Data Protection

556d Privacy Policy – How We Protect Your Data

556d takes player privacy seriously. This policy explains, in plain language, what data we collect, why we need it, how we protect it, and what rights you have under the Lei Geral de Proteção de Dados (LGPD).

Last updated: January 2026
In accordance with the LGPD (Law 13,709/2018)
SSL 256-bit on all transactions

The pillars of privacy at 556d

Six concrete commitments that define how we handle your personal data.

End-to-end encryption

All communication between your device and 556d's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's leading digital banks such as Nubank, Itaú, and Bradesco. Your data never travels in plain text over the internet.

Full LGPD compliance

556d processes all personal data in compliance with the Lei Geral de Proteção de Dados (Law No. 13.709/2018). This means every collection has a legitimate purpose, every purpose is communicated to you clearly, and your rights as a data subject are fully respected.

Data never sold

556d does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is shared with partners only when strictly necessary to provide the service — such as payment processing via Pix, boleto, and card.

PCI DSS certification for payments

Your financial data — including credit and debit card information — is processed exclusively by payment gateways certified to the PCI DSS (Payment Card Industry Data Security Standard). 556d does not store card data on its servers.

You control your data

The LGPD gives you the right to access, correct, export, and delete your personal data. At 556d, exercising these rights is straightforward: simply contact our support team and your request will be handled within the legally required timeframes.

Plain language, no legal jargon

This policy was written in Brazilian Portuguese so that any player can understand what we do with their data — no legal background required. Clarity is part of our commitment to transparency, not just a footnote formality.

This Privacy Policy describes how 556d collects, uses, stores, shares, and protects the personal data of players who use the platform. It applies to all services offered by 556d — Sports Betting, e-sports, poker, blackjack, live casino, and any other services available on our site. By creating an account or using any 556d service, you acknowledge that you have read and understood this policy.

1Who we are and how to contact us

The 556d is the controller of the personal data processed under this policy, as defined by the Lei Geral de Proteção de Dados (LGPD). We are responsible for determining the purposes and means of processing your data, and for ensuring compliance with applicable Brazilian law.

To exercise any right related to your personal data, to clarify questions about this policy, or to submit any privacy-related request, please contact our team through the channels below:

  • Privacy email: contato@556d.net (please include "LGPD" in the subject line)
  • Live chat: available 24 hours a day directly on the platform
  • WhatsApp: available through the support channels listed within the platform

The response period for LGPD-related requests is up to 15 calendar days from the date the request is received, as provided by law.

Data Protection Officer (DPO): 556d maintains a Data Protection Officer to ensure full compliance with the LGPD. To reach the DPO directly, use the privacy email address listed above.

2What data we collect

556d collects only the data necessary to provide its services, meet legal obligations, and improve the player experience. The categories of data collected are:

Category Data collected Point of collection
Identification Required Full name, CPF, date of birth, email, mobile phone number Registration
Address Required ZIP code, street address, number, neighborhood, city, state Registration / verification
Documents Verification Photo of national ID, driver's license, or passport; selfie with document; proof of address Identity verification (KYC)
Financial Required Pix key linked to CPF, deposit and withdrawal history, payment method used Transactions
Behavior Automatic Betting history, games accessed, usage times, preferred game types Platform usage
Technical Automatic IP address, device type, operating system, browser, session cookies Platform access
Communications Optional History of support interactions, emails exchanged, and service feedback Support contact

Sensitive data: 556d does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or sexual orientation. If collecting any sensitive data ever becomes a legal requirement, we will communicate this clearly and request your specific consent.

3Why we collect this data

Every piece of data collected by 556d has a specific and legitimate purpose. We don't collect data for its own sake — every piece of information serves a clear purpose:

  • Identification and address data: required to create and manage the player's account, verify eligibility (age and Brazilian residency), issue tax documents, and fulfill Know Your Customer (KYC) legal obligations;
  • Verification documents (KYC): required by anti-money laundering (AML) regulations and to verify the account holder's identity before processing withdrawals above internal thresholds;
  • Financial data: required to process deposits via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED; to carry out withdrawals securely; and to maintain the transaction history required for tax compliance obligations;
  • Platform behavior history: used to personalize the experience (suggesting relevant events, notifying players of matches they follow), detect problematic gambling behavior, and proactively offer responsible gambling tools;
  • Technical data: used for security purposes (detection of suspicious access and multiple accounts), platform stability, performance analysis, and diagnosis of technical issues reported to support;
  • Support communication history: retained to ensure service quality, continuity of interactions (agents can view your case history), and resolution of any disputes.

The 556d does not use your personal data to build credit profiles, make automated decisions with significant legal effects without human review available, or for third-party marketing purposes without your prior consent.

4Legal basis for processing (LGPD)

The LGPD requires that all personal data processing have a legal basis. The 556d bases its data processing on the following grounds established under Law No. 13,709/2018:

  • Contract performance (art. 7, V): processing identification, address, and financial data is required to fulfill the service agreement entered into at registration — without this data, we cannot operate your account, process deposits, or carry out withdrawals;
  • Compliance with a legal obligation (art. 7º, II): identity verification (KYC), transaction monitoring for anti-money laundering purposes, and the maintenance of financial records are legal requirements imposed by Brazilian regulations applicable to online betting and entertainment platforms;
  • Legitimate interest (Art. 7, IX): the collection of technical and behavioral data on the platform for security purposes (fraud detection, multiple accounts) and continuous service improvement is grounded in 556d's legitimate interest, provided it does not override the rights and freedoms of the data subject;
  • Consent (art. 7º, I): marketing communications sent by email, SMS, or WhatsApp — such as information about promotions, new games, and bonuses — are only sent with the player's express consent, which may be withdrawn at any time.

Consent withdrawal: If you consented to receiving marketing communications and wish to opt out, simply click "Unsubscribe" in any email from 556d, adjust your preferences in your account settings, or contact our support team. Withdrawing consent does not affect any processing carried out prior to that withdrawal.

5Data sharing

The 556d does not sell, rent, or share your personal data with third parties for their own commercial purposes. Data sharing occurs exclusively in the situations listed below, all of which are necessary for the platform's operation or required by law:

  • Payment processors: to process deposits and withdrawals via Pix, boleto, credit/debit card (Visa, Mastercard, Elo), PicPay, Mercado Pago, and TED. Payment processors receive only the minimum data required for the transaction and operate under data protection agreements;
  • Identity verification providers (KYC): for identity document verification in compliance with AML legal obligations. These providers are engaged under confidentiality and data protection clauses;
  • Game providers (casino and poker suppliers): for the operation of live casino games, slots, and poker available on the platform. Shared data is limited to the anonymous identifier required for the gaming session;
  • Competent authorities: when required by court order, law enforcement request, or a legal obligation under Brazilian legislation, such as reports to COAF (Financial Activities Control Council) regarding suspicious transactions;
  • Auditors and consultants: professionals engaged for compliance auditing, information security, and legal processes, always under confidentiality clauses.

All third parties that process data on behalf of 556d are subject to contracts requiring the same level of protection described in this policy and compliance with the LGPD. 556d remains responsible for all data processing, even when carried out by third parties acting on its instructions.

We never share: your data with third-party marketing companies without your consent, with credit analysis platforms without your authorization, or with any foreign entity without the adequate safeguards required by the LGPD.

6Data storage and security

The 556d adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. The key measures in place include:

  • 256-bit SSL/TLS encryption across all communication between the player's device and the platform's servers — no data is transmitted in plain text;
  • Encryption at rest for personal and financial data stored in databases — even with physical access to the server, the data would be unreadable without the encryption keys;
  • Role-based access control (RBAC) — each 556d team member accesses only the data strictly necessary for their role, with auditable access logs;
  • Multi-factor authentication (MFA) for all internal 556d systems that have access to player data;
  • Continuous security monitoring with automatic alerts for anomalous behavior, such as unusual access attempts or unauthorized data exports;
  • Periodic security audits carried out by specialized third parties, with vulnerability reports and remediation plans;
  • Incident response plan — in the event of a data breach, 556d will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected players within the timeframes set out in the LGPD.

556d's servers are hosted in ISO 27001-certified data centers with physical redundancy, regular backups, and strict physical access controls.

7Your rights as a data subject

The LGPD grants data subjects a set of rights that 556d is committed to upholding. You may exercise any of these rights at any time by contacting our support team:

Right of access

You may request a copy of all personal data 556d holds about you, including the purposes for which it is processed and with whom it has been shared.

Right to rectification

If any personal data is incorrect or out of date — such as your name, address, or email — you can request a correction at any time through our support team.

Right to erasure

You may request the deletion of your personal data. Data that must be retained by law (such as financial records) will be kept for the legally required period and then permanently deleted.

Right to data portability

You may request your data in a structured, machine-readable format for transfer to another controller, in accordance with ANPD regulations.

Right to object

You may object to data processing based on legitimate interest if you believe your fundamental rights override the interest claimed by 556d.

Right to information

You have the right to know which public or private entities 556d has shared your data with, and to be informed about the option to withhold consent and its consequences.

8Cookies and tracking technologies

The 556d uses cookies and similar technologies to ensure the platform works correctly, enhance the player experience, and — with your consent — personalize content. The types of cookies used are:

Essential cookies Performance cookies Personalization cookies Marketing cookies
  • Essential cookies: required for core platform functionality — session authentication, security, and language preferences. They cannot be disabled without affecting access to our services;
  • Performance cookies: collect anonymous data on how players navigate the platform (most-visited pages, load times, errors). We use this information to improve performance — especially on mobile;
  • Personalization cookies: store player preferences (favorite sports, interface type) to personalize the experience on future visits;
  • Marketing cookies: used only with the player's consent, to display relevant content about 556d promotions and news. They are not used for third-party advertising.

You can manage cookie settings directly in your mobile or desktop browser. Blocking essential cookies may prevent the platform from functioning properly. For other cookie types, disabling them is optional and does not affect access to core services.

9Protection of players under 18

The 556d is a platform exclusively for adults — users aged 18 and over residing in Brazil. We do not intentionally collect personal data from minors and do not permit minors to register or access the platform.

The measures in place to protect minors include:

  • Mandatory date-of-birth verification at registration, with automatic blocking for dates indicating the user is a minor;
  • Identity verification (KYC) confirming the data subject's age through an official photo ID;
  • Monitoring of access patterns that may indicate use by minors;
  • Providing parental control information to parents and guardians who wish to restrict minors' access to betting platforms.

If you believe a minor under 18 has created an account on 556d or accessed the platform, please contact our support team immediately. We will investigate and take the necessary steps, including closing the account and returning any balance to the legal guardian.

10How long we retain your data

The 556d retains your personal data for the minimum time necessary for the purposes described in this policy, in accordance with mandatory legal retention periods. The general retention criteria are:

Data category Retention period Legal basis
Registration and identification data Account lifetime + 5 years after closure Legal obligation (AML, tax)
KYC documents (government-issued ID, driver's license, proof of address) 5 years after account closure Anti-money laundering regulation
Financial transaction history 5 years after the transaction National Tax Code and tax regulations
Betting history 3 years after the bet Dispute resolution and auditing
Access logs and technical data 6 months Marco Civil da Internet (Law 12,965/2014)
Support communications 2 years after the case is closed Quality assurance and dispute resolution
Marketing data (with consent) Until consent is withdrawn Consent

Once retention periods expire, data is securely deleted or anonymized so it can no longer be linked to an identifiable individual. Anonymized data may be retained for statistical purposes and platform improvement.

11International data transfers

In some cases, the operation of the platform may involve transferring data to servers located outside Brazil — for example, when using cloud infrastructure services or international game providers. The 556d ensures that these transfers take place with the appropriate safeguards required by the LGPD:

  • Only transfers to countries or international organizations that provide an adequate level of data protection, or
  • Through specific contractual clauses that guarantee data subjects the same rights provided under Brazil's LGPD, in accordance with ANPD regulations.

When the processing of Brazilian players' personal data involves an international transfer, financial data linked to the CPF and transactions in BRL remains on servers that comply with Banco Central do Brasil regulations.

In practice: The vast majority of Brazilian players' data on 556d is processed on infrastructure located in Brazil or South America, keeping international transfers to a minimum. When transfers are necessary, they follow the protocols described above.

12Changes to this Privacy Policy

The 556d may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or improvements to our processes. When that happens:

  • We update the "Last updated" date at the top of this page — always check that date to confirm you are reading the most recent version;
  • For significant changes that affect the rights of data subjects, we send an email notification to the registered address and display a notice at platform login, with at least 10 days in advance prior to its entry into force;
  • For administrative changes that do not affect user rights, updates may be made without prior notice — but will always be recorded on this page.

Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. If you disagree with any change, you may close your account and request deletion of your personal data as described in Section 7.

The current version of this Privacy Policy took effect on January 2026 and supersedes all previous versions.

Protection level by category

How we internally assess the level of security applied to each type of 556d player data.

Financial data and CPF Maximum protection
Identity documents (KYC) Very high
Registration data (name, email, CPF) High
Betting history High
Platform behavioral data Medium-high
Access logs and technical data Moderate

How to exercise your rights at 556d

Step-by-step guide to requesting access, correction, deletion, or portability of your data.

1
Contact support

Use live chat, email (contato@556d.net with "LGPD" in the subject line), or WhatsApp. Please provide your registered name and CPF.

2
Specify the right you wish to exercise

Clearly state what you are requesting: access to your data, correction of specific information, account deletion, data portability, or withdrawal of consent.

3
Verify your identity

To keep your account secure, we will ask you to verify your identity before processing any request involving access to or modification of your personal data.

4
Allow time for a response

556d responds to LGPD requests within 15 calendar days. Complex cases may require additional time, and you will be notified in advance.

5
Appeal to the ANPD (if necessary)

If you are not satisfied with 556d's response, you may escalate to the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for the LGPD in Brazil.

Play safely and with peace of mind at 556d

Free registration in under 2 minutes. Your data protected by 256-bit SSL and full LGPD compliance. Minimum deposit of R$ 10.00 via Pix.

Create Free Account

Privacy questions at 556d

Frequently asked questions from players about how we handle their personal data.

Absolutely not. 556d does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. Data sharing occurs exclusively with operational partners necessary to provide the service — such as Pix payment processors and card gateways — and always under contracts that require the same level of protection described in this policy. There is no sharing with external advertising networks, data brokers, or any entity that would use your data for purposes unrelated to the 556d service.

To request deletion of your personal data, contact our support team via live chat, by email at contato@556d.net (with "LGPD Deletion" in the subject line), or through WhatsApp. A deletion request typically involves closing your account, as it is not possible to maintain an account without the data required to operate it. Data that must be retained by law — such as financial records for the 5-year tax period — will be kept for the mandatory period and then deleted. You will receive confirmation that your request has been processed within 15 calendar days.

No. 556d does not store complete credit or debit card data on its servers. All card payment processing is handled exclusively by PCI DSS-certified gateways, which are the only parties with access to card data during a transaction. What 556d stores is solely the transaction record (amount, date, payment method used) for financial history purposes — never sensitive card details such as the card number, CVV, or expiry date.

Identity verification (KYC — Know Your Customer) is a legal requirement for financial and betting platforms in Brazil, designed to prevent money laundering, identity fraud, and underage access. At 556d, it is required before processing withdrawals above certain thresholds or when there are indicators that warrant additional identity confirmation. Submitted documents (a photo of your ID or driver's license and a selfie) are stored with encryption, accessed only by the compliance team under strict access controls, and retained for the legally required period of 5 years after account closure. They are never used for any purpose beyond identity verification and fulfillment of legal obligations.

There are three ways to stop receiving marketing emails from 556d: 1) Click the "Cancelar inscrição" or "Unsubscribe" link in the footer of any marketing email — removal is processed automatically within 48 hours. 2) Log in to your 556d account, go to Settings or My Account, and adjust your communication preferences. 3) Contact our support team via chat or email and request removal from the marketing list. Revoking your marketing consent does not affect essential operational communications — such as deposit confirmations, withdrawal updates, or account security alerts.

After account closure, 556d retains your personal data for the mandatory legal periods: registration data and KYC documents for up to 5 years (AML regulatory requirement), financial transaction history for up to 5 years (tax obligation), and access logs for 6 months (Marco Civil da Internet). Outside these legal obligations, all other data is securely deleted. Once the legal retention periods expire, all data is permanently deleted or anonymized. If you would like a copy of your data before closing your account, contact support — we process portability requests before the account is closed.

This Privacy Policy is part of 556d's commitment to transparency. It should be read together with the Terms and Conditions of the platform. If you have any questions about this policy, please reach out to our support team — we are available 24 hours a day to address any queries about the processing of your personal data.

Responsible Gaming at 556d

556d provides self-exclusion tools, configurable deposit limits, temporary account blocks, and strict protection for players under 18. If you feel that betting is affecting your daily life, visit our Responsible Gaming or contact support. CVV (call 188) offers free emotional support 24 hours a day.

Português