Privacy Policy of TT999 – How We Collect and Protect Your Data

1. Introduction and Data Controller

This Privacy Policy describes how TT999, operated through the domain tt999.express, collects, uses, stores, shares, and protects the personal data of its users. This document was prepared in compliance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018) and reflects the standards TT999 has committed to upholding in its relationship with every Brazilian player.

For the purposes of the LGPD, TT999 acts as data controller of information collected directly on the platform — meaning TT999 determines how that data is processed and for what purposes. When third-party partners process data on behalf of TT999 (such as payment providers and game providers), they act as operators under our instructions and are subject to contractual obligations of confidentiality and data protection equivalent to those in this policy.

This policy applies to anyone who accesses the tt999.express website, creates an account, makes deposits via Pix, boleto, credit or debit card, PicPay, or Mercado Pago, participates in Sports Betting on the Brasileirão, Copa do Brasil, or any other event, plays casino products, or interacts with platform support.

2. What Personal Data We Collect

TT999 collects only the data necessary to operate its services and meet legal obligations. Collection takes place at different points during your interaction with the platform:

Data you provide directly:

• Full name, CPF, date of birth, and residential address (required at registration).
• Email address and mobile number for contact and authentication.
• Government-issued ID (national ID, driver's license, or passport) and proof of address, required during the account verification process (KYC) before your first withdrawal.
• Banking details — specifically the Pix key registered to your CPF — used exclusively to process withdrawals.
• Information voluntarily provided to support via chat, email, or WhatsApp.

Data collected automatically during use:

• IP address, device type, operating system, and browser used to access TT999.
• Betting history, games accessed, session duration, and in-platform browsing behavior.
• Financial transaction logs — deposits and withdrawals — including date, time, and payment method.
• Cookie data and similar technologies, as detailed in Section 6 of this policy.

3. How We Use Your Data

TT999 uses the personal data it collects for the following purposes, all of which are tied to the operation of the platform and the player relationship:

TT999 does not use your personal data to build credit profiles, sell targeted advertising to third parties, or for any purpose not listed above. If we ever need to use your data in a different way, we will request your consent again in a clear and specific manner.

4. Legal Basis for Processing

The LGPD requires that every personal data processing activity be grounded in a specific legal basis. TT999 bases its processing activities on the following grounds set out in Article 7 of Law No. 13.709/2018:

• Contract performance (Art. 7, V): processing is necessary to create and operate your account, handle deposits and withdrawals via Pix and other methods, record bets, and provide support — all activities essential to the service you agreed to when signing up for TT999.
• Compliance with a legal obligation (art. 7, II): the processing of identity and financial data is required under Brazilian anti-money laundering regulations (Law No. 9.613/1998), tax legislation, and upcoming sports betting market regulations in Brazil.
• Legitimate interest (art. 7, IX): used to prevent fraud, detect platform misuse, personalize the player experience, and protect the security of the gaming environment — always proportionately and with respect for your rights.
• Consent (art. 7, I): used exclusively to send promotional communications — bonuses, special offers, and TT999 news — which you can withdraw at any time through your account settings or via the unsubscribe link in any email we send.

5. Sharing with Third Parties

TT999 shares personal data with third parties only when strictly necessary for service operations or to comply with legal obligations. We never sell or transfer data for third-party advertising or commercial purposes. The partners with whom we share data include:

• Payment processors: to process deposits via Pix (integration with Nubank, Itaú, Bradesco, Banco do Brasil, and others), boleto bancário, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to process each transaction.
• Game providers: companies such as Evolution Gaming, Pragmatic Play, and other Live Casino, slots, and crash game providers. Session identifiers and bet data are transmitted to record game results. These providers hold international data protection certifications.
• Identity verification tools (KYC): specialized providers that verify submitted documents prior to your first withdrawal. Documents are transmitted in encrypted form and are not retained by the providers beyond the period required for verification.
• Public authorities: TT999 may share data with regulatory, law enforcement, or judicial authorities when required by law or court order, regardless of consent.

All third-party partners with access to TT999 users' personal data sign data processing agreements with confidentiality and liability clauses equivalent to those in this policy. TT999 conducts periodic partner assessments to ensure ongoing compliance.

6. Cookies & Tracking Technologies

TT999 uses cookies and similar technologies to ensure the platform works correctly, personalize the player experience, and collect aggregated analytics data about site usage. See the types of cookies we use below:

• Essential cookies: required for basic platform operation — session authentication, bet slip management, and account settings. These cannot be disabled without affecting service functionality.
• Analytical cookies: collect aggregated data on how users browse TT999 — pages visited, session duration, and traffic source. This data helps improve the platform and can be disabled in your browser settings.
• Preference cookies: store preferences such as language, display settings, and the last game accessed so you don't have to reconfigure everything on each visit.
• Security cookies: detect anomalous session behavior that may indicate fraud attempts or unauthorized access to your account.

You can manage or delete cookies at any time through your browser settings — Chrome, Safari, Firefox, or any other. Disabling essential cookies may prevent login and normal use of the platform. TT999 does not use cookies to track your behavior outside of tt999.express.

7. Data Security

TT999 applies a set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL Encryption across all connections between your device and TT999's servers — the same standard used by Brazil's leading banks for financial transactions.
• Encrypted storage passwords using salted hash functions — TT999 staff cannot access your password under any circumstances. If you forget your password, it must be reset, not recovered.
• Two-factor authentication (2FA) optionally available via authenticator app (Google Authenticator, Authy) or SMS, adding an extra layer of protection to your account access.
• Continuous monitoring of unauthorized access attempts, suspicious behavioral patterns, and activities that may indicate account compromise.
• Role-based access restriction: only TT999 staff members who require specific data to carry out their duties have access to it. All access is logged and periodically audited.
• Regular security testing conducted by internal teams and, periodically, by external consultants specializing in information security.

No system is 100% breach-proof, and TT999 cannot guarantee absolute security. What we do guarantee is that all reasonable and technically available measures are in place. In the event of a security incident affecting your data, you will be notified as described in the changes section of this policy and in accordance with Article 48 of the LGPD.

8. Data Retention and Deletion

TT999 retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet applicable legal obligations. The criteria used to determine retention periods are:

• Active account: data retained for as long as your account remains active on the platform.
• After account closure: identity data, financial history, and betting history are retained for 5 years after account closure, as required by Brazilian anti-money laundering regulations and tax rules.
• Support data: support records are retained for 2 years after the ticket is closed, for quality assurance and potential dispute resolution purposes.
• Cookies and session logs: session data is automatically deleted upon logout. Security logs are retained for 12 months.

Once the applicable retention periods have elapsed, data is securely deleted or anonymized — so that the individual can no longer be identified from the remaining information. Deletion is irreversible, and you will be notified once it is complete if you submitted a formal request.

If you request the deletion of your data while legal retention obligations are still in effect, your data will remain stored only for as long as required by law, blocked from any use other than fulfilling those specific obligations.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights over your personal data. TT999 is committed to making it easy for you to exercise those rights without unnecessary red tape. Here's a breakdown of each one:

To exercise any of these rights, contact TT999 support via live chat (available 24 hours) or by email at suporte@tt999.express with the subject line "LGPD Rights – [your CPF]". TT999 will process your request within 15 business days, and may request identity verification to protect your account against third-party requests.

If you feel your rights have not been adequately addressed by TT999, you may file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

10. International Data Transfers

Some of the technology providers used by TT999 — such as live casino game providers and cloud infrastructure platforms — may store or process data on servers located outside Brazil. When this occurs, TT999 ensures that such transfers are carried out in compliance with the LGPD, specifically:

• The recipient countries or organizations offer a level of data protection equivalent to that required by the Brazilian LGPD, or
• TT999 enters into specific data protection contractual clauses with recipient partners, ensuring your data receives equivalent protection regardless of the country where it is stored.

TT999 does not transfer data internationally for commercial or monetization purposes. Transfers occur solely to enable the technical operation of the services — such as processing the outcome of a slots round or a live casino stream — and are technically necessary to deliver the service you signed up for.

If you would like to know specifically which countries may receive your data as part of game providers' operations, please contact TT999 support — we will respond with the available information for each partner.

11. Changes to This Policy and How to Contact Us

TT999 may periodically review and update this Privacy Policy to reflect changes in legislation, data processing practices, or the services offered. Any material change will be communicated with a minimum advance notice of 7 days by registered email and through a visible notice on the platform.

The "last updated" date at the top of this policy is always adjusted to reflect the most current version. For changes involving new uses of your data not originally anticipated, we will request explicit consent before any such processing begins.

Continued use of the platform after the effective date of any changes constitutes implied acceptance of the updated policy. If you do not agree with a change, you may close your account without penalty before the effective date.

Channels for exercising your privacy rights or getting answers about this policy:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform after logging in.
• Email: suporte@tt999.express — mark the subject as "Privacy Policy" or "LGPD Rights" for priority routing.
• VIP WhatsApp: available to Silver members and above, with real-person support in Portuguese.