Privacy Policy of 5hbet5 — LGPD and Data Protection

A 5hbet5, operator of the sports betting and online casino platform available at https://5hbet5.net, is the controller of personal data processed under this Privacy Policy. As the controller, 5hbet5 is responsible for decisions regarding the collection, storage, use, and disposal of your data.

This Privacy Policy applies to all registered users and visitors of the platform 5hbet5, regardless of the device used to access it — mobile, tablet, desktop, or any other. By creating an account or browsing the site, you acknowledge that your data will be processed as described here.

A 5hbet5 collects different types of data depending on how you interact with the platform. Below are the categories of data collected and the situations in which collection occurs:

A 5hbet5 does not collect sensitive data such as racial origin, religious belief, political opinion, or biometric data, except where strictly necessary for identity verification (KYC) purposes as required by law.

The data collected by 5hbet5 are used exclusively for the following purposes:

• Account operation: create, manage, and maintain your active account on the platform, process logins, verify identity, and personalize your experience;
• Payment processing: processing deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED, as well as withdrawals via Pix and TED;
• Compliance with legal obligations: KYC verification required by financial legislation, anti-money laundering measures, and reporting to regulatory authorities when mandated by law;
• Fraud prevention: identifying suspicious behavior, protecting your account against unauthorized access, and ensuring the integrity of bets on the platform;
• Customer support: answering questions, resolving complaints, and providing assistance via chat, email, and WhatsApp;
• Transactional communications: sending withdrawal confirmation notifications, security alerts, deposit confirmations, and other information directly related to your account;
• Platform improvement: analyze usage patterns in an aggregated and anonymized form to improve features, performance, and user experience;
• Responsible gambling: monitoring patterns that may indicate problematic behavior and proactively offering support when needed.

As required by the LGPD, each processing activity involving personal data carried out by 5hbet5 has a specific legal basis that justifies it:

• Contract performance (Art. 7, V): processing necessary to operate your account, handle bets, and execute deposits and withdrawals — without this data, the service simply cannot function;
• Fulfillment of a legal obligation (Art. 7º, II): KYC identity verification, financial transaction records, and reports to authorities as required under Brazilian anti-money laundering legislation;
• Legitimate interest (Art. 7º, IX): fraud prevention, platform security, and usage pattern analysis to improve the service — always with minimal impact on your privacy;
• Consent (Art. 7º, I): sending marketing communications and promotions from 5hbet5, when you choose to receive them. Consent may be withdrawn at any time.

A 5hbet5 does not process data on the basis of consent for purposes that could be grounded in other legal bases. Where processing is necessary to provide the service, the legal basis is contract performance — we do not rely on your consent for these essential activities.

A 5hbet5 does not sell your personal data. Sharing with third parties occurs only in the following situations and with the following categories of partners:

• Payment processors: PCI-DSS certified gateways for card processing, Pix operators via the Banco Central system, and platforms such as PicPay and Mercado Pago — only the data necessary for each transaction is shared;
• Technology providers: cloud hosting services, customer support platforms, and game providers — all contractually required to process data in accordance with the LGPD and the privacy policy of 5hbet5;
• Certification laboratories: independent auditors who verify RNG compliance for games — they receive technical data only, never personal data;
• Legal and regulatory authorities: when required by court order, Central Bank request, COAF, or other competent Brazilian authorities — only the minimum necessary data, and only upon formal documentation;
• Fraud prevention: in cases of suspected money laundering or criminal activity, the 5hbet5 may share information with authorities and, when required, with other operators in the sector.

The personal data of users of 5hbet5 are stored on servers with the following security controls:

• Encryption at rest: stored data is encrypted, rendering it unreadable even in the event of unauthorized physical access to the servers;
• Encryption in transit: all communications between your device and the servers of 5hbet5 are protected by TLS 1.3 (256-bit SSL);
• Restricted access: only employees of 5hbet5 with a proven functional need are granted access to personal data, subject to multi-factor authentication;
• Continuous monitoring: intrusion detection systems and anomaly monitoring operate 24 hours a day;
• Secure backups: backups are performed regularly and stored under the same security controls as primary data;
• Penetration testing: security audits and vulnerability testing are carried out periodically by specialized teams.

In the event of a security incident resulting in a personal data breach, 5hbet5 will follow the incident response protocol set out under the LGPD, notifying the ANPD and affected data subjects within the legally required timeframes.

A 5hbet5 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — keeping your session active, remembering your language preferences, and securing your login. These cannot be disabled without affecting how the site works;
• Performance cookies: collect information on how you use the platform in an aggregated, anonymized form (most visited pages, average session duration, errors encountered) to improve the experience. They do not identify you individually;
• Functional cookies: they remember your personalized preferences such as visual theme, recently accessed games, and account settings to make your next visit more convenient;
• Analytical cookies: used internally for performance analysis and to identify platform improvement opportunities 5hbet5. Data is anonymized prior to analysis.

A 5hbet5 does not use third-party behavioral advertising cookies to display ads outside the platform. You can manage your cookie preferences in your browser or mobile device settings. Please note that disabling essential cookies may prevent access to your account.

The LGPD grants you, as a data subject, a set of rights that 5hbet5 is fully committed to upholding. Here is what you can request:

A 5hbet5 retains your data for as long as necessary for each purpose, in compliance with the minimum retention periods required by Brazilian law:

• Registration and identification data (CPF, full name, date of birth): retained for the entire duration of the account and for a minimum of 5 years after closure, in accordance with anti-money laundering requirements (Law No. 9.613/1998);
• KYC documents (national ID, driver's license, proof of address): retained for the legal period of 5 years after verification or account closure;
• Financial transaction history: records of deposits via Pix, boleto, card, and withdrawals retained for a minimum of 5 years as required by the Central Bank;
• Betting and game history: kept in full for 12 months for user access; an anonymized version may be retained for statistical purposes for a longer period;
• Support and communication data: support conversations are retained for 2 years for quality assurance and potential dispute resolution purposes;
• Cookie and access log data: retained for up to 6 months, in accordance with the Marco Civil da Internet (Law No. 12.965/2014).

Once retention periods have elapsed, data is securely deleted or irreversibly anonymized. 5hbet5 does not retain data beyond what is necessary for commercial caution — each category has a defined, automated disposal schedule.

The platform 5hbet5 is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors. CPF verification at registration is designed, among other purposes, to confirm that the user is of legal age.

If you believe that someone under the age of 18 has created an account on 5hbet5, notify support immediately at suporte@5hbet5.net. Once confirmed, the account will be closed and the minor's data will be deleted from platform systems in accordance with applicable minimum legal retention periods.

Some of the technical services used by 5hbet5 (such as cloud infrastructure and international game providers) may involve processing data on servers located outside Brazil. When this occurs, the 5hbet5 guarantees that:

• The transfer is made to countries that offer an adequate level of protection as assessed by the ANPD, or;
• Standard contractual clauses are adopted to guarantee data subjects the same rights provided under the LGPD; or
• The foreign operator follows internationally recognized corporate data protection policies (such as those approved by the British ICO or the European Commission).

A 5hbet5 prioritizes vendors that process data in Brazil or in jurisdictions with data protection legislation equivalent to the LGPD. The list of countries where data may be processed is available upon request to support.

A 5hbet5 may update this Privacy Policy as needed to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to security processes. Any significant change will be communicated at least 15 days in advance through:

• Email sent to the address registered on the account;
• Notice displayed on the account dashboard at 5hbet5 on first access after publication;
• Updating the "Last updated" date at the top of this page.

Continued use of the platform after the new version takes effect constitutes acceptance of the changes. If you disagree with the updated privacy practices, you may close your account and request deletion of any data not subject to mandatory legal retention.

Previous versions of this Policy are archived and available upon request to support via email, for historical reference or in the event they are needed in a dispute.

A 5hbet5 has appointed a Data Protection Officer (DPO) as required by Art. 41 of the LGPD. The DPO is the official point of contact for all privacy and data protection matters.

To exercise your rights as a data subject, get answers about this Policy, or file a privacy complaint, please reach us through the channels below:

• Privacy channel email: suporte@5hbet5.net — with the subject line "LGPD — [request type]";
• Live chat: available 24 hours a day on the platform — let us know your request concerns data privacy so it can be routed to the dedicated team;
• Response timeframe: up to 15 business days for LGPD rights requests, up to 4 hours for general privacy inquiries.

A 5hbet5 is committed to handling all data subject requests seriously and within the legally required timeframe. Should the response from 5hbet5 is not satisfactory, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.