Privacy Policy of ua888 – Your Data Protected

This Privacy Policy applies to the ua888, available at https://ua888.world and on the mobile app for Android and iOS. For the purposes of General Personal Data Protection Law (Lei nº 13.709/2018 — LGPD), ua888 acts as the controller of personal data collected from users who access, register, and use the platform's services.

As the data controller, ua888 is responsible for defining the purposes and means of processing your personal data, ensuring the rights guaranteed under the LGPD, and maintaining the records of processing activities required by law. Processing operations take place in Brazil, with data stored on regularly audited, secured servers.

To exercise your rights or contact our Data Protection Officer (DPO), use the email privacidade@ua888.world or the live chat available 24 hours a day on the platform.

Ua888 collects personal data at different points during your interaction with the platform. Below, we detail the data categories and how they reach us.

Data provided directly by you:

• Registration: full name, CPF, date of birth, email address, and password. This information is required to create and operate an account on ua888.
• Identity verification (KYC): official photo ID (national ID, driver's license, or passport), proof of address, and in some cases a selfie for validation. Required before the first withdrawal.
• Payment information: Pix key, credit or debit card details (processed by PCI-DSS certified intermediaries), bank account details for TED. ua888 does not store full card data — this is handled directly by the payment processor.
• Support communication: conversation history via live chat and e-mail, including message content and timestamps.

Data collected automatically during use:

• Access data: IP address, browser type and version, operating system, device used (mobile, tablet, computer), and the date and time of each access.
• Behavioral data: pages visited, time spent, events clicked, bets placed, games accessed, amounts wagered, and transaction history.
• Location data: approximate location derived from IP address, used for geographic eligibility verification and fraud prevention. ua888 does not collect precise GPS location without explicit consent.
• Cookies and tracking technologies: detailed in section 8 of this policy.

Ua888 uses the data collected solely for the purposes described below. No data is used for any other purpose without prior notice and, where required, without the user's consent.

• Account operation: account creation, maintenance, and closure; login authentication; communication regarding account activity (confirmed bets, processed withdrawals, security updates).
• Payment processing: processing deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED; processing withdrawals via Pix and TED; anti-fraud verification on transactions.
• Identity verification and compliance: fulfillment of KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations required by Brazilian betting regulations and the national financial system.
• Responsible gambling: monitoring of behavioral patterns that may indicate problem gambling, as detailed on our Responsible Gambling; activation of user-configured limits; enforcement of requested self-exclusions.
• Customer support: responding to questions, complaints, and requests submitted via live chat or email; keeping a support history for continuous service improvement.
• Platform security: fraud detection and prevention, multiple account usage, bonus abuse, and unauthorized access; IP address verification to confirm geographic eligibility.
• Product improvement: aggregated and anonymized analysis of usage behavior to identify usability issues, prioritize feature improvements, and personalize the in-platform experience.
• Marketing communications: sending promotions, boosted odds notifications, product updates, and seasonal campaigns — only to users who have not opted out. You can unsubscribe at any time through your account settings or via the unsubscribe link included in every email.

All personal data processing carried out by ua888 is based on at least one of the legal grounds set out in Article 7 of the LGPD. Below, we outline the legal bases applied to each primary purpose:

• Contract performance: data required to create and operate an account, process payments, and settle bets is processed on the basis of contract performance between the user and ua888 (Art. 7, V of the LGPD).
• Legal obligation: data processed to meet KYC, AML, anti-money laundering, and regulatory reporting requirements is based on a legal obligation (Art. 7, II of the LGPD).
• Legitimate interest: behavioral data used for platform security, fraud prevention, and product improvement is processed on the basis of ua888's legitimate interest, provided it does not override the rights and freedoms of the user (Art. 7, IX of the LGPD).
• Consent: marketing communications and the use of non-essential cookies are based on user consent, which may be withdrawn at any time (Art. 7, I of the LGPD).

Ua888 does not sell, rent, or trade your personal data with third parties for advertising or commercial purposes. Data sharing occurs only in the situations described below, all of which are necessary for the platform's operation or required by law.

Operational partners (data processors): ua888 shares data with contracted service providers that operate specific parts of the platform, always under agreements requiring LGPD compliance and prohibiting use of the data for any other purpose:

• Payment processors: Pix, credit and debit card, PicPay, Mercado Pago, and TED intermediaries receive the data required to process each transaction (e.g., Pix key, amount, account holder's CPF). All are certified under the applicable financial security standards in Brazil.
• Identity verification providers: partners specialized in document validation and KYC/AML analysis receive a copy of your document and registration data during the verification process.
• Game providers: live casino and Crash Games providers receive a session identifier and the minimum data required to run the round. We do not share your full name or CPF with game providers.
• IT infrastructure: hosting providers, cloud storage, and security services that process data as part of the platform's server operations.

Authorities and legal requirements: ua888 may share data with public authorities, regulatory bodies, the Public Prosecutor's Office, or the Judiciary when required by law, court order, or official investigation. In such cases, we share only the data strictly necessary to fulfill the request.

International transfers: some technology and infrastructure providers used by ua888 may be located outside Brazil. In such cases, ua888 ensures that international data transfers comply with LGPD requirements through appropriate contractual clauses or by verifying that the destination country offers a level of protection equivalent to Brazilian law.

Personal data collected by ua888 is stored on servers with physical and logical security controls, located primarily in Brazil or in countries with equivalent data protection legislation.

Retention periods vary depending on the data category and the purpose of processing:

• Registration and identity verification data: retained for the duration of the account and for up to 5 years after account closure, in accordance with regulatory compliance and anti-money laundering requirements.
• Transaction history (deposits, withdrawals, bets): retained for 5 years after each transaction, in compliance with the tax and audit obligations set out under Brazilian law.
• Customer support history: maintained by 2 years after the ticket is closed, for quality assurance and dispute resolution purposes.
• Access data and security logs: retained for 6 months, a period sufficient for investigating security incidents.
• Marketing data (communication preferences): retained for as long as the account remains active or until the user withdraws consent.

Once the applicable retention period expires, data is securely deleted or anonymized in a way that makes it impossible to identify the data subject. Anonymization ensures the data cannot be linked back to the user even when combined with other information.

Ua888 implements technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, and improper disclosure. Key safeguards include:

• SSL/TLS Encryption: all traffic between your device and ua888 servers is encrypted. HTTPS is active on every page and on the mobile app API.
• Password encryption: user passwords are never stored in plain text. They are processed using modern cryptographic hash functions with an individual salt per user, making them unrecoverable even in the event of unauthorized database access.
• Internal access controls: only employees and systems with a legitimate business need have access to personal data, in accordance with the principle of least privilege. Access is logged and audited.
• Threat monitoring and detection: real-time monitoring systems detect suspicious access patterns, intrusion attempts, and anomalies in account behavior.
• Two-factor authentication (2FA): available as an option for all users in account settings. Strongly recommended, especially for accounts with a high volume of transactions.
• Security testing: ua888 conducts periodic vulnerability assessments and penetration tests to identify and fix weaknesses before they can be exploited.

Ua888 uses cookies and similar technologies (such as pixels and local browser storage) to enhance the platform experience, keep sessions active, and analyze site performance. Below, we detail the categories of cookies used.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent login and betting from working correctly. ua888 does not use third-party behavioral advertising cookies and does not integrate external ad-tracking networks.

The LGPD grants you, as the data subject whose information is processed by ua888, a robust set of rights. See what you can request and how to exercise each right.

Ua888 services are intended exclusively for individuals aged 18 years of age or older. ua888 does not intentionally collect personal data from minors.

If we become aware that a user under the age of 18 has created an account — whether through a false date of birth declaration or by any other means — the account will be immediately closed, the personal data will be deleted, and any available balance will be returned to the payment method used for the deposit, following ownership verification.

Parents or legal guardians who become aware that a minor under 18 has created an account on ua888 should immediately contact support via live chat or by email at privacidade@ua888.world. The matter will be handled as a priority.

The ua888 platform may contain links to third-party services, such as game providers or support tools. This Privacy Policy applies exclusively to the processing of data carried out by ua888 within its own systems.

Ua888 is not responsible for the privacy practices of third parties whose services or websites are accessed through the platform. We recommend reading the privacy policy of any external service before providing your personal data to it.

Ua888 may update this Privacy Policy periodically to reflect changes in the law, in our data processing practices, or in new platform features. Users will be notified of any significant changes by e-mail and by notice on the platform at least 7 days in advance before taking effect.

The current version of this Policy is always available on this page, with the date of the last update indicated at the top of the document. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy.

If you do not agree with the changes, you may close your account before the effective date. Any available balance will be returned as usual, as described in the Terms and Conditions.

Ua888 has appointed a Data Protection Officer (DPO) as required by the LGPD for all personal data processing operations at scale. The DPO is the point of contact between ua888, data subjects, and the National Data Protection Authority (ANPD).

To contact the DPO or exercise any right provided under the LGPD, use the channels below:

• Email (DPO / Privacy): privacidade@ua888.world — subject: "LGPD Rights – [full name] – [CPF]". Response time: up to 15 business days.
• Email (General Support): suporte@ua888.world — for questions about the platform, payments, and betting. Response time: up to 24 hours.
• Live chat: available on the ua888 website and app, 24 hours a day, with a human agent in Portuguese. For simpler LGPD rights requests, the chat can start the process — however, formal requests must be submitted by email for proper record-keeping.

If you believe your rights have not been properly addressed by ua888, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.