999e · Privacy & LGPD

999e Privacy Policy – Data Protection in Brazil

999e takes the protection of your data seriously. This policy explains, in plain language, what we collect, how we use it, and how you can exercise your rights under the LGPD — Brazil's General Data Protection Law.

Last updated: January 2026
0
SSL Encryption
0
Sections of This Policy
0
LGPD Rights
0
Response to the Data Subject
0
Data Sale
0
In Brazilian Portuguese

This Privacy Policy applies to all 999e users — those who browse the site, register an account, make Pix deposits, play slots, bet on the Brasileirão, or access the live casino. By using any 999e service, you confirm that you have read and understood how we handle your personal data. Have questions? Portuguese-language support is available 24 hours a day via chat.

1 Who We Are and Who Controls Your Data

999e is a digital entertainment platform serving the Brazilian market, accessible at 999e.click. For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), 999e acts as controller of the personal data collected from its users.

As the controller, 999e is responsible for making decisions about how data is collected, the purposes for which it is used, and how long it is retained. Processing is carried out in compliance with the LGPD and with the Terms and Conditions of the platform and with all other applicable regulations in Brazil.

To get in touch regarding privacy and data protection matters, use the dedicated channel described in the section 11 of this policy.


2 What Personal Data We Collect

2.1 Data You Provide Directly

During registration and use of the platform, 999e collects the following data that you provide voluntarily:

  • Full name, CPF, and date of birth
  • Email address and mobile phone number
  • Residential address (for identity verification)
  • Identity documents (RG, CNH, or passport), when requested for verification
  • Pix key registered for withdrawals
  • Payment information used for deposits (boleto bancário, credit/debit card, PicPay, Mercado Pago)

2.2 Automatically Collected Data

When you access the platform, we automatically collect technical data required for the operation and security of the service:

  • IP address and approximate geographic location
  • Device type, operating system, and browser
  • Session identifiers and authentication cookies
  • Betting history, games accessed, deposits made, and withdrawals processed
  • Access logs with date, time, and session duration
  • Platform behavior data (clicks, pages visited, time spent in each section)

2.3 Financial Transaction Data

To process deposits and withdrawals in BRL, 999e records the data required for each transaction: amount, payment method used (Pix, boleto, card, PicPay, Mercado Pago), date, time, and transaction status. Full credit card details are not stored directly by 999e — they are processed by PCI-DSS certified payment gateways.

Category Examples Primary Purpose
IdentificationName, CPF, date of birthAccount verification and legal compliance
ContactE-mail, phone numberCommunication and account recovery
FinancePix key, historyPayment processing in BRL
TechnicalIP, device, logsSecurity and fraud prevention
BehavioralGame hist., bonusesResponsible gambling and personalization
DocumentsNational ID, Driver's License (if requested)KYC and identity verification

3 How We Use Your Personal Data

999e uses your personal data exclusively for the purposes listed below. We do not use data for any purpose that has not been communicated to you in this policy or in the Terms and Conditions:

3.1 Service Provision

Your data is used to create and maintain your account, process Pix deposits and other Brazilian payment methods, handle BRL withdrawals, record bets on the Brasileirão, slots, and the live casino, and provide access to your full transaction and gaming history.

3.2 Identity Verification and Compliance

Your CPF, date of birth, and requested documents are used to confirm that you are over 18, that you reside in Brazil, and to meet the legal requirements for anti-money laundering (AML) and know your customer (KYC) obligations under current Brazilian law.

3.3 Security and Fraud Prevention

Technical data (IP address, device, access logs) is used to identify suspicious access, detect fraud attempts, prevent duplicate account creation, and protect the financial integrity of the platform and its users.

3.4 Responsible Gambling

Betting history and gameplay behavior are monitored by 999e to identify patterns that may indicate problematic use. When such patterns are detected, the platform may reach out to offer self-exclusion tools, deposit limits, and session controls. Learn more at Responsible Gambling.

3.5 Communication and Support

Your email and phone number are used to send transaction confirmations, important account notifications, security alerts, and — with your consent — information about 999e promotions, bonuses, and news. You can unsubscribe from promotional communications at any time through your account dashboard.

3.6 Platform Improvement

Aggregated and anonymized data on user behavior is used to improve the platform experience, optimize the mobile interface, identify the most popular games, and enhance technical performance. This data does not identify users individually.


4 Legal Basis for Processing (LGPD)

The LGPD requires that all processing of personal data have a defined legal basis. 999e processes your data under the following bases, in accordance with Art. 7 of Law No. 13,709/2018:

  • Contract performance (art. 7, V): processing is necessary to deliver the contracted services when you accept the Terms and Conditions and create your account with 999e.
  • Legal obligation (art. 7, II): identity verification, financial transaction monitoring, and compliance with AML regulations are required under Brazilian law.
  • Legitimate interest (art. 7, IX): platform security, fraud prevention, and service improvement are carried out on the basis of 999e's legitimate interest, provided that interest does not override the rights and freedoms of data subjects.
  • Consent (art. 7, I): promotional communications, non-essential cookies, and the processing of data for offer personalization are carried out based on your express consent, which may be withdrawn at any time.

999e never uses your data for purposes other than those described in this policy without notifying you in advance and, where applicable, obtaining your consent. Any material change to how we handle your data will be communicated by email with reasonable notice.


5 Data Sharing with Third Parties

999e does not sell, rent, or trade your personal data to third parties. Sharing occurs only in the specific situations described below, always with the necessary security and confidentiality guarantees:

5.1 Payment Processors

To process deposits and withdrawals in BRL, we share only the strictly necessary data with the payment gateways responsible for each method: Pix operators, partner banks (such as Nubank, Itaú, Bradesco, and Banco do Brasil), credit/debit card processors, and platforms like PicPay and Mercado Pago. These partners are contractually required to use the data solely for payment processing purposes.

5.2 Game Providers

Providers of slots, crash games, Live Casino, and other games available on 999e may receive technical session identifiers to ensure games function correctly. These providers do not receive personally identifiable data such as CPF, email address, or Pix key.

5.3 Legal Obligations

When required by law, court order, or a competent regulatory authority in Brazil, 999e may be compelled to share data with the relevant authorities. In such cases, we will disclose only the minimum information necessary to comply with the legal requirement.

5.4 Technology Providers

Cloud infrastructure, cybersecurity, and technical analytics providers may have access to anonymized or pseudonymized data to ensure platform availability and security. These providers operate under confidentiality agreements and in compliance with data protection standards.

If any data needs to be transferred outside Brazil, 999e ensures that the destination offers a level of protection equivalent to that required by the LGPD, either through standard contractual clauses or by being located in a country with adequacy recognition from the ANPD.


6 How We Protect Your Data

The security of 999e players' data is both a technical and operational priority. The measures in place include:

  • 256-bit SSL Encryption across all communications between your device and 999e's servers — including Pix deposits, withdrawals, and access to your account dashboard.
  • Secure storage with encryption at rest for sensitive data, including CPF and financial information.
  • Two-factor authentication (2FA) available for additional account access protection.
  • Continuous monitoring of access and transactions for real-time suspicious activity detection.
  • Regular security testing and external vulnerability audits conducted by specialized firms.
  • Internal access controls restricted to the minimum necessary — only 999e staff who need the data to perform their duties have access to it.
  • Credit card data processed by PCI-DSS certified gateways, with no full card details stored on 999e's servers.

In the event of a security incident that may affect your personal data, 999e will notify you and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.


7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you access 999e. They allow the platform to recognize your browser, keep you logged in, remember your preferences, and collect statistical usage data.

7.2 Types of Cookies Used

  • Essential cookies: required for core platform functionality — authentication, gaming sessions, and BRL transaction processing. These cannot be disabled.
  • Performance cookies: collect aggregated data on how users navigate 999e to identify errors and improve performance on both mobile and desktop.
  • Functionality cookies: remember your language, currency (BRL), and display preferences.
  • Analytics cookies: used with your consent to understand browsing behavior and personalize your experience based on the games you access most.

7.3 Cookie Management

You can manage your cookie preferences through the banner shown on your first visit to the platform or directly in your browser settings. Disabling non-essential cookies may limit some 999e features, but will not prevent you from using the core services.


8 How Long We Retain Your Data

999e retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable legal retention periods:

  • Active account data: retained for as long as your account remains active on 999e.
  • Financial transaction data: retained for at least 5 years after the transaction is completed, in accordance with legal obligations for financial compliance and anti-money laundering.
  • Access and security logs: stored for up to 2 years for audit purposes and incident investigation.
  • Verification documents (KYC): retained for the period required by Brazilian law or for up to 5 years after account closure.
  • Betting and gaming history: available in the account dashboard while the account is active; retained for up to 3 years after account closure for audit purposes.
  • Marketing data (with consent): retained until consent is withdrawn by the data subject.

After account closure, data is anonymized or deleted, except where retention is required by legal obligation, court order, or justified legitimate interest.


9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that can be exercised at any time with 999e. Below, we explain each one in practical terms:

Your 8 Rights Guaranteed by the LGPD
Access: request a complete copy of all personal data that 999e holds about you.
Correction: update outdated or inaccurate details directly in the account dashboard or through support.
Erasure: request the deletion of data processed on the basis of your consent, where there is no legal obligation to retain it.
Information: find out which third parties your data was shared with and the legal basis for each processing activity.
Opposition: object to processing carried out on the basis of legitimate interest when it is detrimental to your rights and freedoms.
Blocking/Anonymization: request the temporary blocking or anonymization of unnecessary or excessive data.
Portability: receive your data in a structured, machine-readable format for transfer to another service.
Consent withdrawal: withdraw consent for processing activities based on that legal ground, such as receiving marketing communications.

To exercise any of these rights, contact 999e via the Portuguese-language support chat or by email privacidade@999e.click. We will respond within 48 business hours. For requests requiring additional identity verification, the deadline may be extended to up to 15 days, as permitted under the LGPD.

If you believe 999e is not handling your data in accordance with the LGPD, you have the right to file a complaint with the National Data Protection Authority (ANPD).


10 Minors

Use of 999e is strictly prohibited for individuals under 18 years of age. The platform does not intentionally collect personal data from minors. Registration requires a CPF and date of birth, which are verified to confirm that the user is of legal age before full access to the services is granted.

If 999e identifies that data from a minor was inadvertently collected, the data will be deleted immediately, the account will be closed, and any balances will be returned to the original payment method used, after ownership verification.

Parents or guardians who suspect that a minor has registered an account on 999e should contact support immediately via live chat or by emailing privacidade@999e.click for investigation and immediate action.

If you are a parent or guardian and have found evidence that a minor is using 999e, please contact us via the support chat available 24 hours a day. Our team will act as a priority to close the account and ensure that no data belonging to the minor is retained.


11 Contact, DPO, and Policy Updates

11.1 Privacy Channel

To exercise your rights as a data subject, ask questions about this policy, or report any concern related to how 999e handles your personal data, please use the channels below:

  • Portuguese-language support chat: available 24 hours via the chat icon on the platform.
  • Privacy e-mail: privacidade@999e.click
  • General email: contato@999e.click

11.2 Data Protection Officer (DPO)

In compliance with art. 41 of the LGPD, 999e maintains a Data Protection Officer (DPO) responsible for serving as the communication channel between the company, data subjects, and the ANPD. Requests addressed to the DPO can be sent to the e-mail privacidade@999e.click with the subject line "DPO – Data Subject Request".

11.3 Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes to 999e's services, legal developments, or improvements to data protection practices. When this occurs, the last updated date will be revised and, for significant changes, you will be notified by e-mail with reasonable advance notice.

Continued use of the platform following the publication of any changes constitutes acceptance of the updated version of this policy. Previous versions of this policy may be requested via the privacy email address.

This Privacy Policy was last updated on January 2026. In the event of any conflict between this version and any prior version, this version shall prevail.

How 999e Protects Every Brazilian Player

Six concrete commitments 999e makes to every user regarding the responsible handling of their personal data.

LGPD in Practice

999e processes your data in full compliance with Law No. 13,709/2018. Every processing activity has a defined legal basis, a clear purpose, and a specific retention period — with no red tape when it comes to exercising your rights.

256-bit SSL Encryption

All communication between your phone or computer and 999e servers is protected by 256-bit SSL encryption — the same standard used by major Brazilian banks such as Nubank, Itaú, and Bradesco.

Zero Data Selling

999e does not sell, rent, or share your personal data with advertisers or data brokers. Your data exists so you can use the platform — not to generate revenue for third parties.

Pix with No Sensitive Data Storage

Transactions via Pix, boleto, and card are processed through PCI-DSS certified gateways. Full card details are never stored on 999e servers — only the minimum required for processing in BRL.

Your Rights Within 48 Hours

Requests for access, correction, deletion, or data portability are responded to within 48 business hours through 999e's privacy channel. No unnecessary red tape stands between you and the rights guaranteed by the LGPD.

Minimum Necessary Access

Internally, only 999e employees who genuinely need access to specific data are permitted to view it. The principle of access minimization is enforced organization-wide through technical controls.

What You Can Request from 999e at Any Time

The LGPD grants you concrete rights. Here is what you can request — and how 999e responds to each.

View Your Data

Request a copy of all data that 999e holds about you, including your Pix deposit history, bets, and registration details. Response within 48 hours.

Correct Data

Incorrect details such as e-mail, phone number, or address can be updated in the account dashboard or through support. CPF changes require identity verification.

Delete Your Data

Request the deletion of data processed on the basis of consent. Data that is legally required to be retained (such as financial records) will be kept for the statutory period and then deleted.

Portability

Receive your data in a structured format (JSON or CSV) for transfer to another service. Request processed within up to 15 days as required by the LGPD.

Withdraw Consent

You can opt out of marketing communications at any time through your account dashboard or by contacting support. Opting out does not affect your access to services.

Know Who We Share With

Request the full list of third parties your data was shared with and the reason for each. Complete transparency over every sharing activity carried out.

Block or Anonymize

Request the temporary blocking of unnecessary data or its anonymization so it can no longer be linked to you specifically.

Object to Processing

You may object to data processing based on legitimate interest that you believe is harmful. 999e will review your objection and respond with a justification or cease the processing.

Data Protection in Compliance with the LGPD

999e operates in full compliance with the General Data Protection Law (LGPD – Law No. 13.709/2018). All deposits via Pix, boleto, and card are processed with 256-bit SSL encryption. Your data is never sold to third parties. For any request related to your rights as a data subject, contact us at privacidade@999e.click or via the support chat. You can also review our Terms and Conditions for the full set of platform usage rules.

Responsible Gambling at 999e

Privacy and responsible gambling go hand in hand. Your gaming history is monitored to identify risk patterns — with complete confidentiality. 999e provides self-exclusion tools, deposit limits, and session controls in the account dashboard. To learn more, visit Responsible Gambling. Prohibited for users under 18.

+18 Only Responsible Gambling

Play at 999e with Privacy and Security

Free sign-up in 2 minutes, data protected with 256-bit SSL, Pix deposits with full privacy, and a 100% bonus up to R$ 500.00 on your first deposit. Brasileirão, slots, live casino, and much more — all in BRL.

+18 · LGPD Compliant · Data protected with 256-bit SSL · Bonus subject to Terms and Conditions · Betting involves risk of financial loss

Português