Pp11a Privacy Policy – How We Take Care of Your Data

1Who We Are – The Controller of Your Data

Pp11a is the controller of personal data collected and processed in connection with the use of the Sports Betting and online casino platform available at pp11a.net. As the data controller, pp11a is responsible for deciding how and why users' personal data is processed, always in compliance with the General Personal Data Protection Law – LGPD (Law 13.709/2018) and Brazilian fixed-odds sports betting regulations (Law 14.790/2023).

Pp11a was built specifically for the Brazilian market. All services — deposits via Pix, credit card, boleto bancário, PicPay, Mercado Pago, and TED bank transfer; Sports Betting on the Brasileirão Série A, Copa do Brasil, Libertadores, and other competitions; live casino with dealers in Portuguese; and the VIP Program — are operated directly by pp11a for players aged 18 and over who are residents of Brazil.

To reach us about privacy matters, use the email privacidade@pp11a.net or the postal address available in section 13 of this policy.

2What Personal Data We Collect

Pp11a collects personal data at different points during your interaction with the platform. The categories of data collected and the purpose of each are outlined below:

• Full legal name, as shown on an official ID document;
• CPF (Cadastro de Pessoas Físicas) – required by law;
• Date of birth – for age verification;
• Full residential address, including ZIP code;
• Email address – for account communications and verification;
• Mobile number – for authentication and WhatsApp support.

• Official government-issued photo ID (RG, CNH, or passport);
• A selfie with your ID document for liveness verification;
• Proof of address issued within the last 3 months;
• Proof of ownership of the bank account linked to the Pix or TED used for withdrawals.

• Full betting history, including amounts, odds, markets, and results;
• Financial transaction history — deposits and withdrawals, including method, amount, and date;
• Access logs: IP address, device type, browser, operating system, and login timestamps;
• Session data: pages visited, games accessed, session duration, and support interactions;
• Communications exchanged with customer support via chat, WhatsApp, or email.

Pp11a automatically collects technical browsing data through cookies and similar technologies. See section 6 of this policy for full details on cookies and how to manage them.

3How and Why We Use Your Data

Pp11a uses the personal data collected exclusively for the purposes described below. No data is used for any other purpose without your being informed in advance and, where required, having given your consent.

Pp11a never uses your data to sell third-party advertising, build behavioral profiles for commercial purposes, or for any purpose not directly related to operating the platform's services.

4Legal Basis for Data Processing

The LGPD requires a legal basis for every instance of personal data processing. pp11a processes your data under the following bases set out in Article 7 of Law 13.709/2018:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting your use of other pp11a services that do not rely on consent.

5Data Sharing with Third Parties

Pp11a does not sell its players' personal data. Full stop. That said, there are situations where sharing is necessary to operate our services or meet legal obligations. See when and with whom:

• Payment providers: financial institutions and payment intermediaries (such as the Central Bank's Pix system, credit/debit card operators, PicPay, and Mercado Pago) receive only the data strictly necessary to process the transaction;
• Game providers: companies such as Pragmatic Play, Evolution Gaming, and Ezugi process session data to deliver live casino games and slots. These providers are contractually required to handle data in compliance with the LGPD and their own certification regulations;
• Identity verification services (KYC): certified document verification platforms that assist in confirming players' identities prior to their first withdrawal, as required by law;
• Customer support services: chat and communication tools used to provide customer support.

Pp11a may be required to share personal data with government, regulatory, or judicial authorities when mandated by law, court order, or determination by a competent regulatory body — such as the Ministry of Finance, the Central Bank of Brazil, the Financial Activities Control Council (COAF), or the National Data Protection Authority (ANPD).

6Cookies and Tracking Technologies

Pp11a uses cookies and similar technologies to ensure the platform functions correctly, improve the browsing experience, and — with your consent — personalize the content you see.

The first time you access pp11a on a device or browser, you will see a cookie notice with options to accept all cookies or customize your preferences. You can update your cookie settings at any time through your account dashboard under "Privacy & Cookies". Disabling non-essential cookies does not affect access to the platform's core features.

You can also manage cookies directly in your browser or on your phone – through the settings of Chrome, Safari, Firefox, or whichever browser you use to access pp11a.

7How We Protect Your Data

Pp11a applies a robust set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or improper disclosure.

• 256-bit SSL/TLS encryption on all communications between your device and pp11a's servers – the same standard used by Brazil's largest banks, including Itaú, Bradesco, and Banco do Brasil;
• Passwords stored using irreversible cryptographic hashing – pp11a never stores your password in plain text, and no employee has access to it;
• Two-factor authentication (2FA) available to all players who want to add an extra layer of security to their account;
• Continuous monitoring of access and unauthorized access attempts using automated anomaly detection systems;
• Servers hosted in data centers with physical and logical security certifications, with regular backups and system redundancy.

• Access to players' personal data is restricted to employees and partners with a specific operational need, following a least-privilege model;
• All employees with access to personal data are required to complete mandatory training on data protection and the LGPD;
• Internal security incident response policy with notification timelines for the ANPD and affected data holders as required by the LGPD;
• Periodic review of security measures, with adjustments made in response to evolving threats and regulatory requirements.

8How Long We Retain Your Data

Pp11a retains personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and address any disputes or audits.

Once the retention period expires, data is securely deleted or anonymized so that the account holder can no longer be identified. A data deletion request from the account holder may make it impossible to keep the account active when the data in question is essential to its operation.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the holder of personal data processed by pp11a, a set of rights that can be exercised at any time. See each one below and how to exercise them:

To exercise any of these rights, send your request to privacidade@pp11a.net with the subject line "LGPD Request – [your full name]". pp11a will respond within 15 calendar days. For more complex cases, this period may be extended by an equal amount of time, with an explanation provided.

10Protection of Minors

Pp11a is a platform intended exclusively for users aged 18 and over. The collection and processing of personal data from minors under 18 is not carried out intentionally and constitutes a violation of the platform's Terms and Conditions.

Pp11a takes the following measures to protect minors:

• Date-of-birth verification at registration, with automatic blocking of CPFs belonging to users under 18;
• Mandatory identity verification before the first withdrawal, confirming that the user is of legal age based on an official ID document;
• Monitoring of behavioral patterns that may indicate underage use of the platform;
• Immediate account block and cancellation upon identification of an underage user, with the real deposited balance refunded to the original payment method.

If you suspect that someone under 18 is using the pp11a platform, please contact us immediately at privacidade@pp11a.net. We will take the necessary steps as a top priority.

11International Data Transfers

Some service providers used by pp11a — such as live casino game providers and platform analytics tools — have infrastructure located outside Brazil. When this is the case, pp11a ensures that data transfers only take place to countries or organizations that offer an adequate level of protection, in accordance with the criteria established by the ANPD, or through the adoption of standard contractual clauses approved by the regulatory authority.

Under no circumstances are sensitive payment data – such as bank details used for Pix or TED transfers, or credit card information – transferred to servers outside Brazil without the contractual safeguards required by the LGPD and the Banco Central do Brasil.

The list of countries to which data may be transferred, along with the applicable safeguards, is available upon request from pp11a's DPO at privacidade@pp11a.net.

12Changes to this Privacy Policy

Pp11a may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered by the platform. Any material changes will be communicated by email at least 7 days before taking effect.

The most recent version of this policy is always available on this page, with the update date shown at the top of the document. We recommend revisiting this page periodically to stay informed about how pp11a protects your data.

If you disagree with any material change to this policy, you may close your account and request the deletion of data not subject to mandatory legal retention, as described in sections 8 and 14 of this policy.

13Data Protection Officer (DPO)

Pp11a has appointed a Data Protection Officer (DPO), as required by art. 41 of the LGPD. The DPO is responsible for:

• Accept complaints and communications from data subjects and provide the necessary clarifications;
• Guiding pp11a's employees and contractors on personal data protection practices;
• Act as the communication channel between pp11a and the National Data Protection Authority (ANPD);
• Ensuring that pp11a's data processing operations comply with the LGPD and all other applicable regulations.

To contact pp11a's Data Protection Officer directly, use only the channel below, which is reserved exclusively for privacy and data protection matters:

DPO email: privacidade@pp11a.net
Suggested subject: "DPO pp11a – [brief description of request]"
Response time: up to 15 calendar days

For operational matters such as technical support, issues with Pix withdrawals, or betting questions, please use the customer support chat or email suporte@pp11a.net.

14How to Contact Us About Privacy

Pp11a is committed to responding to all data privacy requests promptly and clearly. Use the channels below based on the type of request:

You may also file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing LGPD compliance in Brazil, if you believe pp11a has not adequately fulfilled your rights as a data subject.

pp11a  ·  privacidade@pp11a.net  ·  Last updated: January 2026