Aa666 Privacy Policy – Data Protection in Brazil

The aa666 is an online entertainment platform for Brazilian audiences, offering Sports Betting, live casino, crash games, poker, and blackjack. To deliver these services safely and at a high standard, we need to collect and process certain personal data from our users.

This Privacy Policy clearly explains what data aa666 collects during registration, platform use, and financial transactions — why we collect it, how we store and protect it, who we may share it with, and what your rights are as a data subject.

By creating an account or using any aa666 service, you confirm that you have read and understood this Privacy Policy. It forms an integral part of the Terms and Conditions of the platform and both documents should be read together.

This policy applies to all registered aa666 users, to visitors who do not yet have an account, and to anyone who interacts with the platform through any channel — including support chat, email, and social media.

Aa666 collects different categories of data depending on the stage of your interaction with the platform. The main types of information we process are listed below:

Aa666 collects only the data strictly necessary for each declared purpose — consistent with the data minimization principle set out in the LGPD. We do not collect sensitive data such as racial origin, religious belief, political opinion, or health information, except where required by a specific legal obligation.

Every piece of data aa666 collects has a specific, declared purpose. We do not use your information for anything beyond what is described below:

• Platform operation: creating and maintaining your active account, processing deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago and TED transfers; processing withdrawals; registering and settling bets on football (Brasileirão, Copa do Brasil, Libertadores), UFC, volleyball, NBB, crash games, live blackjack, poker and other games available on aa666.
• Identity verification and fraud prevention: confirm your identity, detect fraudulent behavior, prevent money laundering and platform misuse — in compliance with Brazilian financial crime prevention regulations.
• Player support: answer questions, resolve issues with withdrawals, bonuses, or account access, and provide personalized support in Portuguese via live chat and email.
• Communication and marketing: send notifications about active promotions, newly available games, personalized bonuses, and relevant platform updates — only when you have expressly consented to receive such communications.
• Responsible gambling: monitor usage patterns that may indicate problematic behavior and, when necessary, activate available protection tools — such as session alerts, automatic limits, and active self-exclusion notifications.
• Legal and regulatory obligations: maintain financial records required under Brazilian law, respond to requests from competent authorities, and comply with court orders.
• Ongoing product improvement: analyze aggregated and anonymized usage data to identify navigation issues, improve the website and app interface, and develop new features based on real aa666 player behavior.

Aa666 does not use your personal data to create automated profiles that generate individual decisions with legal or significant effects on you without human review — as guaranteed by Article 20 of the LGPD.

The LGPD requires that all personal data processing have a valid legal basis. aa666 processes your data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7º, V): most of the data collected — registration details, bank information for Pix and wire transfers, betting history — is necessary to provide the services you agreed to when creating your aa666 account. Without this data, it is simply not possible to process deposits, record bets, or complete withdrawals.
• Compliance with a legal obligation (art. 7, II): certain data must be collected and retained as expressly required by Brazilian law — such as financial records for tax purposes and KYC information for compliance with anti-money laundering regulations.
• Legitimate interest (art. 7, IX): technical data such as IP address, device information, and access logs are processed on the basis of aa666's legitimate interest in keeping the platform secure, detecting fraud, and preventing unauthorized access — always within reasonable limits and in full respect of your fundamental rights.
• Consent (Art. 7, I): for marketing communications and non-essential cookies, aa666 asks for your express consent. You can withdraw that consent at any time through your account settings or by contacting support, without affecting the validity of any processing carried out beforehand.

Aa666 does not sell, rent or share your personal data with third parties for commercial purposes. Period. Where data sharing is necessary to operate the platform, it is done in a controlled manner with the following types of partners:

• Payment processors: to process deposits via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED, aa666 shares with payment intermediaries only the data strictly necessary to complete each transaction. These partners are contractually required to handle that data with the same level of security demanded by aa666 and the LGPD.
• Certified game providers: live casino platforms such as Evolution Gaming and Pragmatic Play Live may receive technical session data (non-financial) to ensure the correct functioning of live blackjack, roulette, and other game streams available on aa666.
• Identity verification services: specialized partners in document analysis and KYC verification receive the images and data submitted during the verification process to confirm your identity. These providers operate under data processing agreements that ensure confidentiality and security.
• IT infrastructure: hosting providers, cloud storage and cybersecurity services that support aa666's technical operations may have technical access to data for platform maintenance and protection purposes.
• Legal authorities: aa666 may be required to share data with Brazilian law enforcement, judicial, or regulatory authorities when there is a valid legal basis — such as a court order or a request from the National Data Protection Authority (ANPD). In such cases, only the information specifically requested is shared.

In all sharing scenarios, aa666 requires partners to maintain security standards equivalent to those of the platform itself and to use the data solely for the purpose for which it was transferred.

Aa666 uses cookies and similar technologies to improve your experience on the platform, ensure the website functions correctly, and personalize content. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — such as keeping your session active after login, remembering language preferences, and ensuring the Pix deposit process works correctly. These cookies cannot be disabled without affecting your use of aa666.
• Performance cookies: collect aggregated data about how players navigate the site — which pages are visited most, where errors occur, and how much time is spent in each section. This information is used solely to improve the platform and is processed in anonymized form.
• Functional cookies: allow aa666 to remember your preferences — such as your favorite game or blackjack table, notification settings, and preferred layout. They improve your experience without collecting identifiable information beyond what is necessary.
• Marketing cookies: used only with your explicit consent to personalize communications and promotional offers within the platform. We do not share cookie data with third-party advertising networks.

Aa666 does not use third-party tracking pixels for advertising purposes outside the platform, nor does it share browsing behavior data with external ad networks.

Aa666 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, always observing the minimum retention periods required under Brazilian law:

• Active account data: retained for as long as your aa666 account is active and for up to 5 years after closure, for audit and legal compliance purposes.
• Financial records: deposit, withdrawal, and betting history is retained for a minimum of 5 years after each transaction, as required by Brazilian tax and financial legislation.
• KYC documents: identity verification documents you submit are retained for the duration of your account plus 5 years, for anti-money laundering purposes and potential regulatory audits.
• Access logs: technical records of IP address, device, and access times are retained for 6 months, in accordance with the timeframe established by the Brazilian Internet Civil Framework (Law No. 12,965/2014).
• Support communications: messages exchanged with our support team are retained for 2 years for quality assurance and potential dispute resolution purposes.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized. Anonymization ensures the information can no longer be linked to a specific individual and may be retained for statistical purposes without restriction under the LGPD.

The security of aa666 players' data is a technical and operational priority. The protective measures in place include:

• 256-bit SSL encryption: all data transmitted between your browser or app and aa666's servers is encrypted, preventing any third party from intercepting your information during the connection.
• Encryption at rest: sensitive data stored on aa666's servers — such as KYC documents and banking details — is encrypted even when not in transit.
• Role-based access control: only aa666 staff with a verified operational need are granted access to personal data, and only to the categories of data strictly necessary for their role. All access is logged and audited.
• Continuous monitoring: automated intrusion detection and anomalous behavior monitoring systems watch the platform around the clock, identifying and blocking unauthorized access attempts in real time.
• Security testing: aa666 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): available to all users in the account settings. We strongly recommend enabling 2FA for an extra layer of security when accessing your account.

Despite all these measures, no system is 100% impenetrable. In the event of a security incident involving personal data, aa666 commits to notifying affected users and the ANPD within the timeframes established by the LGPD, with clear information about what occurred, which data was affected, and what steps were taken to mitigate the damage.

The LGPD gives you a robust set of rights over your personal data. aa666 is committed to making it easy to exercise those rights — no unnecessary red tape. Here's what you can request:

Aa666 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from children or minors, and all registrations go through an age verification step during account creation.

If we have reason to believe a user is under 18, the account will be immediately suspended for investigation and may be permanently closed. Any existing balance will be held until the review is complete.

Under no circumstances does aa666 sell, process, or retain data from minors for any purpose — whether operational, marketing, or analytical.

Aa666 may update this Privacy Policy at any time to reflect changes in data processing practices, new legal requirements, security process improvements, or changes to the services offered by the platform.

When significant changes are made to this policy — particularly those that expand the data collected, modify the purposes of use, or affect data subjects' rights — aa666 will notify registered users via:

• An in-platform notification, visible upon your next login after the update.
• An email sent to the address registered on your account, with at least 7 days' notice for significant changes.

The date of the most recent update is always shown at the top of this page. Continued use of the platform after a change is communicated implies acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

For purely formal changes — such as wording corrections, section reorganization, or clarifications that have no impact on data processing — aa666 may update this policy without prior notice, but the update date will always be revised.

Aa666 has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that process personal data at scale. The DPO is the official point of contact for all privacy and personal data processing matters on the platform.

To exercise your data subject rights, ask questions about this policy, or report any concern about how aa666 handles your data, please use the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the aa666 platform. For privacy matters, let the support agent know you'd like to discuss data protection — you'll be directed to the dedicated channel.
• Email: suporte@aa666.casino — for formal LGPD rights requests, include "LGPD REQUEST" in the subject line, followed by the type of request (access, correction, deletion, etc.) and your registered CPF.

Aa666 is committed to responding to all personal data requests within 15 business days from receipt. For more complex cases — such as data portability or deletion requests with legal restrictions — the deadline may be extended by a further 15 business days, with notice to the requester explaining the reason for the extension.

This Privacy Policy was last updated in January 2026. aa666 recommends reviewing this document periodically. The version currently published on this page, identified by the last updated date at the top, is always the one in effect.