Privacy Policy of 666wim

The 666wim is the Sports Betting and online casino platform operated under the domain https://666wim.asia, developed with an exclusive focus on the Brazilian market. For the purposes of the General Data Protection Law (LGPD — Lei nº 13.709/2018), the 666wim acts as the Controller of personal data collected during use of the Platform.

As the Controller, 666wim is responsible for decisions regarding how personal data is collected, stored, used, and shared. All data processing operations are carried out based on the legitimate purposes described in this Policy and the legal grounds set forth by the LGPD.

For any questions regarding privacy and the handling of personal data, users may contact the 666wim directly through 24-hour support or by emailing suporte@666wim.asia. A Data Protection Officer (DPO) is available to handle LGPD-specific matters as described in Section 14 of this Policy.

The 666wim collects personal data in the following situations: during account registration, during regular use of the Platform, and during customer support interactions. We collect only the data strictly necessary for the purposes described in this Policy.

Data provided directly by the user at registration:

• Full name as it appears on your identity document;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile number with Brazilian area code;
• Full residential address including postal code (CEP).

Data collected automatically during use of the Platform:

• IP address and approximate geographic location;
• Browser type and version, and operating system;
• Device type (mobile, tablet, computer);
• Pages visited and time spent browsing the Platform;
• Betting and gaming history;
• Financial transaction data (deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED).

Data collected during identity verification (KYC):

• Photo ID document image (RG, CNH, or Passport);
• Proof of address;
• Facial verification selfie, when requested;
• Proof of ownership of the payment method, where applicable.

The 666wim uses collected personal data exclusively for the purposes described below. No data is used for purposes incompatible with those disclosed at the time of collection.

Every data processing operation carried out by the 666wim has a legal basis under the LGPD. We do not process any personal data without at least one of the justifications listed below:

• Contract performance (art. 7, V of the LGPD): Most data processing is necessary to fulfill the contract entered into with the user at registration — operating the account, processing bets, settling winnings, and handling withdrawals via Pix and other Brazilian payment methods;
• Legal obligation (art. 7, II of the LGPD): Identity verification (KYC), anti-money laundering compliance, and retention of financial transaction records are obligations imposed by applicable Brazilian law, regardless of user consent;
• Consent (art. 7, I of the LGPD): Marketing communications, promotional emails, and bonus notifications are sent only with the user's explicit consent, which may be withdrawn at any time;
• Legitimate interest (art. 7, IX of the LGPD): Usage pattern analysis for fraud prevention, platform personalization, and continuous service improvement — always respecting the fundamental rights of the data subject.

When processing is based on consent, the user has the right to withdraw that consent at any time through the support channel of 666wim, without affecting the validity of any processing carried out prior to that point.

The 666wim does not sell, rent, exchange, or transfer users' personal data to third parties for commercial or marketing purposes. Data sharing occurs exclusively in the following cases, always grounded in one of the legal bases under the LGPD:

• Brazilian payment providers: To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED (Nubank, Itaú, Bradesco, Banco do Brasil), 666wim shares with payment intermediaries only the minimum data required to complete the transaction — full name, CPF, and Pix key or bank details;
• Certified game providers: Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and other providers in the 666wim catalog receive only an anonymous session identifier to record game results. No personally identifiable data is shared with game providers;
• Identity verification services (KYC): Specialized platforms for identity verification and fraud prevention, with which 666wim maintains data processing agreements that include LGPD-compatible protection clauses;
• Competent authorities: 666wim may share data with government, judicial, or regulatory authorities when required by law, court order, or determination by the ANPD.

The 666wim uses cookies and similar technologies to ensure the Platform operates correctly, improve user experience, and analyze usage patterns. See the types of cookies used:

• Essential cookies: Required for the Platform's basic operation — keeping your session active while you browse, remembering language preferences, and ensuring secure access. These cannot be disabled without affecting the site's functionality;
• Performance cookies: These collect anonymous information about how users interact with the Platform — which pages are visited most, where errors occur, and average load times. Used to improve 666wim's performance, especially on high-traffic Brasileirão match nights;
• Functionality cookies: They allow the Platform experience to be personalized — remembering betting preferences, favorite sports, and account settings;
• Marketing cookies (with consent only): Used to display relevant content about 666wim promotions. They are activated only with the user's explicit consent and can be disabled in the account settings.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may affect the Platform's performance, especially for live betting and cash out features.

The 666wim retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and applicable legal obligations. General retention periods are:

• Active account data: Retained for as long as the account remains active on the Platform and the user continues to use 666wim's services;
• Financial transaction data: Deposit and withdrawal records (Pix, boleto, card, TED) are retained for a minimum of 5 years, as required by Brazilian financial and tax regulations;
• Identity verification data (KYC): Verified documents are retained for a minimum of 5 years after account closure, in compliance with anti-money laundering regulations;
• Betting records: Complete betting history is retained for a minimum of 5 years for dispute resolution, auditing, and regulatory compliance purposes;
• Support data: Support team contact records are kept for 2 years after the ticket is closed.

After the voluntary closure of an account on the 666wim, personal data not subject to legal retention obligations is anonymized or deleted within 90 days. Data subject to legal retention periods remains securely stored and isolated until the applicable deadline is met.

Protecting users' personal data is an operational priority of the 666wim. The Platform implements appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or improper destruction.

The main security measures implemented by the 666wim include:

• SSL/TLS 256-bit Encryption: All communications between the user's device (mobile, tablet, or computer) and 666wim's servers are encrypted using TLS 1.3 — the same standard used by Brazilian banks such as Nubank, Itaú, and Bradesco;
• Two-factor authentication (2FA): Available to all users who want to strengthen their account access security;
• Continuous security monitoring: Automated intrusion detection systems and behavioral analysis tools operate around the clock to identify suspicious access and fraud attempts;
• Internal access controls: Only 666wim staff with a legitimate operational need have access to users' personal data, and all such access is logged and audited;
• Encrypted backups: Data is stored with redundant backup on servers using encryption at rest (AES-256).

To operate the game catalog of the 666wim, which includes titles from international providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe, it may be necessary for session data to be processed on servers located outside Brazil. Important clarifications:

• Identifiable personal data (full name, CPF, address) are not transferred to servers of international game providers;
• What is transmitted to external providers is only an anonymous session identifier, with no direct link to the user's identity;
• When personal data needs to be transferred abroad, 666wim ensures that the destination country provides an adequate level of data protection, or that standard contractual clauses compatible with the LGPD are in place;
• Users' financial data — transactions via Pix, boleto, card, PicPay, Mercado Pago, and TED — is processed exclusively by financial intermediaries operating in Brazil.

The Platform of 666wim is strictly prohibited for users under 18 years of age. We do not knowingly collect or process personal data from minors. Age verification is carried out at registration through the date of birth provided and confirmed during the identity verification (KYC) process.

Should the 666wim becomes aware that personal data of a minor has been inadvertently collected, the corresponding account will be immediately suspended, the data will be deleted, and any existing balance will be held pending review in accordance with applicable legal procedures.

To exercise any of the rights granted by the LGPD regarding your personal data stored by the 666wim, you can reach us through the following channels:

• Live chat: Available directly on the Platform, 24 hours a day, 7 days a week, in Brazilian Portuguese;
• WhatsApp: Live human support in Portuguese, available Monday through Sunday, 24 hours a day;
• Email: suporte@666wim.asia — include "LGPD Request" in the subject line, followed by the type of request.

To confirm your identity before processing your request, the 666wim may ask you to provide your account access credentials or a form of ID. This procedure protects you against fraudulent requests made in your name by third parties.

The response time for LGPD-related requests is up to 15 business days from the receipt of the complete request, as established by law. In cases of high complexity, the deadline may be extended by an equal period, with justification provided to the user.

The 666wim may send account-related communications, such as deposit and withdrawal confirmations via Pix, security alerts, bet results, and important operational notifications. These communications are considered essential to the contract and do not require separate consent — you cannot opt out of them because they are necessary for the service to function.

The following communications are sent only with your explicit consent:

• Promotional emails with 666wim offers, bonuses, and seasonal promotions;
• Push notifications with improved odds for Brasileirão, Copa do Brasil, and other events;
• Messages about the VIP Program and new Platform features;
• Promotional SMS or WhatsApp communications.

To unsubscribe from any marketing communications, go to your account settings on the Platform, use the unsubscribe link in any email, or contact the support team at 666wim. Cancellation is immediate for digital communications and may take up to 5 business days to be reflected in scheduled mailing lists.

The 666wim may update this Privacy Policy periodically to reflect changes in the services offered, regulatory adjustments required by the ANPD or Brazilian legislation, or improvements to the Platform's data protection practices.

All material changes will be communicated at least 7 days in advance through:

• Email sent to the address registered on the user's account;
• A prominent notice on the Platform upon your next login;
• Updating the "Last Updated" date at the top of this page.

Continued use of the Platform after the effective date of a new version of this Policy constitutes automatic acceptance of the changes. If you do not agree with the changes, you may close your account before the effective date without any penalty, provided any available real balance is withdrawn beforehand.

The 666wim has appointed a Data Protection Officer (DPO) responsible for handling communications from data subjects and the National Data Protection Authority (ANPD), as required by art. 41 of the LGPD.

To contact the DPO of the 666wim on matters specifically related to personal data protection, privacy, or the exercise of rights under the LGPD:

• Email: suporte@666wim.asia (subject: "DPO — Data Protection");
• Live chat: Available 24 hours on the Platform — let us know you'd like to speak about data protection or the LGPD;
• WhatsApp: Support in Brazilian Portuguese, available 24 hours a day, Monday through Sunday.

If you believe your rights have not been properly addressed by the 666wim, you may file a complaint directly with the National Data Protection Authority (ANPD) through the official channels of the Brazilian regulatory authority.