Wn222 Privacy Policy – Protecting Your Data

At wn222, the personal data controller — meaning the entity responsible for decisions about how your data is collected, used, and protected — is the operator of the wn222.best platform itself. For purposes of the Lei Geral de Proteção de Dados (LGPD — Law No. 13.709/2018), the controller can be reached at contato@wn222.best.

Wn222 has appointed a Data Protection Officer (DPO) responsible for receiving complaints, questions, and data subject requests regarding personal data processing. The DPO also serves as the point of contact with the Autoridade Nacional de Proteção de Dados (ANPD) in the event of an audit or incident.

Wn222 collects personal data at various points throughout your experience on the platform. Below are the categories of data collected and the context in which each is gathered:

Data provided directly by you:

• Full name, CPF, date of birth, and gender — collected at registration for identification and compliance with betting regulations;
• Email address and mobile number — for communication, authentication, and delivery of relevant notifications;
• Full residential address — for domicile verification during the KYC process;
• Identity documents (RG, CNH, or passport) and proof of address — submitted during identity verification;
• Payment information required to process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, or TED transfer — processed by certified gateways and not stored directly by wn222.

Data collected automatically during platform use:

• IP address and approximate geolocation data — for security, fraud detection, and regional compliance;
• Device information (phone or computer model, operating system, browser version) — for technical optimization of the experience;
• Betting history, games accessed, gaming sessions, and transaction amounts — for service operation, customer support, and regulatory compliance;
• Cookie and tracking technology data — detailed in Section 6 of this policy.

Every piece of data collected by wn222 has a specific, declared purpose. Below are the main ways we use your personal information:

• Platform operation: process bets, games, deposits, and withdrawals, maintain transaction history, and ensure the technical functioning of the services;
• Identity Verification (KYC): confirm that you meet the minimum age requirement, that you are a resident of Brazil, and that the information provided at registration is accurate — as required by applicable betting industry regulations;
• Security and fraud prevention: detect attempts to create multiple accounts, use of fraudulent documents, money laundering, and other conduct that violates the Terms and Conditions or Brazilian law;
• Compliance with legal obligations: respond to requests from competent authorities, meet tax obligations, and report suspicious transactions in accordance with anti-money laundering legislation;
• Relevant communication: send notifications about your account, updates to terms, transaction confirmations, and support communications you have requested;
• Consent-based marketing: send promotional communications — such as information about bonuses, cashback, and tournaments — only to users who have given express consent. You may withdraw this consent at any time;
• Service improvement: analyze aggregated platform usage patterns to identify product improvements, optimize the mobile experience, and prioritize the features most used by Brazilian players.

The LGPD requires that every instance of personal data processing have a justifiable legal basis. wn222 processes your data under the following legal grounds established in Article 7 of Law No. 13.709/2018:

• Contract performance — the data processing required to create your account, handle transactions, and deliver the contracted services. Without this data, the contractual relationship cannot exist;
• Compliance with a legal or regulatory obligation — identity verification, anti-money laundering, tax record retention, and compliance with requests from competent judicial or administrative authorities;
• Legitimate interest — fraud prevention, platform security, detection of abusive behavior, and technical improvement of services, always respecting the rights and reasonable expectations of the data subject;
• Consent — sending marketing communications and promotions. Consent is always obtained freely, informedly, and unambiguously, and may be withdrawn at any time without affecting access to wn222's other services.

Wn222 does not sell, rent, or trade your personal data with third parties. Data sharing occurs only in the following specific situations and with appropriate safeguards:

• Essential service providers: companies that provide technical services essential to the platform's operation — including cloud services, payment gateways (to process Pix, boleto, card, PicPay, Mercado Pago, and TED), game providers, and security analysis tools. These partners act as data processors, handling only the data strictly necessary for their functions under contracts that require LGPD compliance;
• Legal obligations: when required by law, court order, or determination by a competent Brazilian administrative authority — such as the Central Bank, the Federal Revenue Service, or the ANPD. wn222 does not disclose data beyond what is strictly required in each case;
• Anti-money laundering: transactions or behaviors that meet the mandatory reporting criteria under Brazilian anti-money laundering legislation may be reported to COAF (Conselho de Controle de Atividades Financeiras) as required by law;
• Corporate restructuring: in the event of a merger, acquisition, or corporate restructuring, data may be transferred to the resulting entity — provided the new controller assumes the same privacy commitments set out in this policy and notifies data subjects in advance.

Wn222 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and communications. Below are the types of cookies used:

You can manage your cookie preferences at any time through your account settings panel or your browser settings. Disabling essential cookies may affect how the platform functions. Marketing and analytics cookies are only activated after your express consent.

Wn222 applies technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place include:

• 256-bit SSL Encryption across all communications between the user's device and the platform's servers;
• Two-factor authentication (2FA) available to all users as an additional layer of account protection;
• Secure password storage with cryptographic hashing — no wn222 employee has access to your password in plain text;
• Continuous access monitoring with automatic alerts for suspicious activity, such as logins from unusual locations or repeated access attempts;
• Financial data segregation — payment information is processed by PCI-DSS certified gateways and is never stored on wn222's primary servers;
• Internal access controls on a least-privilege basis — each team member accesses only the data required for their specific role;
• Regular security testing, including vulnerability assessments and periodic reviews of access controls.

Wn222 retains your personal data only for as long as necessary for the purposes that justified its collection, in accordance with the minimum retention periods required by Brazilian law. The general retention criteria are:

• Active account data is retained for as long as the account remains active and for any additional period required by law after closure;
• Financial transaction data (deposits, withdrawals, bets) is retained for a minimum of 5 years for tax and anti-money laundering compliance purposes, even after account closure;
• KYC process data (identity documents and proof of address) is retained for the period required by the applicable regulatory standards for the betting sector in Brazil;
• Customer support communications are retained for up to 2 years after account closure, except where retention is required to resolve ongoing disputes;
• Data collected on the basis of consent is deleted within 30 days of consent withdrawal, unless another legal basis justifies its retention.

Once the retention period expires, data is securely deleted or anonymized so it can no longer be linked to a specific individual.

The LGPD grants you, as the data subject whose personal data is processed by wn222, the following rights — all exercisable free of charge via live chat, WhatsApp, or at contato@wn222.best:

• Access: obtain confirmation that wn222 processes your data and receive a copy of the information we hold about you;
• Correction: request the update or correction of incomplete, inaccurate, or outdated data;
• Erasure: request the deletion of personal data that is unnecessary or processed in violation of the law — subject to mandatory retention periods;
• Portability: receive your data in a structured, machine-readable format for transfer to another service, where technically feasible;
• Consent withdrawal: withdraw previously given consent for specific purposes, such as receiving marketing communications, without affecting access to wn222's other services;
• Objection: to object to data processing carried out on the basis of legitimate interest when you believe your rights and interests take precedence;
• Sharing information: find out which public or private entities wn222 has shared your data with;
• Review of automated decisions: request human review of decisions made exclusively by automated systems that affect your interests, such as account suspension triggered by a fraud detection system.

Wn222 responds to rights requests within 15 calendar days of receipt. In more complex cases, this period may be extended by an additional 15 days, with prior notice to the data subject.

Wn222 prohibits the use of the platform by anyone under 18 years of age. The platform does not intentionally collect data from minors.

If wn222 identifies — by any means, including the KYC process — that a user is a minor, the account will be closed immediately, deposits will be returned to the original payment method, and all collected data will be deleted, except for any data that must be retained for legal purposes related to the incident itself.

To run the platform with the quality and stability Brazilian players deserve, wn222 relies on cloud infrastructure and certain technical services that may involve storing or processing data outside Brazil. When this occurs, wn222 applies the safeguards required by the LGPD:

• Transfer only to countries that offer an adequate level of data protection under the ANPD, or to recipients that provide sufficient protection guarantees through standard contractual clauses;
• Contracts with specific data protection clauses with all international vendors that process data belonging to Brazilian users;
• Periodic evaluation of international vendors to ensure they maintain the required security standards.

Under no circumstances is your data transferred to jurisdictions that do not offer protection equivalent to the rights guaranteed by the LGPD. Financial data processed via Pix, boleto, card, PicPay, Mercado Pago, and TED is handled exclusively by payment gateways certified in Brazil.

Wn222 may update this Privacy Policy to reflect changes in Brazilian legislation, our data processing practices, or in response to feedback from our players. The following commitments apply to any such changes:

• Material changes will be communicated by email and in-platform notification at least 15 days in advance;
• The date of the last update is always displayed at the top of this page;
• Changes that expand the scope of data processing — such as new purposes of use — will require fresh consent where applicable;
• Continued use of the platform after the updated terms take effect constitutes acceptance of changes relating to processing based on contract performance or legitimate interest.

This Privacy Policy is governed by the laws of the Federative Republic of Brazil. Questions, requests, or complaints regarding the processing of your personal data may be directed to our Portuguese-language support channel or to the National Data Protection Authority (ANPD).