552bet Privacy Policy — How Your Data Is Protected

1. What Data 552bet Collects

The 552bet collects only the data necessary to operate the platform securely, process payments, and meet legal obligations. The data collected falls into three categories:

Registration and identity data:

• Full name, date of birth, and CPF;
• Email address and mobile number for communication and authentication;
• Full residential address (ZIP code, street, city, and state);
• Documents submitted during the identity verification (KYC) process: national ID (RG) or driver's license (CNH) front and back, proof of address.

Platform usage data:

• Full betting history, including sport type, market, stake amount, and outcome;
• Full history of deposits and withdrawals with amount, method, and date;
• In-platform browsing data: pages visited, session duration, and features used;
• IP address, device type, operating system, and browser or app version.

Payment data:

• Pix key registered for withdrawals (stored in encrypted form);
• Token generated from credit or debit card data — the full card number is never stored;
• Transaction data via boleto bancário, PicPay, Mercado Pago, and TED, depending on the method used.

2. How 552bet Uses Your Data

Every piece of data collected has a specific purpose. The 552bet does not use your data for purposes other than those described below without your explicit consent:

• Account creation and maintenance: your name, CPF, and email are used to identify the account holder and ensure that only one account exists per person;
• Identity verification (KYC): identity documents and proof of address are reviewed to confirm the holder's age and identity prior to the first withdrawal;
• Payment processing: banking and card details are used exclusively to process deposits via Pix, boleto, card, PicPay, Mercado Pago, and TED, and to process withdrawals via Pix;
• Security and fraud prevention: IP address, device information, and behavioral patterns are analyzed by the anti-fraud system to protect your account against unauthorized access;
• Account communications: email and phone number are used to send deposit and withdrawal confirmations, security alerts, and relevant account updates;
• Marketing communications: only with explicit consent may 552bet send information about promotions, new markets, and bonuses. You can opt out of these communications at any time through your account dashboard;
• Compliance with legal obligations: data may be used to comply with requirements from regulatory authorities, anti-money laundering bodies (COAF), and court orders.

Betting history and browsing behavior are also analyzed in aggregate and anonymized form to improve the platform experience — such as identifying which features present the most usability challenges or which markets have the highest demand.

3. Legal Basis for Processing (LGPD)

The LGPD requires that all personal data processing have a justified legal basis. The 552bet processes your data on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): processing of registration, identity, and payment data is required to fulfill the contract between you and 552bet — without this data, it is not possible to create an account, process bets, or carry out withdrawals;
• Compliance with a legal or regulatory obligation (art. 7º, II): identity verification (KYC), transaction history retention, and reporting to competent authorities are legal requirements that apply regardless of your individual consent;
• Legitimate interest (art. 7º, IX): the use of browsing and behavioral data for fraud prevention and platform security is based on the legitimate interests of 552bet and its users;
• Consent (art. 7, I): marketing communications and the use of non-essential cookies require your consent, which can be withdrawn at any time.

The 552bet does not process sensitive data — as defined under the LGPD (racial origin, religious beliefs, health, biometric data, among others) — unless strictly required by law and with specific consent.

4. Sharing Data with Third Parties

The 552bet does not sell users' personal data. Data sharing occurs only in the cases listed below, with vendors who are duly contracted and bound by confidentiality obligations:

• Payment processors: transaction data is shared with the financial institutions and payment gateways required to process Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED. These partners are PCI-DSS certified and are contractually obligated not to use the data for any purpose other than payment processing;
• Casino game providers: for live casino games, poker, and slots provided by partners, the minimum data required to identify the player and record the session outcome may be shared with the game provider;
• Identity verification providers (KYC): documents submitted during the KYC process may be reviewed by a specialized third-party service, bound by a confidentiality agreement and LGPD compliance;
• Competent authorities: 552bet shares data with the Financial Activities Control Council (COAF), the Federal Revenue Service, the Public Prosecutor's Office, the Judiciary, and other public authorities when required by law or court order, regardless of user consent;
• IT and infrastructure service providers: servers, CDN, monitoring systems, and customer support tools have limited, controlled access to the data necessary for carrying out their respective functions.

Any partner with access to personal data from users of 552bet is contractually required to process that data solely in accordance with the platform's instructions and in compliance with the LGPD.

5. Data Storage and Security

The personal data of users of 552bet are stored on protected servers with the following security layers:

• Encryption at rest: sensitive data — including CPF, banking details, Pix key, and identity documents — is stored with AES-256 encryption, making it unreadable even in the event of unauthorized physical access to the server;
• Encryption in transit: all communication between the user's device and our servers uses TLS 1.3 (Transport Layer Security), the latest commercially available protocol;
• Internal access control: only 552bet employees with a verified need for access are permitted to view user data, and all access is recorded in an auditable log;
• Continuous monitoring: the security system monitors suspicious access attempts, data injection, and other attack vectors in real time, with automatic alerts sent to the security team;
• Encrypted backups: data backups are performed on a regular basis and stored in encrypted form at a location separate from the main servers.

In the event of a security incident that may affect personal data, the 552bet will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, providing information about the nature of the incident, the data impacted, and the mitigation measures taken.

6. Privacy in Payment Data

Financial data deserves special attention, and 552bet treats this matter with additional layers of protection beyond those applied to general registration data.

Pix: the Pix key used for withdrawals is stored in encrypted form and linked to the account holder's CPF. It is used exclusively to process withdrawals requested by the account holder. 552bet will never initiate a Pix transaction from the user's account — the platform only receives deposits and sends withdrawals to the Pix key registered by the user.

Credit and debit card: the full card number is never transmitted to the servers of the 552bet. Processing takes place directly within the PCI-DSS-certified payment gateway, which returns only a secure token. Your full card number is never displayed in your dashboard — only the last four digits are shown for identification purposes.

Boleto bancário, PicPay, and Mercado Pago: transactions made via these methods are recorded with the amount, date, and a unique transaction identifier. 552bet does not access PicPay or Mercado Pago account login credentials — payments are processed directly by the digital wallets.

TED: for TED transfers, the destination account's bank details (branch and account number) are recorded in the transaction history, encrypted, solely for traceability and regulatory compliance purposes.

7. Cookies and Tracking Technologies

The 552bet uses cookies and similar technologies to enhance the platform experience. Cookies fall into three categories:

You can manage your cookie preferences through the banner displayed on your first visit to the platform or in your account settings. Declining marketing and analytics cookies does not affect the platform's core functionality — you can still deposit, place bets, and withdraw normally.

The 552bet does not use third-party cookies for cross-site tracking. Data collected through analytical cookies is anonymized before any aggregated analysis.

8. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) grants you, as the data subject, the following rights, all of which can be exercised directly with 552bet free of charge:

• Access (art. 18, I and II): you may request confirmation that 552bet processes your data and receive a full copy of all personal data held about you;
• Correction (art. 18, III): if any information is incorrect or out of date — such as your address, mobile number, or email — you can request a correction directly through your dashboard or via support;
• Anonymization, blocking, or deletion (art. 18, IV): you may request that unnecessary, excessive, or unlawfully processed data be anonymized, blocked, or deleted;
• Portability (art. 18, V): you may request that your personal data be sent in a structured, interoperable format to another data controller, where applicable;
• Withdrawal of consent (art. 18, IX): for processing based on consent (such as marketing communications and analytical cookies), you may withdraw that consent at any time without affecting any prior activity;
• Data Deletion (art. 18, VI): you may request the complete deletion of your personal data from the platform. Data that must be retained by law (such as financial transaction history for the minimum period required by regulation) cannot be deleted before the legal deadline, but this will be clearly stated in the response to your request;
• Information on sharing (art. 18, VII): you have the right to know which entities 552bet has shared your data with.

To exercise any of these rights, contact us via the 24-hour support chat on the platform or by email at suporte@552bet.best. The 552bet responds to data subject rights requests within 15 business days, as required by the LGPD. Requests requiring more complex analysis may have their deadline extended with justification.

9. Minors

The platform 552bet is intended exclusively for individuals aged 18 (eighteen) years or older. 552bet does not knowingly collect data from minors. The identity verification process (KYC) includes age confirmation as a mandatory step before the first withdrawal is released.

Should 552bet identifies that an account was created or used by a minor — whether through a report, a system-generated flag, or document verification — the account is immediately suspended for investigation. If the situation is confirmed, the account is permanently closed, all data is deleted in accordance with the LGPD, and any deposits made are refunded to the original payment method after review.

If you believe an account on 552bet is being used by a minor, please contact support via the 24-hour chat or by email at suporte@552bet.best to report the situation.

10. Data Retention and Storage Period

The 552bet retains users' personal data for as long as necessary for the purposes described in this policy, in compliance with the minimum retention periods required by law:

• Registration and KYC data: retained for the period the account remains active and for up to 5 years after closure, in accordance with regulatory compliance obligations;
• Financial transaction history (deposits and withdrawals): retained for a minimum of 5 years, as required by anti-money laundering regulations (Law No. 9,613/1998) and COAF rules;
• Betting history: retained for the duration of the active account and for up to 2 years after closure for dispute resolution and compliance purposes;
• Communication and support data: support chat records are kept for 2 years for quality assurance and potential dispute purposes;
• Cookie and browsing data: as specified in the retention periods listed in the cookies table, except for security logs, which are kept for 12 months.

Once retention periods expire, data is securely deleted or anonymized in a way that makes identification of the individual impossible. The secure deletion process includes overwriting data on disk and removing encrypted backups within the standard backup rotation cycle.

11. Changes to this Privacy Policy

The 552bet may update this Privacy Policy periodically in response to changes in Brazilian law, LGPD amendments, or revisions to internal data processing practices. The most current version is always available on this page, with the last updated date displayed at the top of the document.

Changes that significantly affect how your data is processed — particularly the addition of new purposes or new types of sharing — will be communicated by email at least 15 calendar days before taking effect. For less significant changes (textual corrections, clarifications), notice may be given solely by updating the date on the page.

Continued use of the platform after the effective date of updated terms constitutes implicit acceptance of the changes. If you do not agree with any change, you may request account closure and a refund of your available balance before the new terms take effect.

12. Contact, DPO, and National Authority

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you can contact 552bet through the channels below:

• 24-hour support chat: available directly on the platform, both on the website and in the Android and iOS app. Average response time: under 5 minutes;
• Email: suporte@552bet.best — for formal privacy and data protection inquiries, with a response time of up to 15 business days as required by the LGPD;

The 552bet has appointed a Data Protection Officer (DPO), as required by the LGPD for data operators that process data at scale. The DPO serves as the formal point of contact with the National Data Protection Authority (ANPD) and for receiving formal data subject requests.

You also have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal body responsible for enforcing the LGPD in Brazil, if you believe your rights have not been adequately addressed by 552bet.