Rico555 Privacy Policy – How We Protect Your Data LGPD Compliant

The controller of the personal data collected by the Rico555 platform is the company responsible for operating the site rico555.best. rico555 determines the purposes and means by which your personal data is processed, acting as the data controller under the General Data Protection Law (LGPD — Law No. 13.709/2018).

For any privacy-related questions, to exercise your rights, or for inquiries about this policy, you can reach our data protection team directly by email suporte@rico555.best. Our team handles privacy requests in Brazilian Portuguese within 15 business days from the date the request is received.

This Privacy Policy applies to all registered users and visitors of the Rico555 platform, regardless of the device used — desktop, mobile, or tablet — and the type of connection (4G/5G mobile network, home Wi-Fi, or corporate network).

Rico555 collects personal data directly (when you provide it) and indirectly (automatically during your use of the platform). Below are the categories of data we process:

Data you provide during registration and use of the platform:

• Full name, date of birth, and CPF;
• Email address and mobile number;
• Full residential address (ZIP code, street, number, unit, city, state);
• Identity documents submitted during the KYC verification process (RG, CNH, passport);
• Proof of address and, where required, proof of payment method;
• Financial transaction data: amount deposited, payment method used (Pix, boleto, credit/debit card, PicPay, Mercado Pago, TED), transaction date and time;
• Communication data: messages exchanged with support via chat, email, or WhatsApp (for Platinum and Diamond VIP members).

Data collected automatically during platform use:

• IP address and approximate geographic location;
• Device type, operating system, and browser used;
• Session history, games accessed, bets placed, and time spent on the platform;
• Data from cookies and similar technologies (detailed in section 8 of this policy);
• Access logs with date, time, and actions performed on the account.

Rico555 uses collected personal data solely for the purposes described below. We do not process your data for purposes incompatible with the original ones without prior notice and, where required, renewed consent:

• Provision of platform services: create and manage your account, process deposits and withdrawals in BRL via Pix and other methods, provide access to games and Sports Betting, and operate the rico555 VIP Program;
• Identity verification (KYC): confirm that you are 18 or older, verify the accuracy of your registration details, and comply with legal requirements related to anti-money laundering;
• Fraud prevention and security: detect unauthorized access, prevent the creation of multiple accounts, identify fraudulent usage patterns, and protect the assets of all players on the platform;
• Account communications: send deposit confirmations, withdrawal notices, security alerts, and updates on Rico555 bonuses and promotions — via email, SMS, or push notification;
• Responsible gambling: monitor gameplay patterns that may indicate problem behavior, and ensure compliance with self-exclusions and limits set by the player;
• Platform improvement: analyze aggregated and anonymized usage data to identify opportunities to improve the interface, game catalog, and technical performance of Rico555;
• Compliance with legal obligations: respond to requests from public and judicial authorities in accordance with applicable Brazilian law.

Rico555 does not use your personal data to sell profiles to third parties, build profiles for behavioral advertising outside the platform, or for any data monetization purpose not directly related to the provision of our services.

Under the LGPD, all personal data processing must have a legal basis. rico555 processes your data based on the following legal grounds set out in art. 7 of Law No. 13.709/2018:

• Performance of a contract (Art. 7, V): processing registration data, identity verification, payment processing, and game operations is necessary to fulfill the contract established when you create an account on rico555 and accept our Terms and Conditions;
• Compliance with a legal obligation (art. 7, II): the collection of CPF, identity documents, and financial transaction data is necessary to fulfill legal obligations related to anti-money laundering (Law No. 9.613/1998), data protection, and sector regulation;
• Legitimate interest (art. 7, IX): platform usage data, access logs, and device information are processed based on Rico555's legitimate interest in maintaining platform security, preventing fraud, and improving the player experience — provided that interest does not override the rights and freedoms of data subjects;
• Consent (art. 7, I): for marketing communications and the use of non-essential cookies, processing is based on the data subject's explicit consent, which may be withdrawn at any time without affecting access to the platform.

Rico555 does not sell players' personal data. Data sharing occurs only in the situations described below, with partners and entities that are contractually obligated to protect your information to standards equivalent to those we apply internally:

Partners essential to platform operations:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, we share the necessary financial data with the respective payment service providers, all of which are regulated by the Central Bank of Brazil;
• Identity verification providers (KYC): for document validation and identity confirmation, we use specialized providers that process data exclusively for that purpose and under a confidentiality agreement;
• Game providers: Live Casino providers (such as Evolution Gaming and Pragmatic Play Live) and slots providers have access to an anonymous session identifier for round management — we do not share personally identifiable data with these providers beyond what is strictly necessary to deliver the service;
• Technology infrastructure services: hosting, CDN, and security analytics providers acting as data processors under our instructions and a data processing agreement.

Sharing under legal obligation:

• Brazilian public, judicial, or regulatory authorities, upon formal request and within the applicable legal limits;
• Anti-money laundering entities as required under Brazilian law.

All partners with whom we share data are bound by contractual agreements that impose equivalent data protection obligations and prohibit the use of that information for any purpose beyond what was agreed.

Rico555 retains players' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum legal retention periods required under Brazilian law:

• Registration and identity data (KYC): retained for at least 5 years after account closure, in accordance with anti-money laundering requirements;
• Financial transaction history: retained for 5 years for accounting and tax purposes, in accordance with the Brazilian Tax Code;
• Access and security logs: stored for 6 months, in accordance with the Brazilian Internet Civil Framework (Law No. 12.965/2014);
• Betting history: retained for as long as the account is active and for 2 years after closure, for dispute resolution and responsible gambling purposes;
• Support communication data: retained for 2 years after the last interaction, for quality and compliance purposes.

Once the applicable retention periods expire, data is securely deleted or anonymized so that it can no longer be linked to a specific individual. Anonymization follows standards that make re-identification technically unfeasible.

The security of players' personal data is an operational priority at Rico555, not merely a legal requirement. We implement technical and organizational measures proportionate to the risks involved in processing data on an online casino and Sports Betting platform:

Technical measures:

• SSL/TLS encryption: all communications between your device and Rico555's servers are encrypted, including login, Pix deposits, withdrawals, and interactions with the live casino;
• Encryption at rest: sensitive data stored in our systems — including identity documents and financial data — is encrypted using current industry standards;
• Access control: only employees and systems with a demonstrated operational need for a specific function have access to player personal data, and that access is monitored and audited;
• Continuous monitoring: intrusion detection systems and behavioral analysis monitor the rico555 infrastructure in real time to identify suspicious activity;
• Secure authentication: user passwords are stored using irreversible cryptographic hashing — Rico555 has no access to your password in plain text.

Organizational measures:

• Regular staff training on data security and privacy best practices;
• Strong password policy and multi-factor authentication for internal system access;
• Confidentiality agreements with all employees and service providers who have access to personal data;
• Periodic security reviews and vulnerability testing of the platform.

Despite every effort, no system is 100% immune to risk. rico555 is committed to taking immediate action in the event of a security incident and to notifying affected users as described in section 11 of this policy.

Rico555 uses cookies and similar technologies to ensure the platform runs smoothly, improve the player experience, and understand how the site is used. A cookie is a small text file stored in your browser or device when you access the platform.

You can control and manage cookies in your browser settings. Most browsers allow you to block third-party and non-essential cookies. Please note that disabling essential cookies may prevent login, live games, and deposit and withdrawal processes from working properly on Rico555.

Rico555 does not use third-party behavioral advertising tracking cookies that share your browsing profile with external advertising networks.

The LGPD grants you, as the data subject whose personal data is processed by Rico555, a robust set of rights that you may exercise at any time. These rights are enforceable, and Rico555 is obligated to respond within the legally required timeframes:

To exercise any of these rights, submit your request to suporte@rico555.best with the subject line "Privacy – [Right Requested]". To verify your identity before processing the request, we may ask you to confirm some account details. The response period is up to 15 business days.

Rico555 is an entertainment platform intended exclusively for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, and registration on the platform is strictly prohibited for that age group.

During the registration process, we request date of birth and perform age verification checks. When we identify that an account was created by someone under 18, we take the following steps immediately:

• Account closure;
• Blocking new registrations using the same data;
• Refund of any deposited amounts, following verification, with no bonuses or prizes included;
• Deletion of collected personal data, to the extent permitted by legal retention obligations.

If you are the guardian of a minor and believe they may have created an account on rico555, please contact us immediately at suporte@rico555.best. We will handle the matter with top priority and complete confidentiality.

Despite all security measures in place, rico555 acknowledges that security incidents can occur — and has clear protocols to handle them responsibly and transparently.

In the event of a security incident involving players' personal data, rico555 will follow the protocol below:

• Immediate identification and containment: isolation of the affected system and termination of unauthorized access as soon as the incident is identified;
• Impact assessment: identification of the data and data subjects potentially affected, and assessment of the risk posed to their rights and freedoms;
• ANPD notification: notification to the National Data Protection Authority within 72 hours (where applicable), pursuant to art. 48 of the LGPD;
• Notification to affected data subjects: direct communication by email to players whose data has been compromised, with clear information about what happened, which data was affected, and what steps were taken;
• Corrective measures: implementation of improvements to prevent the incident from recurring.

Rico555 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian legislation (including ANPD regulations), or improvements to the platform's services.

When this policy is updated:

• The updated version will be published on this page with the revision date shown at the top;
• For changes that significantly affect your rights or the way we process your data, we will send an email notice at least 10 days in advance;
• Continued use of the Rico555 platform after the effective date of any changes constitutes acceptance of the updated policy.

To exercise your data subject rights, clarify any questions about this policy, or get in touch with our data protection officer:

• Email: suporte@rico555.best — subject line "Privacy" for priority handling;
• Live chat: available 24 hours a day, 7 days a week, in Portuguese, within the rico555 platform;
• Platinum and Diamond VIP Members: direct contact with your dedicated VIP manager via WhatsApp.

We recommend saving or printing a copy of this policy for future reference. The version published on this page is always the current, active version.