EVeryBet Privacy Policy Version 2026-10-03-v2 — Effective October 3, 2026 1. Scope and controller This policy applies to the EVeryBet website and account features. EVeryBet LLC is the service operator and controls the information described here. Contact hello@everybet.app with a privacy question. Stripe, identity providers, and wagering operators separately control information given directly to them. 2. Information collected EVeryBet may collect account and identity data (name, email, profile image, verification status, account identifiers, sign-in provider, password hash, and consent records); session and security data (session tokens, IP address, user agent, provider tokens where needed, timestamps, and security events); saved betting information (favorites, hidden-bet labels, tracked wagers, selections, odds, stakes, results, bankroll, unit size, filters, and preferences); membership records (Stripe customer and subscription identifiers, status, renewal period, checkout identifier, and recurring-billing consent, while Stripe handles full card details); privacy-request and communication data (request type, submitted details, status, reference, resolution notes, and correspondence); browser storage; and operational records (timestamps, IP address, user agent, referrer or origin, errors, and security events). 3. Sources and purposes Information comes from the user, browser or device, sign-in providers, Stripe, and service providers. EVeryBet uses it to create and secure accounts, sync settings, display and grade tracked wagers, operate any enabled membership, prevent abuse, diagnose failures, comply with law, and improve reliability and usability. Odds and market information come from data providers and operators and are used for comparisons and model estimates. A user's tracked wagers do not change market odds shown to others. 4. Disclosures and third parties Information may be disclosed to vendors that provide hosting, app-builder or preview integration, databases, authentication, security, payments, support, and technical operations. Current features may involve Vercel or the deployment host, Neon or another configured database provider, Stripe, configured identity providers, and the Grok/xAI app-builder extension loaded by the platform. Vendors may receive request data such as IP address, user agent, origin, and referrer. Information may also be disclosed as reasonably necessary for law, safety, fraud or abuse investigations, or a business transfer with appropriate notice and safeguards. When a user opens a sportsbook, fantasy app, exchange, prediction market, or another third-party link, that third party receives browser information such as an IP address and device or request information. EVeryBet's operator buttons currently use configured public operator addresses and do not deliberately include a selected wager, stake, or affiliate identifier. The third party's privacy policy applies after the user leaves EVeryBet. 5. Sale, sharing, advertising, and signals EVeryBet is not currently configured to sell personal information for money or use it for cross-context behavioral advertising. Because those practices are not currently performed, Global Privacy Control and Do Not Track signals do not change the application's behavior. EVeryBet's application code does not currently add behavioral-advertising analytics, append referral tracking, or record which operator links a user opens. Operator links are currently uncompensated. Before a paid or affiliate link is activated, it must be labeled beside the link and this policy must be updated if referral tracking changes the information handled. 6. Retention and deletion Information is kept only as reasonably needed to provide accounts or any enabled membership, maintain security and billing records, resolve disputes, comply with law, and enforce agreements. Privacy-request records and resolution notes are retained while open and afterward only as reasonably needed to document compliance, then deleted or de-identified when no longer needed. Browser data remains until cleared or replaced. A verified request may seek access, correction, a portable copy, or deletion, subject to lawful exceptions. Deleting EVeryBet data does not delete a separate account held by Stripe, an identity provider, or a wagering operator. 7. U.S. state privacy rights Depending on state and legal exceptions, a person may have rights to know or access information, correct inaccuracies, delete information, obtain a portable copy, opt out of certain sales, sharing, targeted advertising, or profiling, and appeal a denied request. EVeryBet will not discriminate for exercising a privacy right. Signed-in users may use the privacy-request form. Send appeals and authorized-agent requests to hello@everybet.app. Identity and authority may be verified. Do not submit a password, government ID, or full payment-card number unless a secure verification process specifically requests it. 8. Security, location, and age EVeryBet uses reasonable safeguards, but no internet service can promise absolute security. Information may be processed in the United States and other places where providers operate, subject to applicable safeguards. EVeryBet is intended only for people age 21 or older and is not directed to children. 9. Changes and contact Material changes will be posted with a new effective date. Where law requires new consent, an appropriate consent process will be used before the affected practice begins. Use the signed-in privacy-request form or contact hello@everybet.app. This policy describes the current code and intended U.S. operation and must be updated whenever vendors, tracking, data uses, or business practices change.