Privacy Policy of oi5555 — Your Data, Protected

This Privacy Policy describes how oi5555 — Sports Betting platform, online casino, e-sports, and digital entertainment accessible at the domain oi5555.best — collects, uses, stores, shares, and protects the personal data of its users.

This document is drawn up in accordance with the General Personal Data Protection Law (LGPD — Lei nº 13.709/2018), the Consumer Protection Code (Law No. 8,078/1990), and other applicable legislation in Brazil. oi5555 is committed to transparency in data processing and to fully respecting the rights of data subjects.

By creating an account on oi5555, making a deposit via Pix or boleto, or using any feature of the platform, you confirm that you have read and understood this Policy. If you disagree with any part of it, please do not use the platform and contact our support team for clarification before registering.

This Policy should be read alongside our Terms and Conditions and the Responsible Gaming, which form part of the set of documents governing the relationship between oi5555 and its users.

For the purposes of the LGPD, the oi5555 acts as controller of the personal data collected on the platform — meaning it is the entity that makes decisions about the purposes and means of processing your data.

Oi5555 has appointed a Personal Data Processing Officer (DPO — Data Protection Officer), as provided under Article 41 of the LGPD, who can be contacted regarding data processing matters through the channel indicated in Section 14 of this Policy.

Oi5555 may rely on operators — companies or individuals that process data on behalf of oi5555 in accordance with instructions provided by the controller — such as technology providers, payment processors, and identity verification companies. These processors are engaged under specific data protection clauses and may not use your information for their own purposes.

When you create an account and use the platform, oi5555 collects the following data provided directly by you:

Oi5555 also automatically collects technical data when you use the platform:

• Device data: device type (mobile, tablet, desktop), operating system, browser model and version;
• Network data: IP address, internet service provider, approximate geographic location (state/city) derived from IP;
• Usage data: pages visited, games accessed, session duration, clicks, and interface interactions;
• Transaction data: history of deposits, withdrawals, bets placed, and outcomes recorded in the system.

Oi5555 uses your personal data exclusively for the following purposes:

• Delivery of contracted services: account creation and management, processing deposits and withdrawals via Pix, boleto, card, and TED, participation in games, Sports Betting, and e-sports;
• Identity verification and compliance: compliance with KYC (Know Your Customer), AML (Anti-Money Laundering), and Sports Betting market regulations currently in force in Brazil;
• Platform security: fraud prevention and detection, use of multiple accounts, collusion, and other conduct prohibited under the Terms and Conditions;
• Legal and regulatory obligations: data retention in accordance with legal requirements, and responding to requests from competent judicial or regulatory authorities;
• Customer support: logging and resolving questions, complaints, and requests via chat, email, and WhatsApp;
• Platform improvement: aggregated usage analysis to improve the interface, game performance, and overall experience — using anonymized data whenever possible;
• Marketing communications: sending information about oi5555 promotions, bonuses, and news — only with your explicit consent, which may be revoked at any time.

Oi5555 does not use your data for purposes incompatible with those listed above without a new express consent from the data subject.

Every data processing operation carried out by oi5555 is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance: data required to create an account, process deposits and withdrawals, and enable participation in games and bets — without this data, the service cannot be provided;
• Compliance with a legal obligation: data required under KYC, AML, and sports betting market regulations, which oi5555 is legally obligated to comply with regardless of user preference;
• Legitimate interest: fraud prevention, platform security, and usage pattern analysis to improve the service — always balanced against the rights and expectations of data subjects;
• Consent: marketing communications via email, SMS, or WhatsApp, use of non-essential cookies — revocable at any time without affecting other services.

Oi5555 does not sell, rent, or share your personal data with third parties for those third parties' own commercial purposes. Sharing only takes place in the situations listed below, with the necessary safeguards in place:

• Certified game providers (Pragmatic Play, Evolution, NetEnt, PG Soft, Microgaming, and others): only the minimum data needed to authenticate the game session — user identifier and balance information. These providers have no access to your CPF, address, or financial data;
• Payment processors: data required to process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, as required by each payment operator. oi5555 uses PCI-DSS certified gateways for card processing;
• Identity verification providers: documents and selfies shared during the KYC process with specialized third-party companies hired to verify document authenticity. These companies are bound by contracts with specific data protection clauses;
• Competent authorities: data shared when required by court order, regulatory authority request, or legal obligation — oi5555 notifies the data subject when legally permitted to do so;
• Auditors and consultants: professionals involved in compliance audits or legal proceedings, bound by confidentiality agreements.

Oi5555 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal and regulatory obligations:

• Active account data: retained for the full duration of the active oi5555 account;
• Data after account closure: retained for up to 5 years after closure, to meet legal, tax, and AML obligations as required by regulation;
• KYC data: retained in accordance with regulatory requirements for the betting market, generally for 5 years after the last transaction;
• Support data: chat history retained for up to 2 years after the session is closed, for quality assurance and dispute resolution purposes;
• Non-essential cookies: expire according to the durations indicated in the cookies section of this Policy.

Data that is no longer needed is securely deleted or anonymized so it can no longer be linked to a specific individual. Deletion requests submitted by the data subject are processed within the legal timeframes, subject to mandatory retention obligations.

Oi5555 adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction:

• 256-bit SSL/TLS Encryption on all data transmissions between your device and oi5555's servers — the padlock in your browser confirms this protection;
• Role-based access control: staff and systems only have access to the data required for their specific roles;
• Continuous monitoring of access events and security activity, with automated alerts for anomalous behavior;
• Penetration testing and periodic security audits conducted by independent specialized firms;
• Two-factor authentication (2FA) available for users who want to add an extra layer of protection to their account;
• Card processing via PCI-DSS gateway certified — oi5555 never stores complete credit or debit card details on its servers.

In the event of a security incident that may affect the rights and freedoms of data subjects, oi5555 will notify the ANPD and the affected individuals within the timeframes established by the LGPD, including information about the nature of the incident and the measures taken.

Oi5555 uses cookies — small text files stored on your device — and similar technologies to keep the platform running and improve your experience. Below are the categories we use:

Oi5555 does not use third-party behavioral advertising cookies. You can manage your cookie preferences in your account settings or through your browser options. Disabling essential cookies may prevent the platform from working properly.

Oi5555 is a platform exclusively for users aged 18 years old. oi5555 does not intentionally collect personal data from anyone under the age of 18. Registration requires a valid CPF, and date of birth verification is performed automatically at the time of registration and confirmed during the KYC process.

If oi5555 identifies that data from a minor was inadvertently collected, the data will be immediately deleted and the account closed, in accordance with Terms and Conditions. Parents or guardians who suspect a minor has created an account on oi5555 should contact support immediately at contato@oi5555.best.

To exercise any of the rights guaranteed by the LGPD, follow the procedure below:

1. Send an email to contato@oi5555.best with the subject line "LGPD — [request type]" (e.g., "LGPD — Data Access" or "LGPD — Data Deletion");
2. In the body of the email, include your full name, CPF, and the email address registered to your oi5555 account;
3. Clearly describe the right you wish to exercise and, where applicable, specify which data or purposes are the subject of your request;
4. Oi5555 may request additional documentation to verify the account holder's identity before processing a request — this step is required to protect you from unauthorized requests made by third parties;
5. The response time is up to 15 calendar days after the data subject's identity has been verified, as provided under the LGPD.

If oi5555 is unable to fulfill the request — for example, when data retention is required by law — you will be informed of the reason and may, if you wish, file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

Some service providers used by oi5555 — such as game providers and technology infrastructure partners — may process data on servers located outside Brazil. When this happens, oi5555 ensures the transfer is covered by one of the safeguards set out under the LGPD:

• Transfer to countries with an adequate level of data protection, as recognized by the ANPD;
• Agreements with standard contractual data protection clauses;
• Specific guarantees provided by the recipient regarding their data security and protection policy.

Oi5555 does not transfer data to jurisdictions that lack adequate data protection safeguards. If you have questions about specific transfers, please contact the DPO through the channel indicated in section 14.

Oi5555 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or platform features. The date of the latest revision is always shown at the top of the document.

Material changes — those that significantly affect data subjects' rights or the purposes of processing — will be communicated with a minimum advance notice of 7 calendar days by email to all registered users and via in-platform notification. Continued use of the services after that date constitutes acceptance of the updated Policy.

Previous versions of this Policy are available upon request to the DPO through the channel indicated in section 14.

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report a security incident, please contact the Personal Data Processing Officer (DPO) of oi5555:

• Privacy channel email: contato@oi5555.best — use the subject line "LGPD" so your message is routed to the privacy team;
• Live chat: available 24 hours a day on the platform — request to be directed to the privacy team;
• Response timeframe: up to 15 calendar days for formal requests to exercise rights; up to 5 business days for general privacy inquiries.

Oi5555 treats privacy requests with the same seriousness as any other critical platform matter. Every legitimate LGPD rights request receives a response within the legal deadline.