3355pg Privacy Policy – How We Protect Your Data

1 About This Privacy Policy

This Privacy Policy describes how 3355pg ("3355pg", "we", "platform") collects, processes, stores, and protects the personal data of users who access and use the services available at https://3355pg.net. This document was prepared in compliance with the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018) and with all other regulations applicable to the processing of personal data in Brazil.

3355pg is a Sports Betting and online casino platform exclusively serving the Brazilian market. All personal data processed by 3355pg belongs to individuals residing in Brazil, and all processing is carried out in compliance with applicable national legislation, including the guidelines of the National Data Protection Authority (ANPD).

This Policy applies to all 3355pg services, including Sports Betting on football (Brasileirão Série A, Copa do Brasil, Libertadores), MMA/UFC, volleyball, basketball (NBB), and e-sports, as well as crash games (Aviator, Spaceman, JetX, and others), slots, Live Casino, and table games.

2 Who Controls Your Data

For the purposes of the LGPD, the controller of your personal data is the company responsible for operating the 3355pg platform, with electronic address https://3355pg.net. The controller is responsible for decisions regarding the processing of personal data, including its purpose, means, and conditions.

3355pg has appointed a Data Protection Officer (DPO), responsible for receiving communications from data subjects, guiding the internal team on privacy best practices, and maintaining dialogue with the National Data Protection Authority (ANPD). Direct contact details for the DPO are available in Section 14 of this Policy.

3 What Data We Collect

3355pg collects personal data in the following situations and categories:

3.1 Data provided directly by you

• Registration data: full name, CPF, date of birth, address (postal code, street, city, state), mobile number, and email address;
• Verification documents (KYC): copy of a government-issued ID (national ID card, driver's license, or passport) and proof of address, requested for identity verification and compliance with legal obligations;
• Financial data: information about payment methods used (Pix key, credit/debit card details, bank account for wire transfer) — we never store the full card number;
• Communications: messages sent to 3355pg support via chat, email, or WhatsApp.

3.2 Automatically collected data

• Usage data: pages visited, games played (including crash games such as Aviator and Spaceman), access times, searches made on the platform, and betting history;
• Device data: device type (mobile, tablet, desktop), operating system, browser, screen resolution, and unique device identifiers;
• Approximate location data: inferred from the IP address, used exclusively for security purposes and compliance with geographic restrictions;
• Cookies and similar technologies: detailed in Section 9.

3.3 Data Received from Third Parties

• Information from identity verification and anti-fraud providers contracted by 3355pg to support the KYC process;
• Financial transaction data received from partner payment processors, required to confirm deposits made via Pix, bank slip, card, or wire transfer.

4 How We Use Your Data

3355pg uses the personal data collected exclusively for the purposes listed below. We do not use your data for purposes incompatible with those stated, except with new consent or legal authorization:

• Create and manage your account on the platform, including login authentication and password recovery;
• Verify your identity (KYC) to comply with legal requirements for the prevention of money laundering, terrorism financing, and the protection of minors;
• Process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, in partnership with authorized payment processors;
• Operate the platform's services, including live Sports Betting, crash games (Aviator, Spaceman, JetX), slots, Live Casino, and table games;
• Preventing fraud and ensuring security of financial transactions and account access;
• Comply with legal obligations, regulatory and contractual obligations, including reporting to competent authorities when required by law;
• Provide customer support in English via chat, email, and WhatsApp;
• Send transactional communications (deposit confirmations, bet results, security alerts) — these communications cannot be disabled as they are essential to the operation of the service;
• Send marketing communications (promotions, bonuses, and 3355pg news) — only with your consent and with an easy opt-out option available at any time;
• Improve the platform based on aggregated and anonymized usage pattern data.

5 Legal Basis for Processing Your Data

Under the LGPD, all personal data processing must be grounded in a legal basis. 3355pg processes your data based on the following legal grounds set out in art. 7 of the LGPD:

• Contract performance (art. 7º, V): processing is necessary to fulfill the contract between you and 3355pg upon account creation — including the processing of bets, payments, and support;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering measures, and reporting to authorities are legal requirements that 3355pg is obligated to fulfill, regardless of your consent;
• Legitimate interest (art. 7º, IX): for fraud prevention, platform security, and service improvement purposes, provided your fundamental interests and rights are not compromised;
• Consent (art. 7, I): for sending marketing communications and promotions. You may withdraw this consent at any time in your account settings.

6 Data Sharing with Third Parties

3355pg does not sell your personal data. Sharing only occurs in the situations described below, always with contractual guarantees of confidentiality and security on the part of the recipients:

6.1 Essential service providers

• Payment processors: to process transactions via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED. These companies only access the data necessary to complete the transaction;
• KYC and anti-fraud providers: for user identity verification and detection of suspicious activity, in accordance with 3355pg's legal obligations;
• Game providers: companies such as Spribe, Pragmatic Play, SmartSoft, and others that supply the games available on the platform receive only the minimum data necessary to operate game sessions (user identifier and betting transactions);
• Technology infrastructure providers: hosting, cloud storage, and cybersecurity services, all operating under data processing agreements that ensure a level of protection equivalent to that required by the LGPD.

6.2 Authorities and legal obligations

3355pg may share data with Brazilian governmental, judicial, or regulatory authorities when required by law, court order, or applicable regulation — including the Banco Central do Brasil, the Receita Federal, and public security agencies. In such cases, sharing may occur without prior notice to the user when doing so could compromise ongoing investigations.

6.3 What we never do

• We do not sell your data to advertisers or data brokers;
• We do not share your betting history with employers, family members, or any third parties without your explicit consent;
• We do not use your data to build profiles for sale to third parties.

7 How Long We Retain Your Data

3355pg retains users' personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with the minimum retention periods required by Brazilian law:

• Registration data and active account: retained for the entire period your account remains active on 3355pg;
• Financial data and transaction history: retained for a minimum of 5 years after account closure, in accordance with tax and anti-money laundering legislation requirements;
• Verification documents (KYC): retained for a minimum of 5 years after the last transaction or account closure, as required by regulation;
• Access and security logs: retained for up to 6 months, pursuant to the Marco Civil da Internet (Law 12,965/2014);
• Support communications: retained for up to 2 years for quality assurance and dispute resolution purposes.

Once applicable retention periods expire, data is securely deleted or anonymized. Anonymized data (which cannot be used to identify the data subject) may be retained indefinitely for statistical purposes and platform improvement.

If you request deletion of your data before the applicable legal retention periods expire, 3355pg will inform you which data must be kept to meet legal obligations and which can be deleted immediately.

8 How We Protect Your Data

User data security is a structural priority at 3355pg. We apply technical and organizational measures proportionate to the risk level involved in each processing activity, including:

• SSL/TLS 256-bit encryption across all communications between your device and 3355pg's servers — the same standard used by major Brazilian banks;
• Secure password storage with irreversible cryptographic hashing — 3355pg never stores your password in plain text;
• Two-factor authentication (2FA) optionally available for additional account protection;
• Continuous monitoring of suspicious activity, unauthorized access attempts, and anomalous transaction patterns;
• Restricted access controls to users' personal data internally — only employees with an operational need have access, subject to authentication and audit logging;
• Periodic security testing conducted by our internal team and independent external auditors;
• Incident response plan which includes notifying the ANPD and affected data subjects in the event of a personal data breach, as required by the LGPD.

9 Cookies and Tracking Technologies

3355pg uses cookies and similar technologies to ensure the platform runs correctly, personalize the user experience, and analyze service performance. The types of cookies used are described below:

9.1 Essential cookies

Required for the platform to function properly. These include session cookies to keep you authenticated while browsing, language preferences, and security settings. These cookies cannot be disabled, as they are essential to the operation of the service.

9.2 Performance and Analytics Cookies

These collect information about how users interact with the platform — most visited pages, most played games (such as crash games and slots), session duration, and navigation flow. Data is used in aggregate and anonymized form to improve the experience on 3355pg.

9.3 Functionality Cookies

These remember your platform preferences — such as your configured betting limits, favorite games, and interface settings — so you don't have to reconfigure them every time you visit.

9.4 Marketing cookies

Used to display relevant offers and promotions within the platform based on your usage history. This data is never shared with external ad networks. You can decline these cookies in your account privacy settings.

The first time you access 3355pg, you will see a cookie notice with the option to manage your preferences. You can update these preferences at any time in your account or browser settings. Disabling essential cookies may affect how the platform functions.

10 Your Rights as a Data Subject

The LGPD grants you, as the data subject of personal data processed by 3355pg, the following rights, which may be exercised at any time through the platform's contact channels:

To exercise any of these rights, contact 3355pg's DPO through the channels listed in Section 14. The platform responds to data subject requests within 15 business days, as established by the LGPD. In some cases, this period may be extended by an additional 15 business days, with notice to the data subject.

If you believe your rights have not been adequately addressed, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for overseeing LGPD compliance in Brazil.

11 Minors

3355pg's services are intended exclusively for individuals who are 18 years of age or older. The platform does not intentionally collect personal data from users under 18. Registration is blocked for anyone who declares they are under 18, and identity verification (KYC) serves as an additional layer of protection.

If 3355pg determines that personal data from a minor was inadvertently collected — for example, due to a false age declaration during registration — that data will be deleted immediately, the account will be closed, and any remaining balance will be handled in accordance with our account closure policies.

If you are a parent or legal guardian and believe a minor has registered on 3355pg, please contact support immediately at contato@3355pg.net. The case will be handled with priority and confidentiality.

12 International Data Transfer

Some service providers used by 3355pg — such as cloud infrastructure providers and game studios like Spribe, Pragmatic Play, and SmartSoft — may be based outside Brazil. In such cases, international transfers of users' personal data are carried out in compliance with art. 33 of the LGPD, through:

• Transfer to countries that provide a level of personal data protection consistent with the LGPD, as assessed by the ANPD;
• Specific contractual guarantees (data protection clauses) that ensure the data subject retains the same rights and protections provided under Brazilian law;
• Internationally recognized certifications and standards for personal data protection, where applicable.

3355pg ensures that any international data transfer takes place with appropriate safeguards in place and that your rights as a data subject are upheld regardless of where the data is processed. You may request information about specific international transfers through the DPO contact channel.

13 Changes to this Privacy Policy

3355pg may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or the services we offer. Material changes will be communicated to users with reasonable advance notice through:

• A prominent notice displayed on the platform upon your next login;
• Email notification to the address registered on your account;
• Updating the "Last updated" date at the top of this document.

The most recent version of this Policy is always available at https://3355pg.net/privacy-policy. For changes that involve new data processing or a change of purpose requiring consent, 3355pg will request your explicit confirmation before proceeding with the new processing.

Continued use of the platform after non-material updates to this Policy are published constitutes acceptance of those changes. For material changes requiring consent, failure to respond within the stated timeframe will be handled in accordance with the instructions provided at the time of notification.

14 Contact, DPO & Privacy Channel

To exercise your rights as a data subject, ask questions about this Privacy Policy, report concerns about how your data is handled, or contact 3355pg's Data Protection Officer (DPO), please use the following channels:

• Privacy email: contato@3355pg.net — with the subject line "Data Privacy – [your request]";
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — let the agent know your request is related to the LGPD;
• WhatsApp: number available on the account dashboard after logging in.

3355pg's DPO is the official point of contact with the National Data Protection Authority (ANPD) and with data subjects. All requests received are logged, and the data subject receives an acknowledgment within 2 business days. The full response deadline is up to 15 business days from the acknowledgment date.

If you believe a response from 3355pg was unsatisfactory or that your rights were not properly respected, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), whose contact details are available on the official Brazilian federal government website.