5xpg Privacy Policy – Data Protection in Brazil

A 5xpg is the controller of the personal data processed under this Privacy Policy. We are a Sports Betting and online casino platform built with a focus on the Brazilian market, operating in compliance with applicable national legislation, including the General Personal Data Protection Law (LGPD — Law No. 13,709/2018).

For privacy-related inquiries, to exercise your rights as a data subject, or for any questions about this Policy, you can reach us through the following channels:

• Email: contato@5xpg.best
• Live chat: available 24 hours directly on the 5xpg platform
• WhatsApp: available in the account dashboard after login

Our support team operates in Brazilian Portuguese, 24 hours a day, 7 days a week, including national holidays.

A 5xpg only collects the data necessary to provide Sports Betting, casino, and financial services in Brazil. Below are the categories of data we process:

Registration data: full legal name as shown on a government-issued ID, CPF, date of birth, email address, mobile phone number, and full residential address including ZIP code. This information is required to create an account, verify identity, and comply with legal anti-money laundering obligations.

Identity data for verification: a copy of your RG, CNH, or passport and, where applicable, a recent proof of address. Verification is mandatory for withdrawals and may be requested by the platform at any time in accordance with applicable law.

Financial transaction data: records of deposits and withdrawals via Pix, boleto bancário, credit card, debit card, PicPay, Mercado Pago, and TED. These records include date, time, amount in BRL (R$), payment method, and transaction status. Sensitive banking details — such as passwords and full card numbers — never are stored by 5xpg.

Platform usage data: bets placed, casino games accessed, usage sessions, promotion clicks, access times, and sport/game preferences (football, volleyball, e-sports, MMA/UFC, live casino, crash games, slots). This data is used to personalize your experience and improve the product.

Technical data: IP address, device type (mobile, tablet, or desktop), operating system, browser, device identifiers, and approximate geolocation data. This information is collected automatically when you access the platform.

Communication data: support records from live chat, WhatsApp, and email, including the content of conversations with the 5xpg support team.

A 5xpg uses collected data exclusively for the purposes described below. No data is sold to third parties or used for any purpose unrelated to platform operation.

A 5xpg may send marketing communications by email or push notification about promotions, new games, or sporting events — such as Brasileirão Série A matches, Libertadores, or e-sports tournaments. You can opt out of these communications at any time through your account settings or by clicking the unsubscribe link in any email you receive.

A 5xpg processes personal data based on the legal grounds set out in Law No. 13,709/2018 (LGPD). Every data processing activity carried out by the platform is grounded in at least one of the following legal bases:

• Contract performance: processing necessary to provide the services the user signed up for when creating their account, including bet management, Pix deposits, and withdrawals;
• Legal obligation: identity verification, financial transaction records, and cooperation with Brazilian regulatory authorities in accordance with anti-money laundering legislation;
• Legitimate interest: platform security, fraud detection, multiple-account prevention, and product improvements — always balanced against the user's interests;
• Consent: marketing communications, content personalization, and use of non-essential cookies. Consent may be withdrawn at any time without affecting contracted services.

A 5xpg does not sell users' personal data to third parties under any circumstances. Data sharing occurs only in the situations described below, solely to operate the service or fulfill legal obligations:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit card, debit card, PicPay, Mercado Pago, and TED. These partners receive only the minimum data required to process the specific transaction;
• Casino game providers: slots, Live Casino, crash games, and other game providers receive only an anonymous user identifier — they have no access to your name, CPF, or full financial details;
• Identity verification services: document verification platforms used to confirm CPF, identity, and prevent fraud in accordance with regulatory requirements;
• Regulatory authorities and government bodies: when required by court order, summons from the Ministério Público, Receita Federal, Banco Central do Brasil, or other competent authorities;
• Infrastructure and security services: cloud hosting providers, anti-fraud services, and network security providers — all operating under confidentiality agreements with access limited to the data needed for their specific functions.

All third parties that receive data from users of 5xpg are bound by contractual confidentiality obligations and must comply with the LGPD or equivalent legislation applicable to their operations.

A 5xpg implements robust technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure. The main security measures in use on the platform include:

• 256-bit SSL encryption: all communications between the user's device and 5xpg servers are encrypted. This includes the login process, Pix deposits, and any other transmission of sensitive data;
• Secure password storage: user passwords are stored using irreversible cryptographic hashing. 5xpg staff cannot access your password in plain text under any circumstances;
• Two-factor authentication (2FA): available to all users as an additional layer of account protection. We strongly recommend enabling 2FA in your profile settings;
• Real-time anti-fraud monitoring: automated systems analyze access patterns and transactions to detect suspicious behavior and take preventive action;
• Internal access controls: only 5xpg team members with a justified operational need have access to user data, always under an audit log;
• No storage of full banking details: information such as your banking password, full credit card number, and CVV code never passes through 5xpg's servers. Pix payments are completed directly within the user's own banking app.

In the event of a security incident that may affect users' personal data, the 5xpg will follow the procedures set out under the LGPD, notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the legally established deadlines.

A 5xpg uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and collect analytics data that helps improve the product. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — such as keeping the user logged in, remembering the bet slip, and processing financial transactions. These cookies cannot be disabled without affecting the site's functionality;
• Performance cookies: collect anonymous data on how users navigate the platform — which pages they visit most, where errors occur, and how long they spend in each section. This data helps 5xpg identify issues and improve the overall experience;
• Functionality cookies: remember user preferences such as language, preferred payment method, and account settings to make returning to the platform easier;
• Marketing cookies: used to personalize promotions and communications, such as notifications about sporting events of interest — a Libertadores match, a CS2 tournament, or a slots promotion. These cookies require consent and can be disabled.

You can manage your cookie preferences through the consent banner shown on your first visit to the site, or through your browser settings. Disabling non-essential cookies does not affect betting, deposits, or withdrawals on the 5xpg.

A 5xpg retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. General retention periods are:

• Registration and identity data: retained for the full duration of the account and for up to 5 years after closure, in accordance with legal anti-money laundering requirements;
• Financial transaction records: retained for a minimum of 5 years as required by the Receita Federal and the Banco Central do Brasil;
• Betting history: retained for up to 2 years after the bet is placed, for dispute resolution and auditing purposes;
• Support communication data: retained for up to 1 year for quality assurance and dispute resolution purposes;
• Usage and browsing data: retained for up to 12 months in identified form and indefinitely in anonymized form for statistical analysis.

Once retention periods expire, data is securely deleted or anonymized. Early deletion requests submitted by the data subject are honored provided there is no legal obligation to retain the data during the requested period.

The LGPD grants personal data subjects a set of rights that the 5xpg fully respects. You may exercise any of them at any time via live chat, WhatsApp, or email at contato@5xpg.best. The response time is up to 15 business days.

The platform 5xpg is intended exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. Registration requires confirmation that the user is a full 18 years of age, along with CPF verification, which allows us to identify the date of birth on file with the Receita Federal.

If we identify that a minor's data has been inadvertently collected, the account will be immediately blocked, the balance frozen, and the data deleted once the situation is confirmed. Parents or legal guardians who detect misuse of the platform by a minor should contact support immediately via live chat or email at contato@5xpg.best.

A 5xpg may use cloud infrastructure services whose servers are located outside Brazil. When this occurs, international data transfers are carried out in compliance with Article 33 of the LGPD, under one of the following conditions:

• The destination country provides a level of personal data protection equivalent to that required under the LGPD;
• The international operator ensures compliance with standard contractual clauses equivalent to the protections provided under Brazilian law;
• The transfer is necessary for the performance of the service agreement with the user.

In any case of international data transfer, 5xpg contractually requires international operators to maintain the same level of protection applied in Brazil. Transferred data remains subject to the same purposes and usage limitations described in this Policy.

A 5xpg may update this Privacy Policy periodically to reflect changes in Brazilian law, the services offered, or data processing practices. Material changes will be communicated by email to registered users at least 7 days before taking effect.

Continued use of the platform after changes take effect constitutes acceptance of the updated terms. If you disagree with any changes, you may close your account and request deletion of your data before those changes come into effect.

To exercise any right described in this Policy, ask questions about how your data is handled, or report a privacy breach, please contact the 5xpg through the channels below. We guarantee a response in Brazilian Portuguese within up to 15 business days:

• Email: contato@5xpg.best
• Live chat: 24 hours on the 5xpg platform
• WhatsApp: available in the account dashboard after login

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular Law No. 13,709/2018 (LGPD). Any disputes related to data processing will be submitted to the jurisdiction of Brazilian courts, with venue in the district of São Paulo, SP.