Rr55bet Privacy Policy – LGPD Data Protection

1. Who we are and how to identify us

The rr55bet is a Sports Betting and online casino platform operated for the Brazilian market. For the purposes of this Privacy Policy, rr55bet acts as personal data controller of its users — meaning it is responsible for decisions on how that data is collected, used, stored, and disposed of.

This Policy applies to all rr55bet platform users — whether accessing via mobile browser, app, or any other entry point — and covers all available features: Sports Betting on football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, basketball NBB, MMA/UFC, e-sports, slots, Live Casino, poker, and crash games.

For any questions regarding the processing of your personal data, please contact our team directly at suporte@rr55bet.best. We respond within 15 business days for formal LGPD-related requests.

2. What data we collect

The rr55bet collects different categories of personal data depending on how you use the platform. Collection is always limited to the minimum necessary to operate the services.

2.1 Data provided directly by you

• Identification data: full name, date of birth, CPF, email address, mobile number, and residential address;
• Verification documents: copy of national ID, driver's license, or passport, proof of address, when requested for identity verification (KYC);
• Financial data: information about payment methods used — Pix keys, tokenized credit or debit card details, bank account information for TED, PicPay or Mercado Pago data — all stored in encrypted form;
• Communications: content of messages sent to support via live chat or email.

2.2 Automatically collected data

• Technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution;
• Usage data: pages visited, session duration, features accessed, betting history, game history, amounts wagered, and results;
• Location data: approximate geographic location derived from your IP address to verify eligibility and regulatory compliance;
• Cookies and similar technologies: detailed in section 6 of this Policy.

2.3 Summary table of data collected

3. How we use your data

The rr55bet uses collected personal data solely for the purposes described below. No data is used for any purpose not listed here without your being informed and, where required, consulted in advance.

• Platform operations: create and manage your account, process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, record bets, and calculate results;
• Identity verification (KYC): confirm that you are who you say you are, that you are over 18, and that the payment methods belong to the account holder;
• Fraud and money laundering prevention: monitor transactions for suspicious patterns and fulfill legal obligations related to financial crime prevention;
• Responsible gambling: identify behavioral patterns that may indicate problem gambling and provide self-control tools;
• Customer support: answer questions, resolve issues, and handle complaints via live chat and email;
• Marketing communications: send promotions, news, and platform updates — only if you have not opted out of our communications list;
• Product improvement: analyze aggregated and anonymized usage patterns to improve the platform experience;
• Compliance with legal obligations: respond to requests from competent authorities as required by Brazilian law.

4. Legal bases for processing

The LGPD requires that all personal data processing be grounded in a legal basis. The rr55bet operates under the following legal bases, in accordance with art. 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): the processing required to create your account, handle bets, payments, and withdrawals — without this data, the contracted service cannot be provided;
• Compliance with a legal obligation (art. 7, II): identity verification, anti-money laundering compliance, and responses to authority requests under applicable Brazilian law governing the sector;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, responsible gambling monitoring, and service improvement — always proportionate and in full respect of your rights;
• Consent (art. 7, I): sending marketing communications and using non-essential cookies — you can withdraw this consent at any time in your account settings or by contacting our support email.

5. Sharing data with third parties

The rr55bet does not sell, rent, or trade your personal data. Sharing with third parties takes place only where strictly necessary for the platform's operation:

5.1 Essential service providers

We share data with providers that help us operate the platform, all bound by contracts requiring the same level of protection we apply internally:

• Payment processors: financial institutions and fintechs that process Pix, TED, credit/debit card, PicPay, and Mercado Pago transactions — only the minimum data required to process each transaction;
• Game providers: Evolution Gaming, Pragmatic Play Live, and other casino providers receive anonymized session identifiers to record results — they do not receive any personally identifiable data;
• Identity verification services: KYC platforms that assist with document verification when required;
• IT Infrastructure: servers, CDN, and security services that host and protect the platform.

5.2 Competent Authorities

Rr55bet may share data with government, law enforcement, or regulatory authorities when legally required to do so — by court order, request from the Central Bank of Brazil, COAF, or other legally authorized entities. In such cases, we will share only the minimum information necessary to fulfill the legal obligation.

5.3 What we don't do

• We do not sell data to marketing companies;
• We do not share data with other betting houses or casinos;
• We do not transfer data to third parties in countries without adequate data protection legislation unless the safeguards required by the LGPD are in place;
• We do not use your data to build behavioral profiles for sale to advertisers.

6. Cookies and tracking technologies

The rr55bet uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and, with your consent, for marketing purposes.

6.1 Types of cookies we use

• Essential cookies: required for the platform to function — session authentication, bet slip maintenance, language preferences. These cannot be disabled without affecting the service;
• Performance cookies: collect anonymized information about how users navigate the platform, which pages are visited most, and where errors occur — used to improve the product;
• Functionality cookies: remember your personal preferences, such as your default bet limit or chosen layout, to personalize your experience;
• Marketing cookies: used to display relevant rr55bet promotions to you on other sites and platforms — only with your explicit consent.

6.2 How to manage cookies

You can manage and delete cookies through your browser settings. In the most widely used browsers in Brazil — Chrome, Safari, Firefox, Opera, and Edge — this option is found under Settings > Privacy and Security. Disabling essential cookies may prevent the rr55bet platform from functioning properly.

7. How We Protect Your Data

User data security is an absolute priority at rr55bet. We have implemented multiple layers of technical and organizational protection:

• 256-bit SSL encryption: all communications between your device and rr55bet servers are encrypted to the same standard used by banks like Nubank, Itaú, and Bradesco;
• Secure password storage: passwords are stored using irreversible cryptographic hashing — no rr55bet employee can view your password in plain text;
• Tokenized financial data: credit and debit card details are tokenized and never stored on our servers — processing is handled by PCI-DSS certified partners;
• Two-factor authentication (2FA): available in your account settings to add an extra layer of security to your login;
• 24/7 Monitoring: automated intrusion detection and suspicious activity monitoring systems keep watch over the platform continuously;
• Internal access controls: only employees who require access as part of their specific role may view users' personal data, always with full audit tracking;
• Secure backups: encrypted backups stored in geographically separate locations to ensure data availability and integrity.

8. How Long We Retain Your Data

The rr55bet retains your personal data for as long as necessary for the purposes for which it was collected, in compliance with the legal retention periods applicable to the sector:

• Active account data: retained for as long as your account is active and for up to 5 years after closure, for audit and legal compliance purposes;
• Financial transaction history: retained for 5 years in accordance with COAF requirements and Brazilian anti-money laundering legislation;
• Identity verification documents (KYC): retained for up to 5 years after account closure or last access;
• Support communication records: retained for up to 2 years for dispute resolution purposes;
• Technical and usage data: retained for up to 12 months in detailed format and up to 3 years in aggregated and anonymized format;
• Marketing data (with consent): retained until consent is withdrawn or the account is closed.

Once the applicable retention period has expired, data is securely deleted or anonymized in a way that no longer allows it to be linked to you as an individual.

9. How to exercise your rights under the LGPD

To exercise any right guaranteed by the LGPD regarding the data that the rr55bet holds about you, follow the process below:

1. Send an email to suporte@rr55bet.best with the subject line "LGPD Request – [right type]";
2. Include in the body of the email: your full name, the email address registered to your rr55bet account, and a clear description of what you are requesting;
3. For deletion or portability requests, you may be required to confirm your identity through additional verification;
4. Rr55bet will respond within 15 business days from the date the request is received, as required by the LGPD.

If you are not satisfied with rr55bet's response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.

10. Minors

The rr55bet is a platform intended exclusively for adults aged 18 years of age or older. We do not intentionally collect personal data from minors.

If you are a parent or legal guardian and believe that a minor under 18 has created an account on rr55bet using your information or documents, please contact us immediately at suporte@rr55bet.best. The account will be closed and all data related to the minor will be deleted as soon as the situation is confirmed.

Rr55bet enforces age verification during the registration process and as part of identity verification (KYC) procedures to prevent minors from accessing the platform. Any account identified as belonging to a minor is closed immediately, regardless of any available balance.

11. International data transfer

The data of users of the rr55bet are stored primarily on servers located in Brazil. In some cases, the use of international service providers — such as cloud hosting services, CRM platforms, or game providers like Evolution Gaming and Pragmatic Play — may involve the transfer of data to servers in other countries.

When this occurs, rr55bet applies the safeguards required by the LGPD for international data transfers, including:

• Contractual clauses requiring international recipients to uphold the same level of protection demanded by the LGPD;
• Preference for countries or organizations recognized by the ANPD as providing an adequate level of data protection;
• Periodic reviews of contracts with international vendors to ensure ongoing compliance.

Under no circumstances are sensitive financial data — such as full credit card details — transferred internationally. This data is tokenized before any processing by certified partners.

12. Changes to this Privacy Policy

The rr55bet may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or industry best practices. Any significant changes will be communicated to registered users by email at least 14 days in advance before it takes effect.

The most current version of this Policy will always be available on this page, with the date of the last update clearly shown at the top of the document. For minor changes or language adjustments that do not affect your rights or data processing practices, the update may be made directly on the page without prior email notification.

Continued use of the rr55bet platform after the effective date of any changes constitutes acceptance of the updated version of this Policy. If you do not agree with the changes, you may close your account and request deletion of your data before they take effect.

13. Contact & Data Protection Officer (DPO)

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact the rr55bet:

• Privacy email: suporte@rr55bet.best — use the subject line "Privacy / LGPD" for faster handling;
• Live chat: available 24 hours directly on the platform for immediate privacy and data questions;
• Response time: up to 15 business days for formal LGPD-related requests.

Rr55bet has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and serving as the communication channel between data subjects, the company, and the ANPD. To contact the DPO directly, use the email suporte@rr55bet.best with the subject line "DPO – LGPD Request".

If you are unable to resolve your issue directly with rr55bet, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.