At 999r, our users' privacy is taken seriously. This document explains, clearly and in plain language, what data we collect, how we use it, who we share it with, and what your rights are as a data subject.
Before the full document, here is a summary of the points that most affect day-to-day platform users.
Name, CPF, email, date of birth, address, and payment details provided at registration, along with technical data such as IP address and browsing behavior on the platform.
Operate the platform, process deposits and withdrawals via Pix and other methods, verify identity, prevent fraud, and send communications about your account and active promotions.
Only with strictly necessary operational partners (payment processors, identity verification providers) and when required by law. We never sell your data.
SSL encryption on all transmissions, credential-based access control, secure password storage with hashing, and continuous monitoring for suspicious activity.
You can access, correct, export, or request deletion of your data at any time. You can also withdraw consents and request information about data processing.
We use first-party cookies for authentication and session preferences. Analytics cookies are used in an aggregated and anonymized manner to improve the platform experience.
The platform 999r, available at 999r.ml, is committed to the privacy and security of its users' personal data. This document, hereinafter referred to as the "Privacy Policy", aims to explain in a transparent and accessible way how we collect, use, store, and protect the information of those who use the platform in Brazil.
The processing of personal data carried out by 999r follows the guidelines of the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable Brazilian regulations. Our goal is for you, the user, to understand exactly what happens with your data — without overly technical legal language and without hidden information.
By creating an account, depositing, betting, or simply browsing the 999r platform, you agree to the practices described in this policy. If you do not agree, we recommend that you do not use the services.
When registering with 999r, you voluntarily provide us with the following information:
When using the platform, some data is automatically collected by our systems:
For processing deposits and withdrawals, we collect data related to the chosen payment method. In the case of Pix — the platform's preferred method for Brazilian users — we store the key and transaction data. Credit card data is processed directly by 999r's PCI-DSS certified payment partners and is not stored on our servers.
Each piece of data collected by 999r has a specific and legitimate purpose. We do not collect information beyond what is necessary to operate the platform safely and with quality.
| Data | Primary purpose |
|---|---|
| Name and CPF | Registration, identity verification, fraud prevention, and compliance with legal obligations |
| Email and phone | Account communications, security notifications, support, and promotional messages (with consent) |
| Bank details / Pix | Processing deposits and withdrawals |
| IP and device | Account security, detection of suspicious access, and fraud prevention |
| Betting history | Platform operation, dispute resolution, and legal compliance |
| Browsing data | Improvement of user experience and platform performance analysis |
Under the LGPD, all processing of personal data must have a legal basis to justify it. 999r operates under the following legal bases:
999r does not sell users' personal data. Information is shared only in the following scenarios:
Personal data of 999r users is retained for the period necessary to fulfill the purposes described in this policy or as required by law. The criteria applied are:
After the applicable retention period, data is deleted or irreversibly anonymized.
999r adopts a set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:
Cookies are small text files stored on your device when you access a website. They serve different purposes — some are essential for the platform to function, others help improve the user experience.
Most browsers allow you to view, block, or delete cookies in their settings. However, disabling essential cookies may prevent the platform from functioning correctly, including account login. For the mobile app, tracking permissions can be managed in the privacy settings of Android or iOS.
999r services are intended exclusively for individuals aged 18 years of age or older. The platform does not intentionally collect personal data from minors.
If we identify that an account was created by a minor, we will proceed with the immediate closure of the account and deletion of the collected registration data, except where legal obligations require minimum retention. If you are aware that a minor is using the platform, please notify support immediately.
The LGPD grants you, as a personal data subject, a set of rights that 999r is committed to honoring:
All of these rights can be exercised through the 999r Privacy Center, accessible via the platform's support.
Request a full copy of all personal data that 999r holds about you.
Correct incomplete, inaccurate, or outdated data directly in your account settings or by contacting support.
Request the deletion of data processed on the basis of consent. Data retained under a legal obligation cannot be deleted before the applicable deadline.
Receive your data in a structured, interoperable format for transfer to another service provider.
Withdraw, at any time, consent given for optional processing such as promotional emails and push notifications.
Find out which public or private entities 999r has shared or may share your data with.
Some of the technology partners used by 999r may be located outside Brazil. When this occurs, the transfer of personal data to other countries will follow the requirements of the LGPD, which include:
999r maintains an updated list of international vendors that process user data, available upon formal request through the platform's privacy channel.
This Privacy Policy may be updated periodically to reflect changes in 999r's operations, Brazilian legislation, or best practices in data protection. Any relevant update will be communicated via:
Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. We recommend that you review this document periodically to stay informed.
To exercise any of the rights described in this policy, clarify questions about the processing of your data, or report a privacy concern, please contact us through the following channels:
999r has appointed a Data Protection Officer (DPO), as required by the LGPD, who can be reached via the privacy email address above. The DPO is responsible for receiving communications from data subjects and the ANPD, as well as guiding the internal team on data protection practices.