Bey365 – Privacy Policy and Data Protection

1Data Controller

The bey365 is the data controller responsible for processing personal data collected through the platform available at bey365.asia. By using any service provided by bey365 — including Sports Betting, Live Casino, slots, crash games, or any other feature — you enter into a data processing relationship with us, governed by this Privacy Policy and the LGPD.

This policy applies to all users, registered or not, who access the platform, as well as to anyone who contacts the bey365 by email, live chat, or any other support channel.

2Data We Collect

The bey365 collects only the data necessary to provide its services and to meet applicable legal obligations. The table below details the categories of data collected and when collection takes place:

We do not collect sensitive data such as racial origin, religious beliefs, biometric data, or health information, except where strictly necessary to meet specific legal obligations and with an adequate legal basis.

3How We Use Your Data

Data collected by bey365 are used exclusively for the purposes described below:

• Service delivery: create and manage your account, process bets, settle results, handle deposits via Pix, boleto, credit card, and other accepted methods, and process withdrawals to your bank account in Brazil.
• Identity verification (KYC): verify that you are who you say you are and that you meet the eligibility requirements — particularly the minimum age requirement — as required by anti-money laundering legislation.
• Fraud and money laundering prevention: monitor transactions and suspicious behavior, meet regulatory obligations, and report unusual activity to the relevant authorities when required by law.
• Customer support: answer questions, resolve complaints, process requests, and maintain communication records for quality control purposes.
• Responsible gambling: monitor usage patterns that may indicate problem behavior and make available the control tools provided on the platform.
• Platform improvement: analyze usage data in aggregated and anonymized form to identify technical issues, improve the user experience, and develop new features.
• Marketing communications: send promotions, news, and personalized offers by email or push notification, only if you have given explicit consent. You may withdraw that consent at any time.

The bey365 does not use your data for automated decision-making that produces significant legal effects or similarly affects you without the possibility of human review.

4Legal Basis for Processing

Each data processing operation carried out by the bey365 is grounded in one of the legal bases set out under the LGPD:

• Contract performance (art. 7, V): processing necessary to deliver the contracted services when you create an account and use the platform — such as processing bets, deposits, and withdrawals.
• Compliance with a legal or regulatory obligation (Art. 7, II): processing required by law, such as identity verification, transaction monitoring for anti-money laundering purposes, and reporting to the relevant authorities.
• Legitimate interest (art. 7, IX): processing for fraud prevention, platform security, and service improvement, provided these do not conflict with your rights and expectations as a data subject.
• Consent (Art. 7, I): marketing communications and content personalization based on gaming preferences, only when you give explicit authorization. You may revoke that consent at any time without affecting the services you have contracted.

5Data Sharing

The bey365 does not sell personal data. Sharing with third parties occurs only in the situations below, always with appropriate safeguards:

• Game providers: live casino and online game providers (such as Evolution Gaming and Pragmatic Play Live) receive only the minimum data necessary to deliver the gaming service, such as user identifiers and session information. These providers are contractually required to protect the data and may not use it for their own purposes.
• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit card, Mercado Pago, PicPay, and TED, transaction data is shared with the financial institutions and processors involved, as required to complete the operation.
• Identity verification services: to fulfill KYC (Know Your Customer) obligations, identification data may be shared with service providers specializing in document verification and fraud prevention.
• Public authorities: the bey365 responds to court orders and requests from the Public Prosecutor's Office, the Federal Revenue Service, the Central Bank, and other Brazilian regulatory bodies when legally required to do so.
• IT and infrastructure providers: cloud service, hosting, cybersecurity, and data analytics providers that act as processors under the instruction of the bey365, with contracts that ensure LGPD compliance.

Under no circumstances is your data shared with advertisers, brokers, social media platforms, or any third parties for advertising purposes without your express consent.

6International Data Transfers

Some of the technology and game providers used by bey365 are located outside Brazil. When this is the case, international data transfers are carried out with the safeguards required by the LGPD, which include:

• Transfer to countries or international bodies that provide a level of personal data protection equivalent to that established by the LGPD, as assessed by the ANPD.
• Adoption of standard contractual clauses that guarantee data subjects the same rights protected under Brazilian law.
• Obtaining the data subject's specific consent, where applicable.

The bey365 contractually requires all international data recipients to implement technical and organizational measures equivalent to those adopted by the platform itself in Brazil.

7Data Retention & Deletion

The bey365 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. The general retention periods are:

• Account and financial transaction data: retained for a minimum of 5 years after account closure, as required by tax legislation and anti-money laundering regulations.
• Betting and game history: retained for 5 years, available for the user to consult while the account is active and to address any disputes or authority requests.
• Support communication data: retained for 2 years after the support interaction is closed.
• Marketing data: retained for as long as consent remains active. Following withdrawal of consent, data is removed from mailing lists within 30 days.
• Technical and access logs: retained for 6 months for security purposes and incident resolution.

Once retention periods expire, data is securely deleted or anonymized in a way that prevents re-identification of the data subject. Requests for deletion before the legal retention period ends may be fulfilled for data not subject to mandatory retention obligations.

8Cookies and Tracking Technologies

The bey365 uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality, such as keeping your session active after login. They cannot be disabled without affecting access to your account.
• Performance cookies: collect aggregated and anonymized information about how the platform is used — such as most-visited pages and errors encountered — for technical improvement purposes.
• Functionality cookies: remember your language preferences, display settings, and other customizations so you do not have to reset them every time you log in.
• Analytics cookies: used to understand browsing behavior on the platform and improve the user experience. They can be disabled without affecting the core services.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent access to certain platform features. The bey365 does not use third-party tracking cookies for advertising purposes without your consent.

9Data Security

The bey365 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction. The main measures in place include:

• Encryption in transit: all communication between your phone or computer and the platform is encrypted with TLS 1.3 / SSL 256-bit.
• Encryption at rest: sensitive data stored on the platform's servers, such as passwords and financial information, is encrypted using industry-grade algorithms.
• Access control: only staff members and systems with a proven operational need are granted access to personal data, subject to multi-factor authentication and the principle of least privilege.
• Continuous monitoring: intrusion detection systems and 24-hour monitoring identify and respond to suspicious activity in real time.
• Security testing: the platform conducts regular penetration tests and security audits to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: the bey365 maintains a documented security incident response plan, with defined timelines and procedures for notifying the ANPD and affected data subjects.

Despite all measures in place, no security system is completely foolproof. If you suspect your account has been compromised, change your password immediately and contact support.

10Your Rights as a Data Subject – LGPD

The LGPD grants you, as a data subject, a comprehensive set of rights regarding the processing of your personal information by bey365. See each right and how to exercise it below:

To exercise any of these rights, contact us at suporte@bey365.asia or via the platform's chat. The bey365 will respond within the 15-day period established by the LGPD and may request identity verification before processing the request.

11Minors

The services of the bey365 are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from anyone under 18. Registration requires age confirmation, and the identity verification process includes a check of the declared date of birth.

Should bey365 determines that data from a user under 18 was collected by mistake, the account will be immediately closed and the data deleted in the shortest technically feasible timeframe, subject only to mandatory legal retention obligations. Any deposited balance will be returned to the verified rightful owner.

If you are a parent or guardian and believe a child or teenager may have accessed the platform, please contact support immediately so we can act as quickly as possible.

12Changes to This Privacy Policy

The bey365 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. All material changes will be communicated in advance by email and/or via a prominent notice on the platform before taking effect.

The date of the last update is shown at the top of this page. We recommend reviewing this policy periodically to stay informed about how your data is handled. Continued use of the platform after changes are published constitutes acceptance of the new terms, provided the changes do not require new explicit consent from the data subject.

For changes involving new consent-based processing purposes, bey365 will request new explicit authorization before beginning processing.

13Contact, DPO & Support Channel

The bey365 maintains a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and serving as a communication channel between the platform, data subjects, and the ANPD.

For any questions about this Privacy Policy, requests to exercise your rights, or complaints related to the processing of your personal data, please reach out through the following channels:

• Email: support@bey365.asia — for LGPD-related requests, please include "LGPD – [request type]" in the subject line to ensure proper routing.
• Live chat: available directly on the platform, 24 hours a day, in Brazilian Portuguese.

All LGPD-related requests are addressed within 15 days. For complex requests, this deadline may be extended, with prior notice and justification provided to the data subject.