5aaa Privacy Policy — Your Data, Protected

01About This Privacy Policy

This Privacy Policy describes how the 5aaa, operator of the site 5aaa.best, collects, stores, uses, and protects the personal information of users who register and use the sports betting platform, Live Casino, poker, slots, and other services offered.

This document is drafted in compliance with the General Personal Data Protection Law (LGPD) — Lei nº 13.709/2018, Brazil's primary privacy and data protection legislation. The 5aaa handles its users' personal data with respect, transparency, and security, recognizing that privacy is a fundamental right.

When creating an account on 5aaa, make a deposit via Pix, place bets on the Brasileirão, or play at the live casino, you confirm that you have read and fully accepted this Privacy Policy. If you disagree with any part of this document, we recommend that you do not use the platform and contact us to clarify any questions before registering.

02Data Controller

For the purposes of the LGPD, the 5aaa acts as controller of personal data collected through the 5aaa.best platform. The controller is the entity that makes decisions about how and why personal data is processed.

The personal data processing officer (DPO — Data Protection Officer) of the 5aaa can be reached through the following channel:

• Email: suporte@5aaa.best
• Live chat: available 24 hours a day directly on the platform
• Message subject: "Data Privacy / LGPD"

The 5aaa is committed to responding to requests related to personal data within the timeframes required by the LGPD — generally within 15 calendar days of receiving the complete request.

03Data We Collect

The 5aaa collects personal data at different points during your interaction with the platform. The categories of data collected and the circumstances of each collection are described below:

The 5aaa follows the principle of data minimization: we collect only what is necessary to operate the platform, meet legal obligations, and ensure the safety of all users. We do not collect sensitive data such as racial origin, political opinion, religious belief, or health data.

04How We Use Your Data

The data collected by the 5aaa are used exclusively for the purposes described below. No data is used for purposes incompatible with those listed here without your prior consent:

• Account operation: create and maintain your account, authenticate your access, and personalize your experience on the platform;
• Payment processing: process deposits via Pix, bank slip, credit card, PicPay, Mercado Pago, and TED, and process withdrawals via Pix in up to 5 minutes;
• Identity verification (KYC): verify your identity, confirm you are 18 or older, and that you are a resident of Brazil, as required by betting regulations;
• Anti-money laundering: monitor transactions in compliance with Lei nº 9.613/1998 and regulations applicable to the sector;
• Security and fraud prevention: detect and prevent unauthorized access, duplicate accounts, and any activity that violates the Terms and Conditions of the 5aaa;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and proactively offer responsible gaming tools when needed;
• Customer support: address questions, complaints, and requests submitted to our live chat or by email;
• Service communications: send notifications about your account, transactions, policy updates, and information essential to using the platform;
• Marketing (optional): with your explicit consent, send promotions, bonuses, and updates from 5aaa. You may cancel at any time.

05Legal Basis for Processing (LGPD)

The LGPD requires that all processing of personal data have a legal basis. The 5aaa processes your data based on the following legal grounds set out in Article 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): the processing of registration, financial, and activity data is necessary to fulfill the contract established by the Terms and Conditions when you create your account;
• Fulfillment of a legal obligation (art. 7º, II): identification and financial data are processed to fulfill legal obligations, such as anti-money laundering requirements and betting regulatory requirements;
• Legitimate interest (art. 7, IX): technical and browsing data are processed to ensure platform security, detect fraud, and improve the user experience, where doing so does not conflict with your rights;
• Consent (art. 7, I): for marketing communications, non-essential cookies, and other purposes not covered by the bases above, we request your express consent, which may be withdrawn at any time.

06Data Sharing with Third Parties

The 5aaa does not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes. Data sharing occurs only in the situations below, all supported by clear legal grounds:

• Payment processors: required financial data is shared with Pix operators, card networks, PicPay, Mercado Pago, and banks such as Nubank, Itaú, Bradesco, and Banco do Brasil to process transactions in R$;
• Game providers: game session data is shared with certified providers such as Evolution Gaming and Pragmatic Live to operate live casino tables, poker, and slots;
• Identity verification (KYC): identity documents may be processed by a specialist verification partner to securely confirm their authenticity;
• Competent authorities: data is shared with regulatory bodies, tax authorities, and law enforcement when required by law, court order, or specific regulation;
• Technology infrastructure: hosting providers and cloud service vendors that support the platform's operations have technical access to data, always under confidentiality agreements and in compliance with the LGPD.

All third parties with access to your data are bound by contracts requiring compliance with the LGPD and the security standards of 5aaa. Sharing is always limited to the minimum necessary for the specific purpose.

07Data Security

The 5aaa implements technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. Key security measures include:

• 256-bit SSL Encryption across all data transmissions between your device and the servers of 5aaa;
• Encryption of data at rest for sensitive information stored in the platform's databases;
• Two-factor authentication (2FA) available to all users as an additional layer of account protection;
• 24/7 continuous monitoring of suspicious access and activity, monitored by automated systems and our security team;
• Internal access controls with the minimum permissions required for each role within the 5aaa;
• Periodic security audits carried out by independent specialists to identify and address vulnerabilities;
• Staff training in information security and data privacy best practices.

08Data Retention and Deletion

The 5aaa retains your personal data only for as long as necessary for the purposes for which it was collected, in accordance with applicable legal retention periods:

• Active account data: retained for as long as your account remains active on the platform;
• Financial and transaction data: retained for a minimum of 5 (five) years after the last transaction, as required by anti-money laundering legislation and tax obligations;
• KYC Data (identity documents): retained for a minimum of 5 years after account closure, as required by regulation;
• Betting and game history: retained for 5 years for audit and regulatory compliance purposes;
• Marketing data (with consent): retained until consent is withdrawn or the account is closed;
• Security logs: retained for up to 2 years for fraud investigation and incident response purposes.

Once retention periods have elapsed, data is securely and irreversibly deleted from the systems of 5aaa. Anonymized data — which can no longer be used to identify you — may be retained indefinitely for statistical purposes.

09Cookies and Similar Technologies

The 5aaa uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you access the site.

• Essential cookies: required for the basic operation of the platform — maintaining your login session, bet slip, and language preferences. These cannot be disabled without impairing use of the site;
• Performance cookies: collect anonymous information about how users navigate the platform to help us identify and resolve technical issues;
• Functionality cookies: remember your preferences such as theme, betting limits, and saved settings to personalize your experience at the 5aaa;
• Security cookies: help detect suspicious activity and protect your account against unauthorized access.

You can manage your cookie preferences in your browser settings. Please note that disabling essential cookies may affect how the platform functions. For non-essential cookies, the 5aaa requests consent on the user's first visit to the site.

10Minors

The services of 5aaa are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors.

During the registration process, the 5aaa performs age verification using the CPF and date of birth provided. If a user is found to be under 18, the account is immediately closed, the data is removed from active systems, and any deposited amount is refunded to the original payment method.

11How to Exercise Your Rights

The LGPD grants you, as a data subject, a set of rights that 5aaa fully respects. To exercise any of these rights, follow the procedure below:

• Request channel: contact us via live chat or at suporte@5aaa.best with the subject line "LGPD Request — [your right]";
• Identification: for your security, we will ask you to verify your identity before processing any request;
• Response time: the 5aaa will respond within 15 calendar days, as required by the LGPD;
• Free of charge: exercising your privacy rights is free of charge, except in cases of requests that are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline the request with justification;
• Complaint to the ANPD: if you are not satisfied with the response from 5aaa, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for enforcing the LGPD in Brazil.

12International Data Transfers

To operate the platform, the 5aaa may use technology infrastructure services and game providers located outside Brazil. In such cases, international data transfers are carried out only when:

• The destination country offers an adequate level of data protection, as assessed by the ANPD;
• Adequate contractual safeguards are in place, such as standard data protection clauses approved by the ANPD;
• The recipient maintains internal compliance policies aligned with the LGPD and equivalent legislation.

Live casino providers such as Evolution Gaming and Pragmatic Live, for example, process game session data on their own servers to ensure the integrity of their streams. These partners are contractually required to implement data protection measures equivalent to those demanded by the 5aaa.

13Updates to this Privacy Policy

The 5aaa may periodically update this Privacy Policy to reflect changes in data processing practices, applicable legislation, or the services offered. Whenever relevant changes are made, you will be notified via:

• Email sent to the address registered on your account;
• Prominent notice displayed on the platform upon your next login;
• Update of the effective date at the top of this page.

Continued use of the services provided by 5aaa after the effective date of the changes constitutes acceptance of the updated version of the policy. We recommend reviewing this page periodically to stay informed about how your data is handled.

14Contact & Data Protection Officer (DPO)

For any questions, requests, or complaints regarding the processing of your personal data by the 5aaa, please contact our Data Protection Officer through the channels below:

• Live chat: available 24 hours on the platform — please mention at the start of the conversation that this is a data privacy request;
• Email: suporte@5aaa.best — use the subject line "Privacy Policy / LGPD" for faster handling;
• Help center: our Frequently Asked Questions has answers to the most common questions about privacy and security.

The 5aaa is committed to handling all privacy requests seriously, respectfully, and within the timeframes required by the LGPD. Protecting your data is not just a legal obligation — it is a genuine commitment of our platform.