C5Bet Privacy Policy – LGPD Data Protection

1. Who We Are and Scope of This Policy

This Privacy Policy describes how C5Bet ("we", "platform") collects, uses, stores, shares, and protects the personal data of users who access or use the services available at c5bet.best and on the official mobile apps for Android and iOS.

The c5bet is the controller of personal data collected on this platform, pursuant to the LGPD (Lei Geral de Proteção de Dados Pessoais, Law No. 13,709/2018). By creating an account, making a deposit, or using any feature of the platform, you acknowledge that you have read and understood this Policy.

This Policy applies to all registered users and visitors of the platform, regardless of whether they are located in Brazil or accessing it remotely. The practices described here supersede any informal privacy communications made by the support team.

2. Personal Data We Collect

The c5bet collects personal data at various points during your interaction with the platform. The categories of data collected and when each is gathered are detailed below.

2.1 Registration Data

Collected at the time of account creation:

2.2 Identity Verification (KYC) Data

Required for withdrawals above R$ 5,000.00 or when compliance protocols are triggered:

2.3 Financial Data

Collected during deposit and withdrawal transactions. The c5bet processes transactions exclusively in BRL via Brazilian payment methods:

Credit and debit card data is processed by PCI-DSS certified payment gateways. The c5bet does not store your full card number on its servers.

2.4 Usage & Browsing Data

Automatically collected during platform use:

• IP address and approximate location (state/city)
• Device type, operating system, and browser
• Pages visited, session duration, and interactions on the platform
• Betting and gaming history
• Cookie and similar technology data (detailed in section 8)

2.5 Communication Data

When you contact the support team at c5bet via chat, email, or WhatsApp, we record the content of those communications for customer service, dispute resolution, and ongoing service improvement purposes. These conversations are stored for up to 2 years.

3. How We Use Your Data

The c5bet uses collected personal data exclusively for the following purposes:

• Operate your account: create, maintain, and manage your player account, including access authentication and settings.
• Process financial transactions: record deposits via Pix, bank slip (boleto bancário), credit/debit card, Mercado Pago, PicPay, and TED; process withdrawals to the registered bank account or Pix key.
• Identity verification (KYC): confirm that you are at least 18 years old and that the information you provide is accurate, as required by Brazilian regulations.
• Fraud prevention and anti-money laundering: monitor transactions to identify suspicious patterns in compliance with the legal obligations of Law No. 9.613/1998.
• Customer support: address your questions, complaints, and requests via chat, email, or WhatsApp.
• Experience personalization: display relevant content, suggest games based on your history, and send communications about promotions that may interest you — only if you have opted in to receive such communications.
• Responsible gambling: monitor gambling behavior patterns to identify potential risk situations and offer proactive support when needed.
• Compliance with legal obligations: maintain records as required by Brazilian legislation applicable to the betting and gaming sector.
• Platform improvement: analyze aggregated and anonymized usage data to improve the experience for all players.

4. Legal Basis for Processing

Each data processing activity carried out by c5bet is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

5. Sharing Data with Third Parties

The c5bet does not sell personal data. Sharing occurs only in the situations below, with partners who assume contractual data protection obligations equivalent to those in this Policy:

5.1 Payment Processors

To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, Mercado Pago, PicPay, and bank TED, we share only the strictly necessary financial data with the relevant gateways and financial institutions. These partners are PCI-DSS certified and operate under regulation by the Banco Central do Brasil.

5.2 Game Providers

Live casino, slots, and crash game providers receive an anonymized session identifier to record bets and outcomes. Identifiable personal data such as CPF or full name is never shared with game providers.

5.3 Infrastructure and Security Services

Cloud infrastructure partners, CDN providers, and security monitoring services have access to log and traffic data to maintain platform availability and security. All operate under a data processing agreement that includes confidentiality clauses.

5.4 Competent Authorities

The c5bet may share data with Brazilian governmental, regulatory, or judicial authorities when required by law, court order, or administrative ruling. In such cases, we provide only the data specifically requested and within the stipulated timeframe.

5.5 Identity Verification (KYC)

For identity verification processes, we may use specialized KYC providers that process documents and biometric data in a secure environment. These providers do not retain data after the verification process is complete.

6. Data Retention and Deletion

The c5bet retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. The general retention criteria are:

• Active account data: retained for the full duration of the account and for up to 5 years after closure, in accordance with compliance and anti-money laundering requirements.
• Financial transaction records: retained for 5 years in accordance with Brazilian tax and financial legislation.
• KYC Documents: retained for up to 5 years after account closure or as required by applicable law.
• Access and usage logs: retained for up to 6 months, unless an ongoing security investigation requires otherwise.
• Support communications: retained for up to 2 years after the ticket is closed.
• Marketing data with consent: retained until you withdraw consent or request deletion.

Once retention periods expire, data is securely deleted or irreversibly anonymized so it can no longer be linked back to you as the data subject.

7. Data Security

The c5bet applies technical and organizational measures to protect your data against unauthorized access, loss, alteration, or destruction:

• 256-bit SSL Encryption across all communication between your device and our servers.
• Passwords stored as hashes using modern algorithms resistant to brute-force attacks. C5Bet does not have access to your password in plain text.
• Two-factor authentication (2FA) available for all accounts, with activation strongly recommended.
• Continuous monitoring of access and transactions by a dedicated security team, with automatic alerts for anomalous patterns.
• Internal access control based on the principle of least privilege: C5Bet staff only have access to the data strictly necessary to perform their roles.
• Penetration testing and periodic security audits conducted by specialized firms.
• Incident response plan with defined procedures for notifying the ANPD and affected data subjects in the event of a data breach, pursuant to Art. 48 of the LGPD.

8. Cookies and Tracking Technologies

The c5bet uses cookies and similar technologies to ensure the platform operates correctly, enhance the user experience, and — with your consent — personalize content and communications.

8.1 Types of Cookies Used

• Essential cookies: required for the platform's core functionality – authentication, game sessions, language preferences, and the betting slip. They cannot be disabled without affecting your use of the service.
• Performance cookies: collect anonymized data on how users navigate the platform (most visited pages, load times, errors). Used exclusively to improve service performance.
• Functionality cookies: remember your personal preferences, such as betting table display settings and your favorite games history.
• Marketing cookies: used only with your explicit consent to display personalized in-platform communications about promotions and updates. They are not used for advertising on third-party websites.

8.2 Cookie Management

You can manage your cookie preferences at any time through the privacy settings panel in your account. You can also configure your browser to block or delete cookies, though please note this may affect the functionality of some essential platform features.

The c5bet does not use third-party cookies for cross-site behavioral tracking. The analytics cookies used are configured with IP anonymization and do not allow individual users to be identified in the generated reports.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by the c5bet, a set of rights that can be exercised at any time through the dedicated privacy contact channel. Your rights and how to exercise them are outlined below:

To exercise any of these rights, contact us at privacidade@c5bet.best, providing your full name, CPF, and the specific request. The c5bet may request identity verification before processing sensitive requests, to ensure that only the data subject can exercise these rights.

If you believe your request was not handled appropriately, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided in art. 55-J of the LGPD.

10. Minors

The services of c5bet are intended exclusively for users aged 18 and over. The platform does not knowingly collect or process personal data from minors. If an account is found to have been created by a minor, it will be immediately closed, the associated data deleted, and any real-money balance deposited will be returned to the original bank account.

If you believe an account has been created by a minor at c5bet, please contact support immediately so we can investigate and take appropriate action.

11. International Data Transfer

Some of the cloud infrastructure and service providers used by c5bet may process data on servers located outside Brazil. In such cases, the c5bet requires the partner to provide a level of protection equivalent to the LGPD, whether through standard contractual clauses, internationally recognized certifications, or by being located in a country with adequate regulations recognized by the ANPD.

The main international transfers involve cloud infrastructure services that store data in data centers holding ISO 27001 and SOC 2 Type II certifications. In all cases, data is encrypted both in transit and at rest.

12. Changes to this Privacy Policy

The c5bet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Significant changes will be communicated at least 7 days in advance via your registered email address and through a prominent notice on the platform.

The date of the last update is always visible at the top of this page and in the document header. We recommend reviewing this Policy periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated version.

For previous versions of this Policy or to compare versions, please contact our privacy team at the address listed in the contact section below.

13. Contact & Data Protection Officer (DPO)

To exercise your rights as a data subject, clarify questions about this Policy, or report any concerns related to how your personal data is handled by the c5bet, use the channels below:

• Privacy email: privacidade@c5bet.best – a channel dedicated exclusively to data subject requests and data protection matters
• General support: contato@c5bet.best – for general questions about the platform
• Live chat: available 24 hours a day on the platform for urgent matters

The data protection officer of c5bet (DPO – Data Protection Officer) can be reached directly at the privacy email address above. All requests are logged and responded to within the legal deadline of 15 business days established by the LGPD.