🔒 Privacy & Data

Privacy Policy of aaa99 — How We Protect Your Data

Full transparency on how aaa99 collects, uses, and protects user information, in compliance with the LGPD. Your data belongs to you — and we treat it with respect.

Updated January 2026 Version 2.4 Portuguese (Brazil)

What aaa99 guarantees about your privacy

Before diving into the full text, here are the six principles that guide how aaa99 handles your personal data day to day.

256-bit SSL Encryption

All data transmitted between you and aaa99 is encrypted with 256-bit SSL — the same standard used by digital banks like Nubank and Itaú. No information travels in plain text, whether during registration, deposits, or support chat.

Your Data Is Not Sold

Aaa99 does not sell, rent, or trade users' personal data with third parties. Registration and platform behavior data are used exclusively to provide services, prevent fraud, and meet legal obligations.

Full LGPD Compliance

Aaa99 operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). You are entitled to all rights guaranteed by law — including access, correction, portability, and deletion of your data upon request.

Minimum Necessary Access

Aaa99 collects only the data strictly necessary to deliver its services and meet regulatory requirements. We don't ask for information without a clear purpose — every field in the registration form exists for a specific, documented reason.

Retention with a Fixed Term

Data is retained for as long as necessary to provide the service and meet applicable legal obligations. After account closure and the relevant regulatory retention periods, data is anonymized or permanently deleted from aaa99's systems.

You Control Your Preferences

You decide which communications you want to receive from aaa99 — promotions, news, odds alerts. Notification preferences can be updated at any time in your account settings, with no need to contact support.

This Privacy Policy describes how the aaa99 collects, uses, stores, and protects the personal information of users of the platform available at aaa99.best. By creating an account or using any aaa99 service — Sports Betting, slots, Live Casino, poker, or crash games — you confirm that you have read and understood how your data is handled as described below.

1 Who Is the Data Controller

For the purposes of the General Data Protection Law (LGPD — Lei nº 13.709/2018), the controller of personal data collected through the aaa99 platform is the legal entity responsible for operating the aaa99.best website and all services associated with it.

Aaa99 is responsible for defining the purposes and means of processing the personal data of users registered on the platform. All decisions regarding how data is collected, stored, processed, and ultimately deleted are made by aaa99's compliance and privacy team, supported by a designated Data Protection Officer (DPO) as required by the LGPD.

For questions related to the processing of your data, you can contact aaa99 directly through the channels described in section 14 of this Policy.

2 What Data We Collect

Aaa99 collects two types of data: information you provide directly while using the platform, and information collected automatically as you browse.

Data provided by the user

  • Registration data: full name, CPF, date of birth, email address, mobile number, and residential address
  • Verification documents (KYC): copy of a national ID, driver's license, or passport, and proof of address issued within the last 90 days
  • Financial data: Pix key, bank details for withdrawals via TED, credit/debit card information (tokenized — aaa99 does not store full card numbers)
  • Communications: messages exchanged with support via chat, email, or any other channel

Automatically collected data

  • Access data: IP address, browser type, operating system, device model, date and time of access
  • Behavioral data: pages visited, games accessed, session duration, bets placed, deposit and withdrawal amounts and frequency
  • Cookies and similar technologies: described in detail in section 6 of this Policy
Data Category Examples Required?
Identification Full name, CPF, date of birth Yes
Contact Email, mobile Yes
Address ZIP code, city, state Yes
Documents (KYC) Government-issued ID, driver's license, proof of address For withdrawals only
Financial Pix key, bank account for wire transfer For transactions
Behavior Betting history, sessions Automatic
Technical IP, browser, device Automatic

3 How We Use Your Data

Aaa99 uses the information collected solely for the purposes described below. No data is processed for purposes not listed here without notifying the user and, where required, obtaining their consent.

Service provision

  • Creation and management of your account on the platform
  • Processing deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago
  • Processing withdrawals via Pix and wire transfers to Brazilian banks (Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, and others)
  • Registration and settlement of Sports Betting on the Brasileirão, Copa do Brasil, Libertadores, Premier League, and other available competitions
  • Operation of slots, live casino, poker, and crash games
  • 24/7 support chat in Portuguese

Security and fraud prevention

  • Identity verification (KYC) for anti-money laundering compliance and prevention of access by minors
  • Detection of anomalous behavior such as multiple accounts, bonus abuse, and bot usage
  • Monitoring of suspicious access and preventive blocking when necessary
  • Compliance with legal obligations before Brazilian regulatory and law enforcement authorities

Platform improvement

  • Mobile and desktop interface performance analysis for optimization purposes
  • Understanding usage behavior to enhance the live betting, slots, and poker experience
  • Development of new features based on identified usage patterns

Communication and marketing

  • Sending communications about aaa99 promotions, bonuses, and news — only to users who have opted in to receive them
  • Security notices, account alerts, and information about changes to the Terms or this Policy

4 Legal Basis for Processing (LGPD)

Aaa99 processes users' personal data based on the legal grounds set out in the LGPD. Each type of processing has a specific legal basis:

  • Contract performance: data required to create your account and process bets, deposits, and withdrawals — forming the contractual basis of your relationship with aaa99
  • Compliance with a legal obligation: identity verification (KYC), anti-money laundering compliance, and obligations with the Federal Revenue Service and other Brazilian regulatory bodies
  • Legitimate interest: fraud prevention, platform security, and behavioral analysis to improve our services — always within limits that respect your fundamental rights
  • Consent: sending marketing communications and using non-essential cookies — you may withdraw consent at any time
Note: Where processing is based on your consent, you have the right to withdraw it at any time without affecting access to aaa99's core services. Withdrawing consent for marketing, for example, does not impact your access to the platform or the processing of your bets and withdrawals.

5 Data Sharing

Aaa99 does not sell or trade users' personal data. Sharing occurs only in the situations described below, which are strictly necessary for platform operations or to fulfill legal obligations.

Operational partners

Aaa99 may share data with service providers acting on its behalf and under its instructions, including:

  • Payment processors: financial institutions and intermediaries that process transactions via Pix, boleto, credit/debit card, PicPay, and Mercado Pago — only the data strictly necessary for each transaction
  • Identity verification providers: specialized KYC companies that assist with document verification for fraud prevention
  • Infrastructure providers: hosting and cloud computing services that support the platform's technical infrastructure
  • Game providers: slots, live casino, and crash game developers integrated into the platform — they receive only the session data necessary to run the games

All operational partners are contractually required to handle data with the same level of protection demanded by the LGPD and this Policy.

Authorities and legal obligations

Aaa99 may disclose personal data to governmental, regulatory, or law enforcement authorities when required by law, court order, or to cooperate with investigations into unlawful activity. In such cases, we disclose only the data specifically requested.

We never share your data with external advertisers, brokers, third-party marketing companies, or any entity not directly involved in providing aaa99's services.

6 Cookies and Tracking Technologies

Aaa99 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and communications. The types of cookies used are described below:

You can manage your cookie preferences at any time in your account settings. Disabling optional cookies does not affect betting, withdrawals, or any essential aaa99 service. Essential and security cookies cannot be disabled, as they are required for the platform to operate securely.

7 Data Security

Aaa99 implements technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. The main safeguards currently in place are:

  • 256-bit SSL Encryption across all communications between the user's browser and aaa99 servers
  • Financial data tokenization — credit card numbers and sensitive banking details are tokenized and never stored in readable format on aaa99's systems
  • Internal access control with two-factor authentication for all staff with access to user data
  • Continuous monitoring of system access and automated detection of anomalous behavior
  • Periodic audits security audits conducted by our internal team and independent external auditors
  • Encrypted backups across multiple geographic locations to ensure availability without compromising security

In the event of a security incident that may affect your personal data, aaa99 will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 72 hours of becoming aware of the incident when there is significant risk.

💡 How you can also protect your account

Your account security also depends on your own practices. Enable two-factor authentication (2FA) in your settings, use a strong password with letters, numbers, and symbols, and never share your credentials with anyone — aaa99 support will never ask for your password.

8 Data Retention and Deletion

Aaa99 retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The criteria used to determine retention periods are:

  • Active account: all data is retained for as long as the account remains active on the platform
  • After account closure: identification data and financial history are retained for up to 5 years after account closure, as required by Brazilian anti-money laundering legislation and tax obligations
  • Marketing data: retained until consent is withdrawn by the user
  • Support data: support records are retained for up to 2 years after the ticket is closed
  • Technical logs: retained for up to 12 months for security and diagnostic purposes

Once retention periods expire, data is anonymized or permanently deleted from aaa99's systems. Anonymized data — which can no longer be used to identify a user — may be retained indefinitely for statistical purposes.

If you request deletion of your data before the standard retention period ends, aaa99 will fulfill the request to the fullest extent possible, retaining only data that is legally required to be kept. Deletion will be confirmed by email within 15 business days of the request.

9 Your Rights Under the LGPD

The General Data Protection Law grants you a set of rights over your personal data. aaa99 is committed to honoring all of these rights in a clear, hassle-free way.

Right of Access

Request a copy of all personal data aaa99 holds about you, including how and why it is used.

Right to Rectification

Request the correction of any inaccurate, outdated, or incomplete information on your aaa99 account.

Right to Erasure

Request deletion of data processed on the basis of consent. Data whose retention is required by law will be preserved as mandated.

Right to Data Portability

Request your data in a structured, machine-readable format for transfer to another controller — in accordance with ANPD regulations.

Right to Object

To object to processing based on legitimate interest where there are valid grounds, as provided for under the LGPD.

Right to Information

To be informed about which entities aaa99 has shared your data with and the circumstances under which that sharing took place.

To exercise any of the rights above, contact aaa99 via the support chat on the platform or by email at contato@aaa99.best. aaa99 responds to all LGPD rights requests within 15 business days. In more complex cases, this deadline may be extended by an additional 15 business days, with notice provided to the requester.

Note: If you are not satisfied with aaa99's response to a rights request, you may file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for enforcing the LGPD in Brazil.

10 Minors' Data

Aaa99 is an exclusively 18+ platform. We do not intentionally collect personal data from minors. Registration includes date-of-birth verification and, where necessary, document confirmation to identify and block sign-up attempts by underage users.

If aaa99 identifies that data has been collected from a user under 18, the account will be immediately closed and all data will be permanently deleted from our systems — including transaction records and usage history — as required by the Child and Adolescent Statute and the LGPD.

If you are the legal guardian of a minor and have discovered that they created an account on aaa99, please contact our support team immediately via live chat or at contato@aaa99.best so the matter can be resolved as a priority.

11 International Data Transfer

Some of aaa99's technology partners — such as cloud infrastructure providers and game developers integrated into the platform — may process data on servers located outside Brazil.

When this occurs, aaa99 contractually requires those partners to provide a level of data protection equivalent to the LGPD, either through standard contractual clauses or by operating in countries recognized by the ANPD as offering adequate data protection.

Aaa99 maintains an up-to-date record of all international data flows and ensures that no transfer takes place without the appropriate legal safeguards. You may request information about the international transfers applicable to your account by emailing contato@aaa99.best.

12 Marketing Communications

Aaa99 may send communications about promotions, bonuses, new games, special odds, and other platform news — such as betting on Brasileirão rounds, newly added slots, or poker freerolls. These communications are sent only to users who opted in during registration or via their account settings.

How to manage your marketing preferences

You can update your communication preferences at any time in your account settings, under "Notifications & Marketing". You can also unsubscribe from any communication by clicking the unsubscribe link found in all promotional emails from aaa99.

Withdrawing your marketing consent does not affect the delivery of essential communications — such as deposit confirmations, withdrawal confirmations, security alerts, and notices about changes to the Terms or this Policy. These communications are sent regardless of your marketing preferences, as they are necessary for service provision.

Note: Even with marketing turned off, you will still receive essential transactional communications — bet confirmations, Pix withdrawal receipts, and account security alerts.

13 Changes to This Policy

Aaa99 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or new services made available on the platform. The date of the most recent update is always displayed at the top of this document.

When changes are significant — such as updates to processing purposes, new types of data being collected, or new third-party sharing arrangements — aaa99 will notify users by email at least 7 days before the new terms take effect. Minor changes, such as text corrections and clarity improvements, may be made without prior notice.

If you continue using aaa99 after a new version of this Policy takes effect, this will be considered acceptance of the changes. If you disagree with the updates, you may request account closure and withdraw your available balance before the new terms come into force.

14 Contact, DPO & Privacy Channel

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, you can reach aaa99 through the channels below:

  • Platform support chat — available 24 hours a day, 7 days a week, in Portuguese. Average response time under 3 minutes
  • Email: contato@aaa99.best — for detailed privacy and data protection inquiries. Response within 4 business hours on working days

Aaa99 has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for overseeing compliance with this Policy, handling data subject rights requests, and coordinating communication with the National Data Protection Authority (ANPD). Requests addressed specifically to the DPO should be sent to the same email with the subject line "LGPD Request — DPO".

📬 File a Complaint with the ANPD

If you are not satisfied with how aaa99 has handled a request related to your personal data, you have the right to file a complaint with the National Data Protection Authority (ANPD). The ANPD's contact details and support channels are available on the authority's official website.

Your data protected. Ready to play at aaa99?

Free registration in under 3 minutes, deposits from R$ 20.00 via Pix, and withdrawals processed in minutes when you win. Everything in Portuguese, with SSL encryption and full LGPD compliance.

Exclusive service for users aged 18 and over. Please gamble responsibly.

Privacy and Data Protection

Aaa99 protects all your data with 256-bit SSL encryption and operates in full compliance with the LGPD (General Data Protection Law). The information collected is used solely to provide our services and is never shared with third parties without your consent. You may request access to, correction of, or deletion of your data at any time through our support team or by emailing contato@aaa99.best.

Responsible Gambling: Betting should be a form of entertainment, not a source of financial stress. aaa99 offers real control tools — deposit limits, self-exclusion, and a full betting history — accessible at any time in your account settings. Exclusive service for users aged 18 and over. Learn more at Responsible Gambling.

Frequently asked questions about your data at aaa99

No. aaa99 does not sell, rent, or trade its users' personal data with third parties under any circumstances. Data sharing only occurs with operational partners directly involved in delivering our services — such as Pix and boleto payment processors, identity verification providers, and technical infrastructure suppliers — and always under contracts that require the same level of protection set out in this Policy. None of these parties may use your data for their own purposes or pass it on to others.

To request deletion of your data, contact support via the platform's live chat or by emailing contato@aaa99.best with the subject line "Data Deletion Request — LGPD". aaa99 responds within 15 business days. Please note that certain data must be retained for legally mandated periods — such as financial records required for tax compliance and anti-money laundering obligations. In these cases, aaa99 will inform you which data cannot be immediately deleted and when it will be removed once the legal obligation expires.

aaa99 does not store full credit or debit card numbers in its systems. Card transactions are processed by financial intermediaries certified to the PCI DSS standard, which tokenize the data before any transmission. aaa99 receives only a secure token representing the card for future transactions — with no access to the actual card number, CVV, or expiration date. For withdrawals, the recommended method is Pix, which requires no card details.

Identity verification (KYC) is a legal requirement for platforms operating with financial transactions in Brazil, tied to Law No. 9,613/1998 on anti-money laundering and Central Bank regulations. The process ensures that the account holder is who they claim to be — protecting both the user and the platform against fraud. Documents are reviewed by aaa99's compliance team and stored in encrypted form with restricted access. Verification is typically completed within 24 business hours of document submission.

You can stop receiving marketing emails from aaa99 in two ways: by going to your account settings under "Notifications & Marketing" and disabling promotional communications, or by clicking the "Unsubscribe" link at the bottom of any promotional email sent by aaa99. The change takes effect within 48 hours. Even after opting out of marketing, you will continue to receive essential transactional emails — such as Pix withdrawal confirmations, security alerts, and notices about changes to the Terms or this Policy.
Português