Yy333 Privacy Policy – Your Data Protected

The yy333 is a Sports Betting and online casino platform operated in yy333.best, offering Sports Betting on football (including Brasileirão Série A, Copa do Brasil, and Libertadores), volleyball, basketball, MMA/UFC, e-sports, slots, live casino, and crash games exclusively for the Brazilian market.

For the purposes of this Privacy Policy, yy333 acts as data controller of users registered on the platform, as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018). This means we are responsible for deciding how and for what purposes your data is processed.

This Privacy Policy applies to all users who access, use, or register on the yy333.best platform, regardless of the device used — mobile, desktop, or tablet.

The yy333 collects personal data at various points during your interaction with the platform. The table below details the categories of data collected and the context in which they are gathered:

The yy333 collects only the data strictly necessary to provide the contracted services, meet legal and regulatory obligations, and ensure platform security. We do not collect sensitive data such as racial origin, religious belief, political opinion, or biometric data beyond the photos required for identity verification.

The data collected by yy333 are used for the following purposes:

• Service provision: create and manage your account, process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, record bets, and settle results.
• Identity verification and fraud prevention: confirm that you are who you say you are, that you are over 18 years old, and that the transactions you carry out are legitimate. This includes the KYC process and monitoring for atypical behavioral patterns.
• Legal obligation compliance: maintain records of financial transactions and gambling activity as required by Brazilian law, including anti-money laundering regulations and betting industry requirements.
• User communication: send bet and transaction confirmations, notices about changes to terms or promotions, responses to support requests, and responsible gambling communications where relevant.
• Experience personalization: suggest bets and games based on your usage history, display promotions relevant to your profile, and adapt the interface to your browsing preferences.
• Security and stability: detect and prevent unauthorized access, fraud attempts, bonus abuse, and conduct that violates the platform's Terms and Conditions.
• Service improvement: analyze aggregated and anonymized platform usage data to identify technical issues, improve existing features, and develop new ones.

The yy333 does not use your personal data for purposes beyond those listed above without notifying you in advance and, where required, obtaining your consent.

The yy333 processes your personal data based on the following legal grounds established by the LGPD:

• Contract performance (Art. 7, V): processing is necessary to perform the service agreement entered into at the time of registration — handling bets, deposits, withdrawals, and bonuses.
• Compliance with a legal obligation (Art. 7, II): financial record-keeping, KYC identity verification, anti-money laundering compliance, and reporting to regulatory authorities as required by law.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, risk analysis, service personalization, and continuous improvement of the user experience — always respecting your rights and reasonable privacy expectations.
• Consent (Art. 7, I): for sending marketing communications, personalized promotions, and the use of non-essential cookies. You may withdraw your consent at any time without affecting your access to the platform's core services.

The yy333 does not sell personal data of users to third parties under any circumstances. Data sharing occurs only in the cases below, strictly for the purpose of delivering contracted services or fulfilling legal obligations:

• Payment providers: financial institutions and payment processors (such as Pix via Banco Central, card operators, PicPay, Mercado Pago, Nubank, Itaú, Bradesco, Banco do Brasil) receive only the data strictly required to process transactions in R$.
• Game providers: slots and live casino providers (such as Pragmatic Play, PG Soft, and others) receive anonymized identifiers to record game sessions and calculate RTPs, without access to your CPF or banking details.
• Identity verification (KYC): companies specializing in document verification and fraud prevention that assist us in confirming user identity.
• Infrastructure and security providers: hosting, security monitoring, and cyber-attack protection companies contracted to maintain the stability and security of the yy333.best platform.
• Public authorities: Brazilian regulatory bodies, judicial, or administrative authorities when required by law, court order, or regulatory mandate — always limited to what is strictly necessary.

All partners and service providers with access to personal data of users of the yy333 are contractually required to treat this data with confidentiality, use it only for permitted purposes, and implement appropriate security measures.

The platform yy333.best uses cookies and similar technologies to ensure the site functions correctly, personalize the user experience, and analyze platform performance. The cookies used fall into the following categories:

• Essential cookies: required for the platform's core functionality — session authentication, bet slip management, and language preferences. These cannot be disabled without affecting your use of the services.
• Performance cookies: collect aggregated and anonymized data on how users navigate the platform — which pages they visit, how long they spend in each section, and where errors occur. Used to improve the overall experience.
• Functionality cookies: remember your display preferences, in-platform browsing history, and interface customizations to make your next session faster and more seamless.
• Marketing cookies: used only with your consent to display relevant content and measure the effectiveness of promotional communications. You may withdraw this consent at any time in your account's privacy settings.

You can manage your cookie preferences through your account settings panel or your browser settings. Disabling non-essential cookies may affect some personalization features but will not prevent you from using the core services of the yy333.

The yy333 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure. Measures in place include:

• 256-bit SSL encryption: all communication between your device and yy333's servers is protected by bank-grade encryption, preventing data from being intercepted in transit.
• Encryption at rest: sensitive data stored on our servers — including identity documents, banking details, and registration information — is encrypted at rest using modern algorithms.
• Secure authentication: user passwords are stored as irreversible hashes. yy333 never has access to your password in plain text. We recommend using unique passwords and enabling two-factor authentication.
• Security monitoring: intrusion detection systems and suspicious activity monitoring operate in real time, identifying and blocking unauthorized access before any harm is done.
• Internal access controls: only yy333 staff with a justified operational need have access to users' personal data, always in accordance with the principle of least privilege.
• Regular audits: the platform undergoes periodic security assessments conducted by external specialists to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that may affect your data, yy333 will notify you and the National Data Protection Authority (ANPD) within the timeframes set out by the LGPD, with clear information about what occurred and the steps taken to mitigate the impact.

The yy333 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. General retention periods are:

• Registration and KYC data: retained for as long as the account remains active and for up to 5 years after account closure, in accordance with anti-money laundering requirements and industry regulations.
• Financial transaction records (deposits and withdrawals in R$): retained for up to 5 years after the transaction, in compliance with Brazilian tax and financial legislation.
• Betting history and gaming activity: retained for up to 3 years after account closure, for dispute resolution and regulatory audit purposes.
• Support communication data: retained for up to 2 years after the support interaction is closed, for quality assurance and resolution of any complaints.
• Security and browsing logs: retained for up to 1 year for security purposes and incident investigation.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that the data subject can no longer be identified. If you request deletion before the legal retention period ends, the data will be deleted to the extent that it is not required to fulfill a legal obligation.

The Lei Geral de Proteção de Dados (LGPD) grants you, as the data subject, the following rights regarding the processing carried out by yy333:

• Confirmation and access: you may request confirmation that we process your personal data and obtain a copy of the data we hold about you.
• Correction: you may request the correction of any incomplete, inaccurate, or outdated information in your yy333 account.
• Anonymization, blocking, or deletion: you may request that unnecessary, excessive, or non-compliant data be anonymized, blocked, or deleted.
• Portability: you may request the portability of your personal data to another service provider, under the terms regulated by the ANPD.
• Deletion: you may request the deletion of data processed based on consent, except where retention is required by a legal or regulatory obligation.
• Consent withdrawal: you may withdraw consent given for marketing purposes and non-essential cookies at any time, without affecting your access to the platform's core services.
• Data sharing information: you may request information about which entities yy333 shares your data with.
• Objection: you may object to processing carried out on the basis of legitimate interest where you have a legitimate reason related to your particular situation.

To exercise any of these rights, please contact our privacy team at privacidade@yy333.best or through the platform's support chat. Requests are answered within 15 business days, in accordance with the timeframe set out in the LGPD.

The services of yy333 are intended exclusively for users aged 18 and over. The platform does not intentionally collect, store, or process personal data from minors.

During registration and the KYC identity verification process, yy333 confirms each user's age. If we identify that an account was created by someone under 18, the following steps are taken immediately:

• The account is closed and blocked from further access.
• Any deposited balance is returned to the original payment method.
• All collected personal data is securely deleted within 30 days.
• The CPF linked to the account is retained to prevent re-registration.

If you suspect that a minor has created a yy333 account using your data or someone else's, please contact support immediately via live chat or at suporte@yy333.best.

The yy333 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services offered.

When we make significant changes to this policy, you will be notified by email at your registered address at least 7 days in advance, except in cases requiring immediate updates for legal or security reasons. The last updated date shown at the top of this page will be changed with each revision.

Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the updated privacy practices. If you disagree with the changes, you may request account closure as described in the Terms and Conditions before the effective date.

Previous versions of this Privacy Policy are available upon request by email at privacidade@yy333.best for historical reference purposes.

The yy333 has appointed a Data Protection Officer (DPO), as required by the LGPD for large-scale data controllers.

For any privacy or data protection matter — exercising your LGPD rights, questions about data processing, reporting incidents, or information requests — please reach out through the following channels:

• Privacy email: privacidade@yy333.best — responses within 15 business days for formal LGPD rights requests.
• General support: suporte@yy333.best or live chat available 24/7 — for general privacy questions, with responses within 4 business hours.
• Live chat: available 24 hours a day, 7 days a week, directly at yy333.best, with human support in Brazilian Portuguese.

You also have the right to file a complaint with the National Data Protection Authority (ANPD) if you believe your rights as a data subject are not being upheld by yy333.