Privacy Policy of n555: Your Data Protected by the LGPD

This Privacy Policy describes how n555 (hereinafter "Platform" or "n555") collects, stores, uses, and protects the personal data of users who access the website https://n555.world and the official n555 mobile app.

This Policy applies to all registered users and visitors of the Platform, regardless of the device used to access it — desktop, mobile, or tablet. By creating an account or continuing to use n555 services, the user confirms they have read and understood this Privacy Policy and agree to the data processing described herein.

N555 acts as data controller under the General Data Protection Law (LGPD — Law No. 13.709/2018), being responsible for decisions regarding the purposes and means of processing personal data collected on the Platform. For questions or requests related to this Policy, the contact channel is suporte@n555.world.

N555 collects personal data at different points throughout the user's journey on the Platform. The main categories and collection moments are described below:

At registration:

• Full name, CPF, date of birth, and nationality;
• Email address and mobile number;
• Full residential address including ZIP code;
• Username and password (stored in encrypted form — n555 does not have access to the password in plain text).

During identity verification (KYC):

• Photo of identity document (RG or CNH, front and back);
• Proof of residence with a recent date;
• Selfie with document for biometric verification;
• Proof of the payment method used for deposits.

While using the Platform:

• Complete betting history, including amounts, selected markets, outcomes, and dates;
• Deposit and withdrawal history with amounts, methods, and timestamps;
• IP address, device type, operating system, and browser or app version;
• Session data, including access time, duration, and pages visited;
• Customer support interactions — chat and email conversation history.

Automatically collected data (cookies):

• Technical cookies required for session operation and authentication;
• Preference cookies to save user settings;
• Anonymous browsing analytics data for improving the Platform experience.

N555 uses collected personal data solely for the purposes described below, in accordance with the purpose limitation principle under the LGPD:

• Account creation and management: identification data is required to create and maintain your account, authenticate your access, and ensure that only the account holder can carry out operations;
• Financial transaction processing: financial data is used to process deposits via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, or TED bank transfer, and to process withdrawals to bank accounts held by the user;
• Identity verification and fraud prevention: identity documents are collected to confirm you are who you say you are, prevent access by users under 18, and detect duplicate accounts or suspicious activity;
• Regulatory compliance: n555 is legally required to maintain records of financial transactions and verify user identities, particularly for transactions above certain thresholds, in accordance with anti-money laundering regulations;
• Customer support: support interaction history is retained to ensure continuity of service and to resolve disputes efficiently;
• Platform Improvement: usage data is analyzed in aggregate to identify interface improvements in the app, new markets, and live betting features desired by users;
• Communications and marketing: with your consent, we send emails about promotions, new products, and information relevant to your n555 experience. You may withdraw this consent at any time.

N555 does not use your personal data to build behavioral profiles for sale to third parties, for advertising outside the Platform, or for any purpose not described in this Policy.

N555 does not sell, rent, or share your personal data with third parties for commercial purposes. Data sharing occurs only in the following situations, all of which are necessary for the Platform to operate:

• Payment processors: data required to process Pix, credit/debit card, and boleto payments is shared with partner financial institutions and payment processors, who act as data operators under specific contracts with confidentiality and security obligations equivalent to those required by the LGPD;
• Identity verification services (KYC): documents submitted for verification may be processed by specialized biometric and document verification providers, always under contracts with strict data protection clauses;
• Competent authorities: n555 may share data with governmental, judicial, or regulatory authorities when required by law, court order, or competent authority request — in such cases, users will be notified whenever legally permitted;
• Technical infrastructure providers: hosting, backup, and data security providers may have technical access to n555 systems, always under contracts that include confidentiality clauses and a prohibition on using data for their own purposes.

All third parties with access to personal data from n555 users undergo security adequacy assessments prior to onboarding and on a periodic basis throughout the partnership. n555 maintains an up-to-date register of all data operators it works with.

N555 retains personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. The general retention periods are as follows:

• Account and identity information: retained for as long as the account remains active and for up to 5 years after account closure, in accordance with financial compliance and anti-money laundering requirements;
• Financial transaction data: retained for 10 years after each transaction, in accordance with Brazilian tax and regulatory legislation;
• Betting history: maintained by 5 years after each bet, for audit and dispute resolution purposes;
• Customer support data: retained for 3 years after the interaction ends;
• Non-essential cookie data: deleted according to the user's browser settings or upon expiration of the defined period for each cookie.

Once retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified. You may request early deletion of data that is not required to fulfill a legal obligation by emailing suporte@n555.world — n555 will assess each request individually and respond within 15 business days.

N555 uses cookies and similar technologies to ensure the technical operation of the Platform and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the basic operation of the Platform, including session authentication, language preferences, and security settings. These cookies cannot be disabled without affecting your ability to use the Platform;
• Preference cookies: save your personalized settings, such as favorite sports, betting configurations, and odds display preferences. They can be disabled in your browser settings, though this may affect some features;
• Analytical cookies: collect anonymous usage data about the Platform to help n555 identify improvements to navigation and app performance. Data is processed in aggregate form and cannot be used to identify individual users.

You can manage cookie settings through your browser or the Platform's preferences panel. Disabling essential cookies may prevent access to your account and affect the normal functioning of live betting on n555.

N555 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or improper disclosure. The main security measures in place include:

• 256-bit SSL encryption on all communications between the user's device and n555 servers;
• Passwords are stored using modern hashing algorithms with random salting — n555 never has access to your password in plain text;
• Tokenized financial and payment data — card details and Pix keys are not stored in plain text;
• Strict access controls on internal systems, with mandatory multi-factor authentication for all employees who handle user data;
• Continuous monitoring for suspicious activity using automated anomaly detection systems;
• Regular encrypted backups, stored in locations physically separate from production systems;
• Regular penetration testing and security audits conducted by independent third parties.

In the event of a security incident that may affect your personal data, n555 will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes required by the LGPD, describing the nature of the incident, the data involved, and the steps taken to mitigate it.

The LGPD grants you, as the data subject, a set of rights that n555 is committed to respecting and facilitating. Here is what you can request:

• Access: request a copy of all personal data that n555 holds about you;
• Correction: update or correct inaccurate or incomplete data — many details can be updated directly from your account dashboard;
• Portability: receive your data in a structured, machine-readable format for transfer to another controller;
• Erasure: request the deletion of data that is no longer needed for the purposes for which it was collected, or where there is no longer a valid legal basis for processing;
• Objection: object to data processing based on legitimate interest when you believe your fundamental rights and interests take precedence;
• Consent withdrawal: withdraw consent for processing based on that legal basis at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
• Information on data sharing: find out which third parties your data has been shared with.

To exercise any of these rights, send a written request to suporte@n555.world with the subject line "LGPD Rights — [your name]". n555 will respond within 15 business days, and may request identity confirmation before fulfilling the request to ensure that only the account holder can access the information. If your request cannot be fulfilled in full, we will explain the reasons in writing.

N555 is a platform exclusively for users aged 18 and over. The Platform does not intentionally collect personal data from minors and does not permit registration or use of its services by this audience.

Should n555 identify that personal data from a minor has been collected — for example, through fraudulent registration using false information — that data will be immediately deleted and the corresponding account will be permanently closed.

If you believe a user under 18 has created an n555 account using false information, please contact us at suporte@n555.world so the matter can be investigated and resolved as a priority.

N555 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered by the Platform. When significant changes are made, users will be notified by email and/or via an in-app notification at least 7 days in advance before the new version takes effect.

The date of the most recent update is always shown at the top of this page. Continued use of the Platform after a new version takes effect constitutes acceptance of the changes made. If you do not agree with the changes, you may request account closure before the effective date.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report a possible privacy violation, please reach out through the following channels:

• Data Protection Officer (DPO) email: suporte@n555.world — subject line "Privacy / LGPD"
• Live chat: available 24 hours a day via the n555 app and website
• Response time: up to 15 business days for rights requests; up to 4 business hours for general inquiries

You also have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe that n555's handling of your personal data violates the LGPD.