55jogo Privacy Policy — How We Protect Your Data in Brazil

1. Who we are — data controller

A 55jogo, operated by the 55jogo.best platform, is the controller of personal data collected and processed under this Privacy Policy. We are a Sports Betting and digital entertainment platform serving exclusively the Brazilian market, operating in compliance with the laws of the Federative Republic of Brazil.

As the data controller, 55jogo is responsible for deciding how and why your personal data is processed. Our Data Protection Officer (DPO) can be reached at the following email address privacidade@55jogo.best for specific questions about the processing of your data.

This Privacy Policy applies to all registered users and visitors of the 55jogo platform, whether accessed via the 55jogo.best website on desktop or through a mobile browser. By using any 55jogo service, you acknowledge that you have read and understood this document.

2. What Personal Data We Collect

55jogo collects only the data needed to deliver platform services safely and reliably. We never collect more than necessary — this is a core LGPD principle and an internal 55jogo guideline.

Data you provided directly during registration:

• Full name as it appears on your official ID;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Full residential address (zip code, street, number, unit, city, state);
• Email address;
• Mobile phone number;
• Account password (stored in encrypted format — never as plain text).

Data collected during the identity verification (KYC) process:

• Government-issued photo ID (RG, CNH, or passport);
• Verification selfie to confirm document ownership;
• Proof of address (utility bill, water, gas, or a recent bank statement).

Financial data for payment processing:

• Pix key (CPF, email, phone number, or random key);
• Bank transfer details (bank, branch, account) — Nubank, Itaú, Bradesco, Banco do Brasil, and others;
• Last four digits of your credit or debit card (full card details are processed by PCI-DSS certified providers and are never stored on our servers).

Data collected automatically during your use of the platform:

• IP address and approximate location (state/city) for fraud prevention and regulatory compliance;
• Device type, operating system, and browser used;
• Betting history, deposits, withdrawals, and in-game activity;
• Access logs (date, time, and duration of sessions);
• Cookie and similar technology data as described in section 6.

3. How we use your personal data

Every piece of data 55jogo collects has a specific, legitimate purpose. Here is how we use your information:

• Service provision: Create and maintain your account, process deposits via Pix, boleto, card, PicPay and Mercado Pago, process withdrawals, and record Sports Betting activity and casino gameplay;
• Identity verification and fraud prevention: Verify your identity, prevent duplicate accounts, detect suspicious activity, and combat money laundering in compliance with Brazilian legal requirements;
• Communication with you: Send transaction confirmations by email or SMS, account notifications, alerts about changes to our terms or this policy, and customer support communications;
• Platform improvement: Analyze aggregated and anonymized usage data to identify technical issues, improve the interface, and develop new features that better serve Brazilian users;
• Regulatory compliance: Comply with legal obligations related to the prevention of financial crimes, consumer protection, and other requirements under Brazilian law applicable to the sector;
• Responsible gambling: Monitor usage patterns that may indicate problem behavior and activate the protection tools available on the platform.

55jogo does not use your data to sell third-party advertising, does not share your profile with marketing platforms without your consent and does not send promotional communications from other companies using your data.

4. Legal basis for processing (LGPD)

The General Data Protection Law (Lei 13.709/2018) requires every company to identify the legal basis authorizing the processing of personal data. 55jogo processes your data under the following legal grounds set out in the LGPD:

When processing is based on your consent — such as promotional emails — you may withdraw that consent at any time without affecting your access to any other 55jogo services.

5. Data sharing with third parties

55jogo never sells your personal data. Sharing occurs only in the following specific and necessary situations:

• Payment processors: To process deposits via Pix, credit and debit card, PicPay, Mercado Pago, and TED transfers. These partners are contractually required to handle your data with the same level of security demanded by the LGPD and may never use your information for any other purpose;
• Game and casino providers: To provide slots, Live Casino, and crash games, certain certified providers receive the minimum data necessary for the gaming session. These providers are audited by independent laboratories and are subject to confidentiality agreements;
• Identity verification systems (KYC): Specialized partners in document verification, operating under certification and responsible for confirming the authenticity of documents submitted during registration;
• Government and regulatory authorities: When required by law, court order, or directive from a competent Brazilian regulatory authority — such as the Conselho de Controle de Atividades Financeiras (COAF), the Receita Federal, or the ANPD — 55jogo will provide the requested data in accordance with applicable legal requirements;
• Independent security auditors: To verify the integrity of security systems and game fairness, certified auditors are granted restricted access to anonymized technical data.

6. Cookies and tracking technologies

55jogo uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. See the types of cookies we use:

• Essential cookies: Required for the platform's basic operation — keeping your session active while you browse, remembering your language preferences, and processing transactions securely. These cookies cannot be disabled without affecting your ability to use the platform;
• Security cookies: Used to detect unauthorized access attempts, identify suspicious behavior, and protect your account against fraud. These are part of the platform's mandatory security measures;
• Performance cookies: They collect anonymized data on how users navigate the platform — which pages load more slowly, which features are used most — to help us improve the product. Data is always aggregated and never identifies you individually;
• Preference cookies: They remember your interface settings — such as betting filters and notification preferences — so you don't have to reconfigure them every time you log in.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent the platform from functioning properly, including account access and bet processing.

55jogo does not use third-party cookies for behavioral advertising or cross-platform tracking. No data collected via cookies is sold to advertising networks.

7. Data Security

Protecting your data is a core technical and operational priority at 55jogo. We have implemented multiple layers of security to minimize the risk of unauthorized access, data loss, or leaks:

• 256-bit SSL encryption: All communication between your device and 55jogo's servers is protected by end-to-end encryption. The padlock icon in your browser confirms the connection is secure;
• Secure password storage: User passwords are stored as salted hashes — never as plain text. Even in the unlikely event of unauthorized database access, passwords cannot be recovered;
• Two-factor authentication (2FA): Available and recommended for all users. With 2FA enabled, even if someone obtains your password, they cannot access your account without the second authentication factor;
• Continuous monitoring: Our security systems monitor access and transactions in real time to detect suspicious patterns. Repeated login attempts with incorrect credentials trigger an automatic temporary account lock;
• Financial data separation: Credit and debit card data is processed by PCI-DSS (Payment Card Industry Data Security Standard) certified providers and is never stored on our servers;
• Periodic audits: We conduct regular penetration tests and security audits with specialized firms to identify and address vulnerabilities before they can be exploited.

Despite all these controls, no system is 100% immune to threats. In the event of a security incident affecting your personal data, 55jogo will notify you and the ANPD within the timeframes established by the LGPD, with full details of what occurred and the steps taken.

8. How long we retain your data

55jogo retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, taking into account the legal retention obligations applicable to the sector in Brazil.

• Active account data: Retained for the entire period your account is active and for 5 years following closure, as required by anti-money laundering compliance obligations;
• Financial transaction records (deposits and withdrawals via Pix, boleto, card): Retained for 5 years from the transaction date, as required by legal accounting and tax obligations;
• Betting and gameplay records: Retained for 5 years for dispute resolution and regulatory audit purposes;
• KYC verification data (documents): Retained for 5 years after account closure or as directed by a competent authority;
• Access records and security logs: Retained for 12 months for security incident investigation purposes;
• Marketing communication data: Deleted within 30 days of consent withdrawal, unless another legal basis for retention applies.

Once the applicable retention period has ended, data is securely deleted or permanently anonymized — so it can no longer be linked back to you as the data subject.

9. Your rights as a data subject

The LGPD grants you a robust set of rights over your personal data. At 55jogo, these rights can be exercised at any time by emailing privacidade@55jogo.best or via support chat. We respond within 15 business days, as required by law.

• Right of access (Art. 18, I and II): You can request a complete copy of all personal data 55jogo holds about you, including your betting history, transactions, and recorded communications;
• Right to correction (Art. 18, III): If any registered data is incorrect or out of date, you may request a correction at any time. For sensitive data such as CPF and date of birth, supporting documentation may be required;
• Right to erasure (Art. 18, VI): You may request deletion of your data where processing was based on consent you have since withdrawn, or where the data is no longer needed for its original purpose. Please note that some data may be retained due to legal obligations even after a deletion request;
• Right to data portability (Art. 18, V): You may request your data in a structured, machine-readable format for transfer to another service, where technically feasible;
• Right to withdraw consent (Art. 18, IX): For consent-based processing — such as receiving promotional emails — you may withdraw your consent at any time without affecting your access to 55jogo's other services;
• Right to information on data sharing (Art. 18, VII): You have the right to know which third parties your data has been or is being shared with, and why;
• Right to object (Art. 18, VIII): You may object to processing carried out on the basis of legitimate interest when that processing violates your fundamental rights.

10. Minors

55jogo is a platform exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from individuals under 18.

Registration requires date-of-birth confirmation and acceptance of the Terms of Use, which include a declaration of legal age. The KYC verification process requires a government-issued photo ID — effectively preventing minors from completing registration.

If we have any evidence that an account belongs to a person under 18, it will be closed immediately, the data will be deleted, and any deposited funds will be returned to the holder of the payment method used.

Legal guardians who identify that a minor has used the platform should contact us immediately at privacidade@55jogo.best so we can take the necessary steps as a matter of priority.

11. Changes to this Privacy Policy

55jogo may update this Privacy Policy periodically to reflect changes in our services, applicable law, or our data processing practices.

When we make significant changes — ones that affect your rights or how we handle your data — we will notify you at least 15 days in advance by email and through a prominent notice on the platform. Minor changes, such as wording corrections or contact updates, may be made without prior notice.

The date of the most recent update is always shown at the top of this page. A history of previous versions of this policy is available upon request to our DPO at privacidade@55jogo.best.

Continued use of the 55jogo platform after the effective date of a new version of this policy constitutes acceptance of the changes made. If you do not agree with the changes, you must close your account before the effective date.

12. Contact, DPO & ANPD Complaints

For any questions, requests, or complaints about how 55jogo handles your personal data, you can reach us through the channels below:

• Data Protection Officer (DPO) email: privacidade@55jogo.best — for formal LGPD-related requests;
• General support: contato@55jogo.best or via live chat on the platform, available 24 hours in Brazilian Portuguese;
• Response time: Requests related to data subject rights are responded to within 15 business days as required by the LGPD.

If you believe your rights as a data subject have not been properly upheld by 55jogo, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil. Information on how to file a complaint with the ANPD is available on the agency's official portal.