Ddd555 Privacy Policy – Data Protection in Brazil

Ddd555 — Sports Betting and online entertainment platform available at ddd555.best — takes the privacy of its users seriously. This Privacy Policy was created to explain, clearly and directly, how we handle the personal information of those who register and use the platform.

Ddd555 acts as the controller of personal data collected during use of the platform, as defined under the LGPD. This means we are responsible for determining how and why your data is processed, and that you have legally guaranteed rights over that information.

This Policy should be read alongside our Terms and Conditions. If you have any questions about this Policy, please contact our support team by email at contato@ddd555.best or via the chat available on the platform 24 hours a day.

Ddd555 collects personal data at various points during platform use. The categories of data collected and the circumstances in which collection occurs are described below:

2.1 Data provided by the user at registration:

• Full name and date of birth
• CPF (Cadastro de Pessoa Física)
• Email address and mobile number
• Full residential address (street, number, neighborhood, city, state, and ZIP code)
• Access password (stored in encrypted form — ddd555 never has access to your password in plain text)

2.2 Data collected during platform use:

• Betting history, results, and balances
• Deposit and withdrawal details (method used, amount, date, and time — never full card details, which are processed directly by the payment provider)
• IP address, device type, operating system, and browser used
• Access logs: date, time, and duration of sessions
• Approximate geolocation data (country and state, for compliance purposes)

2.3 Identity verification data (KYC):

• Copy of a government-issued ID (RG or CNH)
• Proof of address
• Additional documents requested for legal compliance or anti-fraud purposes

Ddd555 does not collect sensitive personal data such as racial or ethnic origin, political opinion, religious belief, or genetic or biometric data beyond what is strictly necessary for identity verification.

Ddd555 processes personal data exclusively for the following purposes, all directly tied to the platform's operation and user support:

• Account creation and management: Identify the user, create their platform profile, and manage account balance, betting history, and account settings.
• Financial processing: Process deposits via Pix, bank slip (boleto), credit and debit card, PicPay, Mercado Pago, and TED transfer; process withdrawals to accounts held in the user's name; record transaction history.
• Identity verification and compliance: Meet KYC (Know Your Customer) legal obligations, prevent money laundering, and protect against fraud.
• User support: Answer questions, resolve technical issues, handle complaints, and provide 24-hour support in Portuguese.
• Platform security: Detect and prevent unauthorized access, bot usage, betting fraud, and other irregular activities.
• Relevant communications: Send notifications about bets, promotions, and ddd555 platform updates — always with an easy opt-out option.
• Product improvement: Analyze usage patterns to improve features, fix issues, and personalize your experience on the platform.
• Compliance with legal obligations: Respond to requests from competent authorities in accordance with applicable Brazilian law.

Ddd555 does not use personal data for purposes incompatible with those described above without prior notice and, where required, renewed consent from the user.

Every data processing operation carried out by ddd555 is grounded in one of the legal bases set out in Articles 7 and 11 of the LGPD. The main legal bases applied are:

• Performance of a contract (art. 7, V): Processing is necessary to perform the contract between you and ddd555 when you create your account — without your data, we cannot create your account, process bets, or handle withdrawals.
• Compliance with a legal or regulatory obligation (art. 7, II): ddd555 processes data to fulfill obligations under Brazilian law, including anti-money laundering regulations and consumer protection rules.
• Legitimate interest (Art. 7, IX): Used for purposes such as platform security, fraud prevention, and product improvement — always respecting users' rights and expectations.
• Consent (Art. 7, I): For marketing communications and non-essential cookies, ddd555 requests your explicit consent, which can be withdrawn at any time.

Ddd555 does not sell personal data to any company or individual. Data sharing takes place only in the following situations, always with appropriate safeguards:

• Payment processors: To process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, transaction data is shared with the respective payment service providers authorized by the Banco Central do Brasil. These partners receive only the data strictly necessary to complete the transaction.
• Technology and infrastructure providers: ddd555 uses hosting, analytics, and security services provided by third-party companies that act as data processors under confidentiality agreements and in accordance with the LGPD.
• Game and casino providers: To provide Slots, Crash Games, and Live Casino, minimal technical data (such as a session identifier) is shared with providers including Pragmatic Play, PG Soft, Spribe, and Evolution, solely for the purpose of operating the games.
• Regulatory authorities and oversight bodies: ddd555 complies with lawful requests from competent Brazilian authorities — including the Federal Police, Federal Revenue Service, Central Bank, and COAF — when required by court order or legal obligation, and strictly to the extent necessary.

Under no circumstances does ddd555 share user data with third-party marketing companies without the user's explicit and specific consent.

Ddd555 implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. The main security measures in place are:

• 256-bit SSL/TLS encryption: All communications between your device and the ddd555 platform are protected with the same encryption standard used by Brazilian banks.
• Encryption at rest: Sensitive data stored on ddd555 servers — such as passwords and identity documents — is encrypted at rest.
• Two-factor authentication (2FA): Available to all ddd555 users, this adds an extra layer of protection beyond your password.
• Access controls: Only ddd555 employees with a specific operational need are granted access to users' personal data, under strict permission controls.
• Continuous monitoring: Automated systems monitor the platform around the clock, scanning for suspicious access, intrusion attempts, and traffic anomalies.
• Periodic backups: Data is stored with redundancy across multiple servers to ensure availability and recovery in the event of an incident.

In the event of a security incident that may affect your personal data, ddd555 will notify impacted users and the National Data Protection Authority (ANPD) within the timeframe established by the LGPD.

Ddd555 uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — personalize content and analyze site usage. The types of cookies used are:

• Essential cookies: Required for the platform's basic functionality — session authentication, language preferences, bet slip state. Without them, the platform will not work properly. They cannot be disabled.
• Analytical cookies: These collect information about how users browse the ddd555 platform — pages visited, time spent, and errors encountered. Used to improve performance and user experience. Require consent.
• Functional cookies: These allow the platform to remember your preferences — such as displayed odds and interface settings — to personalize your experience. They require your consent.

You can manage your cookie preferences directly in your browser settings (Chrome, Firefox, Safari, etc.) or through the privacy settings panel available on the ddd555 platform. Disabling non-essential cookies may affect some platform features, but will not prevent access to your account or to betting.

Ddd555 is a platform intended exclusively for users aged 18 and over. The intentional collection or processing of personal data belonging to minors is strictly prohibited and contrary to ddd555's policies.

If ddd555 identifies that data belonging to a user under the age of 18 was inadvertently collected, that data will be immediately deleted and the associated account will be closed. Parents or guardians who become aware that a child or teenager in their care has created a ddd555 account should contact us immediately at contato@ddd555.best so that appropriate action can be taken.

The LGPD grants you, as the data subject whose personal data is processed by ddd555, the following rights, which can be exercised at any time via the support chat or by email at contato@ddd555.best:

Ddd555 retains personal data only for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. The general retention periods are:

• Active account data: For as long as your ddd555 account remains active. After closure, data is retained for an additional period in accordance with the legal obligations outlined below.
• Financial transaction data: 5 years from the date of the transaction, as required by applicable accounting and anti-money laundering regulations in Brazil.
• Identity verification documents (KYC): 5 years after account closure, or for the period required by the relevant regulatory authorities.
• Access records (logs): 6 months, as required by the Brazilian Internet Act (Law No. 12,965/2014), and may be kept longer if an investigation is ongoing.
• Support communications: 2 years after the ticket is resolved, for record-keeping and service quality purposes.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified.

Due to the global nature of some of the services and infrastructure used by ddd555 — such as cloud hosting services and international game providers — certain personal data may be transferred to and stored on servers located outside Brazil.

Ddd555 ensures that any international data transfer is carried out in compliance with LGPD requirements, through:

• Contracts with specific data protection clauses requiring the recipient to implement measures equivalent to those set out in the LGPD;
• Use of providers subject to data protection regulatory frameworks recognized as adequate by the ANPD;
• Obtaining the data subject's specific consent where required by applicable regulations.

You can request detailed information about international data transfers carried out by ddd555 and the safeguards applied by contacting our privacy team.

Ddd555 may update this Privacy Policy periodically to reflect changes in legislation, operational practices, or the services offered. Material changes will be communicated by email or via an in-platform notification at least 7 days before they take effect.

The latest version of this Policy will always be available at ddd555.best/privacy-policy with the date of the last update shown in the footer of the document. We recommend reviewing this Policy periodically to stay informed about how ddd555 protects your data.

Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the changes made.

To exercise your rights as a data subject, clarify any questions about this Privacy Policy, or report a concern related to how ddd555 handles your personal data, please reach out through the channels below:

• Email: contato@ddd555.best — LGPD rights requests handled within 15 business days
• Live chat: available 24 hours a day, 7 days a week, directly on the ddd555 platform — for general privacy inquiries

Ddd555 has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for serving as the communication channel between ddd555, data subjects, and the National Data Protection Authority (ANPD).

If, after contacting ddd555, you believe your rights have not been adequately addressed, you may file a complaint with the ANPD through the authority's official portal.