555k Privacy Policy – Protecting Your Data

A 555k ("Platform", "we"), available at 555k.life, is the controller of users' personal data collected in connection with the provision of its Sports Betting, online casino, poker, and other products available on the platform.

As data controller, 555k defines the purposes and means of personal data processing, always in accordance with the LGPD principles: purpose limitation, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability.

For questions, rights requests, or complaints related to the processing of personal data, you can reach the 555k Data Protection Officer (DPO) by email at privacidade@555k.life or via live chat available 24/7 on the Platform.

555k collects personal data in the following situations and categories:

Personal data collected by 555k is processed exclusively for the following purposes:

• Service delivery: account creation and management, deposit processing via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED; withdrawal processing; access to sports betting on the Brasileirão, Copa Libertadores, MMA/UFC, e-sports, and other markets; access to slots, live casino, crash games, and poker.
• Identity verification (KYC): compliance with legal anti-money laundering obligations and confirmation of eligibility (minimum age of 18 and residence in Brazil).
• Security and fraud prevention: detection of suspicious activity, multiple accounts, bot use at poker tables, and other violations of the Terms and Conditions.
• Customer support: handling questions, complaints, and requests via live chat, email, and other 24/7 support channels.
• VIP Program & promotions: VIP points calculation, weekly cashback crediting, and delivery of personalized offers based on platform usage profile.
• Communications: sending transactional notifications (Pix deposit confirmation, poker tournament results, security alerts) and marketing communications where express consent has been given.
• Legal and regulatory obligations: compliance with court orders, requests from competent authorities, and Banco Central do Brasil regulations applicable to electronic payment methods.
• Platform improvement: usage data analysis to improve the mobile experience, live betting performance, and the overall quality of 555k's services.

Every personal data processing activity carried out by 555k is grounded in a legal basis established under the LGPD:

• Contract performance (Art. 7, V): processing required to provide the services contracted by the user upon creating their account at 555k — betting, deposits, withdrawals, and access to games.
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance (Lei nº 9.613/1998), and responses to requests from regulatory authorities.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, and protection of other users, always within the necessary limits and respecting the data subject's rights.
• Consent (Art. 7, I): sending marketing communications, use of non-essential cookies, and personalization of offers based on gaming profile. Consent may be withdrawn at any time in the account settings.

555k does not sell, rent, or transfer users' personal data to third parties for commercial or marketing purposes. Data sharing takes place exclusively in the following situations and with the categories of recipients listed below:

• Payment processors: the minimum financial data required is shared with partner financial institutions to process transactions via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED. These processors act as data operators and are bound by contractual confidentiality and security obligations.
• Identity verification providers: identification data is shared with KYC partners for document validation and age verification, strictly for that purpose.
• Game providers and Live Casino: technical and session data are shared with gaming software providers for the operation of slots, crash games, live tables, and poker. These providers do not have access to users' financial data.
• Competent authorities: data may be disclosed when required by court order or request from the Ministério Público, BACEN, ANPD, or other competent regulatory authorities in Brazil, strictly to the extent necessary to comply with the order.
• Auditors and legal advisors: in cases of dispute or internal audit, data may be accessed by professionals bound by professional secrecy obligations.

All third parties that process data on behalf of 555k as data processors are bound by contracts requiring appropriate security measures and prohibiting the use of data for any purpose beyond what was agreed.

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum periods required by law:

• Financial and transaction data (Pix, boleto, TED): retained for a minimum of 5 (five) years, as required by Brazilian anti-money laundering legislation (Law No. 9,613/1998) and BACEN regulations.
• Registration data and identity verification (KYC): retained for a minimum of 5 (five) years after account closure, for regulatory compliance purposes.
• Betting history and gaming sessions: retained for a minimum of 3 (three) years for internal audit and dispute resolution purposes.
• Support interaction records: retained for 2 (two) years after the ticket is closed.
• Access logs and technical data: retained for 6 (six) months, pursuant to the Brazilian Internet Civil Framework (Law No. 12,965/2014).
• Data collected on the basis of consent: retained until consent is withdrawn by the user or for the period indicated at the time of collection.

Once the applicable retention periods have elapsed, data is securely disposed of (through irreversible anonymization or permanent deletion) from 555k's systems, unless retention is required for defense in ongoing legal or administrative proceedings.

555k employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, disclosure, accidental or unlawful alteration, or destruction:

• 256-bit TLS encryption: all traffic between the user's device and 555k's servers is encrypted. This covers access to the platform via mobile or desktop, financial transactions via Pix, and all communications with 24/7 support.
• Two-factor authentication (2FA): available and recommended for all users in the account security settings on 555k.
• Least-privilege access control: 555k staff only access the data strictly necessary to perform their job functions. All access is recorded in auditable logs.
• Continuous monitoring: intrusion-detection and anomaly-monitoring systems watch the infrastructure around the clock to identify and respond swiftly to any unauthorized access attempts.
• Incident response plan: 555k maintains a documented security incident response plan with defined procedures for containment, investigation, notification of affected users, and reporting to the ANPD within the legally required timeframes.
• Regular penetration testing: 555k's infrastructure undergoes periodic security assessments carried out by independent specialists to proactively identify and address vulnerabilities.

555k uses cookies and similar technologies (tracking pixels, local storage) to ensure the platform functions properly, improve the user experience, and — with your consent — personalize the content you see. The categories of cookies used are listed below:

You can manage your cookie preferences at any time in your 555k account's privacy settings. Disabling non-essential cookies does not affect access to Sports Betting, casino, poker, or any other platform services.

555k is a Sports Betting and online casino platform intended exclusively for users aged 18 and over. The platform does not intentionally collect, process, or store personal data from minors.

To enforce this policy, 555k applies age-verification procedures at registration and throughout the KYC process, including requests for identity documents showing date of birth and, where necessary, additional validation.

If 555k determines that personal data belonging to a user under 18 was inadvertently collected, that data will be immediately deleted from our systems, the account will be closed, and any deposit balance (excluding bonus funds) will be returned to the legal guardian after verification.

If you are a parent or legal guardian and believe a minor has created an account on 555k, please contact us immediately via 24/7 live chat or by email at privacidade@555k.life so we can investigate and take the necessary action.

To provide certain services, 555k users' personal data may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or Live Casino software vendors.

Any international data transfer carried out by 555k complies with the requirements of Chapter V of the LGPD and is subject to at least one of the following safeguards:

• The destination country offers an adequate level of personal data protection, as assessed by the ANPD.
• Existence of specific contractual clauses ensuring that data subjects retain the same rights guaranteed under the LGPD.
• Adoption of global corporate standards (Binding Corporate Rules) approved by the competent authority.

For information about the countries to which personal data may be transferred and the applicable safeguards in each case, please contact the DPO at privacidade@555k.life.

To exercise any of the rights provided under the LGPD regarding personal data processed by 555k, please use one of the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform. Average first response time under 3 minutes.
• E-mail for the DPO: privacidade@555k.life — for formal LGPD requests such as access, portability, deletion, and withdrawal of consent.
• General email: contato@555k.life

When submitting a request, please provide your full name, registered CPF, and a clear description of the right you wish to exercise. 555k will respond within 15 (fifteen) business days, as required by the LGPD deadline. In cases where additional identity verification is needed to protect the security of your data, this period may be extended by up to 15 additional business days, with prior notice.

If you do not receive a satisfactory response from 555k within the established timeframes, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), pursuant to Art. 18, § 1 of the LGPD.

555k may periodically review and update this Privacy Policy to reflect changes in data processing practices, in response to regulatory updates, or to incorporate improvements to the platform's security processes.

Material changes will be communicated by email to the address registered on your account at least 7 (seven) days before taking effect, and will be prominently displayed on the platform's home page. The date of the most recent update is always shown at the top of this document.

We recommend reviewing this policy periodically. Continued use of 555k after any changes take effect constitutes acceptance of the updated practices described. If you do not agree with the changes, you may request account closure via 24/7 live chat before the effective date.

555k has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and LGPD obligations. The DPO can be reached through the following channels:

• Dedicated privacy email: privacidade@555k.life
• 24/7 live chat: log in to the platform and start a conversation letting us know you'd like to speak about data protection
• General email: contato@555k.life

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the General Data Protection Law (Law No. 13,709/2018). Any disputes arising from this instrument shall be resolved exclusively in the courts of São Paulo/SP, with express waiver of any other jurisdiction, however privileged it may be.