F111 Privacy Policy — Data Protection

1 Who We Are — Your Data Controller

For the purposes of this Privacy Policy, the data controller — that is, the entity responsible for deciding how and why your personal data is processed — is f111, the operator of the Sports Betting and online casino platform available at f111-jit.net.

This Policy applies to all services offered by f111: Sports Betting (football, volleyball, MMA and UFC, basketball, e-sports, and other categories), Live Casino, slots, crash games, the VIP Program, and any other product on the platform. By registering or using any f111 service, you confirm that you have read and understood this Policy.

The official contact channel for privacy matters is suporte@f111-jit.net or the 24/7 chat available directly on the platform.

2 What Data We Collect and How

F111 collects personal data in three situations: when you provide it directly, when it is automatically generated by your use of the platform, and in specific cases when received from third parties for identity verification purposes.

Data provided directly by you:

• Full name, CPF, date of birth, and email address — collected at registration;
• Mobile number — for authentication and security communications;
• Full residential address — required during identity verification processes;
• Bank details and Pix key — collected at the time of a withdrawal request for payment processing;
• Copies of identity documents (RG, CNH, or passport) and proof of address — requested during identity verification (KYC) in accordance with the limits set out in the Terms and Conditions;
• Information provided to support — chat conversations, emails, and any other communication sent to the f111 team.

Data generated automatically through use of the platform:

• IP address and approximate location via IP geolocation;
• Device type, operating system, and browser used;
• Betting history — type, amount, market, outcome, and date/time of each bet;
• Financial transaction history — deposits, withdrawals, credited and used bonuses;
• Session data — pages visited within the platform, session duration, and interactions;
• Cookies and similar technologies — detailed in clause 6 of this Policy.

Data received from third parties:

• Identity confirmations from Brazilian identity verification bureaus, used to validate CPF and prevent fraud — exclusively during KYC verification processes;
• Financial transaction confirmations provided by payment processors (Pix, credit/debit card, boleto, PicPay, Mercado Pago, and TED) — used solely to confirm the status of deposits and withdrawals.

3 How We Use Your Data

Every piece of data collected by f111 has a specific and justified purpose. We do not collect data "just in case" — everything in our database exists because it is necessary for one of the following purposes:

F111 does not use your personal data for sale to advertisers, creation of profiles for third-party behavioral advertising, commercial sharing with marketing partners, or any purpose not described in this Policy.

4 Legal Bases for Data Processing

F111 processes your personal data on the legal bases set out in the LGPD (Law 13.709/2018). The main bases used are:

• Contract performance (art. 7º, V): processing is necessary to fulfill the service agreement entered into between you and f111 at the time of registration — including bet processing, deposits, and withdrawals;
• Compliance with a legal obligation (art. 7º, II): f111 is subject to regulatory obligations in the betting sector and anti-money laundering compliance that require the collection and retention of certain data, such as CPF, identity documents, and financial history;
• Legitimate interest (art. 7, IX): used for fraud prevention, platform security, usage pattern analysis to improve the service, and operational account communications — provided that such interest does not override the user's fundamental rights;
• Consent (Art. 7, I): used specifically to send promotional communications and offer notifications. You can withdraw this consent at any time in your account settings or through support, with no impact on your use of any other services.

5 Data Sharing with Third Parties

F111 does not sell your personal data. Information is shared with third parties only in the situations described below, each with a specific and justified purpose:

• Payment processors: to process deposits via Pix, credit/debit card (Visa, Mastercard, Elo), boleto bancário, PicPay, Mercado Pago, and TED bank transfer (Nubank, Itaú, Bradesco, Banco do Brasil, and others). Only the data strictly necessary for each transaction is shared;
• Identity verification providers: Brazilian identity verification bureaus used to validate CPF and confirm identity during KYC processes, especially for higher-value withdrawals;
• Technology infrastructure providers: hosting services, cloud databases, and security monitoring that process data as sub-processors under contracts with specific data protection clauses;
• Casino game providers: to power the live casino and slots, game providers receive an anonymous session identifier — not your name, CPF, or financial details;
• Public authorities: when required by law, court order, betting industry regulation, or money laundering investigations by competent Brazilian authorities — such as the Financial Activities Control Council (COAF);
• Rights protection: in the event of a dispute, proven fraud, or the need for f111's legal defense, relevant data may be shared with attorneys and courts.

All third parties with whom f111 shares data are contractually required to handle that information with the same level of security and confidentiality that f111 demands, in full compliance with the LGPD.

6 Cookies and Tracking Technologies

F111 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze aggregate service usage. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — session authentication, bet slip management, and account preferences. These cannot be disabled without affecting your ability to use the service;
• Analytical cookies: collect aggregated and anonymized data on how users navigate the platform — most visited pages, average session duration, errors encountered. Used exclusively to improve f111's services;
• Functionality cookies: store preferences such as language, odds settings, and the layout chosen by the user, so these do not need to be reconfigured on every visit;
• Security cookies: used to identify suspicious behavior, prevent brute-force attacks, and detect unauthorized account access.

F111 does not use behavioral advertising cookies to track you across other websites or build profiles for third-party advertising.

You can manage your cookie preferences through the consent banner displayed on your first visit to the platform or via your browser settings. Disabling essential cookies may affect the functionality of core features such as login and bet processing.

7 How We Protect Your Data

The security of your data is an operational priority for f111, not merely a regulatory requirement. The technical and organizational measures in place include:

• 256-bit SSL/TLS encryption: all communication between your device and f111's servers is encrypted, including login credentials, bets, deposits, and withdrawals;
• Encryption at rest: stored sensitive data — including identity documents and banking details — is encrypted in f111's databases;
• Two-factor authentication (2FA): available to all users and strongly recommended for accounts with an active balance;
• Continuous monitoring: a security team that monitors access, transactions, and usage patterns in real time to identify suspicious activity;
• Internal access control: f111 staff only have access to the data required for their specific roles — no employee has unrestricted access to the full user database;
• Periodic security testing: audits and penetration tests carried out by specialized firms to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, f111 will notify impacted users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes required by the LGPD — within 72 hours of incident confirmation, where applicable.

8 How Long We Keep Your Data

F111 retains personal data only for as long as necessary to fulfill the purposes described in this Policy or to meet legal and regulatory obligations. The general retention periods are:

• Registration and identity data: retained while the account is active and for up to 5 years after closure, in accordance with regulatory requirements for the betting industry and anti-money laundering rules;
• Financial transaction history: retained for 5 years from each transaction, in compliance with Brazilian tax legislation and COAF regulations;
• Betting history: retained for 3 years from the date of each bet for dispute resolution and regulatory review purposes;
• Security and access logs: retained for 12 months for incident investigation purposes;
• Support communications: retained for 2 years from each conversation for quality assurance and complaint resolution purposes;
• Analytics cookie data: anonymized after 13 months and then retained indefinitely in aggregated format only.

After account closure and the expiry of applicable legal retention periods, your data is deleted or irreversibly anonymized so that you can no longer be individually identified.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that f111 is committed to respecting and facilitating. Here is what you can request:

• Access: request a copy of all personal data f111 holds about you;
• Correction: request the update of incomplete, outdated, or incorrect data;
• Anonymization, blocking, or deletion: request that unnecessary, excessive, or unlawfully processed data be anonymized, blocked, or deleted;
• Portability: receive your data in a structured format for transfer to another service, where technically feasible;
• Deletion of data processed under consent: request the deletion of data processed on the basis of your consent, where applicable;
• Information on data sharing: know which third parties f111 has shared your data with;
• Consent withdrawal: withdraw consent given for specific processing activities, such as promotional communications, without affecting any other services;
• Objection: object to processing carried out on the basis of legitimate interest, if you believe your individual rights take precedence.

To exercise any of these rights, please contact us at suporte@f111-jit.net or through the platform's 24/7 chat. All requests are answered within 15 business days. For complex requests requiring legal analysis, this deadline may be extended to 30 days, with prior notice to the requester.

10 Minors

F111's services are intended exclusively for individuals aged 18 and over. f111 does not knowingly collect, store, or process personal data from anyone under 18.

During registration, the user declares they are at least 18 years old. f111 may request documentary proof of age at any time — particularly during KYC verification processes. Accounts identified as belonging to minors are closed immediately, with any deposit balances refunded and pending bets and bonuses cancelled.

If you are a guardian and suspect that a minor has accessed or used f111, please contact our support team immediately so we can take the necessary steps and remove any data that may have been inadvertently collected.

11 International Data Transfers

F111 may use technological infrastructure hosted in other countries for data storage and processing — such as cloud servers located outside Brazil. When this occurs, f111 ensures that international data transfers are carried out with the appropriate safeguards required by the LGPD (art. 33), which include:

• Transfers to countries with a level of data protection recognized as adequate by the ANPD;
• Contracts with standard contractual clauses requiring the data recipient to ensure a level of protection equivalent to that provided under the LGPD;
• Use of service providers holding international data security certifications (ISO 27001, SOC 2 Type II, and similar).

Under no circumstances are Brazilian users' personal data transferred to foreign entities for commercial or advertising purposes.

12 Changes to This Privacy Policy

F111 may update this Privacy Policy periodically to reflect changes in Brazilian data protection legislation, platform operational practices, or the services offered. Any material changes will be communicated by email to the address registered on your account at least 15 days before taking effect.

The most current version of this Policy is always available at f111's /privacy-policy page, with the date of the last update shown at the top of the document. For changes driven by urgent legal requirements, the notice period may be shorter — but users will be informed immediately.

Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the changes. If you do not agree with the changes, you may request account closure before the effective date by contacting f111 support.

13 Contact, DPO & Complaints

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you may contact f111 through the channels below:

• 24/7 Chat: available directly on the f111 platform, with support in Brazilian Portuguese;
• Email: suporte@f111-jit.net — for matters that require documentation or more detailed review;
• Data Protection Officer (DPO): f111 has appointed a Data Protection Officer responsible for overseeing data protection practices and serving as a communication channel between data subjects and the controller, as required by art. 41 of the LGPD. To contact the DPO directly, email privacidade@f111-jit.net.

If, after contacting f111, you believe your rights have not been properly respected, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.