88hot Privacy Policy — Your Data, Always Protected

The 88hot Entertainment Ltd. is the platform operator 88hot, available at 88hot.best, and acts as the controller of personal data processed under this Privacy Policy, as defined by the General Data Protection Law (LGPD — Law No. 13,709/2018).

This policy applies to all personal data collected through the 88hot.best platform and any mobile apps, emails, push notifications, or other communication channels operated by the 88hot. It covers registered users, non-registered visitors, and anyone who interacts with our Sports Betting, online casino, e-sports, and other services available on the platform.

The Data Protection Officer (DPO) of the 88hot is responsible for ensuring LGPD compliance and handling user requests related to the exercise of their rights. The DPO can be reached by email at privacidade@88hot.best.

The 88hot collects different categories of personal data depending on how you interact with the platform. We collect only the minimum necessary for each specific purpose — we never ask for information beyond what is strictly required to operate your account and ensure transaction security.

Data provided directly by you during registration:

• Full name as shown on official ID;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (zip code, street, number, neighborhood, city, state);
• Access password (stored exclusively in irreversible cryptographic hash format).

Data collected during platform use:

• Full Sports Betting history, casino game history, and financial transaction records;
• Deposit and withdrawal information — method used, amount, date, and status, but never full card details or a complete Pix key;
• IP address and approximate geolocation data;
• Device type, operating system, and browser;
• Pages visited, time spent browsing, and interactions within the platform;
• Support interactions via chat, email, or WhatsApp.

Data collected for identity verification (KYC):

• Copy of a government-issued photo ID (RG, CNH, or passport);
• Selfie with document for live identity validation;
• Up-to-date proof of address;
• Proof of the payment method used, where applicable.

Each piece of data collected by the 88hot has a specific purpose and a corresponding legal basis under the LGPD. We do not process data for purposes incompatible with those described in this policy without notifying you in advance and, where required, obtaining your consent.

The main purposes for data processing at 88hot are:

• Account operation: creating, managing, and maintaining your active account on the platform, including authentication, password recovery, and preference management — legal basis: contract performance;
• Bet and transaction processing: recording bets, calculating results, processing deposits via Pix, boleto, card, PicPay, and Mercado Pago, and handling withdrawals via Pix or TED — legal basis: contract performance;
• Identity verification (KYC): fulfill legal and regulatory obligations related to fraud prevention, anti-money laundering, and age verification — legal basis: legal obligation;
• Fraud prevention and security: detect irregular behavior and protect the integrity of the platform and its users — legal basis: legitimate interest;
• Customer support: responding to inquiries, resolving complaints, and improving the support experience — legal basis: contract performance and legitimate interest;
• Marketing communications: sending promotions, news, and personalized offers via email, SMS, or push notifications — legal basis: consent, with the option to opt out at any time;
• Platform improvement: analyze usage patterns, identify errors, and improve features based on aggregated and anonymized data — legal basis: legitimate interest;
• Regulatory compliance: fulfill applicable tax, legal, and regulatory obligations related to the operation of betting and gaming platforms in Brazil — legal basis: legal obligation.

The 88hot does not make automated decisions with significant impact on you without the possibility of human review. If any automated process results in an account restriction or withdrawal denial, you may request a review through support.

The 88hot does not sell your personal data to third parties under any circumstances. Data sharing only takes place in the situations described below, always with the goal of operating the platform's services securely and in compliance with the law.

Partners and service providers that may receive data in connection with 88hot's operations:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED transfers. These partners receive only the data strictly necessary for the transaction and operate under data processing agreements with confidentiality and security clauses;
• Identity verification providers (KYC): specialized partners in document verification and identity validation, used to meet regulatory obligations for fraud prevention;
• IT infrastructure providers: hosting services, databases, and content delivery networks that operate the platform's technical infrastructure;
• Analytics and monitoring tools: systems that collect anonymized or pseudonymized platform usage data for performance improvement and error detection purposes;
• Public authorities: when required by law, court order, or a competent regulatory authority in Brazil — including the National Data Protection Authority (ANPD), the Federal Revenue Service, and other oversight bodies.

All partners that receive personal data from the 88hot are contractually required to protect this information to the same security standards adopted by the platform and to use it solely for the authorized purposes.

The 88hot adopts robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Data security is not an add-on layer on the platform — it is a core part of its technical architecture from the ground up.

The main security measures implemented include:

• 256-bit SSL/TLS encryption on all connections between your device and the servers of 88hot;
• Encryption at rest for sensitive data stored in the database;
• User passwords are stored exclusively as irreversible cryptographic hashes — not even the 88hot team has access to your original password;
• Two-factor authentication (2FA) available and recommended for all users;
• Continuous monitoring of access and suspicious activity on the platform;
• Strict internal access control — 88hot staff only access personal data when strictly required for their role;
• Periodic security audits conducted by specialized teams.

The servers of 88hot are located in data centers with internationally recognized security certifications. In the event of international data transfers, the platform ensures that destination countries provide an adequate level of protection, or that specific contracts with standard data protection clauses are in place.

Despite all security efforts, no system is completely immune to breaches. In the event of a security incident that poses a real risk to data subjects' rights, the 88hot will notify affected users and the ANPD within the maximum timeframe established by the LGPD, with information about the nature of the incident and the steps taken to mitigate its effects.

The 88hot uses cookies and similar technologies to ensure the platform operates correctly, analyze usage behavior, and — with your consent — personalize your experience. This section explains which types of cookies are used and how you can manage them.

Types of cookies used by 88hot:

• Strictly necessary cookies: essential for the platform's basic operation — authentication, session security, language preferences, and the betting slip. They cannot be disabled without affecting platform usability;
• Performance and analytics cookies: collect anonymized data on how users navigate the platform — most-visited pages, load times, and technical errors. Used exclusively to improve 88hot's performance;
• Functionality cookies: remember preferences such as interface theme, selected sports filters, and notification settings to improve your experience when you return to the platform;
• Marketing cookies (optional): used to identify which 88hot promotions and communications are most relevant to you, based on your activity on the platform. Activated only with your explicit consent.

You can manage your cookie preferences at any time through the privacy settings panel in your account or via your browser settings. Disabling analytics and marketing cookies does not affect the functionality of betting, deposits, or withdrawals on the platform.

The 88hot does not use tracking pixels from external social networks or share behavioral data with third-party advertising platforms for off-platform retargeting.

The General Data Protection Law grants you, as a data subject, a set of rights that 88hot is obligated to respect and facilitate. These rights can be exercised at any time, free of charge, by emailing privacidade@88hot.best or through the platform's live chat.

• Right to confirmation and access: confirm whether 88hot processes your data and obtain a complete copy of all personal information stored about you;
• Right to correction: request the correction or update of inaccurate, incomplete, or outdated data;
• Right to anonymization, blocking, or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted;
• Right to data portability: receive your data in a structured, machine-readable format (JSON or CSV) for use with another service, where technically feasible;
• Right to erasure: request the deletion of data processed on the basis of consent — subject to the legally required retention exceptions;
• Right to information on data sharing: know which public or private entities 88hot has shared your data with;
• Right to withdraw consent: withdraw consent given for specific purposes — such as marketing communications — without affecting access to the platform's other services;
• Right to object: object to data processing carried out on the basis of legitimate interest, where there are well-founded grounds to do so;
• Right to review of automated decisions: request a human review of any automated decision that affects your interests, such as account blocking or withdrawal limits.

The response time of the 88hot for rights exercise requests is up to 15 business days, as established by the LGPD. In cases requiring more complex analysis, the deadline may be extended with prior notice to the requester and a corresponding explanation.

The services of the 88hot are intended exclusively for individuals who are at least 18 (eighteen) years of age. The platform does not knowingly collect personal data from minors and does not permit minors to register or use any platform feature.

If the 88hot identify, by any means, that personal data of a minor has been collected — whether through false information provided during registration or any other circumstance — the account is immediately closed, all data is deleted to the extent possible within legal retention obligations, and any real balance deposited is returned to the legal guardian upon submission of supporting documentation.

Legal guardians who identify that a minor has created an account on the 88hot should contact us immediately at suporte@88hot.best or via live chat. The platform team will prioritize these cases and act swiftly to close the account and refund any deposited amounts.

The 88hot retains personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum legal retention obligations established by Brazilian legislation applicable to the betting and financial services sectors.

The general retention periods applied by the 88hot are:

• Registration and identification data: retained for as long as the account is active and for up to 5 (five) years after closure, in accordance with anti-money laundering obligations and Brazilian Central Bank regulations;
• Financial transaction history: retained for up to 10 (ten) years to fulfill tax and regulatory obligations with the Receita Federal do Brasil;
• Support records and communications: retained for up to 2 (two) years for internal audit purposes and resolution of potential disputes;
• Marketing data and communication preferences: retained only while consent remains active — deleted within 30 days of revocation;
• Security logs: retained for up to 1 (one) year for security monitoring and incident investigation purposes.

Once retention periods have expired, data is securely deleted or anonymized so that it can no longer be linked to a specific individual. Secure deletion includes destruction of data on physical media and technical overwriting processes in digital environments.

When you request the deletion of your account and data, the 88hot will process the request in accordance with these minimum legal timeframes. Data whose retention is required by law cannot be deleted early, but it will be restricted to no use beyond fulfilling the specific legal obligation.

The 88hot may update this Privacy Policy periodically to reflect changes in legislation, platform operations, or data processing practices. Significant updates will be communicated in advance by email to the registered address and/or via a notification displayed to the user upon their next login to the platform.

The most recent version of this policy is always available on this page, with the last updated date displayed at the top of the document. Continued use of the services of the 88hot after an updated version takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date.

For questions, requests, or the exercise of rights related to this Privacy Policy, the official channels are:

• DPO / privacy email: privacidade@88hot.best — response time of up to 15 business days;
• General support: suporte@88hot.best — response time of up to 48 hours;
• Live chat: available 24 hours a day, 7 days a week, directly on the platform;
• VIP WhatsApp: available to users at the Gold and Diamond levels of the VIP Program.

If a complaint is not resolved through the internal channels of the 88hot, you may contact the National Data Protection Authority (ANPD), the body responsible for enforcing the LGPD in Brazil.