Privacy Policy of 89game: your data protected

To exercise your rights as a data subject or for any privacy-related matter, the direct contact channel with 89game is suporte@89game.best or the live chat available 24 hours a day on the platform, in Brazilian Portuguese.

This Privacy Policy applies to all services offered by 89game, including Sports Betting, Live Casino, slots, crash games, Blackjack, and any other feature available at 89game.best.

89game collects personal data at different points during your interaction with the platform. Below, we detail each data category, its source, and the associated purpose:

89game does not collect sensitive data such as health information, sexual orientation, or political or religious affiliation. Credit and debit card financial data is tokenized by the payment processor, and 89game never stores the full card number.

The data collected by 89game is used exclusively for the following purposes:

The LGPD requires that every processing of personal data have a specific legal basis. 89game relies on the following legal bases set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): account operation, processing of deposits and withdrawals via Pix and other Brazilian payment methods, management of Sports Betting and casino games. These processes are necessary for the service to function;
• Compliance with a legal obligation (art. 7, II): identity verification (KYC), anti-money laundering compliance (AML/CFT), fulfillment of court and regulatory orders, and record retention for the minimum period required by law;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, monitoring of gambling behavior for responsible gambling purposes, aggregated data analysis for product improvement;
• Consent (art. 7, I): sending marketing communications and promotions by email, SMS, or push notification. You may withdraw this consent at any time without affecting your access to any other services.

89game may share personal data with the following categories of partners, strictly limited to what is necessary for the stated purpose:

• Payment processors: to process deposits via Pix, boleto bancário, credit or debit card, PicPay and Mercado Pago, and TED transfers through Brazilian banks (Nubank, Itaú, Bradesco, Banco do Brasil). These partners have access only to the data required to complete the transaction;
• Game providers: live casino, slots, crash games, and blackjack software providers require session identifiers to validate results and calculate balances. No personal identity data beyond what is strictly necessary is shared;
• Analytics and security tools: fraud detection and responsible gambling behavior analysis software providers, engaged to protect users on the platform;
• Judicial and regulatory authorities: when required by court order, regulatory decision, or legal obligation under Brazilian law — such as the Financial Activities Control Council (COAF) in cases of suspected money laundering;
• External auditors: in the context of compliance audits, RNG certification, and licensing checks, with confidentiality clauses in place.

All third-party vendors that process personal data on behalf of 89game are contractually required to comply with LGPD guidelines and maintain security standards consistent with those of the platform.

89game uses cookies and similar technologies to ensure the platform works correctly, deliver a personalized experience, and collect analytics data that helps us continuously improve the service.

The types of cookies used by 89game are:

89game does not use third-party tracking cookies for retargeting advertising purposes. We do not share browsing behavior data with advertising networks.

You can configure your browser to reject all cookies, but doing so may prevent access to certain platform features, including logging in and placing bets.

89game implements technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. The key safeguards in place include:

• 256-bit SSL encryption across all communications between your device and 89game's servers;
• Data encrypted at rest on the platform's servers, with encryption keys managed securely;
• Tokenization of credit and debit card data — the full card number is never stored by 89game;
• Strict access controls: only employees with a specific operational need have access to identifiable personal data, with a full log of all accesses;
• Two-factor authentication (2FA) available for your account, with an additional layer of protection at login;
• 24×7 security monitoring with automatic alerts for suspicious access attempts;
• Regular backups with encrypted copies stored separately from the primary data;
• Penetration testing periodic assessments conducted by companies specializing in web application security.

To keep your account secure, we recommend using a strong, unique password for 89game, enabling two-factor authentication in your account settings, never sharing your credentials with anyone, and contacting support immediately if you suspect unauthorized access.

89game retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with applicable minimum legal retention periods. The criteria used to determine retention periods include:

• While your account is active on the platform, all data required for its operation is retained;
• Financial transaction data (deposits and withdrawals via Pix and other methods) is retained for a minimum of 5 years after the transaction, as required by Brazilian anti-money laundering legislation and tax regulations;
• Betting records and game history are retained for 3 years after account closure, for dispute resolution and regulatory compliance purposes;
• Support communication data is retained for 2 years for quality assurance and complaint resolution;
• Analytics cookies have a maximum validity of 13 months from the moment of installation.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized, making it impossible to identify the data subject. Deletion requests from data subjects will be honored within the limits permitted by law — data whose retention is legally required cannot be deleted before the minimum period, even upon request.

Some of 89game's technical partners — casino game providers, security analytics tools, and cloud infrastructure providers — may process data on servers located outside Brazil. When this occurs, 89game ensures that international transfers of personal data are carried out only to countries or organizations that offer a level of protection consistent with the LGPD.

The safeguards adopted for international transfers include:

• Standard contractual clauses that impose data protection obligations on the recipient equivalent to those required under the LGPD;
• Data processing agreements (DPA) with all vendors that receive data from Brazilian users;
• Preferential selection of providers certified under internationally recognized privacy frameworks.

89game does not transfer personal data to countries without adequate data protection unless the contractual and technical safeguards described above are in place.

The General Data Protection Law (Art. 18) grants you a concrete set of rights over your personal data. 89game is committed to responding to all rights requests within 15 calendar days from the date of receipt:

If you believe a minor has created an account on 89game or that we have inadvertently collected data from someone under 18, please contact our support team immediately at suporte@89game.best. Once verified, the account will be closed immediately and the minor's data will be deleted from our systems as soon as possible, subject only to legally required retention periods.

89game may send communications about promotions, bonuses, featured tips, new casino and e-sports catalog additions, and other relevant offers for Brazilian players. These are sent based on your consent, given at the time of registration or through your account preference settings.

You can manage your communication preferences at any time:

• Via the "unsubscribe" present in all marketing emails sent by 89game;
• Through the notification settings in your platform account;
• By contacting support via live chat or by suporte@89game.best.

Opting out of marketing communications does not affect the delivery of essential transactional notifications — such as Pix withdrawal confirmations, account security alerts, and notices of changes to the Terms and Conditions, which are sent regardless of your marketing preferences.

89game may update this Privacy Policy periodically to reflect changes in Brazilian law, platform privacy practices, or the launch of new services. When updates are made:

• The "last updated" date at the top of this document will be revised;
• For significant changes that affect data subjects' rights, you will be notified by email at least 14 days in advance before the changes take effect;
• Minor clarifications or editorial corrections may be implemented without prior notice.

We recommend reviewing this Policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account before the effective date, as described in the Terms and Conditions.

89game has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for matters related to personal data processing, the exercise of data subject rights, and communication with the National Data Protection Authority (ANPD).

Beyond email, you can reach us through the platform's live chat, available 24/7 in Brazilian Portuguese — or via WhatsApp for matters that require closer follow-up.

If you prefer to file a complaint directly with the regulatory authority, you can visit the portal of the National Data Protection Authority (ANPD).