🔒 Privacy – 999xp
At 999xp, your personal data is handled with the same care you put into your bets — with attention, responsibility, and full transparency. Here we explain exactly what we collect, why we collect it, and how we protect every piece of your information.
Plain-language summary: The 999xp collects only the data necessary to keep the platform running — registration, payments, and security. We never sell your data to any company. You can request deletion of your information at any time. Everything is in full compliance with Brazil's General Data Protection Law (LGPD).
The controller responsible for processing your personal data is the 999xp, a Sports Betting and online casino platform accessible at https://999xp.my. By creating an account, making deposits, placing bets, or interacting with any feature on the platform, you establish a relationship with the 999xp as the controller of your data, pursuant to Law No. 13.709/2018 (General Data Protection Law — LGPD).
This Privacy Policy describes how the 999xp collects, uses, stores, shares, and protects the personal data of its users. It applies to all services available on the platform, including Sports Betting (Brasileirão, Copa do Brasil, Libertadores, NBB, UFC), slots, blackjack, crash games, live casino, and e-sports.
If you have any questions about how your data is handled, you can contact the Data Protection Officer (DPO) of the 999xp by email at privacidade@999xp.my.
The 999xp collects personal data at various points during your interaction with the platform. Below are the data categories and the contexts in which they are collected:
Data you provide directly:
Automatically collected data:
Financial transaction data:
The 999xp uses your personal data exclusively for the following purposes:
Important: The 999xp does not use your data for automated decision-making that produces legal effects or significantly affects your rights without the possibility of human review.
All data processing carried out by the 999xp is grounded in one of the legal bases set out in the General Data Protection Law (LGPD — Law No. 13,709/2018):
| Purpose | Legal Basis (LGPD) |
|---|---|
| Account registration and management | Contract performance (Art. 7, V) |
| Processing of deposits and withdrawals via Pix, boleto, TED | Contract performance (Art. 7, V) |
| Identity Verification (KYC) | Legal obligation + contract performance (Art. 7, II and V) |
| Fraud Prevention and Anti-Money Laundering | Legitimate interest + legal obligation (Art. 7, II and IX) |
| Operational communications (security, withdrawals) | Contract performance (Art. 7, V) |
| 999xp Marketing and Promotions | Data subject consent (Art. 7, I) |
| Platform analytics and improvement | Legitimate interest (Art. 7, IX) |
| Disclosure to competent authorities | Legal obligation (Art. 7, II) |
The 999xp does not sell, rent, or trade your personal data to third parties under any circumstances. Data sharing occurs only in the following situations, and always limited to the minimum necessary for the specific purpose:
All partners and service providers that receive data from users of the 999xp are contractually required to protect this information to standards equivalent to those in this Policy and in compliance with the LGPD.
The 999xp retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations:
Once retention periods expire, data is deleted or irreversibly anonymized, except where retention is required by court order or a specific legal obligation.
The 999xp implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
Your role in security: The 999xp will never ask for your password by email, chat, or phone. If you receive any communication requesting your credentials, ignore it and report it immediately to the platform's 24/7 support.
The 999xp uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. See the types of cookies used below:
You can manage your cookie preferences through the banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies may affect how your account functions on the 999xp.
The General Data Protection Law grants you, as the data subject, the following rights regarding the processing carried out by the 999xp:
To exercise any of these rights, please contact the DPO of 999xp by email at privacidade@999xp.my or via the 24/7 support chat. Requests will be responded to within 15 (fifteen) business days, in accordance with the LGPD.
The 999xp is a platform intended exclusively for users aged 18 (eighteen) and over. The platform does not intentionally collect, store, or process personal data belonging to minors.
The identity verification (KYC) process includes date of birth confirmation and CPF validation against reference databases to ensure no user under 18 completes registration. Accounts opened with falsified information by minors will be closed immediately upon detection, and the data will be handled in accordance with applicable legal obligations.
If you believe a minor under 18 has created an account on the 999xp, contact platform support immediately via 24/7 live chat or by email at contato@999xp.my so the situation can be investigated and resolved as a priority.
The 999xp may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or platform services. When material changes are made:
Continued use of the 999xp after the effective date of the new terms constitutes acceptance of the changes. If you do not agree with the updated Policy, you may close your account before the effective date without penalties, and any pending real balance withdrawals will be processed.
To exercise your rights as a data subject, clarify any questions about how your data is processed, or file a privacy-related complaint, please contact the Data Protection Officer (DPO) of the 999xp:
If you believe that 999xp did not adequately respond to a request related to your personal data, you have the right to file a complaint with the National Data Protection Authority (ANPD), pursuant to Art. 55-J of the LGPD.
Six concrete measures 999xp has implemented to keep your data secure
All communication between your phone or computer and the servers of the 999xp is encrypted with 256-bit SSL — the same technology used by Brazil's largest banks. This applies to login, Pix and TED deposits, withdrawals, bets, and any data transmitted through the platform.
The 999xp does not sell users' personal data to any third party. Your CPF, your Brasileirão betting history, your banking details for withdrawals — none of this is shared with marketing companies, data brokers, or any other entity outside the operational needs described in this Policy.
The General Data Protection Law (LGPD) establishes clear rules on how companies may process data belonging to Brazilian citizens. The 999xp has aligned all its data collection, storage, and usage processes with LGPD requirements, with a declared legal basis for each processing purpose.
Two-factor authentication (2FA) is available to all users of the 999xp and can be enabled in seconds from your account dashboard. With 2FA active, even if someone obtains your password, they cannot access your account without the code generated on your phone.
Identity verification on the 999xp exists to protect the account holder. By confirming that only you can withdraw to accounts in your name via Pix, Nubank, Itaú, Bradesco, or any Brazilian bank, the platform prevents third parties from moving your funds even if your credentials are ever compromised.
The rights provided under the LGPD — access, correction, portability, deletion, withdrawal of consent — are not just words in a policy. At the 999xp, you can submit them through the DPO (privacidade@999xp.my) or via 24/7 support, with a guaranteed response within 15 business days.
The LGPD guarantees concrete rights — see how to exercise them on the platform
Request a copy of all personal data that 999xp stores about you — registration details, betting history, Pix transactions, and KYC documents. Response within 15 business days.
Found incorrect information in your 999xp profile? 999xp? Submit a correction request via 24/7 support. Email address, mobile phone number, and residential address can be updated directly in the account dashboard.
Request the deletion of your personal data processed on the basis of consent. Data that the 999xp is required by law to retain (financial transactions, KYC records) will be anonymized once the legal retention period expires.
Receive your data in a structured format (CSV or JSON) for transfer to another controller. Useful if you want to migrate your betting history to another regulated platform in Brazil.
Unsubscribed from promotional emails and updates from 999xp? Withdraw your consent via the unsubscribe link in any marketing email or directly through your account settings.
Find out which partners 999xp with whom your data was shared, the legal basis used, and the applicable retention periods. The DPO (privacidade@999xp.my) responds to these requests with complete transparency.
The most frequently asked questions about how 999xp handles your data
999xp uses gameplay behavior data to protect users, not to exploit them
The 999xp analyzes gambling patterns to identify risky behavior and trigger responsible gambling alerts — never to increase consumption.
Set daily, weekly, and monthly deposit limits in the account dashboard. The 999xp uses your transaction data to make those limits actually work.
Suspend access to your account for 24 hours, 7 days, or 30 days directly from your dashboard — no need to contact support, no questions asked.
CPF and identity verification (KYC) is not just a legal requirement — it is the barrier that prevents anyone under 18 from accessing the platform.
Privacy questions? Contact the DPO of 999xp by email at privacidade@999xp.my. For general account inquiries, use the 24/7 support chat. See also the Terms and Conditions for the platform's full terms and conditions.
The 999xp protects your privacy with encryption, LGPD compliance, and full transparency at every step. Sign up securely, deposit via Pix, and bet on Brazilian football with the confidence of knowing your data is in safe hands.