45xcom Privacy Policy – Your Data Protected

1About Us & Data Protection Officer Contact

The 45xcom is the Sports Betting and online casino platform operated under the domain 45xcom.best, focused exclusively on the Brazilian market. For the purposes of this Privacy Policy, 45xcom acts as the controller of personal data of players registered on the platform, as defined by the General Data Protection Law (LGPD), Law No. 13.709/2018.

The Data Protection Officer (DPO) at 45xcom is responsible for ensuring that personal data processing on the platform complies with the LGPD and this Policy. To exercise any right provided by law or to clarify questions about how your data is handled, you can reach us through the following channels:

• Live chat: available 24 hours a day in Portuguese directly on the 45xcom platform;
• Email: contato@45xcom.best — response time of up to 4 hours on business days;
• Formal request: through the privacy form available in your account settings, with a response time of up to 15 calendar days as required by the LGPD.

45xcom is committed to responding to all personal data requests within the timeframes established by the LGPD and to handling each request with seriousness and respect for the data subject.

2What Data We Collect and Why

The 45xcom collects personal data at different points during platform use. The table below outlines the data categories, corresponding examples, and the purpose of each collection:

45xcom does not collect health data, religious beliefs, political affiliations, or any other sensitive information beyond what is required for identity verification and legal compliance. Credit and debit card details are never stored on platform servers — they are processed exclusively by PCI-DSS certified operators at the time of the transaction.

3How We Use Your Data

The 45xcom processes your personal data based on the following legal grounds under the LGPD: contract performance (account operation and payment processing), compliance with a legal obligation (anti-money laundering, age verification), legitimate interest (platform security, fraud prevention) and, where applicable, express consent for marketing communications.

The specific purposes for which your data is used are:

• Operate your account: process registration, authentication, deposits via Pix, bank slip, credit/debit card, PicPay and Mercado Pago, withdrawals and balance inquiries;
• Verify your identity: carry out the KYC process before the first withdrawal, confirm that the player is aged 18 or over and is a resident of Brazil;
• Ensure security: detect suspicious access, fraud attempts, multiple account usage, and behaviors that may indicate bet manipulation;
• Fulfill legal obligations: report suspicious transactions as required by Brazilian anti-money laundering legislation; respond to requests from regulatory authorities;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling; trigger protection tools in line with the settings chosen by the player;
• Improve the platform: analyze aggregated usage data to identify technical issues, improve the interface, and develop new features;
• Relevant communications: send deposit and withdrawal confirmations, account security alerts, and — with your consent — promotional information from 45xcom covering football, volleyball, MMA, e-sports, and casino.

45xcom never uses your personal data to sell, rent, or license information to advertisers or third-party marketing platforms without your explicit consent. Marketing communications can be disabled at any time through your account notification preferences.

4Data Sharing with Third Parties

The 45xcom does not sell or commercialize players' personal data. Data sharing occurs only in the situations below, which are strictly necessary to operate the platform or fulfill legal obligations:

• Payment processors: financial data required to process deposits and withdrawals is shared with Pix operators, boleto bancário, credit/debit card processors, PicPay, and Mercado Pago, all operating under confidentiality agreements and in compliance with Banco Central do Brasil regulations;
• Identity verification providers: documents submitted during the KYC process may be reviewed by specialized identity verification partners, who operate under contractual confidentiality and security obligations;
• Casino and game providers: session data (player identifier, balance used) is transmitted to live casino, slots, and crash game providers to operate game rounds — no complete identity data is transmitted to these providers;
• Competent authorities: 45xcom may share data with the Central Bank of Brazil, law enforcement, judicial or regulatory authorities when required by a legal request, court order or applicable regulatory obligation;
• Technology infrastructure providers: cloud, hosting, and digital security services that process data on behalf of 45xcom under contracts that impose data protection standards equivalent to those required by the LGPD.

5Cookies and Tracking Technologies

The 45xcom uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and maintain session security. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — session authentication, bet slip management, language settings, and interface preferences. These cannot be disabled without affecting platform functionality;
• Security cookies: used to detect suspicious access, unauthorized login attempts, and unusual browsing behavior that may indicate fraud or unauthorized account access;
• Analytics cookies: collect aggregated, anonymized data on how players navigate 45xcom — which sections are most visited, where technical errors occur, and average loading times. This data is used solely to improve the product;
• Preference cookies: store settings chosen by the player, such as favorite sports, preferred markets, and active notifications, to personalize the experience without requiring reconfiguration on every login.

45xcom does not use third-party behavioral advertising cookies to track your activity outside the platform. Betting history and gaming preferences are never shared with external ad networks.

You can manage cookie preferences through the banner displayed on your first visit or through your browser settings. Disabling essential cookies may prevent your account from functioning properly. For specific questions about cookie use at 45xcom, contact support via the Portuguese-language chat.

6Security of Your Information

The 45xcom adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures currently in place include:

• 256-bit SSL/TLS Encryption across all communications between your device and 45xcom's servers — including Pix deposits, withdrawals, login, and KYC document submissions;
• Two-factor authentication (2FA) available to all players, with a verification code sent by SMS or email to confirm sign-ins from new devices;
• Restricted internal access controls: only staff with a legitimate need may access players' personal data, with auditable logs maintained for all access events;
• Continuous security monitoring of servers and systems, with automatic alerts for unauthorized access attempts or anomalous behavior;
• Secure password storage using cryptographic hashing — 45xcom does not store passwords in plain text and no staff member has access to your password;
• PCI-DSS Certification of the processors used for credit and debit card transactions — card data never passes through 45xcom's servers.

In the event of a security incident that may affect players' personal data, 45xcom is committed to notifying the affected individuals and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, providing clear information about what occurred, the data involved and the measures taken to address the issue.

Your security matters too: use a strong, unique password for your 45xcom account, enable 2FA, and never share your credentials with anyone. If you suspect unauthorized access, contact support immediately via the 24-hour live chat.

7Retention and Deletion of Your Data

The 45xcom retains players' personal data for as long as necessary for the purposes described in this Policy, in compliance with applicable legal retention periods. The general retention criteria are:

• Registration & KYC data: retained for as long as the account remains active and for at least 5 (five) years after closure, as required by Brazilian anti-money laundering regulations;
• Financial transaction history: retained for a minimum of 5 years after each transaction, in accordance with the fiscal and regulatory obligations applicable to financial platforms in Brazil;
• Betting history: retained for the duration of the active account and for 2 years after closure for audit and dispute resolution purposes;
• Support communication data: retained for 2 years to ensure continuity of service and for quality audit purposes;
• Technical and session data: retained for up to 12 months for security and fraud detection purposes.

Once the applicable retention periods expire, data is securely deleted or anonymized in a way that makes it impossible to re-identify the subject. Anonymized data may be retained indefinitely for statistical purposes and platform improvement.

If you request deletion of your data before the legal retention period has expired, 45xcom may retain the data for the minimum period required by law — but will restrict access and use of that data solely to meet legal obligations, without using it for any operational or marketing purpose.

8Your Rights as a Data Subject (LGPD)

The General Data Protection Law (LGPD) grants you, as the data subject, a set of rights regarding your personal information processed by 45xcom. See each right and how to exercise it below:

To exercise any of these rights, contact 45xcom via live chat (available 24/7 in Portuguese) or send an email to contato@45xcom.best with the subject line "LGPD Request". 45xcom responds within the legal deadline of 15 calendar days and may request identity confirmation before processing access or deletion requests.

9Players Under 18

The Platform 45xcom is intended exclusively for users who are 18 (eighteen) years of age or older. We do not knowingly collect personal data from anyone under 18 and do not allow registration, deposits or participation in betting by individuals below that age.

The identity verification process (KYC) required before the first withdrawal includes age confirmation via an official photo ID — national ID card, driver's license, or passport. Any account whose data indicates the holder is under 18 is immediately closed and deposited funds are returned to the original payment method.

If you are the guardian of a minor who has created a 45xcom account, contact support immediately via live chat. 45xcom will close the account within 24 hours of confirming the situation and return any funds using the same method that was used for the deposit.

10Changes to This Privacy Policy

The 45xcom may update this Privacy Policy periodically to reflect changes in Brazilian data protection legislation, in how we operate the platform, or in the technologies we use. The date of the last update is always displayed at the top of this document.

When relevant changes occur — ones that affect your rights, how we use your data, or the third parties we share it with — you will receive an email notification at your registered address at least 15 (fifteen) days before the changes take effect. Purely formal updates, such as wording corrections or contact detail changes, may take effect without individual prior notice.

Continued use of the 45xcom platform after an updated version of this Policy takes effect constitutes acceptance of the new terms. If you disagree with any change, you may request account closure through support before the new version's effective date, with no penalties.

The current version of this Policy is always available at 45xcom.best/privacy-policy. We recommend checking back periodically to stay informed about how your data is handled.