Sssgame22 Privacy Policy – LGPD Data Protection

This Privacy Policy describes how sssgame22 collects, uses, stores, and protects users' personal data, in accordance with Brazil's General Personal Data Protection Law (LGPD – Law No. 13,709, of August 14, 2018) and other applicable regulations in Brazil. By creating an account or using any feature of the sssgame22 platform, you confirm that you have read and understood this Policy.

1. Personal Data Controller

Section 1

The controller of personal data collected by the sssgame22 platform is the company responsible for operating the sssgame22.net website. For data protection inquiries, the official contact channel is the email contato@sssgame22.net, with the subject line "Data Protection – LGPD".

Sssgame22 appoints a Data Protection Officer (DPO) responsible for overseeing privacy practices, responding to data subject requests, and maintaining the relationship with the Brazilian National Data Protection Authority (ANPD). The DPO's contact details are available in Section 13 of this Policy.

2. Personal Data Collected

Section 2

2.1 Data provided directly by the user

During registration and use of the sssgame22 platform, we collect the following categories of personal data provided directly by the user:

• Identification data: full name, CPF, date of birth, gender, ID number (RG or CNH) — collected for KYC verification purposes;
• Contact details: email address, mobile phone number, full residential address (street, number, complement, ZIP code, city, state);
• Financial data: payment method information used for deposits and withdrawals, such as Pix key (CPF, email, mobile number, or random key) and bank account details for TED transfers — never your full card details, which are processed by certified partners;
• Identity documents: photos of your identity document and a selfie for identity verification (KYC), required before your first withdrawal.

2.2 Automatically collected data

When you access the sssgame22 platform via browser or mobile app, the following data is collected automatically:

• Usage data: pages visited, click events, session duration, bets placed, games accessed, browsing sequence;
• Technical data: IP address, browser type and version, operating system, screen resolution, unique device identifier;
• Approximate location data: inferred from IP address for geographic eligibility verification — sssgame22 does not collect GPS or precise device location;
• Cookies and similar technologies: detailed in Section 8 of this Policy.

3. Purpose of Data Processing

Section 3

Sssgame22 uses collected personal data exclusively for the purposes described below. No data is processed for any purpose other than those stated without obtaining new consent from the data subject.

4. Legal Basis for Processing

Section 4

Sssgame22's processing of personal data is based on the following legal grounds established by the LGPD:

• Contract performance (Art. 7, V): to enable registration, process bets, handle deposits and withdrawals, and provide customer support — operations necessary to fulfill the contract between you and sssgame22;
• Legal obligation (Art. 7, II): to comply with Brazilian legal requirements, including tax obligations, anti-money laundering regulations (Law No. 9,613/1998), and ANPD determinations;
• Consent (Art. 7, I): for sending marketing communications, personalized promotions, and analysis of gaming preferences — you may withdraw this consent at any time;
• Legitimate interest (Art. 7, IX): for product improvements, platform usage analysis, anomalous behavior detection, and information security, provided this does not override your fundamental rights and freedoms.

5. Data Sharing

Section 5

Sssgame22 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing only occurs in the situations listed below, all of which are documented and controlled:

• Payment processors: to enable deposits and withdrawals via Pix (integration with the Central Bank system), boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED. These partners process your data solely for the purpose of completing the transaction, under contracts that require them to comply with the LGPD;
• Technology service providers: server infrastructure, security and anti-fraud services, usage behavior analytics — all governed by contracts with confidentiality and data protection clauses;
• Public and regulatory authorities: when required by law, court order, ANPD ruling, or a request from a competent law enforcement authority — sssgame22 responds to such requests in accordance with applicable legal procedures;
• Auditors and legal advisors: when necessary for the regular exercise of rights in judicial, administrative, or arbitration proceedings.

6. Data Retention and Deletion

Section 6

Sssgame22 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. The general retention periods are:

• Registration & account data: for the duration of the active account and for up to 5 years after closure, in compliance with tax and anti-money laundering obligations;
• Financial transaction data: for up to 10 years, as required by Brazilian tax legislation and Central Bank regulations;
• Identity verification documents (KYC): for up to 5 years after account closure;
• Usage and browsing data: for up to 2 years, after which they are anonymized or deleted;
• Customer support communications: for up to 3 years, for dispute resolution and service improvement purposes.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. Requests for early deletion are honored within the limits of legal retention obligations.

7. Information Security

Section 7

Sssgame22 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The main measures in place include:

• 256-bit SSL encryption on all communications between the user and the platform;
• Encryption of sensitive data at rest in databases;
• Role-based access control — only staff with a legitimate need can access users' personal data;
• Continuous monitoring for suspicious activity and unauthorized access attempts;
• Two-factor authentication (2FA) available for user accounts and mandatory for internal administrative access;
• Periodic security audits and penetration testing carried out by specialized teams;
• Security incident response plan with documented procedures for notifying data subjects and the ANPD.

No system is completely immune to security threats. In the event of a security incident that may affect your data, sssgame22 is committed to notifying the affected data subjects and the ANPD within the legally required timeframes, providing details on the nature of the incident, the data involved, and the measures taken.

8. Cookies and Tracking Technologies

Section 8

Sssgame22 uses cookies and similar technologies to improve the user experience, maintain active sessions, and analyze how the platform is used. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session logged in, remembering language preferences, and securing transactions. They cannot be disabled without affecting your account's functionality;
• Performance and analytics cookies: collect information about how users navigate sssgame22 — most visited pages, session duration, loading errors. Data is aggregated and anonymized. These can be disabled in your browser settings;
• Functional cookies: remember user preferences such as preferred layout, favorite sports, and betting settings. They can be disabled, but doing so may reduce the personalization of your experience;
• Payment session cookies: temporary, used exclusively during the deposit and withdrawal flow to maintain transaction integrity. They are deleted at the end of the session.

You can manage cookie settings through the banner displayed on your first visit to the platform or through your browser settings. Disabling non-essential cookies will not prevent access to sssgame22, but may affect personalization features.

9. Users Under 18

Section 9

The sssgame22 platform is intended exclusively for users aged 18 and over. sssgame22 does not intentionally collect personal data from minors. If we identify that an account was created by a minor, the account will be immediately closed and any collected data will be deleted — with verified deposits returned to the legal guardian.

If you become aware that a minor has used your data or a third party's data to create an account on sssgame22, please notify us immediately via live support or by email at contato@sssgame22.net. sssgame22 takes this seriously and will act swiftly.

10. How to Exercise Your LGPD Rights

Section 10

You can exercise any of your rights as a data subject at any time through the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the sssgame22 platform — please indicate at the start of the conversation that your request is related to LGPD;
• Email: contato@sssgame22.net — with the subject line "LGPD Rights – [request type]" and a description of your request;

To exercise your rights of access, portability, and deletion, identity verification may be required to confirm the request comes from the data subject. The process is straightforward and can be completed via live chat by submitting a quick selfie.

The response time is up to 15 business days from receipt of the complete request, as provided under the LGPD. In more complex cases, this deadline may be extended with notice to the data subject.

11. International Data Transfers

Section 11

In some cases, personal data of sssgame22 users may be processed by technology partners whose servers are located outside Brazil — for example, cloud infrastructure providers. When this occurs, sssgame22 ensures the transfer is carried out in compliance with the LGPD requirements for international data transfers, including:

• Transfer to countries with an adequate level of data protection, as recognized by the ANPD;
• Adoption of standard contractual clauses requiring the recipient to protect data in accordance with LGPD standards;
• Obtaining specific consent from the data subject, where none of the above alternatives apply.

Sssgame22 maintains an up-to-date record of all international data transfers carried out, which is available for review by data subjects upon formal request to the data protection email address.

12. Changes to this Privacy Policy

Section 12

Sssgame22 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or platform improvements. Significant changes — especially those that expand the scope of processing or affect your rights — will be communicated by email at least 7 days before taking effect.

The date of the last update and version number are indicated at the top of this document. Continued use of the sssgame22 platform after the effective date of the new terms will constitute acceptance of the changes. If you do not agree, you may request account closure and withdrawal of your available balance before the changes take effect.

13. Contact & Data Protection Officer (DPO)

Section 13

For any questions, requests, or complaints related to the processing of your personal data by sssgame22, you can reach us through the following channels:

• Live support: live chat available 24 hours a day, 7 days a week, directly on the sssgame22 platform;
• General email: contato@sssgame22.net;
• DPO e-mail (data protection): contato@sssgame22.net with the subject line "DPO – Data Protection".

The sssgame22 Data Protection Officer (DPO) is responsible for overseeing LGPD compliance within the platform, responding to data subject requests, and maintaining the relationship with the ANPD. Requests addressed to the DPO are handled within 15 business days.