CC99 — Data Protection
At CC99, we take the protection of your personal data seriously. This page clearly explains how we collect, use, store, and protect your information — in full compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018). You deserve to know exactly what happens with your data.
Quick summary
Six pillars that ensure the security and privacy of your information on the platform
All communication between your device and CC99's servers is protected with 256-bit SSL — the same standard used by digital banks like Nubank, Itaú, and Bradesco. Your login credentials, account information, and Pix transactions are never transmitted without encryption.
CC99 collects only the data strictly necessary to operate the service — nothing beyond what is needed to create your account, process deposits and withdrawals via Pix, verify your identity, and keep the platform secure. No data collected out of curiosity or for undisclosed commercial purposes.
CC99 does not sell, rent, or trade your personal data with third parties for commercial purposes. Full stop. Your data may only be shared with technical partners essential to our operations — payment processors such as Pix and Mercado Pago — always under confidentiality agreements compliant with the LGPD.
The General Data Protection Law (Lei nº 13.709/2018) is the legal framework that guides all privacy decisions at CC99. We have a dedicated Data Protection Officer (DPO), documented processing procedures, and a record of processing activities as required by the ANPD — Brazil's National Data Protection Authority.
The LGPD gives you the right to access, correct, export, withdraw consent, and request deletion of your personal data at any time. At CC99, exercising these rights is straightforward: just send an email to privacidade@cc99.click. We respond within 15 business days, as required by law.
CC99 retains your data only for as long as necessary to provide the service or as required by law. After that period, data is securely disposed of. Financial records are kept for the minimum period required by Brazilian anti-money laundering legislation — and not a day longer.
CC99's Commitment: this Privacy Policy was written to be read, not buried in a footer. It clearly describes how we handle the personal data of all registered users on the platform. By creating a CC99 account, you confirm that you have read and understood this document.
CC99, accessible at cc99.click, is the controller of its users' personal data, as defined under Article 5, Item VI of the General Data Protection Law (LGPD — Lei nº 13.709/2018). This means CC99 determines the purposes and means of processing your personal data and is legally responsible for all decisions made in that regard.
CC99 operates as a Sports Betting platform — covering football with Brasileirão Série A, Copa do Brasil, and Libertadores, volleyball, NBB basketball, MMA, UFC, and e-sports — as well as an online casino featuring slots, live blackjack, poker, crash games, and progressive jackpots. Processing personal data is necessary for all these services to operate securely, fairly, and in compliance with the law.
For questions, requests, or to exercise your rights under the LGPD, please contact our Data Protection Officer by email at privacidade@cc99.click.
CC99 collects personal data at various points during your interaction with the platform. Below are the categories and the specific data collected in each:
| Category | Data Collected | When |
|---|---|---|
| Identification | Full name, CPF, date of birth, official photo ID | Registration and KYC verification |
| Contact | Email address, mobile number, residential address | Registration |
| Financial | Pix key, card data (tokenized), deposit and withdrawal history in BRL | Financial Transactions |
| Platform usage | Betting history, games accessed, sessions, gaming preferences | During use |
| Technical | IP address, device type, operating system, browser, approximate location | Automatic, on every login |
| Communications | Support history, exchanged emails, and chat logs | Support contacts |
Card data: CC99 does not store full credit or debit card numbers. All card data is tokenized by the certified payment processor — CC99 receives only a reference token and has no access to the actual card number.
The data collected by CC99 is used exclusively for the following purposes:
CC99 processes your personal data based on the following legal bases set out in article 7 of the LGPD:
Where processing is based on consent, you have the right to withdraw it at any time, without affecting any processing carried out prior to the withdrawal.
CC99 does not sell and does not sell your personal data with any third party. Data sharing occurs only in the following situations, all with a legal basis and appropriate safeguards in place:
Guarantee: any and all data sharing by CC99 is based on contract or legal obligation, limited to the minimum necessary, and subject to the same security requirements we apply internally.
CC99 uses cookies and similar technologies to ensure the platform works properly and to improve your experience. The types of cookies we use are:
You can manage your cookie preferences at any time in your account settings or browser preferences. Disabling essential cookies may affect how the platform functions.
CC99 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:
No security system is completely impenetrable. If you notice any suspicious activity on your account, contact us immediately via 24/7 chat or at contato@cc99.click so we can act quickly.
CC99 retains your personal data for as long as necessary for the purposes described in this Policy, in compliance with the minimum retention periods established by applicable Brazilian law:
Once the applicable retention periods have expired, data is securely and irreversibly disposed of, or anonymized for use in statistical analysis without individual identification.
The General Data Protection Law grants you, as the owner of your personal data, the following rights — all of which can be exercised free of charge by submitting a request to CC99:
To exercise any of these rights, send an email to privacidade@cc99.click with the subject line "LGPD Rights Request" and a clear description of your request. CC99 will respond within 15 business days, as required by law. We may request proof of identity before processing the request.
CC99 services are intended exclusively for individuals aged 18 years or older. CC99 does not intentionally collect personal data from minors.
If you believe a minor has created a CC99 account using false information, contact us immediately at contato@cc99.click. Once we receive your report, we will close the identified account, delete the minor's data, and return any remaining balance in accordance with applicable Brazilian law.
Notice: CC99 requires mandatory identity verification to confirm that all users are of legal age. However, if you are the guardian of a minor and believe they have accessed the platform, please report it immediately so we can take action.
CC99 may use technical partners with infrastructure in other countries to operate certain services — such as cloud servers, KYC processors, or certified game providers. When personal data from Brazilian users is transferred outside Brazil, CC99 ensures that:
Under no circumstances will sensitive financial data — such as Pix keys, tokenized card details, or BRL transaction history — be transferred to systems without security controls equivalent to those applied in Brazil.
Should a security incident occur that could cause significant risk or harm to data subjects — such as unauthorized access to a user database — CC99 will take the following steps:
If you suspect your account has been compromised, contact us immediately via 24/7 chat or at contato@cc99.click so your password can be reset and your account secured.
CC99 may update this Privacy Policy periodically to reflect changes in services, applicable legislation, or data processing practices. Material changes will be communicated via your registered email and through a prominent notice on the platform at least 15 days in advance.
The date of the last update is always shown at the top of this page. Continued use of the platform after the effective date of any changes will be understood as acceptance of the updated Policy. If you disagree with the changes, you may close your account and request deletion of your data before the effective date.
Last updated: January 2026. This version supersedes all previous versions of the CC99 Privacy Policy.
CC99 has appointed a Data Protection Officer (DPO), as provided for under article 41 of the LGPD. The DPO serves as the official communication channel between CC99, data subjects, and the ANPD.
To contact CC99's DPO:
The DPO is also responsible for receiving communications from the ANPD regarding CC99 and for coordinating responses to any investigation or formal request from the regulatory authority.
Eight rights guaranteed by law that you can exercise at any time on CC99
Find out exactly what data CC99 holds about you and how it's used.
Correct any incomplete, inaccurate, or outdated information in your CC99 account.
Request the deletion of data that is unnecessary or processed without a valid legal basis.
Receive your data in a portable format for transfer to another service.
Find out which third parties CC99 shares your data with and why.
Withdraw consent for marketing and other processing based on that legal basis.
Object to processing carried out on the basis of legitimate interest when it violates the LGPD.
Learn what consequences refusing to provide data may have for your use of the platform.
To exercise any of these rights, write to privacidade@cc99.click — we respond within 15 business days.
When you create a CC99 account to bet on a Flamengo match in the Brasileirão or enter a poker tournament with a buy-in in BRL, you're entrusting the platform with sensitive personal information — CPF, banking details, transaction history. That trust matters, and CC99 takes it seriously. This Privacy Policy isn't a legal formality: it's a concrete commitment to how your data is handled every day.
The LGPD significantly changed the data protection landscape in Brazil. Before it came into effect, many platforms — including online betting and entertainment services — collected excessive data, shared it with commercial partners without transparency, and retained it indefinitely. CC99 was built with the LGPD already in force, meaning privacy practices were embedded from the initial design of the platform, not bolted on afterward.
Data minimization is a core principle at CC99. That means we collect only what we need to deliver the service properly — nothing more. To process a Pix deposit, for example, we need your Pix key and the amount — not your detailed location history or data about other apps on your phone. To verify your identity during KYC, we need a document and a selfie — not access to your contacts. This minimal-collection approach reduces your exposure in the event of any security incident.
Transparency around data sharing is an area where many platforms fall short. The common practice of burying a broad clause in the terms of use that authorizes sharing with unspecified "business partners" is something CC99 refuses to do. When CC99 shares data with third parties — payment processors such as Pix and Mercado Pago, KYC services, certified game providers — it is described clearly in this Policy, with the specific purpose of each sharing arrangement. You know who your data is shared with and why.
Identity verification is often seen as a bureaucratic hurdle, but it serves an important protective purpose. By confirming you are who you say you are, CC99 ensures no one can open an account in your name, withdraw your winnings using your details, or use your identity for unlawful activity on the platform. KYC protects the user just as much as it protects the platform. CC99 runs this process once and retains the verification data for the minimum period required by law — without requesting documents again each time you withdraw.
Cookies deserve special attention in the context of betting platforms. Many platforms use tracking cookies to build detailed profiles of gambling behavior and sell that data to advertising networks. CC99 does not do this. CC99's marketing cookies are used exclusively for communications within the platform itself — there is no integration with third-party advertising networks to track your behavior outside of CC99. And these marketing cookies are only activated with your explicit consent.
The right to data deletion is one of the most important rights under the LGPD — and one of the most frequently mishandled. On many platforms, requesting deletion leads to weeks of waiting, only to receive a message saying the data must be retained for legal reasons, with no explanation of which data, for how long, or under what law. At CC99, when you request data deletion, the response is clear: which data can be deleted immediately (marketing data, account preferences), which must be retained for legal reasons (financial records for 5 years), and the exact timeline for each. No vague answers.
Having a dedicated Data Protection Officer (DPO) at CC99 reflects our commitment to privacy governance. The DPO is not an honorary title — this is the person responsible for ensuring every area of the company operates in compliance with the LGPD, for coordinating incident response, for handling user requests, and for maintaining the communication channel with the ANPD. If you have any questions or complaints about how your data is handled at CC99, the direct channel is privacidade@cc99.click.
Questions about data, LGPD requests, or incident reports — we're ready to help
Privacidade@cc99.click
For exercising LGPD rights, deletion and portability requests, and questions about data processing. Response time: 15 business days.
Available directly on the platform, at any time. For general questions about privacy, account security, or suspected unauthorized access.
Contato@cc99.click
For general account inquiries, Pix payments, and other matters not directly involving personal data.
CC99 only collects the data necessary to operate the service. Your data is never sold. You can exercise your LGPD rights at any time by emailing privacidade@cc99.click. All communications are protected by 256-bit SSL. Financial data is retained for the minimum period required by law and securely disposed of after that.
This is a quick-reference summary. For full details, read the complete Policy above or get in touch with our privacy team.
DPO: privacidade@cc99.click
The most common questions about how your data is handled on the platform
Create your free account, deposit via Pix from R$ 10.00, and enjoy a platform that handles your data with the respect you deserve.