Rico5555 Privacy Policy – Data Protection

1 Introduction

The Rico5555 is an online sports betting and entertainment platform dedicated to Brazilian players. To deliver our services safely, conveniently, and with the quality you expect — including betting on Brasileirão, Copa do Brasil, Libertadores, UFC, NBB, CBLOL, and live casino — we need to collect and process some personal data from our users.

Our players' privacy is taken very seriously. We do not collect data out of curiosity or to sell to third parties — we collect strictly what is necessary to operate the platform securely, process payments via Pix and other Brazilian methods, prevent fraud, and fulfill the legal obligations we are subject to.

This policy applies to all registered users of Rico5555, visitors to the site, and anyone who contacts our support team, regardless of device — desktop, Android, or iOS — or method of access.

2 Personal Data We Collect

2.1 Data You Provide Directly

During registration and use of the platform, Rico5555 collects the following information:

• Identification: full name, date of birth, CPF, RG, or another valid government-issued ID;
• Contact: email address, mobile number, residential address with ZIP code;
• Account: username, password (stored in encrypted format — never as plain text), notification preferences;
• Payments: Pix key, credit/debit card details (handled by PCI-DSS-certified processors), information for TED transfers (bank, branch, account number);
• KYC Verification: photo ID, verification selfie, and proof of address, when requested.

2.2 Automatically collected data

When you access the platform, we automatically collect:

• IP address and approximate geolocation data;
• Device type and version, and browser used;
• Operating system;
• Pages visited, session duration, and interactions within the platform;
• Betting logs, transactions, and account activity;
• Cookie data and session identifiers (detailed in Section 8).

2.3 Third-party data

In some cases, we receive information from third parties for identity verification and fraud prevention purposes — such as KYC service providers and anti-fraud systems. This information is used solely to confirm the user's identity and protect the integrity of the platform.

3 Purposes of Data Processing

Rico5555 uses your personal data exclusively for the following purposes:

Purposes marked as "Optional" depend on your consent and can be disabled at any time through your account preferences panel or by contacting support.

4 Legal Basis for Processing (LGPD)

The Rico5555 processes your personal data based on the legal grounds set out in the General Data Protection Law (LGPD — Law No. 13,709/2018). The legal bases used are:

• Contract performance (Art. 7, V): for all essential account operations — registration, bet processing, deposits and withdrawals via Pix, boleto, or card, and support assistance;
• Consent (Art. 7, I): for marketing communications, use of non-essential cookies, and browsing behavior analytics. You may withdraw this consent at any time;
• Compliance with a legal obligation (Art. 7, II): to meet regulatory requirements for identity verification (KYC), anti-money laundering (AML), and Brazilian tax obligations;
• Legitimate interest (Art. 7, IX): for fraud prevention, platform security, and service improvement — always in a proportionate manner and with respect for your rights.

Where processing is based on consent, you have the right to withdraw it at any time, without affecting any processing that was carried out prior to that withdrawal.

5 Data Sharing with Third Parties

Rico5555 does not sell personal data of its users. We share information only in the situations described below and always with the minimum data necessary:

5.1 Service Providers

• Payment processors: to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED transfers with banks including Nubank, Itaú, Bradesco, and Banco do Brasil. These providers receive only the data required for each transaction;
• KYC verification providers: to verify user identity in accordance with regulatory requirements. Documents are transmitted with encryption and are not retained beyond what is necessary;
• Game and casino providers: slots, live casino, and crash game providers receive an anonymous session identifier — not your name or CPF — for the games to function;
• Security analysis services: anti-fraud systems that receive access data (IP, device, behavioral patterns) to identify suspicious activity.

5.2 Legal Requirements

Rico5555 may disclose personal data when required by law, court order, or request from a competent regulatory authority in Brazil. In such cases, we disclose only the minimum required by the legal instrument.

6 Data Retention and Deletion

Rico5555 retains your personal data for as long as necessary for the purposes described in this policy, or as required by Brazilian law:

• Active account data: kept for as long as your account is active on the platform;
• Financial and transaction data: retained for 5 years after account closure, in accordance with tax legislation and anti-money laundering obligations;
• KYC documents: retained for the period required by identification regulations — generally 5 years after last use;
• Access and security logs: retained for up to 6 months for security investigation and dispute resolution purposes;
• Support data (service history): retained for 2 years after the ticket or account is closed.

Once the retention periods above have expired, data is securely deleted or irreversibly anonymized. You may request early deletion of your data — except where retention is required by law — by contacting Rico5555 support.

7 Data Security

Rico5555 employs a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: all communications between your device and rico5555 servers are secured with 256-bit TLS/SSL;
• Encryption at rest: sensitive data stored on servers is encrypted using modern algorithms;
• Passwords: stored exclusively as an irreversible salted hash — no employee can view your password;
• Access control: only employees with a proven business need can access personal data, protected by strong authentication and access logging;
• Continuous monitoring: intrusion detection systems and anomaly analysis operate 24 hours a day to identify suspicious activity;
• Two-factor authentication (2FA): available to all users in the account security panel — highly recommended;
• Fund separation: players' financial funds are held in bank accounts separate from the company's operational funds.

Despite all measures in place, no system is 100% immune to threats. In the event of a security incident affecting your data, Rico5555 will notify impacted users and the National Data Protection Authority (ANPD) within the legal deadlines established by the LGPD.

8 Cookies and Similar Technologies

Rico5555 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze the performance of our services. See the types of cookies used below:

You can manage your cookie preferences through your account settings panel or your browser settings. Disabling essential cookies may prevent part or all of the platform from working correctly.

9 Your Rights as a Data Subject

The LGPD guarantees a number of rights to you as the owner of your personal data. Rico5555 respects and supports the exercise of all of them:

To exercise any of these rights, please contact us at contato@rico5555.net with the subject line "LGPD Rights – [your account number]". We respond within 15 calendar days, as required by law.

If you feel your rights have not been adequately addressed, you have the right to appeal to the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.

10 International Data Transfers

In some cases, Rico5555 user data may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or international payment processors. When this occurs, we ensure that:

• Transfers are made only to countries or organizations that offer a level of data protection equivalent to or higher than that required by the LGPD;
• Specific data protection agreements (standard contractual clauses) are in place with all international recipients;
• Data transferred is limited to the minimum necessary for the specific purpose;
• Rico5555 retains responsibility for the proper handling of data even when it is processed by third parties in other jurisdictions.

All Pix payments are processed within the Brazilian financial ecosystem, operated by the Central Bank of Brazil. No Pix transaction data is transferred outside of Brazil.

11 Minors

The services of Rico5555 are intended exclusively for individuals aged 18 years or older. We do not knowingly collect personal data from minors. If we identify that a user under 18 has created an account, we will close the account immediately and delete the collected data to the extent permitted by law.

If you are a parent or legal guardian and believe a minor in your care may have created an account on Rico5555, please contact our support team immediately so we can investigate and act promptly.

12 Communications & Marketing

Rico5555 may send different types of communications to registered email addresses and phone numbers:

12.1 Transactional Communications (always sent)

• Registration confirmation and email verification;
• Deposit, withdrawal, and financial transaction notifications;
• Bet results and account updates;
• Security alerts (login attempts, password changes);
• Communications related to account disputes or investigations.

12.2 Marketing Communications (require consent)

• Information about promotions, bonuses, and special offers from Rico5555;
• Updates on new sports, competitions, and games available on the platform;
• Communications about the loyalty program and VIP club;
• Editorial content such as betting tips and game previews.

You can opt out of marketing communications at any time by clicking "unsubscribe" in the footer of any Rico5555 email, or through the notification preferences panel in your account. Opt-outs are processed within 5 business days.

13 Changes to this Privacy Policy

The Rico5555 may update this Privacy Policy to reflect changes in its services, Brazilian legislation, or industry best practices. When that happens:

• The "Last updated" date at the top of this page will be changed;
• Material changes — those affecting your rights or how your data is used — will be communicated by email with a minimum notice of 7 days before they take effect;
• For minor changes (wording clarifications with no practical impact), updates may be made without prior notice;
• Continued use of the platform after any changes constitutes acceptance of the updated version of the policy.

We recommend reviewing this policy periodically. A history of previous versions can be requested from Rico5555 support.

14 Contact, Data Protection Officer (DPO) and Privacy Channel

To exercise your rights as a data subject, ask questions about this policy, or file a complaint related to the processing of your personal data, please contact Rico5555 through the channels below:

• Privacy email: contato@rico5555.net (subject: "Privacy / LGPD");
• Live chat: available 24 hours a day, 7 days a week, within the platform;
• Support language: 100% in Brazilian Portuguese.

Rico5555 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and handling data subject requests. The DPO can be reached through the same email channel above, with the subject line "DPO – [your request]".

If you do not receive a satisfactory response within 15 business days, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), through the authority's official portal in Brazil.

This Privacy Policy is governed by Brazilian law, in particular the LGPD (Law No. 13,709/2018) and the Marco Civil da Internet (Law No. 12,965/2014).