Privacy Policy of 3ss55 – Protecting Your Data

Data Controller

The data controller responsible for processing your personal data is 3ss55 Entretenimento Online LTDA., operator of the platform available at https://3ss55.best. For the purposes of this policy, 3ss55 determines the purposes and means of processing for data collected from registered platform users.

To exercise your rights as a data subject or clarify any questions about this policy, you may contact our data protection team directly by email at contato@3ss55.best or via the live chat available on the platform 24 hours a day, 7 days a week, in Brazilian Portuguese.

Personal Data We Collect

The 3ss55 collects personal data in the following categories, always limited to the minimum volume necessary to provide the service and meet legal obligations:

The 3ss55 does not collect sensitive data such as racial or ethnic origin, religious beliefs, health information, or sexual orientation. Credit and debit card financial data is tokenized by payment processors and is never stored in plain text on our servers.

Purpose of Data Processing

The personal data collected by 3ss55 are used exclusively for the following purposes:

• Account creation and management: registration, authentication, identity verification (KYC), and user profile management on the platform;
• Bet processing: recording, calculation, and settlement of Sports Betting on football (Brasileirão, Copa do Brasil, Libertadores), volleyball, basketball, MMA, and e-sports;
• Financial transactions: processing deposits and withdrawals in BRL via Pix, Boleto Bancário, credit and debit cards, PicPay, and Mercado Pago;
• Fraud prevention: detection of multiple accounts, bonus abuse, money laundering, and other illicit activities;
• Legal compliance: compliance with the LGPD, Brazilian financial legislation, and Sports Betting regulatory standards;
• Customer support: resolution of questions, disputes, and requests submitted via live chat or email;
• Relevant communications: transactional notifications (deposit confirmations, bet results) and, with your consent, promotional communications about bonuses and platform updates;
• Service improvement: aggregate behavioral analysis to improve the platform experience, new products, and features.

Legal Basis for Processing (LGPD)

All personal data processing carried out by 3ss55 is grounded in one of the legal bases set out in the LGPD (Law No. 13,709/2018):

• Contract performance (art. 7, V): processing required to provide the Sports Betting and casino services contracted by the user upon account creation;
• Compliance with a legal obligation (art. 7, II): collection of CPF, identity documents, and financial data to meet KYC, anti-money laundering, and Brazilian tax legislation requirements;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, multiple-account detection, and behavioral analysis to improve the service;
• Consent (art. 7, I): sending promotional communications, newsletters, and bonus notifications — consent that can be withdrawn at any time through your account settings or by contacting support.

Where the legal basis is consent, 3ss55 will request authorization clearly and specifically before processing begins. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to that withdrawal.

Data Sharing with Third Parties

The 3ss55 may share personal data with the following categories of third parties, always under contractual guarantees of confidentiality and use limited to the stated purpose:

• Payment processors: to enable deposits and withdrawals via Pix, Boleto Bancário, credit and debit cards, PicPay, and Mercado Pago — data is transmitted securely and in encrypted form;
• Casino game providers: technical session data required for the operation of live tables, slots, and crash games provided by certified partners;
• Identity verification providers (KYC): certified document verification platforms used to confirm user identity in accordance with regulatory requirements;
• Technology infrastructure: cloud hosting providers, CDN services, and security vendors that process data exclusively under 3ss55's instructions;
• Authorities and regulatory bodies: when required by law, court order, the Banco Central do Brasil, the Receita Federal, or other competent Brazilian authorities.

The 3ss55 does not sell, rent, or trade users' personal data with third parties for advertising, marketing, or any other purpose not described in this policy.

Cookies and Tracking Technologies

The 3ss55 uses cookies and similar technologies to ensure the platform functions correctly, personalize your experience, and analyze service usage. The cookies used fall into the following categories:

• Essential cookies: required for the platform's basic operation — session authentication, security, and navigation. They cannot be disabled without affecting service functionality;
• Functional cookies: store user preferences such as language, betting settings, and Live Casino table preferences;
• Analytical cookies: allow 3ss55 understand how users interact with the platform in order to improve the experience — data is aggregated and anonymized;
• Security cookies: detect suspicious behavior, fraud attempts, and unauthorized access to user accounts.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may prevent access to certain platform features, including account login and placing bets.

Data Security

The 3ss55 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, destruction, or improper disclosure:

• 256-bit SSL Encryption across all communications between the user's browser or app and the platform's servers;
• Encryption at rest for sensitive financial data stored in the platform's databases;
• Role-based access control (RBAC): only employees of 3ss55 with a legitimate work need have access to user data;
• Continuous monitoring of unauthorized access attempts, behavioral anomalies, and security incidents;
• Multi-factor authentication (MFA) available and recommended for your user account;
• Penetration testing and security audits conducted periodically by specialized third-party firms.

In the event of a security incident resulting in significant risk or harm to data subjects, 3ss55 will notify the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD.

Data Retention & Deletion

The 3ss55 retains users' personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations:

• Active account: data retained for as long as the account is active and the user continues to use the platform's services;
• After account closure: identification data and financial transaction records are retained for a minimum of 5 (five) years, as required by Brazilian financial and tax regulations;
• Betting data: betting history retained for 5 years for regulatory audit and dispute resolution purposes;
• Support communications: support records kept for 2 years after the interaction is closed;
• Cookies and session data: automatically deleted when each cookie's expiration period is reached, or immediately when the user clears their browser cookies.

Once the mandatory retention period expires, data is securely deleted or anonymized in a way that makes it impossible to identify the original data subject.

Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as a data subject, a set of rights regarding how your information is processed by 3ss55. You may exercise any of these rights by contacting our support team via live chat or at contato@3ss55.best:

The 3ss55 will respond to rights requests within 15 calendar days of receipt. For more complex requests requiring additional analysis, we will inform you of the extended timeframe with a justification. We do not charge any fee to process data subject rights requests.

International Data Transfers

The data of users of 3ss55 are primarily processed and stored on servers located in Brazil. When data needs to be transferred to infrastructure in other countries — for example, to servers of casino game providers or international cloud services — 3ss55 ensures that:

• Data transfers occur only to countries or organizations that provide an adequate level of data protection as defined by the LGPD and ANPD criteria;
• Specific data transfer agreements are established with international recipients, including protection clauses equivalent to those required under Brazilian law;
• Users are notified when a relevant transfer occurs and may request details about the safeguards in place.

Under no circumstances will the personal data of Brazilian users of 3ss55 are transferred to jurisdictions without adequate data protection without the applicable contractual and technical safeguards.

Minors

The services of 3ss55 are intended exclusively for individuals aged 18 (eighteen) and over. The platform does not knowingly collect personal data from minors.

Should 3ss55 identify that an account was created by or on behalf of a person under 18, the account will be immediately closed and the collected data will be deleted, subject to the minimum legal retention periods required for financial crime prevention.

If you are the legal guardian of a child or teenager and believe their data has been collected by the platform, please contact our team immediately at contato@3ss55.best or via live chat so we can handle your request as a priority.

Changes to This Privacy Policy

The 3ss55 may update this Privacy Policy periodically to reflect changes in legislation, our services, or our data processing practices. The date of the most recent update is always displayed at the top of this document and in the header section of this page.

Changes that materially affect how we process your data will be communicated via your registered email address or through a notification upon platform login, prior to the new terms taking effect. Minor changes take effect on the date the updated version is published.

Continued use of the platform after changes are published constitutes acceptance of the revised policy. If you do not agree with the changes, you may close your account and request data portability or deletion before the new terms take effect.

Contact, Questions & Data Protection Officer

To exercise your data subject rights, get clarification on this policy, or report any privacy concern related to your data on 3ss55, use the channels below:

• Live chat: available on the platform 24 hours a day, 7 days a week, with support in Brazilian Portuguese — the preferred channel for urgent requests;
• Email: contato@3ss55.best — for formal data subject rights requests, please include "Data Protection — LGPD" in the subject line to ensure priority handling;
• Address: 3ss55 Entretenimento Online LTDA., Brazil — available upon formal request for official correspondence.

The 3ss55 commits to responding to all privacy and data protection requests within 15 calendar days. For more complex requests requiring additional legal or technical analysis, the data subject will be notified of the extended timeline with a detailed explanation.