1. Home
  2. Privacy Policy

Data protection and privacy

9000com Privacy Policy – LGPD and Your Data Protection

9000com handles your data with the same care it applies to your payments. Here you'll find, in plain English, how we collect, use, and protect your personal information — in full compliance with Brazil's General Data Protection Law (LGPD).

Create My Account Terms and Conditions
256-bit SSL
LGPD Compliance
Data not sold
Controlled access
DPO available
Index
1. Introduction 2. Data Collected 3. Purpose of Use 4. Legal Basis (LGPD) 5. Sharing 6. Cookies 7. Data Retention 8. Security 9. Your Rights 10. Minors 11. International Transfer 12. Changes 13. Contact & DPO

Last updated: January 2026. This Privacy Policy describes how 9000com collects, uses, stores, and protects players' personal data, in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018). By using the platform, you confirm that you have read and understood this document.

1. Introduction

9000com is an online casino, slots, crash games, and Sports Betting platform built for players in Brazil. Our players' privacy isn't a bureaucratic formality — it's a genuine commitment that shapes how we develop every feature on the platform.

This Privacy Policy applies to all personal data collected by 9000com when you access our site via desktop or mobile, create an account, make deposits via Pix or card, place bets, contact support, or use any other service on the platform.

9000com acts as a personal data controller under the LGPD, responsible for all decisions regarding the processing of collected information. Whenever we collect data, we do so for a specific, proportionate, and legitimate purpose — never more than what is necessary to deliver the service with quality and security.

If you have any questions about this Privacy Policy, please contact our Data Protection Officer (DPO) at contato@9000com.best. Our support team responds in under 3 minutes on live chat, 24 hours a day.

2. What Data 9000com Collects

9000com collects personal data at different points throughout your experience on the platform. We organize the data categories as follows:

Registration data:

  • Full name
  • CPF (Brazilian Individual Taxpayer Registry)
  • Date of birth
  • Email address
  • Mobile number
  • Residential address and ZIP code

Identity verification data (KYC):

  • Image of a government-issued photo ID (RG or CNH)
  • Selfie with ID for facial verification
  • Proof of address

Financial and payment data:

  • Pix key used for deposits and withdrawals
  • Credit or debit card details (stored in tokenized form — never the full card number)
  • History of deposits, bets, and withdrawals made on 9000com

Platform usage data:

  • IP address and approximate location via geolocation
  • Device type, operating system, and browser
  • Pages visited, games accessed, and session duration
  • Access logs and account activity

Communication data:

  • Customer support conversation transcripts
  • Emails sent and received by 9000com
  • Satisfaction survey responses (when you choose to participate)

3. How We Use Your Data

9000com uses collected data exclusively for the following purposes:

  • Service provision: process registration, verify identity, accept deposits via Pix and card, record bets, calculate results, and process withdrawals.
  • Security and fraud prevention: identify and prevent suspicious activity, money laundering, multiple account creation, and the use of bots or automation.
  • Legal and regulatory compliance: comply with obligations under the LGPD, the Consumer Protection Code, and other applicable Brazilian laws.
  • Responsible gambling: monitor usage patterns that may indicate risky behavior, apply deposit limits set by the player, and process self-exclusion requests.
  • Customer support: answer inquiries, resolve disputes, handle complaints, and maintain a record of interactions with 9000com's support team.
  • Service communications: send account activity notifications — such as deposit confirmations, withdrawal approvals, security alerts, and important platform updates.
  • Marketing communications (with consent): send promotions, bonuses, and 9000com news via email or push notification, only to players who have opted in to receive these communications. You can unsubscribe at any time.
  • Product improvement: analyze aggregated and anonymized usage data to improve 9000com's interface, performance, and game catalog.

Data minimization principle: 9000com collects only the data strictly necessary for each purpose. We do not collect sensitive information beyond what is required for identity verification and legal compliance.

4. Legal Basis for Data Processing (LGPD)

All personal data processing carried out by 9000com has a specific legal basis as provided under Law No. 13,709/2018 (LGPD). The main bases we rely on are:

  • Contract performance (art. 7, V): processing is necessary to provide the contracted services when you create an account on 9000com — including deposit processing, betting, and withdrawals.
  • Compliance with a legal obligation (art. 7, II): data required to comply with anti-money laundering obligations, identity verification (KYC), and current Brazilian legislation.
  • Legitimate interest (art. 7, IX): processing of usage data and access logs to ensure platform security, prevent fraud, and improve the player experience.
  • Consent (art. 7, I): sending marketing communications and promotions by email or push notification, subject to the player's explicit opt-in. Consent may be withdrawn at any time through account settings or by contacting 9000com support.

5. Data Sharing with Third Parties

9000com never sells players' personal data to third parties. Information is shared only in the situations below, always for the purpose of providing the service or fulfilling legal obligations:

  • Game providers: Evolution, Pragmatic Play, NetEnt, Spribe, and other partners receive only the minimum technical data required to operate within the 9000com platform. No identifiable personal data is shared beyond what is necessary for the gaming session.
  • Payment processors: financial institutions and Pix, card, and TED processors receive only the data required to process each transaction. These partners are bound by confidentiality agreements and act solely as data processors under 9000com's instructions.
  • Technology and infrastructure providers: companies that provide hosting, security analysis, fraud detection, and technical support services. All operate under a data processing agreement and are not authorized to use your information for their own purposes.
  • Government authorities: when required by law, court order, or a legitimate request from a competent Brazilian authority — such as the Central Bank, the Federal Revenue Service, or the Public Prosecutor's Office — 9000com may share data to the extent strictly necessary to fulfill that obligation.

In all sharing scenarios, 9000com requires partners to maintain security standards equivalent to those of the platform and to restrict data use solely to the purpose for which it was shared.

6. Cookies and Tracking Technologies

9000com uses cookies and similar technologies to enhance your browsing experience, secure your session, and analyze platform usage. The types of cookies used are:

  • Essential cookies: required for the platform's basic operation — such as keeping your session active during gameplay, securely processing deposits, and remembering your login preferences. These cookies cannot be disabled without affecting 9000com's functionality.
  • Security cookies: used to identify unauthorized access attempts, detect suspicious behavior, and protect your account against fraud. They are an essential part of 9000com's security layer.
  • Performance and analytics cookies: collect anonymized data on which pages are most visited, load times, and navigation errors. Used exclusively to improve the platform. Data is processed in aggregate form, without identifying individual players.
  • Preference cookies: store settings you have chosen — such as language, theme, and catalog filters — to personalize your experience on 9000com.

You can manage non-essential cookie preferences through your browser settings. Disabling essential cookies may prevent certain features of the 9000com platform from working correctly.

7. Data Retention and Deletion

9000com retains players' personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to meet legal obligations. The main retention periods are:

  • Active account data: retained for as long as the account is active on 9000com, plus an additional period to meet legal obligations following account closure.
  • Financial transaction history: retained for a minimum of 5 (five) years after each transaction, in accordance with Brazilian anti-money laundering and tax legislation.
  • KYC records (identity documents): retained for a minimum of 5 years after account closure, in accordance with applicable regulatory obligations.
  • Access and security logs: retained for 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
  • Marketing communications: retained until the player withdraws consent or requests deletion, whichever comes first.

Once the applicable retention period has elapsed, data is securely deleted or anonymized so that the data subject can no longer be identified. Requests for early deletion are subject to review of any active legal obligations that may prevent immediate deletion.

8. Security Measures

9000com implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL encryption: all communication between your device — whether mobile or desktop — and 9000com's servers is encrypted using the 256-bit TLS/SSL standard, the same used by Brazil's largest digital banks.
  • Payment data tokenization: credit and debit card data is stored in tokenized form. 9000com never stores the full card number — only a secure token that cannot be used outside the platform.
  • Multi-factor authentication: 9000com offers two-factor authentication for player accounts, adding an extra layer of protection against unauthorized access.
  • Internal access controls: only 9000com team members with a justified need have access to players' personal data. All access is logged and regularly audited.
  • Continuous monitoring: intrusion detection and anomaly monitoring systems keep watch over 9000com's infrastructure around the clock to identify and respond to threats in real time.
  • Periodic security testing: the 9000com platform undergoes regular security assessments — including penetration testing — to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, 9000com will follow the procedures set out in the LGPD for notifying the National Data Protection Authority (ANPD) and the affected data subjects within the legally established timeframes.

9. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by 9000com, the following rights, which may be exercised free of charge at any time:

Right What this means in practice at 9000com
Confirmation and access Find out what data 9000com holds about you and obtain a copy of that information.
Correction Request the correction of inaccurate, outdated, or incomplete data on your account.
Anonymization, blocking, or deletion Request the removal of data that is unnecessary or processed in violation of the LGPD, subject to legal retention obligations.
Portability Receive your data in a structured format for transfer to another service, where technically feasible.
Withdrawal of consent Withdraw consent for marketing communications or other consent-based data processing at any time.
Objection Object to processing carried out on the basis of legitimate interest when there is a justified reason to do so.
Data portability information Find out which third parties 9000com has shared your data with and the reason for doing so.
Review of automated decisions Request human review of decisions made exclusively by automated systems that affect your interests.

To exercise any of these rights, please contact us at contato@9000com.best or via 9000com's live chat. We will respond to your request within 15 business days, as required by the LGPD.

10. Minors

9000com is a platform exclusively for users aged 18 (eighteen) and over. We do not intentionally collect or process personal data from minors.

During registration, we ask for the player's date of birth and CPF specifically to verify they are of legal age before granting access to the platform. Additionally, the identity verification (KYC) process — which requires a photo ID — confirms the player's age prior to releasing withdrawals.

If 9000com identifies that data from a minor was inadvertently collected — for example, if an account was registered using false date-of-birth information — the account will be immediately blocked and all associated data deleted, in line with the special protections the LGPD grants to children's and adolescents' data.

If you are responsible for a child or teenager and suspect they may have created an account on 9000com, contact our 24/7 support immediately so we can take the necessary steps.

11. International Data Transfer

Some services used by 9000com — such as game providers (Evolution, Pragmatic Play, NetEnt) and cloud infrastructure tools — may be operated by companies with servers located outside Brazil.

When this occurs, 9000com ensures that the international transfer of personal data meets the LGPD's requirements for cross-border operations, including:

  • Data transfers only to countries or entities that offer a level of data protection equivalent to that established by the LGPD.
  • Signing of specific data protection contractual clauses with partners who receive information.
  • Adoption of global compliance standards required by certified providers (such as ISO/IEC 27001 information security standards).

Under no circumstances is the personal data of 9000com's Brazilian players transferred to third parties located in countries without adequate data protection legislation or without the contractual safeguards required by the LGPD.

12. Changes to this Privacy Policy

9000com may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or new services offered by the platform.

When we make significant changes — especially those that may affect your rights as a data subject — you will be notified via your registered email and through a prominent notice on the 9000com website at least 7 days before the changes take effect.

Minor changes — such as wording corrections or contact information updates — may be made without individual prior notice. The date of the last update is always shown at the top of this document.

We recommend revisiting this page periodically. Continued use of the 9000com platform after an update takes effect constitutes acceptance of the new version of the Privacy Policy.

13. Contact and Data Protection Officer (DPO)

9000com has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the LGPD, and for serving as the point of contact with Brazil's National Data Protection Authority (ANPD).

To exercise your rights as a data subject, report a privacy incident, ask questions about this Policy, or submit any request related to your personal data, please reach us through the channels below:

  • DPO Email: contato@9000com.best (use the subject line "Privacy – LGPD")
  • Live chat: available within the 9000com platform, 24 hours a day, 7 days a week — average response time under 3 minutes
  • WhatsApp: for urgent matters related to your account and privacy

The standard response time for LGPD-related requests is up to 15 business days. For straightforward requests involving data access or profile corrections, the turnaround is typically much shorter. 9000com handles each request individually with the care the matter deserves.

Our approach to privacy

Why Privacy Matters to 9000com

In a market where many platforms publish impenetrable privacy policies written in inaccessible legal jargon and auto-translated from English, 9000com chose a different path: writing in plain language, explaining what we actually do with each category of data, and making sure you can exercise your rights without needing a lawyer to do it.

Brazil's General Data Protection Law came into effect in 2020 and marked a significant shift in the balance of power between companies and individuals. Before the LGPD, it was common to see platforms collecting everything they could — and using that information in ways users never imagined consenting to. 9000com was built with the LGPD integrated into the platform's architecture from day one, not bolted on afterward to meet a regulatory requirement.

What does this mean in practice? It means that when you make a Pix deposit on 9000com, your Pix key is used solely to process that transaction — it is not stored in readable format, not shared with other partners, and not used to send unsolicited communications. When you submit identity documents for KYC verification, those files are kept in a secure, restricted-access system, encrypted, and deleted after the legal retention period.

9000com also recognizes that privacy and security go hand in hand. The 256-bit SSL encryption protecting your data in transit is the same standard used by Nubank, Itaú, and Bradesco. Card data tokenization means that even if someone gained unauthorized access to the platform's database, they would find no usable card numbers. Round-the-clock infrastructure monitoring ensures threats are detected and addressed well before they become incidents.

Players who go through identity verification on 9000com often wonder why it's necessary. The answer is straightforward: KYC verification protects both sides. It prevents someone from using your identity to open an account on the platform without your knowledge, stops 9000com from being used for money laundering, and ensures all players are of legal age. It's not red tape — it's the mechanism that keeps the platform safe and trustworthy for everyone.

Finally, 9000com wants you to know that your data belongs to you. Your right to access, correct, export, or delete your information is real, and 9000com respects it without putting up barriers. If you want to know exactly what data we hold about you, just ask. We respond within 15 business days — but in practice we aim to be faster than that, because taking privacy seriously means acting on it, not just writing policies.

Genuine commitment

How 9000com Protects Your Data in Practice

Beyond our written policy, here are the concrete measures 9000com takes every day to protect your privacy.

256-Bit SSL Encryption

All communication between your phone or computer and 9000com's servers is encrypted with 256-bit TLS/SSL — the same security standard used by Brazil's largest digital banks. Your Pix, card, and personal data are always transmitted with full protection, making interception in transit impossible.

Payment Data Tokenization

9000com never stores your full credit or debit card number. We use tokenization — the real number is replaced by a unique identifier that has no value outside the platform. Even in a hypothetical data breach scenario, your payment details would be completely unusable to any bad actor.

Controlled Internal Access

At 9000com, access to players' personal data is restricted to team members with a justified operational need. Every access is logged, periodically audited, and subject to multi-factor authentication. No employee can view complete payment data — only the fragments needed to resolve support issues.

Your Data Is Never Sold

9000com does not sell, rent, or trade players' personal data with advertisers, data brokers, or any other company for commercial purposes. Your data exists to provide the service and meet legal obligations — full stop. If you receive communications from 9000com, it's because you opted in during registration, and you can unsubscribe at any time.

Full LGPD Compliance

9000com was built with the LGPD integrated into its architecture from the start. We have a designated Data Protection Officer (DPO), documented data processing procedures, retention periods defined by category, and incident response procedures ready to be activated. Compliance is not a checkbox — it is part of the product.

Your Rights at Your Fingertips

Accessing, correcting, exporting, or deleting your data on 9000com requires no complicated forms or months-long wait. A single email or live chat message is enough to start the process. We respond within 15 business days as required by the LGPD — and usually much sooner. Privacy as a right, not a favor.

Privacy inquiries

Frequently Asked Questions about Privacy at 9000com

No. Your Pix key is used solely to process the deposits and withdrawals you request on 9000com. It is shared only with the payment processor that executes the transaction — and only during that specific transaction, under a confidentiality agreement. 9000com does not store your Pix key in a format readable by employees outside the payment processing context. The Pix key is not used for any other purpose, is not shared with marketing partners, and does not appear in any internal report outside a strictly financial context.

To request deletion of your personal data, contact 9000com support at contato@9000com.best or via live chat, stating that you wish to exercise your right to erasure under the LGPD. 9000com will process your request within 15 business days. Please note that certain data must be retained for mandatory minimum periods required by law — such as financial transaction history, which must be kept for at least 5 years under anti-money laundering legislation. In such cases, 9000com will explain which data cannot be immediately deleted and the legal reason why.

When you close your 9000com account, data that is no longer needed to provide the service is deleted or anonymized. However, certain categories of data must be retained for mandatory legal periods: financial transaction history is kept for 5 years for tax and anti-money laundering purposes; KYC records (identity documents) are retained for the same period as required by regulation; access logs are kept for 6 months in accordance with the Internet Civil Rights Framework. After these periods, all remaining data is securely deleted. You will receive an email confirmation of the account closure and the applicable retention periods.

No. 9000com uses cookies exclusively on its own platform domain — to keep sessions active, ensure secure access, and analyze internal usage. 9000com does not use cross-site tracking cookies or share user identifiers with ad networks to display ads on other websites you visit. The performance analytics cookies used by the platform collect data in an anonymized and aggregated form, without linking browsing behavior to any individual identity outside the 9000com context.

In the event of a security incident resulting in unauthorized access to players' personal data, 9000com will follow the protocol set out under the LGPD: notifying the National Data Protection Authority (ANPD) within the legal timeframe and directly informing affected data subjects — via registered email and an account dashboard notice — with details about the nature of the incident, the data potentially compromised, the measures taken by the platform, and the recommended actions for the player. 9000com maintains an up-to-date incident response plan and a security team on continuous monitoring, precisely to minimize detection and response time should anything occur.

Privacy and Responsible Gambling at 9000com

The usage data and betting history collected by 9000com also help identify patterns that may indicate risky gambling behavior. This monitoring is conducted internally and confidentially, and is never shared with third parties. The goal is to proactively activate Responsible Gambling tools when needed — always respecting your privacy and autonomy. Access is exclusively for users aged 18 and over.

Learn more about Responsible Gambling

Your data protected, your choice

Play on 9000com with Complete Confidence and Privacy

Sign up with 9000com knowing your data is handled with care, transparency, and full LGPD compliance. Secure Pix deposits, end-to-end encryption, and 24/7 support for any privacy questions.

Create My Account Already have an account – Log in

Licensed platform · LGPD compliant · Responsible gambling +18 · Betting in BRL

Português