Learn how AA99 collects, uses, stores, and protects your personal data. This document is written in plain language so you know exactly what happens to your information — no unnecessary legal jargon.
The AA99 respects every player's privacy and treats data protection as a genuine obligation — not a footnote disclaimer. This Privacy Policy clearly and objectively describes what information we collect, how we use it, who we may share it with, and what your rights are as a data subject, in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018).
By creating an account, making a deposit, playing, or simply browsing the platform AA99, you acknowledge that you have read and understood this policy. If you have any questions, our privacy team is available at the address listed in section 13 of this document.
The controller responsible for processing your personal data is the platform AA99, operated through the domain aa99.express. For LGPD purposes, the controller is the entity that determines which data is collected, for what purpose, and how it is processed.
For questions, requests, or the exercise of rights related to your personal data, you may contact the Data Protection Officer (DPO) of the AA99 can be done by email: privacidade@aa99.express.
The AA99 has appointed a Data Protection Officer (DPO) as required by the LGPD to oversee the platform's privacy practices and handle data subject requests.
The AA99 collects only the data strictly necessary to provide the platform's services, meet legal obligations, and continuously improve the player experience. The categories of data processed are outlined below:
| Category | Data collected | Time of collection |
|---|---|---|
| Identification | Full name, CPF, date of birth | Registration |
| Contact | Email, mobile number | Registration |
| Address | ZIP code, city, state, full address | Registration / KYC |
| Documents | National ID, driver's license, or passport (front and back), selfie | KYC Verification |
| Financial | Pix key, bank details for wire transfers, card brand (full card number not stored) | Deposit / Withdrawal |
| Responsible Gambling | Limit preferences, self-exclusion request history | Platform usage |
Minimization principle: The AA99 follows the data minimization principle established by the LGPD — we collect only what is necessary for each specific purpose. We do not collect sensitive data such as racial origin, religious beliefs, or health data, except where required by applicable specific legislation.
The personal data collected by the AA99 are used exclusively for the purposes described below. Each purpose is tied to a specific legal basis (detailed in section 4):
Every data processing operation carried out by the AA99 is grounded in at least one of the legal bases set out in the LGPD:
| Legal Basis | Corresponding purpose |
|---|---|
| Contract performance (art. 7, V) | Registration, processing of deposits and withdrawals via Pix and other methods, access to games |
| Legal obligation compliance (art. 7, II) | KYC, anti-money laundering, compliance with competent authorities, LGPD |
| Legitimate interest (art. 7, IX) | Platform security, fraud detection, abuse prevention, service improvement |
| Consent (art. 7, I) | Sending marketing communications, promotions, and offers from the AA99; use of non-essential cookies |
| Protection of life (art. 7, VII) | Interventions in risk situations identified by the responsible gambling program |
When processing is based on consent, you have the right to withdraw that consent at any time — without affecting any processing already carried out on the basis of consent previously given.
The AA99 does not sell, rent, or share your personal data with third parties for commercial purposes. Information is only shared in the situations below, with partners who are equally committed to adequate data protection standards:
All third parties that receive personal data from AA99 are subject to contracts that include specific data protection clauses, prohibition of use for purposes other than those contracted, and an obligation to notify in the event of security incidents.
The platform AA99 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — for analytics and personalization purposes.
| Type | Purpose | Consent |
|---|---|---|
| Essential | Session authentication, security, and core platform functionality | Not required |
| Functional | Save user preferences (language, configured limits) | Not required |
| Analytics | Platform usage and performance analysis (aggregated data) | Required |
| Personalization | Display of content and promotions relevant to the player's profile | Required |
You can manage your cookie preferences at any time through your browser settings. Disabling essential cookies may affect certain platform features, such as login and transaction processing.
The AA99 does not use cookies to collect health data, sexual orientation, racial origin, or any other sensitive categories of information.
The AA99 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum periods required by Brazilian law:
After the periods above, data is securely deleted or anonymized for statistical purposes. Early deletion requests can be submitted as described in section 9, but may be limited by legal obligations that prevent immediate removal.
The AA99 adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key safeguards in place include:
In the event of a security incident that may affect your personal data, the AA99 will notify the National Data Protection Authority (ANPD) within the timeframe established by the LGPD and will inform affected data subjects when the risk is significant, via registered email or a notice on the platform.
The LGPD grants you, as a data subject, a set of rights that may be exercised at any time with the AA99. All requests are handled within the legally required timeframe:
To exercise any of these rights, submit your request to privacidade@aa99.express with the subject line "LGPD Rights – [your name]". We will respond within the timeframe established by law, generally within 15 business days. To verify your identity before processing the request, we may ask you to confirm some account details.
The platform AA99 is strictly intended for users aged 18 and over. We do not knowingly collect personal data from minors, and any account identified as belonging to a minor will be immediately cancelled, with all collected data deleted upon confirmation of closure.
Parents and legal guardians who identify that a minor has created an account on the AA99 should contact our support team immediately at suporte@aa99.express so the account can be closed and the data deleted on a priority basis.
The AA99 uses date-of-birth verification at registration and KYC processes that include document review to prevent minors from accessing the platform. Even so, if you believe a minor is using the platform, please report it to our support team immediately.
Part of the technical infrastructure of the AA99 — including hosting servers, game providers, and security services — may be located outside Brazil. When your data is transferred internationally, the AA99 will ensure that:
Providers such as Evolution Gaming (Latvia/Malta), Pragmatic Play (Malta), and NetEnt (Sweden) operate under European data protection regulations (GDPR), which offer stringent privacy standards compatible with the principles of the Brazilian LGPD.
The AA99 may periodically update this Privacy Policy to reflect changes in the services offered, applicable legislation, or internal data protection practices.
Any significant changes will be communicated at least 7 days in advance via email to your registered address and through a prominent notice on the platform. The most recent version of this policy will always be available on this page, with the last updated date clearly shown at the top of the document.
Continued use of the platform AA99 after the changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account and request data deletion as described in section 9.
For any questions regarding the processing of your personal data by the AA99, you can reach us through the following channels:
If, after contacting the AA99, you feel your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil, accessible at gov.br/anpd.
You may also file complaints through your state's Procon or at consumidor.gov.br, particularly for matters related to the Consumer Protection Code.
Our Commitments
Beyond the legal texts, here are the concrete commitments that AA99 commits to each player regarding data protection.
All communication between your phone or computer and the servers of AA99 is encrypted to 256-bit banking-grade standard. Your login credentials, Pix key, CPF, and betting history are never transmitted as plain text — not over your workplace Wi-Fi, not over 4G.
Banking-grade standardThe AA99 operates in compliance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018). We have a designated DPO (Data Protection Officer), documented internal processes, and contracts with partners that ensure your data is protected throughout the chain.
LGPD CompliantThe AA99 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is only shared with partners when strictly necessary for service delivery — Pix processing, identity verification, game operation — and always under a contractual confidentiality obligation.
No data sellingAt AA99, you can access, correct, export, or request the deletion of your personal data at any time. Withdrawing consent for marketing communications is simple: just go to your account settings or get in touch with our DPO.
Full controlIn the event of any security incident that may affect your data, the AA99 will notify both the ANPD and the affected data subjects within the legally required timeframes. No hiding problems — transparency is part of our commitment to you.
Active transparencyThe AA99 retains your data only for as long as necessary for the stated purposes and legal requirements. When data is no longer needed, it is securely deleted or anonymized. Nothing is stored indefinitely without a purpose.
Guaranteed deletionLGPD in Practice
Law No. 13,709/2018 grants data subjects concrete rights. See how to exercise them with the AA99:
Receive a full copy of all personal data that AA99 holds about you, in a readable format.
Request the correction of any incomplete, inaccurate, or outdated information in your aa99 profile. AA99.
Request the deletion of data processed on the basis of consent, where there is no legal retention obligation.
Request the temporary restriction of unnecessary, excessive, or irregular data processing.
Receive your data in a structured format for transfer to another service provider where applicable.
Object to data processing when you disagree with the legal basis invoked by the AA99 for a given transaction.
Withdraw consent given for marketing or other consent-based purposes at any time.
Find out which third parties AA99 shares your data and the legal basis for each processing activity.
To exercise any right, please get in touch: privacidade@aa99.express
Free registration with full LGPD protection. Deposit via Pix from R$ 20.00 and enjoy over 2,000 games with real security.
Common Questions
Contact the Data Protection Officer (DPO) of the AA99 by email privacidade@aa99.express. For general inquiries, support is available at suporte@aa99.express or via 24/7 live chat. Also read our Terms and Conditions and the Responsible Gambling.