55vip Privacy Policy – Data Protection

1 About Us — Data Controller

A 55vip, operated under the domain 55vip.world, is the controller of the personal data processed under this Privacy Policy. We are a Sports Betting and online casino platform built for the Brazilian market, offering betting on football (Brasileirão, Copa do Brasil, Libertadores), MMA and UFC, slots, crash games, and Live Casino.

For any questions related to the processing of personal data, you can reach our responsible team by email at suporte@55vip.world. We respond to all requests within the timeframes set out by the LGPD.

2 Personal Data We Collect

A 55vip collects personal data in different ways during your interaction with the platform. Collection is always limited to the minimum necessary for the purposes described in this policy.

Data you provide directly:

• At registration: full name, CPF, date of birth, email, mobile number, and password;
• For identity verification: a copy of an official photo ID (RG, CNH, or passport) and proof of address;
• For payments: data required to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago. Card data is tokenized and never stored in plain text;
• In support interactions: information provided during conversations with our customer service team.

Automatically collected data:

• IP address and approximate geolocation data;
• Device type, operating system, and browser version;
• Pages visited, session duration, clicks, and interactions on the platform;
• Betting history, games played, and financial transactions;
• Cookies and similar technologies (detailed in Section 8).

3 How We Use Your Personal Data

Each piece of data collected by the 55vip has a specific purpose. Below we describe the main uses:

• Service delivery: To create and manage your account, process bets and games, and handle deposits and withdrawals via Pix and other available methods;
• Identity verification and compliance: To confirm that you are over 18 years old and a resident of Brazil, and to comply with anti-money laundering (AML/KYC) obligations;
• Security and fraud prevention: To detect suspicious access, abnormal behavior, and fraud attempts that put your account or the platform's integrity at risk;
• Communication: To send account notifications, transaction confirmations, security alerts, and — with your consent — promotional communications;
• Platform improvement: For performance analysis, identification of technical issues, and continuous improvement of the user experience;
• Responsible gambling: To monitor gambling patterns that may indicate problematic behavior and to activate the available self-control tools;
• Compliance with legal obligations: To comply with orders from competent regulatory, judicial, or administrative authorities.

4 Legal Bases for Processing

A 55vip processes personal data based on the following legal bases set out in the LGPD:

• Contract performance (art. 7, V of the LGPD): To fulfill the obligations arising from the services contracted at the time of your registration;
• Compliance with legal obligation (art. 7, II): To meet regulatory requirements for identification, anti-money laundering, and other rules applicable to the sector;
• Legitimate interest (art. 7, IX): For fraud prevention, platform security, service improvement, and performance analysis, always in a proportionate manner and with full respect for your rights;
• Consent (art. 7, I): For sending marketing communications and using non-essential cookies, subject to your express consent, which can be withdrawn at any time.

5 Data Sharing with Third Parties

A 55vip does not sell or rent your personal data. Sharing occurs only in the situations below, always with appropriate contractual safeguards:

• Payment providers: Financial data is shared with the institutions needed to process transactions via Pix, boleto, card, PicPay, and Mercado Pago, as required to carry out the service;
• Game providers: Username and session data are shared with game providers (such as Spribe, Pragmatic Play, and Evolution) to enable the technical operation of titles on the platform;
• Analytics and security services: Technical and usage data are processed by performance analytics and fraud detection tools, anonymized or pseudonymized whenever possible;
• Public authorities: When required by law, court order, administrative ruling, or regulatory obligation, 55vip may be required to disclose personal data to the competent authorities.

6 Data Retention and Deletion

A 55vip retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet legal retention obligations. The criteria used to determine retention periods include:

• The active period of your account on the platform;
• The legal retention requirements applicable to the sector (financial and identification data may be kept for up to 5 years after account closure, in accordance with anti-money laundering legislation);
• The need to defend against judicial or administrative proceedings.

After the applicable retention period, data is securely deleted or irreversibly anonymized. You may request early deletion of data processed on the basis of consent, but data required to fulfill a legal obligation cannot be deleted before the legal deadline.

7 Information Security

A 55vip adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• SSL/TLS 256-bit Encryption for all communications between your device and our servers;
• Tokenized payment data — card numbers are never stored in plain text in 55vip's systems;
• Two-factor authentication (2FA) available to all users as an additional layer of account security;
• Continuous monitoring of accesses and transactions to detect suspicious behavior and intrusion attempts;
• Restricted access to personal data — only employees with a justified operational need are granted access, and all are bound by confidentiality obligations;
• Incident response procedures — in the event of a data breach that may affect your rights, 55vip will notify impacted users and the ANPD within the timeframes set out by the LGPD.

8 Cookies and Similar Technologies

A 55vip uses cookies and similar technologies to ensure the platform works correctly, analyze service usage, and personalize your experience. Below we describe the types of cookies used:

You can manage non-essential cookie preferences directly in your browser settings. Declining analytical and personalization cookies does not prevent access to the services of 55vip, but may limit some convenience features.

9 How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD regarding the data that 55vip holds about you, follow the steps below:

1. Send an email to suporte@55vip.world with the subject line: "LGPD Request – [type of right]";
2. Please provide your full name and CPF so we can identify the data subject;
3. Clearly describe the right you wish to exercise and the scope of your request;
4. If necessary, we may request additional documentation to verify your identity before processing the request.

A 55vip responds to all data subject requests within 15 calendar days. For more complex cases, this deadline may be extended with proper justification. If your request is not handled appropriately, you have the right to file a complaint with the National Data Protection Authority (ANPD).

10 Minors

The services of 55vip are intended exclusively for individuals aged 18 years or older. We do not intentionally collect personal data from minors. The identity verification process implemented at registration includes date of birth validation and, upon the first withdrawal, a requirement to provide a photo ID.

If we become aware that we have collected data from a minor, we will immediately delete the information and close the corresponding account. Parents or guardians who have reason to believe a minor has used the platform should contact 55vip support immediately. 55vip at suporte@55vip.world.

11 International Data Transfer

Some of the technology providers and game suppliers partnering with 55vip may process data on servers located outside Brazil. When this occurs, the 55vip ensures that such transfers are carried out with appropriate safeguards, including standard contractual data protection clauses and assessment of the recipient country's level of protection, as required by the LGPD and ANPD guidelines.

In all cases of international data transfer, the personal data of Brazilian users remains protected under the standards established in this Privacy Policy and applicable Brazilian law.

12 Changes to This Privacy Policy

A 55vip may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. Material changes will be communicated by email to registered users with a minimum notice of 15 days before taking effect.

The most recent version of this policy is always available at 55vip.world/privacy-policy, with the date of the last update shown at the top of the document. Continued use of the platform after changes take effect constitutes acceptance of the new terms.

13 Contact, DPO & Privacy Channel

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact the 55vip through the following channels:

• Privacy email: suporte@55vip.world — subject line: "Privacy / LGPD"
• Live chat: Available 24 hours a day, 7 days a week, directly on the platform
• Frequently Asked Questions: 55vip.world/faq