69ss Privacy Policy – How We Protect Your Data

69ss is the Sports Betting and online casino platform available at 69ss.best, designed exclusively for Brazilian bettors aged 18 and over. For the purposes of this Privacy Policy, 69ss is the controller of personal data collected in connection with your use of the platform, as defined under the General Data Protection Law (LGPD).

As data controller, 69ss is responsible for determining the purposes and means of processing your data, ensuring that processing is carried out on an adequate legal basis, and responding to data subject requests within the statutory timeframes.

This Privacy Policy applies to all users of the 69ss platform, including registered bettors, site visitors, and anyone who interacts with support via chat, WhatsApp, or email.

69ss collects personal data in the following situations and categories:

Credit and debit card data is processed through a PCI-DSS certified payment gateway and is never stored on 69ss servers in readable form. Only tokens generated by the payment processor are retained to facilitate future transactions.

Personal data collected by 69ss is used exclusively for the following purposes:

• Account creation and management: Verify your eligibility (18 years or older, Brazilian resident with a valid CPF), and create and maintain your bettor profile on the platform.
• Transaction processing: Process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer; process withdrawals via Pix to the account linked to the holder's CPF.
• Identity verification (KYC): Meet regulatory anti-money laundering obligations, verify identity prior to the first withdrawal, and confirm that the account belongs to a real, eligible individual.
• Customer support: Answer questions, resolve issues with bets, withdrawals, or bonuses, and record support history for continuous service improvement.
• Security and fraud prevention: Detect suspicious behavior, prevent duplicate account creation, identify bonus abuse attempts, and protect the platform's financial integrity.
• Personalization: Deliver relevant promotions and content based on betting history — such as highlighting Brasileirão or Libertadores matches for users who frequently bet on Brazilian football.
• Operational communications: Send notifications about transactions, terms updates, bet confirmations, and security alerts via email and mobile.
• Marketing communications: Send promotions, bonuses, and updates — only with explicit consent and with an unsubscribe option in every communication.
• Legal compliance: Comply with obligations imposed by Brazilian law, including the LGPD and Central Bank regulations related to financial transactions.
• Responsible gambling: Monitor usage patterns that may indicate problematic behavior and trigger responsible gambling tools when necessary.

LGPD requires that all personal data processing have a defined legal basis. 69ss processes your data under the following grounds established in Article 7 of LGPD:

• Contract performance (art. 7, V): Processing is necessary to perform the service agreement entered into at registration. This includes processing bets, Pix deposits, withdrawals, and operational communications.
• Compliance with a legal obligation (art. 7, II): Data required to fulfill legally imposed obligations, such as identity verification mandated by anti-money laundering rules and betting sector regulations in Brazil.
• Legitimate interest (art. 7, IX): Use of browsing and behavioral data for platform security, fraud prevention, and user experience improvement — always within the bounds of 69ss's legitimate interests and without prejudice to data subjects' rights.
• Consent (art. 7, I): Marketing communications, non-essential personalization, and advertising cookies — always with explicit consent, which can be withdrawn at any time.

69ss does not sell bettors' personal data. Data is shared with third parties only in the situations described below, and only with parties that operate under contractual obligations of confidentiality and data protection equivalent to our own:

• Payment processors: Financial data is shared with Pix processors, credit/debit card operators, PicPay, and Mercado Pago strictly to process transactions authorized by you.
• Identity verification providers: KYC documents are processed by certified identity verification providers operating under the same security standards as 69ss.
• Casino game providers: Betting history for games provided by partners such as Evolution Gaming, Pragmatic Play, PG Soft, and others is shared with those partners exclusively for result settlement and RTP control purposes.
• Regulatory and judicial authorities: 69ss shares data with competent authorities when required by law, court order, or request from a Brazilian regulatory agency. In such cases, we notify the data subject whenever legally permitted.
• Technology infrastructure providers: Data is stored on certified cloud servers operating under data processing agreements that comply with the LGPD.

Under no circumstances is your personal data shared for third-party advertising purposes or sold to data brokers, marketing lists, or any other entity that would use your information for purposes other than those exclusively described above.

69ss uses cookies and similar technologies to enhance your platform experience, ensure security, and collect anonymous browsing data. The types of cookies used are:

• Essential cookies: Required for the platform's core functionality — maintaining authenticated sessions, language preferences, and account settings. These cannot be disabled without affecting your ability to use the service.
• Performance cookies: Collect anonymous data about how you navigate the platform — pages visited, session duration, errors encountered — to identify areas for improvement. They do not identify you individually.
• Functionality cookies: They remember preferences such as displayed odds, favorite markets, and live betting settings, personalizing your experience so you never have to reconfigure everything from scratch.
• Security cookies: Used to detect suspicious behavior, prevent unauthorized account access, and identify fraud attempts or bot activity.

You can manage your cookie preferences in your browser settings at any time. Disabling essential cookies may prevent access to platform features such as login and placing bets.

69ss adopts technical and organizational measures to protect bettors' personal data against unauthorized access, accidental loss, destruction, or improper disclosure. The main security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between the user and the platform's servers.
• Encryption of sensitive data at rest on servers, including identity verification documents.
• Role-based access control (RBAC): only staff with a legitimate need may access specific users' personal data.
• Two-factor authentication (2FA) available for bettor accounts and mandatory for internal administrative access.
• Continuous monitoring of suspicious activity on servers with automatic alerts to the security team.
• Periodic security audits carried out by an internal team and independent third parties.
• Credit/debit card data tokenization — no payment data is stored in readable format on 69ss systems.

In the event of a security incident that may affect your personal data, 69ss will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by LGPD, including information about the nature of the incident, the data involved, and the measures taken.

69ss retains bettors' personal data only for as long as necessary for the purposes described in this Policy or to comply with legal obligations. General retention periods are:

• Active account data: Retained for the full duration of the account and as long as there is a balance or pending bets to be settled.
• Financial transaction data: Retained for 5 years after the transaction, in accordance with Brazilian tax legislation and anti-money laundering requirements.
• KYC documents: Retained for 5 years after account closure, in accordance with regulatory requirements.
• Betting history: Retained for 5 years for audit and regulatory compliance purposes.
• Support communications: Retained for 2 years after the support interaction is closed.
• Browsing data and cookies: Anonymized or deleted within 90 days of collection.

After account closure and once mandatory retention periods have been met, data is permanently deleted or irreversibly anonymized. A request to delete an account does not interrupt retention periods required by legal obligation.

The General Data Protection Law (LGPD) grants you, as the data subject, the following rights regarding personal data processed by 69ss:

Requests will be responded to within up to 15 business days from receipt of the complete request and confirmation of the data subject's identity. Exercising these rights is free of charge. If 69ss issues a reasoned denial, the data subject may appeal to the National Data Protection Authority (ANPD).

Some of 69ss's technology partners — such as cloud infrastructure providers and casino game partners — may be located outside Brazil. In such cases, any international transfer of personal data is carried out with the appropriate safeguards required by the LGPD, including:

• Data processing agreements with protection clauses equivalent to those of the LGPD.
• Transfers only to countries with an adequate level of data protection recognized by the ANPD, or subject to specific contractual safeguards.
• Adoption of standard contractual clauses approved by relevant data protection authorities.

69ss does not transfer data to countries that do not offer adequate protection guarantees without the proper legal basis and contractual safeguards. Information about specific transfers may be requested through the privacy channel.

69ss services are intended exclusively for users aged 18 and over. 69ss does not knowingly collect personal data from minors and does not permit minors to use the platform.

At registration, users must confirm they are at least 18 years old, and mandatory identity verification (KYC) prior to the first withdrawal confirms legal age through a government-issued photo ID. Any account identified as belonging to a user under 18 is immediately closed, with deposited funds returned following an investigation.

If you become aware that a minor has misused the 69ss platform, please contact us immediately at contato@69ss.best or through the support chat so we can take the necessary action.

69ss may update this Privacy Policy periodically to reflect changes in legislation, our data processing practices, or the services offered. Any material changes will be communicated at least 7 days in advance through:

• Notification in the account dashboard of all registered users.
• Email sent to the address registered on the platform.
• Update of the "Last updated" field at the top of this page.

Continued use of the platform after the new version's effective date constitutes acceptance of the changes. If you disagree with the changes, you may close your account and request deletion of your data as described in the preceding sections.

A historical version of this Policy is available upon request through the privacy channel.

To exercise your rights as a data subject, clarify questions about this Policy, or report any privacy concern at 69ss, please use the channels below:

• Privacy & data channel (DPO): privacidade@69ss.best — for access, correction, deletion, portability, and other LGPD rights requests. Response time: up to 15 business days.
• General support: contato@69ss.best — for general questions about the platform that are not specific to personal data.
• Live chat: Available directly on the 69ss website, 24 hours a day, 7 days a week, for urgent matters.

The Data Protection Officer (DPO) of 69ss is responsible for ensuring that personal data processing on the platform complies with LGPD and for serving as the point of contact between 69ss, data subjects, and the National Data Protection Authority (ANPD).