Privacy Policy pk44 — Data Protection and LGPD

The pk44, operated by the entity responsible for the pk44.life platform, is the controller of the personal data collected under this Privacy Policy. The controller is the entity that determines the purposes and means by which personal data is processed, pursuant to art. 5, item VI, of Law 13.709/2018 (LGPD).

To exercise your rights as a data subject or for questions related to the handling of your personal information, please contact us at contato@pk44.life. The Data Protection Officer (DPO) of the pk44 is responsible for responding to requests within up to 15 calendar days, as required by the LGPD.

The pk44 collects different categories of personal data depending on the stage of your interaction with the platform. The table below describes the main data collected, its source, and its general purpose:

The pk44 does not collect sensitive personal data (such as racial origin, health information, biometrics, or sexual orientation) except where strictly required by specific regulation and with your explicit consent. No data is collected beyond what is necessary for the purposes described in this Policy.

The personal data collected by the pk44 are used exclusively for the following purposes:

The pk44 does not use your personal data for purposes unrelated to the services you signed up for when creating your account. No behavioral profiles are sold to advertisers, and no data is shared with third-party advertising platforms.

All personal data processing carried out by the pk44 is grounded in at least one of the legal bases set out in art. 7 of the LGPD. The main bases applied are:

Where processing is based on consent, you will be clearly informed before providing it and may withdraw it at any time without affecting your access to the essential services of the pk44.

The pk44 does not sell or share your personal data with third parties for commercial purposes. Data sharing only occurs in the situations listed below, each with a defined purpose and proportionate scope:

• Technology and infrastructure providers: Companies that operate servers, payment systems (including Pix and card processors), game providers (suppliers of crash games, slots, and live casino), and fraud detection tools. These partners process data as operators, under contracts that require them to follow the same data protection standards as pk44.
• Financial institutions: Brazilian banks and fintechs involved in processing deposits and withdrawals (Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago, and others) receive only the data strictly necessary for each transaction.
• Regulatory and judicial authorities: When required by law, court order, or the demand of a competent authority — such as the Federal Revenue Service, Central Bank, COAF, Ministry of Finance, and Brazilian public security agencies.
• Compliance audits: Independent auditors who verify the platform's compliance with betting regulations and the LGPD are granted restricted access to only the data required for the audit, under a confidentiality agreement.

Any third party that receives personal data from users of the pk44 is subject to contractual confidentiality and security obligations consistent with LGPD requirements. The pk44 is jointly liable for any violations caused by contracted operators.

The pk44 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or destruction. The main measures in place include:

• SSL/TLS Encryption: All communications between your device and the platform are encrypted, including live betting traffic, Pix deposits, and balance inquiries.
• Encryption of data at rest: Sensitive data stored on pk44 servers — such as CPF, banking details, and KYC documents — is encrypted at rest using modern standards.
• Access controls: Internal access to user data is restricted by role and recorded in audit logs. Only staff with a legitimate need may access specific personal data.
• Security monitoring: Automated intrusion detection and anomaly monitoring systems continuously scan the platform to identify unauthorized access attempts.
• Authentication: Access to the logged-in area of your account is protected by a password. pk44 offers two-factor authentication (2FA) and strongly recommends enabling it for added security.
• Security testing: The platform undergoes periodic security assessments, including penetration testing carried out by specialized teams.

In the event of a security incident that may affect your personal data, the pk44 will notify the ANPD and affected data subjects within the timeframe established by the LGPD, describing the nature of the incident, the data involved, and the measures taken to mitigate it.

The pk44 retains personal data for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum retention periods required by law. The main retention criteria are:

Once the applicable retention period ends, data is securely deleted or anonymized so that the individual can no longer be identified. Anonymized data may be retained for statistical purposes and service improvement.

The pk44 uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are:

By accessing the pk44 for the first time, you will see a cookie notice and can manage your preferences for non-essential cookies. Essential cookies cannot be disabled as they are required for the service to function. For performance, functionality, and analytics cookies, consent can be withdrawn in your account's privacy settings.

The pk44 does not use tracking pixels from external social networks or integrate third-party behavioral advertising tools into the platform.

The LGPD grants you, as the holder of the personal data processed by the pk44, the following rights, which can be exercised at any time by emailing contato@pk44.life:

The response period for rights requests is up to 15 calendar days from receipt. In cases requiring more complex identity verification or legal analysis, the deadline may be extended with a justified explanation.

The pk44 is a platform intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors.

The identity verification (KYC) process is designed to identify and prevent minors from accessing the platform. Should the pk44 determines that data from a user under 18 has been collected, all information will be immediately deleted, the account will be closed, and any deposited amount will be refunded — without bonuses — to the original payment source.

If you suspect that a minor has created an account on pk44, notify us immediately by emailing contato@pk44.life. The pk44 takes all necessary steps to ensure the platform is used by adults only.

Some of the technology providers that pk44 uses — such as cloud computing services, game providers, and security analytics tools — may be located outside Brazil. When this occurs, the pk44 ensures that international data transfers comply with the requirements of art. 33 of the LGPD:

• Transfers to countries recognized by the ANPD as providing an adequate level of data protection;
• Use of standard contractual clauses approved by the ANPD with international operators;
• Assessment that the data recipient provides guarantees equivalent to those required by the LGPD for the protection of Brazilian data subjects.

The pk44 maintains an up-to-date record of all international data transfers and the safeguard instruments in place, available for review by the ANPD upon request.

The pk44 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. Any material change will be communicated to users at least 14 days in advance by email and through a prominent notice on the account dashboard.

When changes are required by law or by an ANPD ruling, they may take effect immediately, with notification provided as soon as reasonably possible.

The current version of this Policy will always be available on this page, with the date of the last update shown at the top. We recommend checking this page periodically to stay informed about how the pk44 processes your personal data.

To exercise your rights as a data subject, clarify questions about this Policy, or report any privacy concern on the pk44, contact our Data Protection Officer (DPO):

If the response from pk44 is not satisfactory, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.