaction date, as required by anti-money laundering legislation (Law No. 9.613/1998) and COAF regulations.
• KYC verification data: retained for a minimum of 5 years after account closure, in accordance with regulatory obligations.
• Betting and gaming data: kept for a minimum of 3 years for dispute resolution, auditing, and compliance with regulatory obligations.
• Security logs: retained for a minimum of 12 months for security incident investigation purposes.
• Marketing data (with consent): retained until consent is withdrawn by the user. After withdrawal, data is removed from communication systems within 10 business days.

Once retention periods have expired and there is no legal obligation to keep the data, it is securely deleted or irreversibly anonymized. Anonymized data may be used for statistical analysis and platform improvement without restriction, as it cannot be used to identify the data subject.

Users who request voluntary account closure or permanent self-exclusion may request the deletion of personal data not subject to legal retention obligations — simply contact support at privacidade@898p.best.

The 898p uses cookies and similar technologies to enhance the user experience on the platform, ensure the technical operation of its services, and analyze usage on an aggregate basis. The categories of cookies used are listed below:

Users can manage non-essential cookie preferences in their browser settings — most modern browsers offer options to block or delete cookies. Please note that disabling essential cookies may affect account functionality and the gaming experience on the 898p.

The 898p does not use third-party tracking technologies for behavioral advertising on other websites. Analytical cookies are processed with active anonymization settings and do not allow individual identification of the user outside the platform.

The LGPD grants you, as the data subject whose personal data is processed by the 898p, a set of rights that may be exercised at any time. The 898p is committed to responding to all requests within 15 business days of receipt, as required by law.

To exercise any of these rights, please contact the Data Protection Officer (DPO) of 898p at privacidade@898p.best or via live chat. The request must include: full name, CPF, and a clear description of the right you wish to exercise. The 898p may request identity verification before processing a request, to protect the data subject against undue requests from third parties.

The 898p is a platform intended exclusively for users aged 18 and over. Account creation, deposits via Pix or any other payment method, sports betting, and access to casino games are strictly prohibited for minors.

The 898p does not intentionally collect personal data from users under 18. If data from a minor is identified as having been inadvertently collected, it will be deleted immediately and the account closed. Parents or guardians who discover that a minor has used the platform should contact support immediately via live chat or at suporte@898p.best.

The 898p applies date-of-birth verification at registration and may request age verification documents as part of the KYC process. The platform actively collaborates with initiatives to protect minors in Brazil's digital environment.

The 898p may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data processing practices. The date of the last update is always shown at the top of this page.

For material changes that affect data subjects' rights or introduce new purposes for data processing, the 898p will notify users by email to the address registered on their account at least 15 calendar days before the changes take effect. For minor editorial or clarity updates, notification may be given solely by publishing the updated version on this page.

We recommend checking this page periodically to stay informed about how the 898p protects your data. Previous versions of this Policy are available upon request at privacidade@898p.best.

The 898p has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is responsible for receiving and handling privacy and data protection communications from users, staff, and the National Data Protection Authority (ANPD).

• Privacy channel (DPO): privacidade@898p.best — for rights exercise requests, questions about data processing, and communications with the ANPD.
• General support: suporte@898p.best or live chat available 24 hours a day, in Portuguese — for account operations, payments, and platform-related questions.
• Response timeframe: all privacy-related requests are responded to within 15 business days of receipt, in accordance with art. 19 of the LGPD.

To exercise your rights as a data subject, send an email to privacidade@898p.best with the subject line "Exercício de Direito LGPD", including your full name, CPF registered on the platform, and a clear description of the right you wish to exercise. The 898p may request additional identity verification to protect the data subject against undue requests.