Privacy Policy of ff555bet —
Your Data Protected by the LGPD

The controller responsible for processing personal data collected on the ff555bet platform is the company operating the site ff555bet.click. The controller determines the purposes and means of processing users' personal data in accordance with the LGPD (Law No. 13,709/2018).

For any questions regarding the processing of personal data, including the exercise of data subject rights, users may contact ff555bet through the following channels:

• Privacy email: suporte@ff555bet.click
• 24/7 support in Portuguese: live chat available on the platform
• Response time: up to 15 business days for privacy-related requests, as required by the LGPD

Ff555bet collects personal data in the following categories, strictly limited to what is necessary for platform operation and compliance with legal obligations:

Ff555bet does not collect data in sensitive categories as defined by the LGPD, such as racial or ethnic origin, religious beliefs, political opinions, genetic or biometric data, health data, or data relating to sexual life. The platform also does not perform facial recognition.

Data from users under 18 is not intentionally collected. Should ff555bet determine that a minor's data was inadvertently collected, that data will be deleted immediately and the corresponding account will be closed as described in section 10.

Ff555bet uses the personal data it collects solely for the purposes described below. No data is used in any way that is incompatible with the purpose for which it was collected:

• Account operation: creation, management, and maintenance of the user's account on the platform; login, authentication, and session control; personalization of the interface based on user preferences.
• Financial transaction processing: processing deposits via Pix, boleto bancário, credit/debit card, Mercado Pago, PicPay, and TED bank transfers from institutions such as Nubank, Itaú, Bradesco, and Banco do Brasil; processing withdrawals and confirming account ownership.
• Identity verification (KYC): confirmation that the user is 18 years of age or older, is a resident of Brazil, and is the legitimate holder of the account and payment methods used.
• Anti-money laundering (AML/CFT): transaction monitoring to identify suspicious patterns as required by Brazilian law, including Law No. 9,613/1998 and BACEN regulations.
• User support: handling requests, resolving disputes, and account-related operational communications.
• Platform security: detection and prevention of fraud, multiple account use, bots, and other conduct prohibited under the Terms and Conditions.
• Product improvement: aggregated and anonymized analysis of usage behavior to improve features, fix bugs, and develop new platform capabilities.
• Marketing communications (with consent): sending emails and notifications about promotions, free bets, poker tournaments, and new features, exclusively to users who have opted in to receive such communications.

The LGPD requires that all personal data processing have a specific legal basis. ff555bet applies the following legal bases depending on the purpose of the processing:

• Contract performance (Art. 7, V of the LGPD): is the primary legal basis used for account operation, payment processing, and delivery of the services the user contracted upon registering on the platform. Without this data, account operation is not possible.
• Compliance with a legal or regulatory obligation (Art. 7, II of the LGPD): used for the KYC process, anti-money laundering compliance, financial record retention, and sharing data with public authorities when required by law or court order.
• Legitimate interest of the controller (Art. 7, IX of the LGPD): used for fraud detection, platform security, aggregated behavioral analysis to improve the product, and collection of technical data such as IP address and device type. ff555bet conducts impact assessments to ensure these interests do not override the rights of data subjects.
• Consent (Art. 7, I of the LGPD): used to send marketing communications. Consent may be withdrawn at any time without affecting account functionality.

Where data processing is based on consent, the user has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it require deletion of data processed under other legal bases.

Ff555bet does not sell, rent, or share users' personal data with third parties for commercial or advertising purposes. Data sharing occurs only in the following cases, which are strictly necessary for the platform's operation:

• Payment providers: data required for transaction processing is shared with the financial institutions and payment platforms used (Pix via BACEN, card operators, Mercado Pago, PicPay). These providers act as data processors and are contractually required to handle the information solely for payment processing purposes, under equivalent security standards.
• Game providers: to operate the live casino and table games, session and betting data are shared with ff555bet's certified gaming technology partners. These providers do not have access to users' full identification data beyond what is strictly required to run the games.
• Public authorities: ff555bet may share data with law enforcement, regulatory, or judicial authorities in Brazil when required by law, court order, or request from a competent authority. Examples include: Receita Federal (tax obligations), COAF (anti-money laundering), and public security authorities in criminal investigations.
• Auditors and consultants: independent auditors and legal advisors may access data for regulatory compliance purposes, subject to confidentiality agreements.

Ff555bet does not use users' personal data to build advertising profiles, sell to behavioral ad networks, or for any purpose not explicitly described in this Privacy Policy.

Ff555bet uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect analytics data. The types of cookies used are described below:

• Essential cookies: required for basic platform functionality — login, session management, and security. They cannot be disabled without affecting account access. Legal basis: contract performance.
• Performance & analytics cookies: collect information about how users interact with the platform (pages visited, session duration, traffic source) in aggregated and anonymized form. Used to identify technical issues and improve the user experience. Legal basis: legitimate interest.
• Preference cookies: store user settings such as language, interface theme, and game preferences to personalize the experience on future visits. Legal basis: performance of a contract.
• Marketing cookies (with consent only): used to identify users referred through affiliate campaigns and to measure the effectiveness of promotional activities. They are not shared with third-party advertising networks. Legal basis: consent.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent full access to the platform. Disabling marketing cookies does not affect your account functionality or your receipt of promotional emails (if you have separately consented to them).

Ff555bet implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place include:

• Encryption in transit: all communication between the user's device and ff555bet's servers is protected by TLS (Transport Layer Security) with 256-bit encryption. This covers login, Pix deposits, withdrawals, registration data, and support chat.
• Encryption at rest: sensitive data stored on ff555bet's servers — such as CPF numbers, financial data, and transaction history — is encrypted at rest using industry-standard algorithms.
• Payment data tokenization: full credit or debit card numbers are never stored on ff555bet's servers. Card data is tokenized by PCI-DSS certified payment providers.
• Two-factor authentication (2FA): available as an additional security layer for account access. We strongly recommend all users enable 2FA in their account security settings.
• Access monitoring: intrusion detection systems and suspicious access monitoring operate continuously to identify unauthorized access attempts.
• Internal access control: only employees with a legitimate business need are permitted to access users' personal data, and all such access is logged and audited.
• Security testing: ff555bet conducts regular penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

No security system is entirely infallible. In the event of a security incident that poses a significant risk to data subjects, ff555bet will notify affected users by email and report to the Autoridade Nacional de Proteção de Dados (ANPD) within the legal timeframes established by the LGPD.

Ff555bet retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law. The criteria used to determine retention periods include:

• Active account data: retained for the entire duration of the contractual relationship between the user and ff555bet.
• Financial and transaction records: retained for 5 years after account closure, as required by Brazilian tax legislation and anti-money laundering regulations (COAF).
• KYC data (identity verification): retained for 5 years after account closure, in accordance with applicable regulatory requirements.
• Support records and communications: retained for 2 years for dispute resolution and service improvement purposes.
• Technical and session data: retained for 90 days, unless required for an ongoing security incident investigation.
• Marketing data (with consent): retained until consent is withdrawn by the user.

Once the applicable retention period has ended, data is securely deleted or irreversibly anonymized. Anonymization ensures that the data can no longer be linked to any identifiable individual.

Requests for early data deletion will be honored to the extent they do not conflict with legal retention obligations. Where full deletion is not possible due to legal requirements, ff555bet will inform the data subject which data must be retained and for how long.

The LGPD grants you, as a data subject, a set of rights that can be exercised at any time with ff555bet. Below is a clear explanation of each right:

To exercise any of these rights, contact ff555bet at suporte@ff555bet.click with the subject line "LGPD Rights — [your right]". ff555bet will respond within 15 business days. Identity verification may be required before processing the request to ensure data is delivered to the correct individual.

Ff555bet is an adult entertainment platform intended exclusively for users aged 18 and over. The platform does not intentionally collect, store, or process personal data from individuals under 18.

To ensure the protection of minors, ff555bet has adopted the following measures:

• Mandatory age verification during registration, including confirmation of a valid CPF and date of birth.
• Identity verification (KYC) prior to the first withdrawal, including photo ID document review.
• Automated systems to detect inconsistencies in registration data that may indicate use of third-party data by minors.
• A dedicated channel for parents or guardians to report misuse by minors, with priority response and emergency account blocking.

If ff555bet identifies that an account was created by a person under 18 years of age, the account will be immediately closed, the collected data will be deleted, and any existing balance will be refunded to the original payment method, subject to verification of the legal guardian's identity.

Parents or guardians who discover that a minor has accessed the ff555bet platform must contact support immediately at suporte@ff555bet.click with the subject line "Minor Protection" to request an emergency account block.

In some cases, ff555bet may transfer personal data to servers or processors located outside Brazil. This may occur due to the technological infrastructure of the service providers used by the platform — for example, cloud computing services, gaming technology providers, or fraud detection systems.

In all cases of international data transfers, ff555bet ensures that:

• Transfers occur only to countries or organizations that provide an adequate level of data protection, as assessed by the ANPD or the European Commission.
• When the recipient country does not offer an adequate level of protection by default, appropriate contractual safeguards are put in place, such as standard data protection clauses or data processing agreements (DPA).
• Data recipients are contractually required to implement security measures equivalent to those mandated by the LGPD.

For specific information about international transfers, or to request copies of the contractual safeguards in place, please contact us at suporte@ff555bet.click with the subject line "International Transfers — LGPD".

Ff555bet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or platform operations. When significant changes are made, ff555bet will take the following steps:

• Email notification to all users with an active account, with at least 15 days' notice prior to any material changes.
• Display of a prominent notice on the platform informing users of the update and the effective date of the new terms.
• Update of the "Last updated" date at the top of this document.

Continued use of the ff555bet platform after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the changes, you may request account closure before the effective date, with no penalty.

Previous versions of this Privacy Policy are available upon request through the support channel for historical reference.

Ff555bet provides the following channels for privacy and data protection inquiries:

• General support email: suporte@ff555bet.click — for general privacy questions, exercising LGPD rights, and data deletion requests.
• 24h live chat: available on the ff555bet.click platform for immediate support in Portuguese. For privacy-related matters, ask to be transferred to the compliance team when you start the chat.
• Response time: ff555bet is committed to responding to privacy-related requests within 15 business days, as required by the LGPD. Urgent requests — such as account blocking due to suspected unauthorized access — are treated as the highest priority.

The Data Protection Officer (DPO) of ff555bet is responsible for ensuring internal LGPD compliance and serving as the point of contact with the ANPD. For communications addressed specifically to the DPO, please use the email suporte@ff555bet.click with the subject line "DPO — [subject of request]".

Ff555bet thanks every user who trusts our platform for Sports Betting on the Brasileirão, volleyball, MMA/UFC, basketball (NBB), and e-sports, as well as live casino games, poker, and crash games. Protecting your data is a responsibility we take seriously in every decision we make.