Privacy Policy of uv666 — LGPD & Data Protection

This Privacy Policy describes how uv666 — operated at uv666.best — collects, uses, stores, shares, and protects the personal data of users who access and use the platform. This document was drafted in compliance with General Personal Data Protection Law — LGPD (Law No. 13,709/2018) and other applicable Brazilian regulations.

When creating an account on the uv666, use any feature on the platform — Sports Betting, casino, poker, Pix deposits, withdrawals — or browse uv666.best, you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described herein.

The uv666 acts as controller of personal data collected from users, pursuant to Article 5, Section VI, of the LGPD. This means uv666 is responsible for defining the purposes and means of data processing, as well as ensuring the rights of data subjects.

The uv666 collects personal data at different points throughout your journey on the platform. Below, we detail the categories of data collected and the circumstances in which this occurs.

• Full legal name, as it appears on your identity document
• CPF (Cadastro de Pessoas Físicas) — unique identifier, mandatory
• Date of birth — to confirm legal age (18+)
• Valid email address
• Mobile number (optional at registration, required for two-factor authentication)
• User-created password — stored in encrypted format (hash), never as plain text

• Photo of your identity document (RG or CNH) — front and back
• Selfie holding the document — to confirm that the document holder matches the account owner
• Proof of address (when required by regulatory obligations)
• Proof of source of funds (in specific financial compliance situations)

• Pix key linked to the user's CPF — for deposits and withdrawals
• Partial credit/debit card details (last 4 digits and card brand) — full card data is processed exclusively by a PCI DSS Level 1 payment gateway
• Deposit, withdrawal, and betting history on the platform
• Amounts wagered, winnings, losses, and bonus balances

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Date, time, and duration of sessions on the platform
• Pages visited, features accessed, and actions taken on the platform
• Cookie and similar technology data — detailed in Section 6

Each piece of data collected by the uv666 has a specific and legitimate purpose. The platform does not process data beyond what is necessary for the stated purposes — the data minimization principle established by the LGPD.

A LGPD requires that all personal data processing have a valid legal basis. The uv666 processes your data based on the following legal grounds set out in Article 7 of the law:

• Contract performance (Art. 7, V): processing required to create your account, handle BRL deposits and withdrawals, and record your bets on the platform
• Compliance with a legal or regulatory obligation (Art. 7, II): KYC identity verification, anti-money laundering, age confirmation, and compliance with requests from competent authorities
• Consent (Art. 7, I): sending marketing communications, promotions, and updates — you may withdraw this consent at any time
• Legitimate interest (Art. 7, IX): browsing analysis to improve the platform, ensure security, and prevent fraud, always respecting users' rights and expectations

The uv666 does not sell your personal data to third parties. Sharing occurs only in the strictly necessary situations listed below, always with contractual guarantees of adequate protection.

• Payment gateways: Pix, credit/debit card, PicPay, and Mercado Pago processors receive only the minimum financial data required to process your transactions — all PCI DSS certified
• Anti-fraud and KYC providers: identity verification and risk analysis tools operate under a data processing agreement with uv666, with equivalent data protection obligations
• Game providers: slots, live casino, and other game developers receive only the technical session data required to run the games — no personally identifiable information beyond the account ID
• Competent authorities: when required by law, court order, financial crime investigation, or request from competent Brazilian regulatory authorities
• Under no circumstances: personal data is shared with advertisers, data brokers, advertising platforms, or any third party for commercial purposes unrelated to the operation of your uv666 account

The uv666 uses cookies and similar technologies to ensure the platform functions correctly, enhance the browsing experience, and carry out performance analysis. By continuing to use the site, you consent to the use of the cookies described below.

• Essential cookies: required for the platform to function — they keep your session active, remember language preferences, and ensure login security. They cannot be disabled without affecting core functionality
• Performance cookies: collect anonymous information about how users navigate the platform — most visited pages, errors encountered, loading times — to help us improve the platform
• Functionality cookies: remember your personalized preferences, such as recently viewed bets, favorite sports, and account settings
• Analytical cookies: used to understand aggregate user behavior and guide product improvements — anonymized data, with no individual identification

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent certain platform features from working correctly, including login and Pix deposit processing.

The uv666 applies strict technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. Security is not an optional feature on the platform — it is a core part of how it operates.

• SSL/TLS 256-bit encryption: all communications between your browser or mobile device and uv666 servers are encrypted in transit — including login, Pix deposits, and live betting
• Encryption at rest: personal and financial data stored in uv666's databases is encrypted using modern, industry-standard algorithms
• PCI DSS Level 1: Full credit and debit card details are never stored on uv666 servers — all processing is handled exclusively by payment gateways certified to the highest level of payment security standards
• Hashed passwords: user passwords are stored exclusively as hashed values (bcrypt) — uv666 never stores or has access to your password in plain text
• Two-factor authentication (2FA): available to all users, it adds an extra layer of protection to your login and high-value transactions
• 24/7 anti-fraud monitoring: an automated system detects unusual access patterns, suspicious login attempts, and atypical financial activity in real time
• Restricted internal access: only staff with a verified need have access to users' personal data, subject to strong authentication and audit logging

In the event of a security incident that may affect your personal data, the uv666 will notify the ANPD (National Data Protection Authority) and affected users within the timeframes set out in the LGPD, with clear information about the nature of the incident and the measures taken.

The uv666 retains your personal data only for as long as necessary for the stated purposes or as required by law. Retention periods vary depending on the type of data and the purpose of processing.

• Active account data: retained for as long as the account remains active and throughout the contractual relationship
• Financial transaction data: minimum of 5 years after the transaction, in accordance with Brazilian tax and anti-money laundering obligations
• KYC data (documents): minimum of 5 years after account closure, for regulatory compliance purposes
• Browsing data and cookies: up to 2 years, unless consent is renewed
• Data from closed accounts: a residual period of up to 5 years to meet legal obligations, after which data is anonymized or permanently deleted
• Support communications: kept for 2 years for reference and customer service quality purposes

A LGPD guarantees you, as the personal data subject, a comprehensive set of rights regarding how your information is processed by the uv666. All of these rights can be exercised easily by emailing contato@uv666.best with the subject line "LGPD — [Request Type]".

The uv666 is an adults-only platform. The platform does not intentionally collect personal data from users under 18 and does not allow minors to register or use any feature of the site.

The identity verification (KYC) process includes date-of-birth confirmation and document review specifically to detect and block any registration attempt by a minor. Accounts created with false information to circumvent this check are permanently suspended upon detection.

If you, as a legal guardian, find that a minor under 18 has accessed or registered on the uv666 platform, please contact us immediately at contato@uv666.best or via live chat. uv666 will take the necessary steps to delete the minor's data and block access, in accordance with Article 14 of the LGPD and the Brazilian Child and Adolescent Statute (ECA).

The uv666 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices, or platform features. The most recent version will always be available at uv666.best/privacy-policy, along with the date of the last update.

Material changes — especially those that expand the scope of processing or affect user rights — will be communicated by email to the address registered on your account at least 15 days before taking effect. Minor changes, such as wording corrections or contact updates, may be made without prior notice.

Continued use of the platform after the updated policy's effective date constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the effective date — your available balance will be refunded in full via Pix.

The uv666 has appointed a Data Protection Officer (DPO) pursuant to Article 41 of the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the ANPD (National Data Protection Authority).

• Email for LGPD requests: contato@uv666.best — subject: "LGPD — [Request Type]"
• Live chat: available 24 hours a day, seven days a week, directly on the platform — for quick questions about privacy and data
• Help Center: uv666.best/faq — dedicated section for frequently asked questions about privacy and data protection

All requests relating to the exercise of rights under the LGPD — access, correction, deletion, portability, objection, or withdrawal of consent — must be submitted by email to contato@uv666.best, including the data subject's identification and a clear description of the request. Response time is up to 15 business days.

Should the uv666 does not respond to your request satisfactorily, you may escalate to the ANPD (National Data Protection Authority) or to the Procon in your state, as provided under Brazilian consumer protection and data privacy legislation.