9win handles your personal data with seriousness and transparency. Here we explain exactly what information we collect, how we use it, how we protect it and what your rights are as a data subject — all in full compliance with the LGPD.
The key highlights before you read the full document below.
The 9win, operated by 9Win Express Ltd. ("Company", "we", "our"), is committed to protecting the privacy and personal data of all users who access and use the platform available at 9win.express. This Privacy Policy has been drafted in compliance with the General Personal Data Protection Law (LGPD – Law No. 13.709/2018) and other applicable regulations in Brazil, including the Consumer Protection Code (Law No. 8.078/1990).
This Policy clearly and accessibly describes: what personal data 9win collects; how, why, and for how long it is used; with whom it may be shared; what your rights are as a data subject; and how to exercise those rights. By creating an account, making a Pix deposit, or using any service on the platform, you confirm that you have read and understood this Policy.
Summary in one sentence: 9win collects only the data needed to operate the platform, protects that information with bank-grade encryption, never sells or rents your data to third parties, and fully respects all your rights under the LGPD.
If you have any questions about this Policy or about how 9win handles your personal data, please contact our Data Protection Officer (DPO) at privacidade@9win.express or via the 24-hour support chat available on the platform.
For the purposes of the LGPD, the controller of the personal data collected by the platform 9win is:
The controller is responsible for determining the purposes and means of processing the personal data collected on the platform, and for ensuring that processing is carried out in compliance with the LGPD and other applicable regulations.
The 9win collects different categories of personal data depending on how you interact with the platform:
| Category | Data Collected | When Collected |
|---|---|---|
| Identification | Full name, date of birth, CPF, gender | Platform registration |
| Contact | Email address, mobile number, full residential address | Platform registration |
| Identity (KYC) | Document image (national ID, driver's license, or passport), proof of address, selfie with document | Withdrawal verification |
| Financial | Pix key, credit/debit card details (tokenized), destination bank for TED transfers | Deposit or withdrawal |
| Transactional | Deposit and withdrawal history, bets placed, games accessed, bonuses used | Continued use of the platform |
| Technical | IP address, browser type and version, operating system, device, session identifiers | Platform Access |
| Behavioral | Pages visited, session duration, clicks, game preferences, account settings | Continued use of the platform |
| Communication | History of interactions with support via live chat and email | Contact the support team |
9win does not collect sensitive data such as health information, racial or ethnic origin, religious beliefs or political opinions. Credit card financial data is tokenized — we store only a secure identifier and never the full card number in plain text.
The personal data collected by 9win are used exclusively for the following purposes:
Please note: 9win does not use your personal data to sell advertising to third parties, build profiles for commercialization with other companies, or for any purpose not listed above. If the scope of data processing needs to be expanded, you will be notified in advance and given the opportunity to consent or decline.
The LGPD requires that all personal data processing have a specific legal basis. The 9win bases the processing of your data on the following legal grounds set out in art. 7 of Law No. 13.709/2018:
The specific legal basis applied to each processing activity is mapped internally by 9win and available upon request to our Data Protection Officer (DPO) at privacidade@9win.express.
The 9win does not sell, rent or otherwise commercialize your personal data to third parties. Sharing occurs only in the strictly necessary cases outlined below, always with appropriate contractual safeguards:
All third parties all parties with whom 9win shares data are bound by specific data protection agreements requiring handling consistent with LGPD requirements and prohibiting use of data for any purpose beyond what was contracted.
The 9win retains personal data for as long as necessary to fulfill the purposes described in this Policy, or for the period required by applicable law:
Once the applicable retention period expires, data is securely deleted or irreversibly anonymized so that it can no longer be linked to you as an identifiable data subject.
The 9win applies robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, destruction, or disclosure:
Important: Despite 9win's best efforts, no security system is completely impenetrable. In the event of a security incident affecting your personal data, 9win will notify the National Data Protection Authority (ANPD) and the affected data subjects within the legal timeframes established by the LGPD, providing full details of what occurred and the measures taken.
You share responsibility for your account security: use a strong, unique password for 9win, enable 2FA, and never share your login credentials with anyone — 9win's team will never ask for your password by email, chat, or phone.
The 9win uses cookies and similar technologies to ensure the platform works properly and to improve your experience. See the types used below:
You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning properly. To learn more about cookies and how to manage them on your phone or computer, refer to the settings in Chrome, Safari, Firefox, or whichever browser you use.
The platform 9win is intended exclusively for users aged 18 (eighteen) and over. The Company does not intentionally collect personal data from minors and employs identity verification technologies to confirm users' age during the registration and KYC process.
If it is identified that data from a user under 18 years of age was inadvertently collected, 9win will immediately close the account, delete the minor's personal data from all systems — within a maximum of 72 hours of identification — and return any remaining balance to the verified legal guardian. Parents or guardians who suspect their child has created an account at 9win should contact support immediately at suporte@9win.express.
The LGPD guarantees you, as the data subject whose personal data is processed by the 9win, the following rights, which may be exercised at any time by emailing privacidade@9win.express or via the platform's live chat:
Request confirmation of whether your data is being processed and access the personal data 9win holds about you, including a readable copy of all registration, transactional, and behavioral data.
Request the correction of incomplete, inaccurate, or outdated data. For example, updating your home address or fixing an error in your registered name.
Request the deletion of data processed on the basis of consent. Data retained due to legal obligations (such as financial transaction records) cannot be deleted before the minimum period required by law.
Request the portability of your personal data to another service controller, in a structured, machine-readable format (CSV or JSON), in accordance with ANPD regulations.
Object to processing carried out on the basis of legitimate interest when such processing affects your fundamental rights and freedoms. You may also withdraw any previously given consents.
Request information about the public and private entities with which 9win shares your data, as well as about the option to withhold consent and the consequences of doing so.
Requests related to data subject rights will be answered within 15 calendar days, as established by the LGPD. In highly complex cases, this period may be extended by an equal amount of time, with notification to the data subject. If you believe your rights have not been met, you may file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.
Some of the game providers and technical service providers used by 9win have servers located outside Brazil. When international transfers of personal data are required, 9win applies the following safeguards as required by Article 33 of the LGPD:
Personal data is never transferred internationally for purposes other than those described in this Policy, or without appropriate safeguards. An up-to-date list of the countries and vendors to which data may be transferred is available upon request to the DPO at privacidade@9win.express.
The 9win may update this Privacy Policy periodically to reflect changes in Brazilian law, new data processing practices, or new platform features. Any significant update will be communicated via the registered email address at least 7 days before it takes effect.
The current version of this Policy is always available on this page, with the date of the last update indicated at the top of the document. We recommend reviewing it periodically, especially after receiving update notifications. Continued use of the platform after any changes take effect constitutes acceptance of the new version of the Policy.
If you disagree with any update that materially affects how your data is processed, you have the right to close your account without penalty before the changes take effect. Any available real BRL balance will be returned in accordance with standard withdrawal procedures following KYC verification.
As required by the LGPD, the 9win has appointed a Data Protection Officer (DPO), responsible for:
DPO Contact: For any questions regarding personal data protection, data subject rights, or to exercise your rights under the LGPD, please contact our Data Protection Officer directly at privacidade@9win.express. Response times are up to 24 business hours for receipt confirmation and up to 15 calendar days for a substantive response.
For questions, data subject rights requests, complaints, or any matter related to this Privacy Policy, the 9win provides the following channels:
If you believe your rights as a data subject have not been adequately addressed by 9win, you have the right to file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd, without prejudice to any other administrative or judicial remedies available under Brazilian law.
The LGPD gives you clear rights over your data. Here's how to exercise them quickly and easily.
Want to access your data? Correct it? Request portability? Revoke marketing consent? Identify exactly what you need before getting in touch.
Send an email to privacidade@9win.express describing your request, providing your registered CPF and account email. We will confirm receipt within 24 business hours.
9win responds to all LGPD rights requests within 15 calendar days. Complex cases may be granted an extension with prior notice. All responses are provided in Portuguese.
The most common questions about how 9win handles and protects your personal data.
This Privacy Policy is a living document — reviewed and updated whenever there are changes to legislation or the platform's data processing practices. 9win is committed to always notifying you in advance of any relevant changes. To exercise your rights as a data subject or for any questions about this Policy, contact us at privacidade@9win.express. You may also consult our Terms and Conditions to learn about the platform's other rules.
This Policy is in compliance with the LGPD (Law No. 13,709/2018) and the Marco Civil da Internet (Law No. 12,965/2014). Last updated: January 2026.
Sports Betting and casino games are forms of entertainment — never a guaranteed source of income. 9win provides responsible gaming tools, including configurable deposit limits, temporary breaks, and permanent self-exclusion. If you or someone you know needs support related to problem gambling, the Centro de Valorização da Vida (CVV) is available at 188, 24 hours a day. This platform is strictly for users aged 18 and over.
Learn more about Responsible Gaming →