1wim Privacy Policy – Your Data Protected by the LGPD

1wim is the online casino and Sports Betting platform available at https://1wim.life, developed and operated exclusively for the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018), 1wim acts as the controller of the personal data collected and processed as a result of users' use of the platform.

This Privacy Policy applies to all registered users of 1wim, visitors to the platform, and anyone who interacts with our support channels, regardless of the device used — mobile, desktop, or tablet.

By creating an account on 1wim, depositing via Pix, playing slots, joining tournaments, betting on football, or contacting support, you agree to the processing of your personal data as described in this Policy. If you do not agree, please stop using the platform and request account closure by emailing contato@1wim.life.

1wim collects only the data strictly necessary to provide platform services in a secure, lawful, and efficient manner. Below are the categories of data we may collect:

Identification and registration data:

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number (when provided);
• Residential address (for identity verification).

Financial and payment data:

• Pix key registered for withdrawals (CPF, email, phone number, or random key);
• Partial credit or debit card details (last four digits and card brand only — never the full number);
• History of deposits and withdrawals made on the platform;
• Financial institution associated with your transactions (Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, etc.).

Identity verification data (KYC):

• Identity document image (RG or CNH);
• Recent proof of address;
• Selfie with ID document for remote identity verification, when requested.

Platform usage and behavioral data:

• Betting history, games accessed, and gaming sessions;
• Interactions with promotions and bonuses;
• Responsible gambling settings configured by the user;
• Communications exchanged with support via live chat or email.

Technical and browsing data:

• Access IP address;
• Browser or app type and version;
• Device operating system;
• Device identifiers (where relevant for fraud prevention);
• Cookie data and similar tracking technologies (detailed in Section 8).

Personal data collected by 1wim is used exclusively for the following purposes:

• Create and manage your account — account registration, login authentication, password recovery, and user profile management on the platform;
• Process financial transactions — confirmation of deposits via Pix, credit card, debit card, PicPay, Mercado Pago, boleto bancário, and TED; withdrawal processing; financial fraud prevention;
• Verify your identity (KYC) — to confirm that you are over 18, that the CPF provided is valid, and that the payment details belong to the account holder;
• Provide customer support — responding to your inquiries via live chat and email, resolving disputes, and keeping a record of support interactions;
• Fulfill legal and regulatory obligations — anti-money laundering compliance (AML/CFT), reporting to competent authorities when required by law, and adherence to the LGPD and other applicable Brazilian regulations;
• Personalize your experience on the platform — displaying promotions relevant to your gaming profile, and recommending slots titles or live games based on your usage history;
• Send marketing communications — notifications about promotions, tournaments, and 1wim news, sent only with your consent and with an unsubscribe option in every email;
• Ensure platform security — detect and prevent fraud, bot usage, multiple account creation, and other conduct prohibited under the Terms and Conditions;
• Analyze and improve our services — anonymous statistical analysis of platform usage for product development, bug fixes, and feature improvement purposes.

1wim does not use your personal data for purposes not listed above without informing you in advance and, where required, obtaining your consent.

The LGPD requires that all personal data processing have a legal basis to support it. 1wim processes your data under the following grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V) — processing is necessary to perform the contract established when creating your account on the platform: processing Pix deposits, handling withdrawals, operating games and bets, and providing support;
• Compliance with a legal obligation (art. 7, II) — identity verification (KYC), anti-money laundering (AML/CFT) compliance, and reporting to authorities as required by Brazilian law;
• Legitimate interest (art. 7, IX) — platform security, fraud prevention, behavioral analysis to detect bonus abuse and multiple accounts, and service improvement;
• Consent (art. 7, I) — sending marketing communications and promotional emails. You may withdraw your consent at any time by clicking "Unsubscribe" in any email you receive or by contacting support.

1wim does not sell users' personal data to third parties under any circumstances. Data sharing occurs only in the situations below, and only to the extent strictly necessary for each purpose:

Service providers and data processors:

• Payment processors — to confirm Pix deposits, process cards, and settle withdrawals. These processors have access only to the data required for the specific transaction and are contractually prohibited from using that data for any other purpose;
• Game providers — companies such as Pragmatic Play, PG Soft, Evolution, and others provide the games available on the 1wim platform. They may receive session identifiers to operate the game, but do not have access to users' full personal data;
• Fraud prevention and KYC systems — identity verification tools that process submitted documents to confirm CPF, age, and account ownership;
• IT infrastructure providers — hosting, database, and security services that support the technical operation of the platform, under confidentiality and data processing agreements.

Authorities and legal obligations:

• We share data with regulatory bodies, law enforcement, and judicial authorities when required by legal mandate, court order, or regulatory obligation applicable to 1wim's operations in Brazil;
• We comply with anti-money laundering obligations (AML/CFT) in accordance with Brazilian regulations, which may include reporting unusual transactions to the relevant authorities.

All third parties that process data on behalf of 1wim are bound by contractual agreements requiring LGPD compliance and prohibiting the use of data for unauthorized purposes.

1wim implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, unauthorized disclosure, or destruction. The key safeguards include:

• 256-bit SSL encryption across all pages of the platform and all financial transactions — the same standard used by Brazilian banks and financial institutions;
• Encryption at rest for data stored on our servers — sensitive fields such as CPF, banking details, and identity documents are stored in encrypted format;
• Role-based access control — only team members with a legitimate need for access can view users' personal data, and all access is logged and audited;
• Continuous security monitoring — automated systems that detect suspicious access attempts, anomalous login patterns, and other indicators of compromise;
• Periodic security testing — vulnerability assessments and penetration testing conducted regularly by specialized teams;
• Encrypted backups — data backups are encrypted and stored in locations physically separate from the primary servers.

In the event of a security incident that may affect users' personal data, 1wim will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected data subjects within the timeframes and formats required by the LGPD, and will take all necessary corrective action.

1wim retains your personal data for as long as necessary to fulfil the purposes for which it was collected, always respecting the minimum periods required by Brazilian law.

The criteria that determine retention periods include:

• Active account: while your 1wim account is active, we retain all data necessary to operate our services, process transactions, and provide support;
• AML/CFT legal obligations: financial transaction records and identity documents are retained for a minimum of 5 (five) years after account closure, as required by Brazilian anti-money laundering legislation;
• Tax obligations: accounting and financial records are retained for the applicable tax statute of limitations, which may extend up to 5 years;
• Disputes and litigation: data relevant to ongoing or potential disputes is retained until final resolution, including any applicable appeals period;
• Marketing data: email marketing lists are deleted or anonymized when you withdraw consent or request to unsubscribe.

Once retention periods have been met, your data is securely deleted or anonymized in a way that no longer allows you to be identified. Anonymized data may be retained indefinitely for statistical and business analysis purposes.

1wim uses cookies and similar technologies to enhance your experience on the platform, ensure proper technical functioning, and — with your consent — for analytics and marketing purposes. See the categories used below:

Strictly necessary cookies:

• Keep your login session active as you browse the platform;
• Store basic interface preferences (language, game settings);
• These are essential for the site to function properly — without them, the platform cannot operate correctly. They cannot be disabled.

Performance and analytics cookies:

• Collect anonymous information about how users interact with the platform — pages visited, session duration, errors encountered;
• Used to identify technical issues and improve site performance;
• The data collected is aggregated and does not allow individual users to be identified.

Functionality cookies:

• They remember your personalized preferences, such as favorite games or limit settings;
• They save you from having to reconfigure your preferences on every visit.

Marketing cookies (with consent only):

• Used to display relevant promotions and content within the platform based on your usage behavior;
• You can manage consent for this category in the platform settings or by following the instructions on the cookie banner shown on your first visit.

You can configure your browser or device to block cookies or to alert you when cookies are being set. Blocking strictly necessary cookies may affect how the platform functions. Cookie settings for major browsers — Chrome, Firefox, Safari, and Edge — are available on each browser's respective support page.

The LGPD grants you, as the data subject whose personal data is processed by 1wim, the following rights, which may be exercised at any time by contacting us at contato@1wim.life with the subject line "Privacy — LGPD":

We respond to rights exercise requests within 15 calendar days of receiving a complete request. In more complex cases, this period may be extended by an additional 15 days, with prior notice to the data subject.

To verify the identity of the requester before fulfilling access, correction, or deletion requests, we may ask for a valid ID document — this measure protects you against unauthorized requests made in your name.

1wim is an entertainment platform strictly prohibited for users under 18. We do not knowingly collect personal data from anyone under 18. By registering, users expressly confirm they are of legal age.

As part of our identity verification (KYC) procedures, we request documents confirming the user's legal age before processing any withdrawal. When we identify that an account was created by a minor, we take the following steps:

• The account is immediately suspended and subsequently closed;
• Deposits are returned to the original payment method, after deducting any bonuses used;
• Collected personal data is deleted from our systems, subject to any applicable legal retention obligations;
• The case may be reported to the competent authorities if there is any indication that an adult was involved in the improper creation of the account.

Parents or legal guardians who believe a minor has created an account on 1wim should contact us immediately at contato@1wim.life so the measures above can be applied without delay.

Some of our service providers — such as game providers (Evolution, Pragmatic Play, PG Soft, and others) and IT infrastructure services — may be located outside Brazil. When this occurs, your data may be transferred to servers in other countries.

1wim ensures that all international transfers of personal data take place in compliance with Article 33 of the LGPD, through one of the following safeguards:

• The destination country provides a level of personal data protection equivalent to that set out in the LGPD, as assessed by the ANPD;
• The recipient provides guarantees of compliance with the principles, rights, and obligations of the LGPD through specific contractual clauses;
• The transfer is necessary to perform the contract between you and 1wim — such as operating games provided by international suppliers.

To find out which countries may receive your data as a result of our use of specific providers, please contact us at contato@1wim.life with the subject line "International Transfer — LGPD".

1wim may update this Privacy Policy periodically to reflect changes to our services, updates to Brazilian data protection legislation, or improvements to our privacy practices.

Material changes will be communicated at least 7 calendar days in advance through:

• Notification in the account dashboard after logging in to the platform;
• Email to the address registered on the account;
• Prominent notice on the platform's main page.

For minor changes — such as text corrections, contact updates, or clarifications that do not affect your rights — we may update this document without prior notice, but we will always update the "last updated" date at the top of this page.

Continued use of the 1wim platform after a new version of this Policy takes effect constitutes acceptance of the changes made. If you do not agree with the updated privacy practices, you may close your account and request deletion of your data by emailing contato@1wim.life before the new version comes into force.

For any questions regarding how 1wim handles your personal data, the exercise of your rights as a data subject, or inquiries about this Privacy Policy, please reach out through the channels below:

• Privacy email: contato@1wim.life — subject line "Privacy — LGPD";
• Live chat: available 24 hours a day on the platform after login — let us know you wish to address a data privacy matter;
• Response time: up to 15 calendar days for rights exercise requests; up to 24 business hours for general inquiries.

In compliance with the LGPD, 1wim has appointed a personal data officer (equivalent to a DPO — Data Protection Officer) who can be reached at the same email address above. This officer serves as the point of contact for both data subjects and the Autoridade Nacional de Proteção de Dados (ANPD).

If you are not satisfied with the response to your rights exercise request, you may file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados) through the official channel available on the Brazilian government portal.