Privacy Policy of 95ycom – Your Data, Protected

95ycom is a Sports Betting and online casino platform focused on the Brazilian market. To deliver our services — including bets on football (Brasileirão, Copa do Brasil, Libertadores), volleyball, NBB basketball, MMA/UFC, e-sports, as well as roulette, blackjack, slots, and live casino — we need to collect and process personal data from users who register on the platform.

This policy applies to all users who interact with 95ycom through any channel: the main website, mobile versions, emails, push notifications, and support communications. If you are using 95ycom on behalf of another person, you confirm that you are authorized to provide that person's data and that they have been informed of this policy.

95ycom collects different categories of personal data depending on how you use the platform:

Data you provide directly:

• Full name, CPF, and date of birth — required at registration;
• Email address and mobile number for communication and authentication;
• Residential address, including ZIP code — required for identity verification;
• Banking details: Pix key, account number, bank name (Nubank, Itaú, Bradesco, Banco do Brasil, and others) — required to process deposits and withdrawals;
• Identity documents (RG, CNH, or passport) and proof of address — when requested during the KYC verification process;
• Support information: messages and service history with the 95ycom team.

Automatically collected data:

• IP address and approximate geolocation data;
• Device type, operating system, and browser used to access 95ycom;
• Betting history, games accessed, amounts wagered, and results;
• Session data: access times, pages visited, and time spent browsing;
• Cookies and similar tracking technologies, as described in section 6 of this policy.

Personal data collected by 95ycom is used exclusively for the following purposes:

95ycom does not use your personal data for purposes other than those listed above without obtaining your prior and specific consent, or without another appropriate legal basis under the LGPD.

Under the General Data Protection Law (LGPD – Law No. 13,709/2018), all personal data processing must have a legal basis. 95ycom processes your data in accordance with the following legal grounds established by the LGPD:

• Contract performance (Art. 7, V): Processing is necessary to fulfill the service agreement entered into when you create an account on 95ycom. This includes processing Pix deposits, recording bets, and processing withdrawals.
• Consent (Art. 7, I): For optional activities — such as sending promotional emails, push notifications, and personalizing offers — 95ycom requests your explicit consent, which may be withdrawn at any time.
• Compliance with legal obligation (Art. 7, II): Certain categories of data must be retained to fulfill obligations imposed by Brazilian law, including Central Bank regulations, anti-money laundering rules, and tax requirements.
• Legitimate interest (Art. 7, IX): Used for activities such as fraud prevention, platform security, and service improvement, always respecting users' rights and reasonable expectations.

95ycom may share your personal data with third parties in the following situations, always with the purpose of operating the platform or fulfilling legal obligations:

• Payment processors: Financial institutions and payment gateways required to process Pix, boleto bancário, TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil), credit/debit cards, PicPay, and Mercado Pago. These partners receive only the data necessary to process each transaction and are contractually required to protect it;
• Identity verification providers: Specialized KYC and anti-fraud services that assist in validating users' CPF and submitted documents;
• Technology providers: Companies that provide server infrastructure, databases, cybersecurity, and analytics tools used to operate 95ycom;
• Game providers: Companies that supply the live casino games, slots, and other content available on 95ycom. These providers may have access to game session data for technical support and auditing purposes;
• Competent authorities: When required by law, court order, or determination by a Brazilian regulatory authority, 95ycom may share data with government agencies;
• Auditors and legal advisors: Professionals engaged to advise 95ycom on legal, accounting, or compliance matters, bound by confidentiality obligations.

95ycom does not sell, rent, or transfer your personal data to marketing companies, advertisers, or any third party for commercial purposes without your express consent.

95ycom uses cookies and similar technologies to enhance the user experience, ensure platform security, and understand how our services are used. The types of cookies used by 95ycom include:

• Essential cookies: Required for the platform's core functionality — keeping your session active, processing bets, and securing your login. These cannot be disabled without affecting how 95ycom operates;
• Performance cookies: Collect anonymous information about how users navigate 95ycom — which pages they visit, how long they stay, and any errors they encounter. Used to improve the platform;
• Functionality cookies: Remember your preferences — language, odds display settings, last payment method used — to personalize your experience on future visits;
• Analytical cookies: Used to understand aggregate user behavior and improve 95ycom's features. Data is anonymized wherever possible.

You can manage your cookie settings through the privacy panel available in the 95ycom footer. Disabling non-essential cookies may affect some features, but will not prevent access to the core betting and casino services.

Personal data of 95ycom users is stored on secure servers with the following protection measures in place:

• 256-bit SSL/TLS encryption on all communications between the user and 95ycom servers;
• Encryption at rest for sensitive data stored in the database, including passwords (stored as irreversible hashes), identity documents, and banking details;
• Access control based on the principle of least privilege — each 95ycom team member can only access the data required to perform their role;
• Continuous security monitoring with intrusion detection and automatic alerts for suspicious activity;
• Encrypted backups performed periodically with redundant storage;
• Penetration testing and periodic security audits conducted by specialized third-party firms.

While 95ycom takes all reasonable technical and organizational measures to protect your data, no system is 100% foolproof. In the event of a security incident affecting your personal data, 95ycom will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes established by the LGPD.

95ycom retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with minimum legal retention obligations. The general timeframes are as follows:

Once retention periods have expired, data is permanently deleted or anonymized so that the individual can no longer be identified. Data subject to a court order will be retained until the relevant proceedings are resolved.

Under the LGPD, as the owner of personal data processed by 95ycom, you have the following rights, which may be exercised at any time: