45vip Privacy Policy – Your Data, Protected

The 45vip is a Sports Betting and online casino platform focused on the Brazilian market, available at https://45vip.net. For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), 45vip acts as controller of the personal data collected from its users — meaning 45vip decides what data to collect, why, and how it is processed.

As the data controller, 45vip is responsible for ensuring that all data processing is carried out lawfully, transparently, and securely, in full respect of the rights guaranteed by the LGPD and any other regulations applicable to the Brazilian market. The platform has a designated Data Protection Officer (DPO), whose contact details are available in Section 13 of this document.

This policy covers all personal data that 45vip collects directly from you (such as during registration or in account settings), automatically during your use of the platform (such as access logs and browsing data), and occasionally from authorized third parties (such as identity verification providers used in the KYC process).

45vip collects personal data at different points during your interaction with the platform. We organize this data into three categories:

Data provided directly by you:

• Full name, CPF, date of birth, and email address (at registration);
• Mobile number for two-factor authentication and account notifications;
• Full residential address including zip code (requested during the KYC process);
• Identity documents (RG, CNH, or passport) and proof of address (submitted during KYC);
• Bank account details or Pix key for withdrawal processing;
• Information voluntarily provided when contacting customer support.

Data collected automatically during use:

• IP address and approximate geolocation data (state/city) for eligibility verification and security purposes;
• Browser type and version, operating system, and device type (mobile, tablet, desktop);
• Session data: pages visited, time spent, games accessed, and login times;
• Betting, deposit, and withdrawal history on the platform;
• Data from cookies and similar technologies (detailed in Section 8);
• Error logs and technical data used to diagnose platform issues.

Data received from third parties:

• Financial transaction confirmations received from payment processors such as the Central Bank's Pix system, PicPay, and Mercado Pago;
• Identity verification results from specialized KYC providers;
• Data from responsible gambling restriction lists, where required by industry regulations.

45vip uses your personal data solely for the purposes listed below. No data is processed for any purpose other than those described here without your authorization or a legal basis provided under the LGPD:

The LGPD requires that all personal data processing have a legal basis. 45vip processes your data under the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): the data needed to create your account, process payments via Pix and boleto, record bets, and provide the services you signed up for at 45vip;
• Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering compliance (Law No. 9.613/98), and maintenance of legally required financial records;
• Legitimate interest (Art. 7, IX): fraud detection and prevention, platform security, and technical analysis for service improvement — always balancing 45vip's legitimate interests against users' rights;
• Consent (Art. 7, I): sending marketing communications and using non-essential cookies. You may withdraw this consent at any time without affecting your use of the platform.

45vip does not process personal data on legal grounds other than those listed above, nor for purposes incompatible with those for which the data was originally collected, in accordance with the purpose limitation principle set out in Art. 6 of the LGPD.

45vip does not sell or trade its users' personal data. Sharing only occurs in the strictly necessary situations outlined below:

• Payment processors: to process transactions via Pix (Banco Central's system), PicPay, Mercado Pago, and credit and debit card processors, we share only the minimum data required to complete the transaction (such as CPF and amount). These partners act as data processors under contracts that require LGPD compliance;
• KYC providers: specialized identity verification services that assist us in the document validation process. Data is transmitted in encrypted form and is not permanently stored in these systems;
• Game providers: slots, live roulette, blackjack, and crash game providers may receive anonymized session identifiers to record game results. No personally identifiable data is shared with game providers;
• Competent authorities: when required by court order or formal request from the Public Prosecutor's Office, Federal Police, Federal Revenue Service, or any regulatory body with legal authority to request information. 45vip reviews each request before complying and notifies the user when legally permitted;
• Auditors and consultants: legal, accounting, or information security professionals engaged by 45vip, always under a confidentiality agreement and with access limited to only the data strictly necessary for the contracted activity.

45vip retains personal data for as long as necessary to fulfill the purpose of collection or to comply with applicable legal obligations. General retention periods are:

• Active account data: for as long as your account remains active. After closure, basic data is retained for up to 5 years to fulfill tax and legal obligations;
• KYC documents: retained for up to 5 years after account closure, as required by anti-money laundering legislation (Law No. 9.613/98);
• Financial transaction history: 5 years from the date of the transaction, in accordance with tax and regulatory obligations;
• Betting and game history: 3 years after the bet is placed, for audit and dispute resolution purposes;
• Access logs and browsing data: 6 months, the minimum retention period established by the Marco Civil da Internet (Law No. 12,965/2014);
• Support communication data: 2 years after the ticket is closed, for quality assurance and compliance purposes;
• Marketing data (with consent): until consent is withdrawn or the account is closed, whichever comes first.

Once the retention periods above expire, data is securely deleted or irreversibly anonymized. Deletion is carried out through a process that prevents any subsequent recovery of identifiable data.

45vip implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. Measures in place include:

• Encryption in transit: all communications between your device and 45vip's servers use TLS 1.3 with high-strength cipher suites;
• Encryption at rest: sensitive data (KYC documents, banking details) is stored with AES-256 encryption;
• Role-based access control: each 45vip employee can only access the data required for their specific role, and all access is logged;
• Two-factor authentication (2FA): available to all users and mandatory for employees with access to personal data;
• Continuous monitoring: anomaly detection systems and unauthorized access attempt monitoring operate 24 hours a day;
• Security testing: 45vip conducts regular vulnerability assessments and penetration testing on its infrastructure;
• Incident response plan: in the event of a data breach, 45vip will notify the National Data Protection Authority (ANPD) and affected users within the legal timeframes established by the LGPD.

Important: no security system is completely impenetrable. 45vip follows industry best practices, but cannot guarantee absolute protection against all types of attacks. We also recommend taking precautions on your end — such as using strong passwords, not reusing passwords across other services, and enabling 2FA on your account.

45vip uses cookies and similar technologies to ensure the platform functions correctly, analyze usage, and — with your consent — personalize your experience. The types of cookies used are:

• Essential cookies: required for the basic operation of the platform — such as keeping your session active after login and remembering your language preferences. These cookies cannot be disabled without affecting the site's functionality;
• Performance & analytics cookies: collect aggregated, anonymized data on how users interact with the platform — which pages get the most traffic, where errors occur, and how long users spend in each section. We use this information to improve 45vip. These cookies require your consent;
• Functional cookies: remember your personalized preferences, such as interface theme and betting settings. These require your consent;
• Marketing cookies (with explicit consent): used to measure the effectiveness of advertising campaigns and, with your consent, to personalize promotional messages. You may withdraw this consent at any time.

You can manage your cookie preferences in your 45vip account settings or in your browser settings. Blocking essential cookies may affect how the platform functions. Blocking analytics and marketing cookies will not affect your ability to place bets or use any core feature.

The LGPD grants you, as the data subject, the following rights regarding the information 45vip processes about you. All of these rights can be exercised through the contact channel described in Section 13:

To exercise any of these rights, contact the 45vip DPO at privacidade@45vip.net, providing your full name, registered CPF, and the specific right you wish to exercise. Anonymous requests or those lacking proper identification may not be fulfilled for security reasons.

If you believe 45vip has not adequately fulfilled an LGPD rights request, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) through the gov.br portal.

45vip is a platform exclusively for users aged 18 and over. We do not knowingly collect any personal data from minors. The KYC process includes date-of-birth verification specifically to ensure that only adults can access the platform's services.

If you are a parent or legal guardian and believe a minor has created an account on 45vip using your data or the child's data, contact our support team immediately via live chat or at suporte@45vip.net. The account will be preventively blocked during the investigation and, if underage use is confirmed, closed immediately with a refund of any deposited amounts after verification.

Some services used by 45vip — such as cloud infrastructure providers, casino game suppliers, and analytics tools — may be located outside Brazil. When personal data is transferred to other countries, 45vip ensures such transfers are carried out in compliance with Art. 33 of the LGPD, using one of the following safeguards:

• Transfer to countries recognized by the ANPD as providing an adequate level of data protection;
• Standard contractual clauses requiring the recipient to maintain a level of protection equivalent to that established by the LGPD;
• Binding corporate rules applied to international corporate groups;
• Specific consent from the data subject for the transfer, where none of the safeguards above apply.

In any case of international data transfer, 45vip retains control over how the data is used by the recipient and contractually requires them to adopt security measures equivalent to those described in this policy.

45vip may update this Privacy Policy periodically to reflect changes in the services offered, updates to applicable legislation, or improvements to our privacy practices. The date of the most recent update will always be shown at the top of this document.

When we make significant changes — ones that materially affect your rights or how we handle your data — you will be notified at least 15 days in advance by email and through a notice on the platform at login. For minor changes, such as text corrections or updated contact details, notification may consist solely of an updated date on the document.

Continued use of 45vip services after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree with the new terms, you may exercise your data deletion rights as outlined in Section 9 or close your account in accordance with the Terms and Conditions.

45vip has appointed a Data Protection Officer (DPO) as required by the LGPD, to serve as the point of contact between users, 45vip, and the National Data Protection Authority (ANPD). For any questions related to this Privacy Policy, your personal data, or the exercise of rights under the LGPD, you may reach us through the following channels:

• DPO Email: privacidade@45vip.net — for formal LGPD rights requests and privacy matters;
• General support email: suporte@45vip.net — for general account questions and inquiries about this policy;
• Live chat: available 24/7 directly on the platform after login, for quick questions;
• Help center: visit our FAQ for answers to the most common questions.

The 45vip DPO responds to LGPD-related requests within 15 business days. For complaints that cannot be resolved directly with the DPO, you may submit your concern to the National Data Protection Authority (ANPD) through the official gov.br portal.