🔒 PRIVACY POLICY

Kez999 Privacy Policy — How We Protect Your Data

This document clearly explains how kez999 collects, uses, stores, and protects your personal data, in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018). Take a moment to read it — your data belongs to you, and you have the right to know exactly what we do with it.

Last updated: January 2026

Plain-Language Summary

The key points of this policy, so you can understand the essentials without reading the entire document first

Your data is never sold

Kez999 never sells personal information to third parties. Full stop. We only share data when necessary to deliver the service — and under a confidentiality agreement.

256-bit SSL Encryption

Every page on kez999 that involves personal data or financial transactions is protected by 256-bit SSL encryption — the same standard used by Brazil's leading digital banks.

LGPD Compliance

Kez999 operates in compliance with the General Data Protection Law (Lei nº 13.709/2018) and upholds all data subject rights guaranteed under Brazilian law.

You control your data

You can access, correct, port, and request deletion of your data at any time — no lawyer or legal proceedings required. Simply contact our support team.

Marketing only with your consent

Promotional emails, push notifications, and SMS from kez999 are only sent if you choose to receive them. You can opt out at any time through your account dashboard.

Data retention with defined timeframes

Kez999 does not store your data indefinitely. Retention periods are defined by purpose and comply with the minimum timeframes required under Brazilian law.

1

Who We Are — Your Data Controller

The kez999 is the operator of the Sports Betting and online casino platform available at kez999.net, intended exclusively for players residing in Brazil who are 18 years of age or older. For the purposes of the General Data Protection Law (LGPD), the kez999 acts as controller of the personal data collected during use of the platform.

As the data controller, the kez999 is responsible for defining the purposes and means of processing your data, ensuring compliance with the LGPD, and responding to requests related to your rights as a data subject. Any privacy-related questions can be directed to the support channel indicated in section 13 of this document.

This Privacy Policy applies to all data collected through the kez999 platform, including the website, email and SMS communications, and the use of the mobile app, where available. By creating your account, you acknowledge that you have read and understood this document.

2

What Data We Collect and How

The kez999 collects only the data necessary to provide the service securely and in compliance with Brazilian law. Below are the categories of data we process:

Data provided by you

Identification dataFull name, CPF, date of birth, RG or CNH — collected during registration and identity verification (KYC).
Contact detailsEmail address, mobile phone number, and full residential address including zip code.
Financial dataBanking details for payment processing via Pix, TED, credit/debit card, PicPay, or Mercado Pago — including your Pix key, bank, and branch for withdrawals.
Identity documentsDocument images submitted for the KYC process: front and back of your RG, CNH, or passport, and a recent proof of address.

Data generated through platform use

Betting and game historyA record of all Sports Betting activity (Brasileirão, Copa do Brasil, etc.), Live Casino sessions, slots rounds, and crash games.
Transaction dataFull history of deposits, withdrawals, bonuses received, and balance movements on the kez999 platform.
Technical dataIP address, browser type and version, operating system, device identifier, screen resolution, and session data.
Location dataApproximate location based on IP address, used to verify that you are in Brazil and to detect suspicious access from other countries.

The kez999 does not collect biometric data such as fingerprints or facial recognition, nor sensitive data such as ethnic origin, religious beliefs, or health information.

3

How We Use Your Data

Every piece of data collected by kez999 has a specific, documented purpose. We do not process data in a generic manner or for purposes you have not been informed about. The main purposes are outlined below:

  • Account creation and management: verify your identity, validate your CPF, and create and maintain your active account on the platform;
  • Processing of financial transactions: process deposits via Pix, credit/debit card, PicPay, Mercado Pago, TED, and boleto, and execute withdrawals to your registered bank account;
  • Identity Verification (KYC): confirm that you are over 18, that you are a resident of Brazil, that your CPF is valid, and that you are not on a self-exclusion list;
  • Provision of betting and casino services: record bets, calculate winnings, apply bonuses, and manage gaming history;
  • Fraud and money laundering prevention: monitor transaction patterns and suspicious behavior to protect the platform and all users;
  • Compliance with legal obligations: comply with requests from Brazilian judicial, tax, and regulatory authorities in accordance with applicable law;
  • Account communications: send bet confirmations, security alerts, withdrawal notifications, and updates regarding changes to the Terms and Conditions;
  • Marketing (with your consent): send communications about promotions, new games, special offers, and loyalty programs — only to users who have opted in to receive this type of message;
  • Responsible Gambling: monitor usage patterns that may indicate problematic behavior and trigger protective tools when necessary;
  • Platform improvement: analyze usage data in aggregated, anonymized form to identify issues and improve the player experience.

The kez999 never uses your data to build credit profiles, share with insurance companies, sell to data brokers, or for any purpose beyond those listed above. If this changes, you will be notified before the change takes effect.

4

Legal Basis for Data Processing

The LGPD requires that every personal data processing activity be grounded in a specific legal basis. The kez999 applies the following legal bases as set out in Article 7 of Law No. 13.709/2018:

  • Contract performance (art. 7, V): processing necessary to fulfill the platform usage agreement you entered into upon registration — including bet processing, payments, and account management;
  • Compliance with a legal obligation (art. 7, II): processing required by Brazilian law, including anti-money laundering regulations, tax obligations, and court orders;
  • Legitimate interest (Art. 7, IX): fraud prevention, platform security, and service improvement — provided these purposes do not override your fundamental rights;
  • Consent (art. 7, I): sending marketing communications, using non-essential cookies, and personalizing content — you can withdraw this consent at any time.

For each processing purpose, the kez999 identifies the applicable legal basis and documents it internally in its Data Processing Activities Record (RAT), as required by Article 37 of the LGPD.

5

Data Sharing with Third Parties

The kez999 does not sell your personal data to anyone. Sharing with third parties occurs only in the following situations, strictly necessary for the operation of the service:

Payment processors

To process deposits and withdrawals, the kez999 shares only the minimum necessary financial data with its payment processor partners — companies responsible for intermediating transactions via Pix, TED, credit/debit card, PicPay, and Mercado Pago. All payment partners are bound by data protection agreements and are subject to regulation by the Central Bank of Brazil.

Identity verification providers

The KYC process may involve partners specialized in document verification and fraud prevention. These partners receive only the document images required for validation and are contractually prohibited from using that data for any other purpose.

Game providers

For Live Casino games, slots, and crash games to work properly, technical session data (anonymized identifier, round balance, result) is shared with game providers. This data does not include CPF, full name, or banking information.

Competent authorities

The kez999 discloses data to Brazilian authorities when required by law, court order, or valid administrative request. In such cases, only the minimum necessary information is shared to fulfill the legal obligation.

Important: none of the third parties listed above are permitted to use your data outside the scope contractually defined with kez999. All data sharing is documented and monitored by our compliance team.

6

Cookies and Tracking Technologies

The kez999 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize the content you see. The categories of cookies used are listed below:

Essential cookies

Required for the platform to function — they keep your session active, ensure login security, and enable core features. These cookies cannot be disabled without impacting platform usability.

Analytical cookies

With your consent, we use analytics cookies to understand how players navigate the kez999 platform. The data collected is aggregated and anonymized — you are never individually identified in these analyses.

Preference cookies

They store your display settings, language, and gaming preferences so you don't have to reconfigure them every time you log in.

Marketing cookies

Only with your explicit consent, we use cookies to personalize communications and advertisements related to kez999. You may withdraw this consent at any time in the platform's privacy settings.

When you first access the platform, you will be prompted to set your cookie preferences. You can update these preferences at any time through your account settings panel.

7

Data Security

The kez999 adopts technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or improper destruction. The main layers of protection are:

  • 256-bit SSL Encryption on all pages involving personal or financial data — the same standard used by Brazil's leading digital banks, such as Nubank, Itaú, and Bradesco;
  • Data encryption at rest — sensitive information stored on the servers of the kez999 are encrypted, so that even in the event of unauthorized database access, the data remains unreadable;
  • Two-factor authentication for critical operations, such as high-value withdrawals;
  • Real-time access monitoring — automated systems detect unusual access attempts and proactively block them;
  • Internal role-based access control — employees of the kez999 have access only to the data necessary for their specific roles, avoiding unnecessary exposure;
  • Periodic security audits — carried out by internal teams and external partners to identify and fix vulnerabilities before they can be exploited.

Despite all controls in place, no system is 100% breach-proof. In the event of a security incident affecting your data, kez999 is committed to notifying you at the registered email address and to reporting the incident to the ANPD (National Data Protection Authority) within the legal deadlines required by the LGPD.

You also play an important role in keeping your account secure: use a strong, unique password for kez999, do not share your credentials with anyone, and enable two-factor authentication in your account settings.

8

How Long We Keep Your Data

The kez999 retains your data for as long as necessary to fulfill the purpose for which it was collected, in compliance with the mandatory minimum retention periods required by law in Brazil. The main timeframes are:

Data category Retention period Justification
Identification data (CPF, full name, date of birth) 5 years after account closure Legal obligation — anti-money laundering (Law No. 9,613/1998)
Financial transaction history 5 years after each transaction Tax and regulatory compliance obligation
Identity documents (KYC) 5 years after account closure Fraud prevention requirement and legal obligation
Betting and game history 3 years after each event Dispute resolution and operational compliance
Access logs and technical data 6 months Security and fraud detection (Marco Civil da Internet)
Marketing communications data Until consent is withdrawn Legal basis: consent (LGPD, art. 7º, I)

Once the retention periods above have expired, data is permanently and irreversibly deleted or anonymized, unless a specific legal obligation requires it to be kept for a longer period.

9

Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as the owner of your data, a set of rights that the kez999 is fully committed to upholding. You can exercise any of these rights through the platform's live chat or by emailing privacidade@kez999.net:

  • Access (art. 18, II): request a copy of all personal data kez999 holds about you, presented in a clear and organized format;
  • Rectification (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data — such as a misspelled name or an old address;
  • Anonymization, blocking, or deletion (art. 18, IV): request the anonymization or deletion of data that is unnecessary or processed beyond the stated purpose;
  • Portability (Art. 18, V): receive your data in a structured, machine-readable format for transfer to another service, upon request;
  • Withdrawal of consent (art. 18, IX): withdraw consent given for any processing based on that legal basis — such as marketing — at any time, without affecting processing already carried out;
  • Objection (Art. 18, VIII): object to processing that you consider inappropriate or lacking sufficient legal justification;
  • Information on data sharing (art. 18, VII): know which third parties your data has been shared with;
  • Review of automated decisions (Art. 20): request human review of any automated decision that affects your interests on the platform.

Requests related to your rights are responded to within 15 business days. In cases requiring more in-depth review, the kez999 will provide a new estimated timeframe within the first 5 business days. There is no fee to exercise any of these rights.

If you are not satisfied with the response from the kez999, you have the right to lodge a complaint with the National Data Protection Authority (ANPD), as provided under Article 18, § 1 of the LGPD.

10

Data of Minors

The platform kez999 is strictly restricted to users aged 18 and over. We do not knowingly collect personal data from anyone under 18, and any account identified as belonging to a minor is closed immediately.

If you are a parent, guardian, or legal representative and believe that someone under 18 has created an account on kez999 using your data or the data of a child or adolescent, contact us immediately via live chat or by emailing privacidade@kez999.net. The account will be investigated and closed, and any data collected will be deleted in accordance with applicable legal requirements.

Important: the kez999 uses CPF verification and date-of-birth validation systems to prevent registration by users under 18. Additionally, the KYC process at first withdrawal includes validation of the date of birth against the official document submitted.

11

International Data Transfers

The kez999 operates with a focus on the Brazilian market and processes the majority of data on servers located in Brazil. In some cases, technology partners — such as cloud infrastructure providers — may process data on servers located outside the country.

When this occurs, the kez999 ensures that international data transfers comply with the requirements of article 33 of the LGPD, specifically:

  • Transfer to countries or international bodies that provide a level of personal data protection equivalent to that established by the LGPD; or
  • When the recipient commits, through specific contractual clauses, to upholding a level of protection equivalent to that required under Brazilian law.

You can request information about any international data transfers that take place and the safeguards in place for each, through the privacy channel indicated in section 13.

12

Changes to this Privacy Policy

The kez999 may update this Privacy Policy to reflect changes in data processing practices, applicable legislation, or the services offered. When this happens:

  • The "Last updated" date at the top of this page will be revised;
  • You will be notified by email if the changes are relevant to your rights;
  • A prominent notice will be displayed on the platform the next time you log in following a significant update.

We recommend that you review this policy periodically to stay informed about how kez999 takes care of your data. The most current version will always be available at kez999.net/privacy-policy.

Continued use of the platform after the effective date of any update constitutes acceptance of the new version of this Policy. If you do not agree with the changes, you may exercise your right to close your account as described in the Terms and Conditions.

13

Contact, DPO & Privacy Channel

To exercise your rights as a data subject or to raise any questions about this Privacy Policy, you can contact kez999 through the following channels:

  • Live chat: available directly on the kez999 platform, 7 days a week, with support in Portuguese — average response time under 3 minutes;
  • Privacy email: privacidade@kez999.net — for formal LGPD-related requests, with a response time of up to 15 business days;
  • General support email: suporte@kez999.net — for general questions about your account, transactions, and how the platform works.

Data Protection Officer (DPO)

As required by Article 41 of the LGPD, the kez999 has appointed a Data Protection Officer (DPO) responsible for serving as the point of contact between the company, data subjects, and the ANPD. The DPO can be reached at dpo@kez999.net for specific compliance and privacy matters that cannot be resolved through the standard support channel.

You also have the right to contact the National Data Protection Authority (ANPD) in the event of non-compliance with this Policy or the LGPD by the kez999.

How kez999 Handles Your Data in Practice

Beyond the written policy, these are the concrete measures that protect your information on a day-to-day basis

End-to-end encryption

All data transmitted between your phone or computer and kez999's servers is encrypted with 256-bit SSL. Your banking details, CPF, and betting history are never sent in plain text — even if someone intercepts the connection, they cannot read anything.

Financial data is not stored

Kez999 does not store your full credit or debit card details on its own servers. Payment processing is handled by partners certified under PCI-DSS — the international security standard for card data — and kez999 receives only a transaction confirmation token.

Internal access restricted by role

Each kez999 team member has access only to the data required for their role. Support staff, for example, cannot view your full banking details — they see only what is needed to assist you. All access is recorded in auditable logs.

Real-time alerts

Kez999 sends automatic email alerts — and optionally SMS — for any significant activity on your account: login from a new device, withdrawal request, password change, and any unusual access attempt. You are always the first to know.

Periodic external audits

In addition to internal controls, kez999 subjects its security systems to audits conducted by specialized external firms. Any vulnerabilities identified are remediated before they can be exploited — ensuring that player data is always protected.

Deletion guaranteed within the required timeframe

When legal data retention periods expire, kez999 runs automated processes for secure and irreversible deletion. Your data does not sit forgotten on some old server — every category of information processed by the platform has a documented lifecycle.

Privacy and Data Inquiries

Common questions from players about how kez999 handles personal information

Absolutely not. kez999 does not sell personal data to third parties — not to data brokers, advertisers, insurance companies, or any other type of organization. Sharing with third parties only occurs when strictly necessary to deliver the service (such as payment processors and game providers), and always under confidentiality agreements that prohibit any use of the data beyond that purpose.

To request account closure and deletion of your data, contact us via live chat or at privacidade@kez999.net. Once your identity is confirmed, the closure process begins. Any available real-money balance will be returned via Pix before closure. Data subject to legal retention obligations — such as transaction history for 5 years under anti-money laundering law — cannot be deleted before the minimum legal period, but it will be inaccessible for any operational use during that time.

Yes. This is a right guaranteed by the LGPD (art. 18, II). To exercise it, send a formal request to privacidade@kez999.net with the subject line "Data Access Request". Once your identity has been verified, kez999 will send you a complete report of all personal data processed about you — in a readable format, organized by category. The response deadline is up to 15 business days. There is no charge for this request.

You can opt out of promotional emails in two ways: through your account dashboard, under "Communication Preferences", where you can disable each notification type individually; or by clicking the "Unsubscribe" link in the footer of any marketing email sent by kez999. The opt-out takes effect within 48 hours. Please note: transactional emails (withdrawal confirmations, security alerts, bet confirmations) cannot be disabled, as they are essential to your account's security.

No. Identity documents submitted for the KYC process are stored for a legally mandated period of 5 years after account closure, as required by Brazil's anti-money laundering law (Law No. 9,613/1998). This retention period cannot be shortened upon request — it is a legal obligation independent of the wishes of either kez999 or the user. Once the period expires, documents are securely and permanently deleted. During the retention period, they are kept in an encrypted environment with access restricted to the compliance team.

In the event of a security incident resulting in a personal data breach, kez999 will follow the protocol required by the LGPD: notifying the ANPD (National Data Protection Authority) within a reasonable timeframe after becoming aware of the incident, and directly notifying affected users by email with a description of the incident, the data involved, the risks, and the measures taken to mitigate harm. At the same time, any compromised systems will be isolated and remediated immediately. kez999 maintains an Incident Response Plan (IRP) that is kept up to date and tested periodically to ensure that, when needed, the response is swift and effective.
Your data, your rights — kez999 is committed to the LGPD

This Privacy Policy was written to be genuinely understandable, not just to meet a legal requirement. If you have any questions about how we handle your data, reach out via live chat or email us at privacidade@kez999.net. For questions about the platform's general Terms, visit our Terms and Conditions. For responsible gaming self-control tools, visit Responsible Gambling.

🛡️

Your data protected, your game in control

Kez999 cares about your data and your well-being. Deposit limit tools, account breaks, and self-exclusion are available to all players, hassle-free. If gambling has stopped being entertainment, visit Responsible Gambling or call CVV at 188 (available 24 hours). For users aged 18 and over only.

🔞 +18
🔒 YOUR DATA PROTECTED — kez999

Bet safely and privately at kez999

Create your free kez999 account and enjoy a platform built for Brazil — with Pix, football, live casino, and full respect for your privacy under the LGPD. Deposits from R$ 10.00 and a 100% bonus on your first deposit.

⚠️ By creating your account, you confirm that you have read this Privacy Policy and the Terms and Conditions. For users aged 18 and over only. Please gamble responsibly.

Português