85kk Privacy Policy – How We Protect Your Personal Data

A 85kk collects personal data at various points during your interaction with the platform. Below we detail the categories of data collected, their source, and the purpose of each collection.

1.1 Data provided directly by you:

1.2 Data collected automatically during platform use:

• IP address and approximate location: used for fraud prevention, geographic access verification, and regulatory compliance.
• Device data: device type, operating system, screen resolution, and browser version — used to optimize your experience on the platform across mobile and desktop.
• Browsing history on the platform: pages visited, clicks, session time, and interactions — used to improve usability and identify potential technical issues.
• Betting and transaction history: all bets placed, deposits via Pix, boleto, card, or TED, withdrawals, and bonuses used — retained as required by regulation and for user support.
• Support communication data: records of live chat conversations and emails — retained for quality assurance and dispute resolution purposes.

85kk does not collect data in sensitive categories such as racial origin, religious belief, political opinion, or genetic or biometric data, except where expressly required by law or a competent authority.

Every piece of data collected by 85kk has a specific purpose and a corresponding legal basis under the LGPD. We do not process data without a defined legal basis.

We never use your data for automated decisions that produce legal or similar effects without the possibility of human review. If an automated system flags an account for investigation, the final review is always conducted by a human analyst on 85kk's compliance team.

85kk does not sell personal data. Sharing is limited to specific situations required for platform operations, and only with partners who are contractually bound to maintain confidentiality and handle data appropriately.

Circumstances in which your data may be shared:

• Payment processors: financial institutions and payment processors responsible for handling transactions via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED (Nubank, Itaú, Bradesco, Banco do Brasil). We share only the data strictly necessary for each transaction.
• KYC and identity verification providers: companies specializing in document verification and fraud prevention that assist us with the Know Your Customer process required by regulation.
• Game providers (casino and poker): live casino, slots, and poker content providers whose games are available on the 85kk platform receive session identifiers to process game results — they do not receive full personal data.
• Technology infrastructure: server and cloud infrastructure providers hosting the 85kk platform, under contracts with strict data protection clauses and prohibitions on use for their own purposes.
• Authorities and regulatory bodies: when required by law, court order, ANPD directive, Central Bank request, or other regulatory authority. No data is shared beyond what is strictly requested.

Protecting your data is both a technical and cultural responsibility at 85kk. We implement multiple layers of security to ensure your information stays protected both in transit and at rest on our servers.

Technical measures implemented:

• Encryption in transit: TLS 1.3 on all connections between your phone or computer and our servers. Financial data, passwords, and registration details are never transmitted in plain text.
• Encryption at rest: sensitive data stored in 85kk's databases is encrypted using AES-256. Passwords are stored exclusively as salted hashes — not even the internal team has access to your original password.
• Two-factor authentication (2FA): available to all users in the account settings. We strongly recommend enabling 2FA for an extra layer of protection against unauthorized access.
• Access monitoring: automated systems monitor around the clock for suspicious access attempts, logins from unusual IPs, and abnormal behavior patterns. Unrecognized access triggers automatic blocking and notifies the account holder.
• Isolated payment environment: financial transaction data (Pix keys, card details) is processed in a secure environment isolated from the rest of the platform, reducing exposure to potential vulnerabilities.
• Restricted internal access: 85kk staff members only have access to data required for their specific role (principle of least privilege). Access to sensitive data is audited and logged.

If a security incident is identified that could pose a significant risk or harm to data subjects, 85kk will take immediate containment measures and notify the National Data Protection Authority (ANPD) and affected users within the timeframes set by the LGPD — within 72 hours of becoming aware of the incident in high-risk cases.

85kk uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize communications. When you access the platform for the first time, you will see a cookie consent notice with configuration options.

Types of cookies used:

You can manage your cookie preferences at any time through the platform settings in your account menu. Declining non-essential cookies does not affect core platform functionality — you can still deposit via Pix, bet on the Brasileirão, play poker, and withdraw normally.

85kk does not use cross-site tracking technologies to monitor your behavior on other websites outside our platform. Our interest is limited to your experience within 85kk.

85kk retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by law.

Once the applicable retention period has expired and there is no legal obligation to retain the data, it is deleted or irreversibly anonymized within 85kk's systems.

The General Data Protection Law (LGPD — Lei 13.709/2018) grants you a set of rights over your personal data processed by 85kk. These rights can be exercised at any time, free of charge, by emailing suporte@85kk.best with the subject line "LGPD Request".

• Right of access: request confirmation that we process your data and obtain a full copy of all personal data 85kk holds about you, in a readable format.
• Right of rectification: request the correction of any incomplete, inaccurate, or outdated personal data. If your name or CPF is incorrect in your account, for example, we can update it upon submission of supporting documentation.
• Right to anonymization or deletion: request that data which is unnecessary, excessive, or processed without a legal basis be anonymized or deleted. Data subject to a legal retention obligation (such as financial history) cannot be deleted before the minimum retention period has elapsed.
• Right to data portability: receive your personal data in a structured, interoperable format for transfer to another controller, where technically feasible and in accordance with ANPD regulations.
• Right to information about data sharing: be informed about the public and private entities with which 85kk has shared your data.
• Right to withdraw consent: withdraw consent for processing based solely on consent (such as marketing emails) at any time, without affecting your access to the platform's core services.
• Right to object: object to processing carried out on the basis of legitimate interest, where there is a valid reason to do so as assessed by 85kk and the ANPD.
• Right to lodge a complaint with the ANPD: file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been respected by 85kk.

The response deadline for LGPD requests is up to 15 business days from receipt of a complete request with the data subject's identification. In complex cases requiring in-depth legal or technical analysis, the deadline may be extended once by an equal period, with prior notice to the requester.

The 85kk platform is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If the account verification process (KYC) identifies that the account holder is underage, the account is immediately suspended, access is blocked, and any data collected is deleted in accordance with this Policy and the LGPD.

If you, as a legal guardian, become aware that a minor has created an account on 85kk, please contact us immediately at suporte@85kk.best with the subject line "Minor's Account". We will take the necessary steps as a priority, including immediate account suspension and deletion of the minor's data.

We do not send marketing communications or any material related to Sports Betting, live casino, poker, or e-sports to email addresses or mobile numbers identified as belonging to minors.

85kk may update this Privacy Policy periodically to reflect changes in our practices, Brazilian legislation, or ANPD decisions. Any relevant update will be communicated via the registered email address and through an in-platform notification at least 7 days before taking effect.

The date of the last update is shown at the top of this page and is always kept current. If you continue using the 85kk platform after any changes to this Policy take effect, this will be interpreted as acceptance of the new terms. If you disagree with any change, you may close your account and request the deletion of any data not subject to a minimum legal retention period.

Privacy contact channels:

For related documents, see: Terms and Conditions · Responsible Gambling · Frequently Asked Questions.