Privacy Policy of 55ggg — How We Take Care of Your Data

1. Data Controller

The data controller responsible for processing your personal data is the 55ggg, operator of the platform accessible at https://55ggg.best. For all privacy and data protection inquiries, please contact us at suporte@55ggg.best. Formal requests related to your rights as a data subject receive a response within 15 calendar days.

The 55ggg acts as the data controller under article 5, item VI, of the General Personal Data Protection Law (LGPD — Law No. 13,709/2018). This means we are responsible for decisions on how and why your data is processed, and we assume the corresponding legal obligations before the National Data Protection Authority (ANPD) and before you, the data subject.

2. Data We Collect

The 55ggg only collects the data necessary to deliver the contracted services and meet applicable legal obligations. Below are the types of data we may collect:

2.1 Data you provide directly

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address;
• Verification data (KYC): copy of a government-issued ID (RG or CNH), a selfie with the document for liveness verification, proof of address, and, where required, proof of source of funds;
• Payment data: registered Pix key for withdrawals, credit/debit card details (processed in encrypted form by PCI-DSS certified processors), and account information from PicPay, Mercado Pago, or partner banks (Nubank, Itaú, Bradesco, Banco do Brasil);
• Communications: messages sent to support via chat or email, including conversation content for quality and compliance purposes.

2.2 Automatically collected data

• Usage data: betting history, games accessed, slots sessions and live roulette, amounts deposited and withdrawn, access times, and platform preferences;
• Technical data: IP address, browser type and version, operating system, device identifier (for mobile devices), screen resolution, and browser language;
• Browsing data: pages visited within the platform, time spent, clicks on internal links, and browsing behavior within the 55ggg (we do not track your activity outside the platform);
• Cookies and similar technologies: described in detail in section 8 of this policy.

3. Purpose of Processing

The 55ggg processes your personal data for the following specific purposes:

• Service delivery: creating and managing your account, processing deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, and providing access to Sports Betting and casino games;
• Identity and eligibility verification: confirm that you are at least 18 years old, are located in Brazil, and are the rightful owner of the data and payment methods used;
• Fraud and money laundering prevention: monitoring of transaction patterns to identify suspicious activity, in compliance with anti-money laundering regulations (Law No. 9.613/1998);
• Customer support: handling your questions and resolving issues related to bets, payments, bonuses, and your account, with quality and full traceability of interactions;
• Experience personalization: display relevant content, offers, and promotions based on your usage history — such as odds for Brasileirão matches you follow regularly or promotions for slots you play frequently;
• Marketing communications: sending promotional emails about bonuses and platform updates — only if you have opted in to receive this type of communication;
• Responsible gambling: monitor usage patterns to identify at-risk behavior and, when necessary, activate protection tools or refer the user to support resources;
• Compliance with legal obligations: maintaining records required by law, responding to requests from competent authorities, and complying with the LGPD and other applicable regulations.

4. Legal Basis for Processing

The 55ggg bases the processing of personal data on the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): processing necessary to fulfill the service agreement between you and the 55ggg — covers registration, payment processing, and the provision of betting and gaming services;
• Compliance with a legal obligation (art. 7, II): processing required by applicable Brazilian laws, such as anti-money laundering regulations, betting industry rules, and the LGPD itself;
• Legitimate interest (art. 7, IX): processing for purposes such as fraud prevention, platform security, and behavioral analysis to improve our services — always limited to what is strictly necessary and in full respect of your fundamental rights;
• Consent (art. 7, I): for marketing communications and non-essential cookies. You may revoke this consent at any time without affecting your access to the other services provided by the 55ggg.

5. Data Sharing with Third Parties

The 55ggg does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the situations listed below, which are strictly necessary for service delivery:

• Payment processors: financial data is shared with PCI-DSS certified processors to facilitate transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These processors act as data operators under the instructions of the 55ggg and may not use your data for their own purposes;
• Identity verification providers: KYC documents may be processed by specialized identity verification and fraud prevention services, which operate under confidentiality agreements and in compliance with the LGPD;
• Game providers (slots and live casino): to deliver third-party games such as Pragmatic Play, PG Soft, and Play'n GO, some technical session data may be shared with these providers for gameplay functionality and integrity purposes. Providers do not receive personally identifiable information beyond what is strictly necessary for the game session;
• Competent authorities: the 55ggg may share data with law enforcement, judicial, or regulatory authorities when required by law, court order, or formal request from a competent body;
• Technical infrastructure: cloud hosting services, CDN providers, and performance monitoring tools may have access to anonymized or aggregated technical data for platform operations.

6. Data Retention and Deletion

The 55ggg retains your personal data for as long as necessary to fulfill the purposes described in this policy, or for as long as your account remains active. Specific retention periods are:

• Registration data and account history: retained while the account is active and for up to 5 years after closure, as required by anti-money laundering regulations;
• Financial transaction data: retained for at least 5 years after each transaction, as required by Brazilian tax and financial legislation;
• KYC documents: retained for as long as the account remains active and for up to 5 years after closure, for regulatory compliance purposes;
• Support data: chat and email conversations are kept for up to 2 years for quality assurance and dispute resolution purposes;
• Marketing data: deleted upon request or after 2 years of communication inactivity.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized. If you request account deletion before the legal retention period ends, your data will be kept solely to meet legal obligations and will not be used for any other purpose.

7. Security Measures

The 55ggg implements technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption across all communications between your device and our servers;
• Data encryption at rest for sensitive data stored on the platform, including payment data and KYC documents;
• Two-factor authentication (2FA) available as an additional security layer for your account;
• Continuous monitoring of access and transactions to identify suspicious patterns in real time;
• Restricted access controls to data — only staff with a legitimate business need may access users' personal data, and all employees undergo regular privacy and security training;
• Regular backups with encryption to ensure data availability and integrity in the event of an incident.

In the event of a security incident that may result in significant risk or harm to data subjects, the 55ggg will notify the ANPD and affected users within the timeframe required by the LGPD, informing them of the nature of the incident, the data affected, and the measures taken to mitigate its impact.

8. Cookies and Tracking Technologies

The 55ggg uses cookies — small text files stored in your browser — for various purposes. Cookies are divided into three categories:

8.1 Essential Cookies

Required for the platform's basic operation. Without them, services such as login, betting, and financial transactions will not work correctly. They cannot be disabled while you are using the 55ggg. Examples: login session cookies, language preferences, and form security tokens.

8.2 Performance & Analytics Cookies

Used to understand how users navigate the platform — which pages are most visited, where technical errors occur, and how to improve the experience. Data collected by these cookies is aggregated and anonymized. You can disable them in your browser settings without affecting the platform's functionality.

8.3 Personalization cookies

Used to remember your browsing preferences within the 55ggg — such as the sports you visit most or your favorite slots — to surface more relevant content. These require your consent and can be disabled in your account or browser settings.

The 55ggg does not use cookies to track your activity on other websites outside the platform. To manage or delete stored cookies, open your browser settings (Chrome, Firefox, Safari, Edge) and select the option to manage cookies and site data.

9. Minors

The services of the 55ggg are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from minors. If you believe that someone under 18 has created an account on the 55ggg, please contact us immediately at suporte@55ggg.best. The account will be suspended and the associated data deleted once the situation is confirmed.

The 55ggg carries out age verification during the registration process and may request additional documents when there is suspicion of use by a minor. Online betting is an activity reserved for adults in Brazil, and 55ggg takes active responsibility for enforcing this restriction.

10. International Data Transfers

Some technical services used by the 55ggg — such as cloud infrastructure and international game providers — may involve processing data on servers located outside Brazil. When this occurs, the 55ggg ensures that the transfer follows the mechanisms set out in the LGPD for international data transfers, including:

• Engaging service providers that offer an adequate level of data protection, as recognized by an ANPD decision;
• Use of standard contractual clauses that impose on the recipient the same data protection obligations required by the LGPD;
• Obtaining your specific consent for transfers, where applicable.

Data transferred internationally is protected by the same encryption standards and access controls described in section 7, regardless of where it is stored.

11. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, objection, consent revocation, or information about data sharing — you may:

• Send an email to suporte@55ggg.best with the subject line "LGPD Request — [your right]" and a clear description of what you are requesting;
• Include your full name and the CPF registered to your account in the email so we can verify your identity before processing the request;
• For data deletion or portability requests, additional identity verification may be required.

The 55ggg is committed to responding to all requests within 15 calendar days, as required under the LGPD timeline. If the request requires additional time due to technical complexity or volume, you will be notified of the estimated timeframe. If you are not satisfied with the response, you have the right to file a complaint directly with the ANPD at gov.br/anpd.

12. Changes to This Privacy Policy

The 55ggg may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. When that happens:

• The "last updated" date at the top of this page will be changed;
• For significant changes that affect your rights or the way we handle your data, you will be notified by email at least 7 days in advance;
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

We recommend reviewing this policy periodically. If you do not agree with the changes, you may request the closure of your account and deletion of your data before the effective date of the changes.

13. Contact & Data Protection Officer (DPO)

For any question related to privacy and data protection at 55ggg, please contact our responsible team:

• Email: suporte@55ggg.best (subject: "Privacy" or "LGPD")
• Live chat: available 24 hours a day, 7 days a week, on the platform
• Response time: up to 15 business days for formal LGPD-related requests; up to 3 minutes for general questions via chat

This privacy policy is governed by the laws of the Federative Republic of Brazil. Any dispute relating to the processing of your data will be subject to the jurisdiction of Brazilian courts, with the elected venue being the district of São Paulo, SP.