55gg Privacy Policy – How We Handle Your Data

1. Who We Are – Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of the personal data collected on this platform is the 55gg, operator of the 55gg.best website and all digital services offered under this brand in Brazil.

As the data controller, 55gg is the entity responsible for decisions relating to the processing of your personal data — what is collected, why it is collected, how it is stored, and with whom it may be shared within applicable legal limits.

To contact 55gg regarding this Privacy Policy or to exercise your rights as a data subject, please use the channels listed in section 13 of this document.

2. Personal Data We Collect

55gg collects different categories of personal data depending on how you use the platform. The table below details the categories, specific data points, and the context in which they are collected:

3. How We Collect Your Data

55gg collects personal data in the following ways:

• Directly from you: when creating your account, filling out the registration form, submitting documents for identity verification, making deposits, placing bets, contacting support, or participating in promotions;
• Automatically during use: technical data such as IP address, device type, browser, session duration, and pages visited are collected automatically by analytics systems and server logs whenever you access the platform — whether from a computer, Android device, or iOS device;
• Via cookies and similar technologies: 55gg uses first-party and partner cookies to keep your session active, personalize your experience, analyze platform usage, and — with your consent — display relevant communications. See section 10 for more details;
• From trusted third parties: in specific identity verification or fraud prevention cases, 55gg may look up information in databases belonging to partners specialized in KYC (Know Your Customer), in accordance with applicable law.

4. Purposes of Data Processing

55gg processes your personal data exclusively for the purposes listed below. No data is used for any purpose other than those described here without your prior consent or a new valid legal basis.

• Service delivery: create and manage your account, process bets, calculate winnings, handle deposits via Pix, boleto bancário, credit card, PicPay, or Mercado Pago, and execute withdrawals;
• Identity Verification and KYC: confirm that you are who you say you are, that you are 18 or older, and that you are eligible to use the platform's services in accordance with the applicable legal and regulatory requirements of the sector;
• Fraud and money laundering prevention: monitor transactions and usage patterns to identify and prevent unlawful activity, in compliance with 55gg's legal obligations;
• Compliance with legal obligations: meet requirements from Brazilian tax, judicial, and regulatory authorities, including maintaining records as required by applicable law;
• Platform improvement: analyze how users interact with 55gg to identify opportunities to improve the interface, loading speed, available markets, and overall experience;
• Operational communications: send notifications about your account, bet results, deposit and withdrawal confirmations, security alerts, and important platform updates;
• Marketing and promotions (with consent): send communications about 55gg promotions, bonuses, and updates only when you have given express consent, with the option to unsubscribe at any time;
• Responsible gambling: monitor usage patterns that may indicate problematic behavior and provide tools and support resources in line with the platform's responsible gambling guidelines.

5. Legal Bases for Processing (LGPD)

All personal data processing carried out by 55gg is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): the primary legal basis for processing necessary to deliver the contracted services — registration, betting, payments, and withdrawals;
• Compliance with a legal or regulatory obligation (art. 7, II): the basis for identity verification, anti-money laundering compliance, and maintaining records required by Brazilian authorities;
• Data subject consent (art. 7, I): the basis for sending marketing communications and using non-essential cookies. Consent may be withdrawn at any time;
• Legitimate interest (Art. 7, IX): basis for analyzing platform usage to improve the user experience and prevent fraud, provided 55gg's legitimate interests do not conflict with the fundamental rights of data subjects;
• Exercise of legal rights (art. 7, VI): the legal basis for retaining data in the context of judicial, administrative, or arbitration proceedings in which 55gg is a party.

6. Sharing Data with Third Parties

55gg does not sell users' personal data. Sharing with third parties takes place only in the situations described below, always limited to what is strictly necessary and with partners that maintain adequate protection standards:

• Payment processors: transaction data is shared with financial institutions and payment processors (such as Pix, card networks, PicPay, and Mercado Pago) solely for the purpose of processing deposits and withdrawals in BRL;
• Game providers: session and betting data is shared with providers such as Evolution Gaming, Pragmatic Play Live, and Ezugi to the extent necessary for the operation of the contracted games;
• Identity verification partners: identity documents are shared with specialized KYC partners to verify users' identity and eligibility as required by law;
• Infrastructure providers: 55gg uses cloud services and servers from technology partners to host the platform. These partners access data solely as processors, under contracts with mandatory data protection clauses;
• Public authorities: 55gg may share data with Brazilian judicial, law enforcement, tax, or regulatory authorities when required by law, court order, or a formal request from a competent authority;
• Fraud prevention: in cases of well-founded suspicion of fraud or money laundering, information may be shared with the relevant authorities as required by applicable anti-money laundering legislation in Brazil.

In all cases of data sharing with business partners, 55gg contractually requires those partners to process data in compliance with the LGPD and applicable security standards.

7. International Data Transfers

Some of 55gg's technology partners and game providers operate servers outside Brazil. When this occurs and involves the transfer of personal data belonging to Brazilian users, 55gg applies the safeguards required by the LGPD to ensure an adequate level of protection:

• Verification that the destination country provides a level of data protection equivalent to that established by the LGPD;
• Execution of specific data protection contractual clauses with the receiving partner;
• Adoption of contractual security standards equivalent to those required in Brazil.

8. Data Retention and Deletion

55gg retains your personal data for as long as necessary to fulfill the purposes described in this policy, or for the period required by applicable law, whichever is longer. The general retention criteria are:

• Registration and active account data: retained for as long as the account remains active and for up to 5 years after account closure, to meet legal obligations and resolve any disputes;
• Financial transaction data: retained for 5 years after the transaction, in accordance with applicable tax and anti-money laundering requirements in Brazil;
• Identity verification documents (KYC): retained for 5 years after account closure, in accordance with industry regulatory guidelines;
• Support and communication records: retained for 2 years after the case is closed;
• Data processed solely on the basis of consent (e.g., marketing): deleted within 30 days of consent withdrawal, subject to any mandatory minimum legal retention periods.

Once the applicable retention period has expired, data is anonymized or securely and irreversibly deleted from 55gg's systems. Anonymized data — which can no longer be used to identify an individual — may be retained indefinitely for statistical purposes.

9. Information Security

55gg applies technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The main measures in place include:

• 256-bit SSL Encryption across all communications between the user's device and the platform's servers;
• Encryption at rest for sensitive data stored in 55gg's databases;
• Strict access controls — only employees with a legitimate need are granted access to users' personal data, always with a full audit trail;
• Continuous monitoring of the infrastructure for detecting suspicious access, intrusion attempts, and behavioral anomalies;
• Penetration testing periodic assessments carried out by specialized teams to identify and remediate vulnerabilities before they can be exploited;
• Two-factor authentication (2FA) available to all users and mandatory for internal administrative access;
• Periodic training of the 55gg team on information security best practices and data protection.

In the event of a security incident involving personal data that may pose a risk to data subjects, 55gg will fulfill the notification obligations set out in the LGPD — reporting to the Autoridade Nacional de Proteção de Dados (ANPD) and notifying affected individuals within the applicable legal timeframes.

10. Cookies and Tracking Technologies

55gg uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — deliver relevant communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — session management, authentication, and security. These cannot be disabled without impairing your use of the services;
• Preference cookies: store user-selected settings such as language, display currency (R$), and market preferences;
• Analytical cookies: collect anonymized data on how users navigate the platform, which sections are most visited, and where difficulties arise. Used to improve the overall experience;
• Marketing cookies (with consent): allow us to display relevant communications and measure campaign effectiveness. They are only activated with the user's explicit consent.

You can manage your cookie preferences through your browser settings or via the preference panel available on the platform. Disabling essential cookies may affect key areas of 55gg, such as login and bet processing.

11. Minors

55gg services are intended exclusively for individuals who are 18 years of age or older. 55gg does not intentionally collect personal data from users under 18 and does not allow minors to register or use any of the platform's services.

During registration, users must confirm they are of legal age, and identity verification (KYC) includes validating the date of birth against official documents. Accounts created by minors — even using false information — will be immediately closed and any balances retained in accordance with the Terms and Conditions and applicable Brazilian law.

If you become aware that a person under 18 has created an account on 55gg or is using the platform's services, please notify us immediately at contato@55gg.best. 55gg will take the necessary action without delay.

12. How to Exercise Your Rights as a Data Subject

As guaranteed by the LGPD, you may exercise the following rights regarding your personal data processed by 55gg:

• Access: request a copy of the data 55gg holds about you;
• Correction: request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion: request that data be properly handled when it is unnecessary, excessive, or processed in violation of the LGPD;
• Portability: receive your data in a structured format for transfer to another service provider;
• Information on data sharing: know which third parties 55gg has shared your data with;
• Withdrawal of consent: withdraw consent given for specific purposes (e.g., marketing), at no cost and without affecting your access to essential services;
• Objection: object to processing carried out on the basis of legitimate interest when you believe your rights and freedoms override that interest.

To exercise any of these rights, submit a request to privacidade@55gg.best with your full name, registered CPF, and a clear description of your request. The response time is up to 15 business days from the date the request is received.

If you feel your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD), the competent regulatory authority in Brazil.

13. DPO – Data Protection Officer

55gg has appointed a Data Protection Officer (DPO) as required under article 41 of the LGPD. The DPO serves as the official communication channel between 55gg, data subjects, and the National Data Protection Authority (ANPD).

To contact the 55gg DPO:

• Dedicated privacy email: privacidade@55gg.best
• Topics covered: requests to exercise data subject rights, questions about data processing, LGPD-related complaints, security incident notifications
• Response time: up to 15 business days for data subject requests

For general support or customer service inquiries not related to privacy, use the 24-hour live chat available on the platform or email contato@55gg.best.

14. Changes to this Privacy Policy

55gg reserves the right to update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered by the platform.

Significant changes will be communicated by email to your registered address and/or via a prominent notice on the platform at least 7 calendar days before the effective date. For changes that expand the use of your data or modify the applicable legal bases, new consent will be requested where required.

The most current version of this policy will always be available on this page, with the date of the last revision indicated at the top of the document. 55gg recommends that you review this policy periodically to stay informed about how your data is handled.