Privacy Policy – 555win: Your Data Protected

2. Data We Collect

The 555win collects only the data strictly necessary to operate the platform securely, fulfill legal obligations, and deliver the best possible experience to Brazilian players. Below are the categories of data we process:

We do not collect sensitive data categories such as racial or ethnic origin, religious belief, political opinion, trade union membership, genetic, biometric, or health data, unless strictly required by law.

3. How We Use Your Data

The 555win uses your personal data solely for the purposes described below. We do not use data for any purpose incompatible with what is listed here without your express consent:

• Account operation: create and maintain your profile, authenticate your access, and process your bets and financial transactions via Pix, bank slip, credit and debit card, Mercado Pago, or PicPay.
• Identity verification (KYC): confirm that you are who you say you are, that you are 18 years of age or older, and that you are eligible to use the platform in accordance with the applicable rules.
• Fraud and money laundering prevention: monitor suspicious behavioral patterns, meet reporting obligations to COAF, and maintain the platform's financial integrity.
• Compliance with legal obligations: comply with requirements from the Federal Revenue Service, the Central Bank, the ANPD, and other Brazilian regulatory bodies.
• Customer support: answer your questions, resolve account issues, process withdrawal requests, and provide 24-hour support in Portuguese.
• Experience personalization: suggest relevant games based on your usage history and preferences, always within the platform.
• Service communications: send deposit confirmations, withdrawal notices, security alerts, and notifications about important changes to the platform or its terms.
• Marketing communications: send promotions, bonuses, and news from 555win — only if you have opted in to receive them. You may unsubscribe at any time.
• Responsible gambling: monitor gaming patterns to identify at-risk behavior and, when necessary, proactively reach out with support resources.
• Platform improvement: analyze aggregated and anonymized usage data to improve features, performance, and security.

4. Legal Basis for Processing (LGPD)

All data processing carried out by 555win is grounded in at least one of the legal bases set out in art. 7 of the LGPD. The main bases we rely on are:

• Contract performance (art. 7, V): we process your identification, contact, and financial data because it is necessary to operate your account and process your transactions — without this data, we simply cannot provide the service.
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering (AML/PLD), COAF reporting, and LGPD compliance are legal obligations we must fulfill regardless of any other consideration.
• Legitimate interest (art. 7, IX): security analysis, fraud prevention, and platform improvement are activities that also protect you and the integrity of the 555win player community 555win.
• Consent (art. 7, I): marketing communications and advanced personalization are based on your express consent, which may be withdrawn at any time without affecting your normal use of the platform.

5. Data Sharing

The 555win does not sell, rent, or trade your personal data. Sharing occurs only in the situations below, always with the purpose of operating the platform, meeting legal requirements, or protecting the safety of all users:

• Payment providers: the data required to process transactions via Pix, boleto bancário, credit and debit cards, Mercado Pago, PicPay, and TED is shared with the respective financial processors, all operating under regulation by the Banco Central do Brasil.
• Game providers: partners such as Evolution Gaming, Pragmatic Play, PG Soft, and others receive only the minimum technical data needed to load and authenticate your game session. They do not have access to your full financial data.
• Identity verification services (KYC): certified document verification platforms used to confirm your identity as required by regulations.
• Regulatory authorities and public bodies: COAF, Receita Federal, ANPD, Banco Central, and other Brazilian public authorities when required by law, court order, or administrative proceeding.
• Infrastructure services: cloud hosting providers, cybersecurity services, and analytics operate under strict confidentiality and data processing agreements.

Every third party with access to user data from 555win is contractually required to handle that data with the same level of protection demanded by the LGPD and this Policy. We do not allow partners to use your data for their own purposes beyond what is strictly necessary to deliver the contracted service.

6. Cookies and Tracking Technologies

The 555win uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. Below are the categories of cookies we use:

• Essential cookies: required for the platform to function. They include session authentication, form security, and basic account preferences. They cannot be disabled without compromising the platform's operation.
• Performance cookies: collect anonymized information about how you use the platform — pages visited, session time, errors encountered — to help us identify and fix issues. They do not identify you personally.
• Functionality cookies: remember your language preferences, display settings, and other customizations so you don't have to reconfigure them every time you log in.
• Analytical cookies: used to understand aggregated platform usage patterns, always with anonymized data. They help us prioritize product improvements.

You can manage your cookie preferences in the banner shown on your first visit to the platform, or at any time through your browser settings. Disabling essential cookies may prevent the platform from functioning correctly, including access to your account.

The 555win does not use behavioral advertising cookies or share cookie data with third-party ad networks.

7. Data Security

Protecting your data is a technical and organizational priority at 555win. The security measures we apply include:

• Encryption in transit: all communication between your device — mobile, tablet, or computer — and our servers is protected by SSL/TLS with a 256-bit certificate.
• Encryption at rest: sensitive data such as CPF, banking information, and identity documents are stored encrypted in our systems.
• Access control: only team members who directly need access to perform their duties are permitted to view users' personal data, always with mandatory multi-factor authentication.
• Continuous monitoring: automated systems monitor unauthorized access attempts, anomalous transaction patterns, and suspicious behavior in real time, with immediate alerts to the security team.
• Security testing: we conduct regular penetration testing and security audits performed by independent specialists.
• Incident response plan: in the event of a data breach that could pose a risk to data subjects, the 555win will notify the ANPD and affected users within the legally required timeframes, as set out in Article 48 of the LGPD.

Despite all the measures above, no system is 100% immune to attacks. That's why we also recommend adopting good personal security habits: use a unique, strong password for your 555win, enable two-factor authentication whenever available, and never share your credentials with third parties.

8. Data Retention and Deletion

The 555win retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by Brazilian law:

• Active account data: retained for the entire period your account remains active on the platform.
• Financial and transaction data: retained for a minimum of 5 years after account closure, in accordance with Brazilian Federal Revenue requirements and anti-money laundering legislation.
• Identity verification data (KYC): retained for a minimum of 5 years after the last transaction, in accordance with the regulations of the Banco Central do Brasil.
• Betting history: retained for a minimum of 5 years for audit purposes and compliance with regulatory obligations.
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes.
• Access and security logs: retained for 6 months to 1 year depending on the sensitivity of the information.

Once mandatory retention periods have been met, your data is permanently and securely deleted or anonymized in a way that no longer allows you to be individually identified. A user-initiated account deletion request starts this process, subject to the minimum legal retention periods above.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you a robust set of rights over your personal data. 555win is committed to facilitating the exercise of these rights in a timely and transparent manner. See what you can request:

To exercise any of these rights, contact our DPO by email at privacidade@555win.express or directly via the platform's support chat. We will respond within 15 business days, as required by art. 18 of the LGPD.

10. Minors

The platform of 555win is intended exclusively for users aged 18 and over. We do not knowingly collect data from minors. If a minor provides data during registration through a false age declaration, access will be terminated immediately and all data will be deleted after any applicable legal retention obligations are met.

Parents or guardians of minors who share devices should use parental control software to block access to betting sites. The 555win is not liable for access by minors who bypass age verification controls through false declarations.

If you believe a minor has accessed our platform without authorization, please contact our support team immediately at privacidade@555win.express. We will act promptly to terminate access and delete the collected data.

11. International Data Transfers

Some of our technology and infrastructure providers operate servers outside Brazil. When personal data of users of 555win are transferred for processing in other countries, we ensure that such transfer takes place only:

• For countries with an adequate level of data protection recognized by the ANPD, pursuant to art. 33, I of the LGPD.
• With adequate safeguards through standard contractual clauses approved by the ANPD, pursuant to art. 33, II of the LGPD.
• Or with your specific consent to the transfer, where required.

In all cases of international data transfer, the data remains subject to the same level of protection guaranteed by this Policy and by the LGPD. Contracts with international partners include specific clauses for the protection of personal data belonging to Brazilian data subjects.

12. Changes to This Policy

The 555win may update this Privacy Policy periodically to reflect changes in our practices, the technologies we use, or applicable legal requirements. When that happens:

• The updated version will be published on this page with the revision date indicated at the top.
• Significant changes will be communicated by email to the account holder at least 7 days in advance.
• For changes that require your renewed consent — such as new consent-based processing purposes — we will request your explicit approval before beginning any new processing.

We recommend reviewing this Policy periodically. Continued use of the platform after non-material changes are published constitutes acceptance of the updated version.

13. DPO and Contact Channel

The 555win has appointed a Data Protection Officer (DPO) as required by art. 41 of the LGPD. The DPO serves as the point of contact between 555win, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights, clarify questions about this Policy, or report any concern related to the processing of your data, please get in touch:

• DPO Email: privacidade@555win.express
• General support: suporte@555win.express
• Live chat: available 24 hours a day directly on the platform after login
• Support language: Brazilian Portuguese (pt-BR)

We will respond to all data subject rights requests within 15 business days. For urgent security matters, such as suspected unauthorized access to your account, please use the live chat for immediate assistance.