🔐 LGPD – LAW No. 13,709/2018

Privacy Policy of 5yyy: Your Data Protected

At the 5yyy, privacy is not fine print — it is a real commitment. This document explains what data we collect, why we need it, how we protect it and what rights you have under the LGPD.

Last updated: January 1, 2026
Brazilian Portuguese Version

What This Policy Covers

Six key points before diving into the full document

SECURITY 🔒
256-bit SSL Encryption Across the Board

All communication between your mobile device or computer and the servers of 5yyy is protected by 256-bit SSL encryption. Financial data and identity documents have additional layers of protection at rest.

SHARING 🚫
Your Data Is Never Sold

The 5yyy does not sell, rent, or trade your personal data with third parties for marketing purposes. Sharing occurs only with essential operational vendors and as required by law, with contractual confidentiality guarantees in place.

LGPD ⚖️
Full LGPD Compliance

This policy was drafted in compliance with the General Data Protection Law (Lei nº 13.709/2018). The 5yyy has a Data Protection Officer (DPO) responsible for ensuring that user rights are respected.

RIGHTS ✅
You Control Your Own Data

At any time, you can access, correct, export or request the deletion of your personal data on the 5yyy. These rights are guaranteed by the LGPD and can be exercised directly through the platform's support.

COOKIES 🍪
Transparent and Manageable Cookies

The 5yyy uses cookies to keep your session active, enhance your experience on the platform, and analyze site performance. You can manage your cookie preferences at any time in your account settings.

Important: This Privacy Policy is an integral part of the Terms and Conditions of the 5yyy. By creating your account, you also agree to the provisions described here.

1. Who We Are and How We Fall Under the LGPD

The 5yyy is a Sports Betting and online casino platform operating with a focus on the Brazilian market. For the purposes of the General Data Protection Law (Lei nº 13.709/2018 — LGPD), the 5yyy acts as controller of the personal data collected from users — meaning we determine the purposes and means by which your data is processed.

This means we have clear responsibilities toward you: ensuring your data is collected transparently, used only for the stated purposes, protected with appropriate technical measures and deleted when no longer needed. The 5yyy has appointed a Data Protection Officer (DPO) as the communication channel between you, us, and the National Data Protection Authority (ANPD).

The entire operation of the 5yyy — from processing deposits via Pix and boleto to analyzing bets on Brasileirão, Superliga, and NBB matches — involves the handling of personal data. This policy explains clearly and directly how that works, without unnecessary jargon.

2. What Personal Data We Collect

The 5yyy collects personal data at different points throughout your journey on the platform. The table below summarizes the main categories:

Category Data Examples When It Is Collected
Registration data Full name, email, CPF, date of birth, address At registration
Identity data National ID, driver's license, passport, verification selfie, proof of address During KYC verification
Financial data Pix key, card details (tokenized), transaction history On deposits and withdrawals
Usage data Betting history, games accessed, session duration, preferences While using the platform
Technical data IP address, device type, browser, operating system, cookies Automatically
Communication data Support messages via chat, emails, call records When contacting support

2.1 Data We Do Not Collect

The 5yyy does not collect data considered sensitive under the LGPD — such as racial or ethnic origin, religious beliefs, health data, or sexual orientation — unless strictly required by a specific legal obligation and with your express consent. Biometric data is collected only when required by the identity verification process and is handled with an additional layer of protection.

3. How We Use Your Personal Data

The 5yyy uses your personal data exclusively for the following purposes:

  • Operate your account: Create, maintain, and manage your access to the platform, including authentication, preferences, and settings.
  • Process financial transactions: Process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers from banks such as Nubank, Itaú, Bradesco, and Banco do Brasil, as well as requested withdrawals.
  • Verify identity (KYC): Meet legal anti-money laundering obligations and verify that only users aged 18 and over have access to the platform.
  • Provide support: Responding to your questions, resolving issues and communicating relevant information about your account.
  • Ensuring security: Detect and prevent fraud, unauthorized access, and behavior that violates the Terms and Conditions.
  • Meet regulatory obligations: Comply with legal, judicial, and regulatory requirements applicable to the betting sector in Brazil.
  • Improve the platform: Analyze usage behavior in an aggregated and anonymized form to improve the browsing experience, technical performance and relevance of displayed content.
  • Marketing communications: Send relevant offers, bonuses, and promotions by email or notification — only if you have not opted out of such communications.
IMPORTANT NOTE
Optional Marketing — You Decide
Marketing communications from 5yyy are sent only to users who have not opted out of the list. You can unsubscribe at any time by clicking "unsubscribe" in any email you receive, or by accessing the notification settings in your account.

4. Legal Bases for Processing (LGPD)

The LGPD requires that all personal data processing have a specific legal basis. The 5yyy processes your data based on the following grounds set out in Article 7 of the law:

📄
Contract Performance

Data required to operate your account, process bets and payments — the primary basis for operational data processing.

⚖️
Legal Obligation

KYC, anti-money laundering compliance (Lei nº 9.613/1998), and fulfillment of judicial and regulatory orders.

🛡️
Legitimate Interest

Fraud prevention, platform security, aggregated technical performance analysis, and product improvement.

✋
Consent

Sending marketing communications and processing specific sensitive data when required by law or by context.

5. Sharing Data with Third Parties

The 5yyy does not sell your personal data. Sharing only occurs in the situations described below, with vendors who have signed data processing agreements ensuring confidentiality and compliance with the LGPD:

  • Payment processors: To process transactions via Pix, credit/debit card, boleto bancário, PicPay, and Mercado Pago, we share strictly necessary financial data with our approved payment partners.
  • Identity verification (KYC) providers: Specialized document verification services that help us meet our legal obligations around fraud prevention and anti-money laundering.
  • Technology and infrastructure providers: Hosting, security, performance monitoring and technical log analysis services — with no access to betting content or individualized financial data.
  • Competent authorities: When required by law, court order, or regulatory directive, the 5yyy shares the requested information with authorities such as the Financial Activities Control Council (COAF) and other Brazilian regulatory bodies.
  • Casino game providers: To enable live casino, slots, and crash games, session technical data is shared with content providers under confidentiality agreements.

Please note: No personal data from the 5yyy is shared with third-party advertising networks, data brokers or social media platforms for commercial targeting purposes.

6. How Long We Retain Your Data

The 5yyy retains your personal data for as long as necessary to fulfill the purposes described in this policy and comply with applicable legal obligations. The general retention periods are:

Data Category Retention Period Reason
Registration and identity data 5 years after account closure Legal obligation (AML/KYC)
Financial transaction history 5 years Law No. 9.613/1998 and the Federal Revenue Service
Betting history 2 years after the bet Dispute resolution
Technical and access logs 6 months Security and diagnostics
Support communications 2 years Support history
Marketing data (with consent) Until consent is withdrawn Consent

Once the applicable retention period expires, data is securely deleted or anonymized in a way that prevents re-identification of the data subject.

7. How We Protect Your Data

The 5yyy implements multiple layers of technical and organizational security to protect your personal data:

  • SSL/TLS 256-bit Encryption across all communication between your device and the platform's servers.
  • Encryption at rest for sensitive data at rest, including KYC documents and card data (tokenized via PCI-DSS certified partners).
  • Two-factor authentication (2FA) available to all users in the account settings.
  • Role-based access control — only team members with a justified operational need are granted access to personal data, with access auditing in place.
  • Anomaly monitoring 24 hours a day to detect unauthorized access attempts, suspicious activity, and fraud patterns.
  • Regular security testing, including penetration testing (pentest) carried out by specialized third-party firms.
  • Incident response plan with notification to the ANPD and affected users in the event of a relevant security incident, within the timeframes established by the LGPD.
SECURITY INCIDENT
What We Do in the Event of a Data Breach
In the event of a security incident that may cause significant risk or harm to users, the 5yyy will notify the ANPD and affected users within a reasonable timeframe, as required by Article 48 of the LGPD. The notification will include the nature of the affected data, the technical measures taken, and contact details for further clarification.

8. Your Rights as a Data Subject

The LGPD grants you a robust set of rights regarding your personal data held by the 5yyy. You may exercise them at any time, free of charge:

🔍
Confirmation and Access

Confirm whether we process your data and access a copy of all the information we hold about you.

✏️
Correction

Request the correction of incomplete, inaccurate or outdated data in your 5yyy account 5yyy.

🗑️
Erasure

Request the deletion of data processed on the basis of consent, subject to mandatory legal retention periods.

📦
Portability

Receive your data in a structured, commonly used format for transfer to another data controller.

ℹ️
Sharing Information

Know which public and private entities the 5yyy shared your personal data.

🚫
Objection and Withdrawal

Object to processing or withdraw previously given consent, where the legal basis is consent.

To exercise any of these rights, please contact our Data Protection Officer by email at suporte@5yyy.best or via live chat within the platform. The 5yyy will respond within 15 calendar days, as required by the LGPD. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice to the data subject.

9. Cookie Policy

The 5yyy uses cookies and similar technologies to ensure the platform works properly, personalize your experience, and analyze the site's technical performance. Below we describe the types of cookies used:

You can manage and revoke non-essential cookies in your account settings or your browser settings. Disabling strictly necessary cookies may affect the platform's functionality, including access to the betting area and the Pix withdrawal process.

10. Minors

The 5yyy is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account was created by a minor, it will be closed immediately and all collected data will be deleted. If you are the guardian of a minor and believe they have created an account on 5yyy, please contact our support team immediately at suporte@5yyy.best so we can act quickly.

11. International Data Transfers

Some of the technologies used by the 5yyy — such as cloud infrastructure services and performance analytics platforms — may result in data being processed on servers located outside Brazil. In such cases, the 5yyy ensures that:

  • International transfers are carried out only to countries that provide an adequate level of data protection, or on the basis of specific contractual clauses that guarantee the same level of protection required by the LGPD.
  • International vendors involved are contractually bound to data protection obligations compatible with the Brazilian LGPD.
  • Identity data, KYC documents, and detailed financial information are stored primarily on servers located in Brazil or within the European Union (with equivalent protection under the GDPR).

12. Changes to This Privacy Policy

The 5yyy may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the structure of our services. Any material change will be communicated via registered email at least 7 calendar days before taking effect. The date of the last update will always be shown at the top of this document.

Continued use of the platform after the effective date of any changes will be considered acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date and request a refund of your available balance via Pix.

13. Contact, Data Protection Officer (DPO) & ANPD

To exercise your rights, ask questions about this policy, or report any issue related to the processing of your personal data by the 5yyy, please reach out through the channels below:

  • DPO Email: suporte@5yyy.best (subject line: "Data Protection – LGPD")
  • Live chat: Available 24/7 within the platform, after login.
  • Response time: Up to 15 calendar days from receipt of the request.

If you are not satisfied with the response from 5yyy, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil, accessible through the official federal government website.

Current version as of January 1, 2026

This policy supersedes all previous versions published by the 5yyy. The most current version will always be available on this page.

View Terms & Conditions

Your LGPD Rights at 5yyy

A practical overview of how to exercise each right guaranteed under Law No. 13.709/2018

How to Request Access to Your Data

Send an email to suporte@5yyy.best with the subject line "Access to My Data – LGPD" including the CPF linked to your account. The 5yyy will respond within 15 days with a complete report of the data we hold about you.

The report includes: registration data, financial transaction history, betting history, technical data collected, and records of communications with support.

How to Request Deletion of Your Data

Send an email to suporte@5yyy.best with the subject line "Data Deletion – LGPD". After verifying your identity, the 5yyy will delete the data for which consent is the legal basis, retaining only the data whose retention is required by law.

Financial and KYC data are retained for 5 years after account closure in compliance with Brazilian anti-money laundering laws — this applies regardless of any deletion request you submit.

Common Privacy Questions at 5yyy

The most common questions from users about how we handle their data

No. The 5yyy does not sell, rent, or trade your personal data with third parties for any commercial purpose. Data is shared only with operational vendors who need it to deliver services such as Pix payment processing and identity verification — and those vendors are bound by strict confidentiality and data protection contracts.

Yes. Your full betting history — including amounts, odds, results, and dates — is available in your account and is retained for 2 years after each recorded bet. This history is useful for tracking your performance, and for the 5yyy resolve any disputes over results. You can access your full history at any time under "My Bets" within your account.

The 5yyy may send communications about promotions, bonuses, and platform updates via email or push notification. These communications are sent only to users who have not opted out of the marketing list. You can unsubscribe at any time by clicking "unsubscribe" in any email you receive, or by adjusting your notification preferences in your account settings. We do not share your data with external advertising networks.

After account closure, the 5yyy retains data for the minimum period required by law — up to 5 years for financial and KYC data, in compliance with Brazilian anti-money laundering legislation (Law No. 9.613/1998). Data with no legal retention obligation is deleted within 90 days of account closure. Once retention periods expire, all data is securely deleted or irreversibly anonymized.

The Pix key provided for withdrawals is stored in encrypted form on the servers of 5yyy and used exclusively to process withdrawals requested by you. The Pix key cannot be used for any other purpose within or outside the platform. You can update or remove the saved key at any time in your account settings, under the Deposits and Withdrawals section.

In the event of a security incident that could cause significant risk or harm, the 5yyy will notify affected users via registered email within a reasonable timeframe. The notification will include a description of the compromised data, what happened, the immediate measures taken, and guidance on how to protect yourself — such as changing your password and enabling two-factor authentication. The 5yyy will also notify the ANPD within the timeframes set out in the LGPD.
LGPD Compliance
SSL 256-bit
Appointed DPO
Data Not Sold
24/7 Support
+18 Years

Privacy in order. Ready to get started?

Create your free account at 5yyy, deposit via Pix and enjoy betting on the Brasileirão, Superliga, NBB and over 30 sports — with full transparency about how your data is handled.

Gambling is only permitted for users aged 18 and over. Bet responsibly. Responsible Gaming

Português