Privacy Policy of 5pbet — How We Protect Your Data

1. Data Controller

This Privacy Policy describes the practices of 5pbet (hereinafter "Platform" or "we"), responsible for the processing of personal data of users who access the website https://5pbet.best and use their services.

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the 5pbet acts as Controller of the personal data collected on this platform, determining the purposes and means by which data is processed. For questions about data processing or to exercise your rights as a data subject, use the channels indicated in section 14 of this document.

2. Data We Collect

The 5pbet collects different categories of personal data depending on how you interact with the platform. Here is what is collected and when:

2.1 Data Provided Directly by You

• Registration data: full name, CPF, date of birth, email address, mobile phone number, and full residential address;
• Identification documents: National ID, driver's license, or passport, and proof of address (requested during the KYC process);
• Financial data: information about the payment method used (Pix key, credit or debit card details, bank account for wire transfer), required to process deposits and withdrawals in BRL;
• Communications: content of conversations with support via live chat or email.

2.2 Automatically collected data

• Usage data: pages visited, session duration, click events, games accessed, bets placed, access times;
• Device data: IP address, device type and model, operating system, device identifiers, screen resolution;
• Browser data: browser type and version, language settings, time zone;
• Cookies and similar technologies: as described in section 8 of this policy.

2.3 Data Received from Third Parties

• Identity verification information provided by authorized KYC service providers;
• Fraud prevention data provided by specialized security partners;
• Information from payment operators (such as card processors) required to confirm transactions.

3. Purpose of Data Processing

The 5pbet uses your personal data solely for the purposes listed below. Your data is never used in ways that are incompatible with the reasons it was originally collected:

• Account creation and management: process your registration, verify your identity, and keep your account active and secure;
• Service delivery: allow you to place Sports Betting, access the Live Casino, play slots, crash games, and use all platform features;
• Payment processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer; process withdrawals to accounts designated by the user;
• KYC verification and fraud prevention: verify your identity, prevent money laundering, detect fraudulent activity, and protect the integrity of the platform and its users;
• Operational communications: send transaction confirmations, security alerts, account notifications, and updates to the platform's terms and policies;
• Marketing and promotions: send communications about bonuses, promotions, and platform updates — only to users who have opted in to receive this type of communication;
• Service improvement: analyze platform usage behavior to identify issues, improve the user experience, and develop new features;
• Compliance with legal obligations: respond to requests from competent authorities and fulfill tax and regulatory obligations applicable to the sector;
• Customer support: log and resolve user requests, complaints, and inquiries efficiently.

4. Legal Basis for Processing (LGPD)

All personal data processing carried out by 5pbet is grounded in at least one of the legal bases established under the LGPD:

• Contract performance (Art. 7, V): processing required to deliver the services contracted by the user upon account creation, such as bet processing and payments;
• Compliance with a legal or regulatory obligation (Art. 7º, II): KYC identity verification, anti-money laundering compliance, and responses to regulatory authority requests;
• Consent (Art. 7, I): for sending marketing communications and using non-essential cookies — you may withdraw your consent at any time;
• Legitimate interest (Art. 7, IX): for usage data analysis aimed at improving security, preventing fraud, and enhancing platform services, always respecting your rights and reasonable expectations.

5. Sharing Data with Third Parties

The 5pbet does not sell, rent, or trade your personal data. Sharing occurs only in the situations outlined below, always with appropriate safeguards in place:

• Payment providers: Pix operators, credit and debit card processors, banking partners for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil), PicPay, and Mercado Pago — we share only the data necessary to process each transaction;
• KYC Partners: identity verification and fraud prevention service providers, who process documents and carry out registration validation;
• Game providers: Pragmatic Play, PG Soft, Hacksaw Gaming, Nolimit City, Play'n GO, and other slots and live casino providers, which receive the session identifiers required to operate the games;
• IT infrastructure providers: hosting, cloud computing, and security services that support platform operations, under contracts that include data protection clauses;
• Public authorities: when required by law, court order, or applicable regulation, we share data with government agencies, tax authorities, or law enforcement;
• Analytics services: platform performance analytics tools that use anonymized or pseudonymized data to generate aggregate metrics.

6. Data Retention and Deletion

The 5pbet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods:

• Active account data: retained for as long as the account remains active on the platform;
• Financial and transaction data: retained for a minimum of 5 years after the last transaction, in compliance with tax and regulatory obligations;
• KYC and identity verification data: retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations;
• Betting records: retained for a minimum of 3 years for dispute resolution and audit purposes;
• Support communications: retained for up to 2 years after the case is closed.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized. Early deletion requests will be honored to the extent possible, subject to legal obligations that prevent immediate deletion in certain cases.

7. Data Security

The 5pbet employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or improper disclosure:

• Encryption in transit: 256-bit SSL/TLS on all communications between the user's device and our servers;
• Encryption at rest: sensitive data stored with AES-256 encryption;
• Access control: access to personal data restricted to staff with a legitimate need, with multi-factor authentication and audit logs;
• Continuous monitoring: intrusion detection systems and 24-hour monitoring to identify suspicious activity;
• Security testing: we conduct regular penetration testing and security audits to identify and address vulnerabilities;
• Incident response plan: in the event of a data breach that poses a risk to data subjects, we will notify the National Data Protection Authority (ANPD) and affected users within the legally required timeframes.

8. Cookies and Tracking Technologies

The 5pbet uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — for analytics and personalization purposes.

Types of cookies used:

You can manage your cookie preferences at any time in your browser settings or in the platform's privacy preference dashboard. Disabling essential cookies may affect the functionality of certain features of 5pbet.

9. Data of Minors

The 5pbet is a platform intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from minors. If we become aware that a minor has used the platform or provided personal data, we will immediately close the account and delete all associated data.

Parents or guardians who become aware that a minor has created an account on 5pbet should contact our support team immediately at suporte@5pbet.best so we can act promptly.

10. International Data Transfers

In some cases, the personal data of users of 5pbet may be transferred to countries outside Brazil — for example, to servers of international game providers such as Pragmatic Play, PG Soft, Hacksaw Gaming, and Nolimit City, or to cloud infrastructure providers.

When we carry out international data transfers, we ensure that adequate safeguards are in place, such as:

• Standard contractual clauses requiring recipients to maintain a level of protection equivalent to that of the LGPD;
• Transfers to countries recognized by the ANPD as providing an adequate level of protection;
• Certifications and binding commitments from international data recipients.

11. Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the data subject whose personal data is processed by 5pbet, the following rights:

• Confirmation and access (Art. 18, I and II): find out whether we process your data and access a copy of the information we hold about you;
• Correction (Art. 18, III): request the update of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion (Art. 18, IV): request that unnecessary data or data processed in violation of the LGPD be anonymized, blocked, or deleted;
• Portability (Art. 18, V): receive your data in a structured, interoperable format for transfer to another controller, where technically feasible;
• Deletion of data processed on the basis of consent (Art. 18, VI): request the deletion of data processed based on your consent, except where retention is required by law;
• Information about sharing (Art. 18, VII): obtain information about which entities we share your data with;
• Withdrawal of consent (Art. 18, IX): withdraw consent for consent-based processing at any time, without affecting the lawfulness of prior processing;
• Objection (Art. 18, §2º): object to processing carried out on the basis of legitimate interest when you believe your rights take precedence;
• Complaint to the ANPD: file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have been violated.

12. How to Exercise Your Rights

To exercise any of the rights listed in the previous section, follow the process below — simple and entirely online:

13. Changes to This Privacy Policy

The 5pbet may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or improvements to our services. Changes will follow this process:

• Significant changes will be communicated by email at least 7 days before taking effect;
• Minor changes (wording corrections, clarity adjustments) may be published without prior notice;
• The date of the most recent update is always shown at the top of this document and in the opening section of this policy;
• Continued use of the platform after updates are published constitutes acceptance of the changes.

We recommend reviewing this policy periodically. The most recent version will always be available at https://5pbet.best/privacy-policy.

14. Contact, DPO and Data Protection Officer

To exercise your rights as a data subject, ask questions about this policy, or contact the Data Protection Officer (DPO) of 5pbet, use the channels below:

• General privacy email: suporte@5pbet.best — include "LGPD" in the subject line for priority handling;
• Live chat: available 24 hours a day, 7 days a week, within the platform after login;
• General inquiries: our Frequently Asked Questions covers the most common questions about privacy and account security.

The 5pbet has appointed a Data Protection Officer (DPO) as required by the LGPD. For inquiries specifically related to the processing of personal data, please use the email above with the subject line "Data Protection Officer — LGPD". The DPO will respond within the legally established timeframes.