999v Privacy Policy – Your Data Protected

The 999v collects personal data at different points during your interaction with the platform. We collect only what is necessary to deliver a quality service, ensure transaction security, and meet the legal obligations applicable to the online betting and casino sector in Brazil.

Data you provide directly during registration:

Data collected during the identity verification (KYC) process:

Data generated by your use of the platform:

• Sports betting history (Brasileirão, Copa do Brasil, Libertadores, volleyball, MMA/UFC, e-sports, and other available sports);
• Casino game history, slots, online poker, and jackpots;
• Financial transaction history – deposits via Pix, boleto, credit or debit card, PicPay, and Mercado Pago; withdrawals via Pix and TED;
• Access logs: IP address, device type (mobile, tablet, or computer), operating system, browser, and timestamp of each session;
• Communications exchanged with the support team at 999v via chat or email.

The 999v does not collect data in sensitive categories such as racial origin, religious belief, political opinion, or genetic or biometric data — except for the selfie occasionally requested for identity verification, which is treated as personal identification data and not as biometric data for any other purpose.

Each piece of data collected by 999v has a specific and legitimate purpose. The legal bases and purposes applicable to each type of processing are listed below, as required by Article 7 of the LGPD:

Contract performance (service delivery):

• Creating and managing your user account on 999v;
• Processing deposits and withdrawals in BRL via Pix, boleto, card, and other available methods;
• Registration and settlement of sports bets and casino games;
• Updates on the status of your transactions and bets;
• Eligibility checks for active bonuses and promotions.

Compliance with a legal or regulatory obligation:

• Identity verification (KYC) in accordance with regulatory requirements for the betting sector in Brazil;
• Anti-money laundering (AML) compliance in accordance with Lei nº 9.613/1998 and COAF regulations;
• Age verification (18+) as a condition of using the platform;
• Retention of financial transaction records in accordance with applicable legal deadlines.

Legitimate interest of 999v:

• Fraud detection and prevention, creation of multiple accounts, and misuse of the platform;
• Security analysis of suspicious access and protection of the user's account;
• Continuous improvement of products and services based on aggregated, anonymized usage data.

Based on your consent (revocable at any time):

• Sending marketing communications, promotions, and news from the 999v by email or mobile. You may unsubscribe at any time via the cancellation link included in every email or by contacting support directly.

The 999v does not sell, rent, or share your personal data with third parties for commercial purposes. Sharing occurs exclusively in the cases listed below, all based on operational necessity or legal obligation:

Essential operating partners:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED (Nubank, Itaú, Bradesco, Banco do Brasil). Only the minimum data required to process the transaction is shared;
• Game providers: to provide slots, live casino, jackpots, and poker games. Providers receive an anonymous user identifier — not your full name or CPF;
• Identity verification services: to validate documents submitted during the KYC process. These partners operate under strict confidentiality and data processing agreements;
• Technology infrastructure: server and cloud storage providers that host the 999v, all bound by contracts with specific data protection clauses.

Legal obligation:

• Government, tax, or judicial authorities when required by law, court order, or regulatory ruling applicable to the Brazilian betting market;
• COAF (Conselho de Controle de Atividades Financeiras) in situations that constitute suspected money laundering, as required under Brazilian law.

In all sharing scenarios, the 999v requires partners to maintain equivalent data protection standards and to use the information solely for the specific purpose that justified the sharing. There is no data sharing for programmatic advertising, behavioral profiling for third parties, or any other purpose not listed above.

The LGPD (Lei nº 13.709/2018) guarantees you, as the data subject whose personal data is processed by 999v, a set of rights you can exercise at any time. The 999v is committed to responding to all requests within the maximum period of 15 business days, as required by law.

The 999v adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental or unlawful destruction.

Technical measures implemented:

• 256-bit SSL/TLS encryption across all communication between your device (mobile, tablet, or computer) and the servers of 999v;
• Encryption at rest for sensitive data stored in databases, including KYC documents and financial information;
• Two-factor authentication (2FA) available and recommended for your account;
• Continuous monitoring of suspicious access attempts and intrusion efforts, with automatic blocking of malicious IPs;
• Periodic security testing conducted by a specialized team to identify and fix vulnerabilities before they can be exploited.

Organizational measures:

• Access to users' personal data is restricted to employees and service providers who need it to perform their duties — following the principle of least privilege;
• Regular team training on data protection and information security;
• Confidentiality agreements and data protection clauses in all contracts with partners and suppliers.

In the event of a security incident that may affect your personal data, the 999v is committed to notifying you and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD and industry best practices. The notification will include the nature of the incident, the data affected, and the steps taken to mitigate the impact.

A reminder: 999v never asks for your password, full card details, or any sensitive information via email, chat, or any other channel. If you receive a message requesting that kind of data on behalf of 999v, disregard it and let us know immediately by contacting support.

The 999v uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content. Here are the types of cookies we use:

Essential cookies (always active): required for the basic operation of the platform. Without them, functions such as login, game sessions, bet slip, and payment processing will not work. They do not require consent as they are essential to the contracted service.

Examples of data recorded by essential cookies:

• Session identifier to keep you logged in as you navigate between pages;
• Language and display preferences set by you;
• Bet slip state prior to ticket confirmation.

Analytical cookies (with consent): used to understand how users navigate the platform — which sections are visited most, where errors occur most frequently, and how much time is spent in each area. Data is always aggregated and anonymized before analysis. No analytical cookie identifies you individually.

Personalization cookies (with consent): allow the 999v remember your preferences – such as your favorite sports (football, volleyball, MMA/UFC, e-sports) or the types of games you play most (slots, poker, jackpots) – to surface relevant content more easily.

What we don't do with cookies:

• We do not use cookies for third-party advertising or to build behavioral profiles for sale to advertisers;
• We do not share cookie data with external advertising networks;
• We do not track you outside of 999v.

You can manage or block cookies in your browser settings at any time. Blocking essential cookies may affect platform functionality. Blocking analytics and personalization cookies does not prevent access to the core features of 999v.

The 999v retains your personal data only for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. Once the applicable period expires, data is securely deleted or anonymized so it can no longer be linked to you.

The general retention periods that apply are:

• Registration and KYC data: retained for as long as your account is active and for at least 5 (five) years after closure, in accordance with anti-money laundering requirements (Lei nº 9.613/1998) and betting sector regulations;
• Financial transaction history (deposits and withdrawals via Pix, boleto, card, Mercado Pago, TED): retained for 5 years after each transaction, in accordance with the National Tax Code;
• Betting history and casino games: retained for 2 years after each event, a period available for dispute resolution and audits;
• Access records (login logs): retained for 6 months, in accordance with the Marco Civil da Internet (Lei nº 12.965/2014);
• Support communications: retained for 2 years for service monitoring and improvement purposes;
• Marketing data (email, preferences): retained until you withdraw your consent. After withdrawal, deleted within 30 days.

If you request account closure, 999v will begin the process of deleting data that does not need to be retained under any legal obligation. Data subject to statutory retention periods will remain stored with restricted access and used solely to fulfill those specific obligations.

The 999v has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the LGPD, handling data subject requests, and maintaining communication with the National Data Protection Authority (ANPD).

For inquiries related to personal data, privacy, or exercising your LGPD rights:

• E-mail: suporte@999v.run (subject: "LGPD Rights" or "Privacy")
• Live chat: available 24 hours a day, 7 days a week, on the 999v
• Response time: up to 15 business days from receipt of the request

Updates to this Privacy Policy:

The 999v may update this Policy periodically to reflect changes in legislation, data processing practices, or the services offered. When significant changes are made, you will be notified by email at least 15 days in advance. The current version will always be available at /privacy-policy, with the date of the last update indicated.

Continued use of the platform after a new version takes effect constitutes acceptance of the changes. If you do not agree with the updates, you may close your account by submitting a request to suporte@999v.run before the new version's effective date.

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13.709/2018) and the Marco Civil da Internet (Law No. 12.965/2014). Any disputes relating to this Policy are subject to the jurisdiction and general provisions described in the Terms and Conditions of the 999v.

Data privacy is not an easy topic to make compelling. Most users click "accept" without reading a single line. The 999v gets that – which is exactly why we invested in writing this Policy in plain, straightforward language, free of unnecessary legal jargon.

In practice, what does this Policy mean for people who use 999v to bet on the Brasileirão, spin slots, enter progressive jackpots, or play online poker? It means you can use the platform knowing your data has a specific, legitimate purpose. When you deposit R$ 50.00 via Pix to bet on the Copa do Brasil, the data from that transaction is used to process the deposit, credit your wallet, and maintain the record that serves as proof for both you and 999v – not to be sold to a marketing company or to build an advertising profile.

When you submit your ID and proof of address to complete identity verification before withdrawing via Pix, those documents are used solely to confirm that the withdrawal is going to the correct account holder – a protection for you as much as for the platform. We do not share these documents with anyone other than the KYC partner required for validation, and they are stored with encryption and restricted access.

The 999v also does not use cookies to follow you around the internet. When you close your browser and open Instagram or watch a Brasileirão match on YouTube, no cookie from the 999v is tracking that behavior. The browsing data we collect stays within the platform and is used to improve the experience — identifying which sections have the most issues, which registration flows confuse users, and which jackpot games have a poor mobile interface.

The LGPD has given Brazilians a concrete set of rights over their own data. 999v does not treat these rights as bureaucratic hurdles — they are obligations that make sense. If you want to know what we hold about you, we'll look it up and share it. If you want to correct something that's wrong, we'll fix it. If you want us to erase data that's no longer needed, we'll do so within the legal limits. If you want to stop receiving promotional emails, one click on the unsubscribe link in any message is all it takes.

Transparency about privacy is part of what 999v sees user respect as more than a value – it's a commitment. Having the best football odds, the biggest progressive jackpots in BRL, or the fastest Pix withdrawals on the market isn't enough if users can't trust that the platform protects their data with the same care it gives their money.