17bet Privacy Policy: Your Data Protected

17bet operates the Sports Betting and online casino platform accessible at 17bet.click. This document was prepared to fully comply with the requirements of the Lei Geral de Proteção de Dados — LGPD (Law No. 13,709/2018) and to inform you, in a clear and transparent manner, about all aspects of how your personal data is handled.

Privacy is more than a legal obligation at 17bet — it is a value the platform has taken seriously since its founding. Brazilian users deserve to know exactly what data is collected, why, how long it is stored, and what their rights are. This document answers all of those questions.

This Privacy Policy should be read together with the Terms and Conditions of the platform. If you have any questions, contact us at contato@17bet.click before creating your account.

The controller of the personal data processed on this platform is 17bet, operator of the 17bet.click platform. The controller is responsible for defining the purposes and means by which personal data is processed, as defined under the LGPD.

• Contact email: contato@17bet.click
• Platform: 17bet.click
• Support language: Portuguese (Brazil)
• Support: 24 hours a day, 7 days a week

To exercise your rights as a data subject — including requests for access, correction, deletion, and portability — contact us directly at the email address above. The Data Protection Officer (DPO) can be reached through the same channel with the subject line "LGPD Request".

17bet collects personal data at various points during your interaction with the platform. The table below summarizes the data categories, when they are collected, and why they are needed:

17bet does not collect sensitive personal data beyond what is strictly necessary to meet legal and operational obligations, such as identity documents required for KYC verification. Health data, racial origin, religious beliefs, and sexual orientation are never collected by the platform.

17bet uses your personal data solely for the purposes described below. No data is processed for purposes not listed here without prior notice and consent where applicable:

• Account creation and management: Registration, authentication, eligibility verification (18+ only), and user profile management on the platform.
• Transaction processing: Deposits via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, TED, and withdrawal processing.
• Fraud and money laundering prevention: Monitoring suspicious transactions, KYC identity verification, and compliance with Law No. 9,613/1998 (Anti-Money Laundering).
• Customer support: Answering questions, resolving disputes, processing complaints, and communicating about your account.
• Platform improvement: Usage analysis to identify technical issues, improve the user experience, and develop new features.
• Marketing communications: Sending promotions, free bets, special odds notifications, and platform updates — only to users who have given their consent to receive them.
• Legal obligations: Compliance with legal and regulatory obligations, including responding to requests from competent Brazilian authorities.
• Responsible gambling: Monitoring usage patterns to identify potential signs of problematic behavior and offer appropriate support.

The LGPD requires that all personal data processing have a defined legal basis. 17bet processes your data in accordance with the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): Most of the processing is necessary to fulfill the contract entered into with you when you created your account — operating the platform, processing bets and financial transactions.
• Legal obligation (Art. 7, II): Processing necessary to comply with legal obligations, including KYC verification, anti-money laundering measures, and the protection of minors.
• Legitimate interest (Art. 7, IX): Fraud prevention, platform security, service improvement, and usage analysis, provided these do not override your rights and freedoms.
• Consent (Art. 7, I): Sending marketing communications and promotions. You may withdraw this consent at any time by emailing contato@17bet.click or through your account settings.

• Game providers: To operate casino games, 17bet shares with developers (such as Pragmatic Play, Evolution Gaming, and others) only the minimum data required — typically an anonymous session identifier, with no personally identifiable information.
• Payment processors: Financial data is shared with the financial institutions and payment platforms involved in your transactions (such as those responsible for processing Pix, PicPay, and Mercado Pago). Only the data necessary to complete the transaction is transmitted.
• Competent authorities: 17bet may share data with Brazilian authorities (Federal Police, Federal Revenue Service, COAF, Ministry of Finance, Secretaria de Prêmios e Apostas) when legally required by court order, administrative request, or legal obligation.
• Fraud prevention: In cases involving fraud or money laundering investigations, data may be shared with specialized risk analysis firms and competent authorities.

All third parties with whom 17bet shares data are contractually required to handle it with the same level of protection demanded by the LGPD and to use it solely for the purposes for which it was provided.

17bet implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures currently in place are:

• 256-bit SSL encryption: All communication between your device and 17bet's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by Brazilian banks and financial institutions.
• Secure storage: Data is stored on servers with physically restricted access, encrypted backups, and continuous intrusion monitoring.
• Access control: Only employees with a verified operational need have access to personal data, with multi-factor authentication required for all administrative access.
• Monitoring: Automated anomaly detection systems monitor access and transactions around the clock to identify suspicious activity.
• Regular audits: The security infrastructure undergoes penetration testing and independent audits on a regular basis.
• Team training: All employees with access to personal data receive regular training on data protection best practices and LGPD compliance.

Despite all measures in place, no system is 100% immune to breaches. Should a security incident affecting your data occur, 17bet will notify you and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.

17bet retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. The criteria used to determine retention periods are:

• Active account: While your account remains active, all data required to operate the platform is retained.
• Financial records: Financial transaction data (Pix deposits, withdrawals, betting history) is retained for a minimum of 5 years after the transaction, as required by Law No. 9,613/1998 and Brazilian financial sector regulations.
• After account closure: Basic identification data is retained for 5 years to meet legal obligations. After that period, it is anonymized or deleted.
• Consent withdrawn: Data processed solely on the basis of consent (such as marketing communications) is deleted immediately upon withdrawal, unless another legal basis exists to justify its retention.

17bet uses cookies and similar technologies to enhance the platform experience, ensure security, and analyze service performance. The types of cookies used are:

• Essential cookies: Required for basic platform operation — session authentication, security, and language preferences. These cannot be disabled.
• Analytical cookies: These collect information about how you use the platform (pages visited, session duration, errors encountered) to help us improve the service. They do not identify you individually.
• Functional cookies: They remember your usage preferences (such as display settings) to personalize your experience on future visits.
• Marketing cookies: Used to display relevant communications within the platform. Enabled only with your consent and can be disabled in your browser or account settings.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies may affect some platform features. When using 17bet on Android or iOS, cookies are managed by the browser installed on your device.

To ensure compliance with this policy, 17bet requires a valid CPF at registration and performs identity verification (KYC) before processing any withdrawal. The date of birth provided is verified against the CPF supplied using Receita Federal do Brasil databases.

If you suspect that someone under 18 has created an account on the platform, contact us immediately at contato@17bet.click. 17bet will take immediate action to close the account and delete any data collected, in accordance with Article 14 of the LGPD.

The LGPD grants you, as the personal data subject, a set of rights that 17bet is fully committed to upholding. See your rights and how to exercise them:

To exercise any of these rights, send an email to contato@17bet.click with the subject line "LGPD Request – [request type]". 17bet responds to all requests within 15 business days. Identity verification may be required before processing a request to ensure no data is disclosed to unauthorized third parties.

If you believe your rights have been violated, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for overseeing LGPD compliance in Brazil.

Some of the game and service providers used by 17bet may be located outside Brazil. When this occurs, your data is only transferred to other countries under the circumstances set out in Article 33 of the LGPD:

• For countries or international bodies that provide a level of personal data protection equivalent to that required by the LGPD;
• When the controller provides guarantees of compliance with the principles, rights, and obligations of the LGPD, such as standard contractual clauses;
• When necessary for the performance of a contract or pre-contractual steps taken at your request;
• When you provide specific consent to the transfer, after being informed in advance of its international nature.

17bet ensures that any international data transfer provides personal data with the same level of protection required by Brazilian law, through specific contractual clauses with all international partners.

In the event of a security incident resulting in unauthorized access, destruction, loss, alteration, or disclosure of personal data, 17bet will follow these procedures:

• Immediate response: Incident containment and impact assessment within the first hours after identification.
• ANPD notification: Notification to the National Data Protection Authority within the legal deadline established by the LGPD (generally 72 hours for high-risk incidents).
• Notification to data subjects: Direct notification to affected users whenever there is a significant risk or harm to their rights and freedoms, along with guidance on protective measures to take.
• Investigation: A full incident analysis to identify the root cause, scope of the breach, and required corrective measures.

17bet may periodically update this Privacy Policy to reflect changes in Brazilian legislation (including new ANPD regulations), the services offered, data processing practices, or security measures adopted.

Material changes that affect your rights will be communicated by email at least 15 days before they take effect. Minor changes, such as text corrections or clarifications that do not alter the substance of the policy, may be published without prior notice.

The date of the last update is always shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

17bet has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for receiving communications from data subjects and taking the necessary steps.

• DPO email: contato@17bet.click (subject: "DPO – Data Protection")
• Live chat: Available 24/7 on the platform for general privacy questions
• Response time: Up to 15 business days for all LGPD requests
• Language: Support exclusively in Brazilian Portuguese

If you are not satisfied with 17bet's response to your personal data request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) through the authority's official website.