4pgvip Privacy Policy – LGPD and Your Rights

1 Who We Are and Who Controls Your Data

The 4pgvip is an online casino and Sports Betting platform operated by 4pgvip Digital Entertainment, focused exclusively on the Brazilian market. For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the 4pgvip is the controller of personal data collected from platform users — that is, the entity that determines the purposes and means of processing that data.

Any questions, requests, or exercise of data privacy rights can be directed to our Data Protection Officer (DPO) at suporte@4pgvip.net, with the subject line "Privacy – LGPD".

2 What Data We Collect

The 4pgvip collects personal data at different points during your interaction with the platform. The main types of data we process are outlined below:

2.1 Data provided directly by you

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address;
• Identity verification data (KYC): a copy of a government-issued ID (RG or CNH), proof of address, and where required, proof of ownership of the payment method used;
• Financial data: information about deposits and withdrawals, including Pix keys, credit/debit card details (processed by certified gateways), and transaction history on the platform;
• Support communications: content of live chat conversations and emails exchanged with our support team.

2.2 Automatically collected data

• Access and browsing data: IP address, device type, operating system, browser, pages visited, session duration, and actions taken on the platform;
• Gaming data: betting history, games accessed, amounts wagered, wins and losses, promotional participation, and VIP Program usage;
• Cookie and similar technology data: information collected via cookies, pixels, and tags for behavioral analysis and experience personalization (detailed in section 8 of this Policy).

3 How We Use Your Data

The 4pgvip uses the data collected solely for the purposes described below, each with an appropriate legal basis under the LGPD:

The 4pgvip does not use your personal data for purposes incompatible with those listed above. If we ever need to use your data for a new purpose, you will be notified in advance and, where required, we will request your specific consent.

4 Sharing Data with Third Parties

The 4pgvip does not sell users' personal data. Period. Sharing only occurs in the situations described below, always with adequate protection of your data:

• Payment processors: certified payment gateways that process transactions via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED. These partners receive only the information strictly necessary to process each transaction and are bound by data protection agreements;
• Game providers: companies such as Evolution Gaming, Pragmatic Play, PG Soft, and Hacksaw Gaming receive only the minimum data required to run the games (a game session identifier) — with no financial or full identity data shared;
• Identity verification services: certified KYC platforms used to verify identity documents, as required by regulation;
• Regulatory and public safety authorities: when required by law, court order, or formal request from a competent Brazilian authority. 4pgvip cooperates fully with investigations related to illegal activities;
• Technology service providers: companies that provide server infrastructure, security data analysis, and other technical services essential to the platform's operation, all under contracts with data protection clauses.

5 International Data Transfers

Some of the technology and game providers that 4pgvip may process data on servers located outside Brazil. When this occurs, 4pgvip ensures that international data transfers are protected by appropriate mechanisms, such as standard contractual clauses requiring the same level of protection guaranteed by the LGPD.

Under no circumstances is Brazilian users' data transferred to jurisdictions without an adequate level of data protection without the corresponding contractual safeguards in place. The goal is always to ensure your data receives the same treatment it would if processed exclusively in Brazil.

6 How Long We Retain Your Data

The 4pgvip retains your personal data only for as long as necessary for the purposes for which it was collected, in accordance with mandatory legal retention periods:

• Active account data: kept for as long as your account remains active on the platform;
• Financial and transaction data: retained for a minimum of 5 years after account closure, as required by Brazilian tax and anti-money laundering legislation;
• KYC data and identity documents: retained for a minimum of 5 years after account closure, as required by regulation;
• Betting and gaming history: retained for 3 years after the last activity, for dispute resolution and audit purposes;
• Support communications: retained for 2 years for quality management and dispute resolution purposes;
• Marketing data (with consent): kept until you withdraw your consent or request erasure.

Once retention periods have expired, data is securely deleted or anonymized, making it impossible to re-identify the individual.

7 Data Security

The security of your data is an operational priority at 4pgvip, not just a legal requirement. The main technical and organizational measures in place include:

• 256-bit SSL Encryption across all communications between your device and 4pgvip's servers — the same standard adopted by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil;
• Data encryption at rest for sensitive information stored in the platform's databases;
• Two-factor authentication (2FA) available for all accounts and strongly recommended for every user;
• Real-time monitoring of access events and transactions to identify suspicious patterns and unauthorized access attempts;
• Financial data segregation: payment data is processed by certified gateways and is never stored in full on 4pgvip's systems;
• Internal access controls: 4pgvip staff members only have access to the data required for their specific roles, following the principle of least privilege;
• Periodic security testing: the platform's infrastructure undergoes regular security audits and penetration testing.

In the event of a security incident that may affect your data, the 4pgvip will notify affected users and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD.

8 Cookies and Tracking Technologies

The 4pgvip uses cookies and similar technologies to enhance your platform experience, secure your sessions, and analyze browsing behavior in aggregate. The types of cookies used are:

• Essential cookies: required for the basic functioning of the platform — keeping your session active, remembering your login, and processing transactions. They cannot be disabled without affecting how the site works;
• Security cookies: used to detect suspicious activity, protect against CSRF (Cross-Site Request Forgery), and verify session authenticity;
• Analytics cookies: collect aggregated and anonymized information about how users browse the platform in order to improve the experience. You may opt out;
• Preference cookies: store settings such as language and display preferences to personalize your experience on future visits.

You can manage your cookie preferences through your browser settings or via the 4pgvip preference panel. Disabling essential cookies may affect the normal functioning of the platform.

9 Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as a data subject, a set of rights that the 4pgvip is committed to honoring in full. You may exercise any of these rights at any time, free of charge, via support chat or by emailing suporte@4pgvip.net with the subject line "Privacy – LGPD":

• Access: find out what personal data 4pgvip holds about you and how it is processed;
• Correction: request the update or correction of inaccurate, incomplete, or outdated data;
• Anonymization, blocking, or deletion: request that data which is unnecessary or processed in violation of the LGPD be anonymized, blocked, or deleted;
• Portability: request the transfer of your data to another service provider, where technically feasible and within regulatory limits;
• Information about sharing: know which entities 4pgvip has shared your data with;
• Consent withdrawal: withdraw consent given for consent-based purposes (such as marketing) at any time and without penalty;
• Objection: to object to data processing carried out on the basis of legitimate interest when there are grounds to do so;
• Automated decision review: request a review of decisions made solely on the basis of automated processing that affect your interests.

4pgvip will respond to rights exercise requests within 15 calendar days, as required by the LGPD. In cases requiring more detailed review, we will notify you of the need for additional time.

10 Children and Minors

The services of the 4pgvip are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from minors. Registration requires age confirmation, which may be verified through documentation during the KYC process.

If 4pgvip identifies that data from a user under 18 has been collected, the account will be immediately closed and the data will be deleted. If you suspect a minor has created an account on the platform, contact support immediately.

11 Marketing & Communications

The 4pgvip may send marketing communications by email, SMS, or push notification about promotions, bonuses, platform news, and sporting events — such as Brasileirão matchdays, Superliga volleyball finals, or major UFC bouts — only if you have given explicit consent to receive this type of communication during registration or at a later stage.

You may unsubscribe from marketing communications at any time through your account dashboard under "Notification Preferences" or by clicking the unsubscribe link in any marketing email. Opting out of marketing does not affect essential transactional communications related to your account, such as deposit and withdrawal confirmations and security alerts.

12 Changes to this Policy

The 4pgvip may update this Privacy Policy periodically to reflect changes in data processing practices, new regulatory requirements, or improvements to our privacy processes. The date of the last update is always shown at the top of this page.

When relevant changes occur, active account holders will be notified by email at least 7 days before the new terms take effect. For changes that require new consent, 4pgvip will request your explicit approval before continuing to process your data.

13 How to Contact the 4pgvip DPO

The Data Protection Officer (DPO) of 4pgvip is the official point of contact for privacy and data protection matters. To exercise your rights, report a privacy concern, or get more information about how your data is handled, please get in touch:

• Email: suporte@4pgvip.net (subject: "Privacy – LGPD")
• Live chat: available 24 hours a day through the platform dashboard
• Response time: within 15 calendar days, as per the LGPD

If you feel that your rights as a data subject have not been adequately addressed by 4pgvip, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for overseeing LGPD compliance in Brazil.