Brjogos2 Privacy Policy – LGPD Data Protection

1 Introduction

The brjogos2 is a Sports Betting and online casino platform operated for users residing in Brazil. This Privacy Policy describes how brjogos2 collects, processes, stores, and protects users' personal data, in full compliance with the provisions of the General Personal Data Protection Law — LGPD, Law No. 13.709/2018 and all other applicable regulations in Brazilian territory.

Privacy isn't something we relegate to the footer. At brjogos2, decisions about how we handle your data are made with the same care we put into every feature on the platform — because we understand that you're entrusting us with personal information, financial history, and usage habits. That trust isn't given freely: it's earned through transparency, accountability, and respect for what the law requires.

This Policy applies to all personal data processed by brjogos2, including data collected during registration, during use of the Sports Betting and casino platform, and during financial transactions made via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, or TED bank transfer.

2 Data Controller

The controller of the personal data processed under this Policy is the brjogos2, operator of the platform available at https://brjogos2.best. The controller is responsible for decisions regarding the purposes and means of processing the personal data collected on the platform.

To exercise any right under the LGPD, or to submit questions, complaints, or requests related to the processing of your personal data, please contact our Data Protection Officer — DPO — by email at suporte@brjogos2.best, using "Data Privacy – LGPD" as the subject line.

3 Data We Collect

Brjogos2 collects personal data at different points during your interaction with the platform. The main categories are listed below:

3.1 Registration data

• Full name and date of birth.
• CPF — Cadastro de Pessoas Físicas.
• Email address and mobile phone number.
• Full residential address including postal code (CEP).
• Government-issued ID — RG, CNH, or passport — when requested for account verification.

3.2 Financial data

• Pix key registered for withdrawals.
• Credit and debit card information processed by the payment gateway — brjogos2 does not store full card details on its own servers.
• History of deposits, withdrawals, and transactions made on the platform.

3.3 Platform usage data

• Sports betting history — sports, events, markets, and amounts wagered.
• Casino game history — titles played, sessions, bets, and results.
• Interactions with active bonuses and promotions.
• Preferences set in your account, such as deposit limits and notifications.

3.4 Technical data

• IP address and approximate geolocation.
• Device type, operating system, and browser version.
• Session data and access logs with timestamps.
• Cookie identifiers and similar technologies as described in Section 7.

4 How We Use Your Data

Personal data collected by brjogos2 is used exclusively for the purposes described below. We never use your data for purposes incompatible with those listed here without prior notice and, where required, renewed consent.

5 Legal Basis for Processing

All personal data processing carried out by brjogos2 has a specific legal basis under the LGPD. Below we outline the bases we apply for each primary purpose:

• Contract performance — for account creation, delivery of betting and casino services, payment processing, and essential account communications. Without this data, we cannot provide the service.
• Consent — for marketing communications, content personalization, and non-essential cookies. You may withdraw this consent at any time through your account settings or by contacting support.
• Compliance with a legal obligation — to comply with determinations from competent authorities, tax obligations, and regulations applicable to the operation of betting platforms in Brazil.
• Legitimate interest — for fraud prevention, platform security, and service improvement through aggregated data, provided these interests do not override your fundamental rights and freedoms.

6 Data Sharing

Brjogos2 does not sell, rent, or otherwise transfer your personal data to third parties for marketing or any other purpose not authorized by you. Sharing occurs only in the situations below, with partners bound by contractual data protection obligations consistent with this Policy and the LGPD:

6.1 Payment processing partners

Brjogos2's partner payment gateways receive only the data strictly necessary to process financial transactions — deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer. All payment partners comply with PCI-DSS standards and are institutions authorized by the Banco Central do Brasil.

6.2 Casino game providers

Game providers such as Pragmatic Play, Evolution Gaming, and others make their titles available to brjogos2 through secure APIs. Data sharing with these providers is limited to what is strictly necessary for the games to function — a session identifier and account balance — with no transmission of personally identifiable data such as name or CPF.

6.3 Infrastructure and security providers

Cloud hosting services, DDoS protection, fraud prevention, and security analysis may process users' technical data as part of platform operations. These providers act as data processors under the LGPD and are bound by contracts with specific data protection clauses.

6.4 Competent authorities

Brjogos2 may share data with judicial, law enforcement, tax, or regulatory authorities when required by law, court order, or official investigation — strictly within the scope of what has been requested and in compliance with all applicable legal safeguards.

7 Cookies and Similar Technologies

Brjogos2 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize the content you see. The types of cookies used are:

• Essential cookies — required for the platform's core functionality: session authentication, security, and language preferences. They cannot be disabled without impairing use of the service.
• Analytical cookies — collect aggregated and anonymized usage data to analyze platform traffic and identify areas for improvement. Enabled only with your consent.
• Personalization Cookies — store usage preferences such as favorite sports, display settings, and betting configurations. They improve your experience without collecting personally identifiable data.
• Security Cookies — used to detect suspicious behavior, unauthorized access attempts, and fraudulent activity in real time.

You can manage your cookie preferences in your browser settings or through the privacy panel available in your brjogos2 account. Disabling essential cookies may affect how the platform functions.

8 Data Security

Brjogos2 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or improper disclosure. The main security measures in place are:

• 256-bit SSL/TLS encryption across all communications between the browser or app and the platform's servers.
• Encryption at rest for sensitive data stored in our databases — especially financial data, identity documents, and verification information.
• Two-factor authentication available to all users and mandatory for withdrawal transactions above certain limits.
• Role-based access control — only staff members with a specific need can access users' personal data, and all access is recorded in auditable logs.
• Continuous security monitoring with intrusion detection systems and automatic alerts for anomalous activity.
• Regular vulnerability testing conducted by our internal team and independent external auditors.
• PCI-DSS Standard for processing credit and debit card transactions.

In the event of a security incident that may affect your personal data, brjogos2 will notify the National Data Protection Authority — ANPD — within the timeframe established by the LGPD, and will inform affected users by email, with details about the nature of the incident, the data involved, and the measures taken to mitigate its impact.

9 Data Retention and Deletion

Brjogos2 retains personal data for as long as necessary for the purposes described in this Policy or to meet legal obligations, whichever is longer. The general retention criteria are:

• Active account data — retained for the entire period the account is active and for up to 5 years after closure, to meet legal and tax obligations.
• Financial transaction history — retained for a minimum of 5 years from the transaction date, as required by the Financial Activities Control Council (COAF) and the Brazilian Federal Revenue Service.
• Security and access logs — retained for up to 12 months for security purposes, incident investigation, and fraud detection.
• Identity verification data — retained for the duration of the account and for the applicable legal period after closure.

Once the purposes and legal retention periods have been fulfilled, data is securely deleted or anonymized in a way that no longer allows identification of the data subject. You may request early deletion of data that is not required to meet legal obligations by contacting support.

10 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by brjogos2, a set of rights that may be exercised at any time. See below what those rights are and how to exercise them:

11 Minors

Brjogos2 services are intended exclusively for individuals who are 18 years of age or older. brjogos2 does not intentionally collect personal data from users under 18. If we identify that a registered user is a minor, the account will be immediately suspended and the data will be deleted in accordance with the LGPD and applicable minor protection regulations.

If you believe a minor may have created an account on brjogos2 or provided personal data to the platform, please notify support immediately at suporte@brjogos2.best. We treat these reports as the highest priority.

12 International Data Transfers

Part of the technical infrastructure used by brjogos2 may involve processing data on servers located outside Brazil — particularly in connection with cloud hosting services, casino game providers, and security tools.

When personal data is transferred to countries that do not offer a level of protection equivalent to the LGPD, brjogos2 puts appropriate contractual safeguards in place — such as standard data protection clauses approved by the ANPD or recognized international certifications — as required by Article 33 of the LGPD.

You may request information about international data transfers related to your account through the DPO contact channel indicated in Section 14 of this Policy.

13 Changes to This Privacy Policy

Brjogos2 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. When changes are significant, we will notify you by:

• Registered email address, with a minimum of 15 days' notice before the changes take effect.
• A prominent notice displayed on the platform upon your next login.
• Updated effective date at the top of this document.

Continued use of brjogos2 services after the new version of the Policy takes effect constitutes acceptance of the changes. If you do not agree with the updates, you may request account closure before the effective date — any available balance will be processed via Pix within 5 business days.

14 Contact & DPO

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject under the LGPD, please contact the brjogos2 Data Protection Officer — DPO:

• Email — suporte@brjogos2.best (subject line: "Data Privacy – LGPD")
• Live chat — available directly on the platform after login, 24 hours a day, 7 days a week.

The deadline for responding to data subject requests is up to 15 business days from the date the request is received, as provided under the LGPD. For urgent requests related to security incidents or unauthorized account access, our 24/7 live chat support takes priority.