Kkk500 Privacy Policy – How We Protect Your Data

1Introduction and Scope

This Privacy Policy describes how kkk500 collects, uses, stores, shares, and protects the personal data of platform users. It applies to all interactions you have with kkk500 – whether through the website, the mobile app, the support chat, or any other platform support channel.

Kkk500 acts as the controller of its users' personal data, as defined by Brazil's General Data Protection Law (Lei nº 13.709/2018 – LGPD). This means we are responsible for decisions about what is collected, for what purpose, and how long it is retained. We take that responsibility very seriously.

Our commitment is straightforward: we collect only what we need, use it only for what we said we would, protect it with the latest available technology, and respect all your rights as a data subject. If any part of this policy is unclear, reach out to our support team — we're always available to walk you through it.

2Data We Collect

Kkk500 collects personal data in three main situations: when you provide it directly (such as when filling out the registration form), when it is automatically generated through your use of the platform, and when we receive it from authorized third parties (such as payment processors).

Data you provide:

• Full name, CPF, date of birth, and full address – collected at registration for identity verification and legal compliance;
• Email address and mobile number — for operational communications and account recovery;
• Pix key, credit or debit card details — to process deposits and withdrawals. Card data is stored in tokenized form by PCI-DSS certified processors and never in plain text;
• Identity documents (RG, CNH, passport) and proof of address — submitted during the mandatory KYC verification process prior to your first withdrawal;
• Information provided to customer support – questions, complaints, and requests submitted via live chat or email.

Data automatically generated through platform use:

• IP address, device type (mobile, tablet, desktop), operating system, and browser used;
• Betting history, games accessed, amounts wagered, access times, and session duration;
• Financial transaction logs — every deposit, withdrawal, and balance transfer is recorded with date, time, and amount;
• Approximate geolocation data derived from your IP address — used exclusively for fraud detection and eligibility verification.

3How We Use Your Data

Kkk500 uses your personal data exclusively for the purposes described in this policy, always grounded in an appropriate legal basis as required by the LGPD. The main purposes are:

• Service delivery: process your registration, authenticate your access, record bets and gameplay, process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, and process withdrawals to your bank account;
• Identity verification: confirm that you are 18 or older, that your CPF is valid, and that the information provided matches your real identity — all to protect you and fulfill legal obligations;
• Fraud prevention and anti-money laundering: monitor transactions and usage patterns to identify and block suspicious activity that could harm you or other users on the platform;
• Customer support: respond to your questions, complaints, and requests accurately and efficiently, with access to the necessary history to resolve each situation;
• Experience personalization: display offers, promotions, and relevant content based on the games and sports you follow most – such as Brasileirão Série A football, CBLOL e-sports, or slots;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and, when identified, proactively offer the responsible gaming tools available on the platform;
• Legal compliance: comply with obligations established by Brazilian law, including the LGPD, anti-money laundering regulations, and any applicable court or regulatory orders.

4Data Sharing

Kkk500 shares users' personal data only when strictly necessary for service operations or to comply with legal obligations. We never sell, rent, or transfer your data to third parties for advertising or commercial purposes on behalf of external partners.

The partners with whom we may share data and the respective reasons:

• Payment processors: when you make a deposit via Pix or withdraw to your account at Nubank, Itaú, Bradesco, Banco do Brasil, or any other bank, we share the data needed to complete the transaction — name, CPF, and Pix key. These partners are PCI-DSS certified and operate under their own strict security standards;
• Game providers: providers such as Evolution Gaming and Pragmatic Play Live receive only the minimum technical data required to load games and record sessions. These partners operate under international licenses and have no access to kkk500 users' financial data;
• Identity verification services: during the KYC process, your documents may be processed by specialized, certified document verification services operating in compliance with the LGPD;
• Public authorities and regulators: when required by court order, administrative ruling, or applicable legal obligation, kkk500 provides the information requested by the competent Brazilian authorities.

All third parties with whom we share data are contractually required to process that information only for the authorized purposes, implement appropriate security measures, and not share it with other third parties without our prior written authorization.

5Information Security

Kkk500 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key measures in place include:

• 256-bit SSL/TLS encryption on all communications between your device and our servers;
• Passwords stored using strong cryptographic hashing – no kkk500 employee has access to your password in plain text;
• Credit and debit card data stored exclusively in tokenized form by PCI-DSS certified processors;
• Two-factor authentication (2FA) available to all users and strongly recommended;
• Strict internal access controls — only employees with a verified operational need have access to user data, and all access is logged and audited;
• Continuous security monitoring with intrusion detection systems and anomalous behavior analysis;
• Penetration testing and regular security audits conducted by independent specialized firms.

In the event of a security incident that may affect your data, kkk500 will notify you and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, describing the nature of the incident, the data affected, and the measures taken to mitigate any harm.

6Cookies and Tracking Technologies

Kkk500 uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and analyze usage patterns in aggregate. The types of cookies used are:

• Essential cookies: required for the platform to function properly – keeping your session active, remembering your language preference, and ensuring login security. These cookies cannot be disabled without affecting how the site works;
• Performance cookies: collect information about how you use the platform (which pages you visit, how long you spend in each section, any errors you may encounter) in an anonymous, aggregated format — used to improve the overall experience;
• Functionality cookies: remember your preferences such as theme, notification settings, and favorite sports (football, e-sports, live casino) to personalize your experience on future visits;
• Security cookies: help detect fraudulent behavior and unauthorized access to your account, contributing to the protection of your data and balance.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent access to certain platform features. For more information on managing cookies across different browsers, refer to the help center of your preferred browser.

7Data Retention

Kkk500 retains your personal data for the minimum period necessary for the purposes described in this policy and to meet applicable legal obligations. The criteria that determine the retention period include:

• Active account: all data required to operate the account is retained for as long as it remains active;
• After account closure: identification data and financial history are retained for 5 years in accordance with Brazilian tax legislation and anti-money laundering requirements;
• KYC documents: retained for 5 years after account closure, or for the period required by applicable regulation, whichever is longer;
• Access and security logs: retained for 6 months in accordance with the Marco Civil da Internet (Law No. 12.965/2014);
• Support communications: support records kept for 2 years for quality assurance and dispute resolution purposes.

Once the applicable retention periods have expired, your data is securely and permanently deleted from kkk500's systems using procedures that prevent any subsequent recovery of the information.

8Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as a data subject, a set of rights that kkk500 is fully committed to upholding. To exercise any of these rights, contact our support team via live chat or email. We respond to all requests within 15 business days.

Your rights include:

• Access: know what personal data kkk500 holds about you and how it is used;
• Correction: request the correction of incomplete, inaccurate, or outdated data;
• Anonymization or blocking: request that data which is unnecessary or processed in violation of the LGPD be anonymized or blocked;
• Erasure: request the deletion of data processed on the basis of your consent, when consent is revoked or when the data is no longer needed for the original purposes – subject to mandatory legal retention exceptions;
• Portability: receive your data in a structured, machine-readable format for transfer to another service;
• Sharing information: know which entities your data has been shared with;
• Consent revocation: withdraw at any time the consent given for processing activities based on that legal basis;
• Review of automated decisions: request human review of automated decisions that affect your account.

9Minors' Data

Kkk500 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a CPF and date of birth, which are verified to confirm the user's age before the account is fully activated.

If we become aware that we have collected data from someone under 18, we will take immediate steps to delete that information from our systems and close the account in question. If you suspect that a minor has created an account on kkk500, please contact support immediately so we can act quickly.

10International Data Transfers

Some of kkk500's operational partners — such as live casino game providers and identity verification services — may process data on servers located outside Brazil. When this occurs, kkk500 ensures that the transfer meets LGPD requirements for international data transfers, including:

• Transfer to countries that offer a level of personal data protection adequate to that provided under the LGPD, as assessed by the ANPD;
• Or the adoption of standard contractual clauses that impose on the data recipient protection obligations equivalent to those under the LGPD;
• Or obtaining your specific consent for the transfer, where the alternatives above do not apply.

In all cases of international transfer, the data shared is limited to the minimum necessary for the specific purpose, and international partners are contractually prohibited from using that data for any other purpose.

11Marketing Communications

Based on your consent, kkk500 may send marketing communications via email, SMS, and in-app notifications, including information about promotions, bonuses, new games, sporting events such as Brasileirão Série A matches, Copa Libertadores, CBLOL, or UFC, and other platform news.

You can opt out of marketing communications at any time in two ways: (1) by clicking the unsubscribe link included in every marketing email we send, or (2) by adjusting your notification preferences directly in your kkk500 account dashboard. Opt-outs are processed within 48 hours and do not affect essential operational communications related to your account — such as deposit confirmations, withdrawals, and security updates.

Kkk500 does not engage in spam. We only send marketing communications to users who gave explicit consent during registration or who opted in through their account settings.

12Changes to This Policy

Kkk500 may update this Privacy Policy periodically to reflect changes in Brazilian law — such as updates to the LGPD or new ANPD regulations —, market practices, or the services offered on the platform. Any material change will be communicated at least 7 days in advance by email and through an in-platform notice before taking effect.

The date of the last update is always shown at the top of this page. Previous versions of this policy are available upon request from our customer support team. Continued use of the platform after the effective date of any updated terms constitutes your acceptance of the changes. If you disagree with a change, you may close your account as described in our Terms and Conditions.

13Contact Us

If you have questions about this Privacy Policy, about how kkk500 handles your data, or if you wish to exercise any of your rights as a data subject under the LGPD, please contact our privacy team:

• Live chat: available 24 hours a day, 7 days a week, within the kkk500 platform — in Brazilian Portuguese;
• Email: contato@kkk500.best – we respond within 2 business days for privacy-related inquiries;
• Data Protection Officer (DPO): for formal matters related to the LGPD, you may request direct contact with kkk500's DPO via the support email.

If you believe your rights as a data subject have not been adequately addressed by kkk500, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided under Article 55-J of the LGPD.