Last updated: January 2026

555aa Privacy Policy – How We Protect Your Personal Data

The 555aa takes your data privacy seriously. This page clearly explains what we collect, why we use it, who we share it with — and what we will never do with your information.

SSL 256-bit
LGPD Compliant
No data selling
100% PT-BR
End-to-end encryption
24×7 Support

Privacy in Practice: What This Policy Covers

Six concrete principles that guide data processing at 555aa.

What We Collect

Name, CPF, email, phone number, address, device data, and transaction history — only what is necessary to operate your account securely, meet legal obligations, and deliver a personalized experience.

How We Use It

Your data is used to operate your account, process Pix deposits and withdrawals, meet regulatory requirements, prevent fraud, and send relevant communications — provided you have given your consent.

Who We Share With

Only with essential operational partners — payment providers, certified game providers, and authorities when required by law. Never for third-party advertising purposes without your consent.

How We Protect It

256-bit SSL encryption across all communications, secure storage with role-based access control, two-factor authentication available, and periodic security audits conducted by specialized teams.

Your Rights (LGPD)

You have the right to access, correct, port, and delete your data. You may withdraw marketing consents at any time. All requests are handled by our support team within 15 business days.

Cookies and Tracking

We use essential cookies to keep the platform running and analytics cookies to improve your experience. You can manage your cookie preferences at any time in your account settings.

This Privacy Policy is an integral part of the Terms and Conditions of the 555aa. By creating an account or using the platform, you confirm that you have read and understand how your data is processed as described here and in accordance with the LGPD (Law No. 13.709/2018).

1Data Controller

The 555aa, operated in https://555aa.click, is the controller of personal data collected from platform users, as defined by the General Data Protection Law (LGPD, Law No. 13.709/2018). As the data controller, the 555aa is responsible for determining the purposes and means of processing the personal data of registered Brazilian players.

This Policy applies to all personal data collected through the website https://555aa.click, the mobile app — when available — and any official communication channel of the 555aa, including the support chat and email.

To contact our Data Protection Officer (DPO) or to exercise any right set out in this Policy, please email suporte@555aa.click with the subject line "Data Privacy".

This Policy was last reviewed on January 2026. We recommend checking this page periodically to stay informed of any updates.

2Data We Collect

The 555aa collects only the data strictly necessary to operate the platform, meet legal obligations, and provide a safe experience for players. Data is collected at three key moments: registration, platform use, and financial transactions.

Data provided directly by you:

  • Full name as it appears on your identity document;
  • CPF (Individual Taxpayer Registration);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Full residential address;
  • Identification documents submitted during the KYC process (national ID, driver's license, or passport, and proof of address);
  • Payment method details used (Pix key, tokenized credit/debit card data).

Data collected automatically during use:

  • IP address and approximate geographic location;
  • Browser or app type and version;
  • Operating system and device model;
  • Pages visited, session duration, and browsing behavior on the platform;
  • Betting history, games accessed, and session results;
  • Records of deposits, withdrawals, and bonuses used;
  • Access logs including date, time, and connection origin.
Important: 555aa never stores full credit or debit card numbers. Card data is tokenized by the certified payment processor and never resides on the platform's servers.

3Legal Bases for Data Processing

The processing of personal data by the 555aa is grounded in the following legal bases established by the LGPD:

Legal Basis Application at 555aa
Contractual performance Manage your account, process deposits and withdrawals via Pix, bank slip, or card, and ensure access to the games and services you have contracted.
Compliance with a legal obligation Identity verification (KYC), anti-money laundering compliance, cooperation with competent authorities, and adherence to regulatory standards governing the betting industry in Brazil.
Legitimate interest Platform security, fraud prevention, behavioral analysis for service improvement, and the protection of 555aa's rights and those of other users.
Consent Sending marketing communications, newsletters, promotions, and new game notifications — revocable at any time without affecting your use of the platform.

When processing is based on consent, you have the right to withdraw it at any time through your account settings or by contacting support. Withdrawing consent for marketing does not affect the normal operation of your account at 555aa.

4Purposes of Data Use

The 555aa uses collected data solely for the purposes described below. No data is used outside these purposes without prior notice to the data subject and, where required, renewed consent.

  • Account operation: creation, authentication, maintenance, and closure of player accounts;
  • Financial processing: validation and processing of deposits via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay, as well as withdrawal processing via Pix or TED;
  • Identity verification: document verification to meet KYC requirements and anti-money laundering obligations under Brazilian law;
  • Player support: handling requests, complaints, and inquiries via live chat or email, in Portuguese 24 hours a day;
  • Security and fraud prevention: detection of suspicious behavior, duplicate accounts, and misuse of bonuses or payment methods;
  • Experience personalization: recommendations for relevant games — such as slots, crash games, or live blackjack — based on your usage history, with no sharing with third parties;
  • Marketing communications: sending promotions, bonuses, and notifications about new games, exclusively to users who have given their consent;
  • Regulatory compliance: generating reports and fulfilling requirements from regulatory, law enforcement, or judicial authorities when legally compelled.

The 555aa does not use your data for profiling purposes that produce automated decisions with significant effects on you, except for fraud prevention — in which case you have the right to request human review of the decision.

5Data Sharing with Third Parties

The 555aa does not sell, rent, or trade players' personal data with third parties for advertising or commercial purposes. Data sharing occurs only in the following specific and necessary situations:

  • Payment providers: Brazilian financial institutions and payment processors responsible for executing transactions via Pix, boleto, credit/debit card, Mercado Pago, and TED bank transfer — including Nubank, Itaú, Bradesco, Banco do Brasil, Inter, C6 Bank, and Santander. These partners receive only the minimum data necessary to complete the transaction;
  • Game providers: certified developers such as Evolution Gaming, Pragmatic Play, and others that supply the games available on the platform. Sharing is limited to an anonymized session identifier; no complete personal data is transmitted;
  • Technology providers: companies that provide hosting infrastructure, cybersecurity, data analytics, and fraud prevention services, operating under contracts with strict confidentiality clauses and a prohibition on secondary use of data;
  • Public authorities: government, law enforcement, or judicial bodies where there is a legal obligation or court order, within the exact limits determined by the competent authority.

All third parties with access to personal data of players from 555aa are contractually required to process such data in compliance with the LGPD and security standards equivalent to those adopted by the platform.

555aa never shares your data with advertisers, data brokers, social media platforms, or any other entity for third-party behavioral advertising purposes.

6Data Storage & Security

The 555aa adopts a robust set of technical and organizational measures to protect players' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

Implemented technical measures:

  • 256-bit SSL encryption across all communications between the user's device and the platform's servers;
  • Data stored on servers with role-based access controls — only staff with a legitimate operational need have access to specific data categories;
  • Tokenization of sensitive financial data, preventing full card numbers from being stored in the systems of 555aa;
  • Two-factor authentication available to all users who want an extra layer of account protection;
  • Continuous monitoring of access and intrusion attempts with automatic alerts and incident response;
  • Periodic security audits conducted by internal teams and specialized external firms.

In the event of a security incident that may affect your data, the 555aa will notify the National Data Protection Authority (ANPD) within the legally required timeframe and inform affected users by email within 72 hours, with guidance on how to protect themselves.

Your role in staying protected: Choose a strong, unique password for your 555aa account, enable two-factor authentication, and never share your login credentials with anyone. If you notice any suspicious activity, contact support immediately via live chat.

7Data Retention

The 555aa retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal and regulatory obligations. The general retention periods are:

  • Registration and active account data: retained for as long as the account is active and for up to 5 years after closure, as required by tax and anti-money laundering legislation;
  • Financial transaction records: retained for up to 5 years after each transaction, as required by the Brazilian Federal Revenue Service and the Central Bank of Brazil;
  • Identity verification documents (KYC): retained for the duration of the account and for up to 5 years after closure;
  • Access logs and gaming sessions: retained for up to 12 months for security purposes and dispute resolution;
  • Marketing data (with consent): retained until consent is withdrawn by the user.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified.

8Cookies & Tracking Technologies

The 555aa uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect aggregated analytics data. There are three categories of cookies in use:

  • Essential cookies: required for the basic operation of the site — authentication, session management, language preferences, and security. They cannot be disabled without impairing your use of the platform;
  • Analytical cookies: collect aggregated and anonymized information about how users navigate the platform — which pages they visit, how long they stay, and which features they use. This data is used exclusively for internal improvements and is never shared with third parties for advertising purposes;
  • Preference cookies: store user choices such as visual theme, notification settings, and game preferences to personalize your experience on future visits.

The 555aa does not use third-party cookies for behavioral advertising. You can manage your cookie preferences at any time through your account settings or your browser settings, noting that disabling essential cookies may affect platform functionality.

By continuing to use the platform after the cookie notice, you consent to the use of essential and analytics cookies as described here. Preference cookies are optional and may be declined without affecting your access to games.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights as the owner of the personal data processed by the 555aa. These rights may be exercised at any time, free of charge, through platform support:

Access

Request a copy of all personal data 555aa holds about you, including details on its purpose, origin, and any sharing.

Correction

Request the correction of incomplete, inaccurate, or outdated data. Basic account details can be updated directly in your account area.

Deletion

Request the deletion of data processed on the basis of consent, where there is no legal obligation to retain it. Financial transaction data is subject to mandatory legal retention.

Portability

Request your data in a structured, machine-readable format for transfer to another service provider, where technically feasible.

Consent Withdrawal

Withdraw your consent to marketing communications at any time through your account settings or via support, with no impact on your account functionality.

Information on Automated Decisions

Request human review of any automated decision that has a significant effect on you, such as an account block triggered by an anti-fraud system.

All requests related to the exercise of rights will be responded to within 15 business days. For more complex requests requiring the collection and organization of large volumes of data, the deadline may be extended by a further 15 business days, with prior notice to the data subject explaining the reason. Please get in touch via email at suporte@555aa.click with the subject line "LGPD Rights" or via live chat, available 24 hours a day.

10Minors

The platform 555aa is intended exclusively for people who are 18 years of age or older. We do not intentionally collect personal data from minors, and registration by minors violates our Terms and Conditions.

If we become aware that we have collected data from a user under the age of 18 — whether through third-party information or internal detection — the account will be immediately suspended, the data deleted, and any real-money balance will be refunded to the original payment method.

Parents and guardians who identify platform use by a minor should contact support immediately via live chat or by emailing suporte@555aa.click so that appropriate action can be taken without delay.

Registration and use of 555aa by anyone under the age of 18 is strictly prohibited. The platform enforces age verification as part of the KYC process to prevent unauthorized access by minors.

11International Data Transfer

Due to the global nature of hosting technologies and certified game providers, some personal data may be processed on servers located outside Brazil. When this occurs, the 555aa ensures that the transfer is carried out in compliance with LGPD requirements, adopting at least one of the following safeguards:

  • Transfer to countries recognized by the ANPD as providing an adequate level of data protection;
  • Contracts with specific data protection clauses (standard contractual clauses) that hold international recipients to the same standards required by the LGPD;
  • Recognized compliance certifications or seals demonstrating a level of protection equivalent to that required in Brazil.

The list of countries and partners to which data may be transferred internationally is available upon request through 555aa.

12Changes to This Policy

The 555aa may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, services offered, or regulatory requirements in Brazil's online betting industry.

Significant changes will be communicated with a minimum advance notice of 7 calendar days via the registered email address and through a prominent notice in the logged-in area of the platform. For lower-impact changes — such as contact updates or grammatical corrections — the notice period may be shortened.

Continued use of the platform after an updated version of this Policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure and withdrawal of your available balance before the effective date.

We recommend keeping your registered email address up to date so you can receive notifications about changes to this Policy. You can update your email at any time under "My Account" on the 555aa.

13Contact, DPO & Complaints

For any questions, requests related to your rights as a data subject, or complaints about data processing by the 555aa, use the following channels:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform — response in under 2 minutes most of the time;
  • Email: suporte@555aa.click — use the subject line "Data Privacy" or "LGPD Rights" for priority routing;
  • Data Protection Officer (DPO): for matters specifically related to data protection and rights requests, use the same email with the subject line "DPO – [subject]".

If after contacting the 555aa you believe your rights as a data subject have not been properly addressed, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the Brazilian public authority responsible for overseeing compliance with the LGPD.

The 555aa is committed to cooperating with the ANPD and data subjects to resolve any issues related to the processing of personal data.

Frequently Asked Questions About Privacy at 555aa

The most common questions from Brazilian players about how their data is handled.

No, not at all. The 555aa does not sell, rent, or trade players' personal data with third parties for advertising or commercial purposes. Data sharing takes place only with essential operational partners — such as payment processors for executing Pix or card transactions — and with public authorities when required by law. All partners with access to data are contractually required to use that information solely for the authorized purpose. If you receive third-party advertising after registering with 555aa, it did not originate from our platform.

You may request the deletion of data processed on the basis of consent — such as marketing preferences — at any time by contacting 555aa via live chat or by emailing suporte@555aa.click with the subject line "Data Deletion". For data related to financial transactions and account history, there is a legal obligation to retain records for up to 5 years after account closure, even following a deletion request, as required by the Brazilian Federal Revenue Service and anti-money laundering legislation. In such cases, you will be informed of which data is retained, for how long, and on what legal basis.

The 555aa stores the Pix key registered in your account to make future deposit and withdrawal transactions easier — but only with your authorization. Credit or debit card details are never stored on our servers: the full card number is tokenized by the certified payment processor, and 555aa only retains the secure token. You can remove your registered Pix key or other payment details at any time through your account settings or by contacting support.

No. The 555aa only sends marketing communications, promotions, and newsletters to users who have explicitly consented during registration or afterward in their account settings. Operational communications — such as deposit confirmations, withdrawal notifications, security alerts, and account updates — are sent regardless of marketing consent, as they are necessary to operate your account. You can withdraw your marketing consent at any time by going to "My Account" → "Notification Preferences" or by clicking the unsubscribe link in any marketing email you receive.

Following account closure — whether voluntary or by the platform's decision — the 555aa retains personal data and transaction records for the legally required period (up to 5 years for financial data, in accordance with tax and anti-money laundering legislation). Marketing preference data and cookies are deleted immediately upon account closure. Once the applicable legal retention periods have expired, all data is securely deleted or permanently anonymized. You may request details about the status of your data after account closure by emailing suporte@555aa.click with the subject line "Post-Closure Data".
🔒

Your Data, Kept Safe. Your Experience, Our Priority.

The 555aa was built with privacy and security at every layer. Sign up and play knowing that your personal and financial information is protected to the highest available standards — 256-bit SSL, LGPD compliant, and zero data selling.

Free registration · Minimum deposit R$ 20.00 via Pix · 24/7 support in Portuguese · For players aged 18 and over only

The 555aa operates in compliance with the LGPD (Law No. 13.709/2018). All personal and financial data is encrypted with 256-bit SSL. For questions or to exercise your rights, contact suporte@555aa.click with the subject line "Data Privacy". You can also review the Terms and Conditions platform.

Online gaming should be a form of responsible entertainment. Set limits and play within your means. Self-control tools are available at Responsible Gaming. Prohibited for users under 18.
Português