Privacy Policy of fun555 — How We Take Care of Your Data

The controller of personal data collected through the platform fun555 (accessible at fun555.best) is the operating company of the platform, hereinafter referred to simply as "fun555". For LGPD purposes, the controller is the entity that makes decisions about the processing of personal data — what to collect, how to use it, who to share it with, and how long to retain it.

This Privacy Policy applies to all services offered by fun555, including Sports Betting (football, volleyball, MMA/UFC, e-sports, Libertadores, and other sports), Live Casino, slots, crash games, poker, the VIP Program, and all associated communication and support channels.

By creating an account, making a deposit via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, or TED transfer, or simply browsing the platform, you agree to the processing of your data as described in this Policy.

The fun555 collects personal data at three distinct points: during registration, during platform use, and through automatic tracking technologies.

Data you provide directly during registration:

• Full legal name as it appears on official documents
• CPF — Individual Taxpayer Registry
• Date of birth
• Email address
• Mobile phone number
• Full residential address (zip code, street, city, state)
• Government-issued ID (national ID card, driver's license, or passport) for KYC verification
• Selfie with ID document for identity verification (when requested)

Data collected during platform use:

• Betting history — type, event, amount, odds, and outcome
• Deposit and withdrawal history — amount, method, date, and status
• Financial data related to the payment methods used (Pix key, bank details for wire transfers)
• Support interactions — chat and email conversation history
• Gaming preferences and account settings
• VIP Program participation — tier, wagering volume, and benefits used

Automatically collected data:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited and time spent browsing
• Cookie and similar technology data (detailed in Section 8)

The fun555 uses the personal data collected for the following purposes, all directly related to the operation of the platform:

The fun555 does not use your personal data for third-party advertising, behavioral profile sales, or any purpose not listed above. Any new processing purpose will be communicated before it is implemented, and you may exercise your rights as outlined in Section 9.

Every personal data processing operation carried out by the fun555 is grounded in one of the legal bases set out in Art. 7 of the LGPD. The bases applied are:

• Contract performance (Art. 7, V): processing is necessary to operate your account, handle bets, deposits, and withdrawals — in other words, to fulfill what was agreed when you registered with fun555
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), financial transaction monitoring, and record retention are required by Brazilian law applicable to the sector, including anti-money laundering regulations
• Legitimate interest (Art. 7, IX): used for platform security operations, fraud prevention, and anomalous behavior analysis — always with legitimate interest weighed against the data subject's rights
• Consent (Art. 7, I): used to send marketing communications and promotions when you opt in to receive such content. You can withdraw your consent at any time through your account settings

The fun555 does not sell personal data. Data is only shared with third parties in the following situations, all of which are necessary for the platform's operation:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers — only the minimum data required for each transaction is shared, and all parties are bound by confidentiality agreements
• Identity verification services: for the KYC process, your documents may be verified by specialized compliance platforms — these partners are contractually prohibited from using your data for any other purpose
• Infrastructure providers: servers and cloud services that host the platform of fun555 — all with data processing agreements compatible with the LGPD
• Competent authorities: the fun555 may share data in response to requests from Brazilian judicial, law enforcement, or regulatory authorities, as required by law
• National Data Protection Authority (ANPD): in the event of security incidents with significant impact, the fun555 will notify the ANPD and affected users as required by the LGPD

All third parties that receive personal data from users of fun555 are bound by contracts requiring proper data handling, confidentiality, and compliance with Brazilian data protection law.

The fun555 retains personal data for as long as necessary for each specific purpose, in accordance with the minimum periods required by Brazilian law:

• Active account data: retained for the full duration of the account and for 5 years after closure — the minimum period required for financial records under tax and anti-money laundering legislation
• Financial transaction history: 5 years from the transaction date, as required by law
• Support communication records: 2 years from the last interaction
• Browsing data and analytics cookies: up to 13 months, after which they are anonymized or deleted
• KYC Documents: 5 years after account closure, as required by regulation

If you request account deletion before the applicable legal retention periods expire, data required to fulfill legal obligations will be kept for the minimum period required and then deleted or anonymized. You will be informed of which data will be retained and for how long at the time you submit your closure request.

The fun555 adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. The key security measures in place include:

• 256-bit SSL/TLS Encryption: all communication between the user's device and fun555's servers is encrypted
• Two-Factor Authentication (2FA): available for all accounts and actively recommended by the platform
• Secure password storage: passwords are stored using cryptographic hashing — not even the fun555 team has access to your password in plain text
• Access monitoring: automated systems detect suspicious access attempts and automatically block IPs showing anomalous behavior
• Internal access controls: only staff with a verified operational need are granted access to users' personal data, with an audit log kept for all access
• Periodic security testing: the platform undergoes regular security audits, including penetration testing

Despite all measures in place, no security system is completely infallible. The fun555 is committed to acting swiftly and transparently in the event of any incident that puts users' personal data at risk.

The fun555 uses cookies and similar technologies to ensure the platform works correctly, remember your preferences, and analyze service usage. The cookies used are classified as:

• Essential cookies: required for the platform's core functionality — authentication, active session, security settings. Disabling them will compromise normal use of the platform
• Preference cookies: remember your account settings, language, and other personal preferences
• Analytics cookies: collect anonymous data on how users interact with the platform — most visited pages, session duration, navigation flow. Used to improve the experience. Can be disabled without affecting platform use
• Performance cookies: monitor page load speed and platform performance to identify and resolve issues

The fun555 does not use third-party cookies for behavioral advertising or cross-site tracking. All analytics cookies are configured to anonymize IP addresses before any processing.

The LGPD grants you, as the data subject, a set of rights that fun555 is committed to respecting and facilitating. See below what you can request:

The platform of the fun555 is intended exclusively for users aged 18 and over. Registration requires an explicit declaration of legal age, and identity verification (KYC) includes confirmation of date of birth via an official government-issued document.

The fun555 does not knowingly collect personal data from individuals under 18. If an account is found to have been created by a minor, it will be immediately closed, the data will be deleted, and any existing balance will be held in accordance with legal obligations.

The fun555 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or improvements in the transparency of information provided to users.

Any significant update will be communicated by email at least 15 calendar days before taking effect. The date of the last update is always displayed at the top of this page. Minor changes — such as text corrections or section reorganization that do not alter the content — may be implemented without prior notice.

Continued use of the platform after the new version's effective date constitutes acceptance of the changes. If you do not agree with the changes, you may request account closure and data portability before the new version takes effect.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact the fun555 through the channels below:

• General support email: suporte@fun555.best — for general platform inquiries
• Email for privacy inquiries (DPO): suporte@fun555.best with the subject line "DPO — Privacy" — for LGPD rights requests, questions about data processing, and security incidents
• Live chat: available 24 hours a day directly on the platform
• VIP WhatsApp: available to Gold, Platinum, and Diamond members

The fun555 is committed to responding to all privacy-related requests within 15 calendar days. For cases requiring more detailed review, this period may be extended by an additional 15 days with a justified notice.

If you are not satisfied with the response from the fun555 or believe your rights as a data subject have not been respected, you may file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body overseeing the LGPD in Brazil.