Kk456 Privacy Policy – Protecting Your Data

Kk456 is the controller of personal data collected through the kk456.best platform and the kk456 app. As controller, kk456 determines the purposes and means by which personal data is processed, always in compliance with the LGPD and other regulations applicable to the Brazilian digital entertainment and online Sports Betting market.

To exercise any right set out in this policy or to clarify questions about how your data is processed, please reach out through the privacy channel indicated in section 12 of this document.

Kk456 collects personal data in different ways and at different points during your interaction with the platform. The main types of data collected are listed below:

Personal data collected by kk456 is used exclusively for the purposes described below. No data is used for purposes other than those stated in this policy without prior notice and, where required, renewed consent from the data subject:

• Account management and service delivery: keep your account active, process deposits via Pix, boleto, and card, execute withdrawals, record bets and results, and provide access to the games lobby.
• Identity verification and fraud prevention: confirm that you are 18 or older, verify ownership of payment methods, and prevent money laundering and financial fraud.
• Communication and support: respond to requests via live chat and email, send notifications about your account, withdrawals, promotions, and relevant policy updates.
• Experience personalization: tailor game recommendations, betting suggestions, and communications based on your usage history on the kk456 platform.
• Compliance with legal obligations: respond to requests from regulatory and judicial authorities as required by Brazilian law.
• Continuous platform improvement: analyze aggregated, anonymous usage patterns to improve features, fix bugs, and develop new products.
• Responsible gambling: monitor behavioral patterns to identify signs of problem gambling and proactively activate protective tools when needed.

Kk456 processes personal data based on the following legal grounds established by the LGPD (Law No. 13.709/2018):

• Contract performance (Art. 7, V): processing is necessary to fulfill the service agreement entered into with you at registration — without processing your data, we cannot maintain your account or execute deposits, bets, or withdrawals.
• Compliance with legal obligation (Art. 7, II): identity verification, anti-money laundering controls, and reporting to competent authorities are legal obligations that require the processing of personal data regardless of consent.
• Legitimate interest (Art. 7, IX): behavioral analysis for fraud prevention, responsible gambling monitoring, and product improvement, provided this does not infringe on the data subject's fundamental rights.
• Consent (Art. 7, I): for sending marketing communications and promotions, kk456 requests explicit consent and provides a simple opt-out mechanism available at any time.

Kk456 does not sell users' personal data to third parties. Sharing occurs only in the situations described below, always for a specific purpose and with partners who assume contractual data protection obligations compatible with the LGPD:

• Payment processors: data required to process transactions via Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay. These partners act as processors under kk456's instruction.
• Identity verification providers: document and biometric data shared with KYC services for identity verification and age validation, as required by law.
• Game providers: username and session data shared with providers such as Pragmatic Play, Evolution Gaming, and other content partners, as required for game operation.
• Regulatory and judicial authorities: data shared when required by law, court order, or regulation applicable to the Brazilian Sports Betting and digital entertainment market.
• Technology infrastructure: hosting, cloud storage, and technical analytics services that support the operation of the kk456 platform, all subject to data processing agreements compatible with the LGPD.

Whenever required by the LGPD, kk456 formalizes data processing agreements with all operators handling personal data on its behalf.

The kk456 website and app use cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and — with your consent — personalize content and analyze platform usage. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, session management, and security. They cannot be disabled without affecting the site's functionality.
• Preference cookies: remember your language settings, layout preferences, and gaming preferences to personalize your experience on future visits to kk456.
• Analytics cookies: collect anonymized data on how users navigate the platform — pages visited, session duration, browsing flows — so we can identify areas for improvement.
• Marketing cookies: used to measure campaign effectiveness and, with your consent, display relevant communications within the platform.

You can manage your cookie preferences at any time through the privacy settings panel in the site footer or through your browser settings. Disabling non-essential cookies does not affect access to kk456's core features.

Kk456 applies technical and organizational measures proportionate to the risk to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Measures in place include:

• SSL/TLS 256-bit Encryption across all communications between your device and kk456 servers.
• Encrypted storage of sensitive data such as passwords (hashed), identity documents, and Pix keys.
• Two-factor authentication (2FA) available to all users who want to add an extra layer of security to their account access.
• Continuous monitoring of access logs and transactions to detect anomalous patterns and intrusion attempts in real time.
• Internal access control with a least-privilege principle: only employees with a legitimate business need are granted access to specific categories of user data.
• Regular testing security measures, including vulnerability assessments and penetration testing, conducted by our internal team and external auditors.

In the event of a security incident that could pose significant risk or harm to users, kk456 will notify the National Data Protection Authority (ANPD) and affected users within the legally required timeframes, as mandated by the LGPD.

Kk456 retains personal data for as long as necessary to fulfill the purposes described in this policy or to comply with applicable legal obligations. The main retention periods are:

• Registration and identity data: retained while the account is active and for a minimum of 5 years after closure, in accordance with anti-money laundering and regulatory compliance requirements.
• Financial transaction history: retained for a minimum of 5 years after each transaction, in compliance with Brazilian tax and regulatory obligations.
• Betting and game history: retained for 2 years after account closure for dispute resolution and audit purposes.
• Customer support data: service records retained for 2 years for quality assurance and dispute resolution purposes.
• Access and security logs: retained for 12 months for security and incident investigation purposes.
• Marketing data: retained until consent is withdrawn or for up to 2 years with no active interaction.

Once applicable retention periods expire, data is anonymized or securely and irreversibly deleted from kk456 systems.

The LGPD grants you, as the holder of personal data processed by kk456, a set of rights that can be exercised at any time by submitting a request through our privacy channel:

• Confirmation and access: request confirmation that kk456 processes your data and obtain a copy of the information we hold about you.
• Correction: request the correction of incomplete, inaccurate, or outdated information in your account.
• Anonymization, blocking, or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
• Portability: request the portability of your personal data to another service or product provider, in accordance with ANPD regulations.
• Deletion of data processed under consent: request the deletion of data processed on the basis of consent, including marketing and personalization data.
• Data sharing information: obtain information about which public and private entities kk456 has shared your data with.
• Consent withdrawal: withdraw consent for data processing at any time, at no cost, through the account settings panel or via the privacy channel.
• Objection: object to data processing carried out on the basis of legitimate interest when you believe your fundamental rights outweigh kk456's interest.

Requests will be responded to within 15 business days. For complex cases requiring an extension, kk456 will notify you of the reason and the new expected response date. To exercise any right, use the channel indicated in section 12.

Kk456 does not collect, store, or process personal data of individuals under 18. Access to all platform services is restricted to users of legal age, and kk456 performs mandatory age verification during the registration process. If we identify that data from a minor was inadvertently collected, we will take immediate steps to delete it from our systems and close the corresponding account.

If you believe an account has been created by a minor on kk456, please contact us immediately through the 24-hour support channel in the app or via the privacy email address indicated in section 12.

Kk456 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable law, or new services offered by the platform. Significant changes will be communicated at least 7 days in advance by email and/or in-platform notification, before taking effect.

The last updated date is always shown at the top of this document. We recommend reviewing this policy periodically. Continued use of kk456 services after any changes take effect constitutes acceptance of the updated version.

To exercise your rights as a data subject, report privacy concerns, or request clarification about this policy, kk456 offers the following contact channels:

• Privacy email: privacidade@kk456.best – for formal rights requests, portability requests, and incident notifications.
• Live chat: available 24 hours a day, 7 days a week, for general privacy and data protection inquiries. Response in under 3 minutes.
• Data Protection Officer (DPO): kk456 has appointed a Data Protection Officer responsible for overseeing LGPD compliance and serving as the point of contact with the Autoridade Nacional de Proteção de Dados (ANPD). The DPO's contact details are available through the privacy channel above.

If you are not satisfied with kk456's response to a rights request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), as provided under Art. 55-J of the LGPD.