Privacy Policy of 45kk – Your Data

A 45kk is the controller of the personal data collected through the platform available at 45kk.best. As the data controller, 45kk is responsible for determining the purposes and means of processing users' personal data, always in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD).

For matters related to personal data handling, users can contact 45kk's Data Protection Officer (DPO) directly at contato@45kk.best, with "LGPD Request" in the subject line. Responses are provided within up to 15 business days, as required by law.

This Privacy Policy applies to all services offered by 45kk — sports betting, live casino, slots, VIP program, customer support, and any other features available on the platform — for all registered users residing in Brazil.

45kk collects personal data at various points during a user's interaction with the platform. The categories of data collected are:

Registration data: Full name, email address, mobile number, date of birth, CPF, and full residential address including ZIP code. This information is required to create a 45kk account and to fulfill legal user identification obligations.

Identity verification (KYC) data: When required — particularly before withdrawals above certain amounts — 45kk may collect a copy of a government-issued photo ID (national ID, driver's license, or passport) and a recent proof of address. These documents are stored securely and used exclusively for verification purposes.

Financial data: Deposit and withdrawal history, payment methods used (Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, TED), transaction amounts, and dates. 45kk does not store full credit card details — that processing is handled by a PCI DSS-certified payment processor.

Platform usage data: Betting history, casino games accessed, slots played, usage frequency, sports categories browsed, access times, and customer support interactions. This data is used to personalize the 45kk experience and for fraud prevention purposes.

Technical data: IP address, browser type and version, operating system, device identifier, approximate geolocation data (city/state), and session cookies. This data is collected automatically during platform use and is necessary for the secure technical operation of 45kk.

Communication data: Content from customer support conversations via live chat or email, including chat recordings for quality and training purposes. Recordings are stored for up to 12 months.

The personal data collected by the 45kk are used exclusively for the following purposes:

• Account operation: Creation, management, and authentication of the user's account on the 45kk platform.
• Payment processing: Processing deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED, and handling withdrawals to registered payment methods.
• Fraud prevention and anti-money laundering: Behavioral pattern analysis to identify and prevent fraud, bonus abuse, multiple account creation, and illicit activity, in compliance with Brazilian anti-money laundering legislation.
• Compliance with legal obligations: Eligibility verification (age and Brazilian residency), and retention of financial records as required by the Receita Federal and other competent authorities.
• Customer support: Handling requests, resolving disputes, processing complaints, and communicating account status updates.
• Experience personalization: Displaying promotions and relevant content based on preferred sports — football, MMA and UFC, volleyball, e-sports — and the user's platform activity history.
• Marketing communications: Sending emails and notifications about promotions, bonuses, and 45kk news, only to users who have explicitly consented to this type of communication.
• Platform improvement: Aggregated analysis of usage data to identify opportunities to improve the user experience, technical performance, and sports event coverage.

45kk processes personal data based on the following legal grounds established by the LGPD (Art. 7):

• Contract performance (Art. 7, V): Processing is necessary for the performance of the 45kk platform's terms of use, which the user agreed to upon registration — including account operation, bet processing, and payments.
• Compliance with legal obligation (Art. 7, II): Identity verification, retention of financial records, and sharing information with competent authorities when required by law.
• Legitimate interest (Art. 7, IX): Fraud prevention, platform security, and usage pattern analysis to improve services — always in a proportionate manner and with respect for users' rights.
• Consent (Art. 7, I): Sending marketing communications and delivering advanced content personalization, only when the user has given explicit consent during registration or later through account settings.

45kk does not use automated decisions that produce significant legal effects on users without the possibility of human review. Any relevant automated decision — such as account suspension on suspicion of fraud — may be challenged by the user through customer support.

A 45kk does not sell, rent, or share users' personal data for commercial purposes. Data sharing occurs exclusively in the following situations:

• Payment processors: To complete transactions via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED, the data required for the transaction is shared with the certified payment processors used by the platform. These processors are contractually required to protect data in accordance with the LGPD.
• Game providers: To operate live casino games, slots, and crash games, minimal session data is shared with our partner content providers. These providers do not receive users' full identification data.
• Competent authorities: 45kk shares data with public authorities — Receita Federal, Polícia Federal, Ministério Público, COAF — when required by court order, administrative order, or legal obligation related to combating money laundering and financial crimes.
• Technical service providers: Companies providing technical infrastructure, cybersecurity, fraud analysis, and customer support services on behalf of 45kk, under contracts that include data protection clauses and confidentiality obligations.

In all cases of data sharing, 45kk adopts contractual measures to ensure that recipients handle data with the same level of protection applied by the platform.

45kk uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: Required for the platform's core functionality — session authentication, language preferences, and account settings. These cannot be disabled without affecting how 45kk operates.
• Performance cookies: Collect information about how users interact with the platform — most visited pages, session duration, and technical errors. Data is aggregated and anonymized, used to improve the user experience.
• Functionality cookies: Store user preferences to personalize the experience — favorite sports, bet slip settings, and display preferences.
• Analytics cookies: Used to analyze platform usage behavior in aggregate. This data does not identify individual users and is used exclusively for internal improvements.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may affect how the 45kk platform functions. Performance, functionality, and analytics cookies can be disabled without impacting core features.

A 45kk implements technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure. The main security measures in place are:

• TLS encryption on all communications between the user's device and 45kk servers.
• Passwords are stored using cryptographic hashing — 45kk never stores passwords in plain text and will never ask for your password through any support channel.
• Two-factor authentication (2FA) is available to all users as an additional layer of account protection.
• Internal access controls with minimum permissions — 45kk staff only access user data strictly necessary to carry out their duties.
• Continuous monitoring of suspicious access attempts and intrusion attempts using automated anomaly detection systems.
• Servers hosted in data centers with internationally recognized security certifications, with regular backups and disaster recovery plans.

Despite all efforts, no system is 100% immune to security incidents. In the event of a breach involving personal data, 45kk will notify affected users and the National Data Protection Authority (ANPD) within the legally required timeframes, with information about what occurred and the measures taken.

45kk retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Registration and active account data: Retained for the full duration of the user's account on 45kk.
• Financial records and transaction history: Retained for a minimum of 5 years after each transaction, as required by tax legislation and anti-money laundering law (Law No. 9,613/1998).
• Identity verification documents (KYC): Retained for up to 5 years after account closure, as required by anti-money laundering laws.
• Support communication records: Chat records and emails are retained for up to 12 months for quality assurance, training, and dispute resolution purposes.
• Usage and betting data: Retained for up to 3 years after account closure for internal analysis and compliance with legal obligations.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. Early deletion requests will be honored to the extent possible, subject to minimum legal retention obligations.

45kk services are intended exclusively for users aged 18 and over. 45kk does not intentionally collect, store, or process personal data from minors.

If 45kk identifies that a user under the age of 18 has created an account on the platform — whether through a false age declaration or by any other means — the account will be immediately closed, the data will be deleted, and any existing balance will be cancelled. The platform does not accept bets from minors under any circumstances.

If you believe a child or teenager may have created an account on 45kk, please contact us immediately via the customer support chat or by emailing contato@45kk.best so the situation can be investigated and resolved as a priority.

In some cases, users' personal data may be processed or stored on servers located outside Brazil — for example, in cloud computing infrastructure used to host the platform. 45kk or by international casino game providers.

When international data transfers occur, 45kk ensures they are carried out with appropriate safeguards as required by the LGPD — including standard contractual clauses that obligate the international recipient to protect the data at the same security level applied in Brazil.

45kk does not transfer personal data to countries that do not offer an adequate level of data protection without the appropriate contractual safeguards. Information about the destination countries for international transfers can be requested by users via email at contato@45kk.best.

As a personal data subject, the LGPD grants you the following rights regarding your data held by 45kk:

• Confirmation and access: Find out whether we process your data and obtain a copy of the information we hold about you.
• Correction: Request the update or correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion: Request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
• Portability: Receive your data in a structured format for transfer to another service provider.
• Deletion of consent-based data: Request deletion of data processed based on your consent — such as data used for marketing — except where retention is a legal obligation.
• Data sharing information: Obtain information about the public and private entities with which 45kk has shared your data.
• Consent withdrawal: Withdraw consent for processing activities based on that legal basis, at any time, at no cost.
• Objection: Object to processing carried out on the basis of legitimate interest where that interest is not adequately justified.

To exercise any of these rights, contact 45kk at contato@45kk.best with the subject line "LGPD Request" or via the live support chat. 45kk will respond within the legal deadline of 15 business days. If your request cannot be fulfilled, you will be informed of the reason.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have been violated or that your request was not properly handled by 45kk.

45kk may update this Privacy Policy periodically to reflect changes in the services offered, updates to applicable legislation, or improvements in data protection practices. The date of the most recent update is always shown at the top of the document.

Significant changes — those affecting how we handle personal data or that reduce user rights — will be communicated by email to registered users at least 7 days before taking effect. Minor changes, such as wording corrections or contact updates, may be made without prior notice.

Continued use of the 45kk platform after any changes to this policy take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure and withdrawal of any available real balance before the effective date.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concerns related to the processing of personal data by 45kk, use the channels below:

• DPO email: contato@45kk.best — include "LGPD Request" in the subject line. Response time: up to 15 business days.
• Live chat: Available 24/7 directly on the 45kk platform. For urgent account security issues, live chat is the fastest channel.

If you are not satisfied with 45kk's response to a privacy-related request, you may file a complaint with Brazil's National Data Protection Authority (ANPD), as provided under the LGPD. The ANPD's contact information is available on the official Brazilian federal government website.