55bb23 Privacy Policy – LGPD Data Protection

01 Data Controller

For the purposes of the LGPD, the controller of personal data collected by the platform is 55bb23, operator of the website 55bb23.best. The Data Protection Officer (DPO) of 55bb23 can be reached through the platform's official support channels for matters related to personal data processing, exercise of data subject rights, or incident reporting.

This Privacy Policy applies to all products and features available on the 55bb23 platform, including registration, live casino, slots, blackjack, Sports Betting on the Brasileirão and other competitions, the VIP Program, progressive jackpot, and any email communications or notifications sent by the platform.

55bb23 acts exclusively as a data controller with respect to information collected directly from its users. For data processed by third-party game providers — such as Pragmatic Play, PG Soft, and Evolution Gaming — and by payment processors, 55bb23 acts as a data processor subject to those partners' policies, which have their own legal data protection instruments.

02 Data Collected

55bb23 collects personal data at various points during platform use. Each category is detailed below:

Data provided during registration:

• Full legal name as it appears on your official ID.
• CPF (Cadastro de Pessoas Físicas).
• Date of birth.
• Email address.
• Mobile phone number.
• Full residential address (for verification and regulatory compliance purposes).

Identity verification (KYC) data:

• Photo ID document image (national ID card, driver's license, or passport).
• Selfie holding the document to confirm possession.
• Up-to-date proof of residence.
• Proof of funds documentation, when required by regulatory obligation for high-value withdrawals.

Financial and transactional data:

• Pix key linked to the user's account (CPF, email, phone number, or random key).
• Credit or debit card data processed with encryption via a certified processor — 55bb23 does not store the full card number.
• Deposit and withdrawal history, including amounts, methods, dates, and transaction status.

Platform usage and behavioral data:

• Betting and gaming history, including games accessed, amounts wagered, and results.
• VIP points accumulated and current VIP Program level.
• Session duration, access times, and frequency of use.
• Activated bonuses and rollover status.

Technical data collected automatically:

• Access IP address.
• Browser type and version.
• Operating system and device type (mobile, tablet, desktop).
• Cookie and similar technology data (detailed in section 8 of this document).
• Session logs and activity records for security and fraud prevention purposes.

03 Purpose of Processing

55bb23 uses the data collected exclusively for the following purposes, each grounded in one of the legal bases established by the LGPD:

55bb23 does not use personal data for purposes incompatible with those listed above without prior notice and, where applicable, renewed consent from the data subject.

04 Data Sharing

55bb23 does not sell, trade, or share personal data with third parties for advertising or external marketing purposes. Data sharing occurs exclusively in the following situations, always with appropriate legal instruments in place:

• Payment providers: To process transactions via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED transfer, the data required for financial settlement is shared with partner financial institutions and payment processors. These partners are bound by data protection agreements.
• Game providers: To operate live casino games, slots, blackjack, and other titles, session and bet data may be processed by the providers that supply the content (Pragmatic Play, PG Soft, Evolution Gaming, and others). These providers are internationally certified and operate under their own security standards.
• Analytics and security tools: Technical usage data (IP address, session logs) may be processed by fraud detection and security analysis tools to protect the user's account and the integrity of the platform.
• Legal obligation: 55bb23 may share data with public authorities, regulatory bodies, or the judiciary when required by law or court order. This includes reporting obligations related to anti-money laundering compliance under Brazilian legislation.
• Business transfer: In the event of a merger, acquisition, or asset transfer involving 55bb23, user data may be transferred to the acquiring party, which will be required to uphold the same protection standards established in this policy. Users will be notified in advance of any such change.

In all data-sharing situations, 55bb23 applies technical and contractual measures to ensure that recipients handle data to a standard compatible with LGPD requirements.

05 Data Retention

55bb23 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by Brazilian law.

• Registration and identity data: Retained for as long as the account remains active. After account closure, kept for a minimum of 5 years to meet regulatory obligations and anti-money-laundering requirements under Law No. 9,613/1998 and COAF regulations.
• Financial transaction history: Retained for a minimum of 5 years from the date of each transaction, as required by tax and regulatory legislation.
• Security and activity logs: Kept for up to 6 months for information security purposes, unless related to active fraud investigations or court orders.
• Marketing data (email, mobile number): Retained until the user opts out of marketing communications. You can unsubscribe at any time via the link included in every email sent by 55bb23.
• Non-essential cookie data: Retained according to the period configured for each cookie, generally between 30 days and 12 months. Cookies essential to the platform's operation are kept for as long as the session or their specific function requires.

Once the applicable retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified.

06 Data Security

55bb23 applies technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. Measures in place include:

• 256-bit SSL/TLS encryption across all connections between the user's device and the platform's servers. All data transmissions — including login, bets, deposits, and withdrawals — are encrypted in transit.
• Secure password storage using salted hash algorithms, ensuring that even if the database were compromised, user passwords would not be exposed in plain text.
• Card data not stored: 55bb23 does not store full credit or debit card numbers. Payment data is processed directly by a PCI-DSS certified processor and never passes through the platform's own storage.
• Internal access controls: Access to users' personal data is restricted to 55bb23 staff who need it to perform their roles. All access is logged.
• Continuous monitoring against unauthorized access attempts, brute-force attacks, and other suspicious behavior.
• Two-factor authentication (2FA) available to all users as an additional layer of account protection.

No security measure is 100% foolproof. In the event of a security incident that poses a significant risk to users, 55bb23 will notify the ANPD and affected users within the timeframes set by the LGPD, providing information about what happened, which data was affected, and what steps were taken.

Users are also responsible for securing their own access. Use a strong, unique password for 55bb23, enable 2FA, and never share your credentials with anyone. If you suspect unauthorized access, change your password immediately and notify support.

07 Your Rights as a Data Subject

The LGPD grants you — as the data subject — a set of rights that can be exercised at any time with 55bb23. Below, we explain each one in straightforward terms:

To exercise any of these rights, contact 55bb23 support, identify yourself as the data subject, and specify which right you wish to exercise. 55bb23 will respond within 15 business days. Some requests may require identity verification before processing, to protect the data subject from unauthorized third parties.

08 Cookies and Similar Technologies

55bb23 uses cookies and similar technologies to keep the platform running, improve the user experience, and — with your consent — personalize content and analyze platform usage. Cookies are small text files stored in your browser.

Types of cookies used:

• Essential cookies: Required for basic platform functionality — maintaining login sessions, processing bets and deposits, and security features. These cookies cannot be disabled without affecting platform usability.
• Performance and analytics cookies: Collect anonymous information about how users interact with the platform — pages visited, session duration, errors encountered. Used to improve the overall experience. Can be disabled without affecting core functionality.
• Functionality cookies: These store user preferences such as language, game settings, and other personalized adjustments, so you don't have to reconfigure them each session.
• Marketing cookies (with consent): Used to measure campaign effectiveness and personalize communications. Activated only with the user's explicit consent. You may withdraw that consent at any time.

You can manage your cookie preferences in your browser settings — Chrome, Firefox, Safari, and others offer granular controls over which types of cookies to accept. Disabling non-essential cookies does not affect your ability to access your account, make deposits via Pix, or withdraw your winnings at 55bb23.

55bb23 does not use third-party cookies for cross-site behavioral tracking — meaning it does not monitor your browsing on other websites outside the 55bb23.best platform.

09 Protection of Minors Under 18

55bb23 is an entertainment platform exclusively for adults. Access and use of the platform are permitted only for individuals aged 18 or older. 55bb23 does not knowingly collect data from minors and does not allow minors to create accounts or use any product on the platform.

To ensure this protection, 55bb23 implements the following measures:

• Date of birth verification at registration, with automatic blocking for users under 18.
• Mandatory identity verification (KYC) before the first withdrawal, confirming the account holder is of legal age based on an official ID document.
• Monitoring of usage patterns that may indicate a minor is using an adult's account without authorization.

If 55bb23 identifies that a user under the age of 18 has created or is using an account on the platform, the account will be immediately closed, all balances will be frozen, and the situation will be handled in accordance with applicable legal obligations. Deposits made by minors will be refunded to the original payment method following verification.

If you are the guardian of a child or teenager and believe they may be accessing online gaming platforms, use the parental control tools available on operating systems and browsers to restrict that access. Keep your 55bb23 login credentials in a secure place, out of reach of minors.

10 Contact & Data Protection Officer (DPO)

To exercise your rights as a data subject, ask questions about this Privacy Policy, report a personal data security incident, or contact the 55bb23 Data Protection Officer (DPO), please use the platform's official support channels.

• Live chat: Available 24 hours a day, seven days a week, directly on the 55bb23.best platform. Identify yourself as the data subject and state the subject of your request.
• Email: contato@55bb23.best — For formal requests to exercise your rights, please send an email with the subject line "Direitos do Titular LGPD" and the information required to verify your identity.

55bb23 will respond to data subject rights requests within 15 business days of receipt. For more complex requests requiring additional review, the deadline may be extended, with prior notice to the user explaining the reason and the revised estimated response time.

If you are unsatisfied with 55bb23's response to a rights request, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil.