Privacy & LGPD

599pg Privacy Policy – LGPD Data Protection

599pg takes your personal data seriously and handles it with full transparency. This policy explains exactly what we collect, why we collect it, how we protect it, and what your rights are — all in compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018).

Your Data Is in Good Hands at 599pg

Six pillars that underpin our approach to privacy and data protection.

256-Bit SSL Encryption

All communication between your device and 599pg's servers is protected by 256-bit SSL encryption — the same standard used by Brazilian banks such as Itaú, Bradesco, and Banco do Brasil. Your registration data, financial details, and betting history are never transmitted in the open over the internet.

Full LGPD Compliance

599pg was built to comply with the General Data Protection Law (Lei nº 13.709/2018) from the ground up. This means every piece of data collected has a defined legitimate purpose, and you have real control over what happens to your personal information on the platform.

Your Data Is Never Sold to Third Parties

599pg does not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. Your information is used exclusively to operate your account, process transactions, and improve the experience within the platform itself.

Your Rights, Guaranteed and Enforceable

Access, correction, portability, and deletion of your personal data are not just promises on paper — they are real processes at 599pg. You can request any of these rights through 24h support chat or by email, with a guaranteed response within 15 business days.

Secure and Controlled Storage

Data is stored on servers with strictly controlled access. 599pg follows a least-privilege policy: only staff members who need access to specific data to perform their role are granted that permission. Regular internal audits verify compliance with these policies.

Full Control Over Communications

You decide whether to receive promotional communications from 599pg. Unsubscribing from any email or SMS list takes a single click, with no hassle. 599pg will continue to send only essential transactional communications — withdrawal confirmations, security alerts, and important account updates.

This Privacy Policy describes how 599pg collects, uses, stores, shares, and protects the personal information of users of the platform available at 599pg.click.

599pg acts as the controller of your personal data under the General Data Protection Law (Law No. 13,709/2018 — LGPD). This means we are responsible for decisions about how your data is handled within the platform.

By creating an account or using any 599pg service, you confirm that you have read and understood this policy. Questions? Our support team is available 24 hours a day via chat or email contato@599pg.click.

1

Who We Are and How to Contact Us

The 599pg is an online casino and Sports Betting platform dedicated to Brazilian users, accessible at 599pg.click. We operate with a full focus on the Brazilian market, with a team, support, and infrastructure dedicated to serving players from Brazil in Portuguese.

For any matter related to privacy and the handling of your personal data, you can reach us through the following channels:

  • Email: contato@599pg.click
  • Live chat: available 24 hours directly on the platform, accessible after login
  • Data request form: available in account settings, under the "Privacy" section

The 599pg data protection officer (DPO — Data Protection Officer) can be reached at the email address above. All LGPD-related requests are responded to within 15 business days, as required by law.

2

What Data We Collect and When

The 599pg only collects the data necessary to operate the platform and meet applicable legal obligations. Collection takes place at different points during your interaction with the service:

During registration and identity verification (KYC):

  • Full name, CPF, date of birth, and gender;
  • Email address and mobile phone number;
  • Full residential address (postal code, street, city, state);
  • Identity documents (national ID, driver's license, or passport) when requested for KYC;
  • Proof of address when required for advanced verification.

In financial transactions:

  • Pix key registered to your CPF for deposits and withdrawals;
  • Credit or debit card details (stored in tokenized form, never in plain text);
  • History of deposits, withdrawals, and bets placed on the platform;
  • Digital wallet account information, such as PicPay or Mercado Pago, when used.

While using the platform:

  • IP address and approximate IP-based location;
  • Device type, operating system, and browser used;
  • Pages visited, session duration, and interactions with the interface;
  • Game history, bets placed, and results obtained;
  • Communications with the support team via chat or email.

Sensitive data: 599pg does not collect data classified as sensitive under the LGPD — such as racial origin, religious belief, or genetic or biometric data — unless required by specific regulation and with the data subject's explicit consent.

3

How and Why We Use Your Data

Each piece of data collected by the 599pg has a specific and legitimate purpose. We use your information to:

  • Creating and maintaining your account: verify identity, ensure each CPF has only one active account, and protect access with secure authentication;
  • Process transactions: confirm deposits via Pix, boleto bancário, card, or digital wallets, and process withdrawals within the agreed timeframe;
  • Compliance verification (KYC/AML): to fulfill legal customer identification and anti-money laundering obligations, as required by Brazilian regulations;
  • Support and customer service: identify your account, access the relevant history, and resolve your request quickly;
  • Platform security: detect and prevent unauthorized access, fraud, multiple accounts, and bonus abuse;
  • Essential communications: send transaction confirmations, security alerts, policy updates, and other communications directly related to your account;
  • Promotional communications (with your consent): send you information about bonuses, promotions, and 599pg news — only if you have opted in and until you withdraw that consent;
  • Product improvement: analyze usage patterns in an aggregated and anonymized manner to improve the platform experience;
  • Compliance with legal obligations: comply with requests from regulatory and judicial authorities as required by law.

599pg does not use your data to build profiles for sale to third parties, for behavioral advertising outside the platform, or for any purpose not listed above without prior notice.

4

Legal Basis for Processing (LGPD)

The General Data Protection Law requires that all processing of personal data have a specific legal basis. The 599pg processes your data based on the following legal bases set out in article 7 of the LGPD:

  • Contract performance (art. 7, V): most data is processed to fulfill the service agreement you accepted when creating your account — this includes processing transactions, maintaining account access, and providing the available games;
  • Compliance with a legal obligation (Art. 7, II): certain data is processed because the law requires it — for example, the retention of financial records for 5 years under Brazilian tax and anti-money laundering legislation;
  • Legitimate interest (Art. 7, IX): platform usage data is analyzed to prevent fraud, ensure platform security, and improve the user experience — always in a way that does not harm your fundamental rights;
  • Consent (art. 7, I): promotional communications are sent only with your express consent, which may be withdrawn at any time at no cost or penalty.

Withdrawal of consent: You can withdraw your consent to promotional communications at any time via the unsubscribe link in the footer of any email you receive, or through 24h support. Withdrawal does not affect any processing carried out prior to it.

5

Sharing Data with Third Parties

The 599pg does not sell or trade your personal data. Sharing only occurs in the situations described below, all with a legitimate and justifiable purpose:

  • Payment processors: to confirm and process transactions via Pix, credit/debit card, boleto bancário, PicPay, and Mercado Pago. These providers act as data processors under the LGPD and are bound by confidentiality agreements;
  • Game providers: companies such as Pragmatic Play, Evolution Gaming, NetEnt, and PG Soft receive the player's session identifier to display games correctly. These providers do not receive your name, CPF, or full financial details;
  • Technical infrastructure providers: hosting, CDN, cybersecurity, and monitoring services that process data under strict instruction from 599pg, with access limited to the minimum necessary for the task;
  • Government and regulatory authorities: when required by court order, request from a competent regulatory authority, or to fulfill legal obligations — no data subject consent is required in cases provided for by law;
  • External auditors and consultants: that have signed confidentiality agreements and require access to certain data to fulfill their audit or regulatory compliance function.

In all cases of data sharing, 599pg contractually requires that all third parties involved handle your data with the same level of protection required by the LGPD, using it solely for the specified purpose.

6

How Long We Retain Your Data

The 599pg retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. Retention periods by data category are:

  • Registration data (name, CPF, email, phone number): retained for as long as the account is active and for up to 5 years after account closure, in accordance with tax and anti-money laundering obligations;
  • Financial records (deposit, withdrawal, and betting history): retained for 5 years from the date of the transaction, as required by Brazilian tax legislation;
  • KYC documents (copies of ID, driver's license, proof of address): retained for 5 years after account closure or for the period required by applicable regulation, whichever is longer;
  • Access and security logs: retained for 6 months in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
  • Support communications: retained for 2 years for quality control and dispute resolution purposes;
  • Cookie and browsing data: retained for up to 13 months, as detailed in the cookies section of this policy.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymized, making any future identification of the individual impossible.

7

Data Security & Technical Measures

The 599pg applies technical and organizational measures proportionate to the risk involved in processing your data. The main safeguards in place on the platform are:

  • 256-bit SSL/TLS encryption in all communication between your device and our servers;
  • Irreversible password hashing — your password is never stored in plain text. Not even the 599pg team can see your password; they can only reset it;
  • Card data tokenization — credit and debit card numbers are converted into tokens before storage and are never kept in plain text;
  • Least-privilege access control — staff members only access the data strictly necessary for their role;
  • Continuous security monitoring with anomaly detection and automatic alerts for unauthorized access attempts;
  • Two-Factor Authentication (2FA) available to all users and strongly recommended for accounts with significant balances;
  • Periodic security audits conducted by internal and external teams to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that may pose a risk to data subjects' rights, 599pg will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes required by the LGPD — no later than 2 business days after becoming aware of the incident.

Your role in security: 599pg protects your data within the platform. However, the security of your password and access to your device is your responsibility. Use unique passwords, enable 2FA, and never share your credentials with anyone.

8

Cookies and Tracking Technologies

The 599pg uses cookies and similar technologies to ensure the platform works correctly and to understand how users interact with its services. The cookies used fall into the following categories:

  • Essential cookies: required for the platform to function — authentication, session management, form security. Without these cookies, the platform cannot operate. They cannot be disabled;
  • Performance cookies: collect information about how pages are used, which features are accessed most, and where errors occur. The data is aggregated and anonymous — individual users are not identified;
  • Functionality cookies: remember your preferences such as language, font size, and game settings to personalize your experience on future visits;
  • Analytical cookies: used to measure the effectiveness of platform improvements. Data is processed in aggregate form and is not linked to your identity.

599pg does not use third-party tracking cookies for behavioral advertising outside the platform. You can configure your browser to block cookies, but this may affect how some platform features work.

Cookies have a maximum lifespan of 13 months from your last visit to the platform. Session cookies are automatically deleted when you close your browser.

9

Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as the owner of your personal data, a set of rights that 599pg upholds and puts into practice. See each right and how to exercise it:

Right of Access

You can request a full copy of all personal data 599pg holds about you. We process the request within 15 business days and send the report to the email address registered on your account.

Right to Rectification

If any of your information is incorrect or out of date, you can update it directly in your account settings, or contact support for data that cannot be edited by the user — such as your registered CPF.

Right to Erasure

You may request the deletion of your personal data. Data subject to legal retention periods (such as financial records) is kept for the period required by law before being erased. All other data is deleted within 15 business days.

Right to Data Portability

You can request that your data be exported in a structured, machine-readable format (JSON or CSV) so it can be transferred to another data controller, where technically feasible.

Right to Object

You may object to the processing of your personal data when it is based on legitimate interest, particularly for promotional communication purposes. Objections are processed immediately for email and SMS.

Right to Information

You have the right to know which third parties your data has been shared with, how long it is retained, and the legal basis used for each processing purpose — all described in this policy in plain language.

To exercise any of these rights, submit your request in writing to contato@599pg.click or via the 24/7 support chat, identifying yourself with the email address and CPF registered on your account. 599pg will respond within the legal deadline of 15 business days and may request identity verification before processing sensitive requests.

If you believe that 599pg has not adequately responded to your request or has violated your privacy rights, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

10

Users Under 18

The services of 599pg are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and has active controls in place to prevent underage users from registering.

If 599pg identifies that an account was created by someone under 18, the account will be closed immediately, the collected data will be deleted as soon as technically possible, and any deposited funds will be returned to the original payment method.

Adults who share devices with minors are responsible for protecting access to the platform using a password or other parental control measures available on their device or browser. 599pg cannot be held liable for access by minors resulting from the legal guardian's negligence in controlling access to the device.

11

International Data Transfer

Some of the service providers used by 599pg — such as cloud hosting services, CDN (content delivery networks), and international game providers — may process data on servers located outside Brazil.

When this occurs, 599pg ensures that international data transfers only take place to countries or organizations that offer an adequate level of protection, as determined by the ANPD, or on the basis of specific contractual clauses that impose data protection obligations equivalent to those of the LGPD.

The main countries where data may be processed by third-party providers are: the United States, the European Union, and the United Kingdom — all of which have robust personal data protection regulatory frameworks. No data transfers occur to countries without adequate protection guarantees unless the safeguards required by the LGPD are in place.

12

Contact, DPO & Privacy Channel

The 599pg has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and serving as the communication channel between data subjects, the company, and the Autoridade Nacional de Proteção de Dados (ANPD).

To contact 599pg's DPO or privacy team:

  • Email: contato@599pg.click (subject line: "Privacy / LGPD")
  • 24/7 support chat: available on the platform after login — please indicate that your request concerns data privacy
  • Form in your account: in Settings > Privacy > Request data or deletion

All requests received are logged with a ticket number, confirmed by email. The response deadline is up to 15 business days, which may be extended in complex cases, with prior notice to the requester.

Complaints to the ANPD: If you are not satisfied with 599pg's response, you have the right to file a formal complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing the LGPD. More information at gov.br/anpd.

13

Changes to This Privacy Policy

The 599pg may update this Privacy Policy periodically to reflect changes to the platform, applicable legislation, or data processing practices.

When changes are significant — such as updates to data use purposes, new types of data collected, or new third-party sharing arrangements — 599pg will notify users by email at least 10 days before the changes take effect.

Minor changes — such as text corrections, language clarifications, or reorganizations that do not alter the substantive content — may be made without prior notice. The "Last updated" date at the top of this policy will always reflect the most recent revision.

Continued use of the platform after the updated policy's effective date constitutes acceptance of the new terms. If you disagree with the changes, you may close your account and request deletion of your data before the new version takes effect.

How Your Data Moves Through 599pg

From registration to deletion, a transparent and controlled lifecycle.

1
Purpose-Specific Collection

Each piece of data collected has a specific, declared purpose before or at the time of collection. You always know why we are asking for each piece of information.

2
Secure and Encrypted Storage

Data is stored on servers with controlled access, encryption at rest, and continuous monitoring. Only staff members with a genuine need to access your information are able to do so.

3
Limited to Purpose

Your data is used exclusively for the purposes described in this policy. No data is redirected to other purposes without prior notice and, where applicable, without your consent.

4
Deletion at End of Retention Period

When the legal retention period expires, data is securely deleted or irreversibly anonymized. No unnecessary data is kept accumulating indefinitely.

Regulated License
256-bit SSL
LGPD Compliance
Data Not Sold
DPO Available
Guaranteed Rights

Frequently Asked Questions About Privacy at 599pg

The most common questions about how we handle your personal data.

No. Your password is never stored as plain text at 599pg. When you create or change your password, it goes through a process called cryptographic hashing — which converts the password into an irreversible code. The system only checks whether the hash of what you typed matches the stored hash, without ever needing to know the original password. Neither the support team nor 599pg's technical administrators can view your password. If you forget it, the only option is to reset it via email.

Not immediately, but on a scheduled basis and within legal timeframes. Upon account closure, 599pg initiates the deletion process for data not subject to legal retention obligations. Financial records, for example, must be kept for 5 years under Brazilian tax law — this is not 599pg's choice, it is a legal requirement. Once all applicable retention periods have expired, data is permanently deleted from our systems. You may request confirmation of the deletion process by email at any time after closing your account.

No. 599pg does not sell, rent, or share your personal data with marketing companies, advertising firms, or any other entity for commercial purposes. Data sharing occurs exclusively with service providers necessary to operate the platform — such as Pix payment processors and game providers — and with authorities when required by law. All sharing categories are described in Section 5 of this policy.

You can unsubscribe from promotional emails in three ways: by clicking the "Unsubscribe" link in the footer of any promotional email you receive; by going to your account settings, under "Notifications", and turning off marketing communications; or by contacting 24/7 support via chat. Unsubscription is processed within 48 hours. Even after unsubscribing, you will continue to receive essential transactional communications — withdrawal confirmations, account security alerts, and policy updates — which are not optional as they are part of the service's operation.

In the event of a merger, acquisition, or any substantial transfer of 599pg's assets, user data may be transferred to the new controller. In such a scenario, 599pg commits to notifying users by email with adequate notice — at least 30 days before the transfer — informing them who the new controller will be, how their data will be handled, and what options will be available, including the ability to close their account and request deletion of their data before the transfer. The new controller would be contractually required to honor the commitments set out in this privacy policy for all data received.

Yes, that is the right of access guaranteed by the LGPD. To request a full report of your data, send an email to contato@599pg.click with the subject line "Data Access Request – LGPD" or use the form at Settings > Privacy on the platform. Confirm your identity with your registered email and CPF. 599pg will process the request within 15 business days and send the report to your account email in a structured format, including registration data, transaction history, support communication history, and account settings.

Play at 599pg with the Confidence of Knowing Your Data Is Protected

Privacy and fun don't have to be at odds. At 599pg, you have full control over your data while enjoying over 1,200 games, Pix payouts in as little as 7 minutes, and 24/7 support in Portuguese.

  • Secure registration — CPF protected with encryption from the very first access
  • Transactions via Pix, boleto, card, or Mercado Pago — all tokenized
  • Your data is never sold to third parties for advertising
  • Exercise your LGPD rights at any time through 24/7 support
This Page Is About the Protection of Your Data at 599pg

599pg collects and processes your personal data in accordance with the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018). You have the right to access, correct, port, or request deletion of your data at any time. To exercise your rights, contact us at contato@599pg.click or via the 24-hour support chat available on the platform. You can also consult our Terms & Conditions and the Responsible Gambling.

Português