5k5k5 Privacy Policy – Data Protection and LGPD

For the purposes of the LGPD, the 5k5k5 acts as the controller of personal data collected through the platform available at 5k5k5.net. The controller is responsible for all decisions regarding the processing of users' personal data, including the purposes and means involved.

To exercise any right provided in this policy or to ask questions about how your data is processed, please contact our Data Protection Officer (DPO) at contato@5k5k5.net, identifying your request with the subject line "LGPD – [type of request]".

5k5k5 collects only the data necessary to operate the platform, meet legal obligations, and deliver the best possible experience to Brazilian users. Collection is based on the principles of necessity and data minimization set out in the LGPD.

5k5k5 does not collect data in sensitive categories such as racial origin, religious beliefs, political opinions, health data, or biometric data — except where strictly necessary to comply with a specific legal requirement, with the user's explicit consent.

Personal data collected by 5k5k5 is used exclusively for the following purposes:

• Account operation: create, verify, and keep your account active on the platform, process deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, and process withdrawals via Pix.
• Legal obligation compliance: meet KYC requirements, anti-money laundering (AML/CFT) obligations, and other requirements imposed by Brazilian betting regulations and tax legislation.
• Security and fraud prevention: detect unauthorized access, identify duplicate accounts, investigate suspicious activity, and protect the financial integrity of the platform and its users.
• Customer support: answer questions, handle complaints, and provide personalized support via live chat and email in Portuguese, 24 hours a day.
• Responsible gambling: monitor usage patterns that may indicate problem behavior and proactively activate protective tools — such as deposit limits and self-exclusion — whenever necessary.
• Important communications: send notifications about your account, changes to this policy, security alerts, and mandatory updates — never marketing communications without your explicit consent.
• Platform improvement: analyze usage data in aggregated and anonymized form to identify technical issues, improve the user experience, and develop new features.

5k5k5 processes personal data based on the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): processing required to perform the service agreement entered into between you and 5k5k5 when you created your account and accepted the Terms and Conditions — this covers account operation, bet processing, and payments.
• Compliance with a legal obligation (Art. 7, II): processing required to fulfill obligations imposed by Brazilian law, such as KYC requirements, anti-money laundering regulations, and tax compliance.
• Legitimate interest (art. 7, IX): processing for platform security, fraud prevention, and service improvement purposes, provided it does not override the fundamental rights and freedoms of the data subject.
• Consent (art. 7, I): for marketing communications and non-essential cookies, subject to explicit consent that may be withdrawn at any time.

5k5k5 does not sell or commercialize your personal data. Sharing with third parties occurs only in the situations below, always with the purpose of operating the platform or fulfilling legal obligations:

• Payment processors: the minimum financial data necessary is shared with the institutions that process Pix, boleto, and card transactions in Brazil (such as partner banks and acquirers), subject to confidentiality agreements.
• Identity verification providers: KYC documents may be processed by specialized identity verification partners operating under data processing agreements compliant with the LGPD.
• Competent authorities: when required by law, court order, or a competent regulatory authority in Brazil — such as the Federal Revenue Service, Central Bank, Ministry of Finance, or the Judiciary.
• Technical infrastructure providers: companies that provide servers, cloud services, and security tools required to operate the platform, with access to data that is strictly limited and governed by contract.

All third parties with whom 5k5k5 shares personal data are selected based on their security and privacy track record, and operate under contracts that require an equivalent level of protection for user data.

5k5k5 uses cookies and similar technologies to ensure the platform runs properly, enhance your experience, and keep your session secure. The cookies we use are categorized as follows:

• Essential cookies: required for the platform to function properly — these include maintaining your authenticated session, language preferences, and login security. They cannot be disabled without impairing the site's core functionality.
• Analytics cookies: used to understand how users navigate the platform (most visited pages, average session duration, technical errors). Data is processed in aggregated and anonymized form.
• Preference cookies: store your personalized platform settings, such as your preferred payment method and display preferences.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent key parts of the platform from working correctly, such as login and the betting process.

5k5k5 retains personal data for as long as necessary to fulfill the purposes stated in this policy and to comply with legal obligations. General retention periods are:

• Account and registration data: retained for as long as your account remains active and for up to 5 years after account closure, in accordance with AML/CFT requirements and Brazilian tax legislation.
• Financial records: deposit, withdrawal, and betting history retained for up to 5 years after each transaction, in compliance with the regulations of the Banco Central and Receita Federal.
• KYC documents: retained for the duration of the account plus 5 years after account closure, in accordance with anti-money laundering requirements.
• Browsing data and cookies: retained for up to 13 months for usage and security analysis, after which they are anonymized or deleted.

Once the applicable retention periods expire, data is securely deleted or irreversibly anonymized, making it impossible to link back to the original data subject.

The LGPD grants you a set of rights regarding your personal data processed by 5k5k5. All rights can be exercised by emailing contato@5k5k5.net with the subject line "LGPD – [request type]":

5k5k5 implements appropriate technical and administrative measures to protect your personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss. Key measures include:

• SSL 256-bit encryption across all platform pages and transactions
• Multi-factor authentication available for user accounts
• Role-based access controls — only staff with an operational need may access personal data
• Continuous security monitoring with anomaly detection and suspicious access alerts
• Regular security audits and penetration testing conducted by independent firms
• Regular staff training on data protection and the LGPD
• Encrypted backups stored in separate, geographically distributed infrastructure

Despite all measures in place, no security system is completely infallible. In the event of a security incident that may pose significant risk or harm to users, 5k5k5 will notify the National Data Protection Authority (ANPD) and the affected individuals within the legally required timeframes, with full transparency about what occurred and the corrective actions taken.

5k5k5 is a platform exclusively intended for users aged 18 and over. We do not knowingly collect personal data from minors. If we identify that a registered user is under 18, the account will be closed immediately and all collected data will be deleted, except where retention is required by law.

If you believe a minor under 18 has improperly registered at 5k5k5, please contact support at contato@5k5k5.net so we can investigate and take the appropriate action.

Some of the technology partners 5k5k5 uses to operate its infrastructure may process data on servers located outside Brazil. When this occurs, 5k5k5 ensures the transfer is carried out in compliance with art. 33 of the LGPD, through standard contractual clauses or to countries that offer an adequate level of data protection recognized by the ANPD.

In any cross-border data transfer scenario, users' data receives the same level of protection described in this policy, regardless of where it is physically processed.

5k5k5 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or improvements to internal processes. When significant changes are made, we will notify users by email and through a prominent notice on the platform at least 7 days in advance before the changes take effect.

The date of the last update is shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.

To exercise any right provided in this policy, clarify questions about how your personal data is processed, or submit a privacy-related complaint, please contact the 5k5k5 Data Protection Officer:

• Email: contato@5k5k5.net — use the subject line "LGPD – [request type]" for priority handling
• Live chat: available 24 hours a day directly on the platform

5k5k5 acknowledges privacy requests within 2 business days and completes them within 15 business days, in line with the legal deadline established by the LGPD. If you are not satisfied with our response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), through the authority's official portal.