Alano3 Privacy Policy – Data Protection & LGPD

This Privacy Policy describes how the alano3, a Sports Betting and online casino platform accessible at alano3.best, collects, uses, stores, and protects the personal data of its users, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).

The alano3 is the controller of personal data collected on the platform. This means we are responsible for defining how and why your data is processed, and for ensuring that such processing occurs within the bounds of the law and in line with your expectations when you entrust us with your information.

When you create an account on alano3, make a deposit via Pix, or use any service on the platform, you confirm that you have read and understood this Privacy Policy. If you have any questions about any section, please contact our support team before proceeding.

The alano3 collects different categories of personal data depending on how you use the platform. Below is a clear description of what we collect and when:

The alano3 does not collect sensitive categories of personal data — such as health data, sexual orientation, religious beliefs, or political opinions — and has no intention of doing so. The data we collect is limited to what is strictly necessary to operate the platform and meet applicable legal obligations.

The alano3 uses your personal data for the following purposes:

• Create and manage your account: your registration data is required to identify you as a unique user and protect your access to the platform;
• Process deposits and withdrawals: financial information is used to securely process transactions via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago;
• Verify identity (KYC): documents are reviewed to confirm your identity and to meet legal anti-money laundering obligations;
• Provide customer support: support records allow us to track and resolve your requests efficiently;
• Personalize your experience: gameplay behavior data is used to suggest relevant promotions and improve the platform's interface;
• Ensure platform security: technical and behavioral data help detect fraud attempts, multi-account usage, and other violations of the Terms of Use;
• Fulfill legal obligations: alano3 may be required to share data with Brazilian regulatory or law enforcement authorities when legally mandated;
• Account communications: we send notifications about financial activity, security updates, and, with your consent, promotional communications.

The alano3 does not use your data for third-party advertising purposes, nor share it with external ad networks for the creation of advertising profiles.

The LGPD requires that all personal data processing have a legal basis. The alano3 processes your data based on the following legal grounds established by Law No. 13.709/2018:

• Contract performance (art. 7, V): processing is necessary to perform the contract you entered into when creating your account — that is, to allow us to provide the Sports Betting and online casino services you signed up for;
• Compliance with a legal obligation (art. 7, II): processing is necessary to comply with the legal obligations applicable to the betting sector, such as anti-money laundering rules and customer identification requirements (KYC);
• Legitimate interest (art. 7, IX): we use technical and behavioral data to detect fraud, ensure platform security, and improve the user experience — interests that do not override your rights and reasonable expectations;
• Consent (art. 7, I): for sending marketing communications and promotions, we request your explicit consent, which can be withdrawn at any time through your account dashboard or by email.

The alano3 does not sell or rent users' personal data to third parties. Data is only shared in the situations described below, always with appropriate contractual safeguards:

• Payment providers: to process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago, we share only the minimum necessary data with our contracted payment processors, all of whom are bound by contractual confidentiality obligations;
• Game providers: companies such as Evolution Gaming, Pragmatic Play, and Playtech receive session identifiers to process games correctly. They do not receive your full personal identity data;
• Identity verification services (KYC): specialized platforms for document verification may receive copies of submitted documents for analysis, under strict confidentiality agreements and restricted use terms;
• Competent Authorities: alano3 complies with legally grounded requests from Brazilian regulatory authorities, the Public Prosecutor's Office, the Federal Police, and other agencies when required by law or court order;
• Fraud and money laundering prevention: in cases of well-founded suspicion of unlawful activity, we may share information with the relevant regulatory authorities as required by law.

All service providers that receive data from alano3 alano3 are subject to data processing agreements with security and confidentiality obligations consistent with the LGPD.

The alano3 stores user data on servers protected by multiple layers of security. The main technical and organizational measures in place include:

• 256-bit SSL/TLS encryption on all communications between your device and the platform;
• Passwords stored exclusively as cryptographic hashes — never in plain text;
• Role-based access control (RBAC) — only staff with an operational need have access to user data;
• Continuous monitoring of access and unauthorized access attempts;
• Regular backups and disaster recovery plans tested on a periodic basis;
• Security audits conducted by both internal and external teams at alano3 alano3.

In the event of a security incident that may affect your data — such as a database breach — the alano3 will notify affected users and the National Data Protection Authority (ANPD) within the timeframes set by the LGPD, which is up to 2 business days after the incident is confirmed.

The alano3 uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. The types of cookies used are:

• Essential cookies: required for the platform to function — these include login session cookies, language preferences, and security tokens. They cannot be disabled without affecting the proper functioning of the site;
• Performance cookies: collect anonymous information about how users browse alano3 — pages visited, time spent, errors encountered. They help us identify issues and improve the platform;
• Functional cookies: remember your display preferences, such as odds view mode and favorite filters, so you don't have to reconfigure them every time you log in;
• Analytics cookies: used internally by alano3 to understand aggregate user behavior and improve the product. No personally identifiable information is shared with external advertising platforms.

You can manage your cookie preferences through your browser's settings panel. Blocking essential cookies may prevent the alano3 platform from functioning correctly. alano3, including login and financial transactions.

The alano3 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by Brazilian law. The general retention criteria are:

• Active account data: retained for the full duration of the contractual relationship — that is, for as long as your account remains active on alano3;
• Verification Data (KYC): retained for at least 5 years after account closure, in accordance with anti-money laundering regulations applicable to the sector;
• Financial transaction records: retained for at least 5 years for audit purposes and to meet tax and regulatory obligations;
• Security logs: retained for 12 months for incident investigation and fraud prevention purposes;
• Customer support records: retained for 2 years after the support case is closed;
• Marketing data: retained until consent is withdrawn; after that, deleted within 30 days.

Once retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. Requesting account deletion does not guarantee the immediate removal of data subject to mandatory legal retention periods.

The LGPD grants you, as the data subject, a set of rights that alano3 commits to fully upholding. They are:

To exercise any of these rights, please contact alano3 via live chat or send an email to contato@alano3.best with the subject line "LGPD Request". We will respond within the legal deadline of 15 business days. We may ask you to verify your identity before processing the request — this is a security measure to protect you.

The alano3 is a platform exclusively for adults. We do not accept registrations from individuals under 18 and do not knowingly collect personal data from minors.

If we identify that an account was created by a minor, we immediately close the account, cancel all balances, and delete the personal data collected. If you become aware that a minor is using the alano3 platform, alano3, contact our support team immediately.

Some of the technical service providers used by alano3 — such as live casino game providers and payment processing platforms — operate on infrastructure located outside Brazil. When this occurs, data transfers are carried out only to countries or organizations that offer a level of data protection equivalent to the LGPD, or under contracts containing specific data protection clauses in compliance with art. 33 of Law No. 13,709/2018.

The alano3 does not transfer data that could directly identify a user — such as CPF or identity documents — to international game providers. This data is stored in infrastructure controlled by alano3 in Brazil.

The alano3 may update this Privacy Policy periodically to reflect changes in legislation, our services, or our data processing practices. The most current version will always be available on this page, with the date of the last update shown at the top.

For changes that materially affect how we handle your data or that reduce your rights, we will send a notification to your registered email address at least 7 days before the new version takes effect.

Continued use of the alano3 alano3 after the effective date of a new version of this policy constitutes acceptance of the changes. If you disagree, you may close your account before that date.

For any questions, requests, or complaints related to this Privacy Policy or the processing of your personal data by alano3, please reach out through the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly within the platform — the fastest channel for urgent matters;
• General email: contato@alano3.best — we respond within 24 business hours for general inquiries;
• LGPD Requests: send an email to contato@alano3.best with the subject line "LGPD Request" — response within 15 business days as required by law;
• Support language: Brazilian Portuguese only.

The alano3 has appointed a Data Protection Officer (DPO) responsible for ensuring LGPD compliance and handling data subject requests. The DPO can be reached at the same email address using the subject line "DPO alano3".

Our privacy team is committed to responding to your requests promptly, clearly, and without unnecessary red tape — because we believe data transparency is a fundamental part of the trust between alano3 alano3 and every Brazilian player who uses the platform.