Net365 Privacy Policy — How We Protect Your Data

1. Data Controller

For the purposes of the LGPD, the controller of the personal data collected on the platform net365 is the operating company of the net365.best platform, with operations focused exclusively on the Brazilian market.

The data protection officer (DPO) of net365 can be reached by email at privacidade@net365.best or via the 24-hour support chat available on the platform. Privacy and personal data inquiries are answered within 15 business days, as required by the LGPD.

2. Data We Collect

The net365 collects personal data in the following situations and categories:

2.1 Data You Provide Directly

• Registration: full name, CPF, date of birth, email address, mobile number, and residential address.
• Identity verification: copy of a government-issued photo ID (RG, CNH, or passport), proof of address, and, where applicable, a selfie for biometric confirmation.
• Financial data: Pix key (CPF, email, or phone number), credit/debit card details processed in encrypted form by our payment partners, deposit and withdrawal history.
• Communications: content of messages exchanged with net365 support via live chat, email, or any other official channel.

2.2 Automatically collected data

• Login details: IP address, browser type and version, operating system, device used (mobile, tablet, or desktop), and date and time of access.
• Usage data: pages visited, session time, games accessed, bets placed, filters applied, and in-platform browsing history.
• Cookies and similar technologies: as described in section 8 of this Policy.
• Geolocation data: country and, where permitted by the device, approximate location — used solely to verify eligibility to access the service.

3. How We Use Your Data

The net365 uses collected personal data exclusively for the following purposes:

• Account creation and management: verify your identity, keep your profile up to date, and ensure secure access to the platform.
• Processing financial transactions: process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; process withdrawals via Pix to the account holder's registered key; maintain transaction history.
• Eligibility verification: confirm that the user is of legal age (18 or older), verify that the user resides in Brazil, and ensure compliance with responsible gambling rules.
• Fraud and money laundering prevention: monitor suspicious transaction patterns, fulfill Know Your Customer (KYC) obligations, and report suspicious activity to the relevant authorities when required by law.
• Customer support: answer inquiries, resolve complaints, and maintain support history for quality assurance and training purposes.
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and proactively reach out when necessary.
• Marketing communications: send emails and notifications about promotions, new games, and platform updates — only to users who have not opted out of such communications (opt-out available in any message or through the account dashboard).
• Platform improvement: analyze aggregated and anonymized usage data to improve the experience, fix technical issues, and develop new features.
• Compliance with legal obligations: comply with court orders, regulatory requirements, and applicable tax obligations in Brazil.

4. Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing operation have a specific legal basis. The net365 bases its data processing on the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): processing required to create and maintain your account, handle deposits and withdrawals via Pix and other methods, and provide the contracted betting and casino services.
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification and KYC, anti-money laundering, reporting to competent authorities, and tax compliance.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, responsible gambling monitoring, and service improvement — always with respect for your fundamental rights.
• Consent (art. 7, I): sending marketing communications and promotions. You may withdraw this consent at any time through the account dashboard or via the unsubscribe link in any email.
• Protection of life (art. 7, VII): when we identify risk situations related to problem gambling that may affect the user's health.

5. Data Sharing

The net365 does not sell, rent, or share your personal data with third parties for commercial purposes. Data sharing occurs only in the situations below, strictly necessary to operate the platform:

• Payment partners: Pix processors, credit/debit card gateways (Visa, Mastercard), PicPay, and Mercado Pago receive only the data necessary to process each transaction. No card data is stored on net365's servers.
• Game providers: companies such as Pragmatic Play, Evolution Gaming, and PG Soft receive an anonymous session identifier to process casino rounds — never your full personal data.
• Identity verification services: specialized KYC partners who process documents and conduct biometric verification, under confidentiality agreements and in compliance with the LGPD.
• Fraud prevention services: anti-fraud systems that analyze transaction patterns to protect your account and the platform.
• Authorities and regulatory bodies: when required by court order, regulation from the Banco Central do Brasil, Receita Federal, or other competent authorities — strictly limited to what is required by law.
• IT infrastructure services: hosting providers, cloud servers, and cybersecurity services that process data under confidentiality agreements and data processing agreements compatible with the LGPD.

Any partner that receives personal data from users of net365 is contractually required to process that data in compliance with the LGPD and to use it solely for the purpose for which it was shared.

6. Data Retention

The net365 retains personal data for as long as necessary to fulfill the purposes described in this Policy or to meet applicable legal obligations. The general retention criteria are:

• Active account data: while the account remains active on the platform, we retain all data necessary for the operation of the service.
• Closed account data: after account closure, identification data and financial history are retained for up to 5 years to meet tax and regulatory obligations, as required by applicable Brazilian law.
• Financial transaction data: deposit and withdrawal records are kept for a minimum of 5 years for audit purposes and to comply with anti-money laundering regulations.
• Support data: support history is kept for 2 years after the conversation is closed.
• Marketing data: retained while consent remains active. After opt-out, preference data is removed from sending lists immediately.
• Access logs: technical IP and access logs are retained for 6 months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).

Once the applicable retention period expires, data is securely deleted or anonymized so it can no longer be linked to a specific individual.

7. Data Security

The net365 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Measures in place include:

• 256-bit SSL/TLS encryption: all communications between your device and net365's servers are encrypted, including login data, financial transactions, and personal information.
• Two-Factor Authentication (2FA): available and recommended for all net365 users, especially before Pix withdrawals.
• Secure password storage: passwords are stored in hashed format with salt, making it impossible to recover the original password even in the event of unauthorized access to the database.
• Internal access controls: net365 employees only have access to the data required for their specific role, with audit logs of all access to sensitive data.
• Continuous monitoring: intrusion detection systems and 24-hour monitoring to identify and respond to unauthorized access attempts.
• Periodic security testing: audits and penetration tests carried out regularly by external specialists to identify and remediate vulnerabilities.

8. Cookies and Tracking Technologies

The net365 uses cookies and similar technologies to improve the browsing experience, ensure the platform functions correctly, and — with your consent — personalize content. See the types of cookies used below:

• Essential cookies: required for the platform's basic operation — authentication, session management, language preferences, and security. These cannot be disabled without compromising the use of the service.
• Performance and analytics cookies: collect aggregated, anonymized data on how users navigate the platform — which pages they visit, how long they spend in each section, and where they encounter difficulties. Used to improve the overall experience. Require consent.
• Functional cookies: remember your preferences on the platform — such as saved game filters and display settings. Require consent.
• Marketing cookies: used to measure the effectiveness of net365's own marketing campaigns. Not used for third-party advertising. Require consent.

You can manage your cookie preferences in the banner shown on your first visit, or at any time through your browser's privacy settings. Disabling essential cookies may affect how your account functions on the net365.

9. Minors

The services of net365 are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from anyone under 18.

If the net365 identify that data from a user under 18 has been collected — whether through a false age declaration at registration or for any other reason — the account will be closed immediately, the data will be deleted as quickly as possible, and any balances will be handled in accordance with the Terms & Conditions.

Parents or legal guardians who identify that a minor has used the platform should contact net365 via live chat or by email at privacidade@net365.best.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a personal data subject, a set of rights that net365 is committed to respecting and facilitating. See your rights and how to exercise them below:

To exercise any of these rights, please contact the data protection officer of the net365 by email at privacidade@net365.best or via live chat available 24/7. We respond within 15 business days, in accordance with the deadline established by the LGPD.

11. International Data Transfers

Some of the technology partners of net365 — such as cloud infrastructure providers and analytics services — may process data on servers located outside Brazil. When this occurs, net365 ensures that:

• Transfers are made only to countries or organizations that offer a level of data protection equivalent to that required by the LGPD.
• Adequate contractual safeguards are in place — such as standard data protection clauses — that require the recipient to process data in accordance with LGPD principles.
• The purpose of any transfer is limited to the provision of the specific contracted service — infrastructure, security, or performance analytics — and no data is used by the partner for their own purposes.

The net365 does not transfer sensitive financial data — such as Pix details or transaction history — to servers outside Brazil, except where strictly necessary to process transactions with duly certified international payment partners.

12. Changes to This Policy

The net365 may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or our privacy practices.

Material changes will be communicated at least 7 days in advance by email and/or platform notification, specifying what changed and when the new version takes effect. For changes that require new consent — such as using your data for a new purpose — we will explicitly request your authorization before the change comes into effect.

The date of the last update to this Policy is always shown at the top of the document. Previous versions can be requested from the DPO of net365 at privacidade@net365.best. Continued use of the platform after the effective date of non-material changes constitutes acceptance of the updated version.

13. Contact & DPO

For any questions, requests, or complaints related to this Privacy Policy or to the processing of your personal data by net365, please reach out through the channels below:

• Data Protection Officer (DPO): privacidade@net365.best
• General support: contato@net365.best
• Live Chat: available 24/7 on the platform for urgent matters or quick questions

Privacy inquiries answered within 15 business days. General support inquiries answered within 2 business days, with priority live chat assistance in under 2 minutes during peak hours.

All support provided by net365 is handled in Brazilian Portuguese by real people — there are no automated scripts answering privacy-related questions.