Win656 Privacy Policy – How We Protect Your Data

1 Who We Are and What This Policy Covers

The win656 is a Sports Betting and online casino platform available at win656.best, dedicated exclusively to the Brazilian market. In this Privacy Policy, the term "win656" refers to the platform operator, acting as the controller of users' personal data, as defined by the General Data Protection Law (LGPD – Law No. 13.709/2018).

This Policy describes how win656 collects, uses, stores, shares, and protects your personal data when you create an account, make a deposit via Pix, place bets on the Brasileirão, or use any other service available on the platform. It also explains your rights as a data subject and how to exercise them.

By creating an account on win656, you confirm that you have read and understood this Privacy Policy. If you disagree with any point described here, we recommend that you do not create an account or use the platform's services.

2 What personal data we collect

The win656 collects personal data in the following categories:

2.1 Registration Data

• Full name
• CPF (Individual Taxpayer Registration)
• Date of Birth
• Email address
• Mobile number
• Residential address (requested during KYC verification processes)

2.2 Identity Verification Data (KYC)

To comply with legal obligations related to anti-money laundering and age verification, the win656 may request:

• Copy of an official government-issued photo ID (RG, CNH, or passport)
• Proof of residence issued within the last 90 days
• Selfie with document (when required to confirm account ownership)

2.3 Financial and Transactional Data

• Pix key registered for withdrawals (CPF, email, phone number, or random key)
• Deposit and withdrawal history (amounts, dates, and methods used: Pix, boleto, credit/debit card, PicPay, Mercado Pago, TED)
• Credit/debit card token (never the full card number)
• Betting and gaming history on the platform

2.4 Usage and Browsing Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Pages visited, session duration, and clicks on the platform
• Cookie and similar technology data (detailed in Section 7)

2.5 Communication Data

• Content of support interactions (chat, email)
• Communication preferences (opt-in/opt-out for promotional emails)

3 How we collect your data

The personal data of users of the win656 are collected in the following ways:

• Directly from you: when completing the registration form, submitting verification documents, making a deposit, requesting a withdrawal, or contacting support.
• Automatically: while browsing the platform, through cookies, server logs, and tracking technologies (detailed in Section 7).
• Through payment processors: when processing financial transactions (Pix, boleto, card, PicPay, Mercado Pago, or TED), transactional information is received from the respective payment partners.
• Through identity verification providers: in KYC verification cases, the win656 may use specialized services that cross-reference information provided by the user against public databases and CPF records.

4 How we use your data

The win656 uses users' personal data solely for the purposes described below. Each use is tied to a legal basis under the LGPD, detailed in Section 5.

The win656 does not use your data for any purpose beyond those listed above. If we intend to use your data for a new purpose not covered by this Policy, you will be notified in advance and, where required by the LGPD, we will request your express consent.

5 Legal basis for processing (LGPD)

All personal data processing carried out by win656 is grounded in at least one of the legal bases set out in the LGPD (art. 7 and art. 11):

• Performance of a contract (art. 7, V): processing necessary to perform the contract entered into between you and win656 when you created your account — including deposits, withdrawals, bets, and access to games.
• Compliance with a legal obligation (art. 7, II): processing required by law — including identity verification (KYC), anti-money laundering compliance, and adherence to Banco Central do Brasil regulations applicable to financial transactions.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, service improvement, and personalization of the user experience, provided these interests do not conflict with your rights.
• Consent (art. 7, I): sending marketing communications via email or mobile. You may withdraw this consent at any time with no impact on your account.

6 Data Sharing with Third Parties

The win656 does not sell users' personal data to third parties. Data is shared only in the situations below, and strictly limited to what is necessary for each purpose:

• Payment processors: Pix (via Banco Central), card networks (Visa, Mastercard, Elo), PicPay, and Mercado Pago receive the data necessary to process each transaction. These partners have their own privacy policies and are responsible for handling data within their own platforms.
• Identity verification (KYC) providers: specialized companies that assist in verifying user identity for security and regulatory compliance purposes.
• Game and technology providers: slots, Live Casino, and crash game providers receive anonymized session identifiers required for the technical operation of the games. These providers do not receive identifiable personal data such as name or CPF.
• Competent Authorities: win656 may share data with government agencies, judicial authorities, or law enforcement when required by law, court order, or legitimate investigation.
• Analytics and performance services: traffic and performance analytics tools that receive anonymized browsing data to help improve the platform.

All data sharing with partners is governed by data processing agreements that impose obligations equivalent to those in this Policy, in accordance with Art. 39 of the LGPD.

7 Cookies and tracking technologies

The win656 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — for analytics and marketing purposes.

Types of cookies used

• Essential cookies: required for the platform's core functionality — login session, bet slip, and language preferences. These cannot be disabled without affecting your ability to use the platform.
• Performance Cookies: collect anonymized information about how users navigate the platform (most visited pages, session duration) to help us identify improvements. They can be disabled without affecting core functionality.
• Functionality cookies: remember user preferences (such as favorite sport or preferred layout) to personalize the experience. Optional.
• Marketing Cookies: used to deliver more relevant communications based on your behavior on the platform. Only activated with the user's explicit consent.

You can manage your cookie preferences in your browser's settings panel. Disabling essential cookies may prevent certain parts of the platform from working properly, such as login and bet registration.

8 Data security

The win656 applies a robust set of technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption on all connections between the user's device and the platform's servers.
• Encrypted Storage of passwords using secure hashing algorithms — no win656 employee has access to your password in plain text.
• Card Data Tokenization — the full credit or debit card number is never stored on win656 servers.
• 24-hour anti-fraud monitoring to detect suspicious access, intrusion attempts, and anomalous behavior on the platform.
• Two-factor authentication (2FA) optionally available to users who want an extra layer of security at login.
• Internal Access Control — only staff members with a legitimate operational need are granted access to users' personal data, under strict confidentiality protocols.
• Encrypted backups performed on a regular basis to ensure data availability and integrity.

In the event of a security incident that may pose a risk to data subjects, the win656 will notify the National Data Protection Authority (ANPD) and affected users within the timeframe required by the LGPD, with information about the nature of the incident and the measures taken.

9 How long we retain your data

The win656 retains users' personal data for as long as necessary to fulfill the purposes stated in this Policy, in accordance with applicable legal retention periods:

• Active account data: retained while the account is active and for up to 5 years after closure, for legal compliance purposes and resolution of any disputes.
• Financial and transactional data: retained for 5 years from the date of each transaction, as required by Brazilian financial and tax legislation.
• KYC Verification Documents: retained for the period required by anti-money laundering regulations — generally 5 years after the end of the relationship.
• Support communication data: retained for up to 2 years after each ticket is closed, for quality and training purposes.
• Performance and marketing cookie data: retained for up to 13 months from the date of collection, renewed upon user consent.

Once the applicable retention period has elapsed, data is securely deleted or anonymized so that the individual can no longer be identified.

10 Your rights as a data subject

The LGPD grants you a set of rights over your personal data. The win656 is committed to responding to all requests within 15 business days of receipt.

To exercise any of these rights, submit a request by email to suporte@win656.best with the subject line "LGPD Rights – [your right]" and your CPF for identification. The win656 will respond within 15 business days.

If you believe that your data was processed in violation of the LGPD, you also have the right to file a complaint with the National Data Protection Authority (ANPD).

11 Minors

The win656 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process requires age confirmation and CPF verification, which includes the account holder's actual date of birth.

If we become aware that data from a user under 18 has been inadvertently collected, we will delete that information immediately and close the associated account. Parents or guardians who identify a possible minor registration on the platform should contact us at suporte@win656.best so the situation can be resolved as quickly as possible.

12 International data transfer

Some of the technology and infrastructure providers used by the win656 — such as cloud computing services and some game providers — may be located outside Brazil. In these cases, win656 ensures that data transfers occur only to countries or organizations offering a level of protection equivalent to the LGPD, or under specific contractual data protection clauses in accordance with art. 33 of the LGPD.

No identifiable personal data of Brazilian users is transferred to international third parties for advertising or commercial purposes.

13 Updates to This Policy

The win656 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable legislation, or improvements to its services. The date of the last update is shown at the top of this page.

Significant changes will be communicated by email to the address registered on the account at least 15 days before they take effect. For minor changes — such as text corrections or clarifications that do not affect user rights — email notification will not be required, but the update date at the top of the page will always be refreshed.

Your continued use of the platform win656 after an updated version of this Policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date by requesting closure at suporte@win656.best.

14 Contact and Data Protection Officer (DPO)

The win656 has appointed a Data Protection Officer (DPO), as required by art. 41 of the LGPD, responsible for:

• Receive and respond to data subject requests.
• Communicate with the National Data Protection Authority (ANPD) when required.
• Internally guide win656 teams on data protection practices.
• Ensure that data processing remains in ongoing compliance with the LGPD.

For any questions, rights requests, or complaints regarding the processing of personal data by the win656, please contact:

Alternatively, general platform support is also available 24 hours a day via the in-platform chat on win656 or through the same email address above for non-privacy-related matters.