Privacy Policy 555kkk – How We Protect Your Data

1. Who We Are and Who Controls Your Data

555kkk is a Sports Betting and online casino platform operated through the website https://555kkk.best, intended exclusively for users aged 18 and over residing in Brazil. For the purposes of the General Data Protection Law (LGPD – Law No. 13,709/2018), the controller of personal data is the entity responsible for operating 555kkk.

The 555kkk Data Protection Officer (DPO) can be reached at contato@555kkk.best — please include "LGPD – Data Subject Request" in the subject line. The response deadline for personal data requests is up to 15 business days from the date the request is received.

This Privacy Policy applies to all registered users and visitors of 555kkk, regardless of the device used to access the platform — mobile, tablet, or desktop.

2. What Personal Data 555kkk Collects

555kkk collects personal data in three main situations: when you register, when you use the platform, and automatically during browsing.

Data provided during registration and account use:

• Full name, CPF, and date of birth;
• Email address and mobile phone number;
• Full residential address (street, ZIP code, city, state);
• Identity documents (RG or CNH) when requested for verification;
• Pix key and bank details for processing withdrawals and deposits;
• Communication preferences and responsible gambling settings.

Data generated through platform use:

• Full sports betting history — matches from the Brasileirão, Copa do Brasil, Libertadores, and more;
• Session history for casino games, slots, crash games (Aviator, Spaceman, JetX), and jackpots;
• Records of deposits and withdrawals via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED;
• Responsible gambling settings active on the account (deposit, loss, time limits, and self-exclusion);
• Interactions with customer support (chat and email history).

Automatically collected data:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, time spent, and navigation flow within the platform;
• Cookie and similar technology data (detailed in section 6).

3. How 555kkk Uses Your Data

Every piece of data collected by 555kkk has a specific, documented purpose. We do not use your data for anything beyond what is listed below:

• Account operation: create, maintain, and manage your 555kkk account, including authentication, password recovery, and personal settings;
• Transaction processing: process deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED; process withdrawals via Pix to your bank account;
• Regulatory compliance: comply with applicable legal obligations, including identity verification (KYC), anti-money laundering (AML) requirements, and responses to requests from competent authorities;
• Platform security: detect and prevent fraud, unauthorized access, multi-account use, and bonus abuse;
• Responsible gambling: monitor gameplay behavior patterns to identify potential signs of problem gambling and proactively offer control tools;
• Product improvement: analyze usage data to improve the platform, fix technical issues, and develop new features;
• Communication: send account-related communications (bet confirmations, security alerts, important updates) and, if you have opted in, information about 555kkk promotions and news.

555kkk does not carry out automated decision-making that produces legal effects or significant impacts on you without human review. Any automated analysis — such as transaction risk detection — is reviewed by a team member before any action is taken on your account.

4. Legal Basis for Processing Your Data

The LGPD requires that all personal data processing have a specific legal basis. 555kkk operates under the following legal bases, as set out in art. 7 and art. 11 of Law No. 13,709/2018:

• Contract performance (art. 7, V): processing of identification, financial, and transaction data is necessary to operate your account and fulfill the contract established at registration and in the Terms and Conditions;
• Compliance with a legal obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and responding to requests from competent authorities are legal obligations that 555kkk must fulfill regardless of your consent;
• Legitimate interest (art. 7, IX): fraud detection, platform security, and gaming behavior analysis for the protection of all users constitute a legitimate interest of 555kkk, provided they do not override your fundamental rights;
• Consent (art. 7, I): marketing communications and non-essential cookies depend on your express consent, which can be withdrawn at any time without affecting your access to the platform.

Where processing is based on consent, you may withdraw it at any time by contacting contato@555kkk.best. Withdrawing consent for marketing communications does not affect the functioning of your account.

5. Who 555kkk Shares Your Data With

555kkk does not sell, rent, or share your personal data to third parties for commercial purposes. Data sharing occurs only in the situations described below, and always limited to the minimum data required for each purpose:

• Payment providers: financial institutions and Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago operators receive only the data necessary to process each specific transaction. These providers are bound by confidentiality agreements and handle your data as independent controllers subject to their own privacy policies;
• Game developers: providers such as Spribe (Aviator), Pragmatic Play (Spaceman, slots), NetEnt, and others receive anonymized session identifiers solely to enable game delivery. No personally identifiable data such as name or CPF is transmitted to game developers;
• Technical infrastructure providers: hosting, cybersecurity, and data analytics providers operating under Data Processing Agreements (DPA) with 555kkk, with no right to use the data for their own purposes;
• Authorities and regulatory bodies: 555kkk may disclose data to competent Brazilian authorities when required by law, court order, or valid legal process, in accordance with applicable Brazilian legislation.

All partners who receive personal data from 555kkk users are contractually required to maintain confidentiality, implement appropriate security measures, and use the data only for the specific authorized purposes.

6. Cookies and Tracking Technologies

555kkk uses cookies and similar technologies to ensure the platform works properly and to improve your experience. Cookies are divided into the following categories:

• Essential cookies: required for the basic operation of the platform — authentication, session management, CSRF protection, and language preferences. These cannot be disabled without affecting access to your account;
• Analytical cookies: collect information about how users navigate 555kkk — pages visited, session duration, technical errors — to identify areas for improvement. Data is aggregated and anonymized wherever possible;
• Preference cookies: remember your platform settings, such as default bet amount, notification preferences, and accessibility configurations;
• Security cookies: detect suspicious behavior, unusual access, and potential fraud attempts, helping keep your account safe.

555kkk does not use third-party advertising cookies or share browsing data with external ad networks. You can manage your cookie preferences in your browser settings or through your 555kkk account dashboard. Disabling non-essential cookies may affect optional platform features but will not prevent access to betting and games.

7. Data Security

555kkk employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: all communication between your device and 555kkk's servers is protected by TLS 1.3. This covers platform access, Pix transactions, and interactions with support;
• Encryption at rest: sensitive data stored on 555kkk's servers — including financial information, identity documents, and session data — is encrypted at rest using modern algorithms;
• Access control: only 555kkk team members with a legitimate business need have access to users' personal data. Access is logged, audited, and reviewed on a regular basis;
• Authentication: 555kkk offers two-factor authentication (2FA) for your account. We recommend enabling this additional security layer in your settings;
• Continuous monitoring: automated systems monitor the platform in real time to detect intrusion attempts, anomalous access, and suspicious behavior.

In the event of a security incident that may affect your personal data, 555kkk will notify the National Data Protection Authority (ANPD) and the affected individuals within the timeframes established by the LGPD, including information about the nature of the incident and the measures taken.

No security system is 100% foolproof. On your end, you can help keep your account safe by using a strong password, never sharing your credentials with anyone, and enabling 2FA.

8. Data Retention and Deletion

555kkk retains your personal data only for as long as necessary for the purposes for which it was collected, in compliance with applicable legal retention periods:

• Active account data: retained for as long as the account is active and for the period required after closure to meet legal obligations;
• Financial transaction history: retained for a minimum of 5 years after each transaction, in compliance with anti-money laundering legislation (Law No. 9,613/1998) and regulations issued by the Financial Activities Control Council (COAF);
• Betting records: retained for a minimum of 5 years for regulatory audit purposes and dispute resolution;
• Customer support details: retained for 2 years after the conclusion of each interaction, for quality control and the resolution of any complaints;
• Browsing data and cookies: retained for a maximum of 12 months from the date of collection.

After the periods above, data is securely deleted or anonymized so that the data subject can no longer be identified. Requests for data deletion are subject to review against minimum legal retention requirements — data that must be kept by law cannot be deleted before the applicable deadline, even at the data subject's request.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that 555kkk is committed to upholding and making easy to exercise:

To exercise any of these rights, send an email to contato@555kkk.best with the subject line "LGPD – Data Subject Request", clearly identifying your request and your account details. 555kkk will respond within 15 business days.

If you believe 555kkk has not adequately handled your request, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided in art. 18, § 1 of the LGPD.

10. Minors

555kkk is an entertainment platform exclusively for adults. Access and use by individuals under 18 years of age is strictly prohibited. 555kkk does not intentionally collect personal data from minors.

If 555kkk determines that an account was created by a person under 18, the account will be closed immediately, the data will be deleted in accordance with applicable legal retention periods, and any deposited funds will be returned following identity verification by the legal guardian.

If you are a parent or legal guardian and believe your minor child has accessed 555kkk, please contact us immediately at contato@555kkk.best so we can investigate and take the necessary action.

555kkk recommends that responsible adults use the parental control tools available in operating systems and browsers to prevent unauthorized access by minors to online betting and casino platforms.

11. Changes to This Policy and Contact Channel

555kkk may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. The "last updated" date at the top of this page is revised with each change.

When changes are significant — such as new processing purposes or new types of data collected — 555kkk will notify users via their registered account email and through a prominent notice on the platform with at least 5 days in advance before the new version takes effect.

Continued use of the platform after the updated version of this policy takes effect constitutes acceptance of the changes. If you disagree with the changes, you may request account closure before the effective date.

Data Protection Officer (DPO) at 555kkk:

• Email: contato@555kkk.best (subject: "LGPD – Data Subject Request")
• Live chat: available directly on the 555kkk platform, 24 hours a day
• Response time: up to 15 business days for personal data requests

For information about the platform's terms of use, please refer to our Terms and Conditions. For responsible gambling and betting control tools, visit our Responsible Gambling.