Privacy Policy of 9fgame – LGPD

1Introduction and Data Controller

This Privacy Policy describes how 9fgame ("Platform", "we", "us"), operator of the website https://9fgame.best, collects, uses, stores, shares, and protects the personal data of its users ("you", "User") in accordance with the General Personal Data Protection Law (LGPD – Law No. 13,709, of August 14, 2018) and other applicable legislation in Brazil.

9fgame acts as data controller personal data collected on this platform, and is responsible for decisions regarding the purposes and means of data processing. By creating an account on 9fgame or using any service available on the platform — including Sports Betting, slots, Live Casino, blackjack, e-sports, and crash games — you acknowledge that you have read and understood this policy and consent to the processing of your data as described herein, to the extent that consent is the applicable legal basis.

This policy applies to all registered users and visitors of the 9fgame platform in Brazil, regardless of the device used to access it — mobile, desktop, or tablet.

2Personal Data We Collect

9fgame collects the following categories of personal data from its users:

• Identification data: Full name, CPF (Cadastro de Pessoas Físicas), date of birth, government-issued ID number (RG, CNH, or passport), and a photo of the document for KYC verification purposes;
• Contact details: Email address, mobile number, and full residential address including zip code;
• Financial and payment data: Pix key, credit or debit card details (stored in tokenized and encrypted form), deposit and withdrawal history, payment method used, and transaction history on the platform;
• Platform usage data: Betting history, games accessed, gaming sessions, account balance, redeemed bonuses, and interactions with platform features;
• Technical data: IP address, browser type, operating system, device used, approximate geolocation data (country and state), cookies, and session identifiers;
• Communication data: Records of conversations with customer support via live chat or email, including message content sent and received, and a history of support requests.

9fgame does not collect special categories of sensitive data such as racial or ethnic origin, religious beliefs, health data, or sexual orientation, except where expressly required by an applicable legal obligation.

3How We Collect Your Data

Personal data from 9fgame users is collected through the following channels:

• Registration and verification: Information provided directly by the user during the account creation and identity verification (KYC) process;
• Financial transactions: Data automatically generated during deposits via Pix, credit or debit card, boleto bancário, PicPay, Mercado Pago, or TED bank transfer, and during withdrawal requests;
• Platform usage: Data automatically generated by the system throughout gaming sessions, bets placed, and navigation across platform sections;
• Customer support: Information shared by the user during support interactions via live chat or email;
• Tracking technologies: Cookies, pixels, and similar technologies used to ensure the platform operates correctly, analyze usage behavior, and personalize the experience;
• External sources: In specific cases of fraud prevention and identity verification, we may consult data from public sources or third-party verification services operating in Brazil.

4Data Processing Purposes

9fgame uses the personal data it collects exclusively for the following legitimate purposes:

• Account creation and management: Register the user on the platform, authenticate access, maintain activity history, and personalize the user experience;
• Payment processing: Process deposits via Pix, card, boleto, PicPay, Mercado Pago, or TED, and handle withdrawals to Pix keys registered in the user's own name;
• Identity verification (KYC): Verify user identity in accordance with regulatory requirements for the prevention of money laundering and the financing of illegal activities;
• Fraud prevention: Monitor transactions, detect suspicious patterns, and protect the integrity of the platform and all its users;
• Compliance with legal obligations: Comply with court orders, requests from competent Brazilian authorities, and applicable regulatory obligations;
• Customer support: Resolve questions, complaints, and requests submitted by the user through available support channels;
• Service communications: Send notifications about transactions, account updates, changes to terms, and other communications essential to your use of the platform;
• Marketing communications: Send information about 9fgame promotions, bonuses, and updates — exclusively to users who have opted in to this type of communication, with the option to unsubscribe at any time;
• Continuous improvement: Analyze aggregated and anonymized usage behavior data to improve features, fix issues, and develop new platform capabilities.

5Legal Basis for Processing (LGPD)

Under the LGPD, all personal data processing must be grounded in a lawful legal basis. 9fgame processes its users' data in accordance with the following bases set out in Article 7 of Law No. 13.709/2018:

6Sharing Data with Third Parties

9fgame does not sell, rent, or transfer users' personal data for third-party commercial purposes. Data sharing occurs only in the following specific and necessary situations:

• Payment processors: Financial data is shared with the operators of the payment methods used — Brazilian banking institutions (Nubank, Itaú, Bradesco, Banco do Brasil, and others), card networks (Visa, Mastercard, Elo), PicPay, and Mercado Pago — solely to process the transactions requested by the user;
• Game providers: Minimum required technical data is shared with the game providers available on the platform (such as Pragmatic Play, Microgaming, Play'n GO, and others) to ensure titles function correctly and results remain fair;
• Identity verification services: Identification data may be shared with third-party KYC and document verification services that operate in compliance with Brazilian law;
• Competent authorities: When required by law, court order, or request from a competent police, regulatory, or tax authority in Brazil, 9fgame will provide the requested data strictly to the extent necessary to comply with that requirement;
• IT service providers: Hosting infrastructure providers, cybersecurity services, and analytics tools that process data exclusively under our instructions and under contractual obligations of confidentiality and LGPD compliance.

All third parties that receive user data from 9fgame are contractually required to process that data solely for authorized purposes, maintaining adequate security measures and in compliance with Brazilian data protection law.

7Data Security

9fgame employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS encryption: All communications between the user's device and 9fgame's servers are protected by bank-grade encryption, ensuring that transmitted data cannot be intercepted;
• Secure storage: Sensitive data, including financial information and identity documents, is stored in encrypted form on servers with restricted access protected by multi-factor authentication and strict permission controls;
• Financial data tokenization: Credit and debit card data is never stored directly — it is converted into cryptographic tokens by payment processors, in compliance with the PCI DSS standard;
• Continuous monitoring: Automated intrusion detection and anomaly monitoring systems track data access in real time, with immediate alerts triggered by any suspicious activity;
• Internal access controls: Only team members with a legitimate need for their role have access to specific user data, and all access is recorded in audit logs;
• Periodic audits: 9fgame's security infrastructure undergoes regular penetration testing and security audits conducted by independent specialists.

In the event of a security incident that compromises personal data, 9fgame will notify the National Data Protection Authority (ANPD) and the affected users within the deadlines established by the LGPD, providing information about the incident, the data involved, and the measures taken to mitigate its effects.

8Data Retention and Deletion

9fgame retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The criteria used to determine retention periods are:

• Active account: Data is retained for the entire period during which the account is active and the user is using the platform's services;
• Financial data: Records of financial transactions, deposits, and withdrawals are retained for a minimum of 5 (five) years following each transaction, as required by Brazilian anti-money laundering regulations and tax legislation;
• KYC verification data: Identity documents and verification records are retained for the period required by applicable financial regulations, generally 5 to 10 years after account closure;
• Communication data: Records of support conversations are retained for up to 2 (two) years after account closure for dispute resolution purposes;
• Closed account: After account closure, data that does not need to be retained under a legal obligation is deleted or irreversibly anonymized within 90 days.

Anonymized data — from which it is no longer possible to identify the user — may be retained indefinitely for statistical analysis and platform improvement purposes; LGPD deletion provisions do not apply to properly anonymized data.

9Your Rights as a Data Subject (LGPD)

Under Article 18 of the LGPD, you have the following rights regarding your personal data processed by 9fgame:

10Cookies and Tracking Technologies

9fgame uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation, such as keeping the user's session authenticated, remembering gaming preferences, and securing transactions. These cannot be disabled without affecting platform functionality;
• Performance cookies: They collect anonymous data on how users navigate the platform — which sections they visit, how long they spend on each page, and any errors encountered — helping us identify and fix issues;
• Functionality cookies: They allow the platform to remember user preferences — such as selected language, preferred payment method, and interface settings — for a more personalized experience;
• Analytical cookies: Used to analyze aggregate usage patterns and continuously improve 9fgame's services. Data collected by these cookies is processed in an anonymous and aggregated form.

You can manage your cookie preferences through your mobile or desktop browser. Blocking essential cookies may cause parts of the platform to not work correctly. 9fgame does not use tracking cookies for behavioral advertising on third-party platforms.

11Minors

The 9fgame platform is strictly intended for users aged 18 (eighteen) or older. 9fgame does not knowingly collect personal data from minors and does not permit minors to register or use the platform.

If you believe a person under 18 may have created an account or provided personal data to 9fgame, please contact support immediately via live chat. 9fgame will take prompt action to close the account and delete all related data, as required by Brazilian data protection law and the Statute of the Child and Adolescent (ECA).

The mandatory identity verification in the KYC process — which requires valid identification documents and proof of legal age — is one of the key measures 9fgame has in place to prevent minors from accessing the platform.

12Changes to This Privacy Policy

9fgame may update this Privacy Policy periodically to reflect changes in data processing practices, updates to applicable Brazilian law, or improvements to the platform's services. The date of the most recent update is shown at the top of this page.

For material changes that significantly affect user rights or the way data is handled, 9fgame will send a notification to the registered email address at least 30 (thirty) days before the changes take effect. We recommend reviewing this policy periodically to stay informed about how your data is protected.

Continued use of the platform after any changes take effect constitutes tacit acceptance of the updated policy. If you do not agree with the changes, you may request account closure by following the procedure described in the Terms & Conditions.

13Contact, DPO, and Supervisory Authority

For questions, requests, or complaints regarding the handling of your personal data, you can contact 9fgame through the following channels:

• Live chat: Available directly on the platform, staffed by real people in Portuguese, 24 hours a day, 7 days a week — the fastest channel for urgent requests;
• Email: support@9fgame.best — responded within 24 hours on business days. For LGPD-related requests, include "LGPD – Data Subject Request" in the subject line;
• FAQ page: Available at 9fgame.best/faq with answers to the most common questions about privacy, security, and data protection.

If you believe your rights as a data subject have not been properly addressed by 9fgame, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory authority responsible for enforcing the LGPD in Brazil. Information on how to contact the ANPD is available on the authority's official website.

This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the General Data Protection Law (Law No. 13.709/2018), the Consumer Protection Code (Law No. 8.078/1990), and the Internet Civil Rights Framework (Law No. 12.965/2014).