🔒 LGPD & Privacy — 2026

5kkk Privacy Policy — How We Take Care of Your Data

On the 5kkk, privacy is not a legal formality — it is a genuine commitment to every player registered in Brazil. Here you will find exactly what data we collect, why we collect it, how we protect it, and what rights you are guaranteed under the LGPD.

LGPD
Law 13,709/2018
SSL 256
Active encryption
0
Data selling
2026
Last updated
LGPD
Full compliance
SSL 256
End-to-end encryption
0
Data sold to third parties
15 days
Request timeframe
DPO
Data Protection Officer

How 5kkk Protects Your Privacy

Six concrete commitments 5kkk makes to every registered player.

256-Bit SSL Encryption Across the Board

All communication between your device and the servers of 5kkk — including login, financial transactions, and personal data — is protected by the same encryption standard used by Brazil's largest digital banks. No one can intercept your data in transit.

Zero Data Sales or Rentals

The 5kkk never sells, rents, or trades players' personal data to third parties for commercial purposes. Your information exists to operate the platform, not to generate secondary revenue. This is a line the 5kkk does not cross — as a matter of policy and ethics.

Full LGPD Compliance

The 5kkk operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). All data collection, storage, and processing workflows have been structured to uphold the rights of data subjects as defined by Brazilian law.

Restricted Access to Your Data

Internally, only 5kkk with a genuine operational need have access to personal data — and only to the information strictly required for their role. Profile-based access controls are regularly audited.

Your Rights, Always Available

Access, correction, deletion, portability, and consent withdrawal — all rights guaranteed by the LGPD are available to the account holder at 5kkk upon direct request to the data protection officer, with a response deadline of up to 15 business days.

Data Retention with Defined Timeframes

The 5kkk does not store data indefinitely. Each category of information has a retention period defined by operational need or legal obligation. Once that period expires, data is securely and irreversibly deleted from our systems.

Last updated: January 2026

About this document: This Privacy Policy describes how the 5kkk collects, uses, stores, and protects its users' personal data, in compliance with the LGPD (Law No. 13,709/2018). By using the platform, you confirm that you have read and understood the terms described herein.

1. Data Controller

The 5kkk is the controller of personal data collected through the platform available at https://5kkk.best and all its subdomains and associated services. The controller is responsible for decisions regarding the processing of players' personal data, in accordance with the definitions set out in the LGPD.

To exercise any right set out in this Policy or to ask questions about how your data is handled, please contact our Data Protection Officer (DPO) at contato@5kkk.best with the subject line "Privacy — LGPD Request".

2. Data We Collect

The 5kkk collects different categories of personal data depending on how you interact with the platform. All categories and their respective examples are listed below:

  • Identification data: full name, CPF, date of birth, phone number, email address, and a photo of a government-issued ID (collected during registration and the KYC process);
  • Address data: full residential address and proof of residence (required during the identity verification process);
  • Financial data: Pix key, credit/debit card details (processed in tokenized form by the payment gateway — the 5kkk does not store the full card number), along with deposit and withdrawal history on the platform;
  • Platform usage data: game history, bets placed, active sessions, game preferences, access times, and interactions with support;
  • Technical data: IP address, browser type and version, operating system, device identifier, approximate geolocation data, and session cookies;
  • Communications: records of conversations with support via live chat, exchanged emails, and the history of submitted requests.

The 5kkk collects only the data strictly necessary for each purpose described in this Policy, in line with the data minimization principle established by the LGPD. Sensitive data — such as racial origin, political opinion, health information, or biometrics — is never collected under any circumstances.

3. How We Use Your Data

The data collected by the 5kkk are used exclusively for the following purposes:

  • Service delivery: account creation and management, processing of deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED, and access to casino games, Sports Betting, and poker;
  • Identity verification (KYC): verification of the data subject's identity to comply with anti-money laundering regulations and to confirm that the user is of legal age (18 years old);
  • Security & fraud prevention: detection of suspicious activity, prevention of unauthorized access, identification of duplicate accounts, and protection of platform integrity;
  • Account-related communications: transaction notifications, security alerts, notices about changes to terms or the privacy policy, and responses to requests submitted by the user;
  • Compliance with legal obligations: maintenance of records required under Brazilian legislation applicable to payment platforms and online gaming;
  • Platform improvement: aggregated and anonymized analysis of usage behavior to improve the user experience, identify bugs, and develop new features;
  • Personalized marketing: sending communications about promotions and news from 5kkk — only for users who have expressly consented to this type of communication, with the option to unsubscribe at any time.

The 5kkk does not use player data to build automated profiles that generate decisions with legal or significant effects without human review.

4. Legal Basis for Processing

Each data processing activity carried out by the 5kkk is grounded in at least one of the legal bases established under the LGPD:

  • Contract performance (Art. 7, V): processing required to deliver the services the user contracted when creating the account — such as handling transactions, making games available, and managing account balance;
  • Legal obligation (Art. 7, II): compliance with anti-money laundering regulations, identity verification, and financial record-keeping requirements under Brazilian law;
  • Legitimate interest (Art. 7, IX): fraud prevention, platform security, technical performance analysis, and protection of the rights of the 5kkk and other users;
  • Consent (Art. 7, I): sending marketing communications and using non-essential cookies — always with a clear option to withdraw consent at any time.

5. Sharing Data with Third Parties

The 5kkk does not sell, rent, exchange, or otherwise commercialize users' personal data with third parties for any purpose. Sharing occurs only in the following specific and necessary situations:

  • Payment providers: payment gateways responsible for processing transactions via Pix, credit/debit card, PicPay, Mercado Pago, and TED bank transfers receive only the minimum data necessary to process each transaction. These providers operate as data processors under contract with the 5kkk and are subject to equivalent confidentiality and security obligations;
  • Game providers: slots, live casino, crash games, and other product providers may receive technical session identifiers to enable game functionality — without access to financial data or full identification details;
  • Technology infrastructure providers: hosting, database, and cloud security services used by 5kkk, always under data processing agreements that include confidentiality clauses;
  • Competent authorities: when required by law, court order, or determination of a competent Brazilian regulatory authority — including the Central Bank of Brazil, the Federal Revenue Service, and other bodies — the 5kkk provides the requested information strictly within the limits of the legal determination;
  • Rights protection: in the event of an internal fraud investigation, legal dispute, or arbitration, data may be shared with lawyers, auditors, or experts to the extent necessary to defend the legitimate interests of the 5kkk or by the user themselves.

In all sharing scenarios, the 5kkk contractually requires that third parties use the data solely for the purpose for which it was shared and adopt security measures consistent with the platform's standards.

6. Cookies and Tracking Technologies

The 5kkk uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The categories of cookies used are:

  • Strictly necessary cookies: essential for the basic operation of the platform — maintaining authenticated sessions, language preferences, and form security. These cannot be disabled without compromising your use of the platform;
  • Performance cookies: collect anonymous information about how users navigate the 5kkk — which pages are most visited, load times, and errors encountered. Used exclusively for technical improvement of the platform, with no individual identification;
  • Preference cookies: store user preferences — such as game settings, interface theme, and notification preferences — so you don't have to reconfigure them every time you log in;
  • Marketing cookies: used only with the user's express consent, to personalize promotional communications from 5kkk. The user may withdraw this consent at any time in the account settings.

You can manage your cookie preferences through the settings panel available in the platform's footer or through your browser settings. Disabling non-essential cookies does not affect your access to games or the platform's core features of the 5kkk.

7. Data Security

The 5kkk adopts a comprehensive set of technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL encryption: all communications between the user's device and the servers of 5kkk are encrypted in transit via TLS 1.3 protocol with a 256-bit SSL certificate;
  • Encrypted storage: sensitive data stored on the servers of the 5kkk — including passwords (stored only as salted hashes) and payment data — are encrypted at rest;
  • Role-based access control: only employees with a verified operational need have access to personal data, always limited to the minimum required for their role, with an audit log recorded for every access;
  • Continuous monitoring: the systems of the 5kkk are monitored around the clock to detect unauthorized access attempts, DDoS attacks, and anomalous behavior;
  • Regular security testing: the platform undergoes regular penetration testing and security audits conducted by independent specialized firms;
  • Incident response plan: in the event of a data breach that may put users at risk, the 5kkk will notify the ANPD (National Data Protection Authority) and affected data subjects within the deadlines established by the LGPD.

Despite all measures in place, no system is completely immune to risk. That is why the 5kkk recommends that users create strong, unique passwords, enable two-factor authentication where available, and never share login credentials with third parties.

8. Data Retention and Deletion

The 5kkk retains personal data for only as long as strictly necessary for the purposes for which it was collected, in accordance with applicable legal retention periods:

  • Active account data: retained for the full duration of the account and for the period required after closure to meet legal obligations;
  • Financial transaction records: retained for a minimum of 5 (five) years after the transaction, in accordance with anti-money laundering regulations and Brazilian financial regulatory requirements;
  • KYC Data (identity documents): retained for a minimum of 5 years after account closure, in accordance with regulatory obligations;
  • Session cookies: expire automatically when the session ends or after the configured period (maximum of 30 days for persistent authentication cookies);
  • Support communications: support records retained for up to 2 years for quality assurance and dispute resolution purposes;
  • Marketing data: retained until consent is withdrawn or deletion is requested by the data subject.

Once retention periods expire, data is securely and permanently deleted from 5kkk, with no possibility of recovery. Data that has been fully anonymized — with no possibility of identifying the data subject — may be retained for statistical purposes without a time limit.

9. Your Rights as a Data Subject

The LGPD grants data subjects a set of rights that the 5kkk fully upholds. You may exercise any of these rights at any time:

  • Confirmation and access: confirm whether the 5kkk processes your data and obtain a copy of the stored information;
  • Correction: request the correction of outdated, incomplete, or inaccurate data;
  • Deletion: request the deletion of data that is unnecessary or processed in violation of the LGPD — subject to retention periods required by law;
  • Portability: receive your data in a structured, readable format for transfer to another service, where technically feasible;
  • Data sharing information: know which third parties the 5kkk shares your data and under what circumstances;
  • Consent withdrawal: withdraw consent given for specific processing activities (such as marketing) at any time, without affecting processing already carried out;
  • Objection: object to processing activities carried out on the basis of legitimate interest of the 5kkk, when you determine that your fundamental rights and freedoms outweigh the processing;
  • Automated decision review: request human review of automated decisions that affect your interests — such as an account block triggered by an anti-fraud system.

To exercise any of these rights, send an email to contato@5kkk.best with the subject line "LGPD Request" and your registered CPF. The response deadline is up to 15 business days from the date the request is received. In some cases, identity verification may be required before the request is fulfilled.

10. Minors

The 5kkk is a platform exclusively for users aged 18 and over. Registration and access to services by minors is strictly prohibited. The 5kkk does not intentionally collect personal data from individuals under 18 years of age.

During the identity verification (KYC) process, date of birth is confirmed against an official document. Accounts identified as belonging to minors are closed immediately, the data is handled in accordance with minimum legal retention periods, and any deposited balance is returned to the legal guardian upon proof of guardianship.

Parents and legal guardians who identify that a minor has accessed the platform should contact us immediately via the support chat or by email at contato@5kkk.best for urgent matters.

11. International Data Transfers

Some of the technology infrastructure providers used by 5kkk — such as cloud hosting services and game providers — may be located outside Brazil. In such cases, the 5kkk implements the safeguards required by the LGPD for international data transfers, including:

  • Execution of specific data protection contractual clauses with overseas vendors;
  • Preference for vendors located in countries or international organizations that offer a level of personal data protection equivalent to that required by the LGPD, as assessed by the ANPD;
  • Periodic verification that international suppliers are meeting their data protection obligations.

Under no circumstances will complete financial data or players' identity documents be transferred to servers outside Brazil without the safeguards described above.

12. Changes to This Policy

The 5kkk may update this Privacy Policy periodically to reflect changes in data processing practices, legislative updates, or improvements to internal processes. Material changes — those that affect data subjects' rights or data sharing practices — will be communicated at least 7 calendar days in advance via the registered email address and through a prominent notice on the platform.

The last updated date shown at the top of this page will always reflect the current version. We recommend reading this Policy periodically to stay informed about how the 5kkk handles your data. Continued use of the platform after changes take effect constitutes acknowledgment and acceptance of those modifications.

13. Data Protection Officer (DPO)

The 5kkk has appointed a Data Protection Officer (DPO), as required by Art. 41 of the LGPD. The DPO is the official communication channel between the 5kkk, data subjects, and the National Data Protection Authority (ANPD).

To contact the DPO of the 5kkk:

  • E-mail: contato@5kkk.best — subject line: "Privacy — LGPD Request"
  • Live chat: available 24/7 within the platform for initial inquiries
  • Response time: up to 15 business days for formal requests

If you believe your rights have been violated after receiving a response from the 5kkk, you may file a complaint with the National Data Protection Authority (ANPD), as provided under the LGPD.

Your Rights Under the LGPD

5kkk respects all data subject rights established under the Lei Geral de Proteção de Dados.

Data Access

Request a complete copy of all personal information that 5kkk stores about you. Response within 15 business days.

Data Correction

Incorrect or outdated information? Request a correction at any time through 5kkk.

Data Deletion

Request the deletion of your personal data when processing is no longer necessary or legally required.

Portability

Receive your data in a structured format for transfer to another service, where technically feasible.

Consent Withdrawal

Withdraw consent for consent-based processing — such as marketing — at any time, at no cost.

Automated Decision Review

Request human review of automated decisions — such as account blocks triggered by anti-fraud systems — that affect your interests.

How to exercise your rights: Send an email to contato@5kkk.best with the subject line "LGPD Request", your registered CPF, and a clear description of the right you wish to exercise. The response deadline is up to 15 business days. Identity verification may be required before the request is processed.

How We Handle Your Privacy Requests

From submission to response — how the process works at 5kkk.

1
You Submit the Request

Send an email to contato@5kkk.best with the subject line "LGPD Request", describing the right you wish to exercise and your registered CPF.

2
Identity Confirmation

The DPO may request identity confirmation to ensure that only the legitimate account holder gains access to their information.

3
Analysis & Processing

The request is reviewed by the 5kkk data protection officer, who verifies the claimed right and the applicable legal deadlines.

4
Response within 15 Business Days

You will receive a formal response by email within 15 business days, confirming the outcome or providing a justification if the request cannot be fulfilled.

Summary: Data, Purposes and Retention Periods

A consolidated overview of how 5kkk handles each category of information.

Data Category Primary Purpose Legal Basis (LGPD) Retention Period
Full name, CPF, date of birth Registration and identity verification Contract performance / Legal obligation 5 years after account closure
Email and phone number Communications and authentication Contract performance Account lifetime + 2 years
Identity document (KYC) Age and identity verification Legal obligation 5 years after account closure
Financial transaction history Payment processing and compliance Legal obligation 5 years minimum
Gaming and betting history Service delivery and responsible gambling analysis Contract performance / Legitimate interest Account lifetime + 2 years
IP address and technical data Security & fraud prevention Legitimate Interest 6 months (access logs)
Essential cookies Platform operation Contract performance Session or up to 30 days
Marketing cookies Personalized communications Consent Until consent is withdrawn
Support records Service quality and dispute resolution Legitimate Interest 2 years

Privacy at 5kkk: What It Means in Practice

A privacy policy is not a document that exists solely to meet a legal requirement and sit untouched in a virtual drawer. At 5kkk, privacy is a daily practice that shapes product decisions, system architecture, and supplier relationships. But understanding what that truly means for people who use the platform goes beyond reading numbered sections. It is about trusting that when you deposit via Pix, play slots, bet on Flamengo, or join a poker tournament, the information generated by those actions is handled responsibly.

When you create an account on 5kkk, the information you provide at registration — name, CPF, email, phone number — serves one primary purpose: creating and securely identifying your account. This data is not shared with marketing partners, is not used to build profiles on advertising platforms, and is not sold to prospecting lists. Your registration exists to operate the account, verify your identity, and confirm you are who you say you are — nothing more.

The identity verification process (KYC) is likely the point at which the most sensitive data is collected: a photo of the identity document and proof of address. These documents are stored in an encrypted environment, with access restricted to members of the compliance team at 5kkk responsible for the verification process. Once KYC is approved, documents are not routinely accessed — they are stored only for the minimum period required by anti-money laundering legislation, which is five years after account closure. After that period, they are permanently deleted.

One area that deserves special attention is financial data. When you make a credit card deposit on 5kkk, full card details (card number, CVV) are processed directly by the partner payment gateway — 5kkk never sees or stores this information. What reaches 5kkk is a token representing the transaction, with no sensitive card data included. For Pix deposits, the Pix key and associated bank details are stored only to the extent necessary to identify and confirm the transaction. This financial data minimization architecture is a deliberate security choice.

Gaming and betting history is a category of data that many users overlook, but one that 5kkk handles with particular care. This history serves three purposes: allowing you to review your own bets and transactions, detecting behavioral patterns that may indicate a need for responsible gambling tools, and meeting any regulatory audit obligations. It is not shared with any third party outside these contexts. If you request account deletion, your game history is erased within the established timeframe — except for financial records subject to a legal retention requirement.

Regarding cookies, the 5kkk takes a clear consent approach. Cookies essential to the platform's operation — such as those that keep you logged in after signing in — do not require additional consent because they are necessary for the service you signed up for. Non-essential marketing and tracking cookies are only activated with your explicit agreement, and you can withdraw that consent at any time in your account settings without affecting your access to games or any other features of the 5kkk.

The LGPD gives you the right to know exactly what 5kkk knows about you — and to request that it be corrected, deleted, or ported if needed. These are not theoretical rights that exist only on paper: the 5kkk has a structured process for handling requests with a defined deadline of up to 15 business days, a direct contact channel with the data protection officer, and a clear identity verification procedure before requests are processed. If you have never needed to use these mechanisms, great. But it is important to know they exist and they work.

Finally, a note on incident notifications. If for any reason the systems of the 5kkk experience a security breach that puts personal data at risk, affected users will be notified directly by email with clear information about what happened, which data was potentially exposed, and what steps the 5kkk is taking to address the situation. The ANPD will also be notified within the legally required timeframes. This transparency during critical situations is part of the privacy commitment that 5kkk takes on — not only when everything goes smoothly, but especially when something does not go as expected.

Privacy FAQ

Common questions from 5kkk players about how their data is handled.

No. The 5kkk does not sell, rent, trade, or otherwise commercialize players' personal data with third parties for any commercial purpose. Your data is shared only with service providers directly involved in operating the platform — such as payment gateways and game providers — under contracts that prohibit any secondary use. Outside these cases, data is disclosed to third parties only when required by law or court order.

Yes, you can request deletion of your data by sending an email to contato@5kkk.best with the subject line "LGPD Request — Data Deletion". The 5kkk will fulfill the request within 15 business days. However, some data must be retained by legal obligation even after a deletion request — such as financial transaction records, which anti-money laundering legislation requires to be kept for at least 5 years. In such cases, data will be retained only for the minimum required period and deleted once it expires.

Your credit card details — full number, expiration date, and CVV — are processed directly by our partner payment gateway, which holds PCI DSS certification (the international security standard for card data). The 5kkk never sees or stores this data on its own servers: what is recorded on the platform is only a token representing the transaction, with no sensitive card data included. This means that even in a hypothetical security incident on the systems of the 5kkk, your full card details would be protected.

The game and betting history may be used by the 5kkk to personalize internal communications — such as suggesting promotions for games you frequently play or tournament alerts for poker if you are a regular player. This is handled internally and does not involve sharing your history with third parties. If you prefer not to receive personalized communications, you can disable marketing emails in your account settings at any time. This will not affect how the platform functions.

After account closure, the 5kkk retains certain data for the minimum period required by law: financial records and KYC documents for 5 years (anti-money laundering obligation), support history for 2 years (dispute resolution), and technical logs for 6 months. Once these periods expire, data is permanently deleted from our systems. Marketing data and non-essential cookies are deleted immediately upon account closure. If you requested early deletion before closing your account, any data not subject to a legal retention obligation will be deleted within 15 business days.

In the event of a security incident resulting in unauthorized access to personal data that poses a risk to data subjects, the 5kkk will notify affected users by registered email within the timeframe established by the LGPD. The notification will include: the nature of the data affected, the measures taken to address the incident, the possible consequences for data subjects, and DPO contact details for any questions. The ANPD will also be notified as required. The 5kkk will not delay notifications for reputational reasons or pending internal investigation — user protection is the priority.

Play on 5kkk with Safety and Peace of Mind

Your data protected by 256-bit SSL encryption, LGPD compliance, and zero data sales to third parties. Free registration in under 2 minutes, deposits from R$ 20.00 via Pix, and 24/7 support in Portuguese.

Play responsibly. 18 and over. Responsible Gambling · Terms and Conditions.

Português