Privacy Policy of the 6rrrr – Your Data, Protected

This Privacy Policy describes how the 6rrrr — operator of the platform available at 6rrrr.best — collects, uses, stores, shares, and protects the personal data of its users, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable regulations in Brazil.

By creating an account, making a deposit, placing a bet, or simply browsing the 6rrrr, you acknowledge that your data will be processed as described in this document. If you have any questions or wish to exercise your rights as a data subject, contact details are provided at the end of this policy.

This Privacy Policy should be read together with the Terms and Conditions of the 6rrrr, which contain additional rules governing the use of the platform.

The 6rrrr collects personal data at different points during your interaction with the platform. Below are the categories of data and the contexts in which they are collected:

1.1 Data provided directly by you

• Registration: full name, date of birth, CPF, email address, mobile number, and password;
• Identity verification (KYC): government-issued ID image (RG or CNH), a selfie, and proof of address;
• Banking details: Pix key, credit or debit card details (processed through a PCI-DSS certified gateway — 6rrrr does not store the full card number), bank account details for wire transfers;
• Communications: content of messages sent to the support team at 6rrrr by email or chat.

1.2 Automatically collected data

• Browsing data: IP address, device type, operating system, browser, pages visited, session duration, and clicks;
• Betting and gaming data: full betting history, markets accessed, amounts wagered, and results;
• Transaction data: deposit and withdrawal history, payment method used, amount, and time of each transaction;
• Geolocation data: country and state of access, derived from IP address (we do not collect GPS location).

1.3 Categories of data we do not collect

The 6rrrr does not collect or process sensitive data as defined by Art. 5, II of the LGPD, including health data, sexual orientation, racial or ethnic origin, religious or philosophical beliefs, political views, or biometric data beyond what is strictly necessary for identity verification.

The 6rrrr processes your personal data exclusively for the purposes listed below. We do not use your data for anything beyond what is described here:

2.1 Provision of platform services

• Create and maintain your user account;
• Process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer;
• Process withdrawals via Pix to the bank account linked to your CPF;
• Record and settle sports bets and casino games;
• Provide technical support and customer service in Brazilian Portuguese.

2.2 Identity verification and compliance

• Verify your identity to fulfill KYC (Know Your Customer) obligations;
• Confirm that you are at least 18 years of age;
• Prevent fraud, money laundering, and terrorist financing, as required by applicable Brazilian law;
• Respond to legitimate requests from regulatory, law enforcement, and judicial authorities.

2.3 Platform security and integrity

• Detect and prevent unauthorized access to user accounts;
• Identify betting patterns that may indicate match manipulation or bonus abuse;
• Maintain audit records for dispute and complaint investigation.

2.4 Communication and marketing (with consent)

• Send transactional notifications (deposit confirmation, bet settlement, withdrawal notice);
• With your consent, send communications about promotions, new markets, and features of 6rrrr;
• You can opt out of marketing communications at any time by going to "Notification preferences" in your account or by clicking "unsubscribe" in any email you receive.

2.5 Product improvement

• Analyze platform usage patterns to identify opportunities for improving interface and user experience;
• Personalize the display of markets and content based on your browsing and betting history;
• Run A/B tests on new features.

The LGPD requires that all personal data processing have a specific legal basis. The 6rrrr bases its data processing operations on the following legal grounds:

• Contract performance (art. 7, V of the LGPD): processing necessary to fulfill the contract entered into with you upon acceptance of the Terms and Conditions — this includes processing deposits, withdrawals, bets, and keeping your account active;
• Legal or regulatory obligation (art. 7, II of the LGPD): processing required to comply with legal obligations, such as KYC identity verification, anti-money laundering measures, and responding to requests from regulatory authorities;
• Legitimate interest (art. 7, IX of the LGPD): processing for fraud prevention, platform security, product improvement, and experience personalization — always balanced against your rights as a data subject;
• Consent (art. 7, I of the LGPD): for sending marketing communications and using non-essential cookies. You may withdraw this consent at any time without affecting your access to the other services offered by 6rrrr.

The 6rrrr does not sell users' personal data. Data sharing occurs only in the situations described below, for defined purposes and within the limits of the LGPD:

4.1 Operational partners

• Payment processors: transaction data shared with PCI-DSS certified payment gateways to process deposits via Pix, boleto, card, PicPay, and Mercado Pago. These partners act as data processors and may only use the data for the specific purpose of payment processing;
• KYC providers: document images and selfies may be submitted to certified identity verification service providers, who process the data solely for the purpose of identity verification;
• Technology providers: companies that provide cloud infrastructure, security, and technical support for platform operations — bound by confidentiality and data protection agreements.

4.2 Authorities and legal obligations

The 6rrrr shares data with regulatory, law enforcement, and judicial authorities when required by law, court order, or a substantiated request from a competent authority. In such cases, we share only the minimum information necessary to comply with the requirement.

4.3 What we don't do

• We do not sell your data to advertising companies or data brokers;
• We do not share your betting history with employers or insurance companies;
• We do not transfer data to other users of the platform;
• We do not share data with competing platforms.

The 6rrrr retains your data for the minimum time necessary for the purposes that justified its collection, always observing the minimum retention periods required by law:

• Active account data: retained for the entire period your account remains active on the 6rrrr;
• Financial transaction data: retained for a minimum of 5 years after each transaction, in accordance with tax and anti-money laundering obligations (Law No. 9,613/1998);
• KYC documents: retained for the period required by betting industry regulations, which may extend up to 5 years after account closure;
• Betting history: retained for up to 5 years for audit and dispute resolution purposes;
• Support communications: retained for up to 2 years for quality control and complaint resolution purposes;
• Browsing data and cookies: session data deleted when the browser is closed; analytical cookies with a maximum retention period of 13 months.

After account closure — whether initiated by you or by the 6rrrr — data is retained for the legal periods stated above and then securely deleted, unless a judicial or regulatory order requires otherwise.

The 6rrrr implements technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure:

• Encryption in transit: 256-bit SSL/TLS encryption on all communications between your device and our servers;
• Encryption at rest: sensitive data (such as CPF and banking details) stored with AES-256 encryption;
• Access control: data access restricted to staff with a justified operational need, with multi-factor authentication in place;
• Continuous monitoring: intrusion detection and anomaly monitoring systems operating 24 hours a day;
• Security testing: penetration tests (pentests) carried out periodically by independent specialized teams;
• Incident response plan: documented procedures for identifying, containing, and reporting security incidents.

In the event of a security incident that may significantly affect your personal data, the 6rrrr will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected data subjects within the deadlines established by the LGPD.

The LGPD grants you, as a data subject, a set of rights that 6rrrr is committed to honoring. Here is what you can request:

To exercise any of these rights, submit a request to privacidade@6rrrr.best with the subject line "LGPD Rights – [type of request]". For your security, we may need to verify your identity before processing the request.

If you believe your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), as set out in art. 18, §1 of the LGPD.

The 6rrrr uses cookies and similar technologies to ensure the platform functions correctly, analyze usage, and personalize your experience. See the categories of cookies we use:

8.1 Essential cookies

Required for the platform's basic functionality — such as keeping your session active after login, processing the deposit flow, and securing the connection. They cannot be disabled without affecting your use of the 6rrrr.

8.2 Analytics cookies

Used to understand how users navigate the platform — which pages they visit, which markets they access most often, and where they experience difficulties. Data is collected in aggregate and used solely to improve the experience. You can decline these cookies without losing access to the platform.

8.3 Preference cookies

They store your preferences, such as the favorite sport displayed on your home screen, language, and notification settings. Disabling these cookies will not prevent you from using the platform, but some preferences may not be saved between sessions.

8.4 Cookie management

You can manage your cookie preferences through your browser settings or, for non-essential cookies, through the privacy preferences panel available on the platform. Most browsers allow you to block or delete cookies at any time — check your browser's help section for instructions.

The 6rrrr is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires date of birth confirmation, and during KYC verification, identity documents are reviewed.

Should the 6rrrr it is identified that data belonging to a person under 18 has been collected — whether through a false declaration at registration or by any other means — the account will be immediately closed, all data will be deleted, and any remaining balance will be handled in accordance with the account closure rules for Terms & Conditions violations.

If you become aware that a minor has created an account on 6rrrr, contact us immediately at suporte@6rrrr.best.

In some cases, operating the platform may involve data processing by infrastructure providers located outside Brazil — such as cloud computing services. When this occurs, the 6rrrr adopts the following safeguards:

• Entering into contracts with specific data protection clauses compliant with LGPD requirements;
• Preference for providers operating in countries with an adequate level of data protection recognized by the ANPD;
• Data protection impact assessment (DPIA) when the transfer involves special category data or a large volume of data subjects.

International transfers, when they occur, are strictly limited to what is necessary to provide the platform's services and never involve the sale or transfer of data to third parties abroad.

The 6rrrr may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. When changes are significant, you will be notified at least 10 days in advance via:

• Email to the address registered on your account;
• Visible notification within the platform upon login;
• Updating the "Last updated" date at the top of this page.

Continued use of the platform after the new version takes effect constitutes acceptance of the changes. If you do not agree with the changes, you may request account closure before the effective date at no additional cost.

The version history of previous editions of this Policy is available upon request to the DPO at privacidade@6rrrr.best.

The 6rrrr has appointed a Data Protection Officer (DPO) to handle requests, questions, and complaints regarding the processing of personal data, as required by Article 41 of the LGPD.

To exercise your rights as a data subject or to ask any questions about this Policy, please get in touch:

• DPO Email: privacidade@6rrrr.best
• Suggested subject line: "LGPD Rights – [request type]" or "Question – Privacy Policy"
• Response time: up to 15 business days
• General support: suporte@6rrrr.best (for questions unrelated to data privacy)

You can also reach our support team in real time via the live chat available inside the platform after logging in. For privacy matters, the chat will escalate to the DPO when needed.

If you believe that the 6rrrr did not adequately respond to your request regarding personal data, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), through the gov.br/anpd portal.