Privacy Policy of 55kkcom — Your Data in Good Hands

The controller responsible for processing the personal data of platform users is 55kkcom (hereinafter referred to as "55kkcom", "we" or "platform"), operating the website 55kkcom.net and all services associated with it.

This Privacy Policy applies to:

• All visitors to 55kkcom.net, even those who do not register;
• All users registered on the platform, including those with active, suspended, or closed accounts;
• Anyone who interacts with 55kkcom support channels, including live chat and support email.

To exercise any right set out in this policy or to ask questions about how your data is handled, please contact us at suporte@55kkcom.net or via the live chat available 24 hours a day on the platform.

The 55kkcom collects only the data necessary to operate the platform securely and deliver an appropriate experience for Brazilian users. Data collection is organized into the following categories:

The 55kkcom does not collect sensitive data such as racial origin, religious beliefs, health information, or sexual orientation. Data from users under 18 is not intentionally collected — any account identified as belonging to a minor is closed immediately.

Each piece of data collected by 55kkcom has a specific, justified purpose. We use your information to:

• Operate and maintain your account — account creation, authentication, security, and user account management on the platform;
• Process financial transactions — deposits via Pix, bank slip (boleto bancário), credit/debit card, PicPay, Mercado Pago, and TED transfers, as well as withdrawals to Brazilian bank accounts;
• Identity verification (KYC) — age verification, account ownership confirmation, and compliance with anti-money laundering and counter-terrorism financing (AML/CFT) regulations;
• Personalize the experience — display relevant content based on your Sports Betting preferences (football, MMA, e-sports, volleyball) and casino games used;
• Operational communications — notifications about your account, transactions, Sports Betting results, promotions, and platform updates;
• Responsible gambling — monitoring of behavioral patterns to identify situations that may indicate problem gambling and to offer self-control tools;
• Security and fraud prevention — detection of suspicious activity, prevention of multiple-account use, and protection of platform integrity;
• Compliance with legal obligations — compliance with requests from competent Brazilian regulatory and judicial authorities.

The 55kkcom does not use your data for solely automated decision-making that produces significant legal effects without human oversight, as provided for in Article 20 of the LGPD.

Under the LGPD, all personal data processing must have a legal basis. The 55kkcom processes data on the following legal bases set out in Article 7 of the law:

• Contract performance (art. 7, V) — data required to operate your account, process deposits and withdrawals, and provide the Sports Betting and casino services contracted by the user;
• Compliance with a legal obligation (art. 7, II) — data required by AML/CFT, KYC, and other regulations applicable to the sector in Brazil;
• Legitimate interest (art. 7, IX) — browsing and behavioral data used to improve platform security, detect fraud, and optimize the user experience, provided this does not conflict with your fundamental rights;
• Consent (art. 7, I) — for marketing communications and promotions that are not required for account operation, subject to express consent that may be withdrawn at any time.

The 55kkcom does not process personal data without an identified legal basis. If you would like to know the specific legal basis for any processing related to your account, please contact our support team.

The 55kkcom does not sell or share users' personal data for third-party commercial purposes. Data sharing occurs only in the situations below, with the corresponding safeguards in place:

• Payment processors — financial institutions and card processors required to handle transactions via Pix, boleto, credit/debit card, and other available payment methods. These partners act as data processors under a data protection agreement;
• Game providers — partner studios such as Spribe, Pragmatic Play, PG Soft, Hacksaw Gaming, and others receive only the minimum data required to operate the games (an anonymized session identifier), with no complete personal identification data;
• Identity verification (KYC) providers — companies specializing in document verification that operate under contract with LGPD obligations equivalent to those of 55kkcom;
• Legal authorities — compliance with court orders and requests from the Public Prosecutor's Office, COAF, the Federal Revenue Service, and other competent Brazilian authorities, as provided under applicable law;
• Technology infrastructure — hosting providers, servers, and cybersecurity services that process data solely as processors, with no independent right to use it.

The 55kkcom uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are:

• Essential Cookies — required for the platform's core functionality, such as maintaining an authenticated session, the betting slip, and language preferences. These cannot be disabled without impacting your use of the platform;
• Performance cookies — collect anonymous data on how users navigate the platform (pages visited, session duration, errors encountered) to identify technical issues and improve performance;
• Functionality cookies — store user preferences, such as odds display format and interface settings, to personalize the experience on future visits;
• Security cookies — help detect suspicious activity, prevent fraud, and protect the platform against automated attacks.

The 55kkcom does not use third-party advertising cookies to track users on other sites outside the platform. You can manage your cookie settings through your browser at any time, but disabling essential cookies may affect login functionality and core platform features.

The 55kkcom retains personal data only for as long as necessary for the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Active account data — retained for the entire period the account remains active, until closure is requested by the user or determined by the platform;
• Financial and transaction data — retained for a minimum of 5 years after account closure, in accordance with Brazilian accounting, tax, and AML/CFT requirements;
• KYC verification documents — retained for up to 5 years after account closure or as required by the relevant regulatory authorities;
• Betting and casino game records — retained for a minimum of 3 years for audit purposes, dispute resolution, and fulfillment of regulatory obligations;
• Security and navigation logs — retained for up to 12 months, with possible extension in the event of an active fraud investigation or security incident;
• Support communication data — retained for up to 24 months for quality assurance and resolution of any disputes.

Once retention periods expire, data is securely deleted or irreversibly anonymized in accordance with data management best practices.

The 55kkcom implements technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. The main safeguards in place include:

• SSL/TLS encryption across all traffic between the user's device and platform servers;
• Encryption at rest for stored sensitive data, including financial information and identity documents;
• Role-based access control — each 55kkcom employee accesses only the data required for their specific role;
• Two-factor authentication (2FA) available for user accounts and mandatory for internal administrative access;
• Continuous monitoring of suspicious activity and unauthorized access attempts across platform systems;
• Regular security audits conducted by internal teams and specialized external partners;
• Incident response plan with defined procedures for containment, investigation, and notification as required by the LGPD.

Despite all these measures, no system is 100% impenetrable. The 55kkcom is committed to acting with the utmost speed and transparency in the event of any incident that could compromise the security of your data, notifying affected users and the National Data Protection Authority (ANPD) within the legally required timeframes.

The General Data Protection Law (LGPD) grants you, as the data subject, a set of rights that 55kkcom is committed to respecting and facilitating. See each right and how to exercise it below:

To exercise any of these rights, please contact us via live chat or by email at suporte@55kkcom.net, identifying yourself as the data subject. The 55kkcom responds to requests within 15 days, in line with the deadline established by the LGPD.

The 55kkcom is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account was created by someone under the age of 18, we take the following steps immediately:

• Immediate suspension of account access;
• Deletion of collected personal data, except for data that must be retained due to a legal obligation;
• Refund of any financial balances deposited, following ownership verification;
• Cancellation of any bets or casino games placed during the period of irregular use.

If you suspect that a minor's account is being used on the 55kkcom, please report it immediately by emailing suporte@55kkcom.net. We take this matter with the utmost seriousness.

The 55kkcom may update this Privacy Policy periodically, for reasons including:

• Changes to Brazilian data protection legislation or sector-specific regulations;
• New features or services added to the platform that involve data processing;
• Improvements to internal security and privacy practices;
• Changes to technology partners or service providers.

In the event of material changes, the 55kkcom will notify users by email or via a prominent notice on the platform at least 7 days in advance. The "Last updated" date at the top of this document will be revised with each modification. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, please contact 55kkcom through the channels below:

• Live chat — available 24/7, directly on the platform after login. Ideal for quick questions and urgent requests;
• Privacy email — suporte@55kkcom.net — for requests to exercise your rights (access, correction, deletion, portability), security incidents reported by users, or any concerns about data privacy;
• Help Center — visit our Frequently Asked Questions for quick answers to the most common questions related to your account and privacy;
• National Data Protection Authority (ANPD) — if you believe that 55kkcom is not adequately responding to your privacy requests, you may file a complaint directly with the ANPD (gov.br/anpd), Brazil's data protection regulatory authority.

The 55kkcom is committed to responding to all privacy requests within the 15-day period established by the LGPD. Cases requiring more detailed investigation will be addressed within 30 days, with the user kept informed throughout the process.