Kkk999 Privacy Policy – Data Protection and LGPD Compliance

1 Who We Are — The Data Controller

The controller of the personal data processed under this Policy is the kkk999, a Sports Betting and online casino platform operated for the Brazilian market, accessible at kkk999.click. For purposes of the LGPD, kkk999 is the data controller — meaning the entity that makes decisions about the processing of your personal data.

Kkk999 operates exclusively in BRL (R$) and serves users residing in Brazil, in compliance with applicable Brazilian legislation, including the LGPD (Law No. 13,709/2018), the Internet Civil Framework (Law No. 12,965/2014), and the Consumer Protection Code (Law No. 8,078/1990).

For privacy and data processing inquiries, the direct contact channel for kkk999's Data Protection Officer (DPO) is contato@kkk999.click, with a response time of up to 15 business days for requests related to your rights as a data subject.

2 Data We Collect

Kkk999 collects personal data at various points during your interaction with the platform. Below are the categories of data collected and the situations in which they arise:

Credit and debit card data is never stored directly on kkk999's servers — it is tokenized by certified payment processors operating in compliance with PCI-DSS standards. kkk999 only has access to the secure token, never to the full card number.

3 Purpose of Processing

Personal data collected by kkk999 is used exclusively for the following purposes:

• Account creation and management: verify your identity, confirm you are of legal age (18+), link your account to your CPF, and ensure each user has only one active account on the platform;
• Payment processing: receive deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as process withdrawals to Brazilian bank accounts;
• Service operation: record Sports Betting wagers, Live Casino sessions, results history, and financial transactions in your account;
• Fraud prevention: identify suspicious activity, use of multiple accounts, bonus abuse attempts, and compliance with anti-money laundering regulations;
• Responsible gambling: monitor usage patterns that may indicate problematic behavior and trigger available support tools when necessary;
• Communications: send transaction confirmations, bet notifications, promotions, and platform updates — with the option to unsubscribe at any time;
• Platform improvement: analyze aggregated and anonymized usage data to improve the experience, performance, and services offered;
• Compliance with legal obligations: respond to requests from competent Brazilian authorities within the applicable legal limits.

4 Legal Basis for Processing (LGPD)

Every instance of personal data processing carried out by kkk999 has a legal basis defined by the LGPD. The applicable bases are:

• Contract performance (Art. 7, V): processing necessary for the provision of contracted services — account creation, bet processing, deposits and withdrawals in BRL;
• Compliance with a legal obligation (art. 7, II): identity verification, minimum age control, anti-money laundering compliance, and responses to requests from Brazilian authorities;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, analysis of usage patterns for responsible gambling, and service improvement;
• Consent (art. 7, I): sending marketing communications and promotions. Consent may be withdrawn at any time without affecting access to the platform's other services.

Kkk999 internally records the applicable legal basis for each data processing operation, as required by Article 37 of the LGPD, and keeps this record available for audit and accountability purposes.

5 Data Sharing with Third Parties

Kkk999 does not sell, rent, or trade your personal data. Sharing occurs only in the following cases and with the categories of partners listed below:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED. These partners receive only the information required for each transaction and are contractually obligated to maintain confidentiality and comply with the LGPD;
• Live casino game providers: to operate blackjack, baccarat, roulette, and game show tables. Data sharing is limited to an anonymized identifier and the betting history required for game operation;
• Identity verification services: to verify CPF, date of birth, and document authenticity during the account verification process;
• Competent Brazilian authorities: when required by court order or request from the Central Bank, Receita Federal, the Financial Activities Control Council (COAF), or other entities with legal authority to request such information;
• Analytics and security services: for fraud detection, prevention of multiple accounts, and security analysis. Shared data is pseudonymized wherever possible.

6 Data Storage and Security

Personal data belonging to kkk999 users is stored on servers with the following security controls:

• Encryption at rest (AES-256) for sensitive data stored in our databases;
• Encryption in transit (TLS 1.3) for all communications between the user's device and our servers;
• Role-based access control (RBAC) — only employees with a legitimate need are granted access to identifiable personal data;
• Access logs with periodic audits to identify unauthorized access;
• Encrypted backups with controlled retention and secure disposal after the legal period;
• Penetration testing and vulnerability assessments carried out periodically by specialized teams.

In the event of a security incident that may affect your personal data, kkk999 will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — generally within 72 hours of becoming aware of the incident where there is significant risk.

7 Cookies and Tracking Technologies

Kkk999 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize content and communications. The categories of cookies used are:

• Essential cookies: required for the platform's basic operation — maintaining login sessions, security, and navigation between sections. These cannot be disabled;
• Performance cookies: collect anonymized data on how users interact with the platform (most visited pages, session duration, errors encountered). They help improve performance and stability;
• Functional cookies: store user preferences such as language, favorite odds, and display settings to deliver a personalized experience;
• Marketing cookies: used, with your consent, to display relevant communications. You may decline these cookies without affecting your use of kkk999's core services.

You can manage cookie preferences in your browser settings. Disabling essential cookies may affect how the platform functions. Disabling other cookie types does not impact access to Sports Betting, Live Casino, or any other core kkk999 feature.

8 Data Retention and Deletion

Kkk999 retains personal data for as long as necessary to fulfill the purposes described in this Policy, in compliance with applicable legal retention periods. The general retention criteria are:

• Registration and identification data: retained for as long as the account remains active and for up to 5 years after closure, in accordance with Brazilian tax and regulatory obligations;
• Financial transaction history: retained for up to 5 years after the last transaction, in accordance with Brazilian tax legislation and Central Bank of Brazil regulations;
• Betting and gaming history: available to the user for 12 months in the account dashboard. Anonymized aggregate data may be retained for longer periods for analytical purposes;
• Security and access logs: retained for 6 months for incident investigation purposes;
• Support communications: kept for 2 years for dispute resolution and service improvement.

After the applicable retention period, data is securely deleted or irreversibly anonymized. Requests for early deletion are assessed on a case-by-case basis and may be partially fulfilled when a legal minimum retention obligation applies.

9 Your Rights as a Data Subject

The LGPD grants data subjects a set of rights that kkk999 is fully committed to upholding. You may exercise them at any time by emailing contato@kkk999.click:

• Access (art. 18, II): request a copy of the personal data kkk999 holds about you, including what categories of data, for what purposes, and with whom it has been shared;
• Correction (art. 18, III): request the correction of incomplete, inaccurate, or outdated data — such as your name, date of birth, email address, or postal address;
• Deletion (art. 18, VI): request the deletion of data processed on the basis of your consent. Data retained under a legal obligation cannot be deleted before the applicable minimum retention period;
• Portability (Art. 18, V): receive your data in a structured, interoperable format for transfer to another controller, where technically feasible;
• Objection (art. 18, IX): object to processing carried out on the basis of legitimate interest when no overriding legitimate reason exists;
• Consent withdrawal (art. 18, IX): withdraw consent for marketing communications at any time, without affecting your use of other services;
• Sharing information (art. 18, VII): obtain information about the public and private entities with whom kkk999 has shared your data.

10 Data of Minors

Kkk999 is a platform exclusively for users aged 18 and over residing in Brazil. The collection and processing of data from minors are strictly prohibited and kkk999 performs active age verification during registration and the identity verification process to prevent minors from accessing the platform.

Should kkk999 become aware that it has inadvertently collected data from a user under 18, the following measures will be taken immediately: account closure, deletion of all collected data, and refund of any available balance to the legal guardian, provided ownership is verified. Parents or guardians who identify a minor accessing the platform should contact contato@kkk999.click immediately.

11 International Data Transfers

Some of the service providers used by kkk999 — such as cloud infrastructure providers, fraud prevention services, and live casino game platforms — may be located outside Brazil. When this is the case, kkk999 ensures that any international transfer of personal data meets the requirements of the LGPD, specifically:

• Transfer to countries with adequate data protection legislation, as recognized by the ANPD; or
• Use of standard contractual clauses and equivalent safeguards approved by the ANPD, pursuant to art. 33 of the LGPD; or
• Adoption of technical and organizational measures that ensure a level of protection equivalent to that required by Brazilian law.

Regardless of where our servers are located, your data continues to be processed in accordance with the rules of this Privacy Policy, and the rights guaranteed by the LGPD remain fully applicable.

12 Changes to this Privacy Policy

Kkk999 may update this Privacy Policy periodically to reflect changes in the services offered, applicable Brazilian legislation, or data processing practices. The date of the most recent update is shown at the top of this page.

When significant changes occur — those that affect your rights as a data subject or modify the purpose of your data processing — kkk999 will notify users via their registered email at least 7 days before the new terms take effect. Changes required by law may take effect immediately, with simultaneous notification.

Continued use of the kkk999 platform after an update's effective date constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the new terms take effect, at no additional cost.

13 Contact, DPO & Complaints Channel

To exercise your rights as a data subject, clarify questions about this Policy, or report any privacy or data processing concern at kkk999, please use the channels below:

If you contact kkk999 and do not receive a satisfactory response within the established timeframe, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.