Privacy Policy of 6688v — Your Data

1Data Controller

The controller of personal data collected through the 6688v platform is the company responsible for operating the domain 6688v.best, hereinafter referred to simply as "6688v" or the "Platform". As data controller, 6688v determines the purposes and means by which users' personal data is processed, in accordance with the General Data Protection Law (LGPD — Law 13.709/2018).

To exercise your rights as a data subject or for questions related to how 6688v processes your information, contact us at contato@6688v.best or via the 24-hour live chat available on the platform. Responses are provided within 15 business days, in accordance with the timeframe established by the LGPD.

2Personal Data Collected

6688v collects different categories of personal data depending on how you interact with the platform. We collect only the minimum necessary to operate the service safely and reliably. Below is a detailed description of the categories and specific data collected.

Registration data — provided directly by you when creating an account:

• Full name as it appears on your ID document
• CPF (Cadastro de Pessoa Física)
• Date of birth
• Email address
• Mobile phone number with Brazilian area code (DDD)
• Full residential address (street, number, neighborhood, city, state, ZIP code)

Identity verification data (KYC) — collected at the time of your first withdrawal or when required by security policies:

• Photo ID (RG or CNH) — front and back
• Proof of address issued within the last 90 days
• Selfie holding your ID document (when required for advanced verification)

Financial data — related to your transactions on the platform:

• Pix key registered for withdrawals
• Deposit and withdrawal history (amounts, dates, methods)
• Partial credit/debit card details (last 4 digits only — full card data is processed directly by the payment providers)

Platform usage data — collected automatically during browsing:

• IP address and approximate location (city/state)
• Browser type and version
• Operating system and device type (mobile, tablet, computer)
• Pages visited, session duration, and clicks
• Betting and gaming history on the platform

3Purposes of Processing

6688v uses your personal data solely for the purposes described below. Any new use not covered by this Policy will be communicated to you in advance and, where required, will depend on your renewed consent.

• Account creation and management: registration, authentication, password recovery, identity verification, and keeping your account information up to date.
• Financial transaction processing: processing deposits via Pix, credit/debit card, boleto bancário, PicPay, and Mercado Pago; processing withdrawals via Pix to the account holder's registered account; generating receipts and financial history.
• Service delivery: access to Sports Betting on football, volleyball, MMA/UFC, and other sports; access to Live Casino games, slots, and crash games; personalization of your experience based on usage history.
• Fraud prevention and security: real-time anti-fraud monitoring, detection of multiple accounts, anti-money laundering (AML/CFT) compliance, sanctions screening, and fulfillment of regulatory obligations.
• Communications: sending account notifications, deposit and withdrawal confirmations, security alerts, promotional communications (when you opt in), and responses to support requests.
• Compliance with legal obligations: fulfillment of tax obligations, responses to requests from competent authorities, and compliance with court orders.
• Platform improvement: analysis of aggregated and anonymized usage data to identify performance improvements, usability enhancements, and new features.

4Legal Basis for Processing (LGPD)

All personal data processing carried out by 6688v is grounded in at least one of the legal bases set out in Article 7 of the LGPD. Below we detail the bases applied to each primary purpose:

• Contract performance (art. 7, V): processing required to fulfill the contract established with you upon account creation — including deposits via Pix, withdrawals, account management, and access to platform services.
• Legal obligation (art. 7, II): processing required by law to fulfill tax, regulatory, and anti-money laundering obligations.
• Legitimate interest (art. 7, IX): processing necessary for fraud prevention, platform security, risk analysis, and service improvement, provided it does not override your fundamental rights and freedoms.
• Consent (art. 7, I): sending marketing communications and promotions by email or mobile, where you have opted in to receive them. This consent may be withdrawn at any time.

5Data Sharing with Third Parties

6688v does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs exclusively in the situations described below, always with contractual guarantees of confidentiality and security.

• Payment processors: data required to process your Pix deposits and withdrawals is shared with partner financial institutions and payment gateways. These partners process your data solely for transaction processing purposes.
• Game providers: session and betting data are shared with game providers — such as Evolution Gaming, Pragmatic Play, and Play'n GO — for the operation of Live Casino tables, slots, and other games available on 6688v. These providers hold internationally recognized certifications.
• Infrastructure providers: companies that provide hosting, cybersecurity, fraud prevention, and data analytics services have restricted access limited to the data required for their specific functions.
• Competent authorities: 6688v complies with legitimate requests from law enforcement, judicial, tax, and regulatory authorities as required by Brazilian law, including the LGPD, the Code of Criminal Procedure, and anti-money laundering regulations.

All third parties with whom 6688v shares data are subject to data processing agreements that include obligations equivalent to those set out in this Policy, prohibiting the use of data for any purpose beyond what is strictly necessary.

6Data Retention and Deletion

6688v retains your personal data for as long as necessary to fulfill the purposes described in this Policy, or for the minimum periods required by law. Once the applicable retention period has ended, data is securely deleted or anonymized.

• Active account data: retained for as long as your account remains active on the platform.
• Financial and transaction data: retained for a minimum of 5 years after the transaction, as required by anti-money laundering regulations (Law 9.613/1998) and tax obligations.
• KYC data: retained for a minimum of 5 years after account closure, as required by regulatory guidelines.
• Platform usage data: retained for up to 2 years in identifiable form; after that period, they may be kept in anonymized form for analytical purposes.
• Accounts closed by self-exclusion: data retained for the minimum legally required period and then deleted or anonymized, except where needed to fulfill pending legal obligations.

When you request the deletion of your data, 6688v will assess whether any legal obligation prevents immediate deletion. If one exists, we will inform you of the expected timeline for permanent deletion and retain only the data strictly necessary to fulfill that obligation.

7Security Measures

Protecting your data is a priority for 6688v. We implement technical and organizational measures aligned with the state of the art in information security to safeguard your information against unauthorized access, alteration, disclosure, or destruction.

• AES-256 Encryption: all personal and financial data stored on our servers is encrypted using AES-256 — the same standard used by banks and major financial institutions in Brazil and worldwide.
• Secure transmission (SSL/TLS): all communication between your device and 6688v's servers is protected by SSL/TLS version 1.3. The padlock icon in your browser confirms the connection is secure.
• Internal access control: only staff with a justified operational need are granted access to users' personal data. All access is logged and audited on a regular basis.
• Two-factor authentication: available for all accounts and recommended by 6688v as an additional layer of protection against unauthorized access.
• Anti-fraud monitoring: automated systems monitor financial transactions and behavioral patterns in real time to identify and block suspicious activity.
• Security audits and testing: 6688v conducts periodic security audits and penetration testing (pentest) to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, 6688v will notify the affected individuals and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, providing details on the nature of the incident, the data involved, and the measures taken.

8Cookies and Tracking Technologies

6688v uses cookies and similar technologies to ensure the platform functions correctly, improve your experience, and understand how users interact with the site. Below we explain the types of cookies we use and how you can manage them.

To manage cookies, go to your browser settings (Chrome, Safari, Firefox, Edge) and adjust permissions according to your preference. Disabling essential cookies may prevent you from using the 6688v platform correctly.

9Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights regarding how 6688v processes your information. These rights can be exercised at any time, free of charge, via live chat or by emailing contato@6688v.best.

To exercise any of these rights, contact 6688v support clearly stating which right you wish to exercise and which data it concerns. 6688v will respond within 15 calendar days and may request identity verification before fulfilling the request, to ensure that only the account holder accesses their own information.

If your request is not resolved to your satisfaction, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.

10Minors

The 6688v platform is intended exclusively for users aged 18 and over. 6688v does not knowingly collect personal data from minors. Should we become aware that a minor's data has been collected without the consent of their legal guardians, we will delete that information immediately and close the associated account.

If you believe a minor has created an account on 6688v, please contact us immediately through our support channel or by email at contato@6688v.best, providing as much information as possible. We will take the necessary action promptly.

11International Data Transfer

Due to the global nature of technology services, some personal data of 6688v users may be processed on servers located outside Brazil — particularly by cloud infrastructure providers and internationally certified game providers.

Any international data transfer carried out by 6688v is subject to the following safeguards:

• The destination country offers a level of data protection adequate or equivalent to that established by the LGPD, as assessed by the ANPD; or
• The receiving partner has signed standard contractual data protection clauses ensuring a level of protection consistent with Brazilian LGPD requirements; or
• The transfer is necessary for the performance of a contract with the data subject or to comply with a legal obligation.

You may request information about the countries to which your data may be transferred and the applicable safeguards by contacting 6688v support.

12Changes to This Privacy Policy

6688v may update this Privacy Policy periodically to reflect changes in services, data practices, or legal requirements. Material changes will be communicated at least 7 days in advance by email and/or an in-platform notification.

The date of the most recent update is shown in the header of this document. We recommend revisiting this page periodically. Continued use of the platform after the effective date of any updated terms constitutes acceptance of those changes.

If the changes involve new data processing that requires consent, we will request your explicit agreement before implementing the new processing.

13Contact & Data Protection Officer (DPO)

6688v has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the LGPD internally, and for serving as the point of contact for data subjects and the ANPD.

To exercise your rights as a data subject, report a security incident, ask questions about this Policy, or submit any privacy-related request regarding your data on 6688v, please use the channels below:

• DPO / Privacy Email: contato@6688v.best (subject: Data Privacy)
• Live chat: available 24 hours a day directly on the 6688v.best platform
• Response time: up to 15 calendar days for data subject rights requests, in accordance with the LGPD

For formal complaints not resolved through 6688v's support channel, you may contact the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.