Privacy Policy of 5956ka – Your Data Protected

The 5956ka is the controller of personal data processed within the platform https://5956ka.best. As the data controller, 5956ka is responsible for determining the purposes and means of processing users' personal data, in accordance with the LGPD (Law No. 13,709/2018).

The official channel for privacy and data protection inquiries is the email suporte@5956ka.best or the platform's chat, with human support available 24 hours a day, 7 days a week, in Portuguese.

The 5956ka collects only the data necessary for the safe and lawful operation of the platform. Data is collected at different points during your interaction with the services:

The 5956ka does not collect sensitive data categories such as racial origin, religious belief, political opinion, genetic or biometric data — except for the KYC identity verification selfie, which is processed solely for that purpose and is not used for facial recognition in any other context.

Each piece of data collected by 5956ka has a specific, documented purpose. There is no collection for vague "future use." The purposes of processing are:

• Account operation: create, maintain, and manage your user account, process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago;
• Identity verification (KYC): confirm that you are who you say you are, that you are 18 years of age or older, and that the financial details belong to the account holder;
• Fraud prevention and anti-money laundering: detect suspicious usage patterns, multiple accounts, bot activity, and other conduct prohibited by the Terms and Conditions and Brazilian law;
• Customer support: respond to your questions, handle complaints, and improve the experience based on feedback received;
• Marketing communications: send promotions, news, and personalized offers by email or notification — only if you have not opted out of these communications;
• Compliance with legal obligations: comply with requirements from regulatory, tax, and judicial authorities under applicable Brazilian law;
• Platform improvement: analyze usage behavior in an aggregated and anonymized form to improve features, fix bugs, and develop new functionality.

The LGPD requires every data processing operation to have a legal basis. The 5956ka operates under the following legal bases:

• Contract performance (art. 7, V): processing required to perform the platform's terms of use — creating an account, processing bets, processing Pix, card, and boleto payments;
• Legitimate interest (art. 7, IX): fraud prevention, platform improvement, and support communications, provided this does not override the interests of the data subject;
• Compliance with a legal obligation (art. 7, II): KYC, anti-money laundering compliance, and responses to tax and judicial authorities;
• Consent (Art. 7, I): sending marketing communications and using non-essential cookies — you may withdraw this consent at any time through support or your email settings.

The 5956ka does not sell or share your data for third-party commercial purposes. Data is only shared in the following situations, always with appropriate contractual safeguards:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card (Nubank, Itaú, Bradesco, Banco do Brasil), PicPay, and Mercado Pago. These partners are PCI-DSS certified and handle only the minimum data required to complete each transaction;
• Game providers: providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others receive only an anonymized identifier to process gaming sessions — with no access to your name, CPF, or financial data;
• Cloud infrastructure: data is stored on cloud servers with internationally recognized security certifications, whose contracts impose the same data protection obligations as the 5956ka;
• Anti-fraud tools: specialized fraud detection systems receive behavioral and technical data (IP, device, usage patterns) for risk analysis, without personally identifiable data wherever possible;
• Public authorities: when required by court order, regulatory authority directive, or legal obligation, the 5956ka provides the requested data within legal limits.

The 5956ka applies technical and organizational measures to protect your data against unauthorized access, loss, destruction, or improper alteration:

• Encryption in transit: all communication uses SSL/TLS 256-bit, without exception;
• Encryption at rest: sensitive data stored on servers is encrypted at rest using AES-256;
• Passwords: user passwords are never stored in plain text — only the bcrypt hash is saved, making it impossible to recover the original password even in the event of a security incident;
• Restricted access: only employees with a justified operational need have access to personal data, always with multi-factor authentication (MFA) and access logs;
• Security testing: the platform undergoes periodic penetration testing (pentests) carried out by external specialized firms;
• Continuous monitoring: intrusion detection systems (IDS) and 24-hour monitoring identify and block suspicious access attempts in real time.

In the event of a security incident that may compromise your data, the 5956ka will notify affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD.

The 5956ka retains your data only for as long as necessary to fulfill the documented purposes or applicable legal obligations:

• Active account data: retained for the full duration of your account — for as long as you remain an active user of the platform;
• Closed account data: identification data and financial transaction records are retained for up to 5 years after account closure, in accordance with tax obligations and anti-money laundering requirements (Law No. 9,613/1998);
• KYC documents: retained for up to 5 years after account closure for regulatory purposes;
• Betting and casino history: kept for up to 3 years for support purposes, dispute resolution, and risk analysis;
• Access and security logs: retained for 6 months for security incident detection and investigation;
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes;
• Non-essential cookies: expire according to your browser settings or after the period defined in the cookies table (section 8).

Once retention periods have expired, data is securely and irreversibly deleted or anonymized for aggregated statistical use.

The 5956ka uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — session authentication, betting cart maintenance, CSRF security. These cannot be disabled without compromising your use of the platform;
• Performance cookies: collect anonymized information about how users navigate the platform to identify errors and improve performance. They do not identify you personally;
• Functionality cookies: remember your interface preferences (language, display mode, decimal or fractional odds) so you don't have to reconfigure them on every visit;
• Marketing cookies: used only with your explicit consent to personalize communications and measure promotional effectiveness. Consent can be withdrawn at any time through your account settings or by contacting support.

You can configure your browser to block or delete cookies. Disabling essential cookies may prevent access to certain platform features. The 5956ka does not use invasive tracking technologies such as device fingerprinting beyond what is strictly necessary for fraud prevention.

The LGPD grants you, as the data subject, the following rights regarding your information on 5956ka:

The platform 5956ka is strictly intended for individuals aged 18 and over. We do not knowingly collect personal data from minors.

The identity verification (KYC) process includes date of birth confirmation and, where necessary, a request for a government-issued photo ID. Accounts identified as belonging to users under 18 are closed immediately, balances are frozen, and the case is reported in accordance with applicable legal obligations.

If you suspect that a minor's account has been created on the platform, please contact support at 5956ka via chat or by email suporte@5956ka.best.

Some of the technical partners of 5956ka — such as cloud infrastructure providers and game providers — may be located outside Brazil. When this occurs, international data transfers comply with LGPD requirements:

• Transfer to countries with a level of data protection recognized as adequate by the ANPD;
• Or through specific contractual clauses that guarantee the data subject the same rights provided under Brazilian LGPD;
• Data transferred internationally is limited to the minimum necessary for the operation of the specific service — the 5956ka does not transfer identifiable personal data beyond what is strictly necessary.

The 5956ka may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Significant changes will be communicated by email and via an in-platform notification at least 15 days in advance before they take effect.

The version in effect is always the one published at https://5956ka.best/privacy-policy. The date of the last update is shown at the top of this document and at the beginning of this section.

Continued use of the platform after changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may close your account and request data deletion (subject to mandatory legal retention periods).

For any questions about privacy, data protection, or exercising your LGPD rights, you can contact the 5956ka through the following channels:

• Platform chat: available 24 hours a day, 7 days a week, with human support in Portuguese;
• Email: suporte@5956ka.best — for LGPD requests, use the subject line "LGPD – Data Subject Request";
• Response timeframe: all data subject requests are responded to within 15 calendar days, as required by the LGPD.

If you believe your rights have been violated after contacting the 5956ka, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.