Privacy Policy 557bet – Your Data Protected by the LGPD

The controller of the personal data collected on the platform 557bet — available at 557bet.click — is the company operating the platform, headquartered in Brazil. For LGPD purposes, "controller" refers to the entity that makes decisions about how and why personal data is collected and processed.

This Policy applies to all services provided by 557bet, including:

• Website 557bet.click and all its pages;
• 557bet mobile app for Android and iOS;
• Sports betting, Live Casino, crash games, poker, blackjack, and slots;
• VIP Program and related communications;
• Interactions with customer support via live chat, email, or other channels.

Any questions about this policy or the handling of your data can be sent to contato@557bet.click. The platform's Data Protection Officer (DPO) can be reached at the same address, with the subject line "DPO – Data Protection".

The 557bet collects only the data necessary to operate the platform securely, meet legal obligations, and deliver the best possible user experience. Here is what is collected and when:

Data provided directly by you:

• Full legal name, as shown on your identity document;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Full residential address (street, number, neighborhood, city, state, zip code);
• Email address;
• Mobile phone number;
• Identity verification (KYC) document data: image of national ID, driver's license, or passport; proof of address;
• Pix key details (CPF, email, or associated mobile number) for deposits and withdrawals;
• Credit or debit card details (processed by a certified payment gateway — 557bet does not store your full card number).

Data automatically generated through your use of the platform:

• IP address and approximate location (at city/state level);
• Device type, operating system, and browser version;
• Betting, gaming, and transaction history on the platform;
• Session duration and usage patterns across the website and app;
• Access logs, including date, time, and actions performed on the account;
• Data from cookies and similar technologies (detailed in Section 6).

Every piece of data collected by 557bet has a specific and stated purpose. Below, we outline the main uses:

The 557bet does not use your data for purposes other than those described above without your express consent. If you wish to withdraw authorization for receiving marketing communications, simply update your preferences in the account dashboard or contact support.

The LGPD requires that all personal data processing have a clear legal basis. The 557bet processes your data on the following legal bases set out in Art. 7 of Law 13.709/2018:

• Performance of a contract (Art. 7, V): processing required to create and operate your account, handle bets, process deposits and withdrawals via Pix, boleto, or card, and provide customer support;
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance, and retention of financial records as required by Brazilian law;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, product improvement, and usage behavior analysis — always respecting users' rights and reasonable expectations;
• Consent (Art. 7, I): sending marketing communications, promotions, and platform updates — only when you have explicitly opted in during registration or through your account settings.

Where the legal basis is consent, you have the right to withdraw it at any time, without affecting any processing carried out prior to that withdrawal or the operation of your account for contractual purposes.

The 557bet does not sell, rent, or share your personal data with third parties for commercial purposes. Full stop. Data sharing occurs only in the situations below, all of which are strictly necessary for platform operations:

• Payment processors: to process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These companies receive only the minimum data necessary to complete the transaction and are contractually prohibited from using your data for any other purpose;
• Identity verification (KYC) service providers: used to verify the authenticity of documents submitted during account verification. Data is processed exclusively for that purpose;
• Infrastructure and hosting providers: servers and cloud services that host the platform, all under contracts that include data protection clauses aligned with the LGPD;
• Government and judicial authorities: when required by law, court order, or regulatory obligation — in such cases, 557bet shares only the minimum necessary and, where permitted by law, notifies the affected user;
• Fraud prevention: in specific fraud or money laundering investigations, data may be shared with the relevant regulatory authorities in accordance with Law 9.613/1998.

The platform 557bet uses cookies and similar technologies to ensure the platform and app function correctly, enhance the user experience, and analyze platform performance. See the types of cookies we use:

• Essential cookies: required for the platform's basic operation — login session, account preferences, access security. They cannot be disabled without affecting platform functionality;
• Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, session duration, errors encountered. Used to improve the platform without identifying individual users;
• Functionality cookies: store user preferences such as language, game preferences, and app settings to personalize the experience without requiring reconfiguration on each visit;
• Analytical cookies: used to understand aggregate usage patterns — which sections of the platform are most accessed and where users encounter difficulties. Data is always processed in aggregate, anonymous form.

You can manage cookie preferences through your browser's settings panel. Disabling essential cookies may prevent login and normal use of the platform. Performance and analytics cookies can be turned off without affecting core functionality.

The mobile app of 557bet uses technologies equivalent to cookies for the same purposes — tracking settings can be managed in your phone's privacy settings (Android or iOS).

The 557bet implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key safeguards include:

• 256-bit SSL/TLS Encryption on all connections between your device and the platform's servers — the padlock in your browser's address bar confirms this protection;
• Encryption of data at rest for sensitive information stored on servers, including financial data and identity documents;
• Two-factor authentication (2FA) available for all accounts — we strongly recommend enabling this protection in your account settings;
• Continuous monitoring of suspicious access attempts using automated intrusion detection systems that block unauthorized access attempts in real time;
• Restricted internal access controls — only employees with a demonstrated operational need are granted access to personal data, and all access is recorded in an auditable log;
• Regular security testing, including vulnerability assessments and penetration testing conducted by specialized teams;
• Card data processed by a PCI-DSS certified gateway — 557bet does not store your full credit or debit card number on its servers.

In the event of a security incident affecting personal data, the 557bet will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected data subjects within the timeframe established by the LGPD, with clear information about what occurred, which data was impacted, and what measures were taken.

The 557bet retains your personal data for as long as necessary to fulfil the purposes described in this Policy and applicable legal obligations. The criteria that determine retention periods are:

• Active account: while your account is active on the platform, we retain all data necessary to provide the contracted services;
• Account closed by the user: following voluntary account closure, identity data and financial transaction records are retained for 5 years, as required by law for anti-money laundering compliance and tax records — within the timeframe set out in Brazilian legislation;
• Betting data and game history: retained for 5 years after the bet is placed, in accordance with audit and regulatory compliance requirements;
• Access and security logs: retained for 6 months, pursuant to the Marco Civil da Internet (Law 12.965/2014);
• Marketing communications: retained for as long as you have not withdrawn consent to receive them — after withdrawal, removed from sending systems within 10 business days.

Once the applicable retention periods have expired, data is securely and irreversibly deleted from 557bet, or anonymized where complete deletion is not technically feasible without impacting other systems.

The LGPD grants clear rights to anyone whose data is processed by companies in Brazil. As a user of 557bet, you have the following rights, all of which can be exercised free of charge at any time:

• Confirmation and access (Art. 18, I and II): find out whether 557bet processes your data and access a copy of the information stored;
• Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking or deletion (Art. 18, IV): request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted;
• Portability (Art. 18, V): receive your data in a structured, interoperable format for transfer to another service provider, where technically feasible;
• Deletion upon consent withdrawal (Art. 18, VI): request deletion of data processed based on your consent, after revoking it;
• Information about sharing (Art. 18, VII): know which public or private entities 557bet shares your data with;
• Review of automated decisions (Art. 18, IX): request a review of decisions made solely on the basis of automated processing that affect your interests;
• Withdrawal of consent (Art. 18, IX): withdraw consent given for processing based on that legal ground at any time, with no need to provide a reason.

To exercise any of these rights, submit your request to contato@557bet.click with the subject line "LGPD Rights – [request type]". The 557bet will respond within 15 business days. In cases requiring more detailed analysis, the deadline may be extended by an equal period, with notice to the requester.

If you believe your request was not handled appropriately, you may file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing compliance with the LGPD in Brazil.

The platform 557bet is intended exclusively for individuals aged 18 years old. The collection and processing of data from minors is not permitted and is contrary to the purpose of the platform.

During registration, we verify the date of birth provided and may request supporting documents at any time. If we determine that an account was created by someone under 18, we will take the following immediate steps:

• Immediate account closure;
• Deletion of all collected personal data, except where retention is required by law;
• Refund of any deposits to the holder of the payment method used, following review;
• Notification to the relevant authorities, where applicable.

If you become aware that a person under 18 is using the platform 557bet, contact us immediately by email contato@557bet.click. We take the protection of minors very seriously and will act promptly to resolve the situation.

Some of the service providers used by 557bet — such as cloud infrastructure providers, casino game platforms, and identity verification systems — may process data on servers located outside Brazil.

When this occurs, the 557bet ensures that international data transfers comply with Chapter V of the LGPD, by adopting the following safeguards:

• Transfers to countries or international organizations that offer a level of personal data protection equivalent to that required by the LGPD, as assessed by the ANPD;
• Inclusion of specific data protection clauses in all contracts with international service providers, aligned with LGPD requirements;
• Contractual guarantee that transferred data will be used solely for the agreed purposes and will not be shared with unauthorized third parties.

The list of countries in which the main service providers of 557bet operate includes members of the European Union (subject to the GDPR) and the United States (with applicable compliance certifications). Under no circumstances is data transferred to jurisdictions without adequate identified protection.

The 557bet may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, platform products, or other relevant circumstances.

When changes are significant — such as updates to processing purposes, the types of data collected, or user rights — 557bet will notify all registered users by email with at least 10 days in advance before the new version takes effect.

The date of the last update is always shown at the top of this page. Continued use of the platform after the new terms take effect constitutes tacit acceptance of the changes. If you do not agree with the changes, you may exercise your right to request deletion of your data as set out in Section 9 and close your account.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, you can contact 557bet through the following channels:

• Privacy channel and DPO: contato@557bet.click with the subject line "DPO – Data Protection" or "LGPD Rights – [request type]";
• General support: live chat available on the platform and app, in Portuguese, 24 hours a day, 7 days a week — for general privacy or account inquiries;
• Response time for LGPD requests: up to 15 business days, extendable by the same period in cases requiring more detailed review.

The Data Protection Officer (DPO) of 557bet is the internal officer responsible for ensuring LGPD compliance, handling data subject requests, and liaising with the National Data Protection Authority (ANPD) when required.

If your request is not satisfactorily resolved within the applicable timeframe, you have the right to file a complaint directly with the ANPD — Autoridade Nacional de Proteção de Dados — through the agency's official channels. 557bet respects this right and cooperates fully with ANPD audits and investigations.