Data protection

9bet99 Privacy Policy – Data Protection

Here you'll find everything about how 9bet99 collects, uses, stores, and protects your personal data — in full compliance with the General Data Protection Law (LGPD). Complete transparency, no fine print.

Last updated: January 2026 Brazilian Portuguese LGPD Compliance

Your Data, Your Rules

9bet99 treats privacy as a core part of the experience — not a footnote. These are the six commitments that guide how data is handled on the platform.

256-bit SSL Encryption on All Connections

All communication between your phone or computer and 9bet99's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's leading digital banks like Nubank and Itaú. Your registration data, password, Pix payment details, and betting history are encrypted at all times, without exception.

Data Collected Only on a Valid LGPD Legal Basis

9bet99 only collects data with a clear legal basis under the LGPD — whether for contract performance (to provide the betting service), legal obligation (KYC and anti-money laundering), legitimate interest (platform security), or explicit consent (marketing communications). No data is collected for convenience or resale.

Your Data Subject Rights — Guaranteed and Enforceable

You have the right to access all data 9bet99 holds about you, correct inaccurate information, request portability to another platform, and ask for deletion of your data when there is no legal retention obligation. All these rights can be exercised by emailing contato@9bet99.best, with a response within 15 business days.

No Data Is Sold to Third Parties

9bet99 does not sell, rent or otherwise transfer your personal data to third parties for commercial purposes under any circumstances. Data sharing occurs only when necessary to operate the service (such as Pix payment processors and certified game providers) or when required by law — and always strictly within the limits of the original collection purpose.

Financial Data with PCI-DSS Tokenization

9bet99 does not store credit or debit card numbers directly on its servers. All card transactions go through tokenization carried out by PCI-DSS-certified processors. For Pix, we rely exclusively on the official APIs of the Banco Central do Brasil. No complete banking data is ever exposed within our internal systems.

Incident Notification within 72 Hours

In the event of any security incident involving users' personal data, 9bet99 is committed to notifying the National Data Protection Authority (ANPD) and the affected data subjects within 72 hours of confirming the incident, as required by the LGPD. The notification will include the nature of the incident, the data affected, and the measures taken.

Important: This Privacy Policy applies to all users and visitors of the 9bet99 platform. By creating an account or continuing to use our services, you acknowledge that you have read and understood how we handle your personal data as described here.

1

Personal Data Controller

For the purposes of the General Data Protection Law (Law No. 13,709/2018 — LGPD), the controller of the personal data collected through the 9bet99 platform is the company operating the site 9bet99.best, responsible for making decisions regarding the processing of users' data.

9bet99's Data Protection Officer (DPO) can be reached by email at contato@9bet99.best, with the subject line "Privacy – Data Subject Request". Response times are up to 15 business days for rights exercise requests and up to 5 business days for general inquiries.

This Policy applies to all data processing carried out in connection with 9bet99's services, including Sports Betting (football, Brasileirão Série A, Copa do Brasil, Copa Libertadores, MMA, UFC, and others), online casino, crash games, and all platform features.

2

What Personal Data 9bet99 Collects

9bet99 collects personal data in different ways and at different points during your interaction with the platform. The categories of data collected are described below:

2.1 Registration Data

Provided directly by you at registration:

Full name CPF Date of birth Email Mobile phone Residential address

2.2 Identity Verification Data (KYC)

Collected to fulfill legal verification obligations prior to the first withdrawal:

Document photo (national ID, driver's license, or passport) Selfie with ID document Proof of address

2.3 Financial Data

Collected to process deposits and withdrawals:

Registered Pix key Transaction history Balances and transactions

9bet99 does not store full credit or debit card numbers. This data is processed and tokenized directly by PCI-DSS-certified payment processors.

2.4 Usage and Browsing Data

Automatically collected during your interaction with the platform:

  • IP address and approximate geolocation by IP;
  • Device type, operating system, and browser used;
  • Pages visited, session duration, and navigation flow;
  • Betting history, games accessed, and amounts wagered;
  • Device identifiers (device fingerprint) used for fraud prevention and multiple-account detection.

2.5 Communication Data

Generated when you contact 9bet99 support:

  • Live chat conversation transcripts;
  • Emails exchanged with the support team;
  • Voice call recordings, where applicable.
3

How 9bet99 Uses Your Data

9bet99 uses your personal data solely for the purposes described below. No data is used for any purpose other than the one that justified its collection without a new consent or adequate legal basis.

  • Provision of betting and casino services: process your account, accept bets, settle results, handle Pix deposits and withdrawals, and provide casino and crash games;
  • Identity verification (KYC): meet regulatory customer identification obligations prior to releasing withdrawals, as required by Brazilian anti-money laundering legislation;
  • Fraud prevention and security: detect unauthorized access, identify multiple accounts linked to the same CPF, prevent bonus abuse, and protect the integrity of the platform;
  • Customer support: answer questions, resolve betting disputes, process refund requests, and provide technical support;
  • Transactional communications: send registration confirmations, transaction alerts, settled bet notifications, and security communications;
  • Marketing communications (only with your consent): send promotions, free bets, and special offers for Copa do Brasil, Brasileirão, and other events. You can unsubscribe from these communications at any time;
  • Service improvement: analyze usage patterns to improve the platform experience, optimize performance, and develop new features;
  • Compliance with legal obligations: comply with requests from judicial or regulatory authorities within the limits of Brazilian law.
4

Legal Basis for Data Processing (LGPD)

The LGPD requires that every processing of personal data have a clear legal basis. 9bet99 grounds each processing activity in one of the legal hypotheses set out in art. 7 of Law No. 13,709/2018:

Processing Legal Basis (LGPD)
Registration and account creation Contract performance (art. 7, V)
Processing of deposits and withdrawals via Pix Contract performance (art. 7, V)
Identity verification (KYC) Legal obligation (art. 7º, II)
Anti-money laundering (AML) Legal obligation (art. 7º, II)
Fraud detection and platform security Legitimate interest (art. 7, IX)
Transactional communications Contract performance (art. 7, V)
Marketing and promotions Consent (art. 7, I)
Usage analysis for service improvement Legitimate interest (art. 7, IX)
Compliance with court orders Exercise of legal rights (art. 7, VI)
5

Who 9bet99 Shares Your Data With

9bet99 does not sell your personal data to anyone. Sharing only occurs in the situations described below, always within the original purpose of collection and with partners who have assumed confidentiality and security obligations consistent with the LGPD:

5.1 Payment Processors

To process Pix deposits and credit and debit card transactions, 9bet99 shares only the strictly necessary data with PCI-DSS-certified payment processors authorized by the Central Bank of Brazil. These partners act as data operators, not independent controllers, and may not use your data for their own purposes.

5.2 Game and Casino Providers

To provide slots, Live Casino, and crash games (such as Aviator, Spaceman, and others), 9bet99 shares an anonymous session identifier with providers including Pragmatic Play, Evolution Gaming, and Spribe. Providers do not receive your name, CPF, email, or any directly identifying data — only a session token required for technical game integrity.

5.3 Authorities and Regulatory Bodies

9bet99 discloses personal data to public, judicial, or regulatory authorities exclusively when required by law, court order, or regulation applicable to the Brazilian betting market. In such cases, the disclosure is limited to what is strictly necessary to comply with the request.

5.4 Analytics and Security Tools

9bet99 uses behavioral analytics and fraud detection tools that process browsing data in pseudonymized form. These tools operate as data processors under processing agreements that include data protection clauses aligned with the LGPD.

Attention: 9bet99 will never ask you to share your password, full banking details or two-factor authentication code via email, chat or any other channel. If you receive such a request claiming to be from 9bet99, it is a phishing attempt — report it immediately to contato@9bet99.best.

6

Data Storage and Retention Periods

Personal data collected by 9bet99 is stored on servers with restricted access controls, encryption at rest, and continuous security monitoring. 9bet99 retains data for as long as necessary to fulfill the purposes described in this Policy or to comply with legal obligations.

6.1 Applicable Retention Periods

  • Registration and active account data: for as long as the account remains active, plus up to 5 years after closure, to meet tax and legal obligations;
  • Financial transaction records (deposits and withdrawals via Pix): minimum of 5 years, as required by anti-money laundering legislation;
  • KYC verification documents: minimum of 5 years after verification, in accordance with COAF Resolution and Central Bank regulations;
  • Access logs: minimum of 6 months, pursuant to art. 15 of the Marco Civil da Internet (Law No. 12.965/2014);
  • Betting history: minimum of 2 years for dispute resolution and internal audit purposes;
  • Support communications: up to 2 years after the support interaction is closed;
  • Marketing data (with consent): until consent is withdrawn by the data subject.

6.2 Deletion after the retention period

Once the applicable retention period expires, data is anonymized or securely deleted in a way that prevents re-identification of the data subject. Anonymized data may be kept indefinitely for statistical purposes and service improvement, as it no longer qualifies as personal data under the LGPD.

7

Data Security at 9bet99

9bet99 adopts technical and organizational measures to protect your personal data against unauthorized access, accidental loss, improper alteration, or disclosure. The main safeguards in place include:

  • 256-bit SSL/TLS Encryption on all connections between the user's device and the platform's servers;
  • Encryption at rest for sensitive data stored in internal databases;
  • Access control based on the principle of least privilege — each member of the 9bet99 team accesses only the data necessary for their role;
  • Multi-factor authentication required for all administrative access to internal systems;
  • Continuous security monitoring with automatic alerts for anomalous access patterns;
  • Penetration testing conducted periodically by independent security teams;
  • PCI-DSS Tokenization for credit and debit card data;
  • Pseudonymization of identifiers in analytics and marketing systems.

Despite these measures, no security system is 100% impenetrable. In the event of a security incident that compromises personal data, 9bet99 will notify the ANPD and the affected data subjects within the timeframes required by the LGPD.

What you can do to protect your 9bet99 account

  • Enable two-factor authentication (2FA) in your account settings;
  • Use a unique password for 9bet99, different from your other accounts;
  • Never share your password or 2FA code with anyone, including 9bet99 support (we will never ask for it);
  • Always access the platform through the official address 9bet99.best — be cautious of links received via SMS or WhatsApp;
  • When using shared devices, always log out when your session is over.
8

Cookies, Pixels and Tracking Technologies

9bet99 uses cookies and similar technologies to ensure the platform works correctly, personalize your experience, and analyze performance. Below are the cookie categories in use:

8.1 Strictly Necessary Cookies

These cookies are essential for the platform's basic functionality. Without them, features such as login, balance loading, bet processing, and two-factor authentication will not work. They do not require consent as they are technically necessary.

  • Authenticated session cookie (keeps you logged in while browsing);
  • CSRF token cookie (protection against cross-site request forgery attacks);
  • Language and region preference cookie.

8.2 Analytical Cookies

Used to understand how users interact with the platform — which pages are most visited, where drop-offs occur during registration, average session time on casino games and crash games. Data is processed in an aggregated and pseudonymized form. You can disable these cookies in your account settings.

8.3 Security and Anti-Fraud Cookies

9bet99 uses persistent device identifiers (device fingerprinting) to detect attempts to create multiple accounts with the same CPF, identify suspicious access patterns, and prevent the use of bots and automated scripts. These cookies are based on legitimate interest (platform security) and cannot be disabled without compromising the security of your account.

8.4 Marketing Cookies

Used to personalize promotional communications about Copa do Brasil, Brasileirão, and other events. Activated only with your explicit consent during registration or in your account settings. You can withdraw consent at any time with no impact on your normal use of the platform.

Manage cookies: You can view and adjust your cookie preferences in your 9bet99 account settings, under the "Privacy & Notifications" section. In addition, most modern browsers allow you to block or delete cookies through the browser's own settings — keep in mind that blocking strictly necessary cookies may prevent the platform from functioning properly.

9

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 9bet99, a set of rights that can be exercised at any time. See each one below and how to exercise them:

Right What it means Available
Confirmation and Access To know whether we process your data and receive a full copy
Correction Update incomplete, inaccurate or outdated data
Anonymization or Blocking Request anonymization of unnecessary or excessive data
Portability Receive your data in a structured format for transfer to another platform
Deletion Request deletion of data processed on the basis of consent
Consent Withdrawal Withdraw consent given for marketing and optional cookies
Objection Object to processing based on legitimate interest
Data Sharing Information Know which entities your data has been shared with

How to exercise your rights

To exercise any of the rights listed above, submit a request to contato@9bet99.best with the subject line "Privacy – Data Subject Request", including:

  • Your full name and CPF registered with 9bet99;
  • The right you wish to exercise (access, correction, deletion, etc.);
  • A clear description of what you are requesting.

9bet99 will respond within 15 business days. In complex cases, this deadline may be extended by an additional 15 days, with a communication explaining the reason. If we are unable to fulfill your request for a legal reason (for example, mandatory retention of transaction data), we will explain the reason in writing.

If you believe your rights have not been properly addressed, you may submit a complaint directly to the National Data Protection Authority (ANPD), at gov.br/anpd.

10

Data of Minors

The 9bet99 platform is intended exclusively for individuals aged 18 or older. 9bet99 does not intentionally collect or process personal data from anyone under 18.

During registration, the user expressly confirms they meet the minimum age requirement. The CPF provided is cross-checked against the declared date of birth, and any account showing signs of belonging to a minor is preventively blocked until identity verification confirms they are of legal age.

If you become aware that a minor has created an account on 9bet99, please notify our support team immediately by emailing contato@9bet99.best. The account will be closed and all data will be handled in accordance with the LGPD provisions applicable to the protection of children's and adolescents' data.

11

International Data Transfers

Due to the nature of the services provided and the technology infrastructure used, some personal data of 9bet99 users may be processed on servers located outside Brazil — for example, by casino game providers such as Pragmatic Play and Evolution Gaming, or by cloud infrastructure providers.

When international data transfers occur, 9bet99 ensures they take place only to countries that provide a level of data protection equivalent to Brazilian law, or through the execution of standard contractual clauses aligned with art. 33 of the LGPD, which impose on the data recipient obligations equivalent to those under Brazilian law.

9bet99 does not transfer users' directly identifying data (name, CPF, email) to game providers. Sharing is limited to anonymized session identifiers required for the technical operation of the games.

12

Changes to This Privacy Policy

9bet99 may update this Privacy Policy periodically to reflect changes to the service, applicable legislation, or data processing practices. Whenever there are material changes, you will be notified by email and via a notice on the platform at least 15 days' notice before the new version takes effect.

Changes required by urgent legal demands, such as new directives from the ANPD or the Central Bank, may have a shorter notice period, in which case 9bet99 will explain the reason directly in the update notice.

The most recent version of this Policy is always available at 9bet99.best/privacy-policy, with the date of the last update indicated at the top of the page. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated version. If you do not agree with the changes, you have the right to request account closure as described in the Terms and Conditions.

13

Contact, DPO and Privacy Channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please use 9bet99's official channels:

  • Privacy channel (DPO): contato@9bet99.best — subject: "Privacy – Data Subject Request"
  • General support: live chat available 24 hours a day via the support icon on the platform
  • Response time for privacy requests: up to 15 business days

The 9bet99 Data Protection Officer (DPO) is responsible for ensuring that data processing complies with this Policy and the LGPD, handling data subject requests, and maintaining communication with the ANPD whenever necessary.

Effective date: This Privacy Policy takes effect on January 1, 2026, and supersedes all previous versions. 9bet99 is committed to keeping it up to date and accessible to all platform users at all times.

LGPD Compliance — 9bet99 This Policy is drafted in compliance with the General Data Protection Law (Lei nº 13.709/2018). To exercise your rights as a data subject or for any privacy-related questions, please contact our DPO at contato@9bet99.best. Also see our Terms and Conditions for the platform's general terms and rules.

Privacy Questions at 9bet99

Straightforward answers to the most common questions about how 9bet99 handles your personal data.

Absolutely not. 9bet99 does not sell, rent, transfer, or monetize your personal data to third parties for their own commercial purposes. Data sharing only occurs in the situations described in Section 5 of this Policy — essentially with the Pix payment processors needed to move your funds, with game providers in anonymized format, and with authorities when required by law. If you receive any commercial communication from a third party claiming to have obtained your data from 9bet99, that information is false — please report it to contato@9bet99.best.

Yes, you can request deletion of your data at any time by emailing contato@9bet99.best. However, it is important to understand that some data cannot be deleted immediately due to legal obligations: financial transaction records (Pix deposits and withdrawals) must be retained for a minimum of 5 years under anti-money laundering legislation; KYC documents follow the same retention period; and access logs must be kept for at least 6 months under the Marco Civil da Internet. Data with no mandatory retention requirement — such as browsing history, analytics cookies and marketing preferences — is deleted immediately upon confirmed request.

Your CPF is stored in encrypted form in 9bet99's databases and is used primarily as a unique account identifier — it is not displayed in full on screen after registration, nor shared with game providers. For financial transactions, 9bet99 uses the Banco Central's official APIs for Pix and PCI-DSS-certified processors for card payments. No full card numbers are stored on 9bet99's servers. All communications between your device and the platform are encrypted with 256-bit SSL. Internally, access to user data is restricted to employees who genuinely need it to perform their duties.

Yes. Receiving marketing emails — such as Copa do Brasil promotions, free bets, reload bonuses, and new casino game announcements — is based on your consent, which can be withdrawn at any time without any impact on your normal use of the platform. To opt out, go to your 9bet99 account settings and uncheck the "Marketing Communications" options in the privacy section. You can also click the unsubscribe link at the bottom of any promotional email. Transactional communications — such as withdrawal confirmations, new-device login alerts, and bet result notifications — will continue to be sent, as they are an essential part of the service and are based on the legal ground of contract performance.

After account closure, 9bet99 retains data for the minimum period required by law — primarily financial transaction records and KYC documents, which must be kept for 5 years under anti-money laundering legislation. During this mandatory retention period, the data is inaccessible for any purpose other than legal compliance or responding to a judicial order. Once the legal retention period expires, data is anonymized or securely deleted. After closure, you will no longer receive any marketing communications. Your CPF will be blocked from creating a new account for a security period to prevent abuse.
🔐 Secure platform, fully LGPD compliant

Bet at 9bet99 with the Confidence of a Platform That Truly Protects Your Data

Sign up in under 3 minutes, deposit via Pix from R$ 20.00 and get a 100% bonus up to R$ 500.00. Your data is encrypted, never sold, and you have full control over it at any time.

Minimum deposit R$ 20.00 via Pix. Bonus subject to 10× rollover. Valid for 30 days. 18+. Gamble responsibly.


Português