58ff Privacy Policy – Your Data Protected

1. About This Privacy Policy

The 58ff is a Sports Betting and online casino platform focused on the Brazilian market. This Privacy Policy was drafted in compliance with the General Personal Data Protection Law (LGPD — Federal Law No. 13,709/2018) and supplements the Terms and Conditions of the platform.

This document applies to all users who access the platform via browser on desktops, mobile phones, or tablets, as well as through the official app of 58ff for Android. Covers all available services: Sports Betting (football, volleyball, basketball NBB, MMA/UFC, e-sports), Live Casino, crash games, poker, blackjack, and all other games in the catalog.

2. What Data We Collect

The 58ff only collects the information necessary to deliver its services securely and in compliance with legal obligations. The data collected falls into the following categories:

The 58ff does not collect data in sensitive categories such as racial origin, religious beliefs, biometric data, political opinions, or health information, except where expressly required by law or with the explicit consent of the data subject.

3. How We Use Your Data

The personal data collected by 58ff are used exclusively for the following purposes:

• Account operation: create, authenticate, and manage your player account on the platform;
• Identity verification (KYC): verify your identity as required by anti-money laundering regulations and fraud prevention measures;
• Transaction processing: process deposits via Pix, bank slip, credit and debit card, PicPay, Mercado Pago, and TED, as well as withdrawals via Pix;
• Service delivery: enable access to Sports Betting, crash games, poker, blackjack, Live Casino, and all other available games;
• Responsible gambling: monitor gaming behavior patterns to identify signs of problematic use and trigger protective tools when necessary;
• Customer support: answer questions, resolve issues, and maintain a record of support interactions;
• Legitimate communications: send account notifications, transaction updates, promotions you have opted into, and important platform announcements;
• Security & fraud prevention: detect and block unauthorized access, use of multiple accounts, money laundering, and other prohibited conduct;
• Compliance with legal obligations: comply with requests from competent authorities pursuant to judicial or regulatory orders.

4. Legal Basis for Processing (LGPD)

All personal data processing carried out by the 58ff has an identified legal basis in accordance with Article 7 of the LGPD. The bases used are:

• Contract performance (art. 7, V): processing required to perform the service agreement entered into at the time of registration — operating the account, processing bets, and handling financial transactions;
• Compliance with a legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and fulfillment of judicial and regulatory requirements;
• Legitimate interest (art. 7, IX): platform security, fraud prevention, responsible gambling monitoring, and continuous service improvement;
• Consent (art. 7, I): sending promotional and marketing communications when you opt in during registration or through your account settings.

For data processing based on consent, you may withdraw that authorization at any time through the notification settings in your account on 58ff or by emailing suporte@58ff.best.

5. Data Sharing

The 58ff does not sell, rent, transfer, or otherwise commercialize your personal data to third parties for their own purposes. Sharing occurs only in the following situations, all of which have an identified legal basis:

• Essential service providers: payment processors (institutions responsible for Pix, credit and debit card gateways, PicPay, Mercado Pago) and identity verification (KYC) providers, which act as data operators under confidentiality agreements;
• Game providers: companies such as Evolution Gaming, Pragmatic Play, Microgaming, and others that provide the tables and games available on the platform. Data sharing is limited to what is necessary for game operation and result recording;
• Technology infrastructure: cloud hosting services, fraud detection systems, and security analytics tools, all bound by confidentiality agreements;
• Competent authorities: when required by court order, or by determination of the Central Bank, Federal Revenue Service, or other authorities with legal jurisdiction to make such a request;
• Rights protection: to prevent, investigate, or take action in relation to fraud, money laundering, or violations of the Terms and Conditions of 58ff.

All partners who receive personal data from users of the 58ff are contractually required to handle data in accordance with the LGPD and solely for the specific purpose for which it was shared.

6. Data Storage & Security

The personal data of users of 58ff are stored on secure servers with strict access controls. The main security measures in place include:

• 256-bit SSL/TLS encryption on all data transmissions;
• Encryption of data at rest for sensitive information such as KYC documents and financial data;
• Multi-factor authentication required for administrative access to internal systems;
• Continuous monitoring of access and suspicious activity, with automated incident response;
• Regular penetration testing and security audits conducted by specialized firms;
• Role-based access control — each member of the 58ff accesses only the data strictly necessary for its function;
• Encrypted backups performed on a regular schedule and stored in geographically separate locations.

In the event of a security incident that may result in risk or harm to data subjects, the 58ff will notify the ANPD and affected users within the timeframes set by the LGPD, with clear information about the nature of the incident and the measures taken.

7. Cookies & Tracking Technologies

The platform 58ff uses cookies and similar technologies to ensure the website functions correctly, enhance the user experience, and gather aggregated analytical insights. The types of cookies used are:

• Essential cookies: required for the platform to function — maintaining login sessions, security, and basic browsing preferences. They cannot be disabled without affecting access to the services;
• Analytics cookies: collect aggregated information about how users navigate the platform (pages visited, session duration, device used) to improve performance and usability. All data is anonymized prior to any analysis;
• Preference cookies: store preferences you've set, such as language, preferred deposit method, and game display settings;
• Security cookies: detect anomalous behavior, unauthorized access attempts, and suspicious simultaneous sessions.

The 58ff does not use cross-site tracking cookies for third-party advertising purposes. You can manage cookie settings through your browser preferences, though disabling essential cookies may prevent proper access to the platform.

8. Data Retention & Disposal

The 58ff retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by law:

• Registration and identity data (KYC): retained for at least 5 years after account closure, in compliance with anti-money laundering legislation (Law No. 9,613/1998);
• Financial transaction history: retained for at least 5 years for tax and regulatory purposes;
• Betting and gaming history: retained for at least 1 year after the last transaction, and may be extended as required by operational or legal needs;
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes;
• Analytical cookie data: retained for no more than 13 months from the date of collection.

Once the retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymized data may be retained for statistical purposes without a time limit.

9. Your Rights as a Data Subject

The LGPD guarantees all personal data subjects a set of rights that 58ff is fully committed to upholding. See below what these rights are and how to exercise them:

To exercise any of these rights, send an email to suporte@58ff.best with the subject line "LGPD – Rights Request" and specify which right you wish to exercise. The 58ff will respond within 15 business days of receiving the request, in accordance with the deadline established by the LGPD.

10. Minors

The services of 58ff are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and does not allow registration by anyone below the Brazilian legal age of majority.

If the 58ff becomes aware that it has collected data from a minor, the account will be immediately closed, the data will be deleted, and any existing balance will be refunded to the original payment method. Parents or legal guardians who identify an account opened by a minor should contact us immediately at suporte@58ff.best.

11. International Data Transfers

Some of the service providers used by the 58ff — such as cloud hosting companies and international game providers — may process data outside Brazil. When this occurs, 58ff requires these partners to provide a level of protection equivalent to that established by the LGPD, through:

• Specific contractual clauses for data protection;
• Certifications or seals recognized by regulatory authorities;
• Internal privacy policies aligned with both LGPD and GDPR (the European Union's General Data Protection Regulation) standards.

The 58ff keeps a record of all international transfers made and can provide detailed information upon request by the data subject through the rights exercise channel described in Section 9.

12. Changes to This Privacy Policy

The 58ff may update this Privacy Policy periodically to reflect changes in Brazilian legislation, our data processing practices, or operational improvements. Any significant update will be communicated by email and/or an in-platform notification at least 7 days in advance.

The date of the last update is always shown at the top of this document. Continuing to use the services of 58ff after the effective date of the changes constitutes acknowledgment and acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure before the effective date at no cost, with a full refund of your available balance.

13. Contact, DPO & Data Officer

The 58ff has appointed a Data Protection Officer (DPO), as required by Article 41 of the LGPD. The DPO serves as the point of contact between the company, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, report a privacy concern, or get in touch with the DPO of 58ff, use the channels below:

• Email: suporte@58ff.best (subject: "LGPD – Privacy")
• Live chat: available 24 hours a day directly on the 58ff

Privacy-related requests are handled within 15 business days. For urgent matters involving security incidents or unauthorized account access, our live chat support is available around the clock for immediate assistance.