Privacy Policy

399w — Privacy and Data Protection Policy

At 399w, your personal data is handled with care. This policy explains in plain language what we collect, how we use it, how we protect your information, and what rights you have under the LGPD.

LGPD Compliant SSL 256-bit Your Rights Cookie Policy Data Deletion
Last updated
January 2026

How 399w Handles Your Data — 6 Key Points

Before reading the full document, here are the key points in plain language — no unnecessary legal jargon.

LGPD — Your Rights Are Guaranteed

399w operates in full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018). You have the right to access, correct, port, and delete your data at any time, with no red tape. Simply contact support at suporte@399w.best.

🔐 LGPD Law No. 13,709/2018
256-bit SSL Encryption Across the Board

All information transmitted between your phone or computer and 399w's servers is protected with SSL 256-bit encryption — the same security standard used by major Brazilian banks such as Itaú, Bradesco, and Banco do Brasil. Your financial and personal data never travels in plain text.

🔒 SSL 256-bit on all connections
Your Data Is Never Sold

399w never sells users' personal data to third parties for commercial purposes. Data sharing is limited to essential operational partners — such as Pix payment processors — and to legal obligations. Under no circumstances is your data traded or disclosed for third-party marketing without your express consent.

🚫 Zero data selling
Account & Data Deletion on Request

You may request the deletion of your account and your data at any time. 399w processes deletion requests within up to 15 business days. Some data may be retained for longer periods when required by law — such as financial records for compliance with the Receita Federal — but this is communicated transparently at the time of the request.

🗑️ Deletion within 15 business days
Cookies Only for What's Necessary

399w uses session cookies to keep you logged in, security cookies to detect suspicious access, and performance cookies to improve platform speed. Third-party tracking cookies for advertising are only activated with your explicit consent, which can be withdrawn at any time in your account settings.

🍪 Cookies you control
Secure KYC — Full Document Protection

Identity verification documents submitted for KYC — such as RG, CNH, and proof of address — are stored in an encrypted environment accessible only to 399w's compliance team. These documents are never shared externally and are deleted after the minimum retention period required by Brazilian sector regulations.

📄 Documents with restricted access
About This Policy

This Privacy Policy describes how the platform 399w, available at 399w.best, collects, uses, stores, shares, and protects the personal information of its users. It was drafted in compliance with the General Data Protection Law — LGPD (Lei nº 13.709/2018). By creating an account or using any 399w service — Sports Betting, live casino, slots, crash games or any other feature — you confirm that you have read and understood this policy. This policy supplements the Terms and Conditions of the platform.

1

Data Controller

The controller responsible for processing the personal data collected by the 399w platform is the company operating the platform available at 399w.best. For the purposes of this policy and in accordance with the LGPD, the controller is the entity that makes decisions about data processing — what to collect, how to use it, how long to store it, and with whom to share it.

The 399w Data Protection Officer (DPO) can be reached at privacidade@399w.best for matters related to personal data processing, exercising rights under the LGPD, or clarifications about this policy.

Data Protection Officer (DPO)

Email: privacidade@399w.best · Response time: up to 15 business days as required by the LGPD. For general support inquiries unrelated to data protection, please use suporte@399w.best.

2

Data Collected

399w collects different categories of personal data depending on how you interact with the platform. The categories and specific data collected are:

Data provided directly by you at registration:

  • Full name as it appears on the CPF.
  • CPF (Individual Taxpayer Registration number).
  • Date of birth.
  • Email address.
  • Mobile number with area code.
  • Residential address (requested during the KYC process).

Identity verification (KYC) data:

  • Copy of a government-issued ID (RG or CNH).
  • Selfie for facial verification (when requested).
  • Proof of address issued within the last 90 days.

Financial and transaction data:

  • Pix key (CPF, email, phone number, or random key) for withdrawal processing.
  • Deposit and withdrawal history in BRL.
  • Credit or debit card data (only the last 4 digits are stored — the full card number is handled by the PCI-DSS certified payment gateway, not by 399w).

Platform usage data (collected automatically):

  • IP address and approximate location.
  • Device type, operating system, and browser.
  • Pages visited, session duration, and features used.
  • Betting and casino game history.
  • Account preferences and settings.
Card Data

399w does not store full credit or debit card numbers. Card data is processed directly by a certified payment gateway (PCI-DSS Level 1) and never passes through 399w's servers in plain text.

Summary — Data × Purpose × Legal Basis
Data Collected Primary Purpose Legal Basis (LGPD)
Full name, CPF, date of birth Registration and KYC Contract · Legal Obligation
Email and phone number Communication and security Contract · Legitimate Interest
Identity documents (KYC) Age and identity verification Legal Obligation
Pix key and payment data Withdrawal processing Contract · Legal Obligation
Betting and transaction history Compliance and responsible gambling Legal Obligation · Legitimate Interest
IP address and device data Security and fraud detection Legitimate Interest
Usage behavior (browsing) Platform improvement Legitimate Interest · Consent
3

Purpose of Data Processing

399w uses the personal data it collects strictly for the purposes described below. No data is processed for any other purpose without prior notice and, where required, without the user's consent.

  • Service delivery: Maintaining your account, processing bets, settling results, handling deposits via Pix, boleto, card, PicPay or Mercado Pago, and processing withdrawals via Pix.
  • Identity verification: To confirm that the user is 18 or older, that the CPF provided is valid, and that the identity matches the account holder — as required by Brazil's sports betting regulations.
  • Fraud and money laundering prevention: To monitor suspicious transactions and fulfill reporting obligations to COAF (Conselho de Controle de Atividades Financeiras) when required by law.
  • Account communications: Send deposit and withdrawal confirmations, security alerts, notifications about changes to the Terms, and relevant information about how your account works.
  • Responsible gambling: To monitor usage patterns for signs of problematic behavior and proactively offer self-control tools.
  • Experience personalization: Display bets, promotions, and relevant content based on the user's usage history and preferences.
  • Product improvement: Analyze aggregate usage behavior to identify improvements to the platform's interface, performance, and new features.
  • Compliance with legal obligations: To comply with requests from regulatory, tax, and law enforcement authorities as required by Brazilian law.
5

Data Sharing

399w does not sell personal data of users. Data sharing is limited to the situations described below and always restricted to the minimum necessary for each purpose:

Essential operational partners: 399w shares data with service providers necessary for the platform to operate:

  • Payment processors: Data required to process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer. These partners operate under data processing agreements compatible with the LGPD.
  • KYC providers: Identity verification services that assist in validating documents submitted by users.
  • Cloud infrastructure providers: Certified servers and storage systems operating under contracts with data protection clauses aligned with the LGPD.
  • Security and anti-fraud providers: Systems for detecting suspicious access, bots, and fraudulent activity.

Legal and regulatory authorities: 399w shares data with public authorities when expressly required under Brazilian law — such as requests from the Judiciary, the Public Prosecutor's Office, the Federal Police, Receita Federal, or COAF. Such sharing is carried out strictly within the limits of the legal request, without disclosing more information than what is asked for.

Corporate transactions: In the event of a merger, acquisition, or restructuring of the company operating 399w, user data may be transferred to the successor entity, always with the protections set out in this policy maintained and with prior notice to users.

What 399w never does

399w never sells, rents, or trades users' personal data with advertisers or data brokers. It never shares betting or financial data with employers, family members, or any third party not authorized by law. It never transfers data to countries without an adequate level of protection without the safeguards required by the LGPD.

6

Data Security

399w implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. The key security measures in place include:

  • 256-bit SSL/TLS encryption: All connections between the user's device and 399w's servers are encrypted. This applies to platform access via mobile browser and desktop alike.
  • Encrypted storage: Sensitive data such as passwords and KYC documents are stored with encryption at rest (AES-256) on our servers.
  • Internal access controls: Access to user data is restricted to 399w employees with a specific operational need, with access logs recorded and permissions reviewed periodically.
  • Continuous monitoring: 399w's systems are monitored around the clock to detect anomalies, intrusion attempts, and suspicious activity.
  • Two-factor authentication: Available to all users and required for internal administrative access.
  • Periodic security testing: 399w's infrastructure undergoes penetration testing and security audits carried out by specialized third-party firms.

In the event of a security incident that results in risk or harm to users, 399w will notify the ANPD (Autoridade Nacional de Proteção de Dados) and the affected users within the timeframes set out in the LGPD, providing information about the nature of the incident, the data involved, and the measures taken to mitigate it.

7

Your Rights as a Data Subject

The LGPD grants you, as the holder of personal data processed by 399w, the following rights, which may be exercised at any time at no cost:

Right of Access

Request confirmation of whether processing is taking place and obtain access to the personal data 399w holds about you, including the categories of data and the purposes of processing.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated personal data, such as an incorrect name, wrong date of birth, or outdated email address.

Right to Deletion

Request the deletion of personal data that is unnecessary or processed in violation of the LGPD. Deletion may be limited by legal retention obligations.

Right to Data Portability

To request the transfer of your personal data to another service provider, in a structured, machine-readable format, where technically feasible.

Right to Object

Object to the processing of data carried out on the basis of legitimate interest where there are valid grounds for doing so, in accordance with the LGPD.

Right to Withdraw Consent

To withdraw consent given for processing based on this legal ground, at any time and without the need for justification, at no cost and without affecting access to the core service.

To exercise any of these rights, contact the 399w DPO by email at privacidade@399w.best. The response deadline is up to 15 business days, as established by the LGPD. If a request is denied, 399w will explain the reasons for the refusal, and you may file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

8

Cookies and Tracking Technologies

399w uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with the user's consent — personalize content and analyze usage behavior. The types of cookies used are detailed below:

You can manage your cookie preferences in the privacy settings of your 399w account or through your browser settings. Disabling non-essential cookies does not affect access to the platform's core features — Sports Betting, Pix deposits, and withdrawals continue to work normally.

9

Data Retention and Deletion

399w retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law. The main retention periods are:

  • Registration and account data: Retained for the full duration of the account and for up to 5 years after closure, to address any potential legal claims.
  • Financial transaction history (deposits and withdrawals): Retained for 10 years in accordance with Receita Federal and COAF requirements for financial records.
  • KYC documents: Retained for 5 years after account closure in compliance with anti-money laundering regulations.
  • Access and security logs: Retained for 6 months in accordance with the Marco Civil da Internet (Law No. 12,965/2014), and may be extended by court order.
  • Performance cookie data: Anonymized after 12 months and deleted after 24 months.

After account closure and once all legally required retention periods have been met, all personal data is securely deleted or irreversibly anonymized. Anonymized data is not considered personal data under the LGPD and may be retained for aggregated statistical analysis.

To request early deletion of your data — within the limits permitted by law — please contact our DPO at privacidade@399w.best. 399w will respond within 15 business days, indicating which data can be deleted immediately and which must be retained due to a legal obligation, with a specific justification for each category.

10

Minors

The 399w platform is strictly intended for users aged 18 and over. 399w does not intentionally collect personal data from minors. The registration process includes date of birth verification, and the platform performs identity verification (KYC) that includes age confirmation.

If 399w determines that it has collected data from a person under the age of 18, that information will be deleted immediately, the account will be closed, and, where applicable, the incident will be reported to the relevant authorities in accordance with Brazil's child and adolescent protection legislation (ECA — Law No. 8,069/1990).

Responsibility of Legal Guardians

If you are a parent or legal guardian and believe that a minor in your family has created an account on 399w, please contact us immediately at suporte@399w.best. The account will be closed and the data deleted at no cost and without penalty.

11

International Data Transfers

Some of 399w's technical and infrastructure partners may have servers located outside Brazil. When personal data is transferred internationally, 399w ensures that:

  • The transfer occurs only to countries with an adequate level of data protection recognized by the ANPD, or
  • The recipient applies adequate contractual safeguards through standard data protection clauses compatible with the LGPD, or
  • The transfer is necessary for the performance of a contract entered into with the data subject (such as processing international payments), or
  • The data subject has given specific, informed consent for the transfer.

Most personal data belonging to 399w's Brazilian users is processed and stored on servers located in Brazil or in countries with an adequate level of protection recognized under Brazilian regulations.

12

Changes to This Privacy Policy

399w may update this Privacy Policy periodically to reflect changes in Brazilian law, betting industry regulations, security practices, or platform operations. All material changes will be communicated at least 7 days in advance via the registered email address and through an in-platform notification.

The date of the last update is always shown at the top of this document. Continued use of the platform after any changes take effect constitutes acceptance of the revised policy. If you do not agree with the changes, you may close your account and request data deletion before the effective date of those changes.

13

Contact & DPO — Data Protection Officer

To exercise your rights under the LGPD, clarify any questions about this Privacy Policy, or report any concerns regarding the processing of your personal data by 399w, please contact the Data Protection Officer (DPO):

DPO Email
privacidade@399w.best
Response within 15 business days
General Support
suporte@399w.best
24/7 live chat on the platform
ANPD
National Data Protection Authority
For unresolved complaints

Your Data, Your Rules — How 399w Handles Privacy in Practice

When you register with 399w Whether you're betting on the Brasileirão, following a UFC card, or trying out the live casino slots, you're sharing personal information — your name, CPF, phone number, and financial details. It's natural to want to know what happens with that information, who can access it, and how long it's kept. This policy exists to answer those questions plainly, without filling pages with legal jargon nobody reads to the end.

The 399w collects data because it needs it to operate. Your CPF is required to verify that you are 18 or older and that you are who you say you are — a legal requirement for sports betting platforms in Brazil. Your phone number and email are needed to confirm your registration, send security alerts, and communicate account-related information. Your Pix key is required to process withdrawals. None of this data is collected out of curiosity or to be passed on to third parties — each piece of information serves a specific purpose and is retained only as long as that purpose requires.

Pix transformed the way Brazilians relate to digital finance — making payments instant, available around the clock, and free of charge. The 399w has embraced this model from day one: instant deposits and withdrawals in up to 5 minutes, 24 hours a day. When you request a withdrawal, 399w needs to process the transaction through Brazil's Central Bank systems and partner banks — this involves transmitting financial data securely and in encrypted form. No financial data travels in plain text between the platform and the payment systems.

Identity verification (KYC) can raise questions. Why does 399w ask for a photo ID before the first withdrawal? Because Brazilian regulations for the sports betting sector require platforms to verify users' identities before releasing payments — this protects both the user against fraudulent use of their account and the financial system against money laundering. Submitted documents are stored in an encrypted environment, accessible only by the compliance team, and are deleted after the minimum legal retention period. They are not shared externally and are not used for any purpose other than verification.

The LGPD gave Brazilians an important set of rights over their personal data — and 399w DPO Email

The cookies on 399w work transparently. Strictly necessary cookies — those that keep you logged in and protect your session against CSRF attacks — cannot be disabled because the platform simply cannot function without them. However, tracking cookies for advertising or detailed behavioral analysis are only activated with your explicit consent, which can be managed in your account or browser settings. This means 399w will not track your browsing outside the platform without your agreement.

When 399w needs to share data with partners — payment processors for Pix transactions, KYC providers for document verification, security services for fraud detection — this is done under contracts with data protection clauses aligned with the LGPD. These partners receive only the minimum data necessary for their specific function and are contractually prohibited from using that data for any other purpose. 399w is responsible for ensuring its partners comply with these obligations.

Privacy is not a secondary concern at 399w — is a core pillar of the trust that underpins the relationship with every user. You share sensitive information with the platform: CPF, financial data, betting history. In return, 399w is committed to handling that information with the same care you would expect from any reputable financial institution in Brazil. If you ever have questions about what happens to your data, privacidade@399w.best is available to respond — promptly and without unnecessary red tape.

Privacy Questions at 399w

To request access to your personal data, send an email to privacidade@399w.best with the subject line "Access Request — LGPD" and include your full name, CPF, and the email address registered to your account. 399w will respond within 15 business days with details about the data held — categories, purposes, retention periods, and with whom it is shared. You will receive the information in a structured, readable format.

No. Users' betting history is confidential information and is not shared with third parties — not with employers, family members, advertisers, or any other entity without a specific legal basis. The only circumstance in which betting data may be shared is in response to a court order or request from a competent regulatory authority, and strictly to the extent required by that request. 399w does not sell betting behavior data for any commercial purpose.

Yes. You may request account closure and deletion of your data at any time. The process starts with 399w's support team (suporte@399w.best or live chat). Any available real-money balance is returned via Pix before closure. After the account is closed, data deletion is processed within 15 business days by the DPO. Please note: certain data must be retained for minimum periods required by law — such as financial records for 10 years under Receita Federal rules — and cannot be deleted before that period. 399w will inform you which data is retained and why at the time of your deletion request.

Non-essential tracking cookies — such as detailed performance cookies and marketing cookies — can be disabled in your 399w account privacy settings or directly in your browser settings (Chrome, Safari, Firefox, etc.). Disabling these cookies does not affect the platform's core functionality: you can still log in, place bets, deposit via Pix, and request withdrawals as normal. Only behavior-based personalization features may be affected.

Documents submitted for identity verification (RG, CNH, proof of address) are stored in an encrypted environment with access restricted to 399w's compliance team. Once KYC is approved, the original high-resolution documents are replaced with verification records. KYC data is retained for the minimum period required by Brazilian anti-money laundering regulations (5 years after account closure) and deleted thereafter. Under no circumstances are these documents shared with third parties outside of mandatory legal requirements.

Your Data Is Protected with SSL 256-bit Encryption and LGPD Compliance at 399w

399w operates in full compliance with the LGPD (Lei nº 13.709/2018). SSL 256-bit encryption on all connections. No data is sold to third parties. For questions or to exercise your rights, contact our DPO at privacidade@399w.best. See also the Terms and Conditions features of the platform.

Responsible Gambling — Bet Mindfully at 399w

Betting is entertainment. 399w provides self-control tools: deposit limits, temporary breaks, and self-exclusion. Available exclusively to users aged 18 and over. If you're experiencing gambling-related difficulties, call CVV: 188.

Bet with 399w — Security and Privacy Guaranteed

Free registration, minimum deposit of R$ 20.00 via Pix, 100% bonus up to R$ 500.00 on your first deposit, and withdrawals in up to 5 minutes. Your data protected with 256-bit SSL encryption and full LGPD compliance.

+18 · Bet responsibly · Responsible Gambling · Terms apply

Português