C5hbet Privacy Policy — Your Data Protected by the LGPD

The c5hbet, operated under the domain c5hbet.best, is the controller of personal data collected and processed in connection with the services offered on the platform — including Sports Betting, live casino, slots, poker, and other digital entertainment products.

As data controller, c5hbet is responsible for defining the purposes and means of personal data processing, ensuring compliance with the General Data Protection Law (Lei nº 13.709/2018 — LGPD), and responding to data subject requests within the statutory deadlines.

C5hbet has appointed a Data Protection Officer (DPO), whose contact details are available in Section 15 of this Policy. The DPO is the official point of contact for all matters related to personal data processing.

C5hbet collects different categories of personal data depending on how you interact with the platform. We collect only the data strictly necessary for the purposes described in this Policy.

C5hbet does not collect special categories of personal data (sensitive data) as defined by the LGPD — such as health data, sexual orientation, racial origin, or religious beliefs — except where strictly necessary to comply with a legal obligation and on an appropriate legal basis.

C5hbet uses your personal data exclusively for the following purposes:

• Provision of contracted services: account creation and management, bet processing, event settlement, live casino, and all other products;
• Identity verification (KYC): confirm that you are who you say you are, that you are over 18 years of age, and that you reside in Brazil — a legal requirement for betting platforms;
• Payment processing: process deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago, and process withdrawals to registered Pix keys and bank accounts;
• Fraud and money laundering prevention: identify suspicious behavior, multiple accounts, use of false data, and irregular financial transactions;
• Compliance with legal and regulatory obligations: comply with court orders, reports to COAF, and other competent authorities as required by law;
• Account communications: security notifications, transaction confirmations, Terms and Conditions updates, and support replies;
• Marketing and promotions: sending offers, bonuses, and updates — only with your prior consent, which may be withdrawn at any time;
• Service improvement: usage behavior analysis to improve the platform experience, identify technical issues, and develop new products;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and proactively apply protective tools.

Each data processing activity at c5hbet has a specific legal basis in accordance with Article 7 of the LGPD:

When processing is based on consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to revocation.

C5hbet shares personal data only when strictly necessary for the operation of its services or to fulfill legal obligations. The categories of recipients are:

• Game providers: Evolution Gaming, Pragmatic Play, Pragmatic Live, NetEnt, Playtech, and others receive session identifiers and account data necessary to process your bets and gameplay. These providers operate under confidentiality agreements and do not receive complete financial data;
• Payment processors: institutions such as Nubank, Itaú, Bradesco, Banco do Brasil, and card operators receive only the minimum data required to process financial transactions. These processors are regulated by the Central Bank of Brazil;
• Identity verification providers (KYC): specialized partners in document verification and fraud prevention, operating under a data processing agreement in accordance with the LGPD;
• Public authorities: c5hbet complies with court orders and requests from COAF, the Receita Federal, and other Brazilian regulatory bodies when legally required;
• Technology infrastructure providers: hosting, cloud, and security companies that support platform operations, all bound by confidentiality agreements and, where applicable, data processing agreements.

Some of c5hbet's service providers are located outside Brazil — such as cloud infrastructure providers and international game suppliers. When personal data is transferred outside the country, c5hbet ensures that:

• Transfers occur only to countries with an adequate level of data protection recognized by the ANPD, or
• The international recipient is subject to standard data protection contractual clauses approved by the ANPD, or
• The transfer is necessary for the performance of the contract between you and c5hbet, and you have been informed of it.

C5hbet maintains a record of all international data transfers and can provide detailed information about specific recipients upon request to the DPO.

C5hbet retains personal data only for as long as necessary for the purposes for which it was collected, in compliance with applicable legal retention periods:

Once the retention period expires, data is securely deleted or anonymized so it can no longer be linked to the individual. Irreversible anonymization removes the data from the scope of the LGPD.

C5hbet implements technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or any form of improper processing:

• Encryption in transit: all communications between your device and c5hbet's servers are protected by TLS 1.3 with 256-bit SSL certificates;
• Encryption at rest: sensitive data stored in databases is encrypted using AES-256 algorithms;
• Access control: access to personal data is restricted to employees with a proven operational need, with mandatory multi-factor authentication;
• Continuous monitoring: automated intrusion detection systems (IDS/IPS) and anomaly analysis operate 24 hours a day;
• Security testing: c5hbet conducts periodic penetration testing and security audits by independent firms;
• Incident response plan: documented procedures for the identification, containment, investigation, and notification of data breaches.

No system is 100% breach-proof. In the event of a security incident involving personal data that poses a risk to data subjects, c5hbet will notify the ANPD and the affected users within 72 hours of confirming the incident, as required by the LGPD.

C5hbet uses cookies and similar technologies to enhance your platform experience, ensure session security, and understand how users interact with the site. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — session authentication, balance display, and gaming preferences. These cannot be disabled without affecting core service functionality;
• Security cookies: used to identify fraudulent access attempts, multiple accounts, and suspicious behavior. They are part of your account's protection measures;
• Analytical cookies: collect aggregated, anonymized data on how pages are used — which sections get the most traffic, session duration, errors encountered. Used exclusively to improve the platform;
• Preference cookies: save your language, layout, and gameplay preferences so you do not have to reconfigure them on every visit.

C5hbet does not use third-party tracking cookies for behavioral advertising. No data collected through cookies is shared with ad networks or external marketing platforms.

You can manage cookies through your browser — fully blocking cookies may prevent some platform features from working correctly, but you retain that right. Cookie settings are available in the banner shown on your first visit.

The LGPD grants you, as the data subject whose personal data is processed by c5hbet, the following rights, which may be exercised at any time:

• Access: request confirmation that your data is being processed and obtain a copy of the personal data c5hbet holds about you;
• Correction: request the correction of incomplete, inaccurate, or outdated data — such as your name, email, or address;
• Anonymization, blocking, or deletion: request that unnecessary, excessive, or non-compliant data be anonymized, blocked, or deleted;
• Portability: receive your data in a structured, interoperable format for transfer to another service provider;
• Information on data sharing: know which entities c5hbet shares your data with and on what legal basis;
• Consent withdrawal: withdraw consent previously given for processing activities based on that legal basis;
• Objection: object to processing carried out on the basis of legitimate interest when you disagree with the stated justification;
• Complaint to the ANPD: file a complaint with the National Data Protection Authority if you believe your rights have been violated.

C5hbet is a betting and entertainment platform intended exclusively for individuals aged 18 and over residents in Brazil. c5hbet does not intentionally collect, process, or store personal data of minors.

If you are the guardian of a child or adolescent and believe their data has been inadvertently collected by c5hbet, please contact the DPO immediately at privacidade@c5hbet.best. c5hbet will delete the data once the situation is confirmed and will close the associated account.

During the identity verification (KYC) process, c5hbet verifies the user's date of birth and blocks accounts belonging to individuals identified as being below the minimum age.

C5hbet handles financial data with an additional layer of protection, given the sensitivity of this information. Payment data is used exclusively to process transactions — deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago — and to process withdrawals to keys and accounts registered by the user.

C5hbet does not store full credit card details on its servers. Card transaction processing is handled by PCI-DSS certified payment processors, which store card data within their own secure environments. c5hbet receives only payment confirmation tokens.

Pix key and bank account data for wire transfers are stored in encrypted form and used exclusively to process withdrawals authorized by the account holder. If fraud or money laundering is suspected, c5hbet may retain financial information and report it to the relevant authorities as required by law.

C5hbet may send you communications about promotions, bonuses, product updates, and special events — such as poker tournaments with real prizes, bonuses for the Brasileirão Série A, or live casino promotions — only if you provided explicit consent during registration or through your account settings.

You may opt out of marketing communications at any time through:

• Unsubscribe link included in all marketing emails;
• Notification settings in your account area;
• Direct request to support or the DPO.

Opting out of marketing does not affect transactional and security communications — such as deposit confirmations, login alerts, withdrawal notifications, and Terms updates — which are essential to service delivery and do not require consent.

C5hbet may update this Privacy Policy periodically to reflect changes in services, legislation, or data processing practices. Updates will be communicated through:

• Email registered on the account, highlighting the main changes;
• In-platform notification upon login;
• Publication of the updated version on this page with a revised effective date.

For material changes — those that affect your rights or the way your data is used — c5hbet will provide a minimum notice period of 15 days before the changes take effect, giving you the opportunity to review them and exercise your rights if you disagree.

To exercise your rights as a data subject, clarify questions about the processing of your personal data, or submit privacy-related complaints, please contact c5hbet's Data Protection Officer:

• DPO Email: privacidade@c5hbet.best
• Recommended subject: "Data Subject Rights — LGPD" or "Privacy Request"
• Response time: up to 15 calendar days from receipt of the request

For general account inquiries, betting support, or technical issues, please use the general support channel: suporte@c5hbet.best or the live chat available 24 hours a day, 7 days a week.

If you are not satisfied with c5hbet's response to your privacy requests, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through the authority's official website.