Privacy Policy of 5ppg – Your Data Protected under the LGPD

The controller of the personal data collected by the platform 5ppg is the company responsible for operating the 5ppg.best website. For the purposes of this Privacy Policy, the data controller is identified as 5ppg, operator of the online casino and Sports Betting platform available in Brazil.

Any questions, data subject requests, or complaints related to personal data processing may be directed to the data protection officer of the 5ppg by emailing contato@5ppg.best, as detailed in Section 10 of this policy.

The 5ppg collects personal data in the following situations and categories:

Data provided directly by the user at registration:

• Full name and date of birth
• CPF (Cadastro de Pessoas Físicas)
• Email address
• Mobile phone number
• Full residential address (street, number, unit, neighborhood, city, state, and ZIP code)

Data collected during the identity verification (KYC) process:

• Photo ID document (RG, CNH, or passport)
• Updated proof of address
• Selfie holding your identity document

Financial and transaction data:

• Pix key linked to the registered CPF
• Credit or debit card data (partial number, card brand, and expiration date — the full card number is not stored on the servers of the 5ppg)
• History of deposits, withdrawals, and bets made on the platform

Data collected automatically through platform use:

• IP address and approximate geolocation
• Browser type and version, and operating system
• Device used to access the platform (mobile, computer, tablet)
• Pages visited, session duration, and browsing patterns on the platform
• Cookies and session identifiers (detailed in section 8)

The 5ppg uses the personal data collected exclusively for the following purposes:

The 5ppg does not use personal data to create behavioral profiles for commercial purposes, to make automated decisions affecting individual rights without human review, or for any purpose that was not disclosed to the user at the time of collection.

All personal data processing carried out by the 5ppg is grounded in at least one of the legal bases set out in the LGPD (Art. 7 and 11). The applicable legal bases are:

• Contract performance (Art. 7, V): the processing of registration, verification, and financial transaction data is necessary to provide the services contracted by the user upon creating an account on the 5ppg.
• Compliance with a legal obligation (Art. 7º, II): CPF collection, identity verification, and financial record retention are required by Brazilian law — including the Anti-Money Laundering Act (Law No. 9,613/1998) and COAF regulations.
• Legitimate interest (Art. 7º, IX): security monitoring, fraud prevention, and platform improvement using anonymized data are based on the legitimate interest of the 5ppg, provided they do not override the fundamental rights and freedoms of the data subject.
• Consent (Art. 7º, I): promotional communications are sent by email or phone only with the user's explicit consent, which can be withdrawn at any time through the account dashboard or by emailing contato@5ppg.best.

The 5ppg does not sell or transfer personal data to third parties for commercial purposes. Data sharing occurs exclusively in the situations below, all of which are necessary for the platform to function or are required by law:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, the minimum required banking details are shared with the respective platforms and financial institutions involved in the transaction (Nubank, Itaú, Bradesco, Banco do Brasil, and other Brazilian banks enabled for Pix).
• Identity verification providers: for the KYC process, document images may be processed by certified verification tools. These providers act as data processors for the 5ppg, subject to contractual obligations of confidentiality and security.
• Competent authorities: the 5ppg will comply with lawful requests from Brazilian government authorities, regulatory bodies, or courts when required by law — such as requests from COAF, the Federal Revenue Service, or court orders.
• Technology and infrastructure providers: hosting, security, and infrastructure services that support the 5ppg may have technical access to data for operational purposes. These partners are contractually bound to maintain the confidentiality and security of that data.

In all data-sharing situations, the 5ppg requires that partners and processors handle data in compliance with the LGPD and the security standards established by this policy.

The 5ppg retains personal data for as long as necessary for the purposes for which it was collected, respecting the minimum retention periods required by Brazilian law:

• Registration and KYC data: kept throughout the entire period the account is active and for at least 5 years after account closure, in accordance with anti-money laundering requirements (Lei nº 9.613/1998).
• Financial transaction records: retained for a minimum of 5 years, in accordance with tax legislation and anti-money laundering regulations.
• Betting history: kept for the duration of the account's active period and for 1 year after closure, except in cases of ongoing investigation or litigation.
• Browsing data and access logs: retained for 6 months, in accordance with the Marco Civil da Internet (Law No. 12,965/2014).
• Support communications: kept for 2 years for quality assurance and dispute resolution purposes.

Once retention periods have expired, data is securely deleted or anonymized so that it can no longer be linked to the data subject. Early deletion requests submitted by the data subject will be evaluated on a case-by-case basis and may be limited where a legal retention obligation applies.

The 5ppg implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption across all communications between the user's browser and the servers of 5ppg.
• Encrypted storage of passwords using secure hashing algorithms — passwords are never stored in plain text, and even 5ppg have access to it.
• Two-factor authentication (2FA) available for additional account access protection.
• Anti-fraud monitoring continuous, 24 hours a day, with automatic alerts for unusual access or transaction patterns.
• Internal access control with the principle of least privilege — employees of the 5ppg only access the data necessary for their specific functions.
• Security audits periodic assessments and penetration testing to identify and correct vulnerabilities before they can be exploited.
• Incident response plan with notification to the ANPD and affected data subjects in the event of a data breach that may result in significant risk or harm, as required by Art. 48 of the LGPD.

The 5ppg uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the basic functioning of the platform — such as keeping the user session active and remembering language preferences. They cannot be disabled without affecting platform functionality.
• Performance cookies: collect anonymized information about how users interact with the platform — most visited pages, load times, and errors encountered. They help the 5ppg to identify and resolve performance issues.
• Functionality cookies: allow 5ppg remember user preferences, such as preferred payment method or platform display settings.
• Security cookies: help detect fraud attempts, suspicious access, and other behaviors that may indicate malicious activity.

The 5ppg does not use tracking cookies for third-party advertising purposes or share browsing data with ad networks. Cookie settings can be adjusted in the account preferences panel, but disabling essential cookies may affect the normal functioning of the platform.

The LGPD grants data subjects a set of rights that 5ppg respects and facilitates the exercise of your rights. You may exercise any of the rights below at any time, free of charge, through chat support or by emailing contato@5ppg.best:

The 5ppg has a designated Data Protection Officer (DPO), as required by Art. 41 of the LGPD. The DPO serves as the communication channel between data subjects, the 5ppg and the National Data Protection Authority (ANPD).

To contact the DPO of the 5ppg or to exercise any data subject right set out in this policy:

• Email: contato@5ppg.best (subject line: "Privacy and Data Protection")
• Live chat: available 24 hours on the platform of 5ppg, in Brazilian Portuguese
• Response time: up to 15 calendar days for data subject rights requests

The 5ppg may periodically update this Privacy Policy to reflect changes in data processing practices, new legal requirements, or improvements to internal privacy processes. Material changes will be communicated by email to registered users at least 15 days before taking effect.

The date of the last update is always shown at the top of this page. Once changes take effect, continued use of the platform 5ppg implies acceptance of the revised policy. If you disagree with the changes, you may close your account and request deletion of your data as described in sections 6 and 9 of this policy.