Privacy Policy of qq500 — Your Data Protected by the LGPD

The qq500 (hereinafter "qq500", "we", "our", or "Platform") is the controller of the personal data processed under this Privacy Policy. qq500 is a Sports Betting and online casino platform operating in the Brazilian market, accessible at qq500.best.

For the purposes of this Policy, "you" or "data subject" refers to any individual who accesses, registers for, or uses qq500's services — whether to place bets on the Brasileirão, play crash games like Aviator or Spaceman, or access any other feature on the platform.

This Privacy Policy describes how qq500 collects, uses, stores, shares, and protects your personal data, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable regulations in Brazil.

By creating an account or using qq500's services, you confirm that you have read and understood this Policy. If you do not agree with the terms described here, you should not use the platform.

Qq500 collects only the data necessary to provide its services securely and in compliance with legal obligations. The categories of data collected include:

Data you provide directly when registering:

• Full name;
• CPF (Individual Taxpayer Registry);
• Date of birth;
• Full residential address (street, number, unit, neighborhood, city, state, ZIP code);
• Email address;
• Mobile phone number;
• Pix key or bank details for processing deposits and withdrawals.

Data collected automatically during platform use:

• IP address and approximate geographic location;
• Device type, operating system, and browser;
• Betting history, financial transactions, and gaming activity on the platform;
• Access logs with date, time, and actions performed;
• Session data and cookies (detailed in section 6).

Data collected during the identity verification (KYC) process:

• Identity document images (RG, CNH, or passport);
• Proof of address;
• Selfie with document, when requested;
• Proof of ownership of the payment method, where applicable.

Qq500 collects data for the following purposes:

Qq500 does not use your data for purposes incompatible with those described above without prior notice and, where applicable, without obtaining your consent.

All data processing carried out by qq500 is grounded in one of the legal bases provided for under the LGPD. The main legal bases used are:

• Contract performance (art. 7, V): processing required to deliver the contracted services — account management, bet processing, deposits and withdrawals via Pix and other Brazilian payment methods;
• Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering (Lei nº 9.613/1998), tax obligations, and reporting to the Banco Central do Brasil and the ANPD when required;
• Legitimate interest (Art. 7, IX): fraud prevention and detection of multiple accounts, platform security, continuous service improvement, and personalization of the user experience — always respecting your rights and reasonable expectations;
• Consent (Art. 7, I): sending marketing communications, promotional emails, and notifications about new qq500 features. You may withdraw this consent at any time through your account settings or via the unsubscribe link in any email you receive.

When processing is based on consent, qq500 maintains a record of the consent obtained, including date, purpose, and scope, as required by the LGPD.

Qq500 does not sell or trade users' personal data. Data sharing occurs only in the following situations, always on a proportionate basis and limited to what is strictly necessary:

• Payment processors: data required to process transactions via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay is shared with the respective financial institutions and payment intermediaries, which act as data processors under contract with qq500 and are bound by the same confidentiality and data protection obligations;
• Game providers: minimal session data and bet outcomes may be shared with game developers (such as Spribe, Pragmatic Play, and SmartSoft) for result certification and technical dispute resolution in crash games and other titles available on qq500;
• Identity verification services (KYC): documents submitted for verification may be processed by specialized vendors in compliance with the LGPD;
• Public authorities: data is shared with the Central Bank of Brazil, Federal Revenue Service, or law enforcement and judicial authorities when required by law, court order, or regulatory obligation;
• Fraud prevention: in cases of suspected serious fraud, qq500 may share limited data with other platforms or industry entities to protect the betting ecosystem, always within the limits permitted by law.

All third parties that receive personal data from qq500 users are bound by contracts requiring them to uphold security standards equivalent to those adopted by the platform and to comply with the LGPD.

Qq500 uses cookies and similar technologies to ensure the platform works properly, improve user experience, and analyze usage patterns. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — keeping you logged in, processing bets, and managing game sessions. These cannot be disabled without affecting how qq500 operates;
• Performance cookies: collect anonymous information about how users interact with the platform — most visited pages, session duration, errors encountered — to help improve the overall experience without identifying individual users;
• Functionality cookies: store user preferences — such as language, display settings, and game preferences — to personalize your experience on future visits;
• Analytical cookies: used to understand aggregated user behavior on the platform and inform product decisions. Data collected by these cookies is anonymized before any analysis.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent full use of some qq500 features. Performance, functionality, and analytical cookies can be disabled without affecting main access to the platform.

Qq500 does not use cross-site tracking cookies or share cookie data with third-party advertising platforms without your express consent.

Qq500 adopts robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. The main security measures in place include:

• 256-bit SSL Encryption across all communications between your device and qq500's servers;
• Encryption at rest for sensitive data stored in databases, including KYC documents and financial information;
• Role-based access control (RBAC) — only staff with a legitimate need have access to personal data, and all access is recorded in a log;
• Two-factor authentication (2FA) available to users and mandatory for internal administrative access;
• Continuous monitoring of suspicious activity, unauthorized access attempts, and anomalies in usage patterns;
• Periodic penetration testing and security audits conducted by specialized teams;
• Encrypted backups stored on redundant infrastructure to ensure data availability and integrity.

Data is stored on servers located in Brazil or in countries with an adequate level of data protection, as defined by ANPD criteria.

In the event of a security incident that may affect personal data, qq500 will activate its incident response plan and notify both the ANPD and the affected data subjects within the timeframes required by the LGPD, providing a clear description of the incident and the mitigation measures taken.

Qq500 retains your personal data for as long as necessary to fulfill the purposes stated in this Policy or to comply with legal obligations. The main retention periods are:

• Registration and account data: retained for the full duration of the account and for up to 5 years after account closure, as required by the Brazilian Civil Code and anti-money laundering legislation (Law No. 9,613/1998);
• Financial transaction history (deposits and withdrawals via Pix, boleto, card): retained by 5 years for tax and regulatory purposes, as required by the Brazilian Federal Revenue Service;
• KYC documents (national ID, driver's license, proof of address): retained for the duration of the account plus 5 years after closure;
• Platform access and activity logs: retained by 6 months for security and fraud investigation purposes, in accordance with the Brazilian Internet Civil Framework (Law No. 12,965/2014);
• Communication and support data: retained by 2 years after last contact, for record-keeping and dispute resolution purposes.

Once the applicable retention periods expire, data is anonymized or securely and irreversibly deleted. Anonymized data may be retained indefinitely for statistical purposes and platform improvement, as it can no longer be used to identify any individual.

You may request early deletion of your data, subject to the minimum legal retention periods that prevent immediate deletion for certain data categories. In such cases, qq500 will inform you which data can be deleted right away and which must be retained due to a legal obligation.

The LGPD grants you, as a data subject whose data is processed by qq500, the following rights, which may be exercised at any time:

To exercise any of these rights, please contact qq500 by email at privacidade@qq500.best or via the platform's live chat. The response time is up to 15 calendar days, as established by the LGPD. For complex requests, this deadline may be extended by an equal period, with prior notice to the data subject.

If you believe your rights have not been properly fulfilled, you may file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing compliance with the LGPD in Brazil.

Qq500's services are intended exclusively for users aged 18 and over. The platform does not intentionally collect, process, or store personal data from minors.

The registration process includes date-of-birth verification, and the KYC process confirms legal age through official documents. Accounts created by minors are closed immediately upon identification, with any real-money balance refunded to the legal guardian upon verification.

If you believe that a minor's data has been inadvertently collected by qq500, please contact us immediately at privacidade@qq500.best. We will take the necessary steps to delete this information as promptly as possible.

Qq500 does not conduct marketing targeted at minors on any platform or communication channel.

In certain operational circumstances — such as the use of cloud server infrastructure, international game providers, or identity verification services — personal data of qq500 users may be transferred for processing outside Brazilian territory.

All international data transfers carried out by qq500 comply with the following safeguards, as required by the LGPD:

• Transfer only to countries or international organizations that offer a level of personal data protection equivalent to that provided under the LGPD, as recognized by the ANPD;
• When the destination country does not have formal recognition by the ANPD, the transfer is subject to the execution of standard contractual clauses that ensure an adequate level of protection for the transferred data;
• International game providers (such as Spribe, Pragmatic Play, Hacksaw Gaming, and SmartSoft) receive only the minimum data necessary for result certification and the technical operation of games available on the qq500 platform.

You may request information about international transfers of your data and the applicable safeguards through qq500's privacy channel (privacidade@qq500.best).

In accordance with Art. 41 of the LGPD, qq500 has appointed a Personal Data Protection Officer — also known by the acronym DPO (Data Protection Officer). The DPO is the official communication channel between qq500, data subjects, and the National Data Protection Authority (ANPD).

The responsibilities of qq500's DPO include:

• Receive and respond to data subjects' complaints and requests related to the processing of personal data by qq500;
• Receive communications from the ANPD and take the necessary action;
• Train qq500's staff and contractors on best practices for data protection;
• Carry out any other responsibilities assigned by qq500 or established under supplementary ANPD regulations.

Contact channel for qq500's DPO:
Email: privacidade@qq500.best
Subject: "LGPD Request — [your name and partial CPF]"

The response time for DPO requests is up to 15 calendar days from receipt of the complete request, and may be extended by an equal period with justification.

Qq500 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. Any relevant update will be communicated with a minimum advance notice of 7 (seven) calendar days by:

• Email to the address registered on the user's account;
• Visible notification on the user dashboard upon logging in to qq500;
• Prominent notice on the platform's home page.

Continued use of the qq500 platform after the changes take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the new version's effective date.

The most current version of this Policy is always available on this page, with the update date shown at the top of the document. Previous versions may be requested by email at privacidade@qq500.best.