Privacy Policy of 36tvip — Your Data, Protected

The controller responsible for processing the personal data collected on the platform is the 36tvip, operator of the online casino and Sports Betting platform available at 36tvip.net. For LGPD purposes, the controller is the entity that makes decisions about how personal data is processed.

The 36tvip has a Data Protection Officer (DPO) as required by the LGPD for companies that process personal data at scale. The DPO is responsible for ensuring that all data processing operations comply with current Brazilian law, handling data subject requests, and serving as the communication channel with the Autoridade Nacional de Proteção de Dados (ANPD).

The 36tvip collects only the data necessary to provide online entertainment services, meet legal obligations, and ensure platform security. The categories of data processed include:

The 36tvip does not collect sensitive data such as racial origin, religious belief, political opinion, health information, or sexual orientation. Data from individuals under 18 is not collected — access to the platform is exclusively for adults.

The data collected by 36tvip are used exclusively for the purposes described below. No data is processed in a manner inconsistent with the purpose originally communicated to the data subject.

• Service provision: enable registration, account access, Sports Betting, casino games, and all features available on the 36tvip.
• Payment processing: receive deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago; process withdrawals to bank accounts at major Brazilian banks (Nubank, Itaú, Bradesco, Banco do Brasil).
• Identity verification (KYC): confirm that the account holder is who they claim to be, prevent fraud, and comply with regulatory anti-money laundering requirements.
• Security and fraud prevention: detect and prevent unauthorized access, bonus abuse, multiple accounts, and other irregular activity on the platform.
• Responsible gambling: monitor gaming behavior patterns to identify signs of problem gambling and trigger the appropriate protection tools when needed.
• Account communications: notifications about transactions, activated promotions, security verifications, and relevant platform updates.
• Personalized marketing: communications about promotions and news from 36tvip, always with an easy, immediate opt-out option.
• Compliance with legal obligations: comply with requests from competent Brazilian authorities when legally grounded.

The LGPD requires that all personal data processing have an adequate legal basis. The 36tvip bases its data processing operations on the following legal grounds set out in Article 7 of Law No. 13.709/2018:

• Contract performance (Art. 7, V): processing is necessary to fulfill the contract entered into with the player upon creating an account on the 36tvip — covers registration, processing of deposits and withdrawals via Pix, game delivery, and customer support.
• Compliance with a legal obligation (Art. 7, II): financial and identity data are processed to meet regulatory requirements related to anti-money laundering, fraud prevention, and Banco Central do Brasil rules applicable to payment platforms.
• Legitimate interest (Art. 7, IX): processing of browsing and on-platform behavior data for security, fraud prevention, and service improvement purposes at 36tvip, always with full respect for the data subject's fundamental rights.
• Consent (Art. 7, I): for marketing communications and the use of non-essential cookies, the 36tvip requests specific, freely given consent, with the option to withdraw at any time.

The 36tvip does not sell players' personal data. Data sharing occurs only in the situations described below, always with an adequate legal basis and the necessary safeguards:

• Payment providers: financial data is shared with the institutions required to process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago. These companies act as data processors and are contractually bound to use the data solely for the purpose of the service provided to 36tvip.
• Game providers: session data is shared with the companies that provide the casino and slots titles available on 36tvip (such as Evolution Gaming), solely to enable the gaming experience.
• Identity verification services: for KYC processes, document data may be processed by platforms specialized in regulatory compliance, under a data processor agreement.
• Competent authorities: the 36tvip may share data with Brazilian law enforcement, judicial, or regulatory authorities when legally required by a valid court order, administrative ruling, or regulatory directive.

Data of players at 36tvip are stored on high-availability servers located in data centers with physical and logical security controls. The main technical and organizational measures in place include:

• Encryption in transit: all communication between the player's device and the servers of 36tvip uses TLS 1.3 protocol with a 256-bit SSL certificate.
• Encryption at rest: stored sensitive data — including financial information and KYC documents — is encrypted at rest using industry-standard algorithms.
• Access control: only employees of 36tvip with a legitimate need have access to personal data, and only to the extent necessary for their specific functions (principle of least privilege).
• Continuous monitoring: intrusion detection systems and suspicious activity monitoring operate 24 hours a day across the production environments of 36tvip.
• Regular backups: backups are performed regularly and stored in encrypted form in environments separate from the main environment.
• Enhanced authentication: administrative access to the systems of 36tvip require multi-factor authentication (MFA).

In the event of a security incident that may pose significant risk or harm to data subjects, the 36tvip will notify the National Data Protection Authority (ANPD) and affected players within the timeframes required by the LGPD.

The 36tvip uses cookies and similar technologies to ensure the platform functions properly, enhance the player experience, and analyze site usage. The cookie categories used are:

• Essential cookies: required for the basic operation of the 36tvip — session authentication, wallet balance maintenance, bet slip, and language preferences. These cannot be disabled without impairing platform functionality.
• Analytical cookies: used to understand how players interact with the 36tvip — most visited pages, session duration, navigation paths. Data is aggregated and anonymized, with no individual identification.
• Functional cookies: allow the platform experience to be personalized, such as remembering betting preferences and display settings chosen by the player on the 36tvip.
• Marketing cookies: used only with your explicit consent to personalize communications and advertisements about promotions from 36tvip. You may withdraw this consent at any time in your account settings.

The LGPD grants data subjects a set of rights that 36tvip respects and facilitates the exercise of these rights. See each right and how to exercise it below:

The 36tvip retains players' personal data for as long as necessary to fulfill the purposes described in this policy and applicable legal obligations. The criteria used to determine retention periods include:

• Active account data: retained for the entire duration of the contractual relationship between the player and the 36tvip.
• After account closure: financial and identity data are retained for up to 5 years after account closure, in accordance with anti-money laundering regulatory requirements (Law No. 9.613/1998) and Brazilian tax obligations.
• Pix transaction records: retained in accordance with the Brazilian Central Bank regulations applicable to payment institutions.
• Customer support data: support records are retained for up to 2 years after each case is closed, for quality assurance and dispute defense purposes.
• Consent-based data: deleted immediately upon withdrawal of consent, provided there is no other legal basis justifying retention.

Once the above retention periods have elapsed, data is securely and irreversibly deleted or anonymized for statistical purposes, with no individual identification possible.

The platform of 36tvip is intended exclusively for individuals aged 18 and over. The 36tvip does not intentionally collect, process, or store personal data from individuals under 18.

The registration process includes a mandatory date-of-birth field and checks that prevent minors from completing sign-up. In addition, the identity verification process (KYC) confirms that users are of legal age before withdrawals are released.

Some services used by the 36tvip to operate the platform involve infrastructure or partners located outside Brazil — such as live casino game providers with servers in other countries. In these cases, the 36tvip applies the safeguards required by the LGPD for international data transfers, including:

• Specific contractual data protection clauses with international partners, equivalent to the protections required under the LGPD.
• Transfers only to countries or organizations that provide an adequate level of protection as assessed by the ANPD, or through other mechanisms set out in Art. 33 of the LGPD.
• Data minimization in transfers — only what is strictly necessary to deliver the specific service.

The 36tvip periodically evaluates international partners to ensure that Brazilian players' data remains protected regardless of the country where it is processed.

The 36tvip may update this Privacy Policy periodically to reflect changes in Brazilian law, the services offered, or data processing practices. The date of the latest update always appears at the top of this page.

Material changes that significantly impact data subjects' rights will be communicated via registered email at least 7 days before taking effect. For minor changes — such as wording corrections or clarifications that do not alter the substance of the policy — updates may be made without individual prior notice.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concern regarding the handling of your personal data by 36tvip, use the channels below:

• Live chat: 24-hour support in Portuguese available directly on the 36tvip — recommended channel for faster responses.
• Privacy email: privacidade@36tvip.net — for formal requests to exercise LGPD rights, the response deadline is up to 15 calendar days.
• General support email: suporte@36tvip.net — for other matters related to your account at 36tvip.

The Data Protection Officer (DPO) of 36tvip can be reached at the same privacy email address for matters involving the interpretation of this policy, security incidents, or complaints related to the processing of personal data.

If you are not satisfied with the response from 36tvip, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the government authority responsible for overseeing LGPD compliance in Brazil.