Gamble responsibly. Responsible Gambling  |  Prohibited for users under 18.
Privacy

Ff99 Privacy Policy — Your Data Protected

Ff99 handles your personal data with transparency and accountability, in full compliance with the Brazilian General Data Protection Law (LGPD — Lei nº 13.709/2018). Here you will find a clear explanation of what we collect, why we collect it, and how we protect every piece of your information.

Last updated: January 2026 Language: Brazilian Portuguese Compliance: LGPD
In Summary
  • We never sell your data to anyone
  • 256-bit SSL encryption across the board
  • You can request deletion of your data
  • Cookies only with your consent
  • Access, correction, and portability guaranteed
  • DPO available for direct contact
Commitments

How ff99 protects your privacy

Privacy is not a compliance checkbox — it is a core value in the way ff99 was built.

End-to-End Encryption

All connections to the ff99 platform are protected by 256-bit SSL. Your registration data, banking information, and betting history are transmitted encrypted — completely unreadable to any third party attempting to intercept them.

Zero Data Selling

Ff99 does not sell, rent, or share your personal data with marketing companies or any third party that is not strictly necessary for the operation of our services. Your data is yours — full stop.

LGPD Rights Guaranteed

You may request access, correction, deletion, or portability of your personal data at any time. ff99 responds to these requests within 15 business days, as required by the General Data Protection Law (LGPD).

Transparent Cookies

Ff99 uses cookies only with your explicit consent, except for those strictly necessary for the platform to function. You can manage your cookie preferences through the banner displayed on your first visit or in your account settings.

Secure Storage

Ff99 user data is stored on servers with restricted access controls, multi-factor authentication, and continuous monitoring. Regular backups ensure your data is never lost due to technical failure.

Accessible DPO

Ff99 has a designated Data Protection Officer (DPO) available to answer privacy questions and handle requests related to your LGPD rights. Reach out directly at suporte@ff99.cash.

1Who We Are — Your Data Controller

This Privacy Policy describes how the ff99, available at ff99.cash, collects, uses, stores, and protects the personal data of its users. ff99 is the controller of personal data processed in connection with its Sports Betting, live casino, slots, crash games, and other products available on the platform.

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person, as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018). The ff99 is fully committed to complying with the LGPD and to adopting the best privacy and information security practices available in the industry.

By creating an account on the ff99, making a deposit via Pix, placing a bet on the Brasileirão, or playing a crash game, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein.

If you have any questions about this Policy or about how your data is handled at ff99, please contact our Data Protection Officer (DPO) at suporte@ff99.cash with the subject line "Data Privacy".

2What Data We Collect About You

The ff99 only collects the personal data necessary to provide its services securely, fulfill legal obligations, and continuously improve the platform experience. Below, we detail the categories of data collected:

Data Category Examples Primary Purpose
Identity Data
Full name, CPF, date of birth, RG
Registration, KYC verification, fraud prevention
Contact Data
Email, phone number, address
Communication, support, and account notifications
Financial Data
Pix key, bank details, deposit and withdrawal history
Payment processing, anti-money laundering
Usage Data
Betting history, games accessed, sessions, preferences
Personalization, responsible gambling, platform analytics
Technical Data
IP address, device type, operating system, browser
Security, fraud detection, and technical optimization
Communication Data
Support chat records, emails exchanged
Dispute resolution and service improvement

Data We Do Not Collect

The ff99 does not collect unnecessary sensitive data, such as information about racial or ethnic origin, religious beliefs, political opinions, or genetic and biometric data for identification purposes. Health data is collected solely in the context of responsible gambling, upon the user's explicit request to activate self-exclusion tools or deposit limits.

3How We Use Your Personal Data

The ff99 uses collected personal data exclusively for the purposes described in this Policy. The main uses are:

  • Account creation and management — verify your identity, keep your registration details up to date, and ensure that only you have access to your account;
  • Processing of financial transactions — processing deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED, and processing withdrawals to your bank account;
  • Fraud prevention and security — detecting suspicious behavior patterns, preventing unauthorized access, and fulfilling anti-money laundering obligations;
  • Provision of betting and casino services — recording and settling sports bets on the Brasileirão, Copa do Brasil, Libertadores, e-sports, and other events, as well as logging results for slots, crash games, and live games;
  • Experience Personalization — displaying relevant content and promotions based on your usage history, such as odds for sports you follow regularly;
  • Responsible gambling — monitoring betting patterns that may indicate at-risk behavior and proactively offering self-exclusion tools or deposit limits;
  • Communication and Support — responding to inquiries, resolving disputes, and sending operational communications regarding your account;
  • Direct marketing — send promotions and updates about ff99 only with your explicit consent, with an unsubscribe option included in every email sent;
  • Compliance with Legal Obligations — to fulfill requests from competent authorities in accordance with applicable Brazilian legislation.

You can unsubscribe from ff99 marketing emails at any time by clicking the "Unsubscribe" link in the footer of any promotional email or through the notification settings in your account. This does not affect the delivery of important operational communications regarding your account.

4Legal Basis for Data Processing (LGPD)

All personal data processing carried out by ff99 is grounded in at least one of the legal bases provided for under the LGPD. The legal bases applied by the platform are:

  • Contract Performance (Art. 7, V of the LGPD) — processing is necessary to fulfill the service agreement established with the user at registration, including the processing of bets, deposits, and withdrawals;
  • Compliance with Legal Obligation (Art. 7, II of the LGPD) — processing is required to meet regulatory obligations related to anti-money laundering, identity verification (KYC), and reporting to competent authorities;
  • Legitimate Interest (Art. 7, IX of the LGPD) — processing is necessary to protect platform security, prevent fraud, detect multiple accounts, and ensure the integrity of the ff99 betting environment;
  • Consent (Art. 7, I of the LGPD) — for sending marketing communications and using non-essential cookies, ff99 obtains the user's express consent, which may be withdrawn at any time;
  • Protection of Life (Art. 7, VII of the LGPD) — in the context of responsible gambling, ff99 may process data to identify and support users at risk of problem gambling.

5Data Sharing with Third Parties

The ff99 does not sell, rent, or trade users' personal data with third parties for marketing purposes or any other commercial purpose unrelated to the provision of the platform's services. Data sharing occurs only in the following situations:

Essential Service Providers

The ff99 works with technical and operational partners who access user data strictly for the purpose of delivering contracted services. All such partners are contractually required to uphold the same security and confidentiality standards as ff99 and are prohibited from using the data for their own purposes. Partner types include:

  • Payment processors for transactions via Pix, credit and debit card, PicPay, Mercado Pago, and TED;
  • Casino, slots, and crash game providers that host and operate the titles available on ff99;
  • Odds and sports data platforms for providing match information on the Brasileirão, Copa do Brasil, Libertadores, and other tournaments;
  • Cloud infrastructure and server hosting providers for the platform;
  • Fraud analysis and identity verification (KYC) tools.

Legal and Regulatory Authorities

The ff99 may share personal data with government, judicial, or regulatory authorities when legally required to do so, including compliance with court orders, investigations into financial crimes such as money laundering or fraud, and regulatory reporting required under Brazilian law. ff99 will not share data with authorities beyond what is strictly required by applicable law.

In the event of a merger, acquisition, or sale of ff99 assets, user data may be transferred to the new controller. In such cases, users will be notified in advance by email and will have the option to request deletion of their data prior to the transfer, as guaranteed by the LGPD.

6Cookies and Tracking Technologies

The ff99 uses cookies and similar technologies to ensure the platform functions properly, personalize the user experience, and analyze service performance. The types of cookies used are:

Essential Cookies

These are required for the platform's basic operation — such as keeping your session active as you browse between ff99 pages, remembering your language preferences, and securely processing bets and financial transactions. These cookies cannot be disabled without affecting the platform's functionality.

Performance and Analytics Cookies

Used to understand how users interact with the platform — which sections are visited most, where technical errors occur, and how navigation can be improved. Data collected by these cookies is aggregated and anonymous. The use of these cookies is subject to your consent.

Functionality Cookies

Allow the ff99 remember your display preferences, such as the favorite sport shown first on the home page, your usual betting filters, and notification settings. The use of these cookies is subject to your consent.

Marketing Cookies

The ff99 does not use tracking cookies to display ads on third-party websites. Marketing cookies are used solely to personalize promotions within the ff99 platform itself, based on your usage history. The use of these cookies is subject to your express consent.

You can manage your cookie preferences at any time through the privacy settings panel in your account or through your browser settings. Disabling non-essential cookies does not affect access to the platform's core features.

7Your Data Security

The ff99 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The main security measures in place include:

  • 256-bit SSL/TLS Encryption across all communications between your device and ff99's servers;
  • Encryption of data at rest for financial information and identification documents stored on our servers;
  • Role-Based Access Control — only employees with a legitimate need can access users' personal data, and all access is logged;
  • Two-Factor Authentication (2FA) available for user accounts and mandatory for internal administrative access;
  • Continuous Monitoring of suspicious activity on the platform by automated intrusion detection systems;
  • Regular security testing, including penetration testing conducted by specialized external firms;
  • Automatic Backups with retention across multiple locations to ensure data recovery in the event of an incident.

Incident Notification

Should a security incident occur that affects the personal data of users of ff99, the platform will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD. Users will be notified via the email address registered to their account, and the notification will include the nature of the incident, the data affected, and the measures taken by ff99 to address the situation.

Despite all measures in place, no security system is 100% foolproof. ff99 recommends that you use unique, strong passwords for your account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately.

8How Long We Retain Your Data

The ff99 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods. The general retention criteria are:

  • Registration and identity data — retained for as long as the account is active and for up to 5 years after closure, to meet legal anti-money laundering and tax obligations;
  • Financial Transaction Data — retained for up to 10 years after the transaction date, as required by Brazilian tax and anti-money laundering legislation;
  • Betting History — retained for as long as the account is active and for up to 3 years after closure, for audit and dispute resolution purposes;
  • Support Records — retained for up to 2 years after the ticket is closed;
  • Non-essential cookie data — retained for the validity period of each cookie, as stated in the cookie preferences panel.

Once retention periods expire, data is securely deleted or anonymized so that users can no longer be identified from the remaining information. You may request early deletion of your data by exercising your rights as described in Section 9 of this Policy.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights regarding your personal data processed by the ff99. See what you can request at any time:

Access

Request a copy of all personal data ff99 holds about you, including registration data, betting history, and financial transaction records.

Correction

Request the correction of incomplete, inaccurate, or outdated information — such as the email address, phone number, or home address registered on your ff99 account.

Deletion

Request the deletion of your personal data when it is no longer needed for the purposes for which it was collected, except where legal retention obligations apply.

Portability

Receive your personal data in a structured, machine-readable format for transfer to another controller, as permitted by the LGPD and technically feasible.

Withdrawal of Consent

Withdraw your consent for data processing based on consent (such as marketing cookies) at any time, without affecting any other ff99 services.

Sharing Information

Request a list of the third parties with whom ff99 has shared your data, including the purpose of each sharing and the legal basis used.

To exercise any of these rights, send an email to suporte@ff99.cash with the subject line "LGPD Rights" and describe your request. The ff99 will respond within 15 business days and may request identity verification before processing the request to ensure your security. If you are not satisfied with the response, you may file a complaint with the National Data Protection Authority (ANPD).

10International Data Transfer

Some of the service providers used by ff99 — such as casino game providers, payment processing platforms, and cloud infrastructure — may be located outside Brazil. When this occurs, ff99 ensures that international transfers of personal data are carried out only to countries or organizations that offer an adequate level of protection as defined by LGPD criteria, or through the adoption of specific contractual clauses that uphold the same protection standards required under Brazilian law.

The ff99 maintains an up-to-date record of all providers that process user data outside Brazil and continuously monitors these partners' compliance with applicable data protection requirements. You may request information about specific international transfers by exercising your right to information as described in Section 9 of this Policy.

11Protection of Minors

The ff99 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account or provided personal data without parental authorization, the account will be immediately closed and all of the minor's personal data will be deleted from our systems.

If you believe that someone under 18 has accessed ff99 or provided personal data to the platform, please contact support immediately at suporte@ff99.cash with the subject line "Minor Protection". ff99 implements technical measures to prevent minors from accessing the platform, including date of birth verification at registration and behavioral analysis of suspicious accounts.

Parents or guardians who discover that a minor has used the ff99 platform should get in touch immediately. The account will be closed, the data deleted, and any balance identified as belonging to a minor will be handled in accordance with the applicable court ruling.

12Changes to this Privacy Policy

The ff99 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, the services offered, or data processing practices. Significant changes will be communicated by email to all registered users at least 15 days before the new terms take effect. Minor changes and corrections will be published on this page with a revised update date.

We recommend reviewing this Policy periodically to stay informed about how the ff99 protects your data. Continued use of the platform after an updated version of this Policy takes effect constitutes acceptance of the new terms. If you disagree with any change, you may close your account and request deletion of your data as described in Section 9.

Keep your registered email address up to date to receive notifications about changes to this Policy and other ff99 policies. Go to "Account Settings" at any time to update your email.

13DPO Contact and Support Channels

The ff99 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and serving as the point of contact for user data privacy matters. The ff99 DPO can be reached through the following channels:

  • Email — suporte@ff99.cash with the subject line "DPO / Data Privacy";
  • Live Chat — available 24 hours a day, 7 days a week, directly on the ff99 platform;
  • WhatsApp — support in Brazilian Portuguese, every day of the week.

The response time for privacy rights requests is up to 15 business days from confirmation of receipt. For urgent requests — such as suspected unauthorized account access or misuse of data — the ff99 support team ff99 guarantees priority response within 4 hours via live chat.

If you are not satisfied with the response from the ff99 to a privacy-related request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.

For questions about this Privacy Policy related to your use of the platform, you may also consult our Terms and Conditions, our Responsible Gambling or the Frequently Asked Questions.

Your data protected. Your experience guaranteed.

Ff99 takes care of your data with the same dedication it brings to your betting experience — with football, e-sports, instant Pix, and 24/7 support in Portuguese.

Português