9fgames Privacy Policy – Your Data, Protected

1. Who We Are — The Data Controller

9fgames is the operator and controller of personal data for users registered on the 9fgames.best platform. For the purposes of the LGPD, 9fgames is the legal entity that determines the purposes and means of processing personal data collected through its Sports Betting, online casino, slots, crash games, and related services aimed at the Brazilian market.

All data processed by 9fgames is handled in Brazil, on infrastructure that meets security standards consistent with LGPD requirements. 9fgames provides a direct communication channel for privacy-related matters at contato@9fgames.best, with a response time of up to 15 business days for formal data subject requests.

2. What Personal Data We Collect

9fgames collects personal data at different points during your interaction with the platform. Below, we detail each data category and the context in which it is collected:

2.1. Data provided at registration

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Full residential address (street, number, unit, ZIP code, city, state);
• Mobile phone number;
• Access password (stored in encrypted format — 9fgames does not have access to the original value).

2.2. Data collected automatically during use

• IP address and approximate geolocation data;
• Device identifier (mobile phone, computer, or tablet);
• Operating system and browser version;
• Pages and sections accessed on the platform, including internal browsing history;
• Time and duration of usage sessions;
• Data from cookies and similar tracking technologies (detailed in Section 8).

2.3. Financial and transactional data

• Pix key used for deposits and withdrawals;
• Deposit and withdrawal history (amount, date, method, and status of each transaction);
• Credit or debit card data — stored in tokenized form by the payment processor, never in plain text by 9fgames;
• Complete history of all bets placed on the platform.

2.4. Identity Verification Documents (KYC)

• Photo or scan of a government-issued ID (RG or CNH with CPF);
• Proof of residence issued within the last 90 days;
• Selfie with ID document when requested during the verification process.

2.5. Communication Data

• Chat history with customer support via live chat;
• Emails exchanged with the 9fgames support, verification, and responsible gambling teams;
• Records of self-exclusion requests and responsible gambling limits.

3. How We Use Your Data

Personal data collected by 9fgames is used exclusively for the purposes listed below. The platform does not use personal data for purposes incompatible with those described in this policy without obtaining fresh consent from the data subject.

4. Legal Basis for Data Processing (LGPD)

The LGPD requires that all processing of personal data have a legal basis. 9fgames relies on the following legal bases, as set out in Article 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V) — for processing data necessary to provide betting services, including registration, Pix deposits, withdrawal processing, and bet recording;
• Compliance with a legal or regulatory obligation (art. 7, II) — for identity verification (KYC), anti-money laundering compliance, and communication with competent authorities when required by Brazilian law;
• Legitimate interest (art. 7, IX) — for fraud prevention, platform security, detection of multiple accounts, and internal operational risk analysis;
• Consent (art. 7, I) — for sending marketing communications and using non-essential cookies. Consent may be withdrawn at any time without affecting access to the services;
• Credit protection (art. 7, X) — for verification of registration data in specific cases of financial fraud.

5. Sharing Data with Third Parties

9fgames does not sell users' personal data. Sharing only occurs in the situations listed below, always with appropriate safeguards in place:

• Payment processors — financial institutions and payment gateways that process Pix deposits, bank slips, credit and debit cards, PicPay, and Mercado Pago. These partners receive only the minimum data necessary to process each transaction and operate under their own security policies regulated by the Brazilian Central Bank;
• Casino and slots game providers — to enable access to live tables and slots, session data is shared with technology providers under data processing agreements that include confidentiality obligations;
• Identity verification services (KYC) — partners specializing in document and CPF validation to meet anti-money laundering compliance obligations;
• Competent Authorities — 9fgames may be legally required to share data with the Receita Federal, Ministério da Fazenda, Polícia Federal, or other Brazilian public authorities when a court order or applicable legal obligation exists;
• Technology Infrastructure — cloud service and infrastructure providers that host the platform, operating under contracts with strict data protection clauses compliant with the LGPD.

6. How Long We Retain Your Data

9fgames retains personal data for the minimum period necessary for the purposes that justified its collection, in accordance with the legal retention periods applicable to the betting and financial services sector in Brazil:

• Registration and KYC data — retained for the full duration of the account and for up to 5 years after closure, in accordance with anti-money laundering requirements (Law No. 9,613/1998);
• Financial Transaction History — retained for up to 5 years after each transaction, in accordance with Brazilian tax and financial regulations;
• Betting history — retained for up to 3 years after each bet for support, dispute resolution, and audit purposes;
• Access and security logs — retained for up to 6 months in accordance with the Marco Civil da Internet (Law No. 12,965/2014);
• Support Communications — kept for up to 2 years for service continuity and dispute resolution purposes;
• Marketing Data — retained while consent remains active or until an opt-out request is submitted.

Once the applicable retention period has passed, data is securely deleted or anonymized so that the data subject can no longer be identified. Anonymized data may be used for aggregated statistical analysis without restriction under the LGPD.

7. Data Security

9fgames applies technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure. The main measures include:

• SSL/TLS encryption across all communications between the user and the platform;
• Passwords stored as salted hashes (bcrypt), with no way to recover the original value;
• Credit card data tokenization — card numbers are never stored directly on 9fgames systems;
• Two-factor authentication (2FA) available and recommended for all users;
• Internal access control by user profiles, with audit logs of all queries involving personal data;
• Continuous monitoring for suspicious access attempts and automatic blocking after consecutive failed attempts;
• Regular security and vulnerability testing of the platform's infrastructure.

In the event of a security incident that may pose significant risk or harm to data subjects, 9fgames will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected users within the timeframes set out in the LGPD, describing the nature of the incident, the data involved, and the measures taken.

8. Cookies and Tracking Technologies

9fgames uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — conduct usage analytics. See the types of cookies used below:

You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies may prevent certain 9fgames features from working correctly, such as login and bet processing.

9. Your Rights as a Data Subject

The LGPD grants personal data subjects a set of rights that 9fgames is fully committed to honoring. See how to exercise each one:

10. Protection of Minors

9fgames services are intended exclusively for individuals aged 18 and over. 9fgames does not knowingly collect personal data from minors. Registration requires a date of birth and is blocked for users below the minimum legal age.

If 9fgames determines that data from a user under 18 was inadvertently collected — whether through a false date of birth or any other means — the account will be immediately suspended, all data will be deleted, and any remaining balance will be handled in accordance with the provisions of the Terms & Conditions.

Parents or legal guardians who discover that a minor has used the 9fgames platform should contact us immediately at contato@9fgames.best so that appropriate action can be taken as quickly as possible.

11. International Data Transfers

9fgames processes user data primarily in Brazil. In specific situations, data may be transferred to servers outside the country — for example, to casino and slots game providers whose infrastructure is based in other countries.

When international data transfers occur, 9fgames requires recipients to implement adequate safeguards, including:

• Standard contractual clauses compliant with the LGPD;
• Internationally recognized security certifications (such as ISO 27001);
• Location in countries with data protection legislation deemed adequate by the ANPD.

9fgames does not transfer data to countries without adequate personal data protection safeguards. If you have questions about specific transfers, please contact us at contato@9fgames.best.

12. Changes to This Privacy Policy

9fgames may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable legislation, or service improvements. Significant changes will be communicated via registered email at least 7 days in advance.

The date of the last update is shown at the top of this document. We recommend reviewing this policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated version.

The most recent version of this Privacy Policy is always available at 9fgames.best/privacy-policy.

13. Contact, DPO & Privacy Channel

To exercise your rights as a data subject, get clarification on this Privacy Policy, or report any concern regarding how 9fgames handles your data, please use the following channels:

• Privacy email: contato@9fgames.best — use the subject line "LGPD – [request type]" to help us process your request faster;
• Live chat: available 24 hours a day, 7 days a week, within the platform after login, for initial inquiries;
• Response time: up to 15 business days for formal data subject requests.

If you feel your rights have not been adequately addressed by 9fgames, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil, through the official ANPD portal at gov.br/anpd.