0055bet Privacy Policy – LGPD Data Protection

1. Introduction and Data Controller

This Privacy Policy describes how 0055bet, controller of the personal data collected through the platform available at 0055bet.best, processes its users' information in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable legislation in Brazil.

By creating an account on 0055bet and using any of our services — Sports Betting on the Brasileirão, Libertadores, slots, live casino, crash games, or any other category — you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described herein.

This policy applies to all registered users of the platform, visitors to the website, and anyone who interacts with 0055bet through our support channels — including by email, live chat, or any other official communication channel.

2. Data We Collect

0055bet collects only the information necessary to deliver its services, ensure the security of financial transactions, and meet the legal obligations applicable to the sector. We do not collect data without a clear and justifiable purpose.

2.1 Data you provide directly

• Registration data: full name, CPF, date of birth, email address, and mobile number;
• Address data: zip code, street address, number, neighborhood, city, and state (required for identity verification);
• Identity documents: image of a national ID, driver's license, or passport, along with a selfie for facial verification — collected only when required for KYC (Know Your Customer);
• Banking details: Pix key, credit/debit card details, or bank account used for deposits and withdrawals;
• Support communications: chat conversation history, emails sent, and support interaction records.

2.2 Automatically collected data

• Usage data: betting history, games accessed, amounts wagered, winnings, and withdrawals made;
• Technical data: IP address, browser type and version, operating system, device used (mobile, tablet, or desktop), and configured language;
• Session data: login and logout times, session duration, and pages visited within the platform;
• Cookies and similar technologies: as described in section 7 of this policy.

3. Purpose of Processing

0055bet uses the data it collects solely for the purposes listed below. No data is used for any purpose other than those that justified its collection without the data subject's new express consent:

• Account creation and management: registration, authentication, platform access, and account settings;
• Transaction processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfers; withdrawal processing and identity verification (KYC);
• Service delivery: provision of Sports Betting, slots, live casino, crash games, and all other modes available on the platform;
• Security and fraud prevention: detection of suspicious activity, multiple accounts, money laundering, and other illicit use of the platform;
• Customer support: answering questions, resolving issues, and logging interactions for quality assurance purposes;
• Essential communications: transaction notifications, security alerts, terms updates, and other mandatory communications;
• Responsible gambling: monitoring usage patterns to identify signs of problematic behavior and offer control tools;
• Legal and regulatory obligations: compliance with tax obligations, anti-money laundering (AML) requirements, and other legal obligations applicable to the sector in Brazil.

4. Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing operation have a legal basis to justify it. 0055bet processes your data under the following grounds set out in article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): the processing of registration, transactional, and identity data is required to fulfill the service agreement entered into at the time of account creation. Without this data, it is not possible to create an account, process deposits or withdrawals, or provide the services;
• Compliance with a legal obligation (art. 7, II): financial and identification data is processed to comply with anti-money laundering obligations (Law No. 9.613/1998), tax requirements, and other applicable regulatory standards;
• Legitimate interest (Art. 7, IX): technical and behavioral data are used for security purposes, fraud detection, and ongoing platform improvement, always in a proportionate manner and in full respect of your rights;
• Consent (art. 7, I): for marketing communications and non-essential cookies, the legal basis is your express consent, which may be withdrawn at any time.

5. Data Sharing with Third Parties

0055bet does not sell users' personal data. Sharing with third parties occurs only in the situations listed below, all limited to the minimum necessary for each specific purpose:

• Payment processors: partners responsible for processing Pix, boleto bancário, card, and other available payment method transactions. Sharing is limited to the information necessary to complete the transaction (banking details and CPF);
• KYC and identity verification providers: companies specializing in document verification and identity validation, used to confirm user identity when required by regulation;
• IT infrastructure providers: cloud hosting, server, and cybersecurity services that support platform operations. All operate under data processing agreements compatible with the LGPD;
• Authorities and regulatory bodies: when required by court order, request from a competent authority, or fulfillment of a legal obligation — such as requests from the Brazilian Central Bank, Federal Revenue Service, or Public Prosecution Office;
• RNG auditors and certification bodies: companies that audit the random number generators used in casino games and slots to certify the integrity and fairness of results.

6. Payment and Financial Transaction Data

All of 0055bet's payment infrastructure operates to the highest security standards in the Brazilian financial market. The available methods — Pix, boleto bancário, credit/debit card (Visa, Mastercard, Elo), PicPay, Mercado Pago, and TED bank transfers from banks including Nubank, Itaú, Bradesco, Banco do Brasil, Caixa Econômica Federal, Santander, and Inter — are processed by partners certified by the Banco Central do Brasil.

Credit and debit card data is never stored directly on 0055bet's servers. All payment processing is handled by PCI-DSS-certified gateways (Payment Card Industry Data Security Standard), which tokenize card information before any transmission takes place. 0055bet receives only a secure token representing the payment instrument — never the full card details.

Your transaction history (deposits, withdrawals, bets, and winnings) is available in your account statement on the platform and is retained for a minimum of 5 years, as required by Brazil's tax and anti-money laundering legislation.

7. Cookies and Tracking Technologies

0055bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and, with your consent, for usage analytics and content personalization.

7.1 Types of cookies used

• Essential cookies: required for the platform to function — session authentication, language preferences, and security. They cannot be disabled without affecting your use of the services;
• Performance cookies: collect anonymous data on how users interact with the platform to identify pages with issues and improve loading speed;
• Functionality cookies: store user preferences such as interface settings, favorite games, and betting preferences to personalize your experience;
• Analytical cookies: used with traffic analytics tools to understand aggregate user behavior. Data is anonymized prior to processing.

7.2 Cookie controls

You can manage your cookie preferences at any time in your account settings or directly through the cookie consent banner displayed on your first visit to the site. Disabling non-essential cookies does not prevent you from using the platform, but may limit some personalization features.

In addition to managing preferences on the platform, you can also configure your browser to automatically block or delete cookies. Instructions vary by browser — Chrome, Firefox, Safari, Edge, and others all include this option in their privacy settings.

8. Data Retention and Deletion

0055bet retains users' personal data for as long as necessary for the purposes that led to its collection, respecting the minimum retention periods required by Brazilian law. The main retention criteria are:

• Account and registration data: retained for as long as the account is active and for up to 5 years after closure, as required by the Brazilian Civil Code for record preservation;
• Financial and transaction data: retained for a minimum of 5 years, in accordance with Law No. 9,613/1998 (anti-money laundering) and federal tax legislation;
• Identification documents (KYC): retained for the period required by regulatory compliance standards, generally 5 years after the last transaction;
• Support records and communications: retained for 2 years for quality management purposes and resolution of any disputes;
• Technical data and access logs: retained for 6 months, in accordance with the Brazilian Internet Civil Framework (Law No. 12.965/2014), Article 15.

Once applicable retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. You may also request early deletion of data not subject to a legal retention obligation, as described in Section 11 of this policy.

9. Information Security

0055bet employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: all communications use TLS 1.3 with 256-bit SSL — no data travels in plain text;
• Encryption at rest: sensitive data stored on our servers is encrypted using AES-256;
• Password hashing: passwords are never stored in plain text — we use modern, secure hashing algorithms with an individual salt per user;
• Two-factor authentication (2FA): available to all users, strongly recommended as an additional layer of protection;
• Continuous monitoring: automated systems monitor suspicious access, intrusion attempts, and anomalies in real time, 24 hours a day;
• Internal access control: 0055bet employees only have access to the data necessary for their specific roles. All access is logged and regularly audited;
• Periodic security testing: we conduct regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

10. Minor Protection

0055bet's services are intended exclusively for users aged 18 and over. The platform does not intentionally collect or process personal data from minors. Anyone under the age of 18 is prohibited from creating an account or using the platform's services.

During the registration and identity verification process, 0055bet checks the date of birth provided and may request an official photo ID to confirm the user is of legal age. Accounts identified as belonging to minors are closed immediately, with any available balance returned to the identified legal guardian.

If you become aware that a person under 18 has created an account on 0055bet, please contact us immediately at privacidade@0055bet.best so that the appropriate measures can be taken.

11. Your Rights as a Data Subject

The LGPD grants you a set of rights over your personal data, and 0055bet is committed to respecting and facilitating each one. See below for a full breakdown of your rights and how to exercise them:

12. Data Protection Officer (DPO)

0055bet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy, handling data subject requests, and serving as the point of contact with Brazil's National Data Protection Authority (ANPD).

The 0055bet DPO can be reached exclusively through the dedicated privacy channel:

• DPO email: privacidade@0055bet.best
• Suggested subject line: "LGPD Request — [briefly describe the subject]"
• Response time: up to 15 business days for data subject rights requests

The Data Protection Officer also handles complaints related to data processing and may escalate unresolved matters to the ANPD, should the data subject consider it necessary after exhausting the internal channel.

13. Changes to This Privacy Policy

0055bet may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or platform features. All material changes are communicated by email and through an in-platform notification with a minimum advance notice of 15 calendar days before taking effect.

Continued use of the platform after the effective date of any updated terms is considered tacit acceptance of the changes. If you disagree with a change, you have the right to close your account and request deletion of any data not subject to legal retention requirements before the effective date, with no penalty.

The date of the last update to this policy is always shown at the top of the document. We recommend reviewing this page periodically to stay informed about how 0055bet handles your data.

14. Contact & Privacy Channel

For questions related to this Privacy Policy, the processing of your personal data, or to exercise any of your rights under the LGPD, please use the channels below:

• Dedicated privacy channel (DPO): privacidade@0055bet.best — for LGPD requests, with a response time of up to 15 business days
• General support: suporte@0055bet.best — for general platform inquiries, response within up to 2 business hours
• Live chat: available 24 hours a day, 7 days a week, on the platform after login
• Help Center: access the Frequently Asked Questions page for quick responses

If you are not satisfied with 0055bet's response to a data subject rights request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.