0k588 Privacy and Data Protection Policy

The 0k588 ("Platform", "we") deeply respects the privacy of its users ("you", "data subject") and is committed to protecting your personal data. This Privacy Policy describes, in a clear and straightforward way, how we handle the information you provide when you register, deposit, place bets, or simply browse the platform.

The 0k588 operates in full compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018), the Brazilian law establishing rules on the collection, storage, processing, and sharing of personal data. Our commitment to the LGPD goes beyond legal obligation — it is part of our culture of transparency with Brazilian players.

This document uses plain, accessible language because we believe you have the right to understand exactly what happens with your data. Nothing is hidden in fine print. If anything is unclear, reach out to us.

The controller responsible for processing your personal data is the platform 0k588, operated under the domain 0k588.best. As the data controller, 0k588 determines the purposes and means by which your data is processed, always within the limits established by the LGPD and other applicable Brazilian legislation.

The 0k588 has appointed a Data Protection Officer (DPO), responsible for:

• Ensure that all data processing practices comply with the LGPD;
• Handling data subject requests (access, rectification, erasure, portability);
• Serve as the communication channel between the 0k588, data subjects, and the National Data Protection Authority (ANPD);
• Monitor and report security incidents involving personal data, as required by the LGPD.

To contact the DPO at 0k588, send an email to privacidade@0k588.best with the subject line "LGPD – [your request]".

The 0k588 only collects the data necessary to provide its services in a secure, lawful, and personalized manner. Below you will find all categories of data we collect and how they are obtained:

Data provided directly by you:

• Registration data: full name, CPF, date of birth, full residential address, email, mobile number;
• Verification documents (KYC): copy of a government-issued ID (RG, CNH, or Passport), proof of address, and where applicable, a selfie with your ID for identity confirmation;
• Financial data: Pix keys, credit/debit card data (tokenized — we never store the full card number), bank account details for TED transfers;
• Communications: conversation history with our support team via live chat or email.

Automatically collected data:

• Browsing data: IP address, browser type and version, operating system, pages visited, session duration;
• Device data: device type (mobile, tablet, desktop), device identifiers where applicable;
• Geolocation data: approximate location based on IP address for eligibility verification (Brazil) and fraud prevention;
• Gaming data: complete betting history, results, deposits, withdrawals, bonuses used, and gameplay patterns for responsible gaming purposes.

Every piece of data collected by 0k588 has a specific and legitimate purpose. We don't collect information for the sake of it — every piece of data has a clear reason behind it:

The 0k588 does not use your data to build behavioral profiles for sale to third parties, or for advertising purposes outside the platform. Promotional communications from 0k588 (such as bonus offers and platform news) are sent only to users who have opted in — and you can withdraw that consent at any time in your account settings.

The LGPD requires that all personal data processing have a valid legal basis. The 0k588 processes your data based on the following legal grounds provided by law:

• Contract performance (Art. 7, V): processing is necessary to fulfill the contract entered into at registration — handling deposits, recording bets, processing withdrawals, and providing support;
• Compliance with a legal or regulatory obligation (Art. 7, II): identity verification (KYC), anti-money laundering (AML), compliance with Brazil's current Sports Betting legislation, and reporting to competent authorities;
• Legitimate interest (Art. 7, IX): platform security, fraud detection and prevention, and product and service improvement — always proportionate and without compromising your fundamental rights;
• Consent (Art. 7, I): sending promotional communications and use of non-essential cookies — both of which you may withdraw consent for at any time.

Where the legal basis is consent, revocation does not affect the lawfulness of processing carried out prior to that revocation, as provided under the LGPD.

The 0k588 does not sell your personal data. Data sharing with third parties occurs only in the situations below, all with a legitimate purpose and, where applicable, with your knowledge:

• Payment providers: financial data is shared with the institutions required to process your deposits and withdrawals via Pix, credit/debit card, PicPay, Mercado Pago, and TED (Nubank, Itaú, Bradesco, Banco do Brasil). These providers only have access to the data strictly necessary to complete the transaction;
• Game providers: minimum technical data is shared with game providers (live casino, slots, crash games) for authentication and result recording. No personal identification data beyond what is strictly necessary is transmitted;
• Identity verification (KYC): to validate documents, 0k588 may use specialized identity verification services, which process data under confidentiality agreements and in compliance with the LGPD;
• Competent authorities: in cases of court order, request by a law enforcement or tax authority, or regulatory obligation, 0k588 shares the requested data as required by law;
• Anti-money laundering: financial information may be reported to the relevant regulatory authorities (such as COAF) when required under Brazilian anti-money laundering legislation.

All third parties with whom 0k588 shares data are subject to data processing agreements that require them to handle information with the same level of security and confidentiality applied by the platform.

The 0k588 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal and regulatory obligations in Brazil. General retention periods are:

• Registration and KYC data: retained for as long as the account remains active and for a minimum of 5 years after account closure, as required by AML regulations and Brazilian tax legislation;
• Financial transaction history (deposits and withdrawals): minimum of 5 years after each transaction, in accordance with the National Tax Code and applicable financial regulations;
• Betting and gaming history: minimum of 3 years for dispute resolution and regulatory reporting purposes;
• Communication records (chat, support email): 2 years for quality control purposes and complaint resolution;
• Browsing data and access logs: 6 months, unless required for fraud investigation or by court order.

Once retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. Early deletion may be requested by the data subject, but is subject to the legal obligations described above — in such cases, 0k588 will inform you which data cannot be deleted immediately and explain why.

The 0k588 implements strict technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. The key measures in place include:

• 256-bit SSL encryption: all communication between your device and the servers of 0k588 is encrypted, including payment data traffic via Pix, card, and TED;
• Secure storage: sensitive data (such as KYC documents and financial information) is stored on servers with restricted access, continuous monitoring, and encrypted backups;
• Payment data tokenization: credit/debit card numbers are never stored in plain text — they are replaced by tokens generated by our PCI DSS-certified payment processor;
• Authentication: a 0k588 offers two-factor authentication (2FA) via mobile for additional account protection, and we strongly recommend enabling it;
• Internal access controls: only employees with a legitimate need have access to user data, and that access is regularly audited;
• Security monitoring: intrusion detection systems and anomalous behavior analysis operate 24 hours a day to identify and respond to threats in real time.

In the event of a security incident that may pose a significant risk or harm to data subjects, the 0k588 will notify affected users and the National Data Protection Authority (ANPD) within the timeframe required by the LGPD, with details about the nature of the incident, the data affected, and the measures taken.

Despite all the measures we have in place, no system is 100% breach-proof. For that reason, we also recommend using a strong, unique password for your 0k588 account 0k588, enable 2FA, and never share your credentials with third parties.

The 0k588 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze performance. Below, we list the types of cookies used and their purpose:

You can manage your optional cookie preferences at any time in your account settings on the 0k588. Disabling optional cookies does not prevent you from using the platform, but may limit certain personalization features.

The 0k588 does not use third-party tracking cookies for behavioral advertising on other sites. Data collected via cookies is restricted to internal platform use only.

The LGPD grants you, as the data subject, a comprehensive set of rights over your personal information. 0k588 is committed to honoring them in full:

The platform 0k588 is intended exclusively for users over 18 years. We do not intentionally collect personal data from minors. The identity verification (KYC) process includes date of birth confirmation and official document review specifically to ensure no minor can access the platform's services.

Should 0k588 identifies that it has inadvertently collected data from a minor, the account will be closed immediately, all related data will be deleted (subject to any legal retention obligations), and any deposited balance will be returned to the legal guardian following verification.

If you believe a minor has created an account on 0k588, please contact us immediately at contato@0k588.best so we can act with the utmost urgency.

The 0k588 may update this Privacy Policy periodically, for reasons including changes to Brazilian data protection legislation, new services offered, adjustments to security practices, or recommendations from the ANPD. All material changes will be communicated:

• By email sent to the address registered on your account, at least 7 days in advance for material changes;
• By a prominent notification on the platform after login;
• By updating the effective date at the top of this document.

We recommend reviewing this policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms. If you disagree with any change, you may exercise your right to close your account and request deletion of data processed on the basis of consent.

For any questions, requests, or complaints regarding the processing of your personal data by 0k588, you have the following contact channels, all supported in Brazilian Portuguese:

• DPO email (privacy): privacidade@0k588.best — for formal LGPD rights requests, questions about this policy, and reports of security incidents involving your data;
• General support email: contato@0k588.best — for general questions about privacy and data use;
• Live chat: available directly on the platform, 24 hours a day, 7 days a week, for quick support.

Formal requests to exercise your rights (access, correction, deletion, portability) must be submitted by email to privacidade@0k588.best, with account holder identification (full name and registered CPF). The response deadline is up to 15 business days for straightforward requests and up to 30 business days for more complex requests involving multiple systems or legal analysis.

If you feel your rights have not been adequately addressed by 0k588, you may file a complaint directly with the National Data Protection Authority (ANPD), through the regulatory authority's official website.