Privacy Policy – 666v Online Casino Brazil

Who We Are — Data Controller Identification

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the 666v, operator of the online entertainment platform accessible at 666v.click, acts as Controller of personal data collected from its players and visitors.

As the Controller, 666v is responsible for defining how, why, and for how long personal data is processed — always within the limits set by current Brazilian law and the purposes stated in this Policy.

666v has appointed a Data Protection Officer (DPO) to ensure ongoing LGPD compliance, handle data subject requests, and serve as the point of contact with the National Data Protection Authority (ANPD). The DPO can be reached at suporte@666v.click with the subject line "DPO — Data Protection".

What Personal Data We Collect and How

666v collects personal data in different ways throughout your interaction with the platform. Below are the categories of data collected, their source, and primary purpose:

666v collects only the data that is strictly necessary for each stated purpose — in line with the data minimization principle under the LGPD. We do not collect sensitive data (such as racial origin, political opinion, health information, or sexual orientation) unless expressly required by specific regulation.

How and Why We Use Your Data

All data collected by 666v is used exclusively for the purposes listed below, always on a valid legal basis in accordance with the LGPD:

• Player account management: create and maintain your active account, process authentications, manage balance, and keep an activity history;
• Processing financial transactions: receive deposits via Pix, bank slip, credit/debit card, PicPay, or Mercado Pago, and process withdrawals to the Pix key linked to the account holder's CPF;
• Identity verification (KYC): verify the player's identity in accordance with legal obligations for anti-money laundering and minor protection;
• Fraud prevention & security: detect unauthorized access, multiple-account use, suspicious behavior patterns, and attempts to abuse bonuses;
• Compliance with legal obligations: comply with regulatory, judicial, and tax requirements applicable to the platform's operations in Brazil;
• Experience personalization: display relevant game recommendations, tailor the interface to user preferences, and offer promotions aligned with your gaming profile — always based on explicit consent where applicable;
• Service communications: send essential notifications about your account, transactions, policy changes, and security information;
• Promotional communications: send 666v offers, bonuses, and updates — only with your explicit consent and with an easy opt-out option;
• Player support: log and respond to requests, complaints, and inquiries submitted to our Portuguese-language support team;
• Responsible gambling: monitor patterns that may indicate compulsive behavior and trigger protective mechanisms in accordance with our Responsible Gambling policy.

Legal Basis for Data Processing (LGPD)

All personal data processing carried out by 666v has a specific legal basis as set out in Art. 7 of the LGPD. The applicable legal bases are:

• Contract performance (Art. 7º, V): processing necessary to fulfill the contract entered into with the player upon acceptance of the Terms and Conditions — includes account management, processing of deposits, withdrawals, and participation in games;
• Compliance with a legal or regulatory obligation (Art. 7º, II): data processed to meet legal obligations applicable to our operations, such as anti-money laundering, minor protection, and cooperation with competent authorities;
• Legitimate interest (Art. 7, IX): processing for fraud prevention, platform security, service improvement, and aggregated behavior analysis — always limited to the minimum necessary and without overriding the data subject's rights and reasonable expectations;
• Consent (Art. 7, I): for promotional communications, advanced experience personalization, and the use of non-essential cookies — with the option to withdraw at any time without affecting your access to the platform.

Where the legal basis is consent, you may withdraw it at any time through your account settings panel or by contacting 666v support. Withdrawal does not affect the lawfulness of processing carried out prior to revocation.

Sharing Data with Third Parties

666v may share personal data with third parties in specific, limited situations, always with contractual protections equivalent to those in this Policy:

• Partner game providers: studios such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and others receive only the minimum data required (typically an anonymous session identifier) to process game results and calculate winnings. These providers are contractually prohibited from using the data for their own purposes;
• Payment processors: financial institutions that process transactions via Pix, bank slip, credit/debit card, PicPay, or Mercado Pago receive only the data strictly necessary to complete each transaction, in accordance with Banco Central do Brasil regulations;
• IT service providers: cloud infrastructure, cybersecurity, and data analytics companies that process information as data processors under 666v's direct instruction, bound by contractual confidentiality clauses and LGPD compliance obligations;
• Government and judicial authorities: when required by law, court order, request from a competent regulatory authority, or anti-money laundering investigation by COAF;
• Independent auditors: RNG certification laboratories such as eCOGRA and iTech Labs may receive anonymized technical game result data for integrity audit purposes.

Cookies, Tracking & Similar Technologies

The 666v platform uses cookies and similar technologies to ensure the site functions correctly, improve the player experience, and — with your consent — personalize content. The cookie categories used are:

• Essential — required for the platform's basic operation: session authentication, login persistence, and CSRF protection. These do not require consent — without them, the platform cannot function;
• Functional — remember your language preferences, interface settings, and gameplay customization. They require consent and can be disabled without affecting basic access;
• Analytics — collect aggregated data on how players navigate the platform, which pages they visit, and where technical issues occur. Data is anonymized before any analysis. Consent is required;
• Performance — monitor page load times and live casino streaming stability to identify and resolve technical bottlenecks. Individual users are not identified.

666v does not use advertising or cross-site tracking cookies to display platform ads on third-party websites. All non-essential cookies can be managed through the privacy preferences panel accessible in the platform's footer.

You can configure your browser to automatically reject cookies, but doing so may affect certain features. On Android or iPhone, cookie settings are found in your default browser's preferences menu.

How Long We Keep Your Data

666v retains personal data for only as long as strictly necessary for each specific purpose, in compliance with mandatory legal retention periods:

• Active account data: retained for the full duration the account remains active, plus 5 years after closure (general statute of limitations under the Civil Code);
• Financial and transaction records: 10 years from the transaction date, as required by Brazilian tax and anti-money laundering legislation;
• KYC and identity verification records: 5 years after account closure or last transaction, in accordance with anti-money laundering regulations;
• Support communication history: 3 years after the last interaction, for service quality and dispute resolution purposes;
• Gaming behavior data: 2 years for experience personalization purposes, after which data is anonymized and incorporated into aggregate analyses with no individual identification;
• Marketing consent data: retained until you withdraw consent or for 2 years of inactivity, whichever comes first.

After the retention periods above, data is securely and irreversibly deleted from 666v's systems, or anonymized so that the data subject can no longer be identified. Security backups are subject to the same retention and deletion rules.

Security Measures for Data Protection

666v implements multiple layers of technical and organizational security to protect your personal data against unauthorized access, data breaches, improper alteration, or destruction:

• Encryption in transit: all traffic between your device and 666v's servers is protected by TLS 1.3 / SSL 256-bit — the same standard used by digital banks like Nubank, Itaú, and Bradesco;
• Encryption at rest: sensitive data at rest — including KYC documents, financial data, and transaction history — is encrypted using AES-256 on our servers;
• Two-factor authentication (2FA): available as an additional layer of protection for player account access;
• Internal access controls: 666v employees access personal data only to the extent required by their specific role, with all access logged for audit purposes;
• Continuous monitoring: automated intrusion detection systems and suspicious behavior analysis operate 24 hours a day to identify and block threats in real time;
• Security testing: 666v conducts penetration testing and vulnerability assessments on a regular basis through independent specialized firms;
• Incident response plan: in the event of a data breach that may pose a risk to users, 666v will notify the ANPD and affected players within the timeframes established by the LGPD.

Your Rights as a Data Subject (LGPD)

The LGPD grants data subjects a robust set of rights over their personal data. As a 666v player, you can exercise all of them at any time, free of charge, by contacting our Portuguese-language support team or the DPO:

• Confirmation and access (Art. 18, I and II): confirm whether we process your data and obtain a full copy in a readable format;
• Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion (Art. 18, IV): of unnecessary or excessive data, or data processed in violation of the LGPD;
• Portability (Art. 18, V): receive your data in a structured, interoperable format for transfer to another controller, where technically feasible;
• Sharing disclosure (Art. 18, VII): know which public or private entities your data has been shared with;
• Withdrawal of consent (Art. 18, IX): withdraw consent given for specific purposes at any time, without affecting basic access to the platform;
• Right to Object (Art. 18, §2º): if you disagree with any processing based on legitimate interest, you may object and 666v will review the request;
• Filing a complaint with the ANPD (Art. 18, §1º): you have the right to file complaints directly with the National Data Protection Authority (ANPD) if you believe your rights have not been respected.

To exercise any of these rights, contact us via the Portuguese-language support chat (available 24/7) or send an email to suporte@666v.click with the subject line "LGPD Rights — [your right]". We respond within 15 business days as required by law.

Protection of Minors

666v has a zero-tolerance policy regarding access by users under 18. We do not knowingly collect personal data from anyone under 18, and our platform is not directed at that audience.

As part of our verification process, we require age confirmation at registration and may request additional documentation at any time. If we determine that an account was created by someone under 18, it will be closed immediately, the data will be deleted in accordance with the minimum mandatory legal retention periods, and the case will be reported to the relevant authorities where applicable.

If you are a parent or guardian and suspect that a minor has created an account on 666v, please contact us immediately through our Portuguese-language support. We will act promptly to resolve the situation.

Changes to this Privacy Policy

666v may update this Privacy Policy to reflect changes in data processing practices, new regulations, technology updates, or ANPD decisions. When that happens:

• The "Last updated" date at the top of this document will be revised;
• Material changes — those that expand data collection, alter purposes, or reduce your rights — will be communicated by email at least 15 days before taking effect;
• Minor changes, such as text corrections or clarifications that do not affect the substance of the Policy, take effect immediately upon publication;
• The current version of this Policy is always available at 666v.click/privacy-policy.

We recommend reviewing this Policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of those changes. If you disagree with any change, you may close your account before the effective date.

How to Contact Our DPO and Exercise Your Rights

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, 666v provides the following contact channels:

• Support chat in Portuguese: available 24 hours a day, 7 days a week, directly on the platform — average response time under 2 minutes;
• DPO Email: suporte@666v.click — use the subject line "DPO — [your request]" for priority handling;
• Response timeframe: LGPD rights requests are responded to within 15 business days as required by law. Urgent security requests are prioritized;
• ANPD: if you believe your rights have not been properly respected by 666v, you may file a complaint directly with the National Data Protection Authority (gov.br/anpd).