Privacy Policy – 5xbet: Your Data Protected

1Who We Are — The Data Controller

A 5xbet is the controller of personal data collected through the 5xbet.life website and all associated services — Sports Betting, Live Casino, Crash Games, blackjack, and all other features available on the platform. As the data controller, 5xbet is responsible for defining the purposes and means by which users' personal data is processed.

This Privacy Policy applies to all registered users and visitors of the 5xbet.life website located in Brazil. By creating an account or browsing the platform, you acknowledge that you have read and understood the practices described in this document.

2What Data We Collect

A 5xbet collects personal data at different points during your interaction with the platform. Collection is limited to what is strictly necessary for each purpose.

Data provided directly by you at registration:

• Full name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Full residential address (street, number, unit, neighborhood, city, state, ZIP code);
• Email address;
• Mobile phone number;
• Access password (stored in hashed format — never as plain text).

Data collected during platform use:

• Betting and financial transaction history (deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer);
• IP address and approximate location data;
• Device information (type, operating system, browser, screen resolution);
• In-platform browsing data (pages visited, session duration, clicks);
• Access records (login logs, time, IP).

Data collected during the identity verification (KYC) process:

• Photo of a government-issued photo ID (national ID card or driver's license, front and back);
• Photo of a current proof of address;
• Selfie with document for facial verification, when requested.

3How We Use Your Data

The personal data collected by 5xbet are used exclusively for the purposes described below. No processing for purposes not disclosed in this policy will take place without prior notice and, where applicable, renewed consent.

4Legal Basis for Processing (LGPD)

A 5xbet processes personal data based on the legal grounds set out in the General Data Protection Law (LGPD — Law 13.709/2018). Each processing purpose has a corresponding legal basis:

• Contract performance — to create and operate the user account, process bets, handle deposits and withdrawals, and deliver all services described in the Terms and Conditions;
• Compliance with a legal obligation — for identity verification (KYC), retention of financial records as required by Brazilian law, and cooperation with competent authorities in fraud or money laundering investigations;
• Legitimate interest — for fraud prevention, risk analysis, platform security, and service improvement using anonymized data;
• Consent — for sending marketing communications and promotions by email or mobile, non-essential cookies, and other situations where consent is the most appropriate legal basis. Consent may be withdrawn at any time.

5Data Sharing

A 5xbet does not sell, rent, or trade users' personal data. Sharing occurs only in the following strictly necessary situations:

• Partner service providers — companies that support the operation of the platform: payment processors (for handling transactions via Pix and other methods), identity verification providers (KYC), live casino game providers (such as Evolution Gaming), and IT infrastructure services (hosting, security, transactional email). All partners operate under contracts that require LGPD compliance and prohibit the use of data for their own purposes;
• Competent authorities — when required by law, court order, or official investigation by a Brazilian regulatory body, court, or law enforcement authority;
• Fraud prevention — in cases of identified fraud or abuse, data may be shared with other platforms in the industry through interoperable fraud prevention programs, in a limited and proportionate manner relative to the risk.

In none of these cases is your data used by partners for their own marketing or commercial purposes. 5xbet maintains data processing agreements (DPAs) with all vendors that process users' personal data.

6How Long We Retain Your Data

A 5xbet retains personal data only for as long as necessary for the stated purposes or for the period required by Brazilian law. Retention periods vary by data category:

• Registration data and active account — for as long as the account remains active on the platform;
• Financial transaction history — 5 years after the transaction, as required by tax and anti-money laundering legislation;
• Identity verification documents (KYC) — 5 years after account closure;
• Access records (logs) — 6 months, in accordance with the Brazilian Internet Civil Framework (Law 12.965/2014);
• Marketing communication data — until consent is withdrawn by the user, plus 90 days for processing the request.

After account closure and once all mandatory legal retention periods have been met, personal data is permanently deleted or irreversibly anonymized.

7Information Security

A 5xbet adopts technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all connections between the user's browser or mobile device and the platform's servers;
• Hashed password storage using a secure algorithm — 5xbet does not have access to your password in plain text and will never request it through any channel;
• Two-factor authentication (2FA) available to all users as an additional layer of account security;
• Role-based access control — only staff with an operational need have access to specific data categories, and all access is logged;
• Continuous monitoring of suspicious access attempts, brute-force attacks, and other security threats to the platform;
• Encrypted backups on geographically distributed servers with restricted access.

In the event of a security incident that may affect your personal data, 5xbet will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

8Cookies and Tracking Technologies

A 5xbet uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and analyze browsing behavior in aggregate. The types of cookies used are:

• Essential cookies — required for the platform's basic functionality: maintaining authenticated sessions, language preferences, and active bet slips. These cannot be disabled without compromising site functionality;
• Analytical cookies — collect anonymized information about how users navigate the platform (pages visited, session duration, traffic source). Used to improve the experience and identify technical issues;
• Preference cookies — store personalized user settings, such as odds format preferences (decimal, fractional, or American) and favorite sports.

5xbet does not use third-party cookies for external advertising or retargeting on other sites. Cookie preferences can be managed through the privacy settings panel in your account or via the consent banner displayed on your first visit to the site.

9Your Rights as a Data Subject

The LGPD grants you, as the data subject, a set of rights regarding the personal information that the 5xbet processes. See below how each right works in practice:

To exercise any of these rights, contact us at contato@5xbet.life with the subject line "LGPD Rights — [your specific right]". We will respond within 15 business days of receiving your request.

10Minors' Data

The platform 5xbet is intended exclusively for individuals aged 18 and over. 5xbet does not intentionally collect personal data from anyone under 18. Registration requires confirmation of date of birth and submission of a CPF, which is verified to confirm legal age.

If 5xbet identifies that an account was created by a minor, the account will be closed immediately, all associated data will be deleted, and any remaining balance will be returned to the holder of the payment method used. If you believe a minor has created an account on the platform, please contact us at contato@5xbet.life.

11International Data Transfers

Some of the technology partners of 5xbet — such as cloud infrastructure providers and live game providers — may store or process data on servers located outside Brazil. When this occurs, 5xbet ensures that international data transfers comply with the safeguards required by the LGPD:

• Transfer only to countries whose level of data protection is recognized as adequate by the ANPD; or
• Adoption of standard contractual clauses approved by the ANPD; or
• Certification of the recipient under a recognized privacy compliance program.

The main international providers used by 5xbet are ISO 27001 certified (information security) and operate under the highest data protection standards in the global technology market.

12Changes to this Privacy Policy

A 5xbet may update this Privacy Policy at any time to reflect changes in Brazilian law (including ANPD regulations), our services, or our data processing practices.

Material changes will be communicated via registered email and through a prominent notice on the platform at least 15 days before taking effect — except where immediate legal requirements apply. The date of the last update is always shown at the top of this document. The most current version of the policy will always be available on this page.

Continued use of the platform after the effective date of any updated terms constitutes acceptance of the changes. If you do not agree with any change, you may close your account before the effective date and request deletion of your data.

13Contact, DPO & National Authority

For questions related to data privacy, exercising your rights as a data subject, or inquiries about this policy, please contact the Data Protection Officer (DPO) of 5xbet:

• Email: contato@5xbet.life — subject line "Data Privacy" or "LGPD Rights"
• Response time: up to 15 business days

If you believe your rights have not been properly addressed by 5xbet, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the public body responsible for enforcing the LGPD in Brazil. Information on how to contact the ANPD is available on the authority's official website.