Privacy Policy of 55wim: how your data is protected

55wim collects only the data necessary to deliver its services securely, meet legal obligations, and provide a personalized experience for Brazilian users. Below are the categories of data collected:

Credit and debit card data are never stored directly on 55wim's servers. All card transactions are processed exclusively through PCI-DSS certified payment gateways, which take custody of this data in accordance with their own security standards.

Every piece of data collected by 55wim has a specific, legitimate purpose. We do not process data "just in case" or for any purpose not described below:

• Account operation: creation, authentication, and maintenance of your account on the platform;
• Transaction processing: deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED;
• Identity verification (KYC): verify your identity and confirm you meet the minimum age requirement of 18, as required by Brazilian regulated market regulations;
• Fraud and money laundering prevention: monitoring of suspicious activity and compliance with obligations under the regulated financial sector;
• Customer support: answer questions, resolve technical issues, and process responsible gambling requests;
• Platform improvement: aggregated and anonymized usage analysis to identify performance, navigation, and user experience improvements;
• Account-related communications: alerts about account activity, security updates, bonus expiration, and changes to this policy;
• Marketing (with consent): sending promotions, news, and personalized offers — only for users who have opted in to receive marketing communications.

You can withdraw consent for marketing communications at any time by clicking "unsubscribe" in any email you receive or through the notification settings in your profile. Withdrawing marketing consent does not affect how your data is used for the other purposes listed above, which are necessary for the operation of the service.

55wim does not sell, rent, or share users' personal data with third parties for commercial purposes. Full stop. Data may only be shared in the following specific and limited situations:

• Essential service providers: payment gateways (to process Pix, boleto, TED, and card transactions), KYC/identity verification providers, infrastructure hosting services, and customer support tools — all bound by contracts that prohibit the use of your data for any other purpose;
• Game providers: when you access casino games provided by third-party partners, the minimum data required (user identifier and balance) is shared to ensure the game runs properly. These providers are certified by the same regulatory bodies that audit the games;
• Legal obligations: when required by law, court order, or determination by a competent Brazilian authority — such as the Central Bank of Brazil, Federal Revenue Service, COAF, or law enforcement agencies in formal investigations;
• Rights protection: in cases of confirmed fraud, money laundering, or other illicit activity, where sharing is necessary to protect the rights of 55wim or affected third parties;
• Corporate transactions: in the event of a merger, acquisition, or corporate restructuring involving 55wim, data may be transferred to the new controller, who will be required to uphold the same privacy standards set out in this policy.

When data is shared with service providers, 55wim contractually requires those partners to handle the information with at least the same level of protection described in this policy, in compliance with the LGPD.

Data security at 55wim is treated as a technical priority, not a checklist item. We have implemented multiple layers of protection that work together:

• 256-bit SSL/TLS encryption: all communication between your browser or mobile device and 55wim's servers is encrypted in transit, making data interception impossible;
• Encryption at rest: sensitive personal data stored in the database is also encrypted at rest, ensuring protection even in the event of unauthorized physical access to the infrastructure;
• Multi-factor authentication: available to all users and required for high-value operations such as withdrawals above certain limits;
• Real-time anti-fraud system: monitors behavioral patterns and financial activity to detect unauthorized access and fraud attempts before any harm is done;
• Internal access controls: only 55wim staff with a proven functional need have access to users' personal data, always under audit logging;
• Regular security testing: 55wim's infrastructure undergoes periodic security assessments, including penetration testing conducted by specialized firms.

In the event of a security incident that may affect personal data, 55wim will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes set by the LGPD — within 72 hours of identifying the incident, where technically feasible.

55wim uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — session authentication, language preferences, and temporary betting slip. These cannot be disabled without compromising service functionality;
• Analytical cookies: collect aggregated and anonymized data on how users navigate the platform, which sections are most visited, and where errors occur. We use this information to improve the experience. These can be disabled in settings;
• Preference cookies: store user preferences such as interface theme, favorite sport, and notification settings. They can be disabled, but doing so may affect your personalized experience;
• Security cookies: help the anti-fraud system identify trusted devices and detect unusual access. They are part of the account protection layer and cannot be disabled.

55wim does not use third-party tracking cookies for behavioral advertising outside the platform. This means we do not participate in ad networks that track your behavior on other sites after you leave 55wim.

You can manage your cookie preferences at any time in your profile settings or through your browser's privacy settings. Clearing your browser cookies will end your active session and remove any locally saved preferences.

55wim retains personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with applicable legal retention periods. The general retention rules are:

• Active account data: retained for as long as the account remains active and for the additional period required after closure to meet legal obligations;
• Financial data and transaction history: retained for at least 5 years after the last transaction, in compliance with Brazilian anti-money laundering legislation (Law No. 9,613/1998) and the requirements of the Central Bank of Brazil;
• Identity verification data (KYC): retained for at least 5 years after account closure, in accordance with the sector's regulatory requirements;
• Support communication records: retained for 2 years after the ticket is closed, for reference in dispute cases;
• Navigation and access logs: retained for 6 months, used for platform security and improvement.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. Secure deletion follows standards that make data recovery impossible.

If you request account deletion, data not subject to mandatory legal retention periods will be deleted within 30 days of the request. Data subject to legal obligations will remain stored for the minimum required period and will be deleted once that period ends.

The LGPD grants you, as the data subject, a set of rights that 55wim is committed to respecting and facilitating. All of them can be exercised by email or directly through your account settings:

55wim is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires age confirmation and may include document verification to confirm the account holder is 18 or older.

If we become aware that data from a user under 18 has been inadvertently collected, we will delete that data immediately and close the associated account. Legal guardians who identify unauthorized use of the platform by minors in their care may contact us at suporte@55wim.click so we can take the necessary steps as a priority.

55wim has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and handling personal data requests. The DPO can be reached by:

• Dedicated privacy email: privacidade@55wim.click
• General support: suporte@55wim.click or live chat on the platform
• Response time: up to 15 business days for formal LGPD rights requests

This policy may be updated periodically to reflect changes in our services, applicable legislation, or data processing practices. When that happens, the "last updated" date at the top of this page will be changed and active users will be notified by email at least 7 days in advance of any material changes.

You may also contact the National Data Protection Authority (ANPD) if you believe your rights were not properly respected by 55wim after exhausting internal support channels. The ANPD is the Brazilian regulatory authority responsible for enforcing the LGPD.