Privacy Policy of 555u: your data protected

1About Us

A 555u is a Sports Betting and online casino platform operating exclusively for the Brazilian market, accessible at 555u.click. For the purposes of this Privacy Policy, the 555u acts as the controller of its users' personal data, responsible for determining the purposes and means of processing the information collected during use of the platform.

This Privacy Policy applies to all services provided by the 555u, including Sports Betting (Brasileirão, Libertadores, UFC, NBB, and other competitions), Live Casino, slots, crash games, and all account, deposit, and withdrawal features. By creating an account or using any feature of the platform, you confirm that you have read and understood this policy.

2Data We Collect

A 555u collects only the data necessary for the safe and efficient operation of the platform. Nothing beyond what is strictly required for the purposes described in this document.

Data you provide directly:

• Registration: full name, CPF, date of birth, email address, mobile number, and residential address.
• Identity verification (KYC): copy of a national ID, driver's license, or passport; proof of address issued within the last 90 days.
• Payments: Pix key, bank account details for wire transfer, card information (tokenized by the payment processor — 555u does not store your full card number).
• Communications: messages sent to support via live chat or email, including conversation content and history.

Automatically collected data:

• Usage data: pages visited, games accessed, bets placed, session time and duration.
• Technical data: IP address, browser type and version, operating system, device identifier, screen resolution.
• Cookies and similar technologies: as described in section 6 of this policy.

3How We Use Your Data

Each piece of data collected by the 555u has a specific, documented purpose. Below are the main ways we use our users' information:

A 555u does not use your personal data to sell targeted advertising to third parties. Marketing communications sent by the platform — such as emails about Brasileirão promotions, weekly cashback, or new casino games — are based on the existing contractual relationship and can be canceled at any time via the unsubscribe link included in each message.

4Legal Bases for Processing

As required by the LGPD, all personal data processing carried out by the 555u is grounded in at least one of the legal bases set out in Article 7 of Law No. 13,709/2018. The primary bases used are:

• Contract performance (art. 7, V): most of the data collected is necessary to operate your account, process Pix deposits and withdrawals, and provide the sports betting and casino services you have signed up for.
• Compliance with a legal obligation (Art. 7, II): data collected to meet identity verification (KYC) requirements, anti-money laundering regulations, and other obligations imposed by Brazilian law.
• Legitimate interest (art. 7, IX): usage and technical data collected to improve the platform, detect fraud, and maintain overall system security — always in a manner consistent with users' fundamental interests and rights.
• Consent (Art. 7, I): where applicable, such as for sending optional marketing communications. Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

5Sharing with Third Parties

A 555u shares user data with third parties only when strictly necessary to provide our services or to comply with legal obligations. We never share data with advertising companies or data brokers.

Situations where sharing takes place:

• Game providers: minimum data required to identify the player and record gaming sessions with Pragmatic Play, Evolution Gaming, PG Soft, Hacksaw Gaming, and other partners. These providers operate under contractual agreements that ensure proper data handling in accordance with the LGPD.
• Payment gateways: data required to process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED. Payment processors are certified by the Central Bank of Brazil.
• Identity verification services: documents submitted for KYC are processed by partners specialized in regulatory compliance, with restricted and audited access.
• Competent authorities: when required by court order, money laundering investigation, or request from a Brazilian regulatory authority, in accordance with applicable law.

6Cookies and Similar Technologies

A 555u uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and detect security threats. When you access the platform for the first time, you will be informed about the use of cookies and can manage your preferences.

Types of cookies used:

• Essential cookies: required for the platform's basic functionality — session authentication, bet slip management, and language preferences. These cannot be disabled without affecting your ability to use the platform.
• Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, load times, and errors encountered. Used to improve the overall user experience.
• Functionality cookies: store user preferences such as configured betting limits, display theme, and recent in-platform browsing history.
• Security cookies: used to detect unauthorized access attempts, bots, and other suspicious behaviors that could put your account at risk.

You can manage and disable non-essential cookies in your browser settings. Disabling essential cookies may prevent access to certain platform features, including login and placing bets.

7Data Security

A 555u implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures in place include:

• 256-bit SSL encryption on all communications between your device and our servers.
• Passwords stored using high-complexity cryptographic hashing — 555u never stores your password in plain text.
• Credit card data tokenized by the payment processor — 555u does not store the full card number.
• Internal access to personal data is restricted to employees with a justified operational need, with a full audit log of all access.
• Continuous security monitoring for detection of intrusion attempts, anomalous access, and suspicious activity.
• Regular security testing and vulnerability assessments carried out by a specialized team.

In the event of a security incident that may affect your personal data, the 555u will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with details about what happened, which data was affected, and what measures were taken.

8Data Retention and Deletion

A 555u retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet applicable legal obligations. The general retention criteria are:

• Active account data: retained for as long as the account remains active and for the period required to resolve any pending disputes or fulfill contractual obligations.
• Financial transaction data (Pix, boleto, card, TED): retained for at least 5 years in accordance with Brazilian tax law and anti-money laundering requirements.
• KYC documents: retained for the period required by anti-money laundering regulations (minimum of 5 years after account closure).
• Betting history: retained for 5 years for audit and dispute resolution purposes.
• Customer support data: conversations and tickets kept for 2 years after resolution.

Once legal retention obligations have been fulfilled, data is securely and permanently deleted. You may request early deletion of data not subject to legal retention obligations at any time through the support channel.

9Minor's Data

A 555u is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account was created by a minor, we immediately close the account and delete all collected personal data, except for what is required to document the incident.

If you believe a minor may be using the platform, please contact our support team immediately via live chat so we can investigate and take appropriate action.

10International Data Transfer

Some of the service providers partnering with 555u — such as casino game providers (Pragmatic Play, Evolution Gaming, PG Soft) and cloud infrastructure — may be based outside Brazil, which involves international data transfers in order to deliver the services.

Every international data transfer carried out by 555u meets the requirements of Article 33 of the LGPD, which permits transfers when the destination country offers an adequate level of protection or when sufficient contractual guarantees exist between the parties. The 555u includes specific data protection clauses in all contracts with partners that receive data from Brazilian users.

11Your Rights as a Data Subject (LGPD)

Under Article 18 of the LGPD, you have the following rights regarding your personal data processed by 555u:

• Processing confirmation: find out whether 555u processes your data and, if so, which data.
• Access: obtain a copy of your personal data in a readable format.
• Correction: request the update or correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion: of unnecessary, excessive, or non-compliant data under the LGPD.
• Portability: receive your data in a structured, interoperable format.
• Deletion: deletion of personal data processed on the basis of consent, except where retention is required by law.
• Sharing information: know which public and private entities 555u shares data with.
• Information on the option not to consent: be informed of the consequences of withholding consent.
• Consent withdrawal: withdraw previously granted consent at any time.

To exercise any of these rights, contact our team via the 24h live chat on the platform or by email at suporte@555u.click with the subject line "LGPD Request". We will respond within 15 business days. In more complex cases, we may request documentation to confirm your identity before processing the request.

12Privacy Contact Channels

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please use the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the 555u.click platform. It is the fastest channel for resolving questions and urgent requests.
• Data Protection Officer (DPO) email: suporte@555u.click — with the subject line "LGPD Request / Privacy". Response time: up to 15 business days.

A 555u has appointed a Data Protection Officer (DPO) responsible for overseeing the processing of personal data and serving as a communication channel with data subjects and the National Data Protection Authority (ANPD).

13Changes to This Policy

A 555u may update this Privacy Policy periodically to reflect changes in data processing practices, applicable Brazilian legislation, or services offered by the platform. Significant changes will be communicated via registered email and/or platform notification at least 7 days before taking effect.

The version of this Privacy Policy currently in force is the one published at 555u.click/privacy-policy. The date of the last update is shown at the top of this document. Continued use of the platform after an updated version takes effect constitutes acceptance of the new terms.