Privacy Policy of 69vip – Your Data Protected under the LGPD

69vip is the controller of the personal data collected through the platform available at 69vip.click. As the controller, 69vip is responsible for defining the purposes and means of processing personal data of users registered in Brazil, in accordance with the LGPD.

69vip is a Sports Betting and online casino platform focused exclusively on the Brazilian market. All personal data collected is processed for the purpose of operating the platform, ensuring transaction security — including deposits via Pix, boleto bancário, and credit card — and delivering the best possible experience for Brazilian bettors.

To contact 69vip regarding privacy and data protection matters, please use the email suporte@69vip.click or the support chat available 24 hours a day on the platform.

69vip collects personal data at three key moments: during registration, during normal platform use, and during identity verification processes. See the details below:

Data you provide directly during registration:

• Full name;
• Date of birth;
• CPF (Cadastro de Pessoa Física);
• Email address;
• Brazilian mobile number;
• Residential address (requested during identity verification).

Financial data collected during transactions:

• Pix key linked to the user's bank account;
• Banking details required to process withdrawals (bank, branch, account number);
• History of deposits and withdrawals made on the platform;
• Credit or debit card data (processed by certified payment providers — 69vip does not store full card numbers).

Data collected automatically during platform use:

• IP address and approximate geolocation data;
• Device type, operating system, and browser;
• Betting history, gaming sessions, and casino interactions;
• In-platform browsing data (pages visited, session duration);
• Cookie and similar technology data (detailed in Section 8).

Identity verification (KYC) data:

• Photo ID document image (RG, CNH, or passport);
• Selfie for identity confirmation, when requested;
• Proof of residence issued within the last three months.

69vip uses collected personal data exclusively for the following purposes:

69vip does not use your data for purposes other than those listed above without your explicit consent. Whenever a new purpose is identified, you will be notified and may accept or decline before processing begins.

The LGPD requires that all processing of personal data have a specific legal basis. 69vip relies on the following legal bases, as set out in Articles 7 and 11 of Law No. 13,709/2018:

• Contract performance (Art. 7º, V): most data is processed because it is necessary to provide the betting service — without a name, CPF, and Pix key, for example, it is not possible to create an account or process a Pix withdrawal;
• Legal obligation (Art. 7, II): data used for identity verification (KYC) and anti-money laundering purposes is processed to comply with Brazilian legislation applicable to the financial and betting sector;
• Legitimate interest (Art. 7, IX): browsing data and betting history are used for experience personalization and fraud detection, based on 69vip's legitimate interest in operating the platform securely;
• Consent (Art. 7, I): sending marketing communications, promotions, and bonus notifications depends on your consent — which can be withdrawn at any time in your account settings or by contacting support.

69vip does not sell, rent, or trade users' personal data. Data is shared only in the following situations, with partners who are contractually bound to protect the information:

• Payment providers: financial data required to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago is shared with the providers responsible for processing each transaction. These providers are certified under the security standards applicable to the Brazilian financial sector;
• Identity verification providers (KYC): identity documents and registration data may be processed by specialized digital verification services contracted by 69vip under data protection agreements;
• Game providers: minimal session data (anonymized user identifier) is shared with slots, crash games, and live casino providers for operational purposes — no full name, CPF, or financial data is included;
• Regulatory and judicial authorities: data may be shared with Brazilian government authorities when required by law, court order, or request from a competent authority — always limited to what is legally necessary;
• IT and security service providers: companies providing hosting, cybersecurity, and fraud analysis services have controlled, audited access to operational data, always under contract with confidentiality clauses.

Under no circumstances will your data be shared with companies for third-party advertising purposes, commercial mailing lists, or any other purpose not described above.

69vip retains personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. General retention periods are:

• Active account data: retained for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering requirements and tax obligations;
• Financial transaction history (deposits and withdrawals via Pix): retained for 5 years after each transaction, in compliance with Brazilian financial legislation;
• Identity verification documents (KYC): retained for 5 years after submission, in accordance with regulatory requirements for the sector;
• Browsing data and non-essential cookies: retained for up to 12 months and may be deleted earlier upon request;
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes.

Once retention periods have expired, data is securely deleted or irreversibly anonymized. Anonymized data may be used for internal statistical purposes without identifying the user.

69vip employs multiple layers of protection to keep users' personal data secure:

• Encryption in transit: all communications between the user's device and 69vip's servers are protected by TLS 1.3 with a 256-bit SSL certificate;
• Encryption at rest: sensitive data stored on servers — including KYC documents and financial data — is encrypted with AES-256;
• Role-based access control: only staff with a proven operational need have access to personal data, always with an audit trail;
• Continuous monitoring: 69vip's systems are monitored 24 hours a day to detect unauthorized access, security anomalies, and intrusion attempts;
• Two-factor authentication: available for users who want to add an extra layer of security to their account;
• Penetration testing: platform security is regularly tested by specialized cybersecurity teams.

In the event of a security incident that may compromise users' personal data, 69vip will notify those affected and the ANPD within the timeframe required by the LGPD, providing details about what occurred, which data was affected, and the steps taken to mitigate the impact.

69vip uses cookies and similar technologies to ensure the platform functions correctly, improve user experience, and analyze site usage. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — maintaining login sessions, security, and language preferences. They cannot be disabled without affecting the service's functionality;
• Performance and analytics cookies: collect anonymous information about how users navigate the platform — pages visited, session duration, errors encountered — to improve technical performance. They do not identify you personally;
• Personalization cookies: used to remember your preferences within the platform, such as favorite sports and odds display settings;
• Security cookies: detect suspicious behavior and fraud attempts, helping protect your account.

69vip does not use third-party advertising cookies for cross-site tracking or for displaying ads on other platforms.

You can manage cookie preferences in your browser settings. Disabling non-essential cookies does not affect access to the platform's core features, but may limit some personalization options.

The LGPD grants you a set of rights over your personal data. 69vip is committed to making it easy for you to exercise each of them:

To exercise any of these rights, please contact us at suporte@69vip.click or via the platform's support chat. We will respond within 15 business days. If you are not satisfied with our response, you may file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados) — the regulatory body responsible for enforcing the LGPD in Brazil.

69vip services are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors.

If 69vip determines that an account was created by someone under 18, the account will be immediately suspended, the data will be deleted, and any existing balance will be held pending the outcome of the investigation, as set out in the Terms and Conditions.

If you are the guardian of a minor and believe they have created a 69vip account without authorization, please contact support immediately at suporte@69vip.click. Your case will be handled with priority and discretion.

Some service providers used by 69vip — such as casino game providers and cloud infrastructure companies — may process data on servers located outside Brazil. When this occurs, 69vip ensures that such transfers are carried out with appropriate safeguards, including:

• Standard contractual data protection clauses in agreements with international vendors;
• Transfers only to countries with an adequate level of data protection recognized by the ANPD, where applicable;
• Data minimization in transfers — only the minimum necessary for service delivery is shared with international partners.

69vip keeps a record of all international data transfers and can make this information available upon request from the user or the ANPD.

69vip may update this Privacy Policy periodically to reflect changes in Brazilian law, new platform features, or adjustments to data processing practices. Any significant change will be communicated in advance through the following channels:

• Email notification to the address registered on your account;
• Warning banner on the platform's home page;
• Highlighted in the account settings area.

The date of the last update is always shown at the top of this page. We recommend reviewing this policy periodically to stay informed about how your data is handled.

Continued use of the platform after changes are communicated constitutes acceptance of the updated policy. If you disagree with any change, you may close your account through support before the changes take effect.

For any questions, requests, or complaints regarding how 69vip handles your personal data, you can reach us through the channels below:

• Privacy email: suporte@69vip.click — include in the subject line "LGPD – [request type]";
• Support chat: available 24 hours a day on the platform, in Brazilian Portuguese;
• Response timeframe: up to 15 business days for rights exercise requests, as provided for under the LGPD.

69vip has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and serving as the point of contact for data subjects and the ANPD. To contact the DPO directly, use the email above with the subject line "DPO – [subject]".

If you were not satisfied with 69vip's response to your personal data request, you have the right to file a complaint directly with the ANPD (Autoridade Nacional de Proteção de Dados), as set out in Art. 18, sole paragraph, of the LGPD.