Hh555 Privacy Policy – Data Protection in Brazil

1Who We Are and the Scope of This Policy

Hh555 is a Sports Betting and online casino platform operated for users residing in Brazil. Throughout this document, references to "hh555", "we", or "our platform" refer to the company responsible for operating the hh555.life website and all digital services made available through it.

This Privacy Policy applies to all personal data collected by hh555 when you browse the site, create an account, place bets, play at the casino, contact support, or use any other feature of the platform. It also applies to data collected through cookies and similar tracking technologies.

We are committed to handling your data to the highest standards of security and transparency, fully respecting your rights under the Lei Geral de Proteção de Dados Pessoais (LGPD — Lei nº 13.709/2018) and all other applicable Brazilian regulations. If you have any questions about this Policy, please contact our Data Protection Officer (DPO) at suporte@hh555.life.

2What Personal Data We Collect

Hh555 collects only the data strictly necessary to provide, operate, and improve the platform's services. Collection happens both directly (when you provide information yourself) and indirectly (through your use of the platform). The main types of data collected are outlined below:

Hh555 does not collect sensitive data such as racial or ethnic origin, religious beliefs, health information, or sexual orientation, except where expressly required to fulfill a specific legal obligation.

3How We Use Your Personal Data

Data collected by hh555 is used exclusively for the purposes described below. No personal information is used in a way that is incompatible with the purpose for which it was collected:

• Operate the account: creation, maintenance, and management of your hh555 user account, including authentication, password recovery, and profile settings;
• Process transactions: deposits via Pix, boleto bancário, credit or debit card, Mercado Pago, PicPay, and TED bank transfer, as well as withdrawal and refund processing;
• Identity verification (KYC): confirming eligibility to use the platform, preventing fraud, and meeting legal anti-money laundering obligations;
• Personalize the experience: displaying offers, odds, and content relevant to your usage profile — such as Brasileirão bets, your favorite slots, or Live Casino markets you visit frequently;
• Communications: sending transaction confirmations, account notifications, security alerts, and — with your consent — promotional communications about hh555 bonuses and offers;
• Responsible gaming: usage pattern monitoring to identify behaviors that may indicate a need for support, in line with our responsible gambling guidelines;
• Security and fraud prevention: detection and prevention of unauthorized access, platform misuse, and other fraudulent activity;
• Platform improvements: aggregated and anonymized usage analysis to develop new features, resolve technical issues, and improve the overall hh555 experience;
• Legal compliance: compliance with obligations under Brazilian law, including responding to court orders and requests from competent authorities.

4Legal Basis for Data Processing (LGPD)

The LGPD requires every instance of personal data processing to have a specific legal basis. hh555 grounds its data processing on the following bases set out in Art. 7 of Law No. 13,709/2018:

• Contract performance: processing is necessary to perform the platform's terms of use — this covers account creation, bet processing, deposits, and withdrawals;
• Compliance with a legal obligation: processing is required by law — this includes identity verification (KYC), anti-money laundering measures, and reporting to authorities as required under Brazilian law;
• Legitimate interest: the processing is necessary to protect the platform against fraud, ensure user safety, and conduct internal improvement analysis — always in respect of your rights and reasonable expectations;
• Consent: for sending promotional communications and using non-essential cookies, processing is based on your express consent, which can be withdrawn at any time.

5Data Sharing with Third Parties

Hh555 does not sell, rent, or trade your personal data. Information is shared with third parties only in the specific situations described below, and always with appropriate safeguards in place to protect your privacy:

• Payment processors: your financial data is shared with payment service providers (such as Pix operators, Mercado Pago, and card processors) solely to process deposits and withdrawals on the platform;
• Identity verification providers: document data is shared with certified KYC services to verify your eligibility and prevent fraud;
• Game providers: technical session data is shared with casino and slots game providers to ensure games run correctly and results are processed properly;
• Analytics and security services: technical and usage data is shared with analytics and fraud detection tools to improve the platform and protect users;
• Competent authorities: data may be shared with regulatory bodies, law enforcement, or judicial authorities when required by law or a valid court order;
• Responsible gaming: in cases of voluntary self-exclusion requested by the user, minimum data may be shared with self-exclusion registries recognized in Brazil.

All service providers that access hh555 user data are bound by data processing agreements requiring compliance with the LGPD and the information security standards adopted by the platform.

6How Long We Retain Your Data

Hh555 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable legal retention periods. See the main retention criteria below:

• Active account data: retained for the entire period your hh555 account remains active;
• Financial and transaction data: retained for a minimum of 5 (five) years after each transaction, as required by Brazilian tax and anti-money laundering legislation;
• Identity verification (KYC) data: retained for a minimum of 5 (five) years after account closure;
• Customer support data: retained for up to 2 (two) years after the ticket is closed, for quality and audit purposes;
• Usage and analytics data: anonymized after 12 months or deleted in accordance with the specific retention policy of each tool used;
• Marketing data (with consent): retained until consent is withdrawn or the account is closed.

Once the applicable retention periods expire, data is securely deleted or anonymized in a way that makes it impossible to re-identify the individual. Deletion requested by the user in the exercise of their LGPD rights is subject to any minimum retention periods required by law before it takes effect.

7Your Rights as a Data Subject (LGPD)

Brazil's General Data Protection Law grants you a set of rights over your personal data. hh555 is committed to responding to all rights requests within 15 business days, in accordance with the LGPD. Your rights are:

• Confirmation: find out whether hh555 processes your data and, if so, what data that is;
• Access: receive a copy of your personal data in a readable format;
• Correction: request the update or correction of incomplete, inaccurate, or outdated data;
• Anonymization or blocking: request that unnecessary or excessive data be anonymized or its processing blocked;
• Portability: receive your data in a structured format for use with another service;
• Erasure: request the deletion of data processed on the basis of consent (subject to mandatory legal retention periods);
• Sharing information: find out which third parties your data has been or is being shared with;
• Consent withdrawal: withdraw consent for processing activities based on that legal ground.

To exercise any of these rights, send your request to suporte@hh555.life with the subject line "LGPD Request" and your CPF. hh555 may ask you to confirm your identity before processing the request to ensure data is only provided to the rightful owner.

8Cookies and Tracking Technologies

Hh555 uses cookies and similar technologies to ensure the platform functions correctly, enhance your experience, and — with your consent — display personalized content. Cookies are small text files stored on your device when you visit the site.

We use the following types of cookies:

• Essential: required for the platform's basic operation — authentication, user session management, language preferences, and security. These cannot be disabled without affecting your use of hh555;
• Functional: remember your preferences such as favorite sport, odds display settings, and recent history — they improve your experience without collecting personally identifiable data;
• Analytics: collect anonymous data on how users navigate the platform to help us improve the interface, identify technical issues, and develop new features;
• Marketing (with consent): used to personalize promotional communications based on your usage profile — activated only with your express consent.

The first time you access hh555, you will see a cookie notice asking for your preferences. You can accept all cookies, manage your preferences by category, or decline non-essential cookies. Your preferences are saved and can be updated at any time in the platform settings.

9Security and Protection of Your Data

Hh555 implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. Our key security practices include:

• SSL/TLS Encryption: all communications between your device and hh555's servers are protected by end-to-end encryption;
• Secure storage: personal and financial data is stored on servers with strict access controls, continuous monitoring, and regular backups;
• Financial data tokenization: credit and debit card details are never stored directly — they are converted into tokens by PCI DSS-certified processors;
• Internal access controls: only staff with a legitimate work need have access to personal data, and all are bound by confidentiality obligations;
• Security monitoring: intrusion detection and anti-fraud systems continuously monitor the platform to identify suspicious activity;
• Two-factor authentication: available to all users to add an extra layer of account security.

In the event of a security incident that may affect your personal data, hh555 will notify impacted users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes required by the LGPD, with information about the nature of the incident, the data affected, and the steps taken.

10Minors

Hh555 is an entertainment platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account was created by a minor, it will be closed immediately and all associated data will be deleted.

If you are a parent or guardian and believe that a minor has created an account on hh555, please contact our support team immediately at suporte@hh555.life. We will handle the case with priority and full confidentiality.

11International Data Transfers

Some of hh555's service providers — including casino game providers and security tools — may be based outside Brazil. Whenever your data is transferred internationally, hh555 requires all recipients to maintain data protection standards equivalent to those established by the LGPD.

These safeguards include data protection-specific contractual clauses, internationally recognized security certifications, and verification that the recipient country provides a level of protection consistent with Brazilian law. hh555 does not carry out international data transfers without the necessary contractual and technical safeguards.

For specific information about international data transfers, or to request details about the safeguards applied in each case, please contact our Data Protection Officer at suporte@hh555.life.

12Changes to this Privacy Policy

Hh555 may update this Privacy Policy periodically to reflect changes in our practices, new services offered, or updates to applicable law. All material changes will be communicated at least 10 (ten) days in advance by email or via an in-platform notification.

The current version is always the one published on this page, with the "Last updated" date shown at the top. We recommend checking this Policy periodically to stay informed about how your data is protected at hh555.

If a change requires new consent — for example, for a new type of data use — we will ask for your confirmation before implementing it. Continued use of the platform after changes that do not require new consent constitutes acceptance of the updated terms.

13Contact, Data Protection Officer (DPO) and Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a security incident, please contact hh555 through the channels below:

• Support and DPO email: suporte@hh555.life
• Live chat: available 24 hours a day, 7 days a week, within the platform
• Subject line for LGPD requests: use the subject line "LGPD Request" and include your CPF to help us process your request faster

Hh555 is committed to responding to personal data requests within 15 business days, as required by the LGPD. Complex requests or those involving a large volume of data may require additional time, in which case the requestor will be notified in advance.

If you are not satisfied with the response received from hh555, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for enforcing the LGPD in Brazil.