Privacy Policy of 9nbt — Your Data in Good Hands

1. Overview

This Privacy Policy describes how the 9nbt (platform accessible at 9nbt.net) collects, uses, stores, shares and protects its users' personal data. This document was drafted in compliance with Brazil's General Personal Data Protection Law (Lei nº 13.709/2018 — LGPD) and reflects the principles of transparency, necessity and security that guide all platform operations.

By creating an account on 9nbt or using any feature of the platform — whether to bet on football, Brasileirão Série A, Copa do Brasil, Libertadores, MMA, volleyball, live casino or any other available service — you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described herein.

If you have any questions about this policy before signing up, please contact our support team via live chat or at suporte@9nbt.net before proceeding with registration.

2. Data Controller

The controller responsible for processing the personal data collected on the platform 9nbt is the entity that operates the 9nbt.net platform. To exercise your rights as a data subject or for any queries related to the handling of your personal information, please use the contact channels described in section 14 of this policy.

The 9nbt Data Protection Officer (DPO) can be contacted directly at suporte@9nbt.net with the subject line "LGPD Request — [your full name]" to ensure your request is routed to the right team promptly.

3. Data We Collect

3.1 Data You Provide Directly

By creating and using your account on the 9nbt, you provide us with the following information:

• Registration data: full name, date of birth, CPF, email address and mobile number;
• Address data: ZIP code, street address, number, complement, neighborhood, city and state — required for residence verification;
• Identity documents: images of national ID (RG), driver's license (CNH), or passport, requested during the identity verification (KYC) process;
• Financial data: Pix keys registered for withdrawals, credit/debit card details (processed through a secure payment gateway — full card data is never stored locally);
• Communications: messages sent to support via live chat or email.

3.2 Automatically Collected Data

While using the 9nbt platform, some data is collected automatically by the platform's systems:

• Access data: IP address, device type, operating system, browser used and version;
• Session data: pages visited, time spent, navigation sequence and access times;
• Betting data: complete history of sports bets and casino games — markets selected, amounts, outcomes, and timestamps for each transaction;
• Financial transaction data: deposit and withdrawal history, payment methods used (Pix, boleto, card, PicPay, Mercado Pago), and amounts;
• Cookies and similar technologies: as described in section 9 of this policy.

4. Purpose of Processing

The 9nbt uses the personal data collected for the following purposes, all of which are strictly necessary for the operation of the platform:

9nbt does not use users' personal data for targeted advertising to third parties, contact list sales, or any purpose not listed above.

5. Legal Basis for Processing (LGPD)

Every personal data processing operation carried out by the 9nbt has a corresponding legal basis under Article 7 of the LGPD:

• Contract performance (art. 7, V): processing required to create and maintain your account, handle bets, Pix deposits, and withdrawals;
• Compliance with a legal obligation (Art. 7, II): identity verification, financial transaction records, and information required by applicable gaming regulations;
• Legitimate interest (Art. 7, IX): fraud prevention, security analysis, detection of multiple accounts, and protection of platform integrity;
• Consent (Art. 7, I): for sending marketing communications and promotions by email or mobile, subject to explicit opt-in during registration or through account preferences.

6. Sharing Data with Third Parties

6.1 Operational Partners

The 9nbt shares personal data exclusively with partners that perform operational functions essential to running the platform. These partners are contractually required to handle data in accordance with LGPD guidelines and are prohibited from using it for their own purposes:

• Payment processors: to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago — only the data strictly necessary for each transaction;
• Casino game providers: to provide slots, live roulette, crash games, and other games — session data and account balance required to run the games;
• Identity verification services: to validate your CPF, documents, and address during the KYC process;
• Cloud infrastructure providers: for server and database hosting — with data processing agreements aligned with the LGPD.

6.2 Competent Authorities

9nbt may share data with government, regulatory, or law enforcement authorities where there is a legal obligation, court order, or legitimate request from a competent authority. In such cases, sharing is limited to the minimum necessary to comply with the legal requirement.

6.3 What We Never Do

9nbt never sells, rents, exchanges or transfers users' personal data to advertising companies, data brokers, other betting platforms or any third party for those third parties' own commercial purposes.

7. Data Retention

The 9nbt retains personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations:

• Active account data: retained for as long as the account is active and for the additional period required by gaming and financial regulations — generally 5 years after account closure;
• Financial transaction history: retained for a minimum of 5 years as required by AML/CFT regulations (Anti-Money Laundering and Counter-Terrorism Financing);
• Identity documents (KYC): retained for the period required by applicable regulations, not exceeding 5 years after account closure;
• Session data and access logs: retained for up to 12 months for security and incident investigation purposes;
• Support communications: retained for up to 2 years after a request is closed, for reference and future dispute resolution purposes.

Once the applicable retention periods expire, data is securely deleted or irreversibly anonymized.

8. Data Security

Protecting user information is an operational priority of 9nbt. The security measures we have in place include:

• 256-bit SSL/TLS Encryption across all communication between the user's browser or app and the platform's servers;
• Encryption at Rest for sensitive data stored in the database, including identity documents and financial information;
• Role-based access control — only staff with a legitimate operational need can access specific data, and all access is logged in auditable records;
• Two-factor authentication (2FA) available to all users in their account security settings;
• Continuous monitoring of unauthorized access attempts, anomalous usage patterns, and suspicious activity;
• Encrypted Backups with separate retention to ensure availability in the event of an incident.

8.1 Security Incidents

In the event of a security incident that may affect users' personal data — including data breaches, unauthorized access or improper destruction — 9nbt will notify the affected individuals and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with information about the nature of the incident, the data involved and the measures taken to mitigate its effects.

9. Cookies & Tracking Technologies

9.1 Types of Cookies Used

The 9nbt uses cookies and similar technologies for different purposes:

• Essential cookies: required to keep your session active, authenticate your login, and ensure the basic functionality of the platform. They cannot be disabled without affecting your ability to use the site;
• Analytics cookies: collect anonymous information about how users navigate the platform — which pages are visited most, how long users spend in each section, and where errors occur. Used to improve the overall experience. Data is aggregated and cannot be used to identify individual users;
• Preference cookies: store user preferences such as language, odds settings, and sports preferences so they do not need to be reconfigured on each visit.

9.2 Cookie Management

You can configure your browser to block or delete cookies at any time. Keep in mind that disabling essential cookies will prevent the platform from working properly — particularly login and bet processing. Analytics and preference cookies can be turned off without any functional impact on betting.

10. Minors

The platform 9nbt is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we identify or are notified that a minor has created an account, the account will be immediately closed, the data will be deleted in accordance with legal retention requirements, and any balance deposited with the user's own funds will be refunded.

If you are the guardian of a minor and suspect they may have created an account on 9nbt, please contact our support team immediately at suporte@9nbt.net so we can act quickly.

11. Your Rights as a Data Subject

The LGPD grants data subjects — in this case, you, a user of the 9nbt — a set of rights you can exercise at any time:

To exercise any of these rights, send a request to suporte@9nbt.net with the subject line "LGPD Request — [request type] — [your name]". Requests are processed within 15 calendar days of receipt. In cases of high complexity, this deadline may be extended by a further 15 days, with prior notice to the data subject.

12. International Data Transfers

Some operational partners of the 9nbt — such as cloud infrastructure providers and some casino game providers — may process data on servers located outside Brazil. In such cases, 9nbt ensures that international transfers comply with LGPD requirements, either through standard contractual clauses or by verifying that the destination country offers an adequate level of protection as assessed by the ANPD.

International data transfers never include commercial or marketing purposes. They are strictly limited to what is necessary for the operation of contracted services.

13. Changes to this Privacy Policy

The 9nbt may update this Privacy Policy to reflect changes in data processing practices, legal requirements, or improvements to the services offered. Material changes that affect data subjects' rights will be communicated by email at least 7 days before taking effect.

The current version of this Privacy Policy is always available on this page, with the date of the last update indicated at the top of the document. We recommend reviewing this document periodically, especially when you make changes to how you use the platform or to your privacy settings.

Continued use of the platform after an updated version of this policy has been published constitutes acceptance of the new practices described, provided you have been duly notified as outlined above.

14. Contact & Data Protection Officer (DPO)

For questions about this Privacy Policy, to exercise your rights as a data subject, or to report any concerns regarding the handling of your personal information at 9nbt, use the channels below:

• DPO email: suporte@9nbt.net — use the subject line "LGPD Request" for priority routing to the privacy team;
• Live chat: available directly on the 9nbt.net platform, 24 hours a day, 7 days a week — for general privacy inquiries;

If you are not satisfied with 9nbt's response to a request concerning your personal data, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing the LGPD in Brazil, at gov.br/anpd.