HB2Bet Privacy Policy — How We Protect Your Data

The HB2Bet collects personal information at three key points: during registration, throughout platform use, and at the time of financial transactions. The types of data collected in each situation are detailed below.

1.1 Registration data

• Full name as it appears on an official ID;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Full residential address in Brazil;
• Valid email address;
• Mobile number with Brazilian area code.

1.2 Usage and browsing data

• IP address and approximate location data;
• Browser type and version, and operating system;
• Pages visited, session duration, and navigation flow;
• Game history, bets placed and results;
• Support interactions — chat conversations and emails;
• Game preferences and account settings.

1.3 Financial data

• Pix key used for deposits and withdrawals;
• Credit or debit card details (processed by partner payment gateways — HB2Bet does not store full card numbers);
• Deposit and withdrawal history — amount, date, method and status of each transaction;
• Bank details for TED transfer where applicable.

1.4 Identity Verification Data (KYC)

• Photo ID document image (national ID card or driver's license);
• Recent proof of address;
• A selfie with your ID document when requested for ownership verification.

Each piece of data collected by the HB2Bet has a specific purpose and a legal basis set out in the LGPD. We use your information to:

• Create and manage your account — account registration, authentication, settings, and personal preferences;
• Process financial transactions — deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; withdrawal processing in BRL (R$);
• Verify identity and prevent fraud — age verification, CPF validation, analysis of suspicious behavior patterns, and compliance with anti-money laundering regulations (Law No. 9,613/1998);
• Provide user support — support via chat, email, and knowledge base, in Brazilian Portuguese, 24 hours a day;
• Personalize your experience on the platform — game recommendations based on your history, relevant promotion displays, and interface preference settings;
• Send account communications — transaction confirmations, security alerts, and notifications about active bonuses and promotions (you can opt out of marketing communications at any time);
• Fulfill legal obligations — reporting to competent authorities when required by law, including COAF (Financial Activities Control Council);
• Continuously improve the platform — aggregated and anonymized usage analysis for developing new features and resolving technical issues.

The HB2Bet does not use your personal data for targeted advertising on third-party platforms without your express consent, nor does it sell betting behavior data to data brokers or commercial partners.

The HB2Bet shares personal data only in the situations listed below, always for the purpose of delivering the contracted service or fulfilling legal obligations:

• Payment processors — payment gateways and financial intermediaries authorized by the Brazilian Central Bank that process Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago transactions. These partners receive only the data required to settle each transaction;
• Game providers — slots, crash games, Live Casino and other title providers receive anonymized session identifiers for technical integration purposes. We do not share full names, CPF numbers or banking details with game providers;
• Identity verification services — authorized KYC (Know Your Customer) partners that assist with document validation and age verification, operating under data protection agreements compliant with the LGPD;
• Legal and Regulatory Authorities — when required by court order, request from the Public Prosecutor's Office, COAF, the Federal Revenue Service, or any competent authority under Brazilian law. In such cases, the HB2Bet will not notify the user in advance if doing so is prohibited by law;
• Auditors and consultants — professionals engaged for technical, legal, or financial auditing of the platform, under strict contractual confidentiality obligations.

The HB2Bet uses cookies and similar technologies to ensure the platform operates correctly, enhance the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies — required for authentication, maintaining active sessions, CSRF attack protection, and core platform functionality. These cannot be disabled without compromising your HB2Bet experience;
• Analytical cookies — collect aggregated and anonymized data about how users navigate the platform. Used to identify areas for improvement, fix errors, and understand which features are most used. Enabled only with your consent;
• Personalization cookies — store language preferences, interface theme and display settings. They improve the experience without collecting sensitive data. Enabled with your consent;
• Fraud prevention cookies — detect anomalous access patterns, multiple accounts from the same device, and unauthorized login attempts. These are part of our security measures and cannot be disabled.

You can manage your cookie preferences at any time in your browser settings — Chrome, Firefox, Safari, Edge — or in your account's privacy settings on HB2Bet. Disabling non-essential cookies does not affect access to games or payment processing.

We do not use cross-site tracking technologies to monitor your activity outside of the HB2Bet.

Protecting user information is a core technical priority of HB2Bet. The security measures in place include:

• End-to-end encryption — all communications between the user's device and hb2bet servers use TLS 1.3 with AES-256 encryption, the highest standard available commercially;
• Secure password storage — user passwords are never stored in plain text. They are processed using cryptographic hash functions with an individual salt per account, making recovery infeasible in the event of unauthorized access to the database;
• Two-factor authentication (2FA) — available to all users as an additional security layer at login and for withdrawal operations;
• Internal access controls — user data is accessible internally only by teams with a justified operational need, with an audit log kept of every access;
• Continuous monitoring — intrusion detection and anomalous behavior monitoring systems run 24 hours a day on hb2bet servers;
• Regular backups — backups are performed regularly in isolated environments to ensure service continuity and recovery in the event of an incident.

The HB2Bet retains users' personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. The general retention periods are:

• Registration and active account data — retained for as long as the account is active and for any additional period required after closure to meet legal obligations;
• Financial transaction history — retained for a minimum of 5 years from the transaction date, as required by anti-money laundering legislation (Law No. 9,613/1998) and Central Bank of Brazil regulations;
• Identity verification data (KYC) — retained for a minimum of 5 years after account closure, in accordance with legal anti-money laundering obligations;
• Access and security logs — retained for a minimum of 6 months in accordance with the Marco Civil da Internet (Law No. 12,965/2014);
• Support communications — retained for 2 years after the support interaction is closed for quality purposes and resolution of any disputes.

Once mandatory retention periods have elapsed, data is securely deleted or irreversibly anonymized. User deletion requests are honored in compliance with the minimum legal retention periods — data that the HB2Bet is legally required to retain cannot be deleted before the end of the period established by law, even upon request by the data subject.

The Lei Geral de Proteção de Dados (LGPD) grants you, as the data subject, the following rights with respect to the information processed by the HB2Bet:

To exercise any of these rights, please contact the Data Protection Officer (DPO) of the HB2Bet by email suporte@hb2bet.best with the subject line "LGPD — Exercise of Right". Requests will be responded to within 15 business days. Identity verification may be required before the request is fulfilled, to ensure that only the actual data subject can access their own information.

The platform HB2Bet is intended exclusively for individuals aged 18 or older. Registration, use of services, and access to any feature — live casino, Sports Betting, slots, crash games, or any other content — are strictly prohibited for users under 18.

The HB2Bet does not intentionally collect personal data from anyone under 18. If we identify that an account was created by a minor, it will be closed immediately and any collected data will be deleted. If you are a parent or guardian and believe a minor in your care has created an account without authorization, please contact our support team immediately at suporte@hb2bet.best.

The HB2Bet may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data processing practices.

Material changes — those that significantly affect the rights of data subjects or the way data is processed — will be communicated via email to the registered address and through a prominent notice on the platform at least 7 days before the changes take effect.

Minor editorial changes, such as spelling corrections or section reorganization without any change to content, may be made without prior notice, with the date shown at the top of this document updated accordingly.

Continued use of the HB2Bet after the effective date of the changes constitutes acceptance of the new terms. The version of this policy currently in force is always the one published on this page. Previous versions may be requested through the privacy channel.

The HB2Bet has appointed a Data Protection Officer (DPO) responsible for receiving, reviewing and responding to requests related to this Privacy Policy and the exercise of rights under the LGPD.

• DPO email: suporte@hb2bet.best — use the subject line "LGPD — Privacy" for priority handling;
• Live chat: available within the platform after login, with an average response time of under two minutes;
• Response time: rights exercise requests are handled within 15 business days; general inquiries within 5 business days.

If you are not satisfied with the response from the HB2Bet to a request related to the protection of your personal data, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) through the official channels made available by the authority.

For questions related to the general rules of use of the platform, please refer to our Terms and Conditions. For information about game control tools, visit the Responsible Gaming.