Uf999 Privacy Policy: How We Protect Your Data

1. Data Controller

For the purposes of the General Data Protection Law (LGPD), the controller of the personal data collected by the uf999 platform is the operating company of the site uf999.click, responsible for defining the purposes and means of processing users' information.

Uf999 has appointed a Data Protection Officer (DPO) responsible for receiving and responding to data subject requests and for ensuring internal compliance with the LGPD. To contact uf999's DPO, email contato@uf999.click or use the 24-hour live chat available on the platform.

2. Data We Collect

Uf999 collects different categories of personal data depending on how you use the platform. Below is a full overview of what is collected and why:

Uf999 does not collect sensitive data such as racial or ethnic origin, religious beliefs, political opinions, or genetic or biometric data beyond the identity verification required by law.

3. How We Use Your Data

Data collected by uf999 is used exclusively for the following purposes:

• Platform operation: create and manage your account, process bets, calculate and pay out winnings, and maintain transaction history.
• Payment processing: process deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED, and process withdrawals to the account holder's registered bank account.
• Identity verification (KYC): confirm that the user is over 18, resides in Brazil, and is the registered CPF holder — a legal requirement for Sports Betting platforms.
• Fraud prevention: detect misuse of the platform, the creation of multiple accounts, money laundering, and other unlawful activities as required by Brazilian law.
• Account communications: send deposit and withdrawal confirmations, bet notifications, security alerts, and important platform updates.
• Marketing opt-in: send promotions, bonuses, and uf999 news only to users who have explicitly consented to this type of communication.
• Responsible gambling: monitor behavioral patterns that may indicate a gambling problem and trigger protection tools when necessary.
• Compliance with legal obligations: maintain financial records for the period required by the Federal Revenue Service, the Central Bank, and anti-money laundering legislation.

Uf999 does not use your data to build consumer profiles for third parties, does not use it for market research without consent, and does not process it in any way that results in discrimination or harm to the data subject.

4. Legal Basis for Processing

All collection and use of personal data by uf999 has a legal basis provided under the LGPD. The legal bases used are:

• Performance of a contract (Art. 7, V): the processing required to operate the user's account, process bets, and carry out financial transactions. Without this data, the service cannot be provided.
• Compliance with a legal obligation (Art. 7, II): data required to meet the obligations of the Federal Revenue Service, Central Bank, COAF (Financial Activities Control Council), and other Brazilian regulatory authorities.
• Legitimate interest (Art. 7, IX): behavioral and technical data used to improve the platform, detect fraud, and ensure system security — always proportionately and without prejudicing the rights of the data subject.
• Consent (Art. 7, I): for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting your use of the platform.

5. Sharing Data with Third Parties

Uf999 may share your personal data with the following categories of third parties, always for a specific purpose and under a contractual obligation to provide protection equivalent to that required by the LGPD:

• Payment processors: financial institutions and fintechs required to process transactions via Pix, boleto, card, PicPay, Mercado Pago, and TED — including Nubank, Itaú, Bradesco, Banco do Brasil, and other partner banks.
• Game providers: slots, Live Casino, crash games, and other game providers that require basic user identification to ensure result integrity and meet licensing obligations.
• Identity verification providers: KYC services that assist with document verification and anti-money laundering compliance, as required by Brazilian regulations.
• Competent authorities: Brazilian government authorities such as the Receita Federal, Banco Central, COAF, and law enforcement agencies, when required by legal obligation or court order.
• Infrastructure providers: hosting and cloud service providers that store data under strict confidentiality and security agreements.

Uf999 does not share your data with advertisers, ad networks, social media platforms, or any third party for commercial purposes without your express consent.

In the event of a merger, acquisition, or sale of uf999, users will be notified in advance of any change in the data controller and of their rights in that context.

6. Cookies and Tracking Technologies

Uf999 uses cookies and similar technologies to ensure the platform runs correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, user sessions, and bet slips. They cannot be disabled without affecting the use of the service.
• Performance cookies: collect anonymous data on how users navigate the platform in order to identify technical issues and improve performance. The data is aggregated and does not identify individual users.
• Functionality cookies: remember your preferences — language, account settings, last deposit method used — so you don't have to reconfigure everything each time you log in.
• Marketing cookies (opt-in): used to personalize promotions displayed on the platform based on your usage history. They are only activated with your explicit consent.

You can manage your cookie preferences through your browser or device settings. Disabling non-essential cookies does not affect access to uf999's core features. Disabling essential cookies may prevent you from logging into your account.

7. Data Storage and Security

Uf999 users' personal data is stored on servers located in Brazil or in countries that offer a level of protection equivalent to the LGPD, as assessed by the Autoridade Nacional de Proteção de Dados (ANPD).

The security measures implemented by uf999 include:

• Encryption in transit: all data transmitted between your device and uf999's servers is protected by TLS 1.3.
• Encryption at rest: sensitive data stored on uf999's servers is encrypted with AES-256.
• Multi-factor authentication: internal access to uf999 systems requires multi-factor authentication for all team members.
• Role-based access control: each uf999 team member only accesses the data necessary for their specific role — no employee has unrestricted access to the entire database.
• Continuous monitoring: uf999 systems are monitored 24 hours a day to detect unauthorized access attempts, anomalies, and potential breaches.
• Penetration testing: the platform undergoes periodic security audits conducted by specialized third-party firms.

Despite all security measures in place, no system is 100% immune to incidents. In the event of any breach that puts your data at risk, uf999 will follow the notification procedures set out in the LGPD.

8. Data Retention

Uf999 retains your personal data for only as long as necessary to fulfil the purposes described in this policy or to meet applicable legal obligations:

• Active account data: retained for as long as the account remains active and for the minimum period required after closure.
• Financial records: retained for a minimum of 5 years after the last transaction, as required by the Federal Revenue Service and anti-money laundering legislation (Law No. 9.613/1998).
• Verification documents (KYC): retained for the minimum period required by Banco Central regulations and Sports Betting legislation.
• Betting history: available to the user for at least 12 months, and retained internally for the applicable legal period.
• Support communication data: retained for 2 years for dispute resolution and quality control purposes.
• Marketing data (with consent): retained until consent is withdrawn by the user.

Once retention periods have expired, data is securely deleted or anonymized so that the original data subject can no longer be identified.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a robust set of rights that uf999 is committed to respecting and facilitating. See each right and how to exercise it:

To exercise any of these rights, contact uf999 support via 24h live chat or by email at contato@uf999.click. uf999 responds to all data subject requests within 15 business days.

10. Minors

The uf999 platform is strictly intended for users aged 18 and over. uf999 does not intentionally collect personal data from minors under 18 and does not permit minors to create accounts or use any feature of the platform.

If uf999 determines by any means that a user is under 18, the account will be immediately closed and the data deleted to the extent permitted by applicable law. If you believe a minor has created an account on the platform, please contact us immediately at contato@uf999.click.

Uf999's identity verification (KYC) systems include date-of-birth validation and document analysis to ensure that only users aged 18 and over have full access to the platform — particularly for features such as deposits and real-money betting.

11. Third-Party Links and Services

The uf999 platform may contain links to third-party websites, such as sports league pages, Brazilian football news, Brasileirão or Libertadores coverage, and UFC and e-sports information. These links are provided for convenience and reference only.

Uf999 has no control over the content or privacy practices of external websites. By clicking an external link, you will be subject to the privacy policy of that specific site. uf999 recommends that you read the privacy policies of any external website you visit.

Game providers integrated into the uf999 platform (slots suppliers, live casino, crash games) are considered data processors under the LGPD and operate under contracts that require a level of protection equivalent to that of this policy.

12. Changes to This Privacy Policy

Uf999 may update this Privacy Policy periodically to reflect changes in data processing practices, Brazilian legislation, or platform features. Any material update will be communicated via the registered email address and/or an in-platform notification at least 15 calendar days in advance.

The date of the last update is shown at the top of this document. Continued use of the uf999 platform after the effective date of the new terms constitutes acceptance of the changes. If you do not agree with the changes, you may request account closure and withdrawal of your available balance before the effective date.

Changes that expand the purpose of consent-based data processing will be communicated with a request for new consent — prior use of the platform will not be interpreted as agreement to new processing purposes that require specific consent.

13. Contact and Data Protection Officer (DPO)

For any questions about this Privacy Policy, to exercise your rights as a data subject, or to report any privacy-related incident or concern, please contact uf999:

• Live chat: available 24 hours a day, 7 days a week, directly on the uf999 platform or mobile app.
• Email: contato@uf999.click — responses within 15 business days for requests related to personal data.

The Data Protection Officer (DPO) at uf999 is responsible for ensuring internal compliance with the LGPD, responding to data subject requests, and serving as the communication channel with the National Data Protection Authority (ANPD). The DPO can be reached through the same channels listed above.