Privacy Policy of 56com – Your Data

For the purposes of the General Data Protection Law (LGPD — Lei nº 13.709/2018), the controller of personal data collected by the platform is the 56com, operator of the website https://56com.best.

The Data Protection Officer (DPO) of 56com can be reached at suporte@56com.best for questions related to personal data processing, the exercise of rights under the LGPD, or any other inquiries about this Privacy Policy. Our team responds in Portuguese within up to 5 business days.

This Privacy Policy applies exclusively to the website and services of 56com. We are not responsible for the privacy practices of any third-party websites or platforms that may be accessed through links on our platform.

The 56com collects different categories of personal data depending on how you interact with the platform. The main types of data we process are listed below:

Data provided directly by the user:

• Full name, date of birth, and CPF — collected at the time of registration;
• Email address and mobile number — for communication and authentication;
• Full residential address — for identity verification (KYC) purposes and compliance with legal obligations;
• Identity documents (RG, CNH, or passport) and proof of address — requested during the verification process;
• Banking and payment details — such as Pix key, account number for TED transfers, or credit/debit card information, required to process deposits and withdrawals;
• Communication and marketing preferences voluntarily declared by the user.

Data collected automatically during platform use:

• IP address and approximate geolocation — for eligibility verification and fraud prevention;
• Device information: type (mobile, tablet, desktop), operating system, browser and version;
• In-platform browsing history: pages visited, session duration, clicks and interactions;
• Betting, gaming, deposit, and withdrawal history on the 56com;
• Cookie and similar technology data, as described in section 6 of this Policy.

The personal data collected by 56com are used exclusively for the following purposes:

• Account creation and management: process your registration, verify your identity, and keep your account active and secure;
• Service delivery: process Sports Betting on the Brasileirão, Copa do Brasil, and other markets, offer live casino games, slots, crash games, jackpots, and e-sports;
• Payment processing: manage deposits via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED; process withdrawals to users' registered bank accounts;
• Compliance with legal obligations: anti-money laundering (AML) checks, compliance with Brazilian betting and casino regulations, fulfillment of court orders, and responses to requests from regulatory authorities;
• Security and fraud prevention: detect, investigate and prevent fraudulent activity, account abuse, use of multiple accounts and other irregularities;
• Customer support: respond to your requests, resolve disputes, and provide support via chat, email, or WhatsApp in Portuguese;
• Platform improvement: analyze usage patterns to improve the user experience, fix technical issues, and develop new products and features;
• Marketing and communications: send offers, promotions, and updates from the 56com, exclusively for users who have consented to this type of communication. You can opt out at any time.

The 56com does not use your data for solely automated decision-making that produces significant legal effects, except where expressly provided for and notified, with the right to human review guaranteed as required by the LGPD.

The 56com processes personal data strictly on the basis of one of the legal grounds provided under the LGPD. The main grounds used are:

• Contract performance (art. 7º, V): to process your registration, bets, deposits, withdrawals and all services you requested when creating your account at 56com;
• Compliance with a legal obligation (art. 7, II): for identity verification (KYC), anti-money laundering compliance, reporting to tax and regulatory authorities, and responding to court orders;
• Legitimate interest (art. 7, IX): for platform security, fraud prevention, usage behavior analysis and service improvement, always respecting users' rights and legitimate expectations;
• Consent (art. 7, I): for sending marketing communications, using non-essential cookies and sharing data for purposes not covered above. Consent may be withdrawn at any time.

The 56com does not sell users' personal data. Sharing with third parties occurs only in the cases listed below, always limited to what is strictly necessary and governed by agreements that ensure the confidentiality and security of the information:

• Payment providers: financial institutions and payment intermediaries such as card operators, Pix platforms, PicPay, and Mercado Pago, required to process financial transactions;
• Game providers: live casino, slots, crash games and other game format providers available on the platform, who receive only the minimum data necessary to operate the games;
• Identity verification services: providers specializing in KYC (Know Your Customer) and anti-money laundering, who assist in verifying documents submitted by users;
• Technology infrastructure providers: hosting, cloud computing, and cybersecurity services that support the platform's operations, under contracts with strict data protection clauses;
• Government and regulatory authorities: when legally required, such as in response to court orders, financial crime investigations, or requests from the Receita Federal and other competent authorities;
• Corporate transactions: in the event of a merger, acquisition or sale of assets of 56com, the data may be transferred to the acquirer, who will be bound to comply with this Privacy Policy.

The 56com uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize communications and usage analytics.

Types of cookies used:

• Essential cookies: required for the platform's core functionality, such as keeping your session active, processing bets, and securing transactions. These cookies cannot be disabled without affecting your use of the platform;
• Performance cookies: collect anonymous information about how users interact with the platform — most visited pages, load times, technical errors — to help us continuously improve the experience;
• Functionality cookies: store your preferences — such as language, display settings, and betting preferences — to personalize your experience on the 56com;
• Marketing cookies: used with your consent to personalize platform offers and communications based on your interests and usage behavior.

You can manage your cookie preferences directly through the banner shown on your first visit to the site or through your browser settings. Disabling non-essential cookies does not affect access to the main features of the 56com.

The 56com retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The general retention periods are:

• Registration and identity data: retained for the entire period the account is active and for at least 5 (five) years after account closure, in accordance with compliance requirements and anti-money laundering legislation;
• Financial transaction history (deposits and withdrawals): retained for a minimum of 5 years after each transaction, in accordance with Law No. 9,613/1998 (Anti-Money Laundering Law) and Central Bank regulations;
• Betting and gaming history: retained for 5 years for audit purposes, dispute resolution and compliance with legal requests;
• Support communication data: retained for 2 years after each support ticket is closed;
• Marketing data (with consent): retained until the user withdraws consent or requests deletion.

Once retention periods expire, data is securely deleted or irreversibly anonymized, making it impossible to identify the data subject. The 56com periodically reviews retained data to ensure that only necessary information is kept.

The 56com implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration or improper disclosure. The main security measures in place include:

• 256-bit SSL Encryption across all communications between your device and the platform's servers;
• Encrypted storage of sensitive data such as identity documents and payment information;
• Two-factor authentication (2FA) available to all users who want an extra layer of account security;
• Continuous monitoring of suspicious access and activity through automated anomaly detection systems;
• Restricted access control: only employees of the 56com with a genuine need for access to perform their duties are permitted to view user data, always logged;
• Periodic security testing, including penetration testing and vulnerability assessments conducted by independent specialists;
• Incident response plan documented, with clear notification protocols to the ANPD and affected users in the event of a data breach.

Despite all measures in place, no system is 100% invulnerable. Should any security incident be identified that may affect your data, the 56com will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

The LGPD grants you, as a data subject, a set of rights that 56com fully respects. Here is what you can request at any time:

To exercise any of these rights, contact our team at suporte@56com.best with the subject line "LGPD Rights" or via the 24-hour live chat on the platform. We will respond to your request within 15 calendar days, as required by the LGPD.

The 56com is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Our registration process includes date-of-birth verification, and proof-of-age documents are required during identity verification (KYC).

If the 56com identifies that it has collected data from a minor without proper knowledge or inadvertently, that data will be immediately deleted and the account closed. Parents or legal guardians who discover that a minor has created an account on the platform must contact us immediately at suporte@56com.best.

The platform of 56com may exceptionally contain references to external resources — such as regulators, industry associations, or responsible gambling support organizations. These links lead to websites that operate independently of 56com and have their own privacy policies.

The 56com does not control and is not responsible for the data collection and processing practices of third-party websites. We recommend reading the privacy policy of any external site you visit before providing any personal information.

The 56com may update this Privacy Policy periodically to reflect changes in Brazilian law — particularly LGPD and ANPD regulations —, in our services, or in our internal data protection practices.

When we make significant changes, you will be notified in advance by email or through a prominent notice on the platform. The date of the last update is always shown at the top of this document. Minor changes may be implemented without prior notice, with the revision date recorded.

Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the changes. If you do not agree with the changes, you may close your account and request deletion of your personal data before the effective date.

Any questions, requests to exercise your rights, or complaints related to the processing of your personal data by the 56com can be directed to our Data Protection Officer (DPO) through the following channels:

• Email: suporte@56com.best — with the subject line "Privacy" or "LGPD Rights";
• Live chat: available 24 hours a day, 7 days a week, directly on the platform;
• WhatsApp: available for cases that require follow-up or document submission.

All requests are answered in Portuguese within the deadlines established by the LGPD. We are committed to handling each request with seriousness, transparency, and within the legal timeframe of 15 calendar days.

If after contacting the 56com If you do not receive a satisfactory response, you have the right to file a complaint with the National Data Protection Authority (ANPD), the body responsible for overseeing enforcement of the LGPD in Brazil.