Privacy Policy for 55qqq — Your Data

This Privacy Policy describes how 55qqq — a Sports Betting and online casino platform accessible at 55qqq.click — handles the personal data of its users in Brazil. For the purposes of the General Data Protection Law (Lei nº 13.709/2018 — LGPD), 55qqq acts as the personal data controller and is responsible for all decisions regarding the collection, use, storage, sharing, and deletion of user information.

This Policy applies to all services offered by 55qqq: Sports Betting (football with Brasileirão Série A, Copa do Brasil, and Libertadores; basketball via NBB; MMA/UFC; e-sports), casino games (slots, live casino, crash games, poker), and all other products and features available on the platform, including the Android and iOS mobile app.

By registering or using 55qqq, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, our data protection officer (DPO) is available at contato@55qqq.click to assist you in Portuguese at any time.

55qqq collects only the data needed to operate the platform, verify user identities, and meet legal obligations. We do not engage in excessive data collection. Data is grouped into the following categories:

Sensitive data — such as racial origin, religious beliefs, health data, or sexual orientation — is never collected by 55qqq under any circumstances. Credit and debit card financial data is stored only in tokenized form by our payment processors, meaning 55qqq never has access to your full card number.

Every piece of data collected by 55qqq has a specific, defined purpose. We do not use user information for any purpose not described in this Policy or communicated in advance. The primary uses are:

• Account operation and service delivery: account creation and management, bet processing, winnings crediting, deposit processing via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED, as well as fund withdrawals;
• Identity verification and fraud prevention: confirming that the user is who they claim to be, preventing multiple accounts under the same CPF, and complying with anti-money laundering (AML/CFT) requirements under Brazilian law;
• Responsible gambling: monitoring of gaming patterns to identify signs of problem gambling and trigger the protection tools available in the user's account;
• Operational communications: sending registration confirmations, SMS verification, financial transaction notifications, and important account updates;
• Marketing & promotions: sending offers, bonuses, information about new games, and special promotions such as Brasileirão classics — only to users who have not opted out of these communications;
• Platform improvement: aggregated and anonymized analysis of user behavior to improve the experience on the website and app;
• Compliance with legal obligations: compliance with orders from competent Brazilian judicial, tax, and regulatory authorities.

55qqq does not use fully automated decision-making systems that produce legal effects or significantly impact users' interests without the possibility of human review. If an algorithm flags a suspicious pattern on an account, the situation is reviewed by a staff member before any action is taken.

Every data processing activity carried out by 55qqq has a corresponding legal basis under the LGPD. We do not process data without an adequate legal foundation. The legal bases used are:

• Contract performance (art. 7, V): processing required to fulfill the service agreement entered into at registration — including account operation, bet processing, and financial transactions;
• Compliance with a legal obligation (art. 7, II): processing required to comply with applicable Brazilian law, including anti-money laundering regulations, tax legislation, and directives from regulatory authorities;
• Legitimate interest (art. 7, IX): processing for fraud prevention, platform security, service improvement, and internal analysis — always weighed against the interests and rights of data subjects;
• Consent (art. 7, I): for marketing communications and the use of non-essential cookies. Consent can be withdrawn at any time in your account settings.

55qqq may share users' personal data in the following situations and with the following categories of recipients:

• Payment processors: data required to process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer is shared with the financial institutions and payment gateways responsible for each transaction. These partners act as processors under contracts that include data protection clauses;
• Game suppliers: username and balance may be transmitted to slots and live casino providers (such as Pragmatic Play and PG Soft) to enable gameplay. No detailed financial data is shared with these providers;
• Technology infrastructure providers: cloud hosting, CDN, monitoring, and security services that process data under contract with 55qqq as data processors;
• Brazilian government and regulatory authorities: data may be disclosed pursuant to a valid court order, request from a competent law enforcement or tax authority, or in compliance with regulatory obligations applicable to the platform's operations in Brazil;
• Auditors and legal advisors: in specific situations involving legal analysis or compliance auditing, always under confidentiality agreements.

All third parties that receive personal data from 55qqq users are contractually required to handle it in accordance with the LGPD and the security standards set by the platform. 55qqq conducts due diligence on partners' privacy practices before establishing any data sharing arrangement.

55qqq uses cookies and similar tracking technologies to ensure the platform functions properly, improve the user experience, and — with your consent — personalize communications and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — session authentication, bet slip maintenance, and security preferences. They cannot be disabled without affecting site functionality;
• Performance cookies: collect aggregated and anonymized data on how users navigate the platform to identify errors and improvement opportunities. They do not identify users individually;
• Functionality cookies: remember your language preferences, interface settings, and other personalized adjustments to improve your experience on future visits;
• Marketing cookies: used with your consent to display relevant offers and promotions within the 55qqq platform. You may refuse or withdraw this consent at any time.

When you first access 55qqq, you will see a cookie notice with clear options to accept all, reject non-essential cookies, or customize your preferences. Your choices are saved and can be changed at any time in the privacy settings panel, accessible in the platform's footer. Third-party cookies are only used by partners listed in our Cookie Policy, available on the site.

55qqq retains personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. General retention periods are:

• Registration and identity verification data: retained for as long as the account remains active and for up to 5 years after closure, as required by anti-money laundering legislation;
• Financial transaction history: retained for up to 5 years after each transaction, in compliance with Brazilian tax and accounting legislation;
• Betting history and gaming activity: retained for up to 2 years after the last account activity for responsible gambling and compliance analysis purposes;
• Support communication data: retained for up to 2 years after the ticket is closed;
• Data collected solely on the basis of consent for marketing purposes: deleted within 30 days of consent withdrawal, unless another legal basis exists to justify retention.

Once applicable retention periods expire, data is securely and permanently deleted or anonymized, where anonymization equally serves the remaining purposes. 55qqq periodically reviews stored data to ensure that unnecessary data is not kept beyond a justifiable retention period.

At 55qqq, user data security is treated as a core technical and operational priority — not just a regulatory checkbox. The security measures in place include:

• 256-bit SSL/TLS encryption on all communications between client and server;
• Password storage using computationally intensive cryptographic hashing — no password is ever stored in plain text;
• Tokenization of credit and debit card data by PCI-DSS certified payment processors;
• Two-factor authentication (2FA) available for all accounts — strongly recommended;
• Continuous infrastructure monitoring with automatic detection of anomalous activity;
• Access to personal data is restricted to staff members with a proven functional need (principle of least privilege);
• Periodic penetration testing and security audits conducted by independent teams;
• Segregation of player funds from the platform's operational capital.

Despite all the measures in place, no system is completely infallible. 55qqq recommends that you use a strong, unique password for your account, enable 2FA, keep your phone and computer protected, and never share your credentials with anyone.

The LGPD guarantees you, as a data subject, a robust set of rights that 55qqq fully respects. You may exercise any of these rights through support at contato@55qqq.click or via live chat on the platform:

Data subject rights requests are responded to within 15 calendar days. If the complexity or volume of requests requires more time, 55qqq will notify the user in advance with an explanation. We do not charge any fee for exercising rights under the LGPD.

55qqq does not knowingly collect, store, or process personal data from individuals under 18. Age verification is mandatory during registration, which requires a valid CPF and, when identity verification is requested, an official document showing date of birth.

If a legal guardian discovers that a child or teenager has created a 55qqq account without authorization and provided personal data, please contact us immediately at contato@55qqq.click. The account will be closed and all data relating to the minor will be deleted within 72 hours of confirmation.

Some of 55qqq's technical partners — such as cloud infrastructure providers and international game suppliers — may be located outside Brazil. In these cases, 55qqq ensures that international data transfers occur only in compliance with the mechanisms set out in the LGPD, which include:

• Transfer to countries that the ANPD recognizes as providing an adequate level of data protection;
• Use of standard contractual clauses approved by the ANPD in agreements with international recipients;
• Specific consent from the data subject, where applicable.

55qqq maintains a record of all international data transfers carried out and ensures that foreign recipients provide a level of protection equivalent to that required under Brazilian law. You may request information about specific transfers involving your data through the DPO support channel.

55qqq may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered on the platform. Any material change — one that affects your rights or the way your data is used — will be communicated at least 15 days in advance via:

• Email sent to the address registered on your account;
• Highlighted notice on the 55qqq homepage;
• Push notification via the app, if installed on your device.

The date of the most recent update is always displayed at the top of this page. We recommend reviewing this Policy periodically to stay informed about how 55qqq handles your data. The current version of this Policy is always the version in force, and continued use of the platform after communicated changes implies acknowledgment of those changes.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report any concern related to how 55qqq handles your personal data, you can reach our dedicated privacy channel:

Alternatively, you can reach us via the live chat available inside the 55qqq platform, 24 hours a day, seven days a week. For rights exercise requests, we recommend the email channel to ensure a formal record of your request and compliance with the legal response deadline.

If after contacting 55qqq you feel your request was not handled satisfactorily, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil.