555wim Privacy Policy – How We Protect Your Data

1. Who We Are and Data Processing Responsibility

555wim is the controller of the personal data collected through the website 555wim.best and all digital channels operated under that brand. As the data controller, 555wim is responsible for defining the purposes and means by which user data is processed, in compliance with the General Data Protection Law (LGPD — Law No. 13,709/2018).

This Privacy Policy applies to all registered players on the 555wim platform, to visitors who do not yet have an account, and to anyone who interacts with 555wim's Sports Betting, live casino, slots, crash games, poker, or any other available service.

2. What Data We Collect

2.1 Data You Provide Directly

During registration and throughout your use of the 555wim platform, we collect the following data that you provide directly:

• ID: full name, CPF, date of birth, gender;
• Contact: email address, mobile number, full residential address including ZIP code;
• Documents: a copy of a national ID, driver's license, or passport, along with proof of address (requested during the KYC verification process);
• Financial: registered Pix key, tokenized credit or debit card details, bank account information for withdrawals via TED;
• Preferences: notification settings, voluntarily set deposit limits, sports and game preferences.

2.2 Automatically collected data

When you access the 555wim platform via mobile or browser, we automatically collect certain technical data required for the service to function and remain secure:

• IP address and network access information;
• Device type and version, operating system, and browser;
• Session data: pages visited, access time, session duration, interface interactions;
• Approximate geolocation data (IP-based, not GPS) for eligibility verification;
• Information on cookies and similar technologies, as described in section 6 of this policy.

2.3 Betting & Transaction Data

The complete history of bets placed, deposits, withdrawals, and bonuses used on 555wim is recorded and stored as part of the service and to meet regulatory obligations. This data includes amounts wagered, markets selected, outcomes, winnings, losses, and all financial movements associated with your account.

3. How We Use Your Data

555wim uses collected data strictly for the purposes described below. No data is used for purposes incompatible with those listed here unless a new legal basis is established and communicated to you:

• Service delivery: create and manage your account, process bets, calculate odds, settle results, and handle deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED;
• Identity verification (KYC): confirm that you are who you say you are, that you are over 18 years of age, and that you are not subject to an active self-exclusion;
• Fraud and money laundering prevention: monitor unusual transactions, identify irregular usage patterns, and fulfill financial compliance obligations applicable to the sports betting sector in Brazil;
• Customer support: answer questions, handle complaints, and provide technical assistance via live chat, email, and other 555wim support channels;
• Account communications: send transaction confirmations, security alerts, notices of terms updates, and platform-related notifications;
• Experience personalization: tailor market recommendations, display relevant casino games, and personalize promotions based on your usage preferences — always in aggregated form and within reasonable limits;
• Continuous platform improvement: analyze usage patterns in aggregate to identify opportunities for technical and product improvements at 555wim;
• Compliance with legal obligations: meet regulatory requirements, court orders, or requests from competent authorities as provided by law.

4. Legal Basis for Processing

The LGPD requires every personal data processing activity to have a defined legal basis. 555wim relies on the following legal bases for each type of processing carried out:

• Performance of a contract (Art. 7, V LGPD): processing required to deliver the services you signed up for when creating an account and using the platform — including bet processing, payments, and support;
• Compliance with a legal obligation (Art. 7, II LGPD): identity verification (KYC), anti-money laundering compliance, tax reporting, and compliance with court orders;
• Legitimate interest (Art. 7, IX of the LGPD): fraud prevention, platform security, service improvements, and aggregated usage analytics — always proportionate and respectful of your interests;
• Consent (Art. 7, I of the LGPD): marketing communications by email or SMS about 555wim promotions and updates — you may withdraw this consent at any time in your account settings.

5. Data Sharing

555wim does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the situations listed below, each with a clear legal basis and data protection agreements in place where applicable:

5.1 Technology and service providers

To operate the platform, 555wim uses third-party providers that may process data on our behalf: cloud infrastructure providers, payment gateways for processing Pix and card transactions, casino game providers (such as Pragmatic Play and Evolution Gaming), and security analytics tools. All providers are selected against strict LGPD compliance criteria and operate under contracts that limit data use strictly to service delivery purposes.

5.2 Regulatory and legal authorities

555wim may share data with competent authorities when required by law, court order, or in response to investigations by Brazilian regulatory bodies. In such cases, we share only the data specifically requested and within the legal scope of the requirement.

5.3 Corporate Transactions

In the event of a merger, acquisition, or corporate restructuring, player data may be transferred as part of the process. In any such scenario, 555wim commits to notifying users at least 30 days in advance and to ensuring that the receiving party upholds the same data protection standards set out in this policy.

6. Cookies and Tracking Technologies

555wim uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect aggregated analytical data. The cookies used fall into the following categories:

• Essential cookies: required for the platform's basic operation — session authentication, security, and language preferences. These cannot be disabled without affecting the service;
• Performance cookies: collect aggregated data on how users navigate the platform to identify improvements — most visited pages, load times, and drop-off points in user flows;
• Functionality cookies: remember your preferences — such as favorite casino games, preferred sports, and odds display settings;
• Personalization cookies: used to offer market recommendations and relevant promotions based on your usage history on 555wim. These can be disabled in your account settings without affecting core platform functionality.

You can manage your cookie preferences in your 555wim account settings panel or through your browser's privacy settings. Disabling essential cookies may affect the normal functioning of the platform.

7. Data Security & Storage

Protecting 555wim players' data is both a technical and organizational priority. The security measures in place include:

• Encryption in transit: all data transmitted between your device and 555wim's servers is protected by TLS 1.3 with 256-bit SSL encryption;
• Encryption at rest: sensitive data such as CPF, identity documents, and financial information is stored with encryption in our databases — even if someone gained physical access to the servers, they would not be able to read this data;
• Two-factor authentication: available and recommended for all 555wim accounts as an additional layer of protection against unauthorized access;
• Continuous monitoring: automated systems monitor unusual access attempts, suspicious transaction patterns, and potential infrastructure attacks around the clock;
• Role-based access control: only 555wim team members with a documented operational need are granted access to player personal data, with auditable access logs;
• Secure backups: data is regularly replicated across separate, secured environments to ensure recovery in the event of an incident.

Data is stored on servers located in Brazil or in countries with a level of protection equivalent to that required by the LGPD. When international data transfers are necessary for the operation of a specific service, we ensure that appropriate contractual data protection clauses are in place.

8. Data Retention and Deletion

555wim retains your personal data for as long as necessary for the purposes described in this policy, observing the minimum retention periods required under Brazilian law:

• Active account data: retained for the duration of the active account and for up to 5 years after closure, to meet regulatory obligations;
• Financial transaction history: retained for a minimum of 5 years as required by Brazilian financial and anti-money laundering legislation;
• Identity documents (KYC): retained for up to 5 years after account closure or as required by specific regulatory obligations;
• Technical and session data: retained for up to 12 months for security and performance analysis purposes;
• Support communications: retained for up to 3 years for support history and potential dispute resolution.

Once the applicable retention period ends, data is securely deleted or irreversibly anonymized. Requests for early deletion submitted by the data subject are reviewed on a case-by-case basis, subject to the minimum legal retention periods that 555wim is required to observe even when such a request is made.

9. Your Rights as a Data Subject

The LGPD grants you, as a data subject whose information is processed by 555wim, a set of rights that may be exercised at any time. See what they are and how to submit a request:

• Access: receive a copy of all personal data that 555wim holds about you;
• Correction: request the correction of data that is inaccurate, outdated, or incomplete;
• Deletion: request the deletion of your data when processing is no longer necessary, subject to mandatory legal retention periods;
• Portability: receive your data in a structured, machine-readable format to transfer it to another controller;
• Objection: object to processing carried out on the basis of legitimate interest when you believe your rights and freedoms override that interest;
• Consent withdrawal: withdraw consent for marketing communications at any time, at no cost and without affecting core services;
• Information on sharing: know which third parties your data has been shared with;
• Review of automated decisions: request human review of any automated decision that affects your interests on the platform.

To exercise any of these rights, send an email to privacidade@555wim.best with the subject line "LGPD Request" and a description of your request. 555wim will respond within 15 business days. For complex requests or those requiring additional identity verification, the deadline may be extended by a further 15 business days, with prior notice to the data subject.

10. Data Relating to Minors

The 555wim platform is intended exclusively for users aged 18 and over. 555wim does not intentionally collect personal data from minors and does not permit registration or use of its services by anyone under 18 years of age.

If 555wim determines at any time that data belonging to a minor has been collected — whether through fraudulent registration or any other circumstance — the account will be immediately closed, the data will be deleted, and the matter may be reported to the relevant authorities as required by law.

If you are the legal guardian of a child or teenager and believe they may have created an account on 555wim, please contact us immediately via 24/7 support or at privacidade@555wim.best so we can take the necessary steps without delay.

11. Changes to This Policy

555wim may update this Privacy Policy periodically to reflect changes in the services offered, applicable Brazilian legislation governing the betting sector, or best practices in data protection.

Material changes — those affecting data subjects' rights or significantly altering how data is used — will be communicated to players at least 15 days in advance via registered email and a prominent notice on the 555wim platform. For minor changes, such as text corrections or updated contact details, notification may be provided solely through a notice on the policy page itself.

The date of the last update is always shown at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure before the effective date.

12. Contact & Data Protection Officer

555wim has appointed a Data Protection Officer (DPO) as required by the LGPD to oversee the platform's data processing practices and serve as the point of contact for data subjects and the ANPD.

To contact 555wim's DPO or privacy team:

• Privacy email: privacidade@555wim.best
• General support: suporte@555wim.best
• Live chat: available 24 hours a day, 7 days a week directly on the platform

For requests related to your data subject rights (access, correction, deletion, portability), always use the subject line "LGPD Request" in your email so your request is properly routed and handled as a priority by the responsible team.