🔒 LGPD Compliant

A999 Privacy Policy – Your Data Protected

We explain clearly and directly how a999 collects, uses, stores, and protects your personal data — in full compliance with Brazil's General Data Protection Law (LGPD).

Last updated: January 2026 Read the Policy

+18 | Brazil residents only | Gamble responsibly

LGPD
In Compliance
SSL
Full Encryption
0
Data Sales
24h
Portuguese-Language Support

🛡️ Our Commitment to You

What we guarantee about your data at a999

Before we get into the details, here are a999's core commitments to user privacy.

End-to-End SSL Encryption

All communication between your phone or computer and a999's servers is protected by SSL/TLS encryption. Your personal and financial data — CPF, banking details, Pix key — never travels over the internet as plain text.

No Sale of Data to Third Parties

A999 does not sell, rent, or transfer your personal data to marketing companies, data brokers, or any other third party for commercial purposes. Your data is used exclusively to operate your account and improve your experience on the platform.

LGPD Compliance

A999 operates in full compliance with Brazil's General Personal Data Protection Law (Law No. 13,709/2018). You have legally guaranteed rights over your data — access, correction, deletion, portability — and a999 respects and facilitates the exercise of all of them.

You Control Your Data

At any time, you can request a copy of your data, ask for corrections to inaccurate information, request deletion of your account and associated data, or withdraw consent for specific processing activities — just reach out to a999 support.

Financial Data Kept Separate and Secure

Payment information — Pix data, credit and debit card details, boleto — is processed by certified payment partners and is not stored directly on a999's servers. The platform retains only the information required for identification and regulatory compliance.

Incident Notification

In the event of any security incident that may affect your personal data, a999 is committed to notifying affected users and the Brazilian National Data Protection Authority (ANPD) within the timeframes established by the LGPD — with full transparency about any situation that could impact you.

This Privacy Policy describes how a999 (platform accessible at a999.express) collects, uses, stores, shares, and protects the personal data of its users in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018). By creating an account and using the platform, you acknowledge that you have read and understood this Policy. If you have any questions, please contact our support team via the 24-hour chat or at suporte@a999.express.

Section 1

Data We Collect

A999 a999 collects different categories of data depending on how you interact with the platform. Below, we describe what we collect and at what point:

1.1 Registration Data

Collected at the time of account registration:

  • Full legal name as it appears on an official ID (RG, CNH, or passport)
  • CPF (Cadastro de Pessoas Físicas)
  • Date of birth
  • Full residential address (street, number, unit, neighborhood, city, state, ZIP code)
  • Email address
  • Mobile number

1.2 Identity Verification Data (KYC)

Collected when required for account verification or withdrawal processing above certain amounts:

  • Photo or digital copy of a government-issued photo ID (RG, CNH, or passport)
  • Proof of residence issued within the last 3 months
  • Selfie with ID document for enhanced verification cases

1.3 Financial Data

Collected to process deposits and withdrawals:

  • Pix key registered on the account (CPF, email, phone number, or random key)
  • Credit or debit card data — processed by certified partners and not stored in full by a999
  • Financial transaction history on the platform (deposits, withdrawals, bonuses)

1.4 Usage & Activity Data

Automatically collected during platform use:

  • IP address and approximate location
  • Device type, version, and operating system in use
  • Browser and version
  • Sports betting history and casino game sessions
  • Access times, session duration, and usage patterns
  • Customer support interactions

A999 a999 collects only the data strictly necessary for the purposes described in this Policy — the data minimization principle established by the LGPD. We do not collect sensitive data such as racial origin, religious belief, political opinion, or health data, unless specifically required by law in particular circumstances.

Section 2

How We Use Your Data

A999 a999 uses your personal data solely for the purposes described below. No data is used for any purpose incompatible with what you authorized when creating your account:

Purpose Data Used Legal Basis
Create and manage your account Registration data, CPF, email, phone number Contract performance
Process deposits and withdrawals Financial data, Pix key, transaction history Contract performance
Identity verification (KYC) Identity documents, proof of residence Legal obligation
Fraud and money laundering prevention IP, usage patterns, financial data, registration data Legal obligation / legitimate interest
Customer support Name, email, account history, and transactions Contract performance
Personalize your experience on the platform Betting history, gaming preferences, usage data Consent / legitimate interest
Send communications about promotions and bonuses Email, phone number, preferences Consent
Meet regulatory obligations CPF, identity documents, financial history Legal obligation
Responsible gambling and user protection Gaming patterns, frequency, amounts wagered Legitimate interest / legal obligation

You can opt out of promotional communications at any time through your account dashboard or by contacting support. a999. This does not affect the receipt of essential operational communications, such as deposit confirmations, withdrawal notifications, and security alerts.

Section 4

Data Sharing

A999 a999 does not sell users' personal data. Sharing with third parties occurs only in the situations described below, always limited to the minimum data required for each purpose:

4.1 Payment Processing Partners

To process deposits and withdrawals via Pix, boleto bancário, credit or debit card, Mercado Pago, PicPay, and TED bank transfers through major Brazilian banks such as Nubank, Itaú, Bradesco, and Banco do Brasil, we share with these partners only the data strictly necessary to complete each transaction. These partners are certified and subject to their own privacy and security policies.

4.2 Game Providers

The providers of casino and Sports Betting games available on a999 receive an anonymized session identifier to process rounds. They do not receive your full registration data, CPF, or financial information.

4.3 Infrastructure and Cloud Services

A999 a999 uses technology infrastructure providers (servers, cloud storage, transactional email services) to operate the platform. These partners act as data processors under the LGPD, bound by contracts that require compliance with the same data protection obligations.

4.4 Legal and Regulatory Obligations

A999 a999 may share data with government authorities, regulatory bodies, or the judiciary when required by law, court order, or determination by a competent authority — including, without limitation, requests under anti-money laundering, counter-terrorism legislation, or compliance with decisions of the Brazilian judiciary.

A999 a999 never shares your data with third parties for advertising, direct sale, or any purpose not described in this Policy. If you receive unsolicited communications from third parties claiming a partnership with a999, disregard them and notify us immediately through support.

Section 5

Data Retention

A999 a999 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by Brazilian law:

  • Registration and KYC data — Retained for as long as the account remains active and for 5 years after account closure, as required by anti-money laundering regulations and sports betting regulatory standards.
  • Financial transaction history — Maintained by 5 years after each transaction, in accordance with accounting and tax obligations.
  • Betting records and gaming session logs — Retained for 2 years for support purposes, dispute resolution, and responsible gambling analysis.
  • Access and security logs — Retained for 6 months, as provided under the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
  • Customer support data — Retained for 2 years after the interaction is closed.

Once retention periods expire, data is permanently deleted or irreversibly anonymized so that the account holder can no longer be identified.

Section 6

Data Security

A999 a999 implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

  • SSL/TLS Encryption across all communication between the user's device and a999's servers.
  • Encryption at rest for sensitive data stored on servers, including KYC documents and financial information.
  • Role-based access control (RBAC) — only staff with a genuine need for access may view users' personal data, with a full audit log of all access.
  • Regular penetration testing carried out by independent security teams to identify and fix vulnerabilities before they can be exploited.
  • Multi-factor authentication (MFA) across a999's internal systems for all staff with access to user data.
  • Continuous monitoring of systems to detect anomalous activity and unauthorized access attempts in real time.

Despite every precaution, no system is entirely immune to incidents. In the event of a data breach that poses a real risk to users, a999 will notify the ANPD and affected users within the timeframes established by the LGPD, with clear information about what happened and the measures taken.

Section 7

Cookies & Tracking

A999 a999 uses cookies and similar technologies in your browser to improve the user experience, ensure session security, and understand how users interact with the platform. Here is a summary of the cookie categories we use:

Essential Cookies

Required for the platform to function. Without them, core features — such as keeping your session active as you navigate between pages, processing bets, and accessing your account — won't work. They cannot be disabled.

Security Cookies

Used to detect fraudulent access attempts, protect against CSRF attacks (cross-site request forgery), and ensure that only the account holder is performing operations. These are part of a999's security measures. a999 and cannot be disabled without compromising your account's protection.

Performance and Analytics Cookies

These collect information about how users interact with the platform — which pages are visited most, where errors occur, load times. The data is aggregated and anonymized. You can disable these cookies without any impact on your account.

Personalization Cookies

These remember your preferences — such as language, interface settings, and favorite games — to personalize your experience. They can be disabled in your browser settings.

A999 a999 does not use third-party cookies for advertising tracking across external networks. The analytics cookies we use are configured to anonymize IP addresses and not build behavioral profiles on other sites outside the platform. You can manage cookies through your browser's settings panel — Chrome, Safari, Firefox, and others offer granular controls.

Section 8

Protection of Minors

A999 a999 is an exclusively 18+ platform. We do not intentionally collect personal data from minors. At the time of registration, we request the date of birth and carry out verification checks to confirm legal age.

If a999 identify that it has collected data from a user under 18 — whether through a false declaration at registration or any other means — the account will be immediately closed and all associated data will be deleted as quickly as possible, in compliance with the LGPD and the Child and Adolescent Statute (ECA).

Parents or guardians who discover that a minor has accessed the platform should contact a999 support immediately a999 via 24-hour chat or by email at suporte@a999.express so the matter can be handled as a priority.

Section 9

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that a999 is committed to respecting and facilitating the exercise of these rights. See each right and how to exercise it below:

Right of Access

You can request a complete copy of all personal data a999 holds about you, including registration details, financial history, and gaming records.

Right to Rectification

If any of your data is incorrect or out of date, you can request a correction. Updates to your email, mobile number, and address can be made through support.

Right to Erasure

You may request the deletion of your personal data. Data subject to legal retention obligations (such as KYC records and financial records) will be kept for the minimum period required by law and then deleted.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another data controller, under the terms defined by the ANPD.

Right to Withdraw Consent

You can withdraw consent for processing based on this legal basis (such as promotional communications) at any time, without affecting access to essential services.

Right to Information

You have the right to be informed about which entities your data is shared with, for what purposes, and the legal basis for each processing activity carried out by a999.

To exercise any of these rights, please contact a999 via 24-hour chat or at suporte@a999.express with the subject line "LGPD Rights Request". We will respond within 15 business days, as provided by law. For complex requests, this deadline may be extended by an additional 15 days with justified notice.

Section 10

International Data Transfer

In some cases, personal data belonging to a999 may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or payment partners with international operations.

When this occurs, the a999 ensures that any international data transfer is carried out in compliance with Art. 33 of the LGPD, applying the following safeguards:

  • Transfer only to countries with an adequate level of data protection, as recognized by the ANPD.
  • Inclusion of specific data protection clauses in contracts with international partners that process data belonging to Brazilian users.
  • Assurance that international partners apply security measures equivalent to or stronger than those required by the LGPD.

A999 a999 maintains an up-to-date record of all international data transfer flows and can provide additional information about specific destinations upon a substantiated request to our DPO.

Section 11

Changes to This Policy

A999 a999 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or data processing practices. The most recent version will always be available on this page with the date of last update clearly indicated.

When changes are significant — especially those involving new processing purposes, new data sharing arrangements, or a reduction of data subjects' rights — the a999 will notify registered users by email and via in-platform notification with a minimum advance notice of 7 calendar days before the changes take effect.

Continued use of the platform after any changes take effect constitutes acceptance of the updated Policy. If you do not agree with the new terms, you may close your account and request deletion of your data by contacting support.

Section 12

Contact & Data Protection Officer (DPO)

A999 a999 has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for:

  • Receive and handle requests and complaints from data subjects regarding the processing carried out by a999.
  • Communicate with the Autoridade Nacional de Proteção de Dados (ANPD) on behalf of the platform.
  • Training the staff of a999 about our data protection practices.

To contact our DPO or for any questions related to your privacy and the processing of your personal data, use the channels below:

  • DPO Email: privacidade@a999.express
  • General Support: suporte@a999.express or 24-hour chat on the platform

If, after contacting the DPO of a999, you feel your request was not handled to your satisfaction, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.

A999 a999 treats user privacy as a genuine responsibility, not just a regulatory obligation. We continuously invest in technology and processes to ensure your data is always protected, used transparently, and kept under your control. If you have any questions, our team is available 24 hours a day to help.

Privacy at a999: Why It Matters to You

When you register on an online casino and Sports Betting platform, you're sharing data that matters: your CPF, banking details, transaction history. It's a relationship built on trust — one that a999 takes this seriously — not because the law requires it, but because we understand that without this trust, the relationship with our players simply cannot work in the long run.

The LGPD (General Data Protection Law, Law No. 13,709/2018) came into force in Brazil in 2020 and established clear rights for data subjects and concrete obligations for companies that process their data. a999 has aligned all of its data collection, storage, and usage processes with the law — and has gone beyond the minimum required in several areas, particularly in being transparent about what we do with each category of data and in our commitment to never sell user information to third parties.

One aspect worth highlighting is how financial data is handled. When you make a deposit via Pix, boleto bancário, credit or debit card, Mercado Pago, or PicPay at a999, payment information is processed by certified partners who specialize in this type of transaction. a999 retains only the minimum data necessary to process withdrawals and verify account ownership — full card details, for example, are never stored on our servers. This segmented processing model significantly reduces the risk of financial data exposure in the event of any technical incident.

Identity verification (KYC — Know Your Customer) is a process that exists to protect you, not just to satisfy regulatory requirements. When a999 requests documents before processing withdrawals above certain amounts in order to ensure that only the legitimate account holder can withdraw funds — protecting against unauthorized third-party access. Submitted documents are encrypted, reviewed by the security team, and retained in accordance with minimum legal retention periods — not accessible to staff without a justified need.

In-platform behavioral data — which games you access, how often, and the amounts you wager — also has a defined purpose. At a999, this data is used to personalize your experience (suggesting games that match your profile, showing relevant promotions) and to support our responsible gaming program — identifying patterns that may indicate problematic behavior and offering tools before the situation escalates. It is not used to build profiles for sale to third parties or shared with external advertisers.

If you wish to exercise any of the rights guaranteed under the LGPD — view all data that a999 a999 holds about you, correct information, or request deletion or portability — the process is straightforward. Simply contact the 24-hour support team via chat or at privacidade@a999.express with the subject line "LGPD Rights Request". The team responds within 15 business days as required by law, and typically resolves simple requests such as data corrections in much less time.

Privacy is part of the experience at a999 what happens behind the scenes — when everything is running smoothly, you don't need to think about it. That's exactly a999's goal: for you to deposit via Pix, bet on the Brasileirão, or play live roulette knowing your data is being handled with the care it deserves, with no surprises and no fine print hiding questionable practices. If you ever have questions, we're here.

Exercise My Rights

To exercise any right guaranteed under the LGPD:

  • privacidade@a999.express
  • 24/7 live chat on the platform
  • Response within 15 business days
Related Documents
Responsible Gaming

Beyond your data, a999 also looks after your well-being as a player. Limit, pause, and self-exclusion tools are available to all users.

Learn more →

🔒 Your Data Protected

Play on a999 with Safety and Privacy Guaranteed

Sign up in under 2 minutes, deposit from R$ 20.00 via Pix, and play knowing your data is protected in line with the LGPD and best security practices.

Create My Account

❓ Frequently Asked Questions about Privacy at a999

No. a999 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data is shared only with partners essential to operating the platform — payment processors to handle transactions via Pix, boleto, and credit and debit cards, technology infrastructure providers, and, when required by law, with competent authorities. All partners that process a999 user data are bound by contractual obligations of confidentiality and data protection consistent with the LGPD.

To request deletion of your data, contact a999 support via 24-hour chat or by emailing privacidade@a999.express with the subject line "Data Deletion Request — LGPD". a999 will process your request within 15 business days. Please note that certain data must be retained for minimum periods required by law — such as financial records and KYC documents kept for 5 years under anti-money laundering legislation. Once those periods expire, data is permanently deleted or irreversibly anonymized.

a999 stores the Pix key associated with the account holder's CPF to process withdrawals — this is necessary to ensure that only the account holder can withdraw funds. Full credit and debit card details are not stored on a999's servers; they are processed directly by the certified payment partners we use, such as Mercado Pago and others. Transaction history (amounts, dates, transaction type) is retained for support and regulatory compliance purposes for the minimum period required by law.

Yes. The right to access your own data is guaranteed by the LGPD (Art. 18, I) and a999 fully respects it. To request a copy of your data, contact us at privacidade@a999.express with the subject line "Data Access Request — LGPD" or through the 24-hour support chat. a999 will provide the information in a clear, accessible format within 15 business days. You will receive your registration data, financial transaction history, betting records, and other information held about your account.

You can unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in the footer of any promotional email sent by a999, or by contacting support via the 24-hour chat or at suporte@a999.express to request removal from the marketing communications list. a999 will process the request within 48 hours. Opting out of promotional communications does not affect the receipt of essential operational emails, such as deposit and withdrawal confirmations, account security alerts, and mandatory notifications related to the Terms and Conditions.

📑 Related Documents

See the other documents governing use of the a999 platform.

🔒 Play Safely

Sign Up at a999 and Play with Your Privacy Guaranteed

Sign up in under 2 minutes, deposit via Pix from R$ 20.00, and have your data fully protected under the LGPD. Sports Betting, Live Casino, and much more — all in BRL, all secure.

🚀 Create My Account I Already Have an Account

+18 | Gamble responsibly | Responsible Gaming

Português