57pg Privacy Policy — Your Data Protection

A 57pg is a sports betting and online casino platform focused on the Brazilian market. To deliver the services available on the platform — including bets on football, volleyball, basketball, MMA/UFC, e-sports, crash games, blackjack, and more — we need to collect and process certain personal data from registered users.

This policy was drawn up in accordance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018), which governs the processing of personal data in Brazil. The 57pg respects each user's privacy and is committed to processing data only for the purposes described in this document, with full transparency and within legal boundaries.

A 57pg collects personal data at various points during your interaction with the platform. See what types of data are collected and in what situations:

A 57pg collects only the data strictly necessary for the purposes described in this policy. We do not collect sensitive data such as racial origin, religious beliefs, or health information, except where required by law.

The personal data collected by 57pg are used exclusively for the following purposes:

• Service provision: create and manage your account, process Sports Betting and casino game wagers, and handle deposits and withdrawals via Pix and other Brazilian payment methods;
• Identity verification: confirm your identity, verify that you are of legal age (18+), and fulfill KYC (Know Your Customer) requirements for fraud and anti-money laundering prevention;
• User support: answer questions, resolve issues with bets, transactions or your account, and keep a support history for continuous service improvement;
• Platform security: detect and prevent unauthorized access, fraudulent account use, market manipulation, and other activities that violate the Terms and Conditions;
• Legal compliance: meet legal and regulatory obligations applicable to the Sports Betting and online gaming sector in Brazil, including the LGPD;
• Account communications: send security notifications, transaction confirmations, and updates on promotions and platform news — you can manage your communication preferences in your account settings;
• Platform improvement: analyze aggregated, anonymized usage patterns to improve the browsing experience, service performance, and develop new features.

A 57pg does not use your personal data to sell third-party advertising or to build behavioral profiles outside the platform. Processing is strictly limited to the purposes described above.

A LGPD requires that all personal data processing have a specific legal basis. The 57pg processes your data based on the following legal grounds set out in Art. 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): processing is necessary to provide the services contracted by the user upon registering at 57pg — without registration and financial data, it is not possible to create an account, process bets, or make withdrawals via Pix;
• Compliance with a legal obligation (Art. 7, II): some data collection is legally required, such as identity verification (KYC), anti-money laundering (AML) compliance, and adherence to industry regulations;
• Legitimate interest (Art. 7, IX): the processing of technical data (IP, device, access logs) for platform security and fraud prevention serves 57pg's legitimate interest in protecting its users and the integrity of the service;
• Consent (Art. 7, I): for marketing communications and the use of non-essential cookies, 57pg requests explicit consent, which can be withdrawn at any time in your account settings.

A 57pg does not sell users' personal data. Sharing with third parties is limited to situations strictly necessary for service delivery or compliance with legal obligations:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, financial data is shared with the financial institutions and operators involved in the transaction, such as Nubank, Itaú, Bradesco, Banco do Brasil, and others — only the data necessary for each specific transaction;
• Technology providers: companies that provide hosting infrastructure, cybersecurity, fraud analysis, and customer support tools — all contractually bound to maintain confidentiality and comply with the LGPD;
• Competent authorities: when required by court, administrative, or law enforcement order, or to fulfill legal obligations such as anti-money laundering compliance (Law No. 9,613/1998);
• Game providers: for live casino games operated by external providers, the minimum technical data required (such as session ID) is shared — these providers have their own privacy policies and are selected based on strict security standards.

In all sharing instances, the 57pg requires that third parties process data only for the specific purpose for which it was shared, in compliance with the LGPD. We do not share data with advertisers, data brokers, or any entity for third-party marketing purposes.

A 57pg adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The main security measures implemented include:

• 256-bit SSL/TLS Encryption across all communications between your device and 57pg's servers — all Pix transactions and other payment methods are transmitted in encrypted form;
• Encryption at rest for sensitive data stored in the platform's databases, including identity documents and financial information;
• Two-factor authentication (2FA) available to all users who want to add an extra layer of security to their account;
• Continuous monitoring of suspicious access and transactions by automated anti-fraud systems and a dedicated security team;
• Restricted access controls internally — only employees with a verified need can access users' personal data, subject to authentication and audit logging;
• Regular security testing and vulnerability assessments to identify and address risks before they can impact users.

Despite every effort, no security system is foolproof. In the event of a security incident that may affect your data, the 57pg will notify affected users and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.

A 57pg uses cookies and similar technologies to ensure the platform functions properly, enhance your experience, and analyze site performance. See the types of cookies used:

Essential and security cookies are required for the platform to function properly and cannot be disabled. Functional and analytics cookies are optional — you can manage your preferences in your browser settings or contact support for more information.

A 57pg retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods. The general retention criteria are:

• Active account data: retained for as long as your account remains active on the 57pg platform;
• Financial and betting data: retained for a minimum of 5 years after the last transaction, as required by anti-money laundering legislation (Law No. 9,613/1998) and tax obligations;
• Identity verification documents: retained for the mandatory KYC legal period, generally 5 years after account closure;
• Support communication records: kept for up to 2 years after the support interaction is closed, for service improvement and dispute resolution purposes;
• Technical data (access logs, IP): retained for up to 6 months, unless required for a security investigation or compliance with a court order.

Once the applicable retention period expires, data is securely deleted or anonymized so it can no longer be linked to you as the data subject. You may request early deletion of your data as described in the data subject rights section.

A LGPD grants you specific rights as the data subject whose information is processed by the 57pg. You may exercise any of these rights by contacting our team:

• Access (Art. 18, I and II): request confirmation that your data is being processed and obtain a full copy of the personal data 57pg holds about you;
• Correction (Art. 18, III): request the update or correction of incomplete, inaccurate, or outdated information in your account;
• Anonymization or erasure (Art. 18, IV): request the anonymization or deletion of unnecessary data or data processed in violation of the LGPD — some data may be retained for the minimum legal period even after a deletion request;
• Portability (Art. 18, V): request the portability of your data to another service provider, in accordance with ANPD regulations;
• Consent withdrawal (Art. 18, IX): withdraw previously given consent for marketing communications and non-essential cookies — withdrawal does not affect any processing carried out prior to it;
• Data Sharing Information (Art. 18, VII): know which third parties your data has been shared with;
• Objection (Art. 18, §2): object to processing carried out on the basis of legitimate interest, where you believe it violates the LGPD.

To exercise any right, contact us by email suporte@57pg.best or via the live chat on the platform, identifying yourself as the data subject and specifying the right you wish to exercise. The 57pg will respond within the legal timeframe established by the LGPD.

The services of 57pg are intended exclusively for individuals who are 18 years of age or older. We do not intentionally collect personal data from users under 18. Registration requires a CPF number and date of birth, which are used to verify the user's age.

If a registered user is found to be under 18 years of age, their account will be immediately closed, their data deleted, and any deposited funds refunded in accordance with the internal procedures of 57pg. If you believe a minor's account was created by mistake, please contact support immediately.

A 57pg may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or services offered on the platform. The date of the last update is always displayed at the top of this page.

Material changes will be communicated by email and through a prominent notification on the platform with reasonable advance notice before taking effect. For minor changes or updates that do not materially affect your rights, publishing them on this page is sufficient notice.

Continued use of the platform 57pg following the publication of a new version of this policy constitutes acceptance of the changes. If you do not agree with the updates, you may request account closure before the new version's effective date.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or submit any complaint related to the processing of personal data by 57pg, please reach out through the following channels:

• Email: suporte@57pg.best — for formal LGPD rights requests and privacy matters;
• Live chat: available 24 hours a day directly on the 57pg platform, in Brazilian Portuguese;
• Email subject: use "Privacy — [your right or question]" so your request is routed directly to the data processing officer.

A 57pg has appointed a data protection officer (DPO — Data Protection Officer) as provided under Art. 41 of the LGPD. The DPO is responsible for receiving communications from data subjects, guiding staff on data protection practices, and serving as the point of contact with the National Data Protection Authority (ANPD).

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13.709/2018). Any dispute relating to the processing of data by the 57pg shall be subject to the jurisdiction of the competent Brazilian courts.