Bet555 Privacy Policy – Data Protection in Brazil

This Privacy Policy describes how bet555 collects, uses, stores, shares, and protects the personal data of users who access or use the platform's services, available at bet555-bangla.com. Our goal is to be fully transparent about how data is handled in a way that any Brazilian player can understand — no legal background required.

The bet555 acts as the data controller for its users' personal data and operates in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13.709/2018), the country's primary privacy regulation. Data is processed on the legal bases set out in the LGPD, including contract performance, legal obligation, legitimate interest, and consent where applicable.

This policy applies to all users of bet555 in Brazil, whether you are visiting the site for the first time or an active player who regularly uses the platform for Brasileirão betting, live casino games, or any other available service.

The bet555 collects personal data at different points during your interaction with the platform. The types of data collected and the circumstances in which they are gathered are described below:

Data provided directly by you:

• Full name, date of birth, and CPF — collected at registration to verify identity and eligibility.
• E-mail address — for account communications, transaction confirmations, and support.
• Mobile number — for SMS verification during registration and security authentication.
• Full residential address — required for identity verification (KYC) and regulatory compliance.
• Identity documents (national ID, driver's license, or passport) and proof of address — collected during the mandatory KYC process prior to the first withdrawal.
• Payment data — Pix key, credit/debit card details, CPF linked to Mercado Pago or PicPay accounts. Full card data is processed by PCI-DSS certified gateways and is not stored directly on the servers of the bet555.

Automatically collected data:

• IP address and approximate geolocation data — used to verify residency and ensure compliance with geographic restrictions.
• Device type, operating system, and browser — used to optimize the experience and identify technical issues.
• Browsing history within the platform, pages visited, and session duration.
• Full history of bets, deposits, withdrawals, and casino game activity.
• Cookies and similar tracking technologies — detailed in section 5 of this policy.

The bet555 uses collected personal data solely for the purposes described below. We do not use data for any purpose not listed here without notifying the user in advance.

The full betting history and platform activity is used by the bet555 to identify patterns of problem gambling and proactively trigger responsible gambling tools when needed, even without a player's request. This is part of the platform's commitment to user well-being.

The bet555 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only takes place in the situations listed below, always limited to the minimum information required for each specific purpose:

• Payment processors: data required to process transactions via Pix (Banco Central do Brasil), credit/debit cards (Visa/Mastercard through a PCI-DSS-certified gateway), Mercado Pago, and PicPay. Each processor operates under its own privacy policy and is bound by confidentiality agreements with bet555.
• Game providers: slots, live table, and crash game providers receive only an anonymous user identifier to record bets and results. They do not receive the player's name, CPF, or financial data.
• Identity verification services: specialized platforms for KYC document verification, which process national IDs, driver's licenses, and proof of address in a certified, encrypted environment.
• Regulatory and judicial authorities: data may be shared with Brazilian government authorities, such as COAF, the Federal Revenue Service, or by court order, in compliance with legal obligations.
• IT infrastructure providers: cloud hosting and digital security companies that maintain the servers of bet555, subject to data processing agreements (DPA) and confidentiality obligations.

The bet555 uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and carry out usage analytics. The types of cookies used are described below:

• Essential cookies: required for the platform to function properly — keeping your session active, remembering language preferences, and ensuring login security. These cannot be disabled as they are essential to the service.
• Performance cookies: collect anonymous data on how users navigate bet555, which pages are most visited, and where technical errors occur. Used exclusively to improve the platform.
• Functionality cookies: remember personal preferences such as favorite odds, recent games, and interface settings to personalize your experience.
• Analytics cookies: used with analytics tools to understand aggregated usage patterns. Data is anonymized and cannot be linked to individual users.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may affect platform functionality. Performance, functionality, and analytics cookies can be turned off without impacting your ability to bet or play.

The bet555 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behavior with external advertisers.

The bet555 retains personal data for as long as necessary for the purposes for which it was collected, observing the minimum retention periods required by law. The main retention periods are:

• Registration and KYC data: retained for a minimum of 5 years after account closure, as required by Brazil's applicable anti-money laundering (AML/CFT) regulations.
• Financial transaction history: retained for a minimum of 5 years for accounting, tax, and regulatory compliance purposes.
• Betting history and game activity: retained for 3 years after the last account activity for audit and dispute resolution purposes.
• Support conversations: retained for 2 years for quality assurance and the resolution of any complaints.
• Session cookie data: deleted automatically when the browser is closed or once the expiration period defined for each cookie has passed.

Once retention periods expire, data is securely deleted or anonymized for use in aggregated statistical analysis, with no possibility of individual identification.

The bet555 employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction:

• 256-bit SSL encryption: all communication between your device and bet555's servers is encrypted, preventing data from being intercepted in transit.
• Data encryption at rest: sensitive data stored on the platform's servers, including KYC documents and financial data, is encrypted even when not in transit.
• Role-based access control: only employees with a verified business need have access to users' personal data, with access logs continuously monitored.
• Two-factor authentication: available for all accounts and strongly recommended. Required for staff with access to internal systems.
• Regular penetration testing: bet555's infrastructure is periodically tested by specialized teams to identify and address vulnerabilities before they can be exploited.
• Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24 hours a day, with automatic alerts triggered by any suspicious activity on the servers.

In the event of a security incident affecting users' personal data, the bet555 will follow the procedures set out under the LGPD, including notifying the National Data Protection Authority (ANPD) and affected users within the legally required timeframes, along with guidance on additional protective measures each player should take.

The LGPD guarantees you, as the data subject, a set of rights that the bet555 is fully committed to upholding. See each one below and how to exercise them:

To exercise any of these rights, submit a written request to contato@bet555-bangla.com with the subject line "LGPD Rights – [Your Right]" along with your full name and CPF for identification. The bet555 will respond within 15 business days. For more complex cases requiring additional review, the deadline may be extended by a further 15 days, with prior notice to the data subject.

If you believe that the bet555 did not adequately respond to the exercise of your rights, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.

The services of bet555 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. Registration requires date of birth confirmation and a valid CPF, and identity verification (KYC) confirms legal age before withdrawals are authorized.

If you are a guardian and believe a minor has created an account on bet555, please contact support immediately via live chat or at contato@bet555-bangla.com. The account will be closed and all data relating to the minor will be deleted as soon as possible, in compliance with the LGPD and the Brazilian Statute of the Child and Adolescent (ECA).

The bet555 may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or improvements to the services offered. The date of the last update is always shown at the top of this page.

Significant changes — such as updates to data usage purposes, new types of data collected, or new sharing partners — will be communicated at least 15 days in advance via the registered email address and through a prominent notification within the platform. Minor changes, such as wording corrections or contact updates, may take effect immediately.

Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. If you do not agree with the updates, you may close your account before the new version's effective date.

For any questions, rights requests, or complaints related to how your personal data is handled by bet555, please contact our Data Protection Officer (DPO) through the channels below:

• E-mail: contato@bet555-bangla.com — with the subject line "Privacy" or "LGPD Rights".
• Live chat: available 24 hours on the bet555 platform — request to speak with the privacy team.

Our privacy team responds within 5 business days for general inquiries and within 15 business days for formal LGPD rights requests. All privacy-related communications are handled confidentially and answered in Portuguese.