Privacy Policy – 565bet: Data Protection and LGPD

1 Data Controller

For the purposes of this Privacy Policy and the General Data Protection Law (LGPD), the controller of Users' personal data is 565bet, operator of the Sports Betting and online casino platform available at 565bet.click and on the official mobile app.

The personal data protection officer (DPO – Data Protection Officer) of 565bet can be contacted at privacidade@565bet.click for specific questions regarding personal data processing, the exercise of rights under the LGPD, or clarifications about this Policy.

For all other general support matters, the channel is suporte@565bet.click, with human assistance in Portuguese and responses within 4 hours during extended service hours.

2 Data We Collect

2.1 Data You Provide Directly

During registration and platform use 565bet, we collect the following categories of personal data provided directly by you:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile phone number, full residential address (street, neighborhood, city, state, ZIP code);
• Identity verification documents (KYC): photo of a government-issued ID (RG, CNH, or passport); selfie for identity verification; recent proof of address;
• Financial data: registered Pix key, associated bank (Nubank, Itaú, Bradesco, Banco do Brasil, etc.), credit or debit card details (stored in tokenized form — never the full card number);
• Communication data: messages exchanged with support via chat, email, or WhatsApp.

2.2 Automatically Collected Data

When you access the 565bet, we automatically collect certain technical data required for the services to function:

• Device data: device type, operating system, app version, or browser;
• Connection data: IP address, internet service provider, estimated city/state based on IP geolocation;
• Browsing data: pages visited, time spent, clicks, bets placed, and games used;
• Cookies and similar technologies: as detailed in Section 6 of this Policy.

2.3 Summary Table of Data Collected

3 How We Use Your Data

The 565bet uses collected personal data exclusively for the purposes described below. Each purpose has a specific legal basis under the LGPD (detailed in Section 4):

3.1 Service Operations

• Create, maintain, and manage your user account;
• Process deposits via Pix, boleto bancário, credit or debit card, PicPay, and Mercado Pago;
• Process withdrawals to your Pix account or via TED bank transfer;
• Record and settle sports bets, casino game results, and crash games;
• Manage bonuses, promotions, and the VIP Program.

3.2 Security & Fraud Prevention

• Verify the identity of Users and prevent unauthorized account access;
• Detect and prevent fraud, money laundering, and other illegal activities;
• Identify duplicate accounts or behavior that violates the Terms and Conditions;
• Monitor suspicious financial transactions in compliance with AML/CFT (Anti-Money Laundering and Counter-Terrorism Financing) legal obligations.

3.3 Communication and Support

• Send transaction confirmations, security alerts, and account notifications;
• Provide support via chat, email, and WhatsApp;
• Send marketing communications by email or mobile, only with your consent;
• Notify you of changes to the Terms and Conditions or this Privacy Policy.

3.4 Platform Improvement

• Analyze usage patterns to improve the platform experience (in aggregated and anonymized form wherever possible);
• Personalize the display of games, promotions, and content based on your preferences;
• Run tests on new features and fix technical issues.

3.5 Compliance with Legal Obligations

• Meet fiscal, regulatory, and legal obligations applicable to the operation of betting platforms in Brazil;
• Respond to court orders, requests from competent public authorities, or decisions issued by regulatory bodies;
• Maintain records required by applicable law.

4 Legal Bases for Processing (LGPD)

In accordance with Article 7 of the LGPD, all personal data processing carried out by 565bet is based on at least one of the following legal grounds:

• Performance of a contract (Art. 7, V): processing required to deliver the services contracted at registration — such as bet processing, Pix deposits, and withdrawals;
• Legal obligation (art. 7, II): processing required by applicable law, such as anti-money laundering regulations, tax obligations, and gaming regulations;
• Legitimate interest (art. 7, IX): processing necessary for fraud prevention, platform security, and service improvement, always carried out proportionately and in full respect of your rights;
• Consent (Art. 7, I): used to send marketing communications by email or mobile. Consent may be withdrawn at any time.

5 Data Sharing

5.1 Essential Technical Partners

The 565bet may share personal data with technical partners who assist in operating the platform. Such sharing is limited to the minimum necessary for each service, and all partners are bound by data processing agreements with confidentiality clauses:

• Payment processors: companies responsible for processing Pix, boleto, credit/debit card, PicPay, and Mercado Pago transactions;
• Game providers: Microgaming, NetEnt, Playtech, Evolution Gaming, Pragmatic Play, and other game software providers, who receive only the data necessary to operate the games and audit results;
• KYC Providers: identity verification services that assist in document validation for fraud prevention;
• IT infrastructure: cloud hosting, cybersecurity, and service availability monitoring providers.

5.2 Public Authorities

The 565bet may share data with competent public authorities — such as the Receita Federal, Banco Central do Brasil, COAF, and the Judiciary — when required by law, court order, regulatory investigation, or AML/CFT reporting obligations. Such sharing is always limited to what is necessary to fulfill the specific request.

5.3 What We Never Do

• We never sell your personal data to third parties;
• We never share your data for third-party marketing purposes without your explicit consent;
• We never transfer data to partners that do not offer adequate protection guarantees as required by the LGPD.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you access the 565bet website or app. 565bet. They are used to keep your session active, remember your preferences, and help us understand how the platform is used.

6.2 Types of Cookies We Use

• Strictly necessary cookies: essential for the platform's basic operation — such as keeping you logged in during your session and processing transactions. They cannot be disabled without compromising the services;
• Functional cookies: remember your language preferences, account settings, and interface customization. They can be disabled in your browser settings, but doing so may affect your experience;
• Analytical cookies: collect aggregated information about how users navigate the platform so we can improve our services. We use analytics tools with IP anonymization where possible;
• Marketing cookies: used only with your consent, to display relevant content within the platform. We do not use cross-site tracking cookies for third-party advertising.

6.3 How to Manage Cookies

You can configure your browser to refuse cookies or alert you when cookies are being sent. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to manage cookies in the privacy settings. Please note that disabling strictly necessary cookies may prevent the platform from functioning properly. On the mobile app, tracking preferences can be managed in your device settings (iOS: Settings > Privacy; Android: Settings > Privacy).

7 Data Security

The 565bet implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS Encryption: all communications between your device and 565bet's servers are encrypted using an up-to-date SSL/TLS protocol;
• Encryption at rest: sensitive data stored on servers is encrypted at rest using industry-standard algorithms;
• Access control: only employees with a legitimate need for access may view Users' personal data, always with an audit trail;
• Two-factor authentication (2FA): available to all Users and mandatory for staff who access internal systems;
• Continuous monitoring: intrusion detection systems and 24/7 monitoring of suspicious activity on servers;
• Penetration testing: we conduct regular security tests carried out by independent specialized firms;
• Incident response plan: in the event of a data breach that may pose a risk to Users, we notify the ANPD and the affected data subjects within the legal deadlines set out in the LGPD.

8 Data Retention

The 565bet retains personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods:

• Active account data: retained for the full duration of the User's account;
• Financial transaction data: retained for a minimum of 5 (five) years after the transaction, in accordance with tax regulations and AML/CFT legislation;
• KYC documents: retained for a minimum of 5 (five) years after account closure, in accordance with regulatory obligations;
• Betting and gaming records: retained for a minimum of 3 (three) years for audit and dispute resolution purposes;
• Support communication data: retained for 2 (two) years to ensure quality and resolve any disputes;
• Marketing data (consent): retained until consent is withdrawn by the User.

Once the applicable retention period has expired, data is securely deleted or anonymized so that the individual can no longer be identified. Requests for data deletion by the User (right to erasure) are honored in compliance with the minimum retention periods required by law.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject, a robust set of rights that 565bet is fully committed to upholding. All of the rights below can be exercised by submitting a request to privacidade@565bet.click, with a response provided within 15 calendar days:

10 Minors

The services of 565bet are intended exclusively for individuals aged 18 (eighteen) or older. The platform does not intentionally collect personal data from minors under 18 and does not permit registration or use by that audience.

If we become aware that we have collected personal data from a user under the age of 18, we will take immediate steps to delete that information and close the corresponding account, returning any real balance to the legal guardian upon proof of guardianship.

If you suspect that a minor is using the 565bet, please contact our support team immediately at suporte@565bet.click so we can take the necessary steps.

11 International Data Transfers

Some of the technical partners of 565bet — such as international game providers (Microgaming, NetEnt, Evolution Gaming, Playtech) and cloud infrastructure providers — may process data on servers located outside Brazil.

When international transfers of personal data occur, the 565bet ensures it falls under at least one of the legal bases set out in Article 33 of the LGPD:

• Transfer to countries that provide an adequate level of data protection, as determined by the ANPD;
• Transfer covered by specific data protection contractual clauses included in agreements with international partners;
• Transfer necessary for the performance of the contract entered into with you (for example, to allow game providers to operate the titles you have chosen to play).

The 565bet requires all contracts with international partners to meet security and privacy standards equivalent to those demanded by the LGPD, including purpose limitation, access controls, and incident notification obligations.

12 Contact, DPO, and Policy Updates

12.1 Contact Channels

For privacy and data protection inquiries:

• DPO Email: privacidade@565bet.click (exclusively for LGPD matters and exercise of rights);
• General support: suporte@565bet.click (questions about your account, Pix deposits, withdrawals, and gameplay);
• Live chat: available on the website and app during extended hours.

12.2 Updates to This Policy

The 565bet reserves the right to update this Privacy Policy periodically to reflect changes in services, applicable legislation, or privacy practices. When we make significant changes, we will notify Users at least 15 (fifteen) calendar days in advance via their registered email and an in-platform notification.

The date of the last update is always shown at the top of this document. Continued use of the platform after changes take effect constitutes tacit acceptance of the new version of the Policy. If you do not agree with the changes, you may close your account and request deletion of your data before the effective date.