5956a Privacy Policy – Data Protection in Brazil

For the purposes of the General Data Protection Law (LGPD), the Controller of the personal data processed under this Policy is the operating company of the 5956a platform, responsible for decisions regarding the processing of information collected at 5956a.best.

5956a has appointed a Data Protection Officer (DPO) as required by the LGPD for companies that process data at scale. The DPO serves as the direct point of contact between data subjects and the platform on privacy-related matters. All data subject rights requests are received, logged, and responded to within tracked deadlines.

5956a processes all data exclusively within Brazilian territory, on servers located in Brazil, in compliance with the data sovereignty requirements set out by the LGPD and the sector regulations applicable to the online betting and casino market in the country.

5956a collects only the data necessary to operate the platform securely and in compliance with legal obligations. The data minimization principle — collecting only what is needed for the stated purpose — guides every data collection decision on the platform.

2.1 Data provided directly by the User

• Registration data: full name, CPF, date of birth, email address, mobile phone number, and residential address;
• Verification documents (KYC): copy of a national ID (RG), driver's license (CNH), or passport; proof of address; in specific cases, a selfie with the document for liveness verification;
• Financial data: Pix key (CPF), credit/debit card details (only the last 4 digits and card brand are stored — the full card number is processed by the acquirer, not by 5956a), bank account details for withdrawals via wire transfer;
• Support communications: chat logs, emails, and support call records, including service transcripts for quality assurance and verification purposes.

2.2 Automatically collected data

• Browsing data: IP address, browser type and version, operating system, pages visited, time spent on page, traffic source (organic search, direct link, promotion);
• Device data: unique device identifier (for multiple account and fraud prevention), mobile device model, mobile operating system version;
• Game session data: full betting history, slots rounds, amounts wagered, results, session times, and account balance before and after each session;
• Transaction data: a full record of all deposits and withdrawals, including method, amount, timestamp, and processing status.

Every piece of data collected by 5956a has a specific, stated purpose. The platform does not use data for purposes incompatible with those listed below, and any significant new use is communicated to the data subject in advance.

3.1 Platform operation

Identification data (name, CPF, email, phone number) is required to create and maintain your account, authenticate access, process bets on the Brasileirão, UFC, slots, and other available games, and ensure that only the authorized account holder carries out transactions. Without this data, it is not possible to operate the platform securely and in compliance with legal obligations.

3.2 Payment processing

Financial data is used exclusively to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. 5956a does not store full card numbers — that data is handled directly by PCI-DSS certified payment processors. The CPF linked to the Pix key is used to confirm that a withdrawal is going to the registered account holder.

3.3 Identity verification and fraud prevention (KYC/AML)

5956a is legally required to verify user identities and monitor transactions for anti-money laundering purposes (AML). KYC documents are stored securely and used exclusively for this purpose. Automated transaction monitoring analyzes atypical patterns — such as deposits and withdrawals with no betting activity in between, multiple accounts on the same device, or large movements with no corresponding history.

3.4 Responsible gambling

Session history, amounts wagered, access frequency, and behavioral patterns are analyzed automatically to detect signs of problem gambling. When identified, 5956a may notify the user with information about the available Responsible Gambling tools — deposit limits, session breaks, and self-exclusion. This analysis is carried out in the user's own legitimate interest and is never shared with third parties.

3.5 Communications and marketing (with your consent)

With the User's explicit consent, 5956a may send communications about promotions, slots bonuses, sporting events (Brasileirão rounds, UFC fights), and other platform news. Consent can be withdrawn at any time via the unsubscribe link in any email or through account settings.

5956a shares personal data only when strictly necessary to operate the platform, meet legal obligations, or protect users' own interests. Data is never shared for third-party commercial or advertising purposes.

4.1 Payment processors

To process deposits and withdrawals, 5956a uses certified payment processors that act as data operators under the platform's instructions. These partners receive only the data necessary to process the specific transaction — for example, the Pix key and withdrawal amount — and are contractually prohibited from using that information for any other purpose. All processors undergo periodic due diligence for compliance with the LGPD and PCI-DSS.

4.2 Game providers

Slots and casino game providers — such as Pragmatic Play, NetEnt, Play'n GO, and Microgaming — receive an anonymous session identifier to process rounds. These providers do not receive the User's name, CPF, email, or any other identifiable data. Communication between 5956a and its providers is handled via API with authentication and end-to-end encryption.

4.3 Authorities and legal obligations

5956a may share personal data with competent authorities — the Public Prosecutor's Office, Federal Police, COAF, Receita Federal — when any of the following apply:

• Court order or duly substantiated search and seizure warrant;
• Formal request from a competent regulatory body acting within its legal authority;
• Obligation to report suspicious transactions in accordance with anti-money laundering legislation (Law No. 9,613/1998 and COAF regulations).

5956a does not disclose data to authorities without an adequate legal basis, and notifies the User whenever legally permitted to do so.

4.4 What 5956a Never Does with Your Data

• Does not sell user lists to advertisers or data brokers;
• Does not share data with other betting or casino platforms for acquisition purposes;
• Does not use gameplay behavior data for targeted advertising on social media;
• Does not transfer data to countries outside Brazil without adequate protections equivalent to the LGPD.

5956a implements robust technical and organizational measures to protect Users' personal data against unauthorized access, accidental loss, destruction, or unlawful alteration.

5.1 Technical security measures

• Encryption in transit: SSL/TLS 1.3 with an EV certificate covering all communication between the client and 5956a servers;
• Encryption at rest: sensitive data stored in the database is encrypted with AES-256;
• Hashed passwords: user passwords are stored exclusively as bcrypt hashes — no employee or system can view the original password;
• Two-factor authentication (2FA): available and recommended for all users, with support for TOTP authenticator apps (Google Authenticator, Authy);
• Web application firewall (WAF): protects against SQL injection, cross-site scripting (XSS), and other common threats;
• Intrusion monitoring (IDS/IPS): automated systems detect and block unauthorized access attempts in real time;
• Encrypted backups: daily backups stored in a geographically separate location, with recovery time tested quarterly.

5.2 Organizational measures

• Access to personal data limited by the principle of least privilege — each employee accesses only what is necessary for their role;
• All access to sensitive data is recorded in auditable logs retained for 12 months;
• Mandatory privacy and security training for all 5956a staff upon joining and annually thereafter;
• Clean desk and locked screen policy for workstations with access to critical systems;
• A documented incident response process, with a maximum of 72 hours to notify the ANPD in the event of a relevant breach, as required by the LGPD.

5.3 Data retention

Data is retained for as long as necessary for the purpose for which it was collected, in compliance with minimum legal retention periods:

• Identification and KYC data: minimum of 5 years after account closure, in accordance with AML legislation;
• Financial transaction history: minimum of 5 years for tax and anti-money laundering purposes;
• Betting history and game sessions: 12 months available in the member area; up to 5 years in backup for legal purposes;
• Access and security logs: 12 months for audit purposes;
• Support communications: 24 months, extendable in the event of an ongoing dispute.

5956a uses cookies and similar technologies to ensure the platform works correctly, measure performance, and — with your consent — personalize your betting experience. When you visit the site for the first time, you will see a cookie notice with the available options.

6.1 What are cookies

Cookies are small text files stored in your browser or on your phone when you access 5956a. They allow the platform to recognize your device on future visits, keep your session active while you bet, and remember preferences such as language and account settings.

6.2 How to manage cookies

You can manage or disable optional cookies at any time through the cookie preferences panel available in the platform's footer. Essential cookies cannot be disabled — they are required for 5956a to function properly. Disabling analytics or marketing cookies does not affect your access to Sports Betting, slots, withdrawals, or any other platform feature.

Most browsers also offer built-in controls for managing cookies — check your browser or device settings for details. Keep in mind that disabling cookies through your browser may affect certain 5956a features, such as keeping you logged in across sessions.

The LGPD guarantees all personal data subjects a set of rights over their information. 5956a respects and facilitates the exercise of each of these rights, with a clear process and a response deadline of up to 15 business days for all requests.

To exercise any of the rights below, send an email to contato@5956a.best with the subject line "Direitos LGPD", including your full name, CPF, and the specific request. 5956a may ask you to verify your identity before processing the request, as a security measure to protect your own data.

8.1 Updates to this Privacy Policy

5956a may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or improvements to security systems. When changes are material to data subjects' rights, registered Users will be notified by email at least 15 days before the new version takes effect.

The most current version of this Policy will always be available at 5956a.best/privacy-policy, with the last updated date shown at the top of the document. You can view the history of previous versions by contacting 5956a support.

8.2 Contact channels for privacy matters

For any questions, rights requests, or complaints related to this Privacy Policy, contact 5956a through the following channels:

• DPO email: contato@5956a.best — subject line "Direitos LGPD" or "Privacidade";
• Live chat: available 24 hours a day in Portuguese directly on the platform — request a transfer to the privacy team;
• Help center: /faq with answers to the most common questions about data and privacy.

The standard response time for LGPD rights requests is 15 business days from the date of receipt. For more complex cases, 5956a may extend the deadline by an additional 15 days, notifying the data subject of the reason before the original deadline expires.