Privacy Policy – 56bt: How We Protect Your Data

56bt is a Sports Betting and online casino platform operated for the Brazilian market, headquartered and run in accordance with Brazilian regulations. Throughout this document, references to "56bt", "we", "our", or "platform" refer to the operating entity behind the platform accessible at 56bt.best and its subdomains.

This Privacy Policy describes how 56bt collects, uses, stores, shares, and protects the personal data of platform users, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable regulations in Brazil.

By creating an account or using any 56bt service, you confirm that you have read and understood this Privacy Policy. If you have any questions about this document, please reach out to our team via the 24-hour support chat or by email at contato@56bt.best.

56bt collects personal data at various points during your interaction with the platform. The types of data collected are:

Registration data:

• Full name;
• Email address;
• Mobile phone number;
• Date of birth;
• CPF (Individual Taxpayer Registration);
• Full residential address (street, city, state, ZIP code).

Identity verification data (KYC):

• Government-issued photo ID (RG, CNH, or passport);
• Proof of address issued within the last three months;
• Selfie for facial verification, when requested.

Financial data:

• Pix key used for transactions;
• Partial credit or debit card details (we never store the full card number);
• History of deposits and withdrawals made on the platform.

Usage and behavioral data:

• IP address, device type, and browser used;
• Betting history, game sessions, and platform activity;
• Game preferences and account settings;
• Access logs and timestamps of interactions.

Communication data:

• Customer support chat history;
• Satisfaction survey responses, when voluntarily submitted.

Data collected by 56bt is used strictly for the following purposes:

• Account creation and management: to verify your identity, set up your access, and keep your registration up to date;
• Transaction processing: to receive your deposits via Pix, bank slip, card, PicPay, or Mercado Pago, and to process your withdrawals securely and quickly;
• Service provision: to enable Sports Betting, access to Live Casino, slots, crash games, blackjack, and all other products on the platform;
• Customer support: to identify you when you get in touch and to resolve issues related to your account;
• Security and fraud prevention: to detect suspicious behavior, prevent platform misuse, identify multiple accounts, and meet anti-money laundering (AML) obligations;
• Legal compliance: to comply with requirements from the Central Bank of Brazil, the Federal Revenue Service, the ANPD, and other competent authorities;
• Platform improvement: to analyze aggregated, anonymized usage behavior and improve the user experience;
• Relevant communications: to send notifications about your account, transactions, promotions, and important platform updates — you may unsubscribe from marketing communications at any time.

56bt does not use your data for purposes not listed above without your prior, express consent.

All data processing carried out by 56bt has a legal basis under the LGPD. The legal bases we rely on are:

• Performance of a contract (art. 7, V of the LGPD): the processing necessary to provide the services you signed up for when creating your account — transaction processing, bet management, and access to games;
• Compliance with a legal or regulatory obligation (art. 7, II): data required to comply with the Central Bank, Federal Revenue Service, AML regulations, and court orders;
• Legitimate interest (Art. 7, IX): for fraud prevention, platform security, and service improvement, provided it does not compromise your fundamental rights;
• Consent (art. 7, I): for marketing communications and non-essential cookies — you may withdraw this consent at any time.

When we request your consent for a specific type of processing, we make the purpose clear before you agree. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

56bt does not sell users' personal data to third parties under any circumstances. Information is only shared in the following situations and with the following categories of recipients:

• Payment providers: financial data required to process deposits and withdrawals is shared with certified payment operators (such as Pix processors, card operators, and financial intermediaries), all of whom are bound by confidentiality agreements and the regulations of the Central Bank of Brazil;
• Game providers: username and session technical data may be shared with casino providers (such as Pragmatic Play, PG Soft, NetEnt, and others) to enable the gaming experience — these providers do not receive financial or full identity data;
• Security and fraud prevention tools: behavioral and access data may be analyzed by specialized fraud detection and AML compliance systems operated by partners under confidentiality agreements;
• Public and judicial authorities: when required by law, court order, or request from a competent authority (such as the Central Bank of Brazil, Federal Revenue Service, or Public Prosecution Office), 56bt will provide the required data within the limits of that determination;
• External auditors: in regulatory or certification audits, anonymized or aggregated data may be accessed by independent auditors bound by professional confidentiality.

56bt uses cookies and similar technologies to ensure the platform works properly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for basic platform functionality — session authentication, security, and language preferences. These cannot be disabled as the platform cannot function without them;
• Performance cookies: collect anonymous data on how users navigate the platform to identify errors and improve performance. They do not identify users individually;
• Functionality cookies: remember your interface preferences, such as betting settings and layout, to make your experience smoother on future visits;
• Analytics cookies: used to understand aggregate usage patterns and inform product decisions. Data is anonymized before any analysis.

You can manage your cookie preferences in the consent banner shown on your first visit, or through your browser settings. Disabling non-essential cookies will not affect access to 56bt's core features.

Personal data collected by 56bt is stored on secure servers with the following protective measures in place:

• 256-bit SSL Encryption across all communication between your device and the platform's servers — the same standard used by major Brazilian digital banks;
• Encryption at rest for sensitive data stored in internal databases;
• Restricted access controls: only employees with a proven operational need have access to personal data, and every access is recorded in an audit log;
• Two-factor authentication (2FA) available to all users and mandatory for employees with access to internal systems;
• Continuous security monitoring with detection of anomalous access, brute-force attacks, and intrusion attempts;
• Penetration testing and security audits conducted periodically by specialized external teams.

In the event of a security incident that may affect your data, 56bt will notify impacted users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

56bt retains your personal data for as long as necessary for the purposes described in this Policy, in compliance with applicable legal obligations. General retention periods are:

• Registration and identity data: retained for as long as the account remains active plus up to 5 years after closure, in accordance with AML requirements and financial regulations;
• Financial history (deposits and withdrawals): retained for up to 10 years in accordance with the fiscal and regulatory obligations of the Central Bank of Brazil;
• Access and security logs: stored for up to 6 months for security investigation purposes;
• Betting and gaming history: retained for as long as the account remains active and for up to 2 years after closure for audit purposes;
• Support communications: retained for up to 2 years for quality assurance and dispute resolution purposes.

Once retention periods expire, data is securely and irreversibly deleted or anonymized for use in statistical analysis without individual identification.

The General Data Protection Law (LGPD — Law No. 13,709/2018) grants you the following rights regarding your personal data processed by 56bt:

• Right of access: request and receive a copy of all personal data that 56bt holds about you;
• Right of rectification: request the correction of incomplete, inaccurate, or outdated data;
• Right of erasure: request the deletion of data processed based on consent, or when it is no longer needed for its original purpose;
• Right to data portability: receive your data in a structured, interoperable format;
• Right to withdraw consent: revoke previously given consents for marketing communications or other specific types of processing;
• Right to object: object to processing based on legitimate interest where there are valid grounds to do so;
• Right to information: be informed about which entities your data is shared with and why;
• Right of review: request a review of automated decisions that may affect your interests.

To exercise any of these rights, visit your account dashboard (under "Privacy & Data") or contact our data protection officer (DPO) by email at privacidade@56bt.best. Requests will be responded to within 15 business days.

56bt does not collect, process, or store personal data of individuals under 18 years of age. Registration on the platform is restricted to users aged 18 and over, as required by the legal regulations applicable to the betting and gaming sector in Brazil.

During the identity verification (KYC) process, 56bt checks the user's date of birth to confirm they are of legal age. Accounts identified as belonging to users under 18 will be closed immediately, and any existing balance will be refunded to the payment method used for the deposit.

If you believe someone under 18 has created an account on 56bt, please contact our support team immediately via live chat so we can take the necessary action.

Some services used by 56bt may involve processing data on servers located outside Brazil. This can occur in the context of international game providers (such as Pragmatic Play, NetEnt, PG Soft, and others) and the technology infrastructure tools used to operate the platform.

When personal data is transferred outside Brazil, 56bt puts the following safeguards in place to ensure adequate protection:

• Transfer only to countries with a level of data protection equivalent to that required by the LGPD, or under specific contractual clauses approved by the ANPD;
• Data Processing Agreements (DPA) with all international providers that receive personal data;
• Data minimization in transfers: providers receive only the data strictly necessary to deliver the specific service.

Detailed financial data and identity documents are not transferred to international game providers. This data remains within 56bt's systems in Brazil.

56bt may update this Privacy Policy periodically to reflect changes in data processing practices, updates to legislation, or improvements to its services. Any update will be communicated to users in the following ways:

• Email notification to the address registered on your account, at least 7 days in advance for material changes;
• Visible notice on the account dashboard at your next login following an update;
• Update of the "Last updated" date at the top of this document.

Continued use of the platform after the effective date of any changes will be considered acceptance of the new terms. If you disagree with a change, you may close your account before the effective date without penalty.

To exercise your rights under the LGPD, get clarification on this Privacy Policy, or report any concerns about how your personal data is handled, you can contact 56bt through the following channels:

• Live chat: available 24 hours a day, every day, directly on the platform — the fastest channel for urgent matters;
• Privacy email (DPO): privacidade@56bt.best — for formal requests related to your personal data rights;
• General support email: contato@56bt.best — for general questions about the platform.

56bt's data protection officer (DPO) is responsible for ensuring LGPD compliance, responding to data subject requests, and maintaining communication with the National Data Protection Authority (ANPD). All personal data requests will be responded to within 15 business days from the date of receipt.

If you believe your rights have been violated and 56bt has not responded appropriately, you may file a complaint directly with the ANPD (National Data Protection Authority), as provided for under the LGPD.