45xx Privacy and Data Protection Policy

45xx collects personal data at different points during your experience on the platform. Below we detail each category of data collected and its associated purpose.

2.1 Registration Data

At registration, we collect the information needed to create and operate your account securely:

• Full legal name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address including postal code (CEP).

2.2 Identity Verification Data (KYC)

To meet legal obligations related to fraud prevention and age verification, we may request:

• Copy of a government-issued ID (RG, CNH, or passport) — front and back;
• Proof of address issued within the last three months;
• A selfie holding your ID document, when required to confirm account ownership.

2.3 Financial Transaction Data

To process deposits and withdrawals securely, we record:

• Payment method used (Pix, boleto bancário, credit/debit card, Mercado Pago, PicPay, TED);
• Pix key, bank details, or partial card number (never the full card number);
• Amounts and dates of all transactions carried out;
• Deposit and withdrawal history linked to the account.

2.4 Platform Usage Data

While you use 45xx, we automatically collect technical information that helps us ensure the platform runs correctly and detect suspicious activity:

• IP address and approximate geographic location;
• Device type, operating system, and browser;
• Pages visited, game sessions, and betting history;
• Access times and session duration;
• Cookie and similar technology data (see Section 8).

2.5 Communication Data

When you contact 45xx support via live chat or email, we record the content of those communications for customer service, quality control, and dispute resolution purposes.

45xx uses the personal data collected exclusively for the purposes described below. We never use your data for purposes incompatible with those stated here without your express consent.

Marketing communications (promotions, news, personalized offers) are sent only with your explicit consent, given at the time of registration. You can opt out at any time by clicking the unsubscribe link included in all 45xx emails, or through live chat.

The LGPD requires that all personal data processing be grounded in one of the legal bases set out in Article 7 of the law. 45xx processes your data on the following bases:

• Contract performance (Art. 7, V): to create your account, process deposits and withdrawals via Pix or other accepted methods, settle Sports Betting wagers, and operate online casino games;
• Compliance with a legal or regulatory obligation (Art. 7º, II): to verify user age (minimum 18-year requirement), prevent fraud and money laundering, and comply with orders from competent authorities;
• Legitimate interest (Art. 7, IX): to maintain platform security, detect suspicious activity, improve user experience, and conduct performance analysis of the 45xx platform;
• Consent (Art. 7º, I): for sending marketing communications, personalized offers, and promotional notifications. Consent may be withdrawn at any time.

45xx does not sell, give away, or otherwise commercialize users' personal data to third parties for any purpose. Data sharing only occurs in the situations described below, all of which are strictly necessary for the secure operation of the platform.

5.1 Essential Service Providers

We share data with technical partners who help us operate the platform, always under contracts that ensure full compliance with the LGPD:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay, the data required for settlement is transmitted to the respective institutions;
• Casino game providers: Pragmatic Play, PG Soft, Evolution Gaming, and other certified partners receive minimal session data needed to operate the games correctly from a technical standpoint;
• Infrastructure and security services: cloud hosting, CDN, and anti-fraud system providers that process access data to ensure the availability and security of 45xx;
• Identity verification services (KYC): specialized document verification partners who assist in confirming user identity.

5.2 Authorities & Legal Obligations

45xx may disclose personal data in response to legitimate requests from competent authorities, such as the Banco Central do Brasil, the Receita Federal, the Ministério da Fazenda, the Conselho de Controle de Atividades Financeiras (COAF), or other government entities, when required by law, court order, or applicable legal process. In such cases, 45xx discloses only the data strictly necessary to fulfill the request.

5.3 What We Never Do

• We never sell your email list or contact details to advertisers;
• We never share your CPF or banking details with third parties not involved in the transaction;
• We never use your data to build profiles for sale to credit agencies or insurance companies.

45xx retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Brazilian law.

6.1 Retention Periods

• Registration and identity data: kept for as long as the account remains active and for a minimum of 5 (five) years after account closure, as required by anti-money laundering legislation;
• Financial transaction data: retained for 5 (five) years from the date of each transaction, in compliance with tax legislation and financial crime prevention requirements;
• Support communications data: kept for 2 (two) years for the purpose of resolving any disputes;
• Cookie and browsing data: retained according to the settings for each cookie type (see Section 8);
• Marketing data (consent): retained for as long as consent remains active or until a deletion request is submitted.

6.2 Data Deletion

Once the applicable retention period ends, 45xx securely deletes or anonymizes personal data so that the individual can no longer be identified. You may request early deletion of data not required by law as described in Section 9 of this Policy.

45xx employs robust technical and organizational measures to protect users' personal data against unauthorized access, misuse, disclosure, alteration, or destruction.

7.1 Technical Measures

• 256-bit SSL/TLS encryption: all communications between your device and 45xx's servers are encrypted to bank-grade standards;
• Encryption of data at rest: sensitive data stored in 45xx's databases is encrypted at rest;
• Two-factor authentication (2FA): available to all users in the account settings;
• Real-time anti-fraud systems: continuous monitoring of transactions and access to detect anomalous behavior;
• Regular penetration testing: periodic security audits conducted by independent specialists.

7.2 Organizational Measures

• Access to personal data restricted to employees with a legitimate need to know (principle of least privilege);
• Mandatory data protection training for all 45xx staff who handle user information;
• A documented security incident response procedure, including notification to the National Data Protection Authority (ANPD) and affected users within the timeframes required by the LGPD.

45xx uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize communications and analyze site usage.

8.1 Types of Cookies Used

8.2 Managing Cookies

You can manage your 45xx cookie preferences through the privacy settings panel available in the platform footer. For third-party cookies, preferences can be adjusted directly in your browser settings. Disabling essential cookies may affect the proper functioning of 45xx, including the login process and placing bets.

The LGPD grants you, as the data subject whose personal information is processed by 45xx, a robust set of rights that can be exercised at any time. See below what you can request and how to do it.

9.1 How to Exercise Your Rights

To exercise any of the rights above, contact 45xx through the channels below. We will respond within 15 business days from the date the request is received:

• Live chat: available 24 hours a day, 7 days a week, on the 45xx.best platform;
• Privacy email: privacidade@45xx.best;
• Mandatory identification: for security purposes, all data access or deletion requests will require identity verification.

45xx is an entertainment platform exclusively for users aged 18 and over. We do not knowingly collect, process, or store personal data from minors. Registration on the platform requires your CPF and date of birth, allowing us to verify that you are of legal age at the time of sign-up.

If 45xx identifies by any means that a registered user is under 18 years of age, the account will be closed immediately, all deposited balances will be returned to the original payment method, and any personal data collected will be deleted or anonymized in accordance with applicable minimum legal retention periods.

If you are the guardian of a minor who has improperly created an account on 45xx, please contact us immediately via live chat or at privacidade@45xx.best so we can resolve the matter.

45xx may periodically revise this Privacy Policy to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to our privacy processes. When we make significant changes, registered users will be notified by email at least 15 calendar days before the new terms take effect.

The current version of this Policy is always the one published at /privacy-policy on the 45xx website, showing the corresponding "Last updated" date. We recommend reviewing this Policy periodically to stay informed about how your data is handled.

Your continued use of the 45xx platform after any changes to this Policy are published constitutes your acceptance of the new terms. If you do not agree with the changes, you must stop using the platform and request account closure before the effective date.

45xx has appointed a Data Protection Officer (DPO) as required under Art. 41 of the LGPD. The DPO serves as the point of contact between 45xx, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD).

For questions, requests, or complaints regarding the processing of your personal data by 45xx, please use the channels below: