Privacy Policy of 45xpix: How Your Data Is Protected

45xpix is the data controller for the personal data processed under this policy. We are a Sports Betting and online casino platform focused exclusively on the Brazilian market, committed to transparency and the protection of every registered user's information.

For any questions, rights requests, or privacy and data protection inquiries, you can reach us through our dedicated channel:

• Privacy email: privacidade@45xpix.net
• General support: suporte@45xpix.net
• Live chat: available directly on the platform, 24 hours a day.

The 45xpix Data Protection Officer (DPO) can be reached at dpo@45xpix.net for specific questions related to LGPD compliance and the exercise of your rights as a data subject.

45xpix collects only the data necessary to deliver its services securely, meet legal obligations, and continuously improve the user experience. Below are the categories of data we process:

45xpix does not collect sensitive data such as racial or ethnic origin, religious beliefs, health information, or political views, except where expressly required by law.

Every piece of data collected by 45xpix serves a specific purpose. We never use your information for anything beyond what is stated here, and we do not sell or rent personal data to third parties. The main purposes are:

• Service delivery: create and manage your account, process deposits and withdrawals via Pix and other methods, and record bets and jackpot payments.
• Identity verification: meet KYC and anti-money laundering obligations required by Brazil's betting sector regulations.
• Account security: detect unauthorized access attempts, suspicious activity, or behavior indicative of fraud or platform misuse.
• User Support: address inquiries, resolve disputes, process cancellation requests, and provide information about the service.
• Product improvement: analyze how the platform is used in order to fix issues, develop new features, and personalize the Sports Betting and casino experience.
• Transactional communications: send deposit, withdrawal, bet, and other account-related confirmations — no promotional messages are sent without consent.
• Marketing communications: send promotions, offers, and 45xpix news only to users who have consented to such communications and may unsubscribe at any time.
• Compliance with legal obligations: comply with requests from regulatory, judicial, and tax authorities in accordance with Brazilian law.

The Lei Geral de Proteção de Dados (Law No. 13,709/2018) requires that all personal data processing have a legal basis. 45xpix grounds its processing activities on the following legal grounds:

For consent-based activities, you may withdraw your authorization at any time through the communication settings in your 45xpix account, without affecting the provision of essential services.

45xpix does not sell or trade your personal data. Sharing only occurs in the situations listed below, and exclusively with partners that provide adequate security and confidentiality guarantees:

• Payment processors: partners responsible for processing transactions via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED. They receive only the data strictly necessary to complete the transaction.
• Casino and slots game providers: game developers receive the technical session data needed to operate the game — no unnecessary personally identifiable information is shared.
• Identity verification services: KYC partners that assist with document validation during the account verification process, where applicable.
• Technology service providers: cloud infrastructure, cybersecurity, data analytics, and technical support — all engaged under confidentiality and data protection agreements.
• Competent authorities: when required by law, court order, or a directive from a Brazilian regulatory authority — such as the Receita Federal, COAF, or Ministério da Fazenda.

All partners with access to 45xpix users' personal data are bound by Data Processing Agreements (DPAs) that restrict use of that data to agreed purposes and require security standards consistent with our own.

45xpix uses cookies and similar technologies to keep the platform running, personalize your experience, and analyze service usage. Below are the types of cookies used:

• Essential cookies: required for the platform to function — keeping your session active, remembering language preferences, and ensuring secure login. They cannot be disabled without affecting the service.
• Performance cookies: collect aggregated data on how the platform is used — which pages are visited most, session duration, clicks — to identify areas for improvement. They do not identify individual users.
• Functional cookies: remember settings you have configured on the platform, such as display preferences or language, so you do not have to redo them on every visit.
• Analytical cookies: used for internal analysis of browsing behavior on 45xpix. Data is anonymized prior to any aggregated analysis.

You can manage your cookie preferences through the banner displayed on your first visit or in your browser settings. Disabling essential cookies may affect platform functionality — particularly login session management and security features.

45xpix does not use tracking pixels from external social networks or third-party scripts for advertising purposes without the user's express consent.

Protecting your data is an operational priority at 45xpix. The security measures in place include:

• 256-bit SSL encryption: all data transmitted between your device and 45xpix servers is encrypted, making interception unfeasible.
• Payment data tokenization: credit and debit card details are never stored in readable form — only tokens generated by the payment processor are kept in our systems.
• Two-factor authentication (2FA): available to all users and strongly recommended to strengthen account security.
• Continuous monitoring: automated anomaly-detection systems monitor transactions and account access in real time, triggering alerts to the security team whenever suspicious behavior is identified.
• Internal access controls: 45xpix staff only have access to the data strictly required for their roles, with full audit logs of every access.
• Regular security testing: the platform undergoes periodic penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

In the event of a security incident affecting users' personal data, 45xpix will notify the individuals concerned and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes required by the LGPD — providing clear information about what happened, which data was affected, and what steps are being taken.

45xpix retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law. The general retention periods are:

• Account and registration data: retained while the account is active and for up to 5 years after closure, in accordance with anti-money laundering and tax regulation obligations.
• Financial transaction history: retained for 10 years as required by the Banco Central do Brasil and applicable tax legislation.
• Betting records: retained for 5 years for regulatory audit purposes and dispute resolution.
• Support communications: retained for 2 years to allow tracking of support history.
• KYC Data: retained for the period required by anti-money laundering regulations — generally 5 years after the end of the relationship.

Once the applicable retention period ends, data is securely deleted or anonymized in a way that no longer allows identification of the individual. Deletion or anonymization of closed account data is processed in regular operational cycles.

The LGPD grants you a robust set of rights over your personal data. 45xpix respects and facilitates the exercise of all of them. See what they are and how to use them:

45xpix responds to all rights requests within 15 business days. This period may be extended in complex cases, with notice to the requester. If you are not satisfied with our response, you may appeal to the Autoridade Nacional de Proteção de Dados (ANPD) via the gov.br portal.

45xpix services are strictly prohibited for individuals under 18 years of age. The platform does not intentionally collect data from minors and performs age verification as a mandatory part of the registration process.

If it is identified that data from minors was inadvertently collected — for example, due to false information provided during registration — that data will be deleted immediately and the account will be closed.

Legal guardians who identify misuse of the platform by minors in their household should contact 45xpix support immediately via live chat or at suporte@45xpix.net. Our team is trained to handle these situations swiftly and discreetly.

Some of the technology service providers used by 45xpix — such as cloud infrastructure providers and casino and slots game developers — may be located outside Brazil. When this is the case, 45xpix applies the safeguards required by the LGPD to ensure your data remains protected regardless of where it is being processed.

The measures used to ensure protection in international data transfers include:

• Standard contractual clauses that impose on the data recipient the same protection obligations required under the LGPD.
• Prior assessment of the data protection standards in the destination country, with preference given to jurisdictions with regulations equivalent to Brazil's.
• Data processing agreements (DPAs) with all partners that receive data from 45xpix users in Brazil.

Payment data — especially data related to Pix transactions — is always processed by partners certified by the Banco Central do Brasil, with the entire processing chain within Brazil's national financial infrastructure.

45xpix may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory developments, or improvements in the transparency of information provided to users.

Material changes — those affecting data subjects' rights or introducing new categories of processing — will be communicated at least 15 days in advance by email and through a prominent notice on the platform. Urgent changes required by law may take effect immediately, with simultaneous notification.

The date of the most recent update is always shown at the top of this document. A history of previous versions may be requested by email at privacidade@45xpix.net for reference purposes.

Continued use of 45xpix services after a new version of this policy takes effect constitutes acceptance of the changes made.

To exercise any right set out in this policy, submit a complaint, or learn more about how 45xpix handles your personal data, please use the channels below:

• Privacy channel: privacidade@45xpix.net — for requests relating to data access, correction, portability, and deletion.
• Data Protection Officer (DPO): dpo@45xpix.net — for specific questions about LGPD compliance and international data transfers.
• General support: suporte@45xpix.net or 24/7 live chat on the platform — for general privacy questions related to use of the services.

If, after contacting 45xpix, you are still not satisfied with the response regarding the handling of your personal data, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the public authority responsible for enforcing the LGPD in Brazil.