Privacy Policy – How 1ccc Protects Your Data

This Privacy Policy describes how 1ccc — operator of the platform available at 1ccc.click — collects, uses, stores, shares, and protects the personal data of its users. It applies to all platform services, including Sports Betting, Live Casino, slots, crash games, and poker.

By creating an account on 1ccc, you confirm that you have read this Policy and agreed to the processing of your data as described herein. This Policy should be read together with the Terms and Conditions and in accordance with the guidelines of Responsible Gambling.

1. Introduction

1ccc takes user privacy seriously — not just as a legal requirement, but as a core part of the trust we build with everyone who uses the platform. We understand that you share sensitive personal data with us when creating an account, making deposits and withdrawals via Pix or other methods, and using our Sports Betting and casino services. That trust is handled with care at every step.

This Policy was written in plain, straightforward language — free of unnecessary legal jargon — so that any player can clearly understand what happens with their information on the 1ccc platform.

2. Data Controller

The data controller for the personal data processed under this Policy is the company that operates the 1ccc platform, responsible for all decisions regarding the collection, use, and storage of personal information of registered users at 1ccc.click.

To contact the data controller regarding privacy and data protection matters, please use the channels listed in Section 14 of this Policy.

3. Data We Collect

1ccc collects different categories of personal data, depending on how you interact with the platform:

3.1 Registration Data

• Full name as it appears on an official document;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile number with Brazilian area code (DDD);
• Residential address (requested during identity verification).

3.2 Identity Verification Data (KYC)

• Identity documents — RG, CNH, or passport;
• Proof of address;
• Photo of the account holder (selfie with ID document, when requested).

3.3 Financial Data

• Pix key registered for withdrawals;
• History of deposits and withdrawals made on the platform;
• Partial credit or debit card details (truncated number, card brand) — we never store the full card number or CVV;
• Bank account details used for TED transfers — Nubank, Itaú, Bradesco, Banco do Brasil, and other financial institutions.

3.4 Platform Usage Data

• Betting history, games, and casino sessions;
• Gaming preferences and browsing activity within the platform;
• IP address and approximate IP-based location;
• Device type, operating system, and browser used;
• Login records — date, time, and IP address of each access.

3.5 Communication Data

• History of support conversations via live chat and email;
• Responses to satisfaction surveys (when voluntarily participating).

4. How We Use Your Data

Data collected by 1ccc is used exclusively for the following purposes:

5. Legal Basis for Processing

Under the LGPD, every personal data processing operation must have a legal basis to justify it. 1ccc relies on the following legal bases for processing your data:

• Contract performance — processing required to provide betting, casino, payment processing, and account management services (Article 7, Section V of the LGPD);
• Consent — for sending promotional communications and marketing, always with an easy opt-out option (Article 7, Item I);
• Legal obligation — identity verification, anti-money laundering, and compliance with orders from competent authorities (Article 7, Section II);
• Legitimate interest — security analysis, fraud prevention, and service improvement, provided this does not override your fundamental rights and freedoms (Article 7, Section IX).

6. Data Sharing

1ccc does not sell, rent, or trade your personal data with third parties for commercial purposes. Data sharing occurs exclusively in the following situations:

6.1 Essential Service Providers

We share data with companies that help us deliver our services, always under confidentiality agreements and with access limited to what is strictly necessary:

• Payment processors — to process deposits and withdrawals via Pix, boleto, card, and TED;
• Game providers — Evolution Gaming, Pragmatic Play, PG Soft, Spribe, and others, which receive technical session data to operate the contracted games;
• Identity verification providers — for CPF and document validation during the KYC process;
• Infrastructure and security services — hosting, CDN, DDoS protection, and fraud detection.

6.2 Legal and Regulatory Obligations

1ccc may share data with Brazilian public authorities when required by law or court order — including the Receita Federal, COAF (Conselho de Controle de Atividades Financeiras), and other competent authorities in money laundering or illegal activity investigations.

6.3 Rights Protection

In situations where sharing is necessary to protect the rights, property, or safety of 1ccc, its users, or third parties, we may disclose information as required and permitted under Brazilian law.

7. Data Retention & Deletion

1ccc retains your personal data for as long as necessary to fulfill the purposes for which it was collected, observing the following timeframes:

• Active account data — retained for the entire duration of the contractual relationship;
• Financial and transaction data — retained for a minimum of 5 years after the last transaction, as required by Brazilian tax and anti-money laundering legislation;
• Identity verification data (KYC) — retained for a minimum of 5 years after account closure, in accordance with applicable regulations;
• Customer support communication data — retained for 2 years for dispute resolution and service quality purposes;
• Security logs — retained for 1 year for incident analysis.

After account closure and once all legal retention periods have been met, your data is securely and irreversibly deleted from 1ccc's systems, unless retention is required by a legal obligation or court order.

8. Data Security

1ccc adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss:

• 256-bit SSL Encryption across all communications between the user's device and 1ccc's servers;
• Encryption at rest for sensitive data stored in the platform's databases;
• Role-based access control — only staff with a legitimate need have access to users' personal data;
• Two-factor authentication available to protect user account access;
• Continuous monitoring of unauthorized access attempts, suspicious activity, and system anomalies;
• Regular security testing — including vulnerability scans and penetration testing by specialized teams;
• Staff training in security best practices and personal data protection.

Despite all our efforts, no system is 100% breach-proof. Should a security incident occur that may affect your data, 1ccc will notify the affected users and the ANPD within the timeframes established by the LGPD.

9. Cookies and Tracking Technologies

1ccc uses cookies and similar technologies to enhance the user experience, ensure platform security, and analyze service performance. The table below describes the types of cookies used:

You can configure your browser to reject or limit the use of non-essential cookies. However, disabling essential cookies may prevent certain 1ccc features from working correctly, such as login and bet processing.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose personal data is processed by 1ccc, the following rights:

To exercise any of the rights listed above, please contact us at suporte@1ccc.click or via the live chat available 24 hours a day on the platform. 1ccc responds to all requests within 15 business days from the date of receipt. In more complex cases requiring additional identity verification, this deadline may be extended with prior notice to the data subject.

11. Data of Minors

1ccc services are intended exclusively for individuals who are 18 years of age or older. 1ccc does not knowingly collect personal data from minors. If we become aware that an account was created by or on behalf of a minor, the account will be immediately closed and all collected data will be deleted.

If you suspect that a minor is using the 1ccc platform, please report it immediately by emailing suporte@1ccc.click. We take these reports with the utmost seriousness and act swiftly in every case reported.

12. International Data Transfers

Some of the service providers used by 1ccc — such as game providers and technology infrastructure suppliers — may be located outside Brazil. When this occurs, 1ccc ensures that international data transfers are carried out with appropriate safeguards, including:

• Standard contractual clauses for data protection;
• Specific confidentiality agreements with each partner;
• Verification that the recipient country offers a level of protection equivalent to that established by the LGPD, or that the recipient contractually commits to applying the same standards.

1ccc does not transfer the personal data of Brazilian users to countries or organizations that do not offer adequate protection according to ANPD criteria.

13. Changes to this Privacy Policy

1ccc may periodically update this Privacy Policy to reflect changes in services, legislation, or adopted privacy practices. All relevant changes will be communicated through:

• Email sent to the address registered on the account;
• Prominent notice on the platform's homepage for at least 30 days following publication;
• Notification in the logged-in user's dashboard.

The date of the last update is always shown at the top of this document. Continued use of the 1ccc platform after the publication of significant changes constitutes acceptance of the new version of the Policy. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.

14. Contact & Data Protection Officer (DPO)

To exercise your rights as a data subject, clarify questions about this Policy, or report any privacy-related matter on the 1ccc platform, please get in touch through the most convenient channel:

• Email: suporte@1ccc.click — responses within 15 business days;
• Live chat: available 24 hours a day, 7 days a week, directly on the platform — average response time under 3 minutes;
• WhatsApp: available to players with a verified account.

1ccc's Data Protection Officer (DPO) is the internal party responsible for ensuring LGPD compliance and for facilitating communication between data subjects, the company, and the ANPD. Formal requests to exercise rights should be sent to suporte@1ccc.click with the subject line "LGPD Rights — [your full name]" for priority processing.