Privacy Policy of 234t — LGPD Data Protection

1. Introduction

The 234t is a Sports Betting and online casino platform designed exclusively for the Brazilian market, available at 234t.best. Respecting our users' privacy is a core commitment of our operation — not merely a legal obligation, but a genuine value of the platform.

This Privacy Policy was drafted in accordance with the General Data Protection Law (LGPD — Lei nº 13.709/2018) and other applicable Brazilian regulations. It applies to all personal data processed by the 234t in the context of providing its services: account registration, Sports Betting on the Brasileirão, Copa do Brasil, MMA, UFC, and other competitions, casino games, slots, crash games, VIP Program, and deposits and withdrawals via Pix, boleto, card, and other methods.

If you have any questions about this policy, please contact our Data Protection Officer (DPO) at suporte@234t.best before using our services.

2. Personal Data Collected

2.1 Data provided directly by you

At the time of registration and during use of the platform, the 234t collects the following information:

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address;
• Identity documents (national ID, driver's license, passport) requested during the KYC verification process;
• Bank details for withdrawals (Pix key, branch and account number for TED).

2.2 Data automatically generated by platform usage

In addition to data provided directly, the 234t automatically logs technical and usage information:

• IP address and approximate IP-based location;
• Browser type and version;
• Operating system and device model (mobile or desktop);
• Pages visited, session duration, and clicks within the platform;
• Full history of bets, gameplay, deposits, and withdrawals;
• Login records and access attempt logs.

3. Purposes of Data Processing

The personal data collected by the 234t are used exclusively for the following purposes:

4. Legal Bases for Processing

The 234t processes personal data on the basis of the following legal grounds provided for under the LGPD:

• Contract performance — processing is necessary to create and maintain your account, handle bets, deposits and withdrawals, and deliver the services you signed up for;
• Compliance with a legal or regulatory obligation — identity verification (KYC), anti-money laundering compliance, and reporting to the relevant authorities when required by law;
• Legitimate interest — fraud prevention, platform security, feature improvements, and communications about relevant service updates;
• Consent — sending marketing communications and promotions, which can be revoked at any time through your account settings or by contacting 234t.

5. Data Sharing

5.1 Who 234t may share your data with

The 234t does not sell personal data. Sharing only takes place in the situations described below:

• Game providers — studios such as Pragmatic Play and PG Soft receive anonymous session identifiers to operate the games, with no access to personally identifiable user data;
• Payment processors — Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago partners receive only the data strictly necessary to process each transaction, under confidentiality agreements and in compliance with the LGPD;
• KYC service providers — identity verification platforms that support the document confirmation process, operating under contract with data protection obligations equivalent to those of the 234t;
• Competent authorities — when required by Brazilian law, court order, or request from a competent authority, including the Banco Central do Brasil, Receita Federal, or law enforcement agencies acting under a valid warrant.

5.2 International data transfers

If data is transferred for processing on servers located outside Brazil, the 234t will ensure that the recipient country or organization provides a level of data protection equivalent to that required under the LGPD, as determined by the National Data Protection Authority (ANPD).

6. Payment Data

The 234t accepts exclusively Brazilian payment methods, with all transactions processed in BRL (R$). Available methods include Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED bank transfers via Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian banks.

6.1 Payment data protection

Credit and debit card data is processed by partners certified to the PCI-DSS (Payment Card Industry Data Security Standard). This data is never stored directly on 234t — transmitted encrypted directly to the payment processor. For Pix and TED transactions, only the Pix key or bank details provided by the account holder are used to process withdrawals.

6.2 Transaction history

Your complete deposit and withdrawal history is available in your account dashboard on the 234t. Transaction records are retained for the minimum period required by Brazilian tax and anti-money laundering legislation — generally five years from the date of the transaction.

7. Cookies and Tracking Technologies

7.1 What cookies are and how 234t uses them

Cookies are small text files stored in your browser to recognize your session and preferences and ensure the platform functions properly. The 234t uses the following types of cookies:

• Essential cookies — required for the platform's basic functionality, such as keeping your session active after login. They cannot be disabled without affecting your ability to use the platform;
• Performance cookies — collect anonymous information about how the platform is used (most visited pages, session duration, errors) to help improve the user experience;
• Preference cookies — store settings such as language and display preferences so you don't have to reconfigure them on every visit;
• Security cookies — they identify suspicious sessions and help prevent fraud and unauthorized access to your account.

7.2 Cookie Management

You can configure your browser to block or alert you about cookies. However, disabling essential cookies may prevent the 234t, including login and bet processing. Cookie settings are available in all major browsers — Chrome, Safari, Firefox, and Edge.

8. Data Retention

The 234t retains users' personal data for as long as necessary to fulfill the purposes described in this policy or to meet applicable legal obligations. The general retention criteria are:

• Active account data — retained for the full duration of the active account registration with 234t;
• Betting and transaction history — retained for a minimum of 5 years following the last transaction, in accordance with tax and anti-money laundering requirements;
• Verification documents (KYC) — kept for a minimum of 5 years after account closure;
• Log and security records — retained for up to 12 months for security investigation and incident response purposes;
• Data from a closed account upon request — after closure, data is anonymized or deleted within 60 days, except for data that must be retained to comply with a legal obligation.

Once the applicable retention period has elapsed, data is securely deleted or anonymized in a way that no longer allows the identification of the data subject.

9. Your Rights as a Data Subject

The LGPD grants you, as a data subject, the following rights, which 234t is committed to upholding:

10. Security Measures

The 234t implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. Key measures include:

• TLS 1.3 encryption — all communication between your device and the servers of 234t is encrypted in transit;
• Encryption at rest — sensitive data stored in the databases of the 234t are encrypted using modern algorithms;
• Password hashing — no password is stored in plain text. We use salted hashing algorithms to protect credentials even in adverse scenarios;
• Two-factor authentication (2FA) — available to all users of 234t as an additional layer of protection when accessing your account;
• Access monitoring — automated systems monitor suspicious access attempts and block anomalous activity in real time;
• Internal access controls — employees of the 234t access personal data only when necessary for their role, with audit logs maintained for all access events;
• Regular security testing — the platform undergoes regular penetration testing and security audits carried out by specialized teams.

Despite all measures in place, no system is entirely immune to breaches. In the event of a security incident, the 234t will follow the breach notification protocols established by the LGPD, informing affected data subjects and the ANPD within the legally required timeframes.

11. Minors

The services of the 234t — Sports Betting, Live Casino, slots, crash games, and the VIP Program — are intended exclusively for individuals aged 18 or older. The platform does not knowingly collect personal data from anyone under 18.

At the time of registration, all users of the 234t declare that they are 18 years of age or older. The mandatory identity verification (KYC) required prior to withdrawals confirms legal age through an official document containing the date of birth. Should 234t identifies that a minor under 18 has created an account, that account will be immediately closed, the data will be deleted as soon as possible, and no pending financial transactions will be processed.

If you suspect that a minor has created an account with 234t, please contact support immediately at suporte@234t.best so we can take the appropriate action.

12. Changes to This Policy

The 234t may update this Privacy Policy periodically to reflect changes in data processing practices, new services offered, updates to Brazilian legislation, or ANPD determinations. Significant changes that affect data subjects' rights will be communicated via the registered email address at least 15 days before the effective date.

The update date at the top of this document always reflects the current version. We recommend reviewing this policy periodically to stay informed about how the 234t protects your data. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

Minor changes — such as language corrections or section reorganization that do not affect data subjects' rights — may be made without prior specific notice and will be reflected in the document's update date.

13. Contact the Data Protection Officer (DPO)

The 234t has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the primary point of contact for all matters related to the processing of personal data on the platform.

To exercise your rights as a data subject, file a complaint, request clarification on this policy, or report any suspected misuse of your data, please reach us through the following channels:

• DPO email: suporte@234t.best (subject: "Privacy — LGPD")
• Live chat — available 24 hours a day directly on the platform after logging in

The response deadline for LGPD-related requests is up to 15 business days. For complaints unresolved by the DPO of 234t, you may appeal to the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.