Ff0000 Privacy Policy – Your Data Protected

The controller of the personal data collected through the platform ff0000 is the company responsible for operating the ff0000.world website. For LGPD purposes, the controller is the entity that makes decisions about the processing of users' personal data — defining the purposes and means by which information is processed.

To exercise your rights as a data subject or to clarify any questions about how your personal information is handled, contact ff0000 through the 24-hour support channel or by email at suporte@ff0000.world. Privacy and data protection requests are forwarded to the platform's Data Protection Officer (DPO), who will respond within the legal timeframes established by the LGPD.

A ff0000 collects different categories of personal data depending on how you interact with the platform. Below, we detail each category and the context in which the information is collected.

Data provided directly by the user during registration:

• Full name as it appears on a government-issued ID;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Brazil mobile phone number;
• Full residential address (requested during the KYC verification process);
• Government-issued photo ID (RG, CNH, or passport) — when requested for verification.

Financial data collected during transactions:

• Pix key registered by the user for withdrawals;
• Credit or debit card details (partially masked card number, expiration date, and cardholder name);
• History of deposits, withdrawals, and bets placed on the platform;
• Bank identification details required to process TED transfers through Nubank, Itaú, Bradesco, Banco do Brasil, and others.

Data collected automatically during platform use:

• IP address and approximate location;
• Browser type and version, and operating system;
• Device used (mobile phone, tablet, computer);
• Pages visited, session duration, and browsing patterns;
• Cookie data and similar technologies (detailed in Section 6).

The personal data collected by ff0000 are used exclusively for the purposes described below. No data is processed for purposes incompatible with those that originally justified its collection.

• Account creation and management: verify your identity, keep your profile information up to date, and ensure secure access;
• Financial transaction processing: process deposits via Pix, bank slip, card, and withdrawals to the account holder, as well as maintain a transaction history;
• Compliance with legal and regulatory obligations: carry out the KYC (Know Your Customer) process, fulfill anti-money laundering obligations, and comply with requests from competent authorities;
• Fraud prevention and security: identify suspicious activity, prevent misuse of the platform, and protect users against unauthorized access;
• Experience personalization: offer game recommendations, promotions, and relevant content based on your platform usage history;
• Marketing communications: send emails, notifications, and messages about ff0000 promotions, bonuses, and news — with your consent and with the option to unsubscribe at any time;
• Customer support: handle support requests, resolve queries, and keep a service history for continuous improvement;
• Product improvement: analyze aggregated usage patterns to improve features, identify technical issues, and develop new functionality.

A ff0000 processes personal data on the following legal grounds established by the LGPD (Law No. 13.709/2018):

Where processing is based on consent, you may withdraw it at any time — without affecting the lawfulness of processing carried out before the withdrawal. Consent can be revoked directly in your account settings or through ff0000 support.

A ff0000 does not sell your personal data. Sharing with third parties only occurs in the situations described below and always on the basis of one of the legal grounds set out in the LGPD:

• Casino game providers (Pragmatic Play, Spribe, Play'n GO, Evolution, and others): receive session identifiers to authenticate the user in games — they do not have access to full financial data;
• Pix and card payment processors: receive the data necessary to securely process financial transactions, including verification of bank account ownership;
• Identity verification services (KYC): certified partners who process documents submitted by the user to verify identity, CPF, and age;
• Analytics and fraud prevention tools: automated systems that analyze behavioral patterns to detect irregular activity — data is processed in pseudonymized form;
• Competent authorities: when required by law, court order, or regulation — ff0000 complies with legitimate requests from Brazilian authorities in accordance with applicable legal procedures.

All partners who receive personal data from ff0000 users are bound by contractual obligations of confidentiality and proper data handling, consistent with the requirements of the LGPD.

The platform ff0000 uses cookies and similar technologies to ensure the proper functioning of the site and to improve the user experience. Cookies are small text files stored on your device when you access the site.

Cookie categories in use:

• Essential cookies: required for the platform's basic operation — maintaining authenticated sessions, protecting against CSRF attacks, and managing the betting slip. These cannot be disabled without affecting your ability to use the site;
• Functional cookies: store user preferences such as language, display settings, and recent game history to personalize the experience;
• Analytical cookies: collect aggregated data on site usage — most visited pages, session duration, navigation flow — to improve the product. Data is processed in pseudonymized form;
• Marketing cookies: used to display relevant ff0000 communications and measure campaign effectiveness. Activated only with your explicit consent.

You can manage your cookie preferences directly in your browser settings or through the platform's privacy preference panel. Disabling non-essential cookies does not affect access to ff0000's core features, including Pix deposits, Sports Betting, and casino games.

A ff0000 applies robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction. Key measures in place include:

• 256-bit SSL Encryption across all traffic between the user's device and the platform's servers;
• Secure password storage using one-way hashing algorithms — passwords are never stored in plain text;
• Two-factor authentication (2FA) available to all users as an additional layer of account protection;
• Continuous monitoring of access logs and transactions to identify anomalous behavior in real time;
• Strict internal access controls — only employees with a proven operational need are granted access to users' personal data, always recorded in audit logs;
• Regular security testing, including vulnerability scans and code reviews conducted by specialized teams.

In the event of a security incident that could cause significant risk or harm to data subjects, ff0000 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected users within the timeframes set by the LGPD, providing details on the nature of the incident, the data involved, and the measures taken.

A ff0000 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum retention periods required by law.

Retention periods by category:

• Registration and identity data: retained for the entire duration of the active account and for at least 5 (five) years after closure, in accordance with legal anti-money laundering obligations;
• Financial transaction history (deposits, Pix withdrawals, bets): retained for a minimum of 5 (five) years for audit purposes and compliance with tax and regulatory obligations;
• Browsing data and analytical cookies: retained for up to 13 months from collection, in line with industry best practices;
• Support communications: retained for up to 2 (two) years for quality assurance and dispute resolution purposes;
• Marketing data (based on consent): retained until consent is withdrawn by the user.

Once the applicable retention period expires, data is securely deleted or anonymized so that the original data subject can no longer be identified. Requests for early deletion are assessed on a case-by-case basis, taking into account any legal obligations that may require data to be retained for a set period.

The LGPD guarantees you, as the data subject whose personal data is processed by ff0000, the following rights — all exercisable free of charge through the support channel or by email at suporte@ff0000.world:

Requests are answered within 15 business days. If the response is not satisfactory, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD).

The platform ff0000 is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18.

If it is identified that a minor has created an account or provided personal data on the platform, we will take the following immediate steps:

• Account closure and suspension of all associated activities;
• Deletion of the minor's personal data from our active systems, subject to the minimum retention required to fulfill legal obligations;
• Notification to the legal guardian, where identifiable, about the situation;
• Report to the relevant authorities when applicable under Brazilian child and adolescent protection legislation.

If you are a parent or legal guardian and believe a minor may have created an account on ff0000, please contact support immediately at suporte@ff0000.world. Your request will be treated as an absolute priority.

Due to the global nature of some of the technology and game providers used by ff0000, some personal data may be transferred to or processed on servers located outside Brazil. This may occur, for example, in the context of:

• Authentication on gaming platforms from international providers such as Pragmatic Play, Evolution, and Spribe;
• Use of cloud infrastructure services with servers across multiple geographic regions;
• Analytics and fraud prevention tools with global operations.

In all cases of international data transfer, ff0000 ensures that the level of protection provided to the data is equivalent to that required by the LGPD — through standard contractual clauses, adequate security guarantees, or because the countries involved have a level of data protection recognized as adequate by the ANPD.

A ff0000 may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or improvements to the services offered. The date of the last update is always displayed at the top of this page.

For changes that substantially affect your rights or the way we handle your data, you will be notified in advance by the email on your account or through a prominent notice on the platform. For minor editorial adjustments or clarifications that do not change the essence of this Policy, updates may be made without prior notice.

We recommend reviewing this Policy periodically to stay informed about how ff0000 protects your information. Continued use of the platform after a new version is published constitutes acceptance of the updated terms.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact ff0000 through the following channels:

• Privacy channel email: suporte@ff0000.world — please identify the subject as "Privacy and Data Protection" for priority routing to the DPO;
• Support chat: available 24 hours a day, 7 days a week, directly on the ff0000.world platform;
• Response time: requests related to data subject rights are answered within 15 business days, as required by the LGPD.

The ff0000 Data Protection Officer (DPO) is responsible for ensuring internal compliance with the LGPD and serves as the point of contact between the platform, data subjects, and the National Data Protection Authority (ANPD). If your request is not resolved to your satisfaction, you have the right to file a complaint directly with the ANPD.