555f Privacy Policy — Your Data, Kept Safe

1 Who We Are and How to Contact Us

The 555f is the Sports Betting and online casino platform available at 555f.click, serving exclusively the Brazilian market. For any questions related to privacy or the handling of your personal data, you can reach our team directly:

• Privacy email: contato@555f.click
• Live chat: available within the platform, 24 hours a day, 7 days a week
• Response time: up to 15 business days for formal requests related to personal data, as provided for under the LGPD

The 555f acts as Data Controller under Law No. 13,709/2018 (LGPD) — meaning the platform determines the purpose for which your data is collected and how it is processed. Any vendors and service providers who access data in the context of 555f operations act as Processors, bound by contracts with clear confidentiality obligations.

2 What Data We Collect

The 555f collects only the information necessary to operate the platform securely and deliver the best possible experience to Brazilian players. Data is grouped into the following categories:

Financial data such as credit and debit card numbers are always handled in tokenized — 555f stores only reference tokens, not the actual numbers. Sensitive data such as identity documents submitted for verification are stored with additional encryption and restricted access.

3 How We Use Your Data

Each piece of data collected by the 555f has a specific and legitimate purpose. We use your information to:

• Manage your account: create, maintain, and secure access to your 555f account.
• Process transactions: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED transfer, as well as withdrawals via Pix.
• Verify identity: comply with the legal age and identity verification requirements that apply to online betting platforms in Brazil.
• Prevent fraud: identify and block unauthorized access attempts, money laundering, use of multiple accounts, and other behavior that violates the Terms and Conditions.
• Personalize your experience: display relevant promotions, suggest games based on usage history, and communicate offers that match the player's profile.
• Player support: answer questions, resolve issues, and keep a support history for continuity of service.
• Responsible gambling: monitor usage patterns to identify at-risk behavior and offer self-exclusion tools and limits where needed.
• Meet legal obligations: comply with requests from government and judicial authorities when required by law.

4 Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a specific legal basis. At 555f, the legal bases used are:

• Contract performance (art. 7, V): the processing necessary to deliver the contracted services when you create an account — handling deposits, withdrawals, bets, and support.
• Compliance with a legal obligation (art. 7, II): identity verification, anti-money laundering compliance, and responding to requests from competent authorities.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and continuous service improvement, always upholding the fundamental rights of the data subject.
• Consent (Art. 7, I): sending marketing communications and promotions. Consent can be withdrawn at any time directly in the account settings or through support.

5 Data Sharing with Third Parties

The 555f does not sell personal data or share it with third parties for advertising purposes. Any sharing that occurs is strictly operational and limited to what is necessary:

• Payment providers: to process deposits and withdrawals, the necessary data is shared with the responsible financial institutions — such as the Banco Central's Pix network, card processors, or platforms like Mercado Pago and PicPay. These partners are contractually required to maintain confidentiality.
• Game providers: companies such as Microgaming, NetEnt, Pragmatic Play, PG Soft, and Playtech receive only the technical data required to authenticate the player's session. No financial data is transmitted.
• Security and anti-fraud tools: anomalous behavior detection systems may process session data to identify risks. These systems operate under a data processing agreement.
• Government and judicial authorities: 555f fulfills legitimate requests from competent authorities when there is a legal obligation or court order. In such cases, only the specifically requested data is provided.

6 Cookies and Tracking Technologies

The website of 555f uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform to function — session authentication, language settings, and basic preferences. They cannot be disabled without affecting how the site works.
• Performance cookies: collect anonymous data on how users navigate the platform to identify technical issues and opportunities for improvement. No personally identifiable data is collected in this category.
• Functionality cookies: remember preferences such as the last game accessed, the selected interface theme, and betting settings to make your next session faster and smoother.
• Security cookies: help identify suspicious sessions, unauthorized access attempts, and anomalous behavior that may indicate fraud.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent access to your account. For specific questions about cookies, the 555f is available via chat.

7 How Long We Keep Your Data

The 555f retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal and regulatory obligations. The general retention periods are:

• Active account data: kept for as long as the account exists and for up to 5 years after closure, for audit and legal compliance purposes.
• Financial data and transaction history: retained for up to 10 years, in accordance with Brazilian tax legislation and anti-money laundering requirements.
• Identity verification documents: retained for the minimum period required by law after verification is complete, with restricted access.
• Support data: support history retained for up to 3 years for continuity and dispute resolution.
• Marketing data: retained as long as active consent exists. Withdrawal of consent results in deletion within 30 days.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the individual can no longer be identified.

8 How We Protect Your Data

The security of player information is a technical and operational priority for 555f. The measures implemented include:

• Encryption in transit: 256-bit SSL/TLS across all communication between users and platform servers.
• Encryption at rest: sensitive data stored in our database is encrypted using securely managed keys.
• Role-based access control: employees only access the data required for their specific roles. No position has unrestricted access.
• Continuous monitoring: automated systems monitor unusual access attempts, spikes in suspicious activity, and patterns that may indicate account compromise.
• Two-factor authentication: available to all players as an extra layer of account protection.
• Vulnerability testing: the platform undergoes periodic security assessments carried out by independent specialized teams.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject, a set of rights that 555f is committed to respecting and facilitating. These are:

• Access: request a copy of all personal data that 555f holds about you.
• Correction: correct data that is incomplete, inaccurate, or outdated.
• Anonymization or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized or deleted.
• Portability: receive your data in a structured format for transfer to another service provider, where technically feasible.
• Consent withdrawal: withdraw consent for data processing based on that legal ground — such as marketing communications — at any time.
• Right to object: object to processing carried out on the basis of legitimate interest, if you believe your fundamental rights outweigh the stated interest.
• Data sharing information: know who 555f has shared your data with and for what purpose.

To exercise any of these rights, contact the support team at 555f via the platform chat or at contato@555f.click. The response time is up to 15 business days, in accordance with the LGPD.

10 Data of Minors

The 555f is a platform intended exclusively for users aged 18 and over. Registration by minors is strictly prohibited, and 555f employs age verification measures to prevent underage access to the platform.

If 555f identifies that data from a minor was collected inadvertently, that data will be deleted immediately upon discovery — no request needed. If you suspect a minor's account is active on the platform, please contact support right away.

11 Changes to This Policy

The 555f may update this Privacy Policy periodically to reflect changes in legislation, platform operations, or industry best practices. When that happens:

• The update date at the top of this page will be changed.
• Players with an active account will receive an email notification summarizing the key changes.
• For substantial changes that directly affect the rights of data subjects, 555f may request renewed consent before the new practices take effect.
• Continued use of the platform after notification constitutes acceptance of the updated Policy.

We recommend reviewing this page periodically to stay informed about how 555f handles your data. The version history of this Policy is available upon request to support.