Privacy Policy of pk44123 – How We Protect Your Data

1 Data Controller and Identification

The controller of the personal data processed in accordance with this Privacy Policy is the pk44123, operator of the Sports Betting and online casino platform accessible at pk44123.net. pk44123 is responsible for defining the purposes and means of processing the personal data collected on the platform.

For the purposes of this Policy, the terms "pk44123", "we", and "platform" refer to the same data controller. The registered user, bettor, or player is referred to as "data subject" or "you".

The primary communication channel for privacy and data protection matters is the email privacidade@pk44123.net, managed by the pk44123 Data Protection Officer (DPO). For general support inquiries unrelated to privacy, please use the 24/7 support channel: suporte@pk44123.net.

2 Personal Data We Collect

Pk44123 collects personal data at various points during your interaction with the platform. Below is a breakdown organized by category and collection context.

2.1 Data You Provide Directly

When you register with pk44123, you voluntarily provide:

• Identification data: full name, CPF, date of birth, RG or driver's license number (when requested for KYC verification);
• Contact details: email address, active Brazilian mobile number;
• Address data: street address, number, complement, neighborhood, city, state, and ZIP code;
• Financial data for withdrawals: Pix key (CPF, mobile number, email, or random key) or bank details for wire transfer (bank, branch, account number);
• Identity documents: photo of a national ID, driver's license, or other accepted document, when requested during the identity verification (KYC) process.

2.2 Automatically Collected Data

When you browse the pk44123 platform, we automatically collect:

• Browsing data: IP address, device type, operating system, browser, screen resolution;
• Session data: pages visited, time spent browsing, clicks, traffic source (referral URL);
• Approximate geolocation data: country and state inferred from IP address (we do not track precise GPS location without explicit consent);
• Cookies and similar technologies: described in detail in section 7 of this Policy.

2.3 Data Generated Through Platform Use

Regular use of the platform generates data processed by pk44123:

• Full history of bets placed — sports, events, markets, amounts, and results;
• Financial transaction history — deposits, withdrawals, activated bonuses, and balance;
• Gaming preferences — most-bet sports, favorite slots, account settings;
• Communication records — conversations with support via chat, email, or any official pk44123 channel;
• Responsible gambling alerts and settings — deposit limits set, self-exclusion periods activated.

2.4 Collected Data Summary Table

3 Purpose of Data Processing

Pk44123 uses the data collected for specific, legitimate purposes that are disclosed to the data subject at the time of collection. The main purposes are:

• Provision of platform services: account creation and management, bet processing, balance control, and transaction history;
• Payment processing: processing of deposits via Pix, credit card, debit card, boleto bancário, Mercado Pago, PicPay, and TED, and processing of withdrawals to the account holder's bank account;
• Identity verification (KYC): confirmation that the account holder is over 18 years of age, is the owner of the CPF provided, and is a resident of Brazil, in compliance with anti-money laundering regulations;
• Security and fraud prevention: detection of unauthorized access, identification of fraudulent behavior, and protection of players' financial assets;
• Account communications: transaction notifications, security alerts, communications about active bonuses and promotions, and updates to the Terms and Conditions or this Policy;
• Compliance with legal obligations: reporting to the relevant authorities when required by law, including Law No. 9,613/1998 (Anti-Money Laundering) and Sports Betting legislation in Brazil;
• Platform improvement: usage behavior analysis to identify features to improve, technical issues, and product opportunities;
• Responsible gambling: monitoring of gameplay patterns that may indicate problematic behavior, in order to proactively offer control tools.

4 Legal Basis for Processing

Brazil's LGPD requires a valid legal basis for every personal data processing operation. pk44123 processes your data under the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): processing is necessary to provide the services contracted when creating an account — registration, betting, payments, and support;
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), transaction monitoring, and reporting to authorities when required by law are based on legal obligations applicable to the sector;
• Legitimate interest (art. 7º, IX): the processing of browsing data for fraud prevention and platform security is carried out on the basis of pk44123's legitimate interest and that of other users in maintaining a safe environment;
• Consent (Art. 7, I): marketing communications and non-essential cookies are only used with the explicit consent of the data subject, which may be withdrawn at any time.

5 Data Sharing with Third Parties

Pk44123 may share users' personal data with third parties in the following circumstances:

5.1 Essential Operating Partners

To deliver the platform's services, pk44123 shares data with:

• Payment processors: to process deposits and withdrawals via Pix, credit/debit card, boleto bancário, Mercado Pago, PicPay, and TED through partner banks (including integrations with Nubank, Itaú, Bradesco, and Banco do Brasil);
• Game providers: slots and live casino game providers (such as Pragmatic Play, NetEnt, Play'n GO, and BTG) receive only the anonymous identifiers required to operate gaming sessions — they do not receive CPF numbers or financial data;
• Technology infrastructure providers: servers, CDN, monitoring systems, and analytics tools contracted by pk44123 — all subject to data processing agreements with confidentiality clauses.

5.2 Government and Regulatory Authorities

Pk44123 may disclose personal data to the relevant authorities when:

• There is a judicial or administrative order with legal force;
• It is necessary to comply with anti-money laundering legislation (Law No. 9,613/1998) or other regulatory obligations applicable to the betting sector;
• It is necessary to investigate fraud, match-fixing, or other suspected unlawful activities affecting the platform or its users.

5.3 What We Do Not Do with Your Data

• We do not sell personal data to third parties for advertising or commercial purposes;
• We do not share data with external advertisers, programmatic advertising networks, or data brokers;
• We do not transfer personal data to third parties without entering into contractual agreements that guarantee the confidentiality and security of the information.

6 Data Processing in Payments

Pk44123 uses a payment architecture designed to minimize exposure of sensitive financial data. Our key practices include:

• Card data: credit and debit card numbers are never stored on pk44123 servers. Every transaction is processed directly by a PCI DSS-certified payment gateway. pk44123 receives only transaction confirmation tokens;
• Pix keys: Pix keys provided for withdrawals are stored in encrypted form and linked exclusively to the account holder's CPF. They are not shared with any third party other than the recipient bank of the transfer;
• Bank transfer (TED) data: banking details for TED transfers (bank, branch, account number) are stored in encrypted form and used solely to process withdrawals requested by the account holder;
• Transaction history: the complete history of deposits and withdrawals is retained by pk44123 for the minimum period required by Brazilian financial legislation, currently 5 years.

7 Cookies and Tracking Technologies

Pk44123 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — analyze usage patterns. You can manage your cookie preferences at any time through the privacy settings panel available on the platform.

7.1 Types of Cookies Used

7.2 How to Manage Cookies

Essential and security cookies are required for the platform's basic functionality and cannot be disabled without affecting access to your account. Other cookie types can be managed through the account privacy panel or your browser settings. If you block all cookies via your browser, some pk44123 platform features may not work properly.

8 Data Retention Period

Pk44123 retains personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. The main retention periods are:

• Registration data (full name, CPF, email, mobile number): retained for the duration of the account and for 5 years after closure, as required by financial and anti-money laundering legislation;
• Financial transaction history: retained for a minimum of 5 years after each transaction, in compliance with Brazilian tax and financial legislation;
• Betting history: retained for the duration of the account and for 2 years after closure;
• Support records (chats and emails): retained for 2 years for dispute resolution purposes;
• Browsing data and cookies: in accordance with the retention periods set out in section 7, with a maximum of 1 year for analytical data.

Once retention periods expire, data is securely deleted or anonymized so that it is no longer possible to identify the data subject from the remaining information.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by pk44123, the following rights, which may be exercised at any time:

• Access (Art. 18, II): request a copy of all personal data that pk44123 holds about you;
• Correction (art. 18, III): correct incomplete, inaccurate, or outdated data directly in the account dashboard or by submitting a request to the DPO;
• Anonymization, blocking, or deletion (Art. 18, IV): request that unnecessary or excessive data be anonymized or deleted, subject to legally mandated retention periods;
• Portability (art. 18, V): request the transfer of your personal data to another platform or controller, in a structured and commonly used format;
• Information on data sharing (Art. 18, VII): know which entities pk44123 shares your data with;
• Withdrawal of consent (Art. 18, IX): revoke consent given for specific purposes — such as email marketing — without affecting your access to the platform's core services;
• Objection (art. 18, §2º): object to processing carried out on the basis of legitimate interest, where there is a justified reason to do so.

10 Information Security Measures

Pk44123 implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction:

10.1 Technical Measures

• 256-bit SSL encryption on all communications between client and server;
• Passwords are stored using secure hashing (bcrypt) — not even pk44123 staff can access user passwords;
• Sensitive financial data (Pix keys, banking details) stored with encryption at rest;
• PCI DSS-certified payment gateway — card data never passes through pk44123 servers;
• Two-factor authentication (2FA) available for all users;
• Automated monitoring of suspicious access and intrusion attempts 24 hours a day;
• Regular backups with encrypted, segregated retention.

10.2 Organizational Measures

• Internal access to personal data restricted to staff with a verified need (principle of least privilege);
• Regular team training on data security and privacy practices;
• Security incident management policy with a documented response plan;
• Data processing agreements in place with all vendors that process personal data on behalf of pk44123.

10.3 Incident Notification

In the event of a security incident resulting in unauthorized access, leakage, or destruction of personal data, pk44123 will notify the National Data Protection Authority (ANPD) within the timeframe required by the LGPD and will inform affected data subjects by email as soon as technically feasible, describing the nature of the incident, the data involved, and the measures taken to mitigate its effects.

11 Minors

Pk44123 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we become aware that a minor's data has been inadvertently collected, we will take the following immediate steps:

• Preventive closure of the associated account;
• Deletion of all personal data pertaining to the minor from our active records;
• Notification, where applicable, to the relevant authorities responsible for the protection of minors.

Legal guardians who discover that a minor has accessed pk44123 should get in touch immediately by email at privacidade@pk44123.net. We recommend using parental control tools on shared devices to prevent minors from accessing betting platforms.

12 Changes to this Privacy Policy

Pk44123 may update this Privacy Policy periodically, for reasons including changes in Brazilian legislation (including LGPD regulation by the ANPD), updates to the services offered, or improvements to data protection practices.

Material changes — especially those that negatively affect data subjects' rights or expand data collection or sharing — will be communicated by email at least 15 calendar days before taking effect.

Minor changes, such as language corrections or clarifications that do not affect the substance of data processing, may take effect immediately upon updating the revision date at the top of this document. The current version of this Policy will always be available at pk44123.net/privacy-policy.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy. If you do not agree with the changes, you may request account closure at no charge before the effective date.

13 Contact the Data Protection Officer (DPO)

Pk44123 has appointed a Data Protection Officer (DPO) to serve as the communication channel between the platform, data subjects, and the Brazilian National Data Protection Authority (ANPD), as required under Article 41 of the LGPD.

Pk44123's DPO is responsible for:

• Receive and respond to data subject requests regarding the exercise of their rights (access, correction, deletion, portability, etc.);
• Train internal staff on LGPD compliance practices;
• Act as the point of contact with the ANPD for notifications and regulatory inquiries;
• Assess and mitigate privacy risks in new products, features, and internal processes.