F333 Privacy Policy — Your Data, Truly Protected

The f333 is the controller of personal data collected through the f333.cash website and all services offered on the platform, including Sports Betting, Live Casino, slots, crash games, and poker. As the controller, f333 is responsible for determining the purposes and means of processing your personal data.

This Privacy Policy applies to all registered users and visitors of the platform f333. By creating an account or accessing the site, you acknowledge that you have read and understood this policy.

For questions related to privacy, data protection, or to exercise any of your rights as a data subject, please contact f333 by email at suporte@f333.cash. Our data protection team responds within 15 business days, in line with the deadline established by the LGPD.

The f333 collects only the data necessary to deliver its services securely, meet legal obligations, and provide the best possible experience for Brazilian players. Below are the types of data collected and how they are obtained:

2.1 Data provided directly by you

• Registration data: full name, CPF, date of birth, email address, mobile number, and password
• Identity verification data: National ID (RG), driver's license (CNH), passport, or other official photo ID; proof of address; selfie with document when requested
• Financial data: Pix key, credit/debit card data (tokenized only — we do not store your full card number), bank account details for wire transfers
• Support communications: chat history, email exchanges, and support records

2.2 Automatically collected data

• Browsing data: IP address, browser type and version, operating system, pages visited, time spent, and traffic source
• Device data: device identifier, phone model, screen resolution
• Game session data: betting history, games accessed, deposits and withdrawals made, balances and transactions
• Cookies and similar technologies: detailed in Section 8 of this policy

The personal data collected by f333 are used solely for the purposes described below. No data is used for any other purpose without prior notice and, where required, renewed consent from the data subject.

All personal data processing carried out by f333 is grounded in at least one of the legal bases set out in Article 7 of the General Data Protection Law (LGPD). The applicable bases for each purpose are described in the table in Section 3. In summary:

• Contract performance: processing required to provide the services you signed up for when creating your account — without this data, the platform cannot operate
• Legal obligation: data we are required to process in order to comply with Brazilian legal obligations, including Central Bank regulations, anti-money laundering rules, and tax requirements
• Consent: used exclusively for marketing communications and promotions. You can withdraw this consent at any time in your account settings or by emailing support
• Legitimate interest: platform usage analysis to identify improvements, detect technical issues, and enhance the experience — without compromising your privacy or rights

The f333 does not sell, rent, or trade its users' personal data. Data sharing with third parties occurs only in the situations listed below, all with a legitimate basis and appropriate security controls:

5.1 Essential operational partners

• Payment gateways: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED. These partners receive only the minimum data required for each transaction and operate under confidentiality agreements
• Licensed game providers: such as Evolution Gaming, Pragmatic Play, PG Soft, and others — receive session identifiers to record game results, but do not have access to full financial data or personal documents
• Identity verification services (KYC): to verify document authenticity and confirm legal age, where applicable
• IT infrastructure providers: servers, cloud services, and cybersecurity, all operating under data processing agreements compliant with the LGPD

5.2 Authorities and legal obligations

The f333 may share data with government, regulatory, or judicial authorities when required by legal, judicial, or administrative order. Examples include investigations into money laundering, financial fraud, or minor protection. In such cases, disclosure is limited to what is strictly necessary and required by law.

The f333 applies strict technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. The key safeguards include:

• 256-bit SSL/TLS encryption across all communications between your device and the servers of f333
• Tokenized financial data: card numbers are never stored in plain text — we use tokenization through PCI-DSS certified gateways
• Role-based access control: only staff members with a verified need to access specific data are granted that permission, with a full audit trail of all access
• Continuous monitoring: automated systems detect abnormal access patterns and alert the security team in real time
• Encrypted backups: data backups are stored in separate locations and protected with equivalent encryption
• Penetration testing: security audits conducted periodically by independent specialists

In the event of a security incident that may affect your personal data, the f333 will notify the National Data Protection Authority (ANPD) and the affected data subjects within the deadlines established by the LGPD.

The f333 retains your data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods established by Brazilian law.

7.1 Applicable retention periods

• Active account data: retained for as long as the account is active and for up to 5 years after closure, in accordance with financial sector regulatory requirements
• Financial transaction records: minimum of 5 years, in accordance with the Central Bank Resolution and anti-money laundering legislation
• Game records: minimum of 2 years for audit and dispute resolution purposes
• Support communications: 2 years after account closure
• Marketing data (consent): until consent is withdrawn

7.2 Data deletion

When you close your account with f333, you may request the deletion of your personal data. Deletion will be carried out within the legally established timeframes, respecting any mandatory minimum retention periods. Data that must be kept due to a legal obligation will be anonymized or securely archived.

Browsing data collected via analytics cookies is retained for a maximum of 13 months. Security logs are kept for 12 months.

The f333 uses cookies and similar technologies to ensure the platform works properly, understand how players interact with the site, and deliver a personalized experience. Below are the types of cookies used:

8.1 Essential cookies

Required for the platform's basic functionality — these include login session cookies, language preferences, and security settings. They cannot be disabled, as the platform cannot function without them.

8.2 Analytical cookies

Collect information about how you use the f333 — which pages you visit, how long you stay, and where you came from. The data is aggregated and anonymized. These cookies help us identify what is working well and what needs improvement. You can decline these cookies in your browser settings.

8.3 Performance cookies

Used to monitor platform technical performance — load times, errors, and service availability. Purely technical data with no personal identification.

8.4 How to manage cookies

You can manage and delete cookies through your browser settings (Chrome, Firefox, Safari, Edge). Please note that disabling essential cookies may affect platform functionality, including access to your account.

The LGPD grants you, as the data subject, a set of rights that f333 is fully committed to upholding. You may exercise any of these rights by submitting a request to suporte@f333.cash with the subject line "LGPD Rights — [your name]". We respond within 15 business days.

• Right of access: request a copy of all personal data that f333 holds about you
• Right to rectification: request the correction of inaccurate, incomplete, or outdated data
• Right to erasure: request the deletion of your data when processing is based on consent or when there is no longer a legal basis for retaining it
• Right to data portability: receive your data in a structured, interoperable format for transfer to another controller
• Right to withdraw consent: withdraw any previously given consent, without affecting the lawfulness of processing carried out before the withdrawal
• Right to information: be informed about which entities your data is shared with
• Right to object: object to processing carried out on the basis of legitimate interest, if a justified reason exists
• Right to review automated decisions: request human review of decisions made solely by automated systems that affect your interests

The services of f333 are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from anyone under 18.

During registration, the user confirms they are at least 18 years old. The f333 performs additional age verification checks when necessary and may request supporting documentation at any time.

If the f333 identifies that a minor's data was inadvertently collected, the account will be closed immediately and the data deleted as quickly as possible, subject only to legally mandated retention periods.

If you believe a minor has used the platform, please contact the f333 via email at suporte@f333.cash. We handle these matters with the highest priority.

Some of the service providers used by f333 — such as licensed international game providers — may process data on servers located outside Brazil. In such cases, the f333 guarantees that:

• Transfers are carried out only to countries or organizations that provide a level of personal data protection adequate or equivalent to that of the LGPD
• Specific data processing agreements are in place with each international vendor, including protective clauses compatible with Brazilian law
• Data transferred is limited to the minimum necessary for the specific service being provided

The f333 does not transfer data to jurisdictions that do not provide adequate protection guarantees, as assessed on a regular basis by the platform's privacy team.

The f333 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. The "last updated" date at the top of this page indicates the current version.

If significant changes are made — especially those affecting your rights as a data subject or altering the purposes of data processing — the f333 will notify registered users by email at least 7 days before the new terms take effect.

We recommend you check this page periodically. Continued use of the platform after changes are published constitutes acceptance of the new terms, provided no modifications require fresh explicit consent.

For any questions regarding this Privacy Policy, the processing of your personal data, or to exercise your rights as a data subject, please contact f333:

• General email: suporte@f333.cash
• Recommended subject line for privacy inquiries: "LGPD Rights — [your full name]"
• Response time: up to 15 business days for requests related to LGPD rights
• Live chat: available 24/7 directly on the platform for general privacy questions

If you are not satisfied with the response from f333 to a request relating to your personal data, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided in Article 18, Paragraph 1 of the LGPD.

See also our Frequently Asked Questions for quick answers about how f333 handles day-to-day privacy matters.