Privacy Policy of the 355betapp – Your Data Protected with Transparency

1Who We Are – Data Controller

The controller of personal data collected through the 355betapp is the operating company of the website 355betapp.best. The 355betapp is responsible for defining the purposes and means of processing personal data of Brazilian users, in compliance with the LGPD.

For privacy and data protection matters, the official contact channel is contato@355betapp.best. The data protection officer (DPO) is available to respond to data subject requests within 15 calendar days, as required by Brazilian law.

This policy applies to all users of the 355betapp, regardless of the device used — Android phone, iPhone, computer, or tablet — or which service is being accessed.

2Data We Collect

The 355betapp collects different categories of personal data depending on how the user interacts with the platform. The table below outlines the categories, examples, and source of each type of data collected:

The 355betapp does not collect sensitive data as defined under Article 5, Item II of the LGPD — such as racial origin, religious belief, political opinion, health data, or biometrics — beyond what is strictly necessary for identity verification (document photo and selfie).

3How We Use Your Data

The personal data collected by the 355betapp are used exclusively for the purposes listed below. No additional use is made without a new legal basis or the data subject's explicit consent:

• Account operation: creation, authentication, and management of the user profile on the platform;
• Payment processing: deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED bank transfer;
• Identity verification (KYC): compliance with legal obligations for user identification and anti-money laundering;
• Bonus calculation and crediting: verification of rollover completion and promotion credits to the user's wallet;
• Fraud prevention: detection of multiple accounts, bonus abuse, and suspicious activity;
• Service communications: notifications about your account, processed withdrawals, security alerts, and important updates;
• Marketing communications: bonus offers, Brasileirão, UFC, and blackjack promotions – only with your consent, which can be withdrawn at any time;
• Compliance with legal obligations: responding to requests from competent authorities, compliance with Brazilian tax and regulatory legislation;
• Platform improvement: aggregated and anonymized usage analysis to improve features and user experience.

4Legal Basis for Processing

As required by the LGPD, every data processing operation carried out by the 355betapp has a specific legal basis. The main bases used are:

• Contract performance (art. 7, V): processing necessary to operate your account, process bets, calculate bonuses, and execute withdrawals. This basis covers the majority of platform operations;
• Compliance with a legal obligation (Art. 7, II): KYC identity verification, retention of financial records required by tax law, and communication with authorities in the context of investigations;
• Legitimate interest (Art. 7, IX): fraud prevention, detection of multiple accounts, and improvement of platform security for all users;
• Consent (Art. 7, I): sending marketing communications and promotions via email or mobile. This consent may be withdrawn at any time through account settings or by emailing contato@355betapp.best.

If the legal basis for any processing activity changes — for example, due to a regulatory update — the 355betapp will notify users with at least 30 days' prior notice.

5Data Sharing with Third Parties

The 355betapp does not sell or trade its users' personal data. Sharing occurs only in the situations outlined below, always with appropriate contractual and technical safeguards in place:

• Payment processors: data required to process transactions via Pix, boleto, credit or debit card, PicPay, and Mercado Pago. These partners are contractually obligated to process data solely for payment processing purposes;
• Identity verification providers: KYC data shared with companies specializing in document verification and fraud prevention, operating under data processing agreements with confidentiality clauses;
• Game providers: minimum technical session data shared with Evolution Gaming, Pragmatic Play, and other certified game providers, required to authenticate the session and ensure the integrity of results;
• Competent authorities: when required by court order, determination of the Central Bank, Federal Revenue Service, or other competent Brazilian regulatory authority. The 355betapp will notify the user about such requests whenever legally permitted;
• Independent auditors: aggregated and anonymized information shared with compliance audits and game certification bodies — no identifiable data is transmitted.

All third parties that receive user data from 355betapp are subject to data processing agreements that require security standards equivalent to those applied internally by the platform.

6Cookies and Tracking Technologies

The 355betapp uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for session authentication, login security, and basic platform functionality. They cannot be disabled without compromising use of the service;
• Functionality cookies: store preferences such as language, interface settings, and betting limits defined by the user;
• Analytics cookies: collect aggregated and anonymized data about how users navigate the platform — which sections they visit, session duration, and devices used — for product improvement purposes. No personally identifiable data is collected by these cookies;
• Security cookies: detect suspicious behavior, unauthorized access attempts, and patterns associated with fraud or the use of multiple accounts.

The 355betapp does not use third-party advertising cookies and does not allow external ad networks to install behavioral tracking cookies on users' devices through the platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the platform from functioning properly. For questions about specific cookies, contact us at contato@355betapp.best.

7Data Storage and Security

The personal data of users of the 355betapp are stored on servers with the following security controls:

• Encryption at rest (AES-256) for all stored sensitive data;
• In-transit encryption (TLS 1.3 / SSL 256-bit) for all data transmitted between the user's device and our servers;
• Role-based access control (RBAC): only staff members with a justified operational need are granted access to personally identifiable data;
• Continuous access monitoring and audit logs for all operations involving personal data;
• Encrypted backups stored at a separate geographic location, with periodic restoration tests;
• Penetration testing and security audits conducted periodically by an independent specialized firm.

The 355betapp recommends that users protect their login credentials with strong passwords and enable two-factor authentication (2FA), available in account settings. Emergency account lockout support is available 24/7 if unauthorized access is suspected.

8Data Retention and Deletion

The 355betapp retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods:

• Active account data: retained for as long as the account remains active and for the statute of limitations period for any potential claims after closure (minimum of 5 years);
• Financial transaction records: retained for a minimum of 5 years in accordance with Brazilian tax and financial legislation;
• KYC Data: retained for the period required by anti-money laundering regulations (minimum of 5 years after the end of the relationship);
• Access logs: retained for 6 months in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
• Support communications: retained for 2 years for quality management and dispute resolution purposes.

Once retention periods expire, data is securely and irreversibly deleted or anonymized for statistical purposes. Requests for early deletion will be honored provided they do not conflict with legal retention obligations – in which case, the 355betapp will explain to the user which data must be retained and the legal basis for doing so.

9Your Rights as a Data Subject (LGPD)

The LGPD grants personal data subjects a set of rights that the 355betapp is committed to fully honoring. You may exercise any of the rights below by emailing contato@355betapp.best with the subject line "LGPD Request – [type of right]":

The 355betapp will respond to all data subject rights requests within 15 calendar days. If a request cannot be fully fulfilled — for example, due to a legal data retention obligation — the team will provide a clear written explanation of the reasons.

If you believe that the 355betapp has not adequately responded to a request, you may file a complaint with the National Data Protection Authority (ANPD), as provided under Article 18 of the LGPD.

10Minors

The services of the 355betapp are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from minors. Registration requires a declaration of legal age, and identity verification confirms the date of birth before withdrawals are enabled.

If the 355betapp identify that a minor's data has been inadvertently collected, the account will be immediately suspended, the data will be deleted, and any real BRL balance deposited will be returned to the documented legal guardian. Legal guardians who identify unauthorized access to the platform by a minor should contact support via live chat or by email at contato@355betapp.best for immediate resolution.

11International Data Transfer

Some service providers used by the 355betapp – such as live game providers (Evolution Gaming, Pragmatic Play) and IT infrastructure services – may operate servers outside Brazil. In such cases, the 355betapp ensures that international data transfers occur only when:

• The destination country offers a level of data protection equivalent to Brazil's, as assessed by the ANPD; or
• Data transfer agreements incorporating protections equivalent to the LGPD have been executed with the recipient; or
• The transfer is necessary to fulfill the service agreement, and the user was informed in advance.

The 355betapp maintains an up-to-date record of all international data transfers and makes this information available upon request at contato@355betapp.best. Sensitive financial data (Pix keys, banking details) is never transferred to servers outside Brazil.

12Changes to This Privacy Policy

The 355betapp may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian law, or improvements to the services offered.

Significant changes will be communicated via the registered email address and through an in-platform notification at least 15 calendar days before taking effect, except where immediate legal or regulatory requirements make that timeline unfeasible. In such cases, users will be notified at the earliest possible opportunity.

Continued use of the platform after changes take effect constitutes acknowledgment and acceptance of the updated terms. If you disagree with a significant change, you may request account closure before the effective date. The current version of this policy is always available at /privacy-policy, with the last updated date displayed at the top of the document.

13Contact and Data Protection Officer (DPO)

To exercise any right provided under the LGPD, report a security incident, ask questions about this policy, or send any communication related to the privacy of your data on the 355betapp, use the channels below:

• Email: contato@355betapp.best (subject line: "Privacy" or "LGPD Request");
• Live chat: available 24 hours a day on the platform, with a response time of under 3 minutes;
• Response timeframe: up to 15 calendar days for data subject rights requests; up to 3 minutes on chat for general inquiries.

The data protection officer (DPO) of the 355betapp is responsible for ensuring day-to-day compliance with this policy and the LGPD. Complaints that are not satisfactorily resolved through internal channels may be escalated to the National Data Protection Authority (ANPD), as provided under Brazilian law.