Privacy Policy 5853c — Your Data Belongs to You

A 5853c is the operator of the Sports Betting and online casino platform available at 5853c.best. For LGPD purposes, 5853c is the controller of personal data collected during registration, platform use, deposits and withdrawals via Pix, bank slip, credit or debit card, PicPay, Mercado Pago, and other available methods, as well as during any interaction with customer support.

The Data Protection Officer (DPO) of 5853c is the official point of contact for all requests relating to personal data. The DPO's contact information is available in section 12 of this policy.

A 5853c collects only the data necessary to provide the contracted services and comply with applicable legal obligations. Data is collected in three ways: information provided directly by the user, data automatically generated through platform use, and data received from third-party partners.

Credit or debit card data is never stored directly on the servers of the 5853c. Processing is carried out by PCI-DSS certified gateways that receive and tokenize data before any storage, ensuring that sensitive payment information is never exposed within the platform's systems.

A 5853c uses collected data exclusively for the purposes described below. No personal data is used for any purpose not listed here without the user's express consent.

• Account creation and management: verify identity, validate CPF, process registration, and keep the user profile up to date.
• Transaction processing: process deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago; process withdrawals via Pix to Nubank, Itaú, Bradesco, Banco do Brasil, and other partner banks.
• Service provision: offer Sports Betting, Live Casino, slots, crash games, e-sports, and all other platform features.
• Security and fraud prevention: monitor usage patterns to detect suspicious activity, money laundering, bot usage, or multiple accounts.
• Responsible gambling: monitor gameplay patterns to identify signs of problematic behavior and, when necessary, trigger protective tools such as session alerts and deposit limits.
• Customer support: answer inquiries, process complaints, and improve service quality based on interaction history.
• Marketing communications: only with explicit consent — sending promotions, available bonuses, and updates on events such as Copa do Brasil, UFC, and CBLOL. Users may opt out at any time.
• Legal obligations: comply with requirements from regulatory bodies, Brazilian tax authorities, and court orders.

All collection and use of personal data by the 5853c is grounded in at least one of the legal bases set out in the LGPD (Art. 7 and Art. 11). The applicable legal basis varies depending on the purpose of the processing:

• Contract performance (Art. 7, V): processing required to deliver the services the user contracted upon registering on the platform — including bet processing, deposits, and withdrawals.
• Compliance with a legal obligation (Art. 7, II): data required by Brazilian legislation applicable to the online betting and entertainment sector, anti-money laundering regulations (Law No. 9,613/1998), and tax obligations.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, service improvement, and usage pattern analysis — provided that 5853c's legitimate interests do not override the user's fundamental rights.
• Consent (Art. 7, I): sending marketing communications, personalizing offers, and using non-essential cookies. Consent may be withdrawn at any time without affecting core services.
• Credit protection (Art. 7, X): where applicable for risk analysis in high-value financial transactions.

A 5853c does not sell users' personal data to third parties. Data sharing occurs only in the situations described below and always with appropriate safeguards:

• Payment providers: PCI-DSS certified payment gateways that process transactions via Pix, credit/debit card, PicPay, and Mercado Pago. They receive only the data necessary to complete the transaction.
• Game providers: Evolution Gaming, Pragmatic Play Live, Spribe, and other casino and betting content providers receive anonymized session identifiers required for the technical operation of the games. They do not receive personally identifiable user data.
• KYC and anti-fraud services: specialized partners in identity verification and fraud detection that process documents submitted during the verification process, under confidentiality agreements and in compliance with the LGPD.
• Competent authorities: when required by law, court order, financial crime investigation, or determination by a Brazilian regulatory authority. 5853c cooperates fully with the authorities within the limits of the law.
• Infrastructure services: hosting, CDN, and cloud service providers that process data as part of the platform's technical infrastructure, always under active Data Processing Agreements (DPA).

A 5853c retains users' personal data for as long as necessary for the purposes described in this policy, in accordance with the minimum retention periods required by Brazilian law.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized. Anonymization ensures the data can no longer be linked to an identifiable individual, allowing it to be used for statistical and platform improvement purposes without any privacy risk.

A 5853c implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place include:

• Encryption in transit: all communications between the user's device and 5853c's servers are encrypted with TLS 1.3 and a 256-bit SSL certificate. The padlock icon in your browser confirms the connection is secure.
• Encryption at rest: sensitive data stored on 5853c servers is encrypted at rest using AES-256 standards.
• Access control: only employees with a legitimate need for access may view users' personal data. Access is controlled by multi-factor authentication and logged in auditable records.
• Continuous monitoring: intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor the platform infrastructure in real time to identify and block unauthorized access attempts.
• Security testing: the 5853c platform undergoes regular penetration testing (pentest) by independent specialized firms to identify and remediate vulnerabilities before they can be exploited.
• Secure backups: critical data is included in encrypted backup routines with retention on geographically redundant infrastructure, ensuring service continuity even in the event of a technical incident.

Although the 5853c take every reasonable measure to protect your data, no system is entirely immune to failure. We also recommend that you follow good security practices on your end: use a strong password, enable two-factor authentication where available, and never share your login credentials with third parties.

The LGPD grants you, as the data subject whose personal data is processed by 5853c, a set of rights that may be exercised at any time. See all your rights and how to exercise them below:

To exercise any of these rights, send your request to suporte@5853c.best identifying yourself with your registered email and describing the right you wish to exercise. The 5853c will respond within 15 business days. For more complex cases, this period may be extended by an additional 15 days, with prior notice.

The 5853c uses cookies and similar technologies to enhance your browsing experience, keep sessions active, analyze platform usage, and personalize content where authorized. The types of cookies used are:

You can manage your cookie preferences through your browser settings or via the privacy preferences panel available on the 5853c. Disabling essential cookies may affect the proper functioning of the platform.

The services of the 5853c are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from minors.

By registering with 5853c, the user expressly confirms being 18 years of age or older. During the identity verification (KYC) process, the date of birth is checked against the CPF provided. Accounts whose holders are identified as under 18 are immediately closed, deposited funds are held during the investigation, and the case may be reported to the relevant authorities.

A 5853c may update this Privacy Policy periodically to reflect changes in the services offered, Brazilian data protection legislation, industry regulatory requirements, or internal data processing practices.

When significant changes occur — those that materially affect users' rights or the way data is used — 5853c will notify registered users by email at least 7 days before the new version takes effect. The date of the last update is always visible at the top of this page.

For minor changes — such as wording corrections or clarifications that do not alter the substance of data processing — the update may be published directly without prior notice. We recommend visiting this page periodically to stay informed about how the 5853c handles your personal data.

To exercise your rights as a data subject, ask questions about this Privacy Policy, report suspected data breaches, or address any other privacy-related matter on the 5853c, you can use the channels below:

• DPO (Data Protection Officer) Email: suporte@5853c.best — include "LGPD Request" in the subject line for prioritization. Response time: up to 15 business days.
• Live chat: available 24 hours a day on the 5853c platform for urgent matters related to privacy or account security.
• Frequently Asked Questions: the section FAQ of 5853c contains answers to the most common questions about privacy, data security, and how user information is handled.

Requests related to the exercise of LGPD rights should preferably be submitted by email, including the email address registered to the account at 5853c and a clear description of the right you wish to exercise. In some cases, additional identity verification may be required before the request is processed, to ensure we are responding to the legitimate data subject.

This Privacy Policy is governed by Brazilian law, in particular Law No. 13,709/2018 (LGPD) and other applicable regulations. Any disputes relating to privacy will be submitted to the jurisdiction of the Courts of São Paulo/SP.