556bt Privacy Policy – Data Protection & LGPD

556bt is the online entertainment platform responsible for processing the personal data of its Brazilian users. For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), 556bt acts as the controller of personal data collected during use of the platform.

This Privacy Policy applies to all personal data collected through the 556bt.net website, the 556bt mobile app (when available), the customer support system, email communications, and any other user interaction channels. By creating an account on 556bt or continuing to use the platform after this updated policy is published, you confirm that you have read and understood the privacy practices described here.

556bt collects only the data necessary to operate the platform securely, meet legal obligations, and provide a good user experience. Below are the categories of data we collect and how they are obtained:

556bt does not collect or process sensitive personal data — such as racial origin, religious beliefs, health information, or sexual orientation — unless strictly required by law. We do not intentionally collect data from users under 18; if we identify that a minor has provided data, the account will be closed and the data deleted immediately.

556bt uses collected data solely for the purposes listed below. Your data is never used for anything you have not authorized or that is not necessary for the platform to operate:

• Operate your account: create and maintain your account, verify your identity, process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, and record your gaming history.
• Customer support: answer questions, resolve account issues, handle complaints, and maintain interaction history to ensure quality support in Portuguese.
• Security and fraud prevention: detect and prevent unauthorized access, multi-account use, bot activity, money laundering, and other fraudulent activities that could harm you or other users.
• Legal compliance: comply with regulatory obligations, respond to court orders, and fulfill requests from competent Brazilian authorities as provided by law.
• Experience personalization: suggest games you may enjoy (slots, crash games, live casino, jackpot) based on your usage history, using anonymized and aggregated data wherever possible.
• Marketing communications: send emails or notifications about 556bt promotions, bonuses, and updates — only if you opted in to receive these communications during registration or in your account settings.
• Responsible gambling: monitor behavioral patterns to identify signs of problem gambling and, when needed, activate protective tools or reach out proactively.
• Platform improvement: use aggregated and anonymized usage data to improve site performance, fix bugs, develop new features, and enhance the overall experience for Brazilian users.

556bt does not use your personal data to make solely automated decisions that produce significant legal effects on you — for example, no account suspension decision is made without human review when contested.

The LGPD requires that every personal data processing operation have a specific legal basis. 556bt processes your data under the following grounds set out in Article 7 of Law No. 13,709/2018:

• Performance of a contract (Art. 7, V): the processing of registration, financial, and usage data is necessary to perform the service agreement you accept when creating an account on 556bt.
• Consent (Art. 7, I): for marketing communications and non-essential cookies, the legal basis is your explicit consent, which can be withdrawn at any time.
• Compliance with a legal obligation (Art. 7, II): data required for anti-money laundering, identity verification (KYC), and responses to regulatory authorities is processed to fulfill legal obligations applicable to 556bt.
• Legitimate interest (Art. 7, IX): security and fraud prevention data may be processed on the basis of 556bt's legitimate interest and that of other users, provided this does not override your fundamental rights.

556bt does not sell your personal data. We may share data with third parties only in the situations listed below, always with appropriate contractual protections in place:

• Payment processors: data required to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED is shared with the financial institutions and payment gateways involved in the transaction. These partners are PCI-DSS certified and operate under strict data protection agreements.
• Game providers: some technical data such as session ID and available balance is shared with game studios (such as Evolution Gaming and Pragmatic Play) solely to allow the games to function correctly. These providers do not have access to your full identification data.
• Identity verification services: documents submitted for KYC (driver's license, national ID, passport) may be processed by specialized identity verification platforms operating under data processing agreements compliant with the LGPD.
• Technical infrastructure providers: 556bt uses hosting, CDN, and performance monitoring services. These providers have limited technical access to data and are contractually prohibited from using it for any other purpose.
• Competent authorities: we may disclose personal data to governmental, regulatory, or judicial authorities when required by law, court order, or applicable regulation in Brazil. Where possible and legally permitted, we will notify the user before any such disclosure.

All third parties that process data on behalf of 556bt undergo security assessments and sign data processing agreements obligating them to handle information only in accordance with 556bt's instructions and LGPD requirements.

556bt implements robust technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, improper alteration, or destruction. Key protections include:

• Encryption in transit: all communications between your device and 556bt's servers use TLS 1.3 with a 256-bit SSL certificate — the same standard used by Brazilian digital banks such as Nubank and Itaú.
• Encryption at rest: personal data stored in 556bt databases is encrypted using modern algorithms. Passwords are never stored in plain text — they are saved as hashed values with salt using bcrypt.
• Access controls: only employees with a legitimate need have access to users' personal data. Access is controlled by multi-factor authentication, and audit logs are maintained for all access to sensitive data.
• Two-factor authentication: available to all 556bt users as an additional layer of account protection. We strongly recommend enabling it, especially for accounts with a significant balance.
• Security monitoring: intrusion detection systems and real-time monitoring operate 24/7 to identify suspicious activity on servers and user accounts.
• Security testing: the platform undergoes periodic penetration testing and security audits conducted by independent specialists.

Despite all measures in place, no security system is 100% foolproof. In the event of a security incident that could materially affect your personal data, 556bt will notify impacted users and the National Data Protection Authority (ANPD) within the deadlines set by the LGPD.

556bt retains your personal data for as long as necessary to fulfill the purposes described in this policy, or for the period required by law, whichever is longer. The general retention criteria are:

• Active account: data is retained for as long as the account remains active and for as long as necessary to meet any legal or contractual obligations following account closure.
• After account closure: identification data and financial history are retained for up to 5 years to comply with anti-money laundering obligations and potential legal disputes, in accordance with applicable Brazilian law.
• Marketing data: unsubscribe requests from commercial communications lists are processed within 48 hours. Contact details are removed from mailing lists but may remain in transactional records for the legally required period.
• Technical logs: access records and security logs are retained for up to 6 months for diagnostic and security purposes, in line with the Marco Civil da Internet guidelines.
• KYC data (documents): copies of identity documents submitted for verification are retained for the minimum period required by anti-money laundering regulations, generally 5 years after account closure.

Once the applicable retention period ends, data is securely deleted or anonymized so it can no longer be linked to a specific individual. Anonymization is preferred over deletion when the data still has analytical value in aggregate form.

The LGPD grants you a set of rights regarding your personal data. 556bt is committed to respecting and facilitating the exercise of all these rights. See what you can request and how:

To exercise any of these rights, send an email to suporte@556bt.net with the subject line "LGPD Rights – [request type]" or reach us via live chat. For access, portability, or deletion requests, identity verification may be required before processing.

The 556bt website uses cookies and similar technologies to enhance the user experience, ensure the platform functions correctly, analyze site usage, and personalize content. The cookie categories used are listed below:

You can manage your cookie preferences at any time through the consent banner shown on your first visit or through your browser settings. Disabling non-essential cookies does not affect access to 556bt's core features.

556bt is an adult entertainment platform. Access and registration are strictly prohibited for anyone under 18. The platform does not intentionally collect personal data from minors and takes active measures to prevent underage registration, including CPF verification and identity document checks.

If you believe a child or minor has provided personal data to 556bt, please contact support immediately via live chat or by emailing suporte@556bt.net. 556bt is committed to deleting the identified data within 48 hours of confirmation, closing the account, and taking any additional preventive measures required.

556bt may update this Privacy Policy periodically to reflect changes in data practices, new legal requirements, or platform improvements. The "last updated" date at the top of the document will always be refreshed whenever changes are made.

For material changes — those that significantly affect your rights or how we handle your data — we will notify users at least 7 days in advance by email or in-platform notification. For minor formatting or clarity updates, the revised date indicates the change.

We recommend revisiting this page periodically to stay informed about how 556bt protects your data. Continued use of the platform after the effective date of any change constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account and request data portability or deletion.

To exercise your LGPD rights, ask questions about this Privacy Policy, or report any concerns about how 556bt handles your personal data, you can reach us through the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform. Average response time is under 2 minutes.
• DPO email: suporte@556bt.net with the subject line "Privacy – LGPD". Responses within up to 15 business days as required by the LGPD.

If you believe 556bt has handled your data improperly and are not satisfied with our team's response, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under Article 55-J of the LGPD.