Bte365 Privacy Policy – How We Protect Your Data

1About This Privacy Policy

This Privacy Policy describes how the bte365 collects, uses, stores, shares, and protects the personal data of users who access the bte365.asia platform, the mobile app for Android and iOS, or any other support channel of the platform.

The bte365 acts as the controller of personal data collected, as defined by the General Personal Data Protection Law (LGPD — Law No. 13,709/2018). By registering and using the platform's services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your data under the conditions described herein.

This policy is supplementary to the Terms and Conditions of bte365 and should be read alongside that document. In the event of any conflict between the two documents on privacy matters, this Privacy Policy takes precedence.

2What Data bte365 Collects

The bte365 collects personal data at various points during your interaction with the platform. The categories of data collected and the circumstances in which collection occurs are described below:

Registration and identification data:

• Full name, date of birth, and CPF — required for identity verification and compliance with Brazilian anti-money laundering legislation.
• Email address — used for account communications, transaction confirmations, and support.
• Mobile number — used for two-factor authentication and important account communications.
• Residential address with ZIP code — required for eligibility verification and compliance.

Financial and transaction data:

• Pix key linked to the user's bank account — used exclusively to process withdrawals.
• Partial credit or debit card details (last four digits and card brand) — stored to streamline recurring deposits and ownership verification.
• Complete history of deposits, withdrawals, and bets placed on the platform.

Usage and behavioral data on the platform:

• IP address, device type, operating system, and browser used.
• Pages visited, session duration, games and markets viewed.
• Login logs, including timestamp and approximate location based on IP.

Identity verification data (KYC):

• Identity documents (such as a national ID, driver's license, or passport) collected during the mandatory verification process before withdrawals are released.
• Proof of address issued within the last 90 days.
• Proof of ownership of the payment method, when requested.

3How bte365 Uses Your Data

The data collected by bte365 are used exclusively for the purposes described below, based on the legal grounds set out in the LGPD:

The bte365 does not use your data for automated decision-making that produces legal effects or significant impacts without the possibility of human review. If you receive an automated decision regarding your account — such as a block due to suspected fraud — you may request a human review through the support channel.

4Data Sharing

The bte365 does not sell or trade your personal data. Information is only shared in the situations described below, which are strictly necessary for the platform to operate:

• Payment processors: necessary financial data is shared with the payment providers that process deposits and withdrawals — including the institutions that handle Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago. These partners act as data processors and are contractually bound to handle your information with the same level of protection required by the LGPD.
• Game providers: minimum necessary data (such as user identifier and session balance) is shared with the software providers of live casino, slots, and other products to enable the gaming experience. No personally identifiable data such as name or CPF is transmitted beyond what is strictly necessary.
• Audit laboratories: aggregated and anonymized data on gameplay behavior may be shared with independent laboratories that audit the randomness and fairness of results — with no individual user identification.
• Authorities and legal obligations: bte365 may disclose personal data when required by law, court order, legal process, or request from a competent government authority — including the Central Bank of Brazil, the Federal Revenue Service, and anti-money laundering authorities (COAF).
• Protection of rights: in cases where it is necessary to protect the rights, property, or safety of bte365, other users, or the general public — such as in fraud or collusion investigations.

5Cookies and Tracking Technologies

The bte365 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze how services are used. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — maintaining login sessions, language preferences, and account settings. They cannot be disabled without affecting your use of the platform.
• Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, load times, errors encountered. They help drive continuous improvements to the overall experience.
• Functional cookies: remember user preferences, such as the last deposit method used or favorite games, to make future sessions more convenient.
• Analytical cookies: used to understand aggregate user behavior patterns and inform product decisions. Data is anonymized before analysis.

You can manage your cookie preferences through your browser's settings panel. Disabling non-essential cookies will not prevent you from using the core features of the bte365, but it may affect the personalization of your experience.

The bte365 mobile app for Android and iOS may use device identifiers (such as the Advertising ID) for analytics purposes. You can reset or disable this identifier through your operating system's privacy settings.

6Data Security

The bte365 applies a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures in place include:

• 256-bit SSL Encryption across all communications between the user's device and the platform's servers.
• Encryption at rest for sensitive data stored in the databases — including identity documents, banking details, and transaction history.
• Two-factor authentication (2FA) available to all users and mandatory for high-value transactions.
• Role-based access control — bte365 employees only access the data required for their specific roles, with no broad access to the full user database.
• Continuous monitoring of access and suspicious activity across the platform's systems, with automated alerts for anomalous behavior.
• Periodic security testing — including penetration testing and security audits conducted by independent specialist teams.
• Incident response plan documented and regularly tested, with clear procedures for containment, communication, and recovery in the event of a data breach.

No security system is 100% foolproof. In the event of an incident that could affect your data, the bte365 will notify affected users by email as soon as possible, with details about what happened, which data was affected, and what steps were taken.

7How Long Data Is Retained

The bte365 retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum retention periods required by Brazilian law:

• Registration and identification data: retained for the entire duration of the account and for a minimum of 5 years after closure, as required by anti-money laundering legislation (Law No. 9.613/1998).
• Financial transaction history: retained for a minimum of 5 years after each transaction, as required by the Banco Central do Brasil and the Receita Federal.
• Betting records: retained for a minimum of 5 years, as required for dispute resolution and audits.
• Customer support data: retained for 2 years after each support ticket is closed, for reference in the event of future disputes.
• Access and security logs: retained for 1 year, as required by the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).
• Identity verification documents (KYC): retained for 5 years after account closure.

Once the legal retention periods have been met, data is securely and permanently deleted from bte365, or anonymized for use in statistical analyses that do not allow individual identification.

8Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the owner of your personal data, a set of rights that bte365 is committed to honoring. You may exercise any of these rights at any time through your account dashboard or by emailing suporte@bte365.asia:

• Right to access: request a full copy of all personal data that bte365 holds about you.
• Right to correction: request the update or correction of incomplete, outdated, or inaccurate data.
• Right to deletion: request the deletion of your personal data, subject to the minimum retention periods required by law.
• Right to data portability: request the transfer of your personal data to another platform or service, in a structured, machine-readable format.
• Right to withdraw consent: withdraw consent for data processing based on consent — such as marketing communications — at any time, without affecting any processing carried out prior to that withdrawal.
• Right to object: object to the processing of data based on legitimate interest, where there is a relevant reason to do so.
• Right to information: be informed about which entities bte365 shares your data with and under what circumstances.
• Right to lodge a complaint: file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have been violated.

The bte365 will respond to all rights-exercise requests within 15 business days, as provided by the LGPD. In cases requiring additional identity verification, this period may be extended, with prior notice to the requester.

9Data of Minors

The bte365 is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from anyone under 18.

All accounts on the platform go through date-of-birth verification, and the identity verification process (KYC) confirms that users are of legal age before enabling betting and withdrawals. If bte365 identifies that data from a minor was inadvertently collected, the account will be immediately closed and the data will be deleted.

If you are the parent or guardian of a minor and believe they have created an account on bte365, please contact us immediately at suporte@bte365.asia so the account can be closed and your data deleted.

10International Data Transfer

The personal data of users of the bte365 are preferably stored on servers located in Brazil or in countries that provide a level of data protection equivalent to that guaranteed by the LGPD.

In situations where data processing involves infrastructure located outside Brazil — such as live casino game provider servers or payment processing systems — bte365 ensures that transfers are carried out under contractual clauses requiring the recipient to uphold data protection standards equivalent to those of the LGPD.

The bte365 does not transfer data to countries that do not provide adequate protection without adopting the safeguards required by Brazilian law. You may request information about international data transfers involving your account through our support channel.

11Changes to This Policy

The bte365 may update this Privacy Policy periodically to reflect changes in data processing practices, new platform products or services, or updated legal and regulatory obligations.

Users will be notified of significant changes by email at least 7 days before they take effect. The effective date of the current version is shown at the top of this page.

You can check this page at any time at bte365.asia/privacy-policy to view the most current version of the Privacy Policy. Continued use of the platform after the effective date of any updated terms constitutes acceptance of those changes.

12Contact & Data Protection Officer (DPO)

The bte365 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the LGPD, and for serving as the communication channel between users and the National Data Protection Authority (ANPD).

For questions, requests related to your rights as a data subject, or complaints about how bte365 handles your data, please get in touch:

• DPO Email: suporte@bte365.asia (subject: "Privacy / LGPD")
• Live chat: available 24 hours a day at bte365.asia or through the mobile app

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13.709/2018) and the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).