Privacy Policy of 9b9991 — How Your Data Is Protected

This Privacy Policy describes the personal data processing practices adopted by the 9b9991, operator of the Sports Betting and online casino platform available at https://9b9991.best ("Platform").

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the 9b9991 acts as controller of users' personal data — that is, it is the 9b9991 who decides what data is collected, for what purpose, and how long it is stored. The official contact channel for privacy-related matters is contato@9b9991.best or the live chat available 24 hours a day on the platform.

The 9b9991 collects personal data at different points during your interaction with the platform. Each category is detailed below:

Data you provide directly during registration:

• Full name, date of birth, and CPF — to verify identity and confirm legal age (18+).
• Email address and mobile number — for account communications, deposit and withdrawal confirmations, and security notifications.
• Full residential address — for proof of residence in Brazil and regulatory compliance.
• Government-issued ID (RG, CNH, or passport) — collected during the KYC verification step before your first withdrawal.

Financial data for payment processing:

• Registered Pix key (CPF, email, phone number, or random key) — used exclusively to process withdrawals.
• Partial credit or debit card details (masked number, card brand, and expiry date) — stored by the payment processor, never directly by 9b9991.
• Deposit and withdrawal history — for regulatory compliance, fraud prevention, and dispute resolution.

Platform usage data collected automatically:

• IP address and approximate location — to verify Brazilian residency and prevent access by minors.
• Device type, operating system, and browser — to ensure platform compatibility with your phone or computer.
• Betting, game, and session history — for game operation, bonus calculation, and generating the history accessible by the user.
• Cookies and session data — detailed in Section 8 of this policy.

Each piece of data collected by the 9b9991 serves a specific purpose. The table below transparently shows the relationship between each piece of data, its use, and the corresponding legal basis:

The 9b9991 does not use personal data for behavioral advertising directed at third parties, does not build psychological profiles of users, and does not apply fully automated decisions that produce legal effects without human review.

The LGPD requires that all processing of personal data be grounded in a legal basis. The 9b9991 relies on the following legal bases set out in Article 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): processing is necessary to deliver the platform's services — registration, deposits, bets, Pix withdrawals, and operational communications. Without this data, the contractual relationship is not possible.
• Compliance with a legal obligation (art. 7, II): Brazilian anti-money laundering legislation, Central Bank regulations for Pix transactions, and betting industry rules require 9b9991 to collect, store, and report certain data to the relevant authorities.
• Legitimate interest (art. 7, IX): used for purposes such as platform security, fraud prevention, anomalous behavior detection, and continuous service improvement — provided these do not override the user's fundamental rights and freedoms.
• Consent (art. 7, I): used specifically for non-essential cookies and optional marketing communications, such as newsletters and promotional emails. Consent can be withdrawn at any time in the account settings.

The 9b9991 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only in the following specific and necessary situations:

• Payment processors: the banking details required to process withdrawals via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED are shared with authorized payment processors. These partners act as data processors, bound by data protection agreements with 9b9991.
• Game providers: the minimum data required for game operation (such as user identifier and betting history) is shared with providers like Pragmatic Play, PG Soft, and Play'n GO for the platform's technical functionality. These providers do not receive personally identifying data such as CPF or address.
• Public authorities: 9b9991 may share data with Brazilian government authorities — such as COAF (Financial Activities Control Council), the Federal Revenue Service, and the Federal Police — when required by law, court order, or an official investigation related to anti-money laundering or other criminal matters.
• Auditors and consultants: independent auditing professionals who certify the platform's RNG and security consultants who identify vulnerabilities may have restricted access to non-identifiable technical data, always under a confidentiality agreement.

In all sharing situations, the 9b9991 ensures that third-party recipients maintain adequate security and confidentiality standards, in compliance with the LGPD.

The 9b9991 adopts a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL encryption: all communication between the user's device and 9b9991's servers is encrypted, including login credentials, deposits, and personal registration details.
• Encryption at rest: sensitive data stored on our servers — such as identity documents and Pix keys — is encrypted using bank-grade algorithms.
• Two-factor authentication (2FA): available and strongly recommended for all users. 2FA adds an extra layer of security to the login process, requiring mobile confirmation in addition to your password.
• Access monitoring: 9b9991 continuously monitors suspicious access attempts, multiple logins from different IP addresses, and behavioral patterns that may indicate account compromise.
• Internal access control: only employees with a genuine operational need have access to users' personal data. Access is logged and periodically audited.
• Penetration testing: 9b9991's infrastructure undergoes periodic security testing carried out by specialized external teams to identify and remediate vulnerabilities before they can be exploited.

The 9b9991 retains personal data for only as long as strictly necessary for the purposes that led to its collection, respecting the minimum retention periods required by Brazilian law:

• Active account data: retained for as long as the account remains active on the platform.
• Financial transaction data (deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED): retained for a minimum of 5 years after the transaction, as required by Brazilian anti-money laundering legislation and Central Bank regulations.
• Identification documents (KYC): retained for a minimum of 5 years after account closure, as required by applicable sector regulations.
• Betting and game history: retained for 2 years after the last account activity, for dispute resolution and audit purposes.
• Non-essential cookie data: discarded according to the expiry configured for each cookie — typically between 30 and 365 days.

After account closure and the expiry of mandatory retention periods, data is irreversibly deleted or anonymized. Anonymized data — which cannot be used to identify an individual user — may be used for statistical purposes and platform improvement indefinitely.

If you request deletion of your account and data, the 9b9991 will process the request within 15 business days — except for data that must be retained by legal obligation, which will be deleted at the end of the regulatory retention period and will not be used for any other purpose while retained.

The 9b9991 uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The cookies used fall into three categories:

• Essential cookies (always active): required for the platform's core functionality — maintaining login sessions, session security, and processing financial transactions. They cannot be disabled without compromising platform use. They do not require consent as they are essential for delivering the contracted service.
• Performance cookies (opt-in): collect anonymous information about how users navigate the platform — which pages they visit, how long they stay, and which features they use. Used exclusively to improve the platform. No personally identifiable information is collected by these cookies.
• Preference cookies (opt-in): remember personalized settings such as language, notification preferences, and favorited games. They make the experience more convenient but are not essential for the platform to function.

By accessing the 9b9991 for the first time, you will see a cookie notice that lets you accept or decline non-essential cookies. You can update your cookie preferences at any time in your account settings under "Privacy & Cookies". Declining non-essential cookies does not affect access to the platform's core features.

The 9b9991 does not use third-party advertising tracking cookies — meaning it does not allow ad networks to install cookies on users' devices to track behavior outside the platform.

Some of the game and technology infrastructure providers used by the 9b9991 — such as game servers from Pragmatic Play, PG Soft, and Play'n GO — operate outside Brazil. In these cases, international data transfers may occur, subject to the following safeguards:

• The 9b9991 only transfers data internationally to countries or organizations that provide an adequate level of protection, as assessed by the National Data Protection Authority (ANPD), or to recipients that adopt standard contractual data protection clauses compatible with the LGPD.
• Only the minimum data required for the technical operation of games (anonymous user identifier, bet outcome) is transferred to foreign providers — no CPF, full name, address, or banking details.
• All foreign partners that receive data from the 9b9991 are bound by contractual agreements that impose obligations equivalent to those required by the LGPD and the European General Data Protection Regulation (GDPR), where applicable.

The LGPD grants you, as a data subject, a set of rights that 9b9991 is committed to fully respecting. See what these rights are and how to exercise them:

The 9b9991 is an exclusive platform for users aged 18 and over. The intentional collection of personal data from children and adolescents (under 18) is not carried out and is strictly prohibited.

Registration on the platform requires your CPF and date of birth, which are verified to confirm you are of legal age. Identity verification (KYC) before your first withdrawal includes additional document checks. Any account identified as belonging to a minor is immediately closed, the balance is frozen, and the case may be reported to the relevant authorities.

If you are a parent or guardian and suspect that a minor has created an account on 9b9991, contact our support team immediately via live chat or at contato@9b9991.best. The case will be treated as top priority, with the account closed and any deposited funds refunded via Pix to the legal guardian, upon verification.

The 9b9991 may update this Privacy Policy periodically to reflect changes in platform services, applicable Brazilian law, or data processing practices. The date of the last revision is always shown at the top of the document.

For material changes — those that significantly affect how your data is collected or used — the 9b9991 will notify users via their registered email at least 15 days before any new conditions take effect. For minor changes — such as wording corrections, clarifications, and formatting adjustments — updates may be made without prior notice.

Continued use of the platform after an updated version of this Policy is published constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date — your available real balance will be fully refunded via Pix.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you can contact the 9b9991 through the following channels:

• Live chat: available 24/7, directly on the platform after login. Average response time: under 2 minutes. Recommended for urgent account security issues.
• Email: contato@9b9991.best — for formal privacy inquiries, exercise of data subject rights, and documented requests. Response times: up to 5 business days for general questions; up to 15 business days for formal rights requests.

The 9b9991 has appointed a Data Protection Officer (DPO), as required under Article 41 of the LGPD. The DPO serves as the official point of contact between the platform, data subjects, and the National Data Protection Authority (ANPD). Requests addressed to the DPO should be sent to the same email address listed above, with "Attn: DPO" in the subject line.

If you believe your rights have not been adequately addressed by the 9b9991, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.