999vip Privacy Policy – Data Protection in Brazil

1Who We Are and Scope of This Policy

This Privacy Policy applies to the platform 999vip, accessible at 999vip.best, which offers online casino, Sports Betting, Poker, and digital entertainment services to players residing in Brazil. 999vip is the controller of the personal data collected and processed through the platform.

This policy applies to all services offered by 999vip, including the website, mobile interface, live casino, Sports Betting system, poker, promotions, and all customer support channels. By using any of these services, you confirm that you have read and understood this document.

2Personal Data We Collect

2.1 Registration Data

To create an account at 999vip, we collect the following required data:

• Full legal name as it appears on an official document;
• CPF (Cadastro de Pessoa Física) issued by the Receita Federal;
• Date of birth;
• Full residential address (street, number, unit, neighborhood, city, state, and ZIP code);
• Valid email address;
• Mobile number with area code.

2.2 Identity Verification Data (KYC)

To process withdrawals and comply with anti-money laundering regulations, we may request additional documentation:

• Photo of government-issued ID (RG or CNH), front and back;
• Recent proof of address (utility bill for electricity, water, or gas, or a bank statement);
• Selfie with ID document for identity verification;
• Proof of the payment method used (bank statement or Pix screenshot).

2.3 Financial & Transaction Data

While you use the platform, we record data related to your financial transactions:

• Amount and date of each deposit and withdrawal;
• Payment method used (Pix key, bank, card type);
• History of bonuses received and used;
• Available balance and account transaction history.

2.4 Platform Usage and Behavioral Data

To improve the player experience and ensure platform security, we collect data on how you use 999vip:

• Full Sports Betting history (football, MMA/UFC, basketball, volleyball, e-sports, etc.);
• Casino game history (slots, roulette, blackjack, baccarat, crash games, live casino);
• IP address and approximate geolocation data;
• Device type, operating system, and browser used;
• Access times and session duration;
• Pages and sections accessed within the platform.

3How We Collect Your Data

999vip collects personal data through three main channels:

• Directly provided by the player: Data provided in the registration form, during identity verification (KYC), in communications with support, or in any other platform form;
• Automatically generated during use: Browsing data, betting history, device data, and IP address collected automatically while you use the platform, via cookies and similar technologies described in Section 9;
• Trusted third parties: Transaction confirmation data received from Brazilian financial institutions (banks, Pix, card processors) during deposit and withdrawal processing, as permitted under Brazilian law.

4How We Use Your Data

Personal data collected by 999vip is used exclusively for the following purposes:

4.1 Platform Operation

• Creation, authentication, and maintenance of your account;
• Processing of deposits and withdrawals via Pix, boleto bancário, credit and debit card, Mercado Pago, PicPay, and TED bank transfer;
• Management of Sports Betting, casino games, and poker;
• Application and management of bonuses and promotions;
• Customer support provided in Brazilian Portuguese via chat, email, and WhatsApp.

4.2 Security and Fraud Prevention

• Identity verification (KYC) for anti-money laundering compliance;
• Detection of multiple accounts and suspicious behavior;
• Monitoring of unusual financial transactions;
• Maintenance of access logs in accordance with the Brazilian Internet Civil Rights Framework (Lei 12.965/2014).

4.3 Experience Improvement

• Personalization of game recommendations and promotions based on your usage history;
• Aggregate data analysis to improve the platform;
• Communications about news, promotions, and updates from 999vip (you can unsubscribe from these at any time).

4.4 Compliance with Legal Obligations

• Compliance with the LGPD and other applicable Brazilian laws;
• Responding to requests from competent authorities as required by law;
• Retention of accounting and tax records for the legally required period.

5Legal Basis for Processing (LGPD)

Under the LGPD, all personal data processing must have a specific legal basis. 999vip processes your data based on the following grounds established by law:

• Contract performance (art. 7, V): Most processing is necessary to provide the services you agreed to when creating an account, such as processing deposits, recording bets, and paying out withdrawals;
• Compliance with a legal obligation (art. 7, II): Data required to comply with anti-money laundering regulations (Lei 9.613/1998), the Internet Civil Rights Framework, and determinations from Brazilian regulatory authorities;
• Legitimate interest (Art. 7, IX): Usage data to improve platform security, detect fraud, and enhance the player experience, always proportionately and without infringing on your fundamental rights;
• Consent (art. 7, I): For marketing communications and promotional personalization, where you have the option to consent and may revoke that consent at any time.

6Data Sharing

999vip does not sell, rent, or trade players' personal data. Data sharing occurs only in the following situations:

6.1 Service Providers

To operate the platform, we work with service providers that process data on behalf of 999vip, including:

• Payment processing providers (partner banks, card operators, Pix system);
• Casino game providers (suppliers of slots, live tables, and crash games);
• Cloud infrastructure and data security providers;
• Customer service and support tools.

All these service providers are contractually required to process data solely for the purposes defined by 999vip and to maintain security standards consistent with this policy.

6.2 Legal Obligations

999vip may share data with competent Brazilian authorities when required by law, court order, or regulatory body request. In such cases, sharing is limited to what is strictly necessary to comply with the legal request.

7Storage and Retention Period

Your data is stored on secure servers. 999vip retains personal data for the shortest time necessary to fulfill the purposes for which it was collected, respecting the minimum periods required by Brazilian law:

• Registration and identity data: Retained for the entire duration of the account and for at least 5 (five) years after closure, in accordance with anti-money laundering requirements;
• Financial transaction history: Retained for 5 years in accordance with Brazilian tax legislation;
• Access logs (IP, authentication log): Retained for 6 months in accordance with the Marco Civil da Internet (Law 12,965/2014);
• Betting and game history: Retained for the duration of the account and for 2 years after closure for audit and dispute purposes;
• Support communications: Retained for 2 years for quality control and dispute resolution.

Once retention periods expire, data is securely and irreversibly deleted from our systems, unless a specific legal obligation requires it to be kept for a longer period.

8Data Security

999vip implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place include:

• 256-bit SSL Encryption: All communication between your device and the platform is encrypted in transit;
• Encryption at rest: Sensitive data, such as identity documents and financial information, is stored encrypted on our servers;
• Access Control: Only authorized staff have access to players' personal data, and that access is logged and regularly audited;
• Two-factor authentication: Available to all players in account settings for enhanced login security;
• Continuous monitoring: Intrusion detection systems and anomaly monitoring run 24 hours a day to identify unauthorized access attempts;
• Secure backups: Critical data is regularly backed up in segregated environments to ensure availability and recovery in the event of an incident.

In the event of a security incident that may affect your data, 999vip will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

9Cookies and Tracking Technologies

999vip uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze service usage. The types of cookies used are:

9.1 Essential cookies

Required for basic platform functionality: authenticated session management, form security, and language preferences. These cannot be disabled without affecting how the site works.

9.2 Functional Cookies

These allow us to remember your game preferences, account settings, and personalize the interface. They are only activated with your consent and can be disabled in your browser settings.

9.3 Analytical Cookies

They collect aggregated data on how players use the platform — which sections are visited most, which games generate the most interest, and where users run into difficulties. This data is used to improve 999vip and does not identify individual players.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies does not affect access to 999vip's core features.

10Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 999vip, a set of rights that can be exercised at any time, free of charge. See what they are:

• Access: Request confirmation that we process your data and receive a copy of the information we hold about you;
• Correction: Request the update or correction of incomplete, inaccurate, or outdated data;
• Portability: Request the export of your data in a structured format for transfer to another service;
• Deletion: Request the deletion of data processed on the basis of your consent, subject to the minimum legal retention periods;
• Consent withdrawal: Withdraw consent given for processing activities based on that legal basis, such as marketing communications;
• Objection: Object to processing carried out on the basis of legitimate interest when your personal circumstances justify it;
• Information: Request information about which third parties your data has been shared with;
• Review of automated decisions: Request human review of decisions made exclusively by automated systems that may affect your interests.

To exercise any of these rights, submit your request to suporte@999vip.best with the subject line "LGPD Rights – [request type]". We will respond within up to 15 business days after verifying your identity.

11Data of Minors

999vip services are intended exclusively for individuals aged 18 (eighteen) years of age or older. The platform does not intentionally collect, store, or process personal data from minors.

If we determine that an account was created by someone under 18, the account will be closed immediately, all balances will be returned to the original deposit method, and all associated data will be deleted from our systems as soon as possible.

If you are the legal guardian of a minor and believe their data has been inadvertently collected by 999vip, please contact us immediately at suporte@999vip.best so we can resolve the matter as a priority.

12Changes to This Privacy Policy

999vip may update this Privacy Policy periodically to reflect changes in data processing practices, legal updates, or service improvements. When this happens:

• The last updated date at the top of this page will be changed;
• Significant changes will be communicated by email to the address registered on your account at least 7 calendar days in advance;
• For changes involving new data use purposes or new sharing arrangements, we will request your express consent where applicable.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how 999vip protects your data.

13Contact, DPO & Complaints

For any questions, requests related to your personal data, or to exercise your rights under the LGPD, contact 999vip through the channels below:

• DPO (Data Protection Officer) email: suporte@999vip.best – subject line "Privacy / LGPD";
• Live chat: Available 24 hours a day within the platform for general privacy questions;
• WhatsApp: The fastest channel for simple data access or correction requests;
• Response time: Up to 15 business days for formal requests; general inquiries answered within 4 hours by support.

If you are not satisfied with 999vip's response to a request regarding your personal data, you have the right to file a complaint with the National Data Protection Authority (ANPD), as set out in art. 18, § 1 of the LGPD.