OFFICIAL DOCUMENT – LGPD

TT99 Casino Privacy Policy – Your Data Protected

The TT99 takes your data privacy seriously. This document explains what we collect, how we use it, who we share it with, and what your rights are as a data subject — in full compliance with Brazil's General Data Protection Law (LGPD – Lei nº 13.709/2018).

Last updated: January 2026
100% LGPD compliant
Your personal and financial data is protected by 256-bit SSL encryption and processed in accordance with Law No. 13,709/2018.

What this Policy guarantees for you

Six commitments from TT99 to protect your privacy and data security

256-bit SSL encryption across the board

All data transmitted between your phone or computer and TT99's servers is protected by 256-bit SSL encryption — the same standard used by Brazil's largest banks.

Your data is never sold

TT99 never sells, rents, or shares your personal data with third parties for commercial purposes. Data sharing occurs only with essential technical partners — and always under confidentiality agreements.

Full LGPD compliance

We operate in full compliance with the General Data Protection Law (Lei nº 13.709/2018). This means every data processing activity has a legal basis, is conducted transparently, and fully respects your rights as a data subject.

You control your preferences

From your TT99 account dashboard, you can manage which communications you'd like to receive, update your details at any time, and request deletion or portability of your information.

Restricted access to your data

Only TT99 staff and systems with a legitimate need have access to your data. Internal access controls and audit trails ensure that sensitive information is never accessed without justification.

Portuguese-language support to exercise your rights

Our Brazilian Portuguese support team is available 24 hours a day via live chat to handle requests for access, correction, deletion, or any other questions related to your personal data.

1. Introduction and Data Controller

This Privacy Policy describes how TT99 ("we", "our", "platform") collects, stores, uses, shares, and protects the personal data of users who register for and use the sports betting and online casino services available on our site.

The TT99 acts as data controller as defined by the General Personal Data Protection Law (LGPD – Law No. 13,709/2018), and is responsible for decisions regarding the processing of its users' personal data.

This Policy applies to all registered users and visitors of the website of TT99, regardless of the device used — mobile, tablet, or desktop. By creating an account or continuing to use the platform after this updated policy is published, you confirm that you have read and understood the contents of this document.

Quick summary: TT99 collects only the data needed to provide its services, protects that information with cutting-edge technology, and never sells it. You are in control of your data and can exercise your rights at any time.

2. Data We Collect

2.1 Data provided directly by you

By creating an account and using the services of TT99, you provide us with:

  • Identification data: full name, date of birth, CPF, RG or CNH number;
  • Contact details: email address, mobile number, and full residential address including zip code;
  • Financial data: Pix key, bank details for wire transfers (bank, branch, account), and credit or debit card data processed in a tokenized and secure manner;
  • Verification data (KYC): copies of identity documents and proof of address, when requested to fulfill regulatory obligations;
  • Preference data: preferred sports, configured betting limits, and communication preferences.

2.2 Automatically Collected Data

By browsing the TT99, we automatically collect:

  • Usage data: betting history, games accessed, amounts wagered, session times, and browsing preferences;
  • Technical data: IP address, browser type and version, operating system, device model, and unique device identifiers;
  • Location data: country and region of access, inferred from the IP address, for regulatory compliance purposes;
  • Cookie and similar technology data: as described in section 7 of this Policy.

2.3 Data from External Sources

In some cases, TT99 may receive data from external sources for fraud prevention and anti-money laundering purposes, such as credit bureaus and regulatory sanctions lists. This data is used exclusively for identity verification and legal compliance.

Data Category Examples Primary Purpose
Identification Full name, CPF, date of birth Registration and KYC verification
Contact Email, phone number, address Communication and document delivery
Financial Pix key, bank details, tokenized card Processing deposits and withdrawals
Behavioral Betting history, games accessed Personalization and responsible gaming
Technical IP, device, browser Security and fraud prevention

3. How We Use Your Data

The TT99 uses collected data exclusively for the following purposes:

  • Service delivery: creating and managing your account, processing sports bets, live casino games, slots, and crash games;
  • Payment processing: deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfers through banks such as Nubank, Itaú, Bradesco, and Banco do Brasil;
  • Identity verification and compliance (KYC/AML): compliance with regulatory requirements for the prevention of money laundering and terrorist financing;
  • Security and fraud prevention: detection of anomalous behavior, multiple accounts, and the use of bots or automation;
  • Customer support: answering questions, resolving issues, and providing technical support via live chat in Portuguese;
  • Account-related communications: deposit confirmations, bet results, security alerts, and balance notifications;
  • Promotional communications: sending offers, bonuses, and platform news — only to users who have consented to this type of communication;
  • Responsible gaming: monitoring of behavioral patterns that may indicate problem gambling, to trigger protective tools;
  • Ongoing improvement: analysis of usage metrics to improve the platform experience, fix bugs, and develop new products.

The TT99 does not use your data for automated decisions that produce significant legal effects without human review — except in cases of automatic fraud detection, which are always reviewed by our compliance team before any definitive action is taken on the account.

4. Legal Basis for Processing (LGPD)

As required by LGPD (Lei nº 13.709/2018), all personal data processing carried out by TT99 has a specific legal basis:

  • Contract performance (Art. 7º, V): processing necessary to deliver contracted services — registration, betting, payments, and support;
  • Compliance with a legal obligation (Art. 7º, II): KYC verification, anti-money laundering compliance, and adherence to Brazilian betting and gaming regulations;
  • Legitimate interest (Art. 7, IX): fraud prevention, platform security, analysis of aggregated usage metrics, and service improvement — always weighing the rights and expectations of data subjects;
  • Consent (Art. 7, I): sending promotional communications and use of non-essential cookies — revocable at any time by the user.

Important: You can withdraw consent for promotional communications at any time without affecting your access to TT99's core services. Simply update your notification settings in your account dashboard or reach out to our support team.

5. Data Sharing

The TT99 does not sell your data to third parties. Sharing occurs only in the following situations, all with a legitimate purpose and, where applicable, under confidentiality and data protection agreements:

5.1 Payment processing partners

To process deposits and withdrawals via Pix, boleto bancário, card, PicPay, and Mercado Pago, we share the necessary financial data with the respective payment processors. This data is transmitted in encrypted form and used solely to settle transactions.

5.2 Technology and Infrastructure Providers

We use cloud hosting, CDN, and customer support tools that may have technical access to certain data for platform operations. All such providers are engaged under data protection clauses and are prohibited from using your data for their own purposes.

5.3 Casino Game Providers

Slots, live blackjack, roulette, and other game providers receive only the minimum data required to register and validate game sessions — such as session identifier and amount wagered. Personally identifiable information is not shared with these providers beyond what is strictly necessary.

5.4 Authorities and Legal Obligations

The TT99 may share data with government authorities, regulatory bodies, or courts when required by law, by court order, or to fulfill regulatory obligations — including reporting suspicious transactions to COAF (Brazil's Financial Activities Control Council).

5.5 Business Transfer

In the event of a merger, acquisition, or corporate restructuring, user data may be transferred to the successor entity, which will be bound by the terms of this Privacy Policy.

6. Information Security

The TT99 implements robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL/TLS encryption in all communications between client and server;
  • Encrypted storage of sensitive data, including passwords (salted hash) and financial information;
  • Two-factor authentication (2FA) available as an additional security layer for user accounts;
  • Role-based access control — only staff with a legitimate need may access personal data, with full audit logging;
  • Continuous monitoring of unauthorized access attempts, attacks, and anomalous behavior on the platform;
  • Periodic security testing, including vulnerability scans and code reviews to identify and fix weaknesses before they can be exploited.

In the event of a security incident that may affect your data, TT99 will notify the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD, with clear information about what occurred and the steps taken to remediate the situation.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored in your browser or device when you access the TT99. They help us recognize your device on return visits and personalize your experience.

7.2 Types of Cookies We Use

  • Essential cookies: required for the platform's basic operation — such as maintaining your logged-in session, bet slip, and language preferences. They cannot be disabled without affecting your use of the service;
  • Performance cookies: collect aggregated, anonymized data on how users navigate the platform in order to identify areas for improvement. They do not identify you individually;
  • Functionality cookies: remember your preferences, such as favorite sports and odds display settings;
  • Marketing cookies: used, with your consent, to personalize communications and display relevant promotions on the platform. You may refuse or withdraw this consent at any time.

7.3 Cookie Management

You can manage your cookie preferences through the banner displayed on your first visit to the platform or by accessing the cookie settings in your account dashboard. You can also configure your browser to block or delete cookies, though this may affect certain platform features.

8. Data Retention

The TT99 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by applicable Brazilian law:

  • Registration and identification data: retained for as long as the account remains active and for a minimum of 5 (five) years after account closure, as required by anti-money laundering regulations (Law No. 9,613/1998);
  • Financial transaction history: kept for a minimum of 5 (five) years for audit, tax compliance, and regulatory purposes;
  • Betting history and game session records: maintained by 2 (two) years after completion, for dispute resolution and responsible gambling analysis purposes;
  • Support communication data: retained for 2 (two) years for quality control purposes and the resolution of any complaints;
  • Security and access logs: retained for 1 (one) year for incident investigation purposes.

Once retention periods have expired or a deletion request has been submitted by the data subject (where no legal retention obligation applies), data is securely and irreversibly erased from TT99.

9. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by TT99, the following rights, which may be exercised at any time via live chat or by email at contato@tt99.casino:

Access

Request confirmation that your data is being processed and obtain a copy of the information TT99 holds about you.

Correction

Request the update or correction of incomplete, inaccurate, or outdated information registered on the platform.

Deletion

Request the deletion of personal data processed on the basis of consent, where no legal retention obligation applies.

Portability

Request a copy of your data in a structured, machine-readable format for transfer to another service provider.

Consent Withdrawal

Withdraw consent for processing based on this legal ground — such as promotional communications — at any time.

Sharing Information

Obtain information about which third parties TT99 has shared or may share your personal data with.

Objection

Object to data processing carried out on the basis of legitimate interest, where you believe your rights should prevail.

Filing a complaint with the ANPD

If you are not satisfied with TT99's response, you may file a complaint with the National Data Protection Authority (ANPD).

To exercise any of these rights, contact our Data Protection Officer (DPO) as indicated in section 13. We respond to all requests within 15 (fifteen) calendar days, as per the timeframe established by the LGPD.

10. Data of Minors

The services of TT99 are intended exclusively to users aged 18 and over. The platform does not intentionally collect, store, or process personal data from minors.

If we become aware that data from a user under 18 has been collected without proper consent, we will take the necessary steps to remove that information from our systems as quickly as possible. If you suspect that a minor has created an account on TT99, please contact our support team immediately via live chat.

11. International Data Transfers

Some of the technical partners of TT99 — such as cloud infrastructure providers or casino game suppliers — may be located outside Brazil. When this is the case, TT99 ensures that data transfers are carried out in compliance with LGPD requirements, through:

  • Standard data protection contractual clauses included in agreements with international partners;
  • Prior assessment of the level of data protection in effect in the destination country;
  • Additional technical measures, such as supplementary encryption, where the destination country does not offer protection equivalent to the LGPD.

Under no circumstances will data such as full CPF numbers or identity documents be transferred to servers outside Brazil without the appropriate contractual and technical safeguards in place.

12. Changes to This Privacy Policy

The TT99 may update this Privacy Policy periodically to reflect changes in data processing practices, the services offered, or applicable legislation. Material changes will be communicated by email to your registered address and via a prominent notice on the platform with a minimum advance notice of 7 (seven) days before they take effect.

The date of the most recent update is always shown at the top of this document. We recommend reviewing this Policy periodically to stay informed about how your data is handled. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.

13. Data Protection Officer (DPO)

As required by the LGPD, TT99 has appointed a Data Protection Officer (DPO) responsible for:

  • Receive communications from data subjects exercising their rights;
  • Communicate with the National Data Protection Authority (ANPD) on behalf of TT99;
  • Guide TT99 staff and partners on data protection best practices;
  • Receive incident notifications and coordinate the necessary responses.

The Data Protection Officer (DPO) of TT99 can be reached by email privacidade@tt99.casino or via the platform's live chat, available 24 hours a day in Portuguese.

14. Contact

To exercise your rights as a data subject, clarify questions about this Privacy Policy, or file a complaint, please contact the TT99:

  • Live chat: available directly on the platform, 24 hours a day, 7 days a week — support in Brazilian Portuguese;
  • General email: contato@tt99.casino;
  • DPO email (privacy): privacidade@tt99.casino — for specific requests regarding personal data and the exercise of LGPD rights;
  • FAQ: visit our FAQ page for quick answers on the most common topics.

All requests are answered in Portuguese within up to 15 calendar days, as established by the LGPD. For urgent account security matters, we recommend using live chat for immediate assistance.

TT99 is 100% LGPD compliant

All personal data processing carried out by TT99 has a defined legal basis, a legitimate purpose, and appropriate technical security measures. You have the right to access, correct, port, or delete your data at any time — just reach out via live chat in Portuguese or by email at privacidade@tt99.casino.

View full Terms & Conditions →

Play safely and confidently at TT99

Your data protected, payments via Pix, 24-hour support in Portuguese, and bets on football, MMA, volleyball, and live casino — all on a platform built for the Brazilian player.

+18 · Play responsibly · Responsible Gaming

Português