Privacy Policy of 90games – Data Protection

1. Introduction

The 90games believes that privacy is a fundamental right and that every user deserves to know exactly what happens with their information. That's why this policy was written in plain language, free of unnecessary legal jargon — so you can clearly understand how your data is handled.

When you create an account on 90games, use any feature of the platform, access the site on mobile or desktop, or get in touch with support, you are interacting with a service that collects and processes personal data in order to function properly. This policy explains each of those points.

If you have any questions after reading this document, you can contact our Data Protection Officer (DPO) by email at privacidade@90games.best or via the platform's live chat, available 24 hours a day.

2. Data Controller

The controller responsible for processing personal data collected through the platform 90games is the operating company of the website https://90games.best. For the purposes of this policy, the controller is identified as 90games and can be reached through the channels listed in section 13 of this document.

The Data Protection Officer (DPO) of 90games is the designated point of contact for matters relating to privacy and personal data processing, as required by the LGPD. The DPO can be reached by email at privacidade@90games.best.

3. Data We Collect

The 90games collects personal data at various points during your interaction with the platform. Below is a full overview of the data categories and how each one is obtained:

3.1 Data You Provide

• Full name, CPF, and date of birth;
• Email address and mobile phone number;
• Full residential address (postal code, street, number, city, state);
• Identification documents submitted during the KYC verification process (National ID, Driver's License or passport, and proof of address);
• Payment data required to process deposits and withdrawals via Pix, bank slip, credit or debit card, PicPay, Mercado Pago, or TED.

3.2 Automatically Collected Data

• IP address and approximate geographic location;
• Device type, operating system, and browser used;
• Pages visited, browsing time, and platform usage patterns;
• Complete history of bets, deposits, withdrawals, and support interactions;
• Cookie data and similar tracking technologies (detailed in section 7).

3.3 Third-Party Data

In some cases, the 90games may receive data from identity verification partners, payment processors, and competent authorities when required to fulfill legal obligations related to anti-money laundering (Law No. 9,613/1998) and know your customer (KYC) requirements.

4. Purposes of Processing

The 90games uses collected personal data exclusively for the following legitimate purposes:

• Create and manage your account on the platform;
• Verify your identity and eligibility to use our services (KYC);
• Process deposits, withdrawals, and other financial transactions;
• Manage the VIP Program, calculate points, and credit the weekly cashback;
• Provide customer support and handle inquiries and complaints;
• Detect, prevent, and investigate fraud, money laundering, and other unlawful activities;
• Comply with legal and regulatory obligations applicable to the platform's operation in Brazil;
• Improve the user experience based on usage and browsing data;
• Send transactional communications (registration confirmation, approved withdrawal, security alerts);
• Send marketing communications, promotions, and updates from the 90games, where you have given consent to do so.

5. Legal Bases for Processing

All data processing carried out by 90games has a legal basis under the LGPD. The primary legal bases supporting our operations are:

• Contract performance: processing is necessary for us to provide the services you signed up for when creating your account on 90games, including processing bets and payments;
• Legal obligation: certain information must be collected so the platform can comply with Brazilian law, including anti-money laundering and consumer protection regulations;
• Legitimate interests: browsing and behavioral data is processed to enhance platform security, prevent fraud, and improve the user experience;
• Consent: marketing communications and non-essential cookies are subject to your consent, which can be withdrawn at any time.

6. Data Sharing

The 90games does not sell personal data to third parties. Information is only shared in the situations described below and strictly within the limits required for each purpose:

6.1 Payment Partners

To process deposits and withdrawals via Pix, bank slip, credit or debit card, PicPay, Mercado Pago, or TED, the 90games shares financial data with the institutions and payment processors involved in each transaction. These partners are contractually required to use the data solely for the specific purpose of processing the payment.

6.2 Identity Verification Partners

The KYC process may involve sharing documents with specialized identity verification companies. These partners operate under strict confidentiality agreements and are prohibited from using the data for any other purpose.

6.3 Legal Obligations

The 90games may share data with competent authorities, regulatory bodies, the judiciary, or the public prosecutor's office when required by law, court order, or investigation of unlawful activity.

6.4 International Transfer

If any data is transferred outside Brazil — for example, to technology infrastructure servers —, the 90games ensures that transfers only take place to countries with an adequate level of protection or through safeguards approved by the ANPD.

7. Cookies and Tracking Technologies

The 90games uses cookies and similar technologies to ensure the platform functions correctly, improve the browsing experience, and — with your consent — personalize the content displayed. The types of cookies used are:

• Essential cookies: required for the platform to function, such as session authentication and language preferences. They cannot be disabled without affecting the use of the site;
• Performance cookies: collect data on how users interact with the platform to identify improvements — always in an anonymous and aggregated manner;
• Functionality cookies: remember your preferences — such as your preferred deposit method or configured odds — to personalize your experience;
• Marketing cookies: used only with your consent, these allow us to display relevant promotional communications from 90games.

You can manage your cookie preferences in your browser settings or in the platform's privacy center. Disabling non-essential cookies does not prevent you from using the platform, but may limit some features.

8. Data Security

The 90games employs appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption on all communications between the user and the platform's servers;
• Passwords stored with cryptographic hashing — not even employees of 90games have access to your password in plain text;
• Two-factor authentication available for additional account security;
• Role-based internal access controls, ensuring that only employees with a legitimate need can access personal data;
• Continuous security monitoring and incident response;
• Regular security testing and vulnerability assessments across platform systems.

Despite every effort, no system is completely impenetrable. That is why 90games maintains an incident response plan that includes notifying affected users and the ANPD within the timeframes required by the LGPD in the event of a data breach.

9. Data Retention and Deletion

The 90games retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet legal requirements. The general retention periods are:

• Registration and account data: for as long as the account is active and for up to 5 years after closure, in accordance with anti-money laundering requirements;
• KYC verification documents: for the period required by applicable Brazilian law, generally 5 years after the last access or transaction;
• Financial transaction history: 5 years, in accordance with the Consumer Protection Code and Brazilian Central Bank regulations;
• Non-essential cookie data: as defined for each cookie, generally between 30 days and 2 years;
• Support records: 2 years after the closure of each request.

Once retention periods have expired, data is securely deleted or anonymized in a way that no longer allows identification of the data subject.

10. Minors

The 90games does not provide services to individuals under 18 and does not knowingly collect personal data from anyone in that age group. The registration process requires age confirmation, and the KYC process verifies date of birth through an official document.

If the 90games identifies that data belonging to a user under 18 has been inadvertently collected, the account will be immediately closed, the data will be deleted, and any deposited balance will be refunded following review. Parents and guardians who discover that a minor has created an account on the platform should contact us immediately at privacidade@90games.best.

11. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, objection, or withdrawal of consent — you can:

• Send an email to privacidade@90games.best with a clear description of your request and your identifying information;
• Use the live chat on 90games, available 24 hours, and request the opening of a privacy request;
• Access your account dashboard directly, where some requests — such as updating contact details — can be completed without needing to reach out to support.

The 90games will respond to your request within 15 business days. For more complex cases requiring additional review, this period may be extended by up to 15 additional business days, with prior notice of the need for an extension.

12. Changes to This Privacy Policy

The 90games may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered by the platform. The date of the most recent update is always shown at the top of this document.

Material changes will be communicated by email to the address registered on your account, or via a prominent notice on the platform, with at least 7 days' advance notice. In cases of urgent changes required by law or a security incident, notification may occur simultaneously with the publication of those changes.

Continued use of the 90games after changes to this policy are published constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account and request deletion of your data as described in section 11.

13. Contact and Data Protection Officer (DPO)

For any questions, requests, or complaints regarding the processing of personal data by 90games, please get in touch:

• DPO Email: privacidade@90games.best
• General support: suporte@90games.best
• Live chat: available 24 hours a day, 7 days a week, in Brazilian Portuguese

If your request is not resolved satisfactorily by the 90games, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as set out in Article 18, §1 of the LGPD.