567vip Privacy Policy – Your Data Protected under the LGPD

The 567vip only collects the data strictly necessary to provide Sports Betting, online casino, and poker services. We gather information at different points during your interaction with the platform:

At registration:

• Full name as it appears on an official government-issued ID;
• Date of birth;
• CPF (Cadastro de Pessoa Física);
• Email address;
• Brazilian mobile phone number;
• Full residential address including ZIP code;
• Access password (stored in encrypted form — never as plain text).

While using the platform:

• Sports betting history (football, volleyball, MMA/UFC, e-sports, etc.), casino games, and poker;
• Deposit and withdrawal history, including the method used (Pix, boleto, card, PicPay, Mercado Pago, TED);
• IP address and approximate geolocation data;
• Browser type and version, operating system, and device type (mobile, tablet, desktop);
• Session data: access times, pages visited, browsing duration.

For identity verification (KYC):

• Copy of a government-issued ID (RG, CNH, or passport);
• Proof of residence issued within the last 90 days;
• When applicable, proof of ownership of the payment method used.

The 567vip uses your personal data based on the legal grounds established by the LGPD — primarily contract performance, legitimate interest, and consent where applicable. Below are the specific purposes for processing:

You may, at any time, opt out of receiving marketing communications from 567vip by clicking the unsubscribe link in any email or by accessing the notification settings in your account. Opting out does not affect essential transactional communications (such as withdrawal confirmations, security alerts, and account updates).

The 567vip does not sell, rent, or trade your personal data with any company or individual. Period. That said, to operate properly, we do need to share data with specific service providers — always under confidentiality agreements and strictly limited to the stated purposes:

• Payment processors: Companies responsible for processing transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago receive only the minimum data required to complete each transaction. All operate in compliance with PCI DSS and are bound by contractual data protection clauses;
• Identity verification (KYC) providers: To validate documents and prevent fraud, we may use specialized identity verification services that process biometric and documentary data under the same confidentiality restrictions;
• Technology and infrastructure providers: Cloud servers and hosting services that store encrypted data under contracts with specific data protection and data location clauses;
• Competent authorities: 567vip may share data with law enforcement, judicial, or regulatory authorities when required by legal obligation, court order, or the need to prevent money laundering (AML).

The 567vip uses cookies and similar technologies to ensure the platform functions correctly, remember your preferences, and analyze the performance of our services. See the types of cookies we use:

• Essential cookies: Required for the platform's core functionality — keeping your session active, saving your bet slip, and securing your login. These cannot be disabled without affecting your 567vip experience;
• Preference cookies: They remember your personal settings, such as language, region, and display preferences, making your experience smoother without requiring you to reconfigure anything on each visit;
• Analytical cookies: Used internally to understand how users navigate 567vip — which sections are most visited, where errors occur, and how to improve performance. We do not identify you individually through this data;
• Security cookies: They help detect suspicious activity, unusual login attempts, and prevent account fraud.

The 567vip does not use third-party cookies for behavioral advertising or cross-site tracking. You can manage or clear cookies through your browser settings at any time. Disabling essential cookies may affect how the platform functions.

The security of your data is a technical and operational priority for 567vip. We have implemented multiple layers of protection to minimize the risk of unauthorized access, loss, or data breaches:

• Encryption in transit: All traffic between your device and our servers uses TLS 1.3 with AES-256 encryption — the same standard used in banking;
• Encryption at rest: Data stored in our databases is encrypted, including passwords (bcrypt hash), KYC documents, and financial information;
• Two-factor authentication (2FA): Available to all users in account settings, this adds an extra layer of security to the login process;
• Internal access controls: Only staff members with a specific operational need are granted access to user data — and that access is logged and regularly audited;
• Continuous monitoring: Intrusion detection systems operate around the clock to identify and block suspicious access attempts;
• Regular security testing: We conduct periodic penetration tests and security audits carried out by independent specialized teams.

Despite all these precautions, no digital system is 100% immune to breaches. In the event of a security incident affecting personal data, the 567vip will notify affected data subjects and the ANPD within the legally required timeframes, including information about the type of data involved, the measures taken, and the contact channel for any questions.

The LGPD grants you, as a data subject, a robust set of rights that 567vip is committed to respecting and facilitating. Here is what you can exercise at any time:

To exercise any of these rights, send an email to contato@567vip.best with the subject line "LGPD Rights – [your name]" and describe your request. The 567vip will respond within 15 business days, in accordance with the deadline established by the LGPD. In more complex cases, we may request identity verification before processing the request.

The 567vip strictly prohibits access to and use of the platform by anyone under 18 years of age. We do not intentionally collect, store, or process personal data from minors.

To uphold this commitment, we have implemented the following measures:

• CPF and date of birth verified at registration, cross-checked against an official database;
• Identity document verification during the KYC process, which takes place before your first withdrawal;
• Monitoring of behavioral patterns that may indicate an underage user;
• Immediate and permanent closure of any account identified as belonging to a minor, with the real BRL balance refunded to the legal guardian upon verified proof of identity.

If you believe a minor has created an account on 567vip, please contact us immediately at contato@567vip.best. We will investigate the matter as a priority and take all necessary action.

The 567vip retains your personal data for as long as necessary for the purposes for which it was collected, always observing the minimum retention periods required by law. See the general retention criteria below:

• Active account data: Retained for as long as the account is active and throughout the period of service use;
• Financial records (deposits, withdrawals, bets): Retained for a minimum of 5 years after the transaction, in compliance with anti-money laundering regulations and tax legislation;
• KYC documents: Retained for a minimum of 5 years after account closure, as required by law;
• Marketing and communications data: Deleted immediately upon withdrawal of consent or account closure, unless retention is required by law;
• Security logs: Retained for 12 months for fraud detection and investigation purposes.

After the legal retention period expires, data is securely deleted or anonymized so that it can no longer be linked to you as a data subject. 567vip maintains internal records of the data lifecycle for each data category to demonstrate compliance with the LGPD.

The 567vip may update this Privacy Policy periodically to reflect changes in legislation, in our data processing practices, or in our services. When material changes occur, you will be notified by email at least 7 days before the new version takes effect.

Minor changes — such as text corrections, reformatting, or clarifications that do not materially alter the policy — may be applied without prior notice, but will always include an updated revision date at the top of this document.

Continued use of the services provided by 567vip after the effective date of the changes will be considered acceptance of the updated terms. If you disagree with any change, you may request account closure before the new version takes effect, with no penalty.

All previous versions of this policy are archived and available upon request by email for historical reference. The version currently in force is always the one published at https://567vip.best/privacy-policy.

The 567vip has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for all privacy and personal data protection matters on the platform.

Get in touch with the DPO of 567vip for:

• Exercise any right as a data subject (access, correction, deletion, portability, etc.);
• Report a suspected security incident or data breach;
• Object to the use of your data for a specific purpose;
• Request clarification about this Privacy Policy;
• File a complaint about how your personal data is being handled.

If you do not receive a satisfactory response from 567vip, you may also file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.