57wim Privacy Policy – Your Data Protected

The 57wim is the Sports Betting and online casino platform accessible at 57wim.best, operated in compliance with Brazilian legislation applicable to the online entertainment sector. For LGPD purposes, the 57wim acts as controller of users' personal data — meaning it is responsible for decisions about how and why that data is collected and processed.

Our official contact channel for matters related to personal data is suporte@57wim.best. Inquiries specifically related to the LGPD should be directed to our Data Protection Officer (DPO), identified in Section 12 of this Policy.

The 57wim collects only the data necessary for the purposes described in this Policy. The table below details the data categories, collection source, and primary purpose:

The 57wim does not collect sensitive data as defined by the LGPD (such as racial origin, religion, health data, or biometrics), except where strictly necessary for identity verification and only with the data subject's explicit consent.

The personal data collected by the 57wim are used exclusively for the purposes listed below. We do not use personal data for any purpose not stated in this Policy without the data subject's renewed consent:

• Account operation: account creation and maintenance, access authentication, bet processing, deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, or TED;
• Identity verification (KYC): fulfillment of legal obligations related to anti-money laundering and eligibility verification (18 years of age or older, resident in Brazil);
• Security and fraud prevention: monitoring of suspicious activity, detection of multiple accounts, prevention of fraudulent chargebacks, and protection of the entire user community;
• Personalization: display of relevant tips, promotions suited to your profile, and notifications about sports you follow — such as Brasileirão, UFC, or NBB — based on your usage history;
• Responsible gambling: monitoring behavioral patterns to identify possible signs of problem gambling and trigger support protocols when needed;
• Operational communication: sending bet confirmations, deposit and withdrawal receipts, security alerts, and policy updates;
• Marketing (with consent): sending promotions, freebets, and news from 57wim via email, SMS, or push — only for users who have opted in to receive this type of communication;
• Compliance with legal obligations: record retention required by law, compliance with judicial and regulatory requests, and adherence to applicable Brazilian legislation.

The LGPD requires that all personal data processing be grounded in a specific legal basis. The 57wim processes your data based on the following legal grounds established in Article 7 of Law No. 13,709/2018:

• Contract performance: processing necessary to fulfill the platform's terms of use you agreed to when creating your account — including handling bets, deposits, and withdrawals;
• Compliance with a legal or regulatory obligation: identity verification (KYC), retention of financial records, and cooperation with regulatory and judicial authorities;
• Legitimate interest: fraud prevention, platform security, responsible gambling monitoring, and continuous product improvement — always balanced against the rights and reasonable expectations of data subjects;
• Consent: sending marketing communications, advanced content personalization, and non-essential cookies. Consent may be withdrawn at any time.

The 57wim does not sell users' personal data. Data sharing with third parties occurs only in the situations below, all properly contracted with data protection clauses:

• Payment processors: to facilitate transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED — these partners receive only the data strictly necessary to process each transaction;
• Identity verification (KYC) providers: specialized platforms for document verification that securely confirm user identity;
• Cloud infrastructure providers: hosting and storage services that process data under strict confidentiality agreements and in full compliance with the LGPD;
• Game and casino providers: when you access games from third-party providers on the platform, minimal session data may be shared with the game provider for technical functionality;
• Regulatory and judicial authorities: when required by court order, request from a competent authority, or fulfillment of a legal obligation — no data is provided voluntarily beyond what is strictly required.

All third parties with whom the 57wim shares data are contractually required to use that information solely for the authorized purposes and to maintain security standards equivalent to our own.

The data of users of 57wim are stored on servers with the following security controls:

• 256-bit SSL encryption across all data transmission between the user and the platform;
• Encryption at rest for sensitive data such as identity documents, financial data, and passwords (stored as an unrecoverable bcrypt hash);
• Role-based access control (RBAC) — only staff with a legitimate need may access user data, and every access is logged;
• Continuous intrusion monitoring and anomalous activity detection across systems;
• Regular encrypted backups stored in separate geographic locations;
• A documented incident response plan, with the obligation to notify the ANPD and affected data subjects within the legally required timeframe in the event of a breach.

The 57wim conducts regular security audits and penetration tests (pentests) to identify and fix vulnerabilities before they can be exploited. No technical measure eliminates risk entirely, but our approach is one of continuous investment in protection.

The 57wim retains personal data for as long as necessary to fulfill each purpose or applicable legal obligation. The main retention rules are:

• Active account data: retained for the entire period the account is active and for up to 5 years after closure, in accordance with compliance requirements and anti-money laundering regulations;
• Financial records (deposits, withdrawals, bets): retained for at least 5 years after each transaction, in accordance with Brazilian tax and regulatory obligations;
• KYC verification documents: retained for at least 5 years after account closure, or for the period required by applicable law at the time;
• Support and communication data: tickets and chat history retained for 2 years for dispute resolution purposes;
• Marketing data (consent withdrawn): deleted or anonymized within 30 days of consent being withdrawn, except for the consent records themselves, which are retained as proof of compliance.

Once the retention period ends, data is securely deleted or anonymized so that it can no longer be linked to the individual. Anonymized data may be used for internal statistical analysis without restriction.

The 57wim uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and — with your consent — personalize content and analyze performance. Below are the types of cookies we use:

The 57wim is a platform exclusively for users aged 18 and over. We do not knowingly collect data from minors. Registration requires age confirmation and CPF verification, which includes cross-referencing the date of birth on file with the Brazilian Federal Revenue Service.

If the 57wim identifies that a minor's data was inadvertently collected, the account will be immediately suspended, the data deleted, and any deposited balance returned to the document holder used during registration, following an investigation. If you are aware that a minor has created an account, please contact suporte@57wim.best immediately.

Some of the technical partners of 57wim — such as cloud infrastructure providers and casino game suppliers — may process data on servers located outside Brazil. When this occurs, the 57wim ensures that:

• Data transfers are carried out only to countries that provide an adequate level of data protection as assessed by the ANPD, or on the basis of standard contractual clauses equivalent to those required by the LGPD;
• Contracts with these vendors include data protection obligations equivalent to those applicable in Brazil;
• The volume of data transferred is the minimum necessary for the specific service to function.

You may request information about specific international transfers involving your data by contacting our DPO at the email address provided in Section 12.

The LGPD grants you a robust set of rights over your personal data. The 57wim commits to fulfilling all requests within 15 business days. See your rights and how to exercise them:

• Access: confirm whether we process your data and obtain a copy of what we hold about you;
• Correction: update incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion: for data that is unnecessary or processed in violation of the LGPD;
• Portability: receive your data in a structured format for transfer to another service, where technically feasible;
• Erasure: request the deletion of data processed on the basis of consent, except for data we are required to retain by law;
• Sharing information: find out which third parties your data has been shared with;
• Withdrawal of consent: withdraw consent given for processing based on that legal basis, at no cost and with no penalty;
• Right to object: object to processing carried out on the basis of legitimate interest that causes a disproportionate impact on you.

To exercise any of these rights, send an email to suporte@57wim.best with the subject line "LGPD Rights – [your full name]" and a description of your request. We may ask you to verify your identity before processing it.

The 57wim has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance, handling data subject requests, and maintaining the relationship with the ANPD. Any request related to this Policy or the processing of your data may be directed to:

• DPO Email: suporte@57wim.best (subject: "DPO – [request description]")
• General support: suporte@57wim.best
• Live chat: available 24h on the dashboard after login
• Response time: up to 15 business days for LGPD rights requests; up to 48 hours for general operational requests

Our support team is available in Brazilian Portuguese every day of the week, including weekends and national holidays — because we know privacy questions can come up at any time.

The 57wim may update this Policy at any time to reflect changes in legislation, our data processing practices, or the services offered. We are committed to:

• Notify users of material changes by email at least 15 days before they take effect;
• Keep previous versions of this Policy available upon request;
• Update the version date at the top of the document with every modification, even minor ones;
• Request new consent when a change affects consent-based data processing.

The latest version of this Policy will always be available at 57wim.best/privacy-policy. Continuing to use the platform after the effective date of an update constitutes acceptance of the new terms.