Customer Privacy Notice

Who we are

Ventmear Brasil SA is a member company of the Entain Group and this Policy explains for what purposes your personal data will be used for. Where we use the term “we” or “us”, this includes the entity and Brands (https://entaingroup.com/about/business-overview/our-brands/) and other companies within the Entain group. Entain is a global business, and for operational purposes other entities within our Group will have access to your data and may also share joint controllership of your information. In these cases, we ensure that your rights are enforceable through the Controller mentioned below. Please see the section on Your Rights for further information.

Territory

Controller Name

CNPJ

Details

Brazil

Ventmear Brasil SA

52.868.380/0001-84

Avenida DRA Ruth Cardosa, 9501 Andar 17 Sala 1746, Pinheiros, Sao Paulo, 05425-070, Brazil

We are committed to protecting your personal data when you use our services through our website and mobile app, and we take the security of your information very seriously. We have strict security measures in place to protect your personal data, which includes robust security procedures that are regularly tested and reviewed. If you have any questions about the way we treat or protect your personal data, or if you would like to contact us about any aspect of this Policy, our contact details are available at the end of this Policy.

This Privacy Policy should be read in conjunction with our Cookie Notice, in addition to the Terms of Use and Terms and Conditions of our website and mobile application.

The Information We Collect About You

We will collect personal data about you from the following sources:

  • When you register to create an account with us;
  • When you visit our website, apps, or our social media pages;
  • Through surveys and questionnaires that you fill out;
  • When you communicate with us (by email, post, telephone, chat, or social media);
  • When we perform analysis of your interaction with us;
  • From other companies in our group for internal reasons, primarily for business and operational purposes;
  • From public sources of information, such as public records or social media posts;
  • From cookies and tracking devices on your devices;
  • Other information from third-party databases to comply with our legal and regulatory obligations;
  • From vendors and providers of online services, such as financial services, and from databases legally acquired from other companies.

For what purposes we use your personal data

Purposes

Personal data

Additional Information

Provision of products or provision of services
  • Your full name, home address, email address, phone number, or other contact information you provide to us.
  • Your date of birth and gender.
  • Login information and username.
  • Information about gambling or betting transactions and payment methods.

To perform our obligations under the contract entered into and to provide you with the information, products, and services you request from us, including information about changes to our website, services, or our terms, conditions, and policies.

Customer Service

  • Full name, username, identification document.
  • Contact Information.
  • Communications, call recordings, and notes related to your account.
  • Information about gambling or betting transactions and payment methods.
  • IP address, MAC address, device type, apps, geolocation and tracking data.

To provide products and customer services, respond to your inquiries, or address your complaints or concerns.

Compliance with our legal and regulatory obligations
  • Full name, username, home address, contact information, identification document and other information provided during the registration process.
  • Games played, bets placed, winnings and losses, deposits and withdrawals, payment methods.
  • Online game images and screenshots.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • Images, selfies, and biometric data.

To comply with our legal and regulatory obligations, which includes (but is not limited to) the provisions of Law 14,790/2023, ordinances issued by the Secretariat of Prizes and Betting of the Ministry of Finance, anti-money laundering, fraud and terrorist financing laws.

This may include electronic methods to identify you for purposes of complying with applicable law, such as through the use of cookies.

Identity checks, age control, and responsible gambling
  • Name, user name, date of birth, gender, contact information, identification document and other information provided during the registration process.
  • Login details, websites and pages visited.
  • Transaction and Payment Method Information.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • Communication histories and account notes, call recordings.
  • Information about customer well-being.
  • Source of income and credit history checks.
  • Images, selfies, and biometric data.

To verify or validate your identity, age, and protect your information.

This may include electronic methods to identify you, such as through the use of cookies.

To comply with our commitments related to Responsible Gaming (such as registering self-exclusions and where we believe a customer has a gambling problem).

Conducting research on competitions and promotions
  • Name or username.
  • Contact details, home address, email or phone number.
  • Contact and marketing preferences.
  • Responses and comments given in surveys, "likes" and interactions with our products and services and preferred products.

To invite you to participate in competitions, provide feedback on your experiences, participate in promotions, or provide information about products or services that may be of interest to you.

To measure or understand the effectiveness of advertising we target to you and others, and to deliver relevant advertising to you.

You can opt out of receiving direct marketing communications at any time.

Some of these interactions can be online or through social media.

Lifestyle and demographics

User knowledge and profile
  • Personal information included in the account, such as name, address, or age.
  • Marketing and contact preferences.
  • Responses and comments given in surveys, "likes" and interactions with our products and services and preferred products.
  • Interests and habits on our website and app.

To build your profile, your preferences and habits, to better understand your interests and how you play.

We may use these profiles to contact you through social media to promote our business.

To help us meet our commitments with respect to responsible gaming and anti-money laundering obligations.

Improve our services and ensure that our systems are secure and up-to-date
  • Username.
  • Login details, websites and web pages visited (including interactions with our app and social networks).
  • Game and betting history.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • How you use mobile apps and websites.

To ensure that the content of the website is presented in the most effective manner for you and your computer, to maintain and improve our products and services, to optimize business processes, to ensure the integrity of our systems and to manage our information technology estate, to ensure quality assurance, to support the efficient management of our staff, analyse the performance of web pages or promotions and provide content that is relevant to you.

Fraud and crime prevention and detection

Loss prevention

Protection of employees and customers
  • Name, user name, ID, and contact information.
  • Login details, websites and pages visited.
  • Games played, bets, winnings and losses, credits and withdrawals, payment methods.
  • Online game images and screenshots.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • Risk scores, profile ratings.
  • Communication histories and account notes.

To list the applications and software active while using our website and application, including access to files and folders of programs related to the website to prevent or detect crime, fraud, theft or loss to our company and our customers and to prevent the use of unfair practices on our websites and applications or possible violations of our General Terms and Conditions and applicable law.

To protect our staff and others from damage or loss. This may include monitoring online activities, electronic methods to identify you such as the use of cookies, your transactions and online payments.

In certain circumstances, such as when players make large deposits or Politically Exposed Persons (PEPs), we will conduct additional due diligence measures focusing on financial viability, source of income, and background checks. This due diligence may include additional documentation provided by users or information available in the public domain.

Sale, acquisition and business rights
  • Name, username, player identity, contact information, and information provided during account registration.
  • Login details, websites and pages visited.
  • Games played, bets, winnings and losses, credits and withdrawals, payment methods.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • Risk scores, profile ratings.
  • Communication histories and account notes.

To acquire or sell a company.

Administrative, judicial or arbitration proceedings
  • Name, username, player identity, contact information, and information provided during account registration.
  • Login details, websites and pages visited.
  • Games played, bets, winnings and losses, credits and withdrawals, payment methods.
  • IP address, MAC address, device type, apps, geolocation and tracking data.
  • Risk scores, profile ratings.
  • Communication histories and account notes.

To exercise rights in judicial, administrative or arbitration proceedings, including to defend or file lawsuits

Who we share your data with

We may have to share your personal data with other organisations to ensure we comply with our legal and regulatory obligations, or where we need support to meet your needs or our contractual obligations. We may also share information with other organisations when we believe it is in the public interest or in our legitimate interest, as well as in the legitimate interests of other parties. These other parts concern:

  • To business partners, suppliers and subcontractors for the performance of any contract we enter into with them or with you;
  • To our affiliates or third parties, either to carry out marketing activities or to unsubscribe you from our marketing campaigns;
  • To members of the Entain Group, suppliers and service providers for any purposes identified in the previous section. This includes external and internal suppliers who assist the Entain Group in meeting its legal and regulatory obligations. Examples of this are identity verification and queries related to the prevention of money laundering and fraud;
  • To third parties authorised by Entain who may contact you to provide details of the services we provide, in accordance with your preferences;
  • To social media platforms when, for example, you choose to access your game account with us using your profile on one of these networks, or when we communicate with you through your profile on a particular social network;
  • To analytics providers and search engines who help us improve and optimize our services;
  • To third-party organizations that request or collect feedback and any online interaction from your experiences with us to help us improve and optimize our services.
  • To relevant banks, credit card companies, sports bodies and government agencies to protect minors, verify their data, investigate fraudulent, criminal or suspicious financial worthiness, criminal or activity, and ensure the security of our service (or other activities that we are required by law, regulation or guidance to investigate and protect);
  • When we verify your identity as you register with us, we share information with Jumio in order to comply with our regulatory obligations. Jumio assists in the capture, verification, and extraction of details from national identity documents – which encompasses verification of your CPF number against an official database. Jumio also perform additional biometric checks, including the examination of compatibility with the photograph provided by the user at the time of registration, and at additional stages thereafter for the purpose of multi-factor authentication, therefore processing biometric data. You can find more information about how Jumio maintains and processes your information on its Privacy Notice available in their website;
  • To third parties engaged to confirm that you are located in Brazilian territory, by registering and using our products and services;
  • To regulatory, police or fraud prevention bodies, as well as legal advisors, courts, mediators, councils, directors, sports federations and associations;
  • To any other body or organisation for the purpose of investigating actual or potential criminal activity, maintaining ethical and fair game standards, and investigating other cases in accordance with our legal obligations;
  • To other members of the Entain Group, including for marketing purposes; and
  • In case you choose to create a temporary account with our local partner U4C Instituição de Pagamento S/A ("U4C") to transfer the remaining balance from your Sportingbet account before January 1, 2025. By consenting to the creation of the bank account, we will need to share your personal data with U4C exclusively for the purpose of balance transfer and in accordance with the legal and regulatory requirements to which U4C is subject. This may include the personal information you provide during the registration and identity verification process, such as government-issued documents and estimated income. U4C Instituição de Pagamento S/A is a payment institution authorized by the Central Bank of Brazil, registered with CNPJ/MF under nº 30.980.539/0001-15, with headquarters at Av. Afonso Pena, n.º: 4,000, room 08, Ground Floor, Edifício Bic., Cruzeiro district – Belo Horizonte/MG. Your bank account at U4C Instituição de Pagamento S/A will be subject to its Terms and Conditions and Privacy Notice.

We may also share your personal information with third parties in the following circumstances:

  • in the event that we consider the sale or purchase of any business or assets, in which case we will share your personal data with the potential sellers or buyers of our business or assets;
  • in the event of any insolvency of the Entain Group, the controller of the personal data or any of the entities of the Group;
  • if we or a substantial part of our assets are acquired by a third party, in which case personal data held about our customers will be one of the transferred assets;
  • to enforce or apply the terms of use of our website or mobile application;
  • to protect our rights, property, or safety, including that of our employees, our customers, or others. This includes sharing information with other companies and organizations for the purposes of employee and customer safety, crime prevention, fraud protection, and credit risk reduction;
  • where we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation, or which relates to the prevention or detection of fraud or crime; and
  • When you self-exclude from gambling, we may share this information with our regulators or other companies in our industry in order to ensure that you choose to do so.

Responsible Gaming

We take Responsible Gaming very seriously at Entain. We may share your information between our Entain Group companies and, where necessary, with other organisations to fulfil our commitments and obligations regarding Responsible Gaming.

We are required to adopt measures that guarantee the precepts of Responsible Gaming and provide the public, in particular our customers, with the information necessary to promote safe gambling; this may include deposit limits and usage time limits. In addition, to comply with these obligations, we may review our customers' transactions and assess their financial behavior or situation in relation to our products and brands, which may cause us to make decisions about their accounts. Please see our Responsible Gaming page for more information.

We are constantly looking for innovative ways to identify users who may be experiencing difficulties. This means that we can use tools (such as cookies on player devices or images uploaded by you) to identify them, and that we have developed systems to better understand how users interact with our services in order to detect risks as early as possible. We may also share or receive user data from other organizations to help us assess risks.

In all such cases, we stress that we treat our obligations related to Responsible Gaming with absolute seriousness, helping our customers to gamble responsibly and protecting their personal information by adopting appropriate controls and security measures.

How long we keep your personal data

Type of data

Retention period

Information

Customer service call recordings

90 days

An extended hold can be applied on a case-by-case basis.

Customer data

A retention period of 10 years from the date your account is closed

We will retain personal data relating to your account only as permitted by data protection legislation (i) where we have a legal or regulatory obligation to retain your data; or (ii) to exercise or defend our rights in administrative and judicial claims.

The above retention periods may be extended, for example, where it is necessary to comply with a specific regulatory obligation, investigate a crime, handle a complaint, or resolve a complaint.

International transfer of personal data

Eventually, service providers, members of the Entain Group and organizations with which we engage may be located outside of Brazil. In such cases, we always use all reasonable efforts to ensure that sufficient safeguards are in place to protect your personal data, in accordance with applicable data protection law and as determined by the national data protection authority.

In addition, we inform you that our data centers may be located in other countries, such as Ireland and Austria. By registering with us, you consent to the international transfer of your personal data to our databases located in foreign territory. We ensure that we have robust security measures in place to protect your personal data from unauthorized access, misuse, or disclosure.

Security

We take with total seriousness the adherence to regulations, ordinances, standards and guidelines of information security, as well as with privacy laws, in order to maintain the confidentiality, integrity and availability of personal data. We use appropriate organizational, technical, and administrative measures to protect customers' personal data held on our systems from unauthorized access, alteration, disclosure, or destruction.

As a company, we have firewall-protected data centers, encrypted and certified web pages, and are ISO27001:2013 certified. We also take steps to ensure that our subsidiaries, agents, affiliates, and suppliers implement appropriate levels of security throughout the company.

When you obtain or choose a password that allows you access to certain parts of our website and mobile application, you are responsible for keeping that password confidential. We ask that you do not share your passwords with anyone.

Unfortunately, data transmission over the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the complete security of the data transmitted, which is why any transmission is at your own risk. Once we receive your information, we will use strict procedures and appropriate security features to prevent unauthorized access attempts.

Cookies

We use cookies for a variety of purposes, including improving your experience on our website. To learn more about our use of cookies, please see our Cookie Notice.

Marketing Communications and Your Choices

We want you to always be on top of our news and offers, so we use various forms of communication to interact with you, such as email, SMS or online communication. At the time of your registration, we offer you the option to join or not to receive communication, advertising and marketing actions. This will typically be done through a checkbox on the website or in the app, and you can choose to unsubscribe at any time.

What does "Unsubscribe" mean?

The term unsubscribe refers to various methods by which individuals can avoid receiving unsolicited information about products or services. This possibility is usually associated with direct marketing campaigns, such as telemarketing, email marketing.

You may also receive messages from us online, by accepting marketing cookies or through your social media provider if you have agreed to receive marketing messages from these platforms. You can consult the Privacy Policy of your Social Media providers in this regard.

*Please note that unsubscribing will not prevent you from receiving essential customer messages or information from us, such as communications related to your bets or accounts.

How do I unsubscribe from marketing communications?

If you do not wish to receive offers, promotions, event information, and personalized communications based on your account activity, you can:

  • use the "unsubscribe" option provided in any marketing communication you receive;
  • change your preferences in your account settings; or
  • Contact our Customer Support.

Your rights as a data subject

Your rights

Description of the right

Confirmation of the existence of treatment

You have the right to have our confirmation of the existence of processing of your personal data.

Access to your data

You have the right to access the personal data we hold about you. This right is not absolute and should not be interpreted in isolation, being subject to legal limitations related to confidentiality, third party rights, professional secrecy and commercial and industrial secrets.

Correction of incomplete, inaccurate, or outdated data

You have the right to request the correction of your data that is incomplete, inaccurate or out of date.

Anonymization, blocking or deletion of data that is unnecessary, excessive or processed in violation of the law

We process only the data necessary to achieve the purposes already described in this Policy. Even so, you have the right to request that certain data be anonymized, blocked, or eliminated, when proven to be unnecessary, excessive, or treated in violation of the law.

Data portability

In certain circumstances, you have the right to request the portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, subject to commercial and industrial secrets.

Deletion of data processed with consent

You have the right to request the deletion of your personal data processed on the basis of your consent, except in the exceptional cases provided for by law.

Information from public and private entities

You have the right to request information about the public and private entities with which we share your personal data. This information is available in item 4 of this Policy.

Information about the possibility of not providing consent and the consequences of refusal

Whenever we ask for your consent to process your personal data, you will be informed of the possibility of not providing it and of the consequences and possible impacts of your refusal to grant it.

Revocation of consent

You have the right to revoke your consent, where we rely on it to use your personal data.

Opposition

You have the right to object to the processing of data, in case of non-compliance with the provisions of the personal data protection law.

Automated decision review

You have the right to request the review of decisions made solely on the basis of automated processing of personal data that affect your interests, including decisions aimed at defining your personal, professional, consumer and credit profile or aspects of your personality.

Submit complaints and petitions to the ANPD

You have the right to file complaints and petitions before the National Data Protection Authority – ANPD.

Contact Us

If you wish to exercise your rights as a personal data subject, such as the right to access your information or to correct data, directly or through a representative, please contact privacy@sportingbet.bet.br.

If you have any questions about this Policy or would like more information about your rights, please contact our Personal Data Processing Officer by email: dataprotectionofficer@entaingroup.com.

*Note: These channels are not used to resolve customer service requests.

Changes to this Privacy Policy

Any changes to this Privacy Policy will be posted on this page and, where appropriate, notified to you by email. Accordingly, we encourage you to periodically review this Policy for any updates or changes to these terms.

This policy was last revised and updated on: January 2025