Privacy Policy of 522betapp – Your Data

2. Data We Collect

2.1 Data provided directly by you

While using 522betapp, you provide data directly when creating an account, making deposits and withdrawals, or interacting with support. The data collected includes:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile number, residential address with ZIP code (CEP);
• Identity document data: images of a national ID, driver's license, or passport requested during identity verification (KYC);
• Financial data: Pix key linked to your CPF, credit/debit card data (tokenized), deposit and withdrawal history via Pix, TED, PicPay, Mercado Pago, or boleto bancário;
• Communication data: chat and email support conversation history.

2.2 Automatically Collected Data

When you access the 522betapp platform — whether through a mobile or desktop browser — we automatically collect technical information required for the service to function and remain secure:

• IP address and approximate location via geolocation;
• Browser type and version, operating system, and device model;
• Pages visited, session duration, clicks, and interactions with the platform;
• Betting history, games accessed, amounts wagered, and results;
• Cookie and similar technology data as described in Section 6 of this Policy.

3. How We Use Your Data

522betapp uses the personal data collected exclusively for legitimate, specific, and disclosed purposes. The main uses are:

• Account operation: create, maintain, and manage your 522betapp account, including authentication, betting history, and balance management;
• Payment processing: make deposits and withdrawals via Pix, TED, boleto bancário, credit/debit card, PicPay, and Mercado Pago securely and in compliance with Banco Central do Brasil regulations;
• Identity verification (KYC): confirm that the account holder is who they claim to be, prevent fraud, and fulfill anti-money laundering obligations (Lei nº 9.613/1998);
• Security and fraud prevention: detect suspicious behavior, the use of multiple accounts, bots, or any activity that violates the platform's Terms and Conditions;
• Experience personalization: recommend slots, sports markets, and relevant promotions based on your usage history — always respecting your preferences;
• Communication: send information about confirmed bets, promotions, account updates, and security alerts via email or mobile notification;
• Responsible gambling: monitor usage patterns to identify signs of compulsive behavior and trigger the protection tools set out in our responsible gambling policy;
• Compliance with legal obligations: comply with requirements from Brazilian regulatory, judicial, or tax authorities pursuant to a valid legal order.

4. Legal Basis for Processing

All personal data processing carried out by 522betapp is grounded in one of the legal bases set out in Art. 7 of the LGPD. The table below summarizes the bases applied to each main purpose:

• Contract performance — primary basis for account creation and maintenance, processing deposits and withdrawals, and operating the Sports Betting services;
• Compliance with a legal or regulatory obligation — identity verification (KYC), anti-money laundering compliance, and fulfillment of court orders;
• Legitimate interest — fraud prevention, platform security, monitoring of compulsive behavior for responsible gambling, and usage analysis for service improvement;
• Consent — sending marketing communications and promotional messages by email or notification (you can withdraw consent at any time in your account settings).

5. Data Sharing with Third Parties

522betapp does not sell its users' personal data. Sharing with third parties occurs only in the situations described below, always with a legitimate purpose and an appropriate legal basis:

5.1 Payment Partners

To process deposits and withdrawals via Pix, TED, boleto bancário, credit/debit card, PicPay, or Mercado Pago, we share strictly necessary financial data with financial institutions regulated by the Banco Central do Brasil (Nubank, Itaú, Bradesco, Banco do Brasil, and others) and authorized payment processors. These partners act as data processors and are bound by contractual confidentiality and data protection obligations.

5.2 Game and Technology Providers

Slots, crash game, and Live Casino providers (such as Pragmatic Play, PG Soft, Spribe, and others) may receive technical session data required for the games to function. This data does not include full financial information and is handled under confidentiality and data protection agreements.

5.3 Identity Verification

For the KYC (identity verification) process, we may use specialized document verification services and CPF validation through credit bureaus and Brazilian government databases.

5.4 Legal Obligations

522betapp may share data with Brazilian public, judicial, or tax authorities whenever there is a valid legal obligation to do so, such as compliance with a court order, a request from the Public Prosecutor's Office, COAF (Financial Activities Control Council), or the ANPD.

6. Cookies and Tracking Technologies

522betapp uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and analyze service usage. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — authentication, session management, and security. They cannot be disabled without affecting your ability to use the service;
• Performance cookies: collect aggregated, anonymized information about how users navigate the platform, enabling improvements to the interface and load times;
• Functionality cookies: store user preferences — such as language, betting settings, and favorite games — to personalize your experience on every visit;
• Analytics cookies: used to understand usage patterns — which sections of the platform are visited most and which slots are played most — with the aim of continuously improving the service.

You can manage non-essential cookie preferences through the consent banner shown on your first visit, or through your browser settings. Disabling essential cookies may affect the platform's ability to function properly.

7. Data Security

522betapp applies robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. The main safeguards in place include:

• 256-bit SSL/TLS Encryption for all data transmissions between your device and 522betapp's servers;
• Encrypted storage of sensitive data, including financial information and identity documents;
• Two-Factor Authentication (2FA) available to all users in the account security settings;
• Role-based access control for internal staff — only those with an operational need may access users' personal data;
• Continuous monitoring of unauthorized access attempts and suspicious behavior within our systems;
• Regular backups with secure, redundant storage to ensure data integrity;
• Internal information security policies with ongoing team training on data protection.

8. Data Retention

522betapp retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet applicable legal obligations. The criteria used to determine retention periods include:

• Active account data: retained for as long as the account remains active on the platform;
• Financial transaction data: retained for a minimum of 5 years after each transaction, as required by Brazilian tax and anti-money laundering legislation;
• KYC data (identity documents): retained for a minimum of 5 years after account closure, in accordance with regulatory obligations;
• Support communication data: retained for 2 years after the ticket is closed;
• Marketing data (with consent): retained until consent is withdrawn by the user.

Once mandatory legal retention periods have expired, data is anonymized or securely and irreversibly deleted, in line with industry best practices.

9. Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD — Law No. 13.709/2018) grants you, as a data subject, the following rights, which may be exercised with 522betapp at any time:

1. Confirmation and access: find out whether we process your data and receive a copy of it in a readable format;
2. Correction: request the correction of incomplete, inaccurate, or outdated data;
3. Anonymization, blocking, or deletion: of unnecessary, excessive data or data processed in violation of the LGPD;
4. Portability: receive your data in a structured format for transfer to another controller;
5. Erasure: request the deletion of data processed on the basis of consent, except where retention is required by law;
6. Sharing information: find out which entities your data has been shared with;
7. Consent withdrawal: withdraw consent given for consent-based processing, without affecting any processing that took place prior to withdrawal;
8. Objection: object to processing carried out on the basis of legitimate interest where there are valid grounds to do so;
9. Automated decision review: request human review of decisions made solely on the basis of automated processing that affect your interests.

To exercise any of these rights, contact 522betapp at contato@522betapp.best, providing your full name and CPF. We handle requests within 15 business days. You may also file complaints directly with the ANPD (Autoridade Nacional de Proteção de Dados) if you believe your rights have not been properly addressed.

10. Protection of Minors' Data

522betapp's services are intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires a CPF and date of birth, and mandatory identity verification before the first withdrawal confirms the account holder's age.

If we become aware that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that information and close the account. If you believe a minor has created an account on 522betapp, please contact us immediately at contato@522betapp.best.

11. International Data Transfers

Some of the technology and game providers used by 522betapp — such as slots suppliers, cloud infrastructure providers, and analytics tools — may have servers located outside Brazil. When this occurs, 522betapp ensures that international data transfers are carried out in compliance with the mechanisms permitted under the LGPD, including:

• Transfer to countries with an adequate level of data protection recognized by the ANPD;
• Standard data protection contractual clauses included in agreements with foreign suppliers;
• Binding Corporate Rules applicable to multinational corporate groups.

522betapp never transfers complete financial data or identity documents to servers outside Brazil without adequate protection guarantees. Pix payment data and transactions with the Brazilian financial system are processed exclusively within Brazilian territory, in accordance with the regulations of the Banco Central do Brasil.

12. Changes to this Privacy Policy

522betapp may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. The effective date of the current version is shown at the top of this page.

When we make material changes that affect your rights as a data subject, you will be notified at least 7 days in advance via the email address on your account. For minor or editorial changes, publishing the updated version is sufficient. Continued use of the platform after a new version's effective date constitutes acceptance of the changes.

13. Contact, DPO & Privacy Channel

522betapp has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's privacy practices, handling data subject requests, and serving as the official communication channel with the ANPD.

To exercise your rights, clarify questions about this Policy, or report any privacy-related concern, please use the official channels below:

• Privacy email: contato@522betapp.best (subject: "Privacy – LGPD");
• Live chat: available 24 hours a day directly on the 522betapp platform;
• Email address: https://522betapp.best.

We handle privacy-related requests within 15 business days of receipt, in line with the timeframe established by the LGPD. For urgent cases — such as suspected unauthorized use of your data — requests are prioritized through live chat.