Privacy Policy of pp11com: Your Data Protected

Pp11com acts as data controller of registered users on the platform, pursuant to Article 5, item VI, of the LGPD. This means that pp11com determines which data is collected, the purposes for which it is used, and how long it is retained.

When you create a pp11com account, deposit funds, place bets, or simply browse the platform, you are providing personal data that is processed as described in this policy. Continued use of the services constitutes acknowledgment of and agreement to the terms set out herein.

For specific questions about privacy and data protection, the official contact channel is the email suporte@pp11com.best. pp11com appoints a Data Protection Officer (DPO) responsible for responding to data subject requests and to the relevant regulatory authorities.

Pp11com collects only the data strictly necessary to provide its services and meet legal obligations. Data is collected in the following situations:

Pp11com does not collect data from sensitive categories such as racial origin, religious beliefs, health data, or sexual orientation, except where strictly required by law and always with the data subject's knowledge.

Data collected by pp11com is used exclusively for the following purposes:

• Account creation and management: authentication, password recovery, profile updates, and essential account communications.
• Financial transaction processing: deposits via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED; withdrawal processing; anti-fraud transaction verification.
• Service delivery: Sports Betting records, Live Casino and slots operation, prize and jackpot settlement, activity history.
• Fulfillment of legal obligations: identity verification (KYC), anti-money laundering (AML/CFT), compliance with court orders and requests from competent authorities.
• Platform security: detection of multiple accounts, identification of fraudulent patterns, prevention of unauthorized access.
• Responsible gambling: monitoring of usage patterns to identify at-risk behaviors and trigger the protective tools available on the platform.
• Marketing communications: only for users who have given explicit consent, and limited to information about pp11com promotions, bonuses, and updates.
• Service improvement: aggregated and anonymized analysis of usage data to improve the platform experience.

Pp11com does not use your data for any purposes beyond those listed above. Any new use of data will be communicated in advance and, where required, subject to renewed consent from the data subject.

Under the LGPD, all processing of personal data must have a legal basis to justify it. pp11com processes your data under the following legal bases, in accordance with Article 7 of Law No. 13,709/2018:

• Contract performance — to operate your account, process bets, handle Pix payments, and deliver all services contracted when you created your pp11com account.
• Compliance with a legal or regulatory obligation — for identity verification (KYC), anti-money laundering compliance, reporting to competent authorities, and adherence to Brazilian betting and gambling legislation.
• Legitimate interest — for platform security, fraud detection, prevention of multiple accounts, and service improvement, provided these purposes do not override the data subject's fundamental interests.
• Consent — for sending marketing communications, personalizing offers and collecting data that is not essential to the operation of the service. Consent may be withdrawn at any time without affecting your use of the services.

Pp11com does not sell, rent, or share personal data with third parties for commercial purposes. Data is shared only in the situations listed below, and always limited to the minimum necessary:

• Payment providers: financial data is shared with Pix, boleto, credit/debit card, PicPay, and Mercado Pago processors solely to process transactions requested by the data subject. These providers operate under their own privacy terms and are selected based on strict security standards.
• Live casino studios and game providers: session data is shared with Evolution Gaming, Pragmatic Play Live and other partner studios for the technical operation of games. This data does not include complete financial information — only the data required to authenticate the game session.
• Identity verification (KYC) providers: identity document images and identification data may be processed by specialized identity verification providers, always under contracts with strict data protection clauses.
• Public and judicial authorities: pp11com responds to legal requests, court orders, and directives from competent authorities (such as the Secretaria de Prêmios e Apostas of the Ministério da Fazenda) when required by law, with no need for prior consent from the data subject in such cases.
• Fraud prevention: data may be shared with other betting platform operators in cases of documented fraud or suspected money laundering, in accordance with applicable regulations.

All third parties that receive data from pp11com are bound by data processing agreements requiring them to protect that information in accordance with LGPD standards and to use it only for authorized purposes.

Pp11com uses cookies and similar technologies to enhance your experience on the platform, maintain session security, and analyze how our services are used. The cookies we use fall into the following categories:

• Essential cookies: required for the platform's basic operation — session authentication, form security, and bet slip persistence. They cannot be disabled without affecting your ability to use the services.
• Performance cookies: collect anonymized data on how users navigate the platform — pages visited, session duration, errors encountered. Used exclusively to improve pp11com's performance and user experience.
• Preference cookies: store user settings such as language, betting preferences, and display configurations to personalize your experience on future visits.
• Analytical cookies: used to understand aggregate user behavior and guide service improvements. Data is processed in anonymized form and does not allow individual identification.

You can manage your cookie preferences through your browser's settings panel. Disabling non-essential cookies may affect certain platform features, but will not prevent you from using the core services. pp11com does not use cross-site tracking cookies for external advertising purposes.

Pp11com user data is stored on secure servers with the following technical and organizational controls:

• Encryption in transit: all communication between the user's device and pp11com's servers uses TLS 1.2 or higher, ensuring that data cannot be intercepted during transmission.
• Encryption at rest: sensitive data such as passwords (stored as salted hashes), identity documents, and financial information are encrypted on our servers.
• Access control: only employees with a verified operational need are granted access to users' personal data. Access is controlled by multi-factor authentication and recorded in audit logs.
• Continuous monitoring: pp11com systems are monitored 24 hours a day to detect unauthorized access, intrusion attempts, and behavioral anomalies.
• Security testing: the platform undergoes regular penetration testing (pentest) and security audits carried out by independent specialists.
• Incident response plan: in the event of a data breach, pp11com will follow the procedures established by the LGPD, notifying the ANPD (Autoridade Nacional de Proteção de Dados) and affected data subjects within the legally required timeframes.

Despite all these controls, no system is 100% immune to threats. pp11com recommends that users create strong, unique passwords, enable two-factor authentication where available, and never share their login credentials with anyone.

Pp11com retains personal data for as long as necessary for the purposes for which it was collected, subject to mandatory legal retention periods:

• Active account data: kept for as long as the account remains active. After voluntary account closure, data is retained for at least 5 years to fulfill legal and tax obligations, in accordance with Brazilian legislation.
• Financial transaction history: retained for a minimum of 5 years after each transaction, as required by anti-money laundering legislation (Law No. 9,613/1998).
• Identity verification (KYC) documents: retained for at least 5 years after account closure or the last transaction, in accordance with applicable regulations.
• Access and security logs: retained for 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
• Marketing communication data: deleted immediately upon withdrawal of consent, except where another legal basis for retention applies.

Once mandatory retention periods have been met, data is securely and irreversibly deleted from pp11com's systems, unless a court or administrative order requires otherwise.

The LGPD grants data subjects a set of rights that pp11com fully respects. You may exercise any of the rights below at any time by emailing suporte@pp11com.best:

Pp11com is a betting and gambling platform intended exclusively for individuals of 18 years of age or older. pp11com does not intentionally collect, store, or process personal data from individuals under 18 years of age.

During registration, CPF and date of birth are collected to verify minimum age. If underage use is identified during the identity verification (KYC) process, the account is immediately closed and any deposited balance is returned to the original payment method.

If you suspect a minor is using the platform — including with your credentials — contact support immediately at suporte@pp11com.best. Parents and guardians who wish to block access to betting platforms can use parental control tools available on operating systems and home routers.

Pp11com may periodically update this Privacy Policy to reflect changes in the services offered, applicable legislation, or data processing practices. Any material change will be communicated with a minimum advance notice of 7 business days by email to the address registered on the account and via a prominent in-platform notification.

Emergency changes — required by an immediate legal obligation or to urgently address a security vulnerability — may take effect immediately, with simultaneous notice to users.

The most recent version of this policy will always be available on this page, with the last updated date shown at the top. We recommend reviewing it periodically. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report a privacy concern, contact pp11com through the channels below:

• Privacy / DPO email: suporte@pp11com.best — subject line "Privacidade e LGPD"
• Live chat: available on the platform 24/7, including holidays.
• Support language: Brazilian Portuguese.
• Response timeframe: up to 15 business days for formal LGPD rights requests; average chat response time is 2 minutes.

The pp11com Data Protection Officer (DPO) is responsible for ensuring LGPD compliance, receiving and handling data subject requests, and maintaining the communication channel with the ANPD. All communications related to personal data are handled confidentially and responded to within the legally required timeframes.