Official Document · Updated January 2026

999xp4 Privacy Policy – How We Protect Your Data

Player privacy is taken very seriously at 999xp4. This document explains clearly what data we collect, why we collect it, how we use it, and who — if anyone — we share it with. All of this is in full compliance with the General Data Protection Law (LGPD), with no runaround and no fine print.

Last updated: January 10, 2026 Version 3.1
LGPD · Law No. 13,709/2018 · Your data belongs to you · Terms and Conditions
999xp4 Commitments
256-bit SSL on all transactions
End-to-end encryption for your data
Zero data sales to third parties
Your information is never sold
Full LGPD compliance
Full compliance with the General Data Protection Law
Data deletion at any time
Submit your request through 24/7 Portuguese-language support
Data stored securely
Servers protected to international standards

What This Policy Covers

The key areas of your privacy that 999xp4 is committed to protecting

Data We Collect

We explain exactly what information 999xp4 collects during registration, when making deposits via Pix or boleto, and while using the platform — never collecting anything beyond what is strictly necessary.

Purpose of Use

Every piece of data we collect has a specific, declared purpose: account operation, transaction processing, customer support, and compliance with legal obligations. Nothing more.

Data Sharing

999xp4 does not sell or rent player data. Sharing occurs only with essential service providers — such as Pix payment processors — and when required by law.

Information Security

256-bit SSL encryption, optional two-factor authentication, continuous monitoring for unauthorized access, and a dedicated information security team — your data is in safe hands.

Your Rights Under the LGPD

You have the right to access, correct, port, and request the deletion of your data at any time. 999xp4 responds to all requests within 15 business days through Portuguese-language support.

Cookies & Technologies

We use cookies to keep your session active, personalize your experience, and understand how the platform is used. You can manage cookie preferences in your browser settings.

This Privacy Policy describes how the 999xp4 collects, uses, stores, and protects the personal information of users who access and use the services available at 999xp4.net. By creating an account or using any feature of the platform, you agree to the practices described in this document.

This document was drafted in accordance with the General Data Protection Law (Law No. 13,709/2018 — LGPD) and other applicable Brazilian data protection regulations. We are committed to handling your information with responsibility, transparency, and respect — because we believe privacy is not optional.

If you have any questions about this policy, please contact our team before using our services. Your privacy is our responsibility — and we take that seriously at 999xp4.


1

Who We Are & How to Identify Us

999xp4 is an online entertainment platform offering casino, Sports Betting, poker, jackpot, and Live Casino to Brazilian players. For the purposes of this Privacy Policy, 999xp4 acts as personal data controller of its users, as defined by the LGPD.

As data controller, 999xp4 is responsible for determining the purposes and means of processing the personal data collected on the platform. We have appointed a Data Protection Officer (DPO) who can be reached at privacidade@999xp4.net for any questions related to privacy and data protection.

  • Platform: 999xp4.net
  • Role: Personal Data Controller (LGPD, art. 5, VI)
  • DPO: privacidade@999xp4.net
  • General support: suporte@999xp4.net

2

Personal Data We Collect

999xp4 collects only the data strictly necessary to provide its services securely. Collection takes place in different ways, depending on how you interact with the platform:

Data provided directly by you:

  • Full name and date of birth
  • CPF (Cadastro de Pessoa Física)
  • Email address and mobile phone number
  • Full residential address
  • Identity documents submitted for KYC verification (national ID, driver's license, or passport)
  • Pix key, bank details, or card information used for transactions

Data collected automatically during use:

  • IP address and approximate location data
  • Browser or application type and version
  • Operating system and device type (mobile, tablet, computer)
  • Browsing history within the 999xp4 platform
  • Record of bets placed, deposits, and withdrawals made
  • Cookie and similar technology data (detailed in section 9)

999xp4 does not collect credit or debit card details directly — this information is processed by PCI DSS-certified payment partners, and card data never passes through 999xp4's servers.


3

How and Why We Use Your Data

Every piece of data collected by 999xp4 has a specific, declared purpose. We do not use your information for anything beyond what is described below, and any new use not covered by this policy will be communicated to you in advance.

Purpose Data Used Legal Basis (LGPD)
Account Creation and Management Full name, CPF, email, phone number Contract performance
Identity verification (KYC) Documents, CPF, selfie Legal obligation
Pix & payment processing Bank account details, Pix key Contract performance
Customer support Account history, email, phone number Contract performance
Fraud prevention and anti-money laundering IP, financial history, documents Legal obligation / Legitimate interest
Promotional communications (with consent) Email, phone number Consent
Platform improvement Anonymized browsing data Legitimate interest
Compliance with court orders As required by court order Legal obligation

999xp4 never uses your data to build gaming behavior profiles aimed at predatorily increasing play time. On the contrary — behavioral data is also used to identify signs of problem gambling and offer proactive support when needed.


4

Legal Basis for Processing (LGPD)

All personal data processing carried out by 999xp4 is grounded in one or more legal bases established by the LGPD. Below are the bases we rely on and when each one applies:

  • Contract performance (art. 7, V): primary basis for account operation, Pix deposits, withdrawals, and customer support
  • Legal obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance, and fulfillment of court orders
  • Consent (art. 7, I): sending marketing communications and promotions by email or WhatsApp — you may withdraw consent at any time
  • Legitimate interest (art. 7, IX): fraud prevention, platform security, and experience improvements using anonymized data
  • Protection of life (art. 7, VII): identifying risk situations related to responsible gambling, when necessary

At any time, you can find out which legal basis applies to each data processing activity carried out by 999xp4 by contacting our DPO at privacidade@999xp4.net.


5

Data Sharing with Third Parties

999xp4 does not sell, rent, or trade users' personal data with third parties for advertising or commercial purposes. Data is shared only in the following situations, always with the goal of enabling platform operations or fulfilling legal obligations:

  • Payment processors: minimum data required to process transactions via Pix, boleto, credit/debit card, Mercado Pago, and PicPay. All partners comply with PCI DSS standards
  • Game providers: anonymous session identifier — never complete personal data — to enable the proper functioning of games from partner providers
  • Identity verification services: documents and personal data to certified KYC partners when required for account verification
  • Competent authorities: when required by court order, regulatory authority directive, or to fulfill a legal obligation under Brazilian law
  • Support platforms: contact details for chat and email tools used exclusively for 999xp4 customer support

All third parties with access to personal data from 999xp4 users are contractually required to handle that information with the same level of security and confidentiality demanded by the LGPD and this policy.


6

International Data Transfers

In certain situations — particularly those related to server infrastructure and support tools — personal data collected by 999xp4 may be transferred to servers located outside Brazil. When such a transfer occurs, 999xp4 ensures that:

  • The destination country provides a level of data protection compatible with that required by the LGPD
  • Specific contractual data protection clauses are in place with the recipient
  • Data transfers are limited to the categories strictly necessary for the service being provided
  • Your data remains protected by your rights under the LGPD regardless of where it is stored

For details on which countries receive 999xp4 user data and what safeguards apply, please contact our DPO at privacidade@999xp4.net.


7

How Long We Retain Your Data

999xp4 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods. The main retention criteria are:

  • Active account data: retained for as long as the account is active and for up to 5 years after closure, as required by tax and anti-money laundering legislation
  • Financial transaction history: retained for a minimum of 5 years from the date of each transaction, in accordance with Brazilian tax legislation
  • Identity verification (KYC) records: retained for at least 5 years after account closure
  • Customer support data: support records kept for 2 years for quality assurance and dispute resolution purposes
  • Marketing data (with consent): retained until consent is withdrawn by the user

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified.


8

How We Protect Your Data

The security of 999xp4 user information is a technical and organizational priority. We implement multiple layers of protection to keep your data safe from unauthorized access, leaks, or misuse.

The main technical security measures adopted by 999xp4 include:

  • 256-bit SSL encryption: all communications between your device and 999xp4 servers are end-to-end encrypted
  • Secure password storage: passwords are never stored in plain text — we use modern hashing algorithms with salting
  • Two-factor authentication (2FA): optionally available to all users, recommended for greater account security
  • 24/7 monitoring: automated systems for detecting unauthorized access attempts, with immediate response from the security team
  • Internal access control: only staff with a legitimate need are granted access to personal data, always with a full audit trail
  • Regular security testing: audits and penetration tests conducted periodically by specialized teams

In the event of a security incident that may affect users' personal data, 999xp4 is committed to notifying the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes set out in the LGPD. You will be notified directly if there is any real risk to your privacy.


9

Cookies and Tracking Technologies

999xp4 uses cookies and similar technologies to improve your experience on the platform and ensure that certain essential features work correctly. There are different types of cookies, each serving a distinct purpose:

  • Essential cookies: required to keep your session active and enable basic account functionality — login, language preferences, security. They cannot be disabled without affecting your ability to use the platform
  • Performance cookies: collect aggregated and anonymized data on how users navigate 999xp4, helping identify pages with issues and opportunities for improvement
  • Functionality cookies: allow 999xp4 to remember your preferences — such as favorite games or display settings — to personalize your experience
  • Marketing cookies (with consent): used only when you have consented to receive personalized communications — allows us to show you relevant promotions within the platform

You can manage and disable non-essential cookies at any time in your browser settings — Chrome, Firefox, Safari, Edge — or through the mobile app. Disabling certain cookies may limit some platform features, but you will still be able to access your account.

In the 999xp4 app for Android and iOS, you can manage tracking permissions directly in your phone's privacy settings, with no need to touch the browser.


10

Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 999xp4, a set of rights that may be exercised at any time. We respect these rights and have clear processes in place to fulfill them within the legally required timeframes.

Right of Access
You can request a copy of all personal data that 999xp4 holds about you, including how it was collected and for what purpose.
Right to Correction
If any of your information is incorrect, incomplete, or out of date — such as your address, phone number, or email — you can request an immediate correction.
Right to Erasure
You may request the deletion of your personal data when processing is no longer necessary or when you withdraw your consent — except where legal retention obligations apply.
Right to Data Portability
You may request your data in a structured, machine-readable format to transfer it to another service provider, where technically feasible.
Right to Object
You may object to processing based on legitimate interest when you have relevant personal reasons — for example, to stop receiving promotional communications.
Withdrawal of Consent
When processing is based on your consent — such as receiving promotional emails — you may withdraw it at any time with no impact on your account access.

To exercise any of these rights, please contact us by email privacidade@999xp4.net or through 24-hour Portuguese-language support. The response deadline is up to 15 business days from the date the request is received.


11

Minors

999xp4 services are intended exclusively for individuals aged 18 years of age or older. 999xp4 does not intentionally collect personal data from anyone under 18 and has controls in place to prevent minors from registering on the platform.

Should 999xp4 become aware that it has collected personal data from a user under the age of 18, the following actions will be taken immediately:

  • Immediate suspension of the identified account
  • Deletion of all associated personal data
  • Refund of any deposited amounts to the original bank account via Pix
  • Disclosure to competent authorities, where applicable

If you become aware that a minor is using 999xp4, please contact our support team immediately via live chat or at suporte@999xp4.net.


12

Changes to this Privacy Policy

999xp4 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or new platform features. All relevant changes will be communicated with a minimum advance notice of 7 days before taking effect, through:

  • Email notification to the address registered on the account
  • A visible notice on the 999xp4 platform with a summary of the changes
  • Update of the date and version at the top of this page

Continued use of 999xp4's services after changes take effect will be considered acceptance of the updated version. The current version of this policy is always available at 999xp4.net/privacy-policy.

This Privacy Policy was last updated on January 10, 2026. This is version 3.1 of the document.


13

Contact, DPO & National Authority

For any questions related to privacy, data protection, or exercising your rights under the LGPD, you can contact 999xp4 through the following channels:

  • Data Protection Officer (DPO): privacy@999xp4.net — response within 15 business days
  • Live chat: available 24h on the platform — for urgent account security issues
  • General support: suporte@999xp4.net — response within 2 hours
  • Help center: Frequently Asked Questions with answers to the most common privacy questions

If you believe 999xp4 has not adequately addressed your personal data request, you have the right to file a complaint with the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.

This policy is governed by Brazilian law, in particular Law No. 13,709/2018 (LGPD). Any disputes will be resolved in the courts of São Paulo — SP.

Frequently Asked Questions About Privacy at 999xp4

Questions our support team frequently receives, answered directly

No, not at all. 999xp4 does not sell, rent, or trade users' personal data to third parties for any purpose. Data is shared only with partners essential to operating the platform — such as Pix payment processors and game providers — and even then, only the minimum necessary data is shared, under contractual obligations of confidentiality and security. Any use of your data beyond what is described in this policy would only occur with your prior, express consent.

To request deletion of your data, contact us at privacy@999xp4.net or via live chat on the platform. Response time is up to 15 business days. It's important to know that certain categories of data — particularly financial records and verification documents — must be retained for up to 5 years under Brazilian tax and anti-money laundering regulations, even after account closure. When you submit a deletion request, our team will explain exactly which data can be removed immediately and which must be kept due to legal obligations.

No. 999xp4 does not use gaming behavior profiles to pressure or nudge users into playing more than they would want to. Behavioral data is used to improve the platform, personalize the experience in a positive way, and — most importantly — to identify signs of problem gambling and provide proactive support when needed. We believe entertainment is only worthwhile when it is healthy, and the ethical use of data is central to that commitment.

The Pix key linked to your account is stored in encrypted form to enable future withdrawals without requiring you to re-enter it each time. It is never shared with any third party beyond the payment processing system required to execute the transfer. 999xp4 does not store credit or debit card details — that data is processed directly by PCI DSS-certified payment partners. If you wish, you may request the removal of the Pix key associated with your account at any time by contacting support.

Every promotional email sent by 999xp4 includes an unsubscribe link in the footer — clicking it removes you from the marketing communications list immediately. You can also manage your communication preferences in your account settings on the platform, or contact support to request manual removal. Revoking marketing consent has no effect whatsoever on your account, deposits, withdrawals, or access to games.
A Summary of Our Privacy Commitment

999xp4 collects only the data necessary to operate the platform securely and meet legal obligations in Brazil. Your personal and financial information is protected by 256-bit SSL encryption, is never sold to third parties, and is processed in accordance with the General Data Protection Law (LGPD). You can access, correct, or request the deletion of your data at any time. For any questions, contact our DPO at privacidade@999xp4.net.

Your Privacy Is Protected at 999xp4

Playing on 999xp4 means having peace of mind that your personal and financial data is protected. Sign up, deposit via Pix with confidence, and enjoy the best of casino and Sports Betting built for Brazil.

+18 · Betting can be addictive · Responsible Gambling

Português