Privacy Policy u555 – How We Take Care of Your Data

U555 collects personal data at different points during your experience on the platform. Below are the main types of data collected and the circumstances in which this occurs:

U555 does not collect sensitive data categories such as racial origin, religious belief, political opinion, health information, or biometrics, except where expressly required by law to fulfill specific regulatory obligations in the betting sector.

Personal data collected by u555 is used for the following purposes:

• Registration and authentication: create and manage your account, verify your identity at login, and maintain session security;
• Service provision: processing Sports Betting, enabling access to casino games, and managing deposits and withdrawals via Pix, boleto bancário, and credit/debit card;
• Identity Verification (KYC): fulfilling the regulatory requirements for age verification (18+) and identity verification prior to processing withdrawals;
• Fraud prevention and anti-money laundering (AML): monitor transactions and suspicious behavior to protect users and the integrity of the platform, as required by law;
• User support: answering questions, resolving issues, and handling requests submitted to u555's support team;
• Communications: send transactional notifications (withdrawal confirmations, security alerts, account updates) and, where you have given consent, promotional communications about u555 bonuses and promotions;
• Platform improvement: analyze aggregated, anonymous usage patterns to improve the interface, performance, and services offered;
• Compliance with legal obligations: comply with requests from competent Brazilian authorities, as required by law.

U555 does not use your data for purposes incompatible with those listed above without your prior consent or a valid legal basis under the LGPD.

All personal data processing carried out by u555 has a legal basis under the LGPD. The main legal bases used are:

• Contract performance (Art. 7, V): processing required to deliver the platform's services — betting, Pix payments, support — is carried out on the basis of the contract entered into when you create your account;
• Compliance with a legal obligation (Art. 7, II): KYC identity verification, anti-money laundering (AML) controls, and responses to authority requests are carried out on the basis of legal obligations applicable to the sector;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, and aggregated usage behavior analysis are processing activities based on u555's legitimate interests, provided they do not conflict with your fundamental rights;
• Consent (Art. 7, I): marketing communications and promotions from u555 are sent only with your consent, which can be withdrawn at any time through your account settings or by emailing contato@u555.life.

U555 shares personal data with third parties only in the following situations and under the following conditions:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, and digital wallets such as PicPay and Mercado Pago, we share the necessary financial data with the financial institutions and payment processors involved, all of which are regulated by the Central Bank of Brazil;
• Game providers: to provide slots, Live Casino, crash games, and other game titles, providers receive the minimum data required to process gaming sessions — typically an anonymous user identifier, with no direct identifying information;
• Identity verification: specialized KYC partners receive the documents required for identity verification, under contractual confidentiality obligations and restricted to that purpose only;
• Fraud prevention: fraud detection and anti-money laundering tools may process behavioral and transaction data to identify suspicious activity;
• Competent authorities: u555 may share data with Brazilian government authorities — such as the Financial Activities Control Council (COAF), the Federal Revenue Service, or judicial bodies — when legally required to do so;
• Business transfer: in the event of a merger, acquisition, or sale of u555 assets, user data may be transferred to the acquiring party, which will assume the same obligations set out in this Policy.

U555 does not sell personal data to third parties. All partners who receive data are contractually required to use it only for the agreed purposes and to maintain the same level of security required internally.

U555 retains your personal data for as long as necessary for the purposes described in this Policy, subject to the following criteria:

• Active account data: retained for the entire duration of your account on the platform;
• Financial and transaction data: retained for a minimum of 5 years after the last transaction, as required by anti-money laundering regulations and Brazilian tax obligations;
• KYC verification data: retained for the legally required period for the betting sector, which may be up to 7 years after account closure;
• Support communication data: retained for up to 3 years after the ticket is closed, for reference in the event of future complaints;
• Marketing data: retained for as long as consent remains active or until you request cancellation.

Once retention periods have elapsed, data is securely deleted or irreversibly anonymized. Requesting account deletion does not necessarily result in the immediate removal of all data — data that must be retained to comply with legal obligations is kept for the applicable period and then deleted.

U555 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. Key measures include:

• TLS encryption on all platform connections;
• Additional encryption of sensitive financial data at rest;
• Role-based access control: only team members with a legitimate need can access user data, and all access is audited;
• Two-factor authentication (2FA) available to all users and mandatory for accounts with internal administrative access;
• Continuous monitoring for suspicious access attempts and behavioral anomalies;
• Security testing and periodic vulnerability assessments conducted by a specialized team;
• Encrypted backups with regularly tested recovery procedures.

Despite all these measures, no system is 100% invulnerable. In the event of a security incident involving your data, u555 will act immediately to contain the impact, investigate the causes, and notify affected data subjects and the ANPD within the timeframes required by the LGPD.

U555 uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and carry out usage analytics. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — authentication, session management, and security. They cannot be disabled without affecting the usability of the service;
• Performance cookies: collect aggregated, anonymous data on how users navigate the platform, which pages are most visited, and where errors occur. They help identify and fix usability issues;
• Preference cookies: store your configuration choices — such as language and notification preferences — so you don't have to reconfigure them on every visit;
• Analytics cookies: used by traffic analytics tools to understand aggregate user behavior and guide platform improvements.

You can manage your cookie preferences through the banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies may prevent u555 from functioning properly.

U555 does not use tracking cookies for behavioral advertising on third-party platforms.

The LGPD grants you, as a personal data subject, the following rights regarding the processing carried out by u555:

To exercise any of these rights, send your request to contato@u555.life with the subject line "LGPD Rights – [your name]". u555 will respond within 15 business days of receipt.

U555 is a platform exclusively for users aged 18 and over. Registration, access, and use of any platform feature by minors is strictly prohibited and constitutes a violation of u555's Terms and Conditions.

We do not intentionally collect personal data from individuals under 18. If we become aware that we have collected data from a minor, that data will be deleted immediately and the account will be closed.

If you are the legal guardian of a child or teenager and believe they may have created a u555 account, contact us immediately at contato@u555.life so we can verify and take the necessary steps.

U555 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and for communication with data subjects and the ANPD.

For questions related to this Privacy Policy, to exercise your rights as a data subject, or to report any data privacy concern, please contact us:

• Email: contato@u555.life — with the subject line "Privacy Policy" or "LGPD Rights"
• Live support: live chat available 24/7 on the u555 platform

This Privacy Policy may be updated periodically to reflect changes in Brazilian legislation, our data processing practices, or the services offered. Material changes will be communicated by email or via an in-platform notification at least 7 days before taking effect.

The current version of this Policy is always the one published at u555.life/privacy-policy, with the date of the last update shown at the top of the page.