Privacy Policy of 5gbt – Your Data Protected by the LGPD

This Privacy Policy describes how the 5gbt collects, uses, stores, shares, and protects the personal information of users who access and use the services available at 5gbt.best — including Sports Betting, slots, Live Casino, roulette, crash games, and all other products on the platform.

When you create an account on the 5gbt or when using any feature of the platform, you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described herein. This policy forms an integral part of the 5gbt Terms and Conditions.

The 5gbt collects different categories of personal data depending on how you interact with the platform. Collection is based on specific legal grounds set out in the LGPD — primarily contract performance, compliance with a legal obligation, and legitimate interest.

Registration and Identity Data

• Full name, CPF, and date of birth — required for identity verification and compliance with Brazilian law.
• Email address and mobile number — for authentication, communications, and customer support.
• Full residential address including ZIP code — for proof of residence in Brazil.
• Photo ID (RG, CNH, or passport) and proof of address — collected during the KYC (Know Your Customer) verification process prior to your first withdrawal.
• Selfie or photo for identity verification — requested in specific security verification cases.

Financial and Transaction Data

• Pix key (CPF, email, phone number, random key) for processing deposits and withdrawals.
• Tokenized credit and debit card data — we never store your full card number; we use secure tokens provided by our payment processors.
• Complete history of deposits and withdrawals, including amounts, dates, payment methods used (Pix, boleto bancário, PicPay, Mercado Pago, TED), and the status of each transaction.
• Bank account details linked to TED transfers (bank, branch, account number) — used exclusively for withdrawal processing and fraud prevention.

Platform Usage & Activity Data

• Full Sports Betting history — including events (Brasileirão, Copa do Brasil, Libertadores, UFC, etc.), markets, amounts wagered, and results.
• Casino game history — slots played, roulette, blackjack, baccarat, crash games such as Aviator and Spaceman, amounts wagered, wins, and losses.
• Account settings, gaming preferences, user-defined limits, and change history.
• Session records — login and logout times, gaming session duration, and usage patterns for responsible gambling purposes.

Technical & Device Data

• IP address, browser type and version, and operating system of the device used to access the platform.
• Device identifiers (where applicable) for fraud prevention and multiple-account detection purposes.
• Approximate geolocation data — derived from your IP address to verify geographic eligibility (Brazil).
• Data from cookies and similar technologies — detailed in the dedicated cookies section of this policy.

The 5gbt uses the personal data collected solely for the purposes listed below. No data is used for purposes incompatible with those stated in this policy, as required by the LGPD.

The 5gbt does not use your data for automated decisions that produce significant legal effects without human review — except in cases of automatic geographic eligibility checks and fraudulent activity detection, where human review is triggered immediately whenever an account is blocked.

The 5gbt does not sell, rent, or trade players' personal data. Data is shared with third parties only when strictly necessary for service operations or when required by law, as detailed below:

• Payment processors: Financial data is shared with the processors responsible for each payment method — Pix (Banco Central), credit/debit card operators, PicPay, Mercado Pago, and partner banks — solely to process transactions requested by the user.
• Game providers: Username (never CPF or banking details) may be shared with providers such as Evolution Gaming and Pragmatic Play solely to enable live game sessions.
• Identity verification tools: Documents submitted for KYC are processed by partners specialized in identity verification, bound by confidentiality agreements and LGPD compliance obligations.
• Authorities and regulatory bodies: 5gbt shares data with Brazilian authorities (Federal Police, Public Prosecutor's Office, Central Bank, COAF) when legally required — for example, in money laundering investigations under Lei nº 9.613/1998.
• Infrastructure providers: Hosting, cybersecurity, and data analytics providers acting as data processors under the LGPD, bound by contracts that ensure appropriate data handling.

When data is transferred for processing outside Brazil, the 5gbt ensures that recipient countries or organizations provide an adequate level of protection compatible with the LGPD, as assessed by the National Data Protection Authority (ANPD).

The security of our players' information is an operational priority of 5gbt. We adopt appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or improper destruction.

• Encryption in transit: All traffic between your device and 5gbt's servers is protected by TLS 1.3 with a 256-bit SSL certificate. This covers login, deposits via Pix, boleto, credit/debit card, PicPay and Mercado Pago, and every other interaction with the platform.
• Encryption at rest: Sensitive data stored in 5gbt's databases — such as identity documents and financial information — is encrypted at rest using AES-256 algorithms.
• Access control: Internal access to players' personal data is restricted to staff who genuinely need it to perform their duties — customer support, compliance, and financial operations — and is recorded in an audit log.
• Enhanced authentication: 5gbt offers two-factor authentication (2FA) for all accounts, with additional verification required for withdrawals above certain amounts and for access from new devices.
• Continuous monitoring: Automated systems monitor the platform in real time to detect unauthorized access attempts, suspicious behavior, and activity that may indicate account compromise.
• Financial data tokenization: Credit and debit card numbers are never stored on 5gbt's systems — we use tokens provided by payment processors, which render the data unusable outside the context of the original transaction.

In the event of a security incident that could pose a relevant risk or harm to data subjects, the 5gbt will notify the ANPD and affected users within the timeframes established by the LGPD — in clear, accessible language, with practical guidance on how to protect yourself.

The 5gbt uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and meet security and compliance obligations. The types of cookies used are described below:

Essential cookies cannot be disabled without affecting the platform's functionality. Non-essential cookies — preferences, analytics, and personalization — can be managed in your browser settings or in the privacy preferences of your account on the 5gbt. Disabling analytics cookies does not prevent access to any feature of the platform.

The 5gbt does not use third-party tracking cookies for behavioral advertising or retargeting on other websites or apps. The cookies used are exclusive to the platform and to the operational partners directly required to deliver the service.

The 5gbt retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the mandatory legal retention periods established under Brazilian law:

• Registration and identity data (KYC): Retained for a minimum of 5 years after account closure, as required by anti-money laundering legislation (Law No. 9,613/1998) and Banco Central do Brasil regulations.
• Financial transaction records: Retained for 5 years, in accordance with the tax and regulatory obligations applicable to payment companies in Brazil.
• Betting and game history: Retained for 5 years for audit, dispute resolution, and regulatory compliance purposes.
• Customer support records: Retained for 2 years after the interaction is closed, for reference in the event of subsequent complaints or disputes.
• Cookie and session data: Session cookies are automatically deleted when you close your browser. Persistent preference cookies remain valid for up to 12 months.
• Responsible gambling self-exclusion data: Retained for the duration of the exclusion period plus 5 additional years, to prevent re-registration during or after the self-exclusion period.

Once retention periods have expired, data is securely deleted or irreversibly anonymized in accordance with the technical procedures established by the 5gbt. A deletion request from the data subject may result in the early removal of data not subject to mandatory legal retention.

The LGPD grants you, as the data subject whose personal data is processed by the 5gbt, a robust set of rights that can be exercised at any time, free of charge:

To exercise any of these rights, please contact the 5gbt via live chat on the platform or by email at contato@5gbt.best. The 5gbt responds to all data subject requests within 15 business days, as required by the LGPD. In cases of full or partial denial, we always provide a written justification grounded in the law.

The services of the 5gbt are intended exclusively for individuals aged 18 and over. The 5gbt does not intentionally collect personal data from individuals under 18 and does not allow minors to create accounts or use any feature of the platform.

The identity verification process of the 5gbt — which requires a CPF, date of birth, and a photo ID — is specifically designed to prevent access by minors. Any account identified as belonging to a minor is immediately closed, with any real balance refunded to the legal guardian upon verification.

The 5gbt may update this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable Brazilian law — especially the LGPD — or changes to the services offered.

When we make material changes to this policy, you will be notified at least 10 days in advance via:

• Email sent to the address registered on your 5gbt account.
• A prominent notice displayed at the top of the platform upon login.
• Updating the "last revised" date at the top of this document.

Changes that expand the use of your data for new purposes, or that reduce your rights as a data subject, will require renewed consent where consent is the applicable legal basis. Continued use of the platform after the effective date of the changes constitutes acceptance of the updated policy.

The 5gbt has appointed a Data Protection Officer (DPO), as required by the LGPD for large-scale operators. The DPO is the official channel for:

• Receiving and responding to data subject requests related to the exercise of rights provided under the LGPD.
• Receive communications from the National Data Protection Authority (ANPD).
• Take internal action in response to personal data security breaches.
• To guide 5gbt staff and partners on data protection best practices.

When contacting us to exercise your rights, please have your account CPF and registered email address ready so we can verify your identity before responding — this step is there to protect you, not to create barriers.