LEGAL

Sensitive Data and Biometrics Processing Policy.

Wibx · Last updated: May 18, 2026

This policy complements Wibx’s Privacy Policy and describes how sensitive and biometric data may be processed in identification, authentication and platform-security procedures.

WIBX · LGPD/KYC

01

Purpose

This Sensitive Data and Biometrics Processing Policy complements Wibx’s Privacy Policy and describes how data related to identification, authentication and platform-security procedures is processed.

02

Data processed

During authentication and registration validation processes, Wibx may process data required to verify identity, protect accounts and maintain operational security.

  • Facial image.
  • Authentication video.
  • Voice.
  • Official documents.
  • Document photograph.
  • CPF or equivalent identification number.
  • Registration information.
  • Data required for identity validation.

03

Purpose of processing

Data may be used to ensure that the person is who they claim to be, reduce operational risk and preserve platform integrity.

  • Identity validation.
  • Fraud prevention.
  • User account protection.
  • Operational security.
  • Compliance with legal obligations.
  • Prevention of money laundering.
  • Audit and traceability.
  • Protection of the platform and third parties.

04

Legal basis

Processing may be grounded in the legal bases provided by applicable law, according to the concrete purpose of each operation.

  • User consent.
  • Compliance with legal obligation.
  • Regular exercise of rights.
  • Fraud prevention.
  • Legitimate interest.
  • Credit protection.
  • Security of the data subject and the platform.

05

Data sharing

Wibx may share information when necessary for operation, security, legal compliance or cooperation with competent authorities.

  • Technology providers.
  • Compliance partners.
  • Anti-fraud service providers.
  • Competent authorities.
  • Sharing required by legal obligation or valid determination.
  • Whenever possible, sharing will observe necessity, proportionality and data minimization.

06

Storage and security

Collected data may be stored in secure environments, using appropriate technical and administrative measures to reduce risks.

  • Unauthorized access.
  • Alteration.
  • Destruction.
  • Leakage.
  • Unauthorized use.

07

Data retention

Data may be retained for the period necessary to meet legal, regulatory, operational and security purposes.

  • Compliance with legal obligations.
  • Audits.
  • Fraud prevention.
  • Regular exercise of rights.
  • Platform protection.
  • Regulatory cooperation.

08

Data subject rights

Under applicable law, the data subject may request measures related to the processing of their data. Requests may be made through Wibx’s official channels.

  • Confirmation of processing.
  • Access to data.
  • Correction of information.
  • Anonymization when applicable.
  • Deletion of data when legally possible.
  • Information about sharing.

09

Updates

This policy may be updated periodically to reflect regulatory changes, technological evolution and operational improvements.

  • Regulatory changes.
  • Technological evolution.
  • Operational improvements.
  • Enhancement of security mechanisms.

10

Integration with other policies

This policy must be interpreted together with Wibx’s other legal and operational documents.

  • Privacy Policy.
  • Terms of Use.
  • Cookies Policy.
  • Wibx KYC, AML/CFT and Compliance Policy.

If you have questions, contact Wibx through its official channels.