Privacy Policy of 5555f – Secure Data

1Introduction and Controller Identification

This Privacy Policy describes how 5555f, operator of the Sports Betting and online casino platform available at 5555f.best, collects, uses, stores, and protects the personal data of its users in accordance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable regulations in Brazil.

The 5555f acts as personal data controller collected on its platform, meaning it determines the purposes and means of processing that information. For services provided by partners and payment processors, each company maintains its own privacy policy.

This policy applies to all registered users and visitors of the platform, regardless of the device used to access it — whether mobile, tablet, or desktop.

2Data We Collect

The 5555f only collects the data necessary to operate the platform securely, meet legal obligations, and deliver a personalized experience for Brazilian bettors. Below, we detail each category of data collected:

The 5555f does not collect sensitive data such as racial origin, political opinion, religious belief, or biometric data, except where specifically required by the identity verification process (such as facial recognition via selfie for KYC), with the user's explicit consent.

3How We Use Your Data

Each piece of data collected by 5555f has a specific, declared purpose. We never use personal information for purposes other than those listed below without notifying the user in advance:

• Operate the user's account — process bets, record results, calculate and pay winnings in BRL via Pix;
• Verify identity and prevent fraud — confirm that the account belongs to a real person, aged 18 or over, with a valid CPF;
• Process deposits and withdrawals — via Pix, credit/debit card, PicPay, Mercado Pago, or TED transfer from accounts at Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian banks;
• Fulfill legal obligations — maintain financial records as required by the Banco Central do Brasil and anti-money laundering regulations (PLDFT);
• Provide player support — to identify the user during support interactions and resolve queries with the appropriate context;
• Personalize the experience — display relevant odds and competitions based on betting history (e.g., Brasileirão, Copa do Brasil, Libertadores);
• Send authorized communications — notifications about bets, promotions, and platform updates, for consenting users only;
• Improve the platform — analyze usage patterns in aggregate, anonymized form to improve features;
• Promote responsible gambling — monitor behavioral patterns that may indicate problem gambling and trigger protective mechanisms.

4Legal Bases for Processing

The LGPD requires that all personal data processing have a legal basis. The 5555f grounds its data processing activities on the following legal bases set out in Article 7 of Law No. 13,709/2018:

• Contract performance — processing is necessary to fulfill the Terms and Conditions accepted by the user at the time of registration, including bet operations and payment processing;
• Compliance with a legal obligation — financial records, identity verification (KYC), and anti-money laundering measures are legal requirements in Brazil for payment service and betting operators;
• Legitimate interest — fraud prevention, platform security, and operational improvements, always respecting users' rights and reasonable expectations;
• Consent — for sending marketing communications, using non-essential cookies, and personalizing content beyond basic operational needs. Consent may be withdrawn at any time.

5Data Sharing with Third Parties

The 5555f does not sell, rent, or trade users' personal data. Sharing only occurs in the specific situations listed below, always with appropriate contractual safeguards:

• Payment gateways — the minimum data required to process transactions via Pix, credit/debit card, PicPay, Mercado Pago, or TED is shared with certified payment processors. These partners have their own privacy policies and receive no more data than is strictly necessary for the operation;
• Game providers — slots, Live Casino, and crash game providers receive only an anonymous session identifier to record results. They do not receive the user's name, CPF, or banking details;
• Identity verification services — when required for the KYC process, documents may be submitted to platforms specialized in biometric verification, with the user's explicit consent;
• Competent authorities — data may be disclosed to regulatory bodies, the Federal Revenue Service, the Central Bank, the Public Prosecutor's Office, or law enforcement authorities when legally required, by court order, or in connection with a financial crime investigation;
• Group companies — in the event of a corporate restructuring, merger, or acquisition, data may be transferred to the successor entity, with prior notice given to users.

6International Data Transfer

Some technology providers used by 5555f — such as cloud infrastructure services and casino game providers — may process data on servers located outside Brazil. When this occurs, 5555f guarantees that:

• Data transfers only take place to countries or organizations that offer an adequate level of protection, as assessed by the National Data Protection Authority (ANPD);
• Specific contractual clauses require the foreign partner to apply protections equivalent to those under the LGPD;
• Users will be notified of any relevant international data transfers via an update to this policy, with advance notice by email.

In practice, the vast majority of data belonging to Brazilian bettors on 5555f — including CPF, payment history, and account data — is processed and stored on infrastructure located in Brazil.

7Cookies and Tracking Technologies

The 5555f uses cookies and similar technologies to ensure the platform works properly and to improve the user experience. The types of cookies used are:

• Essential cookies — required to maintain an active session, process bets, and ensure login security. They cannot be disabled without affecting the platform's basic functionality;
• Performance cookies — collect anonymous information about how users navigate the platform to identify slowdowns and errors. Data is aggregated and does not identify users individually;
• Personalization cookies — remember preferences such as language, favorite markets, and followed competitions (e.g., Brasileirão, Copa do Brasil). These can be disabled in your account settings;
• Analytical cookies — used internally to analyze behavioral patterns on the platform and improve features. With user consent.

The 5555f does not use third-party cookies for external advertising or cross-site tracking. When you first access the platform, a cookie consent banner will appear where you can manage your preferences. Essential cookies are enabled automatically; all others require your authorization.

8Data Retention

The 5555f retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to mandatory legal retention periods:

• Active account data — retained for as long as the account remains active on the platform;
• Financial and betting data — retained for a minimum of 5 years after each transaction, as required by the Receita Federal and anti-money laundering regulations;
• KYC documents — retained for a minimum of 5 years after verification, even if the account is closed;
• Support communication logs — kept for 2 years for quality assurance and dispute resolution purposes;
• Access and security logs — retained for 6 months, which may be extended in the event of an active investigation;
• Marketing data — deleted within 30 days of consent being withdrawn, where not required by other legal obligations.

Once the applicable retention periods expire, data is securely deleted or anonymized so that users can no longer be identified from the remaining information.

9Information Security

The 5555f adopts a robust set of technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption across all communications between the user's device and the platform's servers;
• Password hashing with modern algorithms (bcrypt) — the team at 5555f never has access to your password in plain text under any circumstances;
• Two-factor authentication (2FA) available to all users who want an extra layer of security at login;
• Continuous monitoring of accesses and transactions to detect suspicious activity in real time;
• Network segmentation and internal access controls that limit which team members can access which data;
• Regular security testing, including simulated attack tests (penetration testing) carried out by independent teams;
• Card data not stored — all credit and debit card processing is handled by PCI-DSS certified gateways.

In the event of a security incident that may affect your personal data, 5555f will notify affected users and the National Data Protection Authority (ANPD) within the deadlines set by the LGPD, with clear information about what occurred and what measures were taken.

10Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that 5555f is obligated to uphold. Below we detail each right and how to exercise it:

To exercise any of these rights, submit a request to contato@5555f.best with the subject line "LGPD Rights – [right name]" and the CPF registered on your account. All requests are handled as a priority and responded to within the legal deadline of 15 business days. For more complex cases, we may request identity verification before processing the request.

11Minors

The services of 5555f are intended exclusively for individuals aged 18 years of age or older. The platform does not intentionally collect personal data from users under 18. Registration requires a CPF, and any account created with a minor's CPF will be closed immediately upon identification.

If you are the parent or guardian of a minor and believe they have created an account on 5555f, please contact us immediately at contato@5555f.best. We will take the necessary steps to close the account and delete the collected data without delay.

12Changes to this Privacy Policy

The 5555f may update this Privacy Policy periodically to reflect regulatory changes, new features, or improvements to data protection processes. The communication process follows these rules:

• Relevant changes are communicated by email at least 15 days' notice before they take effect;
• A prominent notice is displayed on the platform during the transition period;
• The "last updated" date at the top of this document is always adjusted accordingly;
• Users who do not agree with the changes may close their account before the effective date and receive a refund of their available balance in accordance with the Terms and Conditions.

Changes that significantly expand the use of your personal data — such as new processing purposes not originally anticipated — will only take effect with your explicit consent, as required by the LGPD.

Continued use of the platform after the effective date of the updated terms constitutes acceptance of the changes in cases where consent is not legally required.

13Contact, Data Protection Officer (DPO) and Complaints Channel

For any questions, requests, or complaints regarding the processing of your personal data by 5555f, you can reach us through the following channels:

• General email: contato@5555f.best
• Live chat: available on the platform 24 hours a day, 7 days a week
• LGPD Requests: send an email with the subject line "LGPD Rights" to the address above

The Data Protection Officer (DPO) of 5555f is responsible for receiving communications from data subjects and from the National Data Protection Authority (ANPD). You can contact the DPO directly at the email above, using the subject line "DPO – Request".

If you are not satisfied with the response from 5555f to a request related to your personal data, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided under art. 18, § 1 of the LGPD.