44brjogos Privacy Policy: How Your Data Is Protected

1. Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the controller of personal data processed in connection with the services of 44brjogos is the company operating the platform, headquartered in Brazil. All decisions regarding data processing — what to collect, how to use it, how long to retain it, and with whom to share it — are made by 44brjogos, who is directly responsible for your rights as a data subject.

When you create an account, deposit via Pix or boleto bancário, place Sports Betting wagers on the Brasileirão or Libertadores, play poker, access the live casino, or join the VIP Program, you enter into a data processing relationship with 44brjogos governed by this Policy and by the LGPD.

To contact our Data Protection Officer (DPO), see section 13 of this document.

2. Data We Collect

2.1 Data provided directly by you

By registering and using 44brjogos, we collect:

• Identification data: full name, CPF, date of birth, gender (optional), and a photo of a government-issued ID (RG or CNH) when required for KYC verification;
• Contact details: email address, mobile number, and full residential address (ZIP code, street, neighborhood, city, state);
• Financial data: payment method used (Pix, bank slip, card, PicPay, Mercado Pago, TED), Pix key, bank details for withdrawals, and transaction history in BRL (R$). Credit and debit card data is not stored on our servers — it is processed directly by our PCI-DSS certified payment gateway;
• Account data: login, betting history, sports and market preferences, balance, VIP Program history, and support communications.

2.2 Automatically collected data

When you access the platform — via the website or the Android and iOS app — we automatically collect:

• IP address and approximate geographic location;
• Browser type and version, or mobile operating system;
• Pages visited, session duration, and browsing patterns;
• Device identifiers (Device ID) for the mobile app;
• Cookie and similar technology data (see section 7).

2.3 Third-party data

In specific cases, we may receive your data from trusted external sources: identity verification services for KYC (know your customer) purposes, credit bureaus for fraud prevention, and the Receita Federal for CPF validation. This data is used exclusively for the purposes stated in this Policy and is never combined with marketing data.

3. Purposes and Legal Bases for Processing

A 44brjogos processes your personal data based on the following purposes and legal grounds under the LGPD:

4. Data Sharing

A 44brjogos does not sell, rent, or share your personal data with third parties for commercial or marketing purposes. Data is only shared in the following situations, all with a clear operational or legal purpose:

4.1 Operational partners

• Payment processors: to process deposits and withdrawals via Pix, bank slip, credit and debit cards (Visa, Mastercard, Elo), PicPay, Mercado Pago, and TED transfers through domestic banks. These partners act as processors under contract and may not use your data for their own purposes;
• KYC and fraud prevention providers: certified services that assist with identity verification and detection of suspicious activity, operating under strict confidentiality agreements;
• Technology infrastructure providers: cloud hosting, CDN, and security monitoring services, all with servers located in Brazil or in jurisdictions with an equivalent level of data protection;
• Live Casino and poker providers: certified providers of games streamed in real time, who receive only the data necessary to run the game session.

4.2 Legal obligation

We may share data with Brazilian public authorities — Receita Federal, COAF, Polícia Federal, or Ministério Público — when required by law, court order, or regulatory process, including in the context of Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT) obligations under current Brazilian legislation.

5. Data Retention

A 44brjogos retains your personal data only for as long as necessary for each purpose, respecting the minimum retention periods required by Brazilian law:

• Identification and account data: retained for the entire duration of the active account and for up to 5 years after closure, for the purpose of fulfilling legal obligations and resolving any disputes;
• Financial transaction records: retained for 5 years as required by tax and AML/CFT legislation;
• Betting and game history: retained for up to 3 years after the last account activity, for responsible gaming analysis and dispute resolution purposes;
• Records of support communications: retained for up to 2 years for quality assurance and dispute resolution purposes;
• Cookie and browsing data: depending on each cookie type's configuration, between 30 days and 13 months (see section 7).

Once the applicable retention periods have expired, data is securely anonymized or deleted. Anonymized data — which cannot be used to identify the data subject — may be retained indefinitely for statistical purposes.

6. Data Security

A 44brjogos implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL Encryption across all communications between your browser or mobile device and the platform's servers — the same standard used by Brazil's leading digital banks;
• Encrypted storage of passwords using irreversible hashing — no employee of 44brjogos has access to your password;
• Two-factor authentication (2FA) available to all users and mandatory for internal administrative access accounts;
• Continuous monitoring of accesses and suspicious activity using automated intrusion detection systems;
• Access control based on the principle of least privilege — employees of 44brjogos only access the data necessary for their specific role;
• Periodic security testing including pentests and vulnerability audits conducted by independent specialized firms;
• Incident response plan with a notification protocol to the ANPD (National Data Protection Authority) and affected data subjects in the event of a data breach that may generate risk.

7. Cookies and Tracking Technologies

A 44brjogos uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and analyze service performance. The types of cookies used are:

7.1 Strictly necessary cookies

Essential for the platform to function. These include session, authentication, and security cookies. They cannot be disabled as they are indispensable for using the services of 44brjogos. They do not collect information for marketing purposes.

7.2 Functionality cookies

These allow the platform to remember your preferences — such as language, favorite sports, betting settings, and session state. They improve your experience without any analytical or advertising purpose.

7.3 Analytical cookies

These help us understand how users interact with the platform — which pages are visited most, where errors occur, and how to improve the experience. Data is aggregated and anonymized. You can opt out of these cookies in the cookie settings available on the platform.

7.4 How to manage cookies

You can manage your cookie preferences through your browser settings or via the privacy settings panel available in your account at 44brjogos. Disabling necessary cookies may affect how the platform functions. In the Android and iOS mobile app, tracking permissions can be managed through your device's operating system settings.

8. Your Rights as a Data Subject

The LGPD grants you, as the data subject, the following rights regarding your personal data processed by 44brjogos:

To exercise any of these rights, contact our Data Protection Officer by email at contato@44brjogos.net, specifying the right you wish to exercise and the particular data it concerns. The response deadline is up to 15 business days, in accordance with the LGPD.

9. Protection of Minors

A 44brjogos is a betting and gaming platform intended exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. Registration requires a CPF and date of birth, both of which are automatically validated during the account creation process.

If we identify that an account belongs to a minor — through any verification method — the account is immediately closed, the data is deleted in accordance with minimum legal retention periods, and any deposited balance is refunded to the verified legal guardian.

10. International Data Transfers

A 44brjogos prioritizes storing and processing data on servers located in Brazil. In specific situations — such as the use of live casino providers or cloud infrastructure with regional data centers — data may be transferred to countries whose data protection legislation is equivalent to Brazil's.

When such a transfer takes place, we require the receiving partner to:

• Be located in a country recognized by the ANPD as providing an adequate level of data protection, or
• Have signed Standard Contractual Clauses equivalent to those required by the LGPD, ensuring your data receives the same protections abroad as it does in Brazil.

You may request information about the specific international transfers involving your data through the DPO contact channel listed in section 13.

11. Automated Decisions and Profiling

A 44brjogos uses automated processes in certain operational and security situations, including:

• Fraud detection and suspicious behavior — such as multiple accounts, VPN use, or manipulative betting patterns;
• Automatic calculation of points and level progression in the VIP Program;
• Identification of concerning gambling patterns for responsible gambling purposes;
• Personalization of bonus suggestions based on your Sports Betting history (football, volleyball, basketball, poker).

When an automated decision significantly affects your rights — such as an account block or a withdrawal denial — you have the right to request a human review of that decision. To do so, contact 44brjogos via live chat or by emailing contato@44brjogos.net, explaining the situation. The review will be carried out by an analyst within 5 business days.

12. Changes to This Policy

A 44brjogos may update this Privacy Policy to reflect changes in data processing practices, Brazilian legislation, or the services offered. Significant changes — those affecting your rights or the way we use your data — will be communicated at least 15 days in advance via email and/or a notification on the platform.

For lower-impact changes — such as editorial corrections, contact updates, or language clarifications — publishing the new version with an updated date is sufficient notice. We recommend reviewing this Policy periodically.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy. If you do not agree with the changes, you may exercise your right to data deletion or close your account before the effective date.

13. Contact the Data Protection Officer

To exercise your rights as a data subject, clarify questions about this Policy, or file a complaint regarding the processing of your data, you may contact the Data Protection Officer (DPO) of 44brjogos through the following channels:

If, after contacting us, you believe your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the authority responsible for enforcing the LGPD in Brazil.