D555 Privacy Policy – How We Protect It Your Personal Data

D555, operator of the platform available at d555.life, is the controller of the personal data processed under this Privacy Policy, as defined in Article 5, item VI, of the General Data Protection Law (Law No. 13.709/2018 – LGPD). In practice, this means d555 is responsible for decisions about how, when, and why your data is collected and used.

D555 has a Data Protection Officer (DPO) responsible for handling requests, questions, and complaints related to the processing of personal data. You can contact the DPO at any time by emailing contato@d555.life with the subject line "LGPD – Data Protection".

This Policy applies in full to the data processing of all users registered on d555, regardless of how actively they use the platform — from those who simply created an account to active VIP Program members who bet daily on football, volleyball, basketball, live casino, or any other available product.

D555 collects only the data strictly necessary to operate the platform, process financial transactions securely, and meet legal obligations. Below are the types of data collected and their corresponding purposes:

D555 does not collect sensitive data such as racial origin, religious beliefs, political opinions, health information, or sexual orientation. When you bet on a Brasileirão match or play live baccarat, the data recorded relates exclusively to the transaction — never to your personal life outside the platform.

Every piece of data collected by d555 has a specific, documented purpose. There is no collection for its own sake — each item is used for at least one of the purposes listed below:

D555 does not use your data to make automated decisions with significant legal effects without the possibility of human review. If an algorithm flags your account for a security review, a member of the d555 team reviews the case before any action is taken.

The Lei Geral de Proteção de Dados (LGPD) requires that all personal data processing have a specific legal basis. d555 processes your data under the following grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): The primary legal basis for most processing activities. When you create an account and use d555, you enter into a service agreement. Processing your data is necessary to perform that agreement — handling your bets, Pix deposits, and withdrawals.
• Compliance with a legal obligation (art. 7, II): d555 is legally required to maintain financial transaction records, carry out identity verification (KYC), and cooperate with authorities in financial crime investigations. These processing activities do not depend on your consent.
• Legitimate interest (art. 7, IX): d555 processes technical and usage data to prevent fraud, improve platform security, and send relevant communications about promotions and the VIP Program. This processing always respects your interests and fundamental rights.
• Consent (art. 7, I): For processing not covered by the bases above — such as sending marketing communications not directly related to your use of the platform — d555 will ask for your express consent, which can be withdrawn at any time.

D555 may share personal data with the following categories of third parties, under the conditions described below:

• Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data required for the specific transaction and operate under data processing agreements compatible with the LGPD;
• Game and casino providers: Partners providing slots, live casino (blackjack, baccarat, roulette), and other games receive anonymized session identifiers to operate gameplay. They do not receive CPF numbers, full names, or financial data;
• Technical infrastructure providers: Hosting, CDN, cloud database, and security monitoring services. All governed by contracts with specific data protection clauses and without access to data in plain text;
• Public authorities: d555 may be legally required to share data with tax, law enforcement, or regulatory authorities pursuant to a court order or substantiated legal request. In such cases, d555 shares only the minimum necessary information and, where permitted by law, notifies the user;
• Auditors and legal advisors: For internal audit purposes, compliance review, or defense in legal proceedings, under strict confidentiality obligations.

All third parties who receive d555 user data are assessed for their security and privacy practices before engagement and periodically throughout the relationship. d555 contractually requires these partners to process data only for the specified purposes and to maintain security standards equivalent to those of the platform itself.

D555 applies a robust set of technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. Data security isn't a one-time project — it's an ongoing process that d555 regularly reviews and updates.

The security measures implemented by d555 include:

• 256-bit SSL/TLS encryption: All communications between your device (phone, computer, tablet) and d555's servers are encrypted using 256-bit SSL/TLS protocol. This means data in transit — including login credentials and Pix transaction data — cannot be intercepted;
• Encryption at rest: Sensitive data stored on d555's servers — such as CPF numbers, financial data, and verification documents — is encrypted at rest, remaining protected even in the event of unauthorized physical access to the hardware;
• Role-based access control: Only employees who specifically require access are permitted to view user data, and only to the extent necessary for their role. All access is recorded in auditable logs;
• Monitoring and anomaly detection: Automated systems monitor access patterns and transactions in real time, flagging suspicious activity — such as login attempts from multiple IPs or unusual withdrawals — and triggering verification protocols;
• Two-factor authentication (2FA): Available to all users, 2FA adds an extra layer of security to your login. d555 strongly recommends enabling it, especially for accounts with significant balances or advanced VIP status;
• Periodic security testing: d555 conducts regular security audits and penetration tests to identify and address vulnerabilities before they can be exploited.

D555 retains your personal data only for as long as necessary to fulfill the purposes described in this Policy or to meet legal retention obligations. The principle behind our retention policy is straightforward: we don't keep more than we need, for longer than we need it.

The general retention periods applied by d555 are:

• Registration and identity data: Retained while the account is active and for up to 5 years after closure, in accordance with financial compliance and anti-money laundering requirements (Law No. 9,613/1998);
• Financial transaction history: Retained for 5 years after each transaction, in accordance with Brazilian tax and financial legislation;
• KYC verification documents: Retained for the duration of the account plus 5 years after closure;
• Access and security logs: Retained for 6 months, in accordance with the Brazilian Internet Civil Framework (Law No. 12.965/2014);
• Usage data and betting history: Retained while the account is active. After closure, anonymized and aggregated for internal statistical purposes;
• Support communications: Retained for 2 years for quality assurance and dispute resolution purposes.

When retention periods expire, data is securely deleted or irreversibly anonymized so that the data subject can no longer be identified. If you request deletion of data that is still within a mandatory legal retention period, d555 will clearly inform you which data cannot be deleted immediately and why.

The LGPD grants you a set of rights regarding your personal data processed by d555. The platform is committed to responding to all requests within 15 days, as required by law.

To exercise any of these rights, send an email to contato@d555.life with the subject line "LGPD – [type of request]" or access the privacy panel within your d555 account. Requests will be answered within 15 days. In cases requiring additional identity verification, the deadline may be extended by a further 15 days, with prior notice to the data subject.

If you believe your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.

D555 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and understand how the platform is used. Cookies are small text files stored on your device (phone or computer) when you access d555.

The types of cookies used by d555 are:

• Essential cookies: Required for the platform's basic functionality — keeping your session active while logged in, remembering your selected language, and processing bets and transactions. These cookies cannot be disabled without affecting how d555 works;
• Performance cookies: Collect anonymized data on how users navigate the platform — which pages are visited most, where technical errors occur, and how long pages take to load. Used exclusively for technical improvements;
• Functional cookies: They remember your preferences — such as the betting settings you use most often, the sport you open first (football, volleyball, live casino), and other interface adjustments that make the experience more convenient;
• Analytics cookies: Used to understand aggregated, anonymized usage patterns to support d555's product decisions. Individual users are not identified.

D555 does not use tracking cookies for targeted advertising on external networks. You can manage cookie preferences through the banner shown on your first visit or through your browser settings. Disabling essential cookies may affect the platform's proper functionality.

D555 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Any relevant change will be communicated via your registered email and through a prominent notice on the platform at least 10 days before it takes effect.

The most recent version of this Policy is always available on this page, with the date of the last update shown at the top. We recommend reviewing it periodically. Continued use of d555 after any changes take effect constitutes acceptance of the updated version.

For any questions, rights requests, or privacy-related inquiries about d555, you can reach us through the following channels:

• DPO email: contato@d555.life — subject line "LGPD – [your question or request]". Response within 15 days;
• Live chat: Available 24/7 within the platform after login, in Brazilian Portuguese;
• VIP Manager: Gold, Platinum, and Diamond members of the VIP Program can contact their dedicated manager directly for privacy-related matters;
• ANPD: For complaints not resolved directly with d555, users may contact the Autoridade Nacional de Proteção de Dados through the agency's official portal.