CC11 Privacy Policy – Your Data, Protected with Transparency

1. Introduction and Who Controls Your Data

This Privacy Policy describes how CC11, operator of the platform available at cc11.best, collects, stores, uses, shares, and protects its users' personal data. CC11 is the controller of the personal data processed on this platform, responsible for defining the purposes and means of processing in accordance with LGPD requirements.

This policy applies to all registered CC11 users in Brazil, including those who use Sports Betting covering Brasileirão Série A, Copa do Brasil, Libertadores, MMA and UFC, NBB basketball, e-sports, and other sports; users of the live casino with European, French, and American roulette with real dealers; and players of crash games such as Aviator, Spaceman, and JetX available on the platform.

By creating an account and using CC11's services, you confirm that you have read and agree to this Privacy Policy. If you do not agree with any part of this policy, you should not create an account or use the platform. For questions, our privacy channel is available at suporte@cc11.best.

2. What Data We Collect and Why

CC11 collects personal data at different points during your interaction with the platform. Below is a clear description of each category of data collected:

2.1 Registration Data

When you create a CC11 account, we collect: full name, CPF, date of birth, email address, phone number, and full residential address including ZIP code. This information is required to verify your identity, confirm that you are 18 or older, and meet the legal obligations applicable to financial transactions in Brazil.

2.2 Identity Verification Data

To verify your identity and process withdrawals securely, CC11 may request a copy of your RG, CNH, or passport, along with proof of address issued within the last 90 days. Submitted documents are stored in encrypted form and accessible only to CC11's verification team.

2.3 Financial Data

We record the information needed to process deposits and withdrawals: your Pix key linked to your CPF, credit or debit card details (stored in tokenized form, never as plain text), transaction history with amounts in BRL, dates, and payment methods used — Pix, boleto bancário, PicPay, Mercado Pago, or TED transfers from banks such as Nubank, Itaú, Bradesco, and Banco do Brasil.

2.4 Platform Usage Data

We automatically collect data about how you use CC11: pages visited, bets placed with amounts and odds, crash games played with round history, live roulette sessions, access times, device used (phone model, operating system, browser version), and IP address.

2.5 Communication Data

When you contact CC11 support via live chat or email, we record the content of those conversations to improve our service and resolve disputes fairly. Chat and email records are retained for up to 2 years after the support interaction is closed.

3. How We Use Your Data

CC11 uses collected data solely for the purposes described below. We do not use your data for anything outside this list without informing you and, where applicable, obtaining your consent:

• Operate your account: Authenticate your access, keep your balance up to date, and process bets on football, MMA, crash games, and all other categories available on CC11;
• Process payments: Confirm deposits via Pix, boleto bancário, PicPay, and card; process withdrawals to your bank account in BRL within 5 minutes via Pix;
• Verify identity: Confirm that you are 18 or older and that your registration details are accurate, as required by law;
• Prevent fraud: Detect suspicious usage patterns, multiple accounts sharing the same CPF, use of false identities, and other violations of CC11's Terms and Conditions;
• Fulfill legal obligations: Provide information to Brazilian authorities when legally required, such as in the context of money laundering investigations under Law No. 9.613/1998;
• Improve the platform: Analyze aggregated, anonymized usage patterns to identify improvements to the user experience — such as load speed on mobile devices and crash games usability;
• Service communications: Send important account notifications, changes to terms, withdrawal confirmations, and security alerts;
• Marketing (with consent): Send offers, VIP Program promotions, and CC11 updates — only with your express consent.

4. Legal Bases for Processing (LGPD)

The LGPD requires that every instance of personal data processing have a justified legal basis. CC11 grounds its processing of your data on the following bases set out in Art. 7 of Lei nº 13.709/2018:

4.1 Contract Performance (Art. 7, V)

The processing of registration, financial, and usage data is necessary for the performance of the contract between you and CC11 — that is, to operate your account, process bets, and carry out Pix withdrawals. Without this data, the service cannot be provided.

4.2 Compliance with Legal Obligation (Art. 7, II)

CPF verification, the five-year retention of financial data, and any potential sharing with regulatory authorities are legal requirements that CC11 must comply with regardless of your consent. This includes Central Bank of Brazil regulations on anti-money laundering and Brazilian tax legislation.

4.3 Legitimate Interest (Art. 7, IX)

Fraud prevention, platform security, and the improvement of CC11's services based on anonymized usage data are processing activities grounded in legitimate interest, provided they do not override your fundamental rights. CC11 conducts impact assessments to ensure these activities are proportionate and necessary.

4.4 Consent (Art. 7, I)

For marketing communications — such as emails about CC11 promotions, new crash games, or VIP Program benefits — we rely on your consent as the legal basis. You may withdraw that consent at any time via the unsubscribe link in any communication or by emailing suporte@cc11.best.

5. Who We Share Your Data With

CC11 does not sell, rent, or transfer personal data to third parties for commercial purposes. Data sharing occurs only in the situations described below, all of which carry contractual protections equivalent to those in this policy:

5.1 Payment Processors

To process BRL deposits and withdrawals, we share transaction data with the financial institutions involved — such as Pix networks via Banco Central, credit and debit card operators, and intermediaries like PicPay and Mercado Pago. These partners receive only the data strictly necessary to complete the transaction and are contractually prohibited from using it for any other purpose.

5.2 Game Software Providers

The crash game and live casino providers available on CC11 — such as Spribe (Aviator), Pragmatic Play (Spaceman), and SmartSoft (JetX) — receive only an anonymous session identifier for technical purposes. These providers have no access to your name, CPF, or financial data.

5.3 Anti-Fraud and Security Systems

CC11 uses specialized fraud detection services that process behavioral data (betting patterns, IP address, device information) to identify suspicious activity. These systems operate under data processing agreements with standards equivalent to those of CC11.

5.4 Legal Authorities

CC11 may share data with Brazilian public authorities — such as the Federal Police, Receita Federal, or the Banco Central — when legally required by court order, regulatory investigation, or the demand of a competent authority. In such cases, we share only the data specifically requested and keep a record of all requests received.

6. How We Protect Your Data

Technical and organizational data security is a non-negotiable priority for CC11. The measures in place include:

• Encryption in transit: All communication between your phone or computer and CC11's servers uses TLS 1.3 with 256-bit encryption — the strongest standard currently available;
• Encryption at rest: Sensitive data stored on CC11's servers — such as identity documents and financial data — is encrypted using AES-256;
• Card data tokenization: Credit and debit card data is never stored in plain text. It is replaced by tokens generated by authorized payment networks;
• Access control: Only CC11 employees with a verified operational need have access to users' personal data, always with two-factor authentication and access logging;
• Security testing: CC11 conducts periodic penetration tests and independent security audits to identify and remediate vulnerabilities before they can be exploited;
• Incident response plan: In the event of a data breach, CC11 has defined procedures for containment, investigation, and notification of the ANPD (National Data Protection Authority) and affected users within the legally required timeframes.

Despite all these measures, no system is 100% immune to threats. CC11 recommends that you also follow good security practices: use a strong, unique password for your account, enable two-factor authentication, and never share your credentials with anyone.

7. How Long We Retain Your Data

CC11 retains your personal data only for as long as necessary to fulfill the purposes described in this policy, or for as long as required by Brazilian law. The specific retention periods are:

• Registration data (name, email, CPF, phone number): For the duration of the account and for up to 5 years after it is closed;
• Identity documents: For up to 5 years following verification, in accordance with anti-money laundering obligations;
• Financial data (BRL transactions, Pix history): For 5 years after each transaction, in accordance with Brazilian tax legislation;
• Usage and betting data: For up to 2 years after the last account activity, for security analysis and dispute resolution purposes;
• Support communications: For up to 2 years after the support ticket is closed;
• Access and IP logs: For up to 6 months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).

After the periods above, data is deleted from CC11's active systems or irreversibly anonymized. Anonymized data — where it is no longer possible to identify the user — may be retained for internal statistical analysis with no defined time limit.

8. Cookies and Tracking Technologies

CC11 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site performance. See the types of cookies we use:

CC11 does not use third-party cookies for behavioral advertising — meaning we do not track you across other websites after you leave the platform in order to serve ads. Data collected via analytics cookies is aggregated and cannot be used to identify individual users.

You can manage your cookie preferences in your browser settings or through the privacy preferences panel available in your CC11 account. Declining functional and analytics cookies does not affect your access to the platform's essential services.

9. Data of Minors

CC11 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe a minor has created a CC11 account, please contact us immediately at suporte@cc11.best so we can close the account and delete any data collected.

CC11 performs technical and document-based age verification at registration, including CPF validation against the Brazilian Federal Revenue Service databases. Accounts identified as belonging to minors at any point are immediately deactivated, and any data collected is handled in accordance with applicable legal requirements.

10. Your Rights as a Data Subject (LGPD)

Art. 18 of the LGPD grants you, as a data subject, a set of rights that CC11 respects and makes easy to exercise. Here is what you can request at any time:

To exercise any of these rights, send a request to suporte@cc11.best with the subject line "LGPD Rights – [your name]" and a description of your request. CC11 responds to all requests within 15 business days, in accordance with the legal timeframe established by the LGPD. If you are not satisfied with our response, you may file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados) at anpd.gov.br.

11. International Data Transfers

Some of the technology providers used by CC11 — such as cloud infrastructure and crash games software from international developers like Spribe and Pragmatic Play — may process data on servers located outside Brazil. CC11 ensures that these international transfers are carried out in compliance with Art. 33 of the LGPD, using one of the following safeguards:

• Transfer to countries with a level of data protection recognized as adequate by the ANPD;
• Use of standard contractual clauses approved by the ANPD that require the recipient to provide protection equivalent to that of the LGPD;
• Internationally recognized privacy certifications and seals held by the receiving party.

In all cases of international data transfer, only the data strictly necessary for the specific service is shared — never a complete user profile. For information about specific international transfers, please contact us at privacidade@cc11.best.

12. Marketing Communications

CC11 may send communications by email, SMS, or push notification about promotions, new crash games, VIP Program updates, and other platform news — always subject to your express consent given at registration or in subsequent account settings.

12.1 How to Unsubscribe

You can opt out of CC11 marketing communications at any time in three ways: by clicking the "Unsubscribe" link in any email sent by CC11; by accessing the notification settings in your account on the platform; or by sending an email to suporte@cc11.best with the subject line "Marketing Opt-Out". The opt-out is processed within 5 business days and does not affect receipt of essential operational communications, such as withdrawal confirmations and account security alerts.

12.2 Operational Communications

Regardless of your marketing preferences, CC11 may send essential operational communications: BRL deposit and withdrawal confirmations, unrecognized account access alerts, notifications about important changes to the Terms and Conditions or this Privacy Policy, and responses to your support requests. These communications are necessary for the provision of the service and cannot be opted out of without closing your account.

13. Changes to This Privacy Policy

CC11 may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or service improvements. The date of the most recent update is always shown at the top of this page.

When significant changes occur that affect your rights or the way we use your data, CC11 will notify you by email at least 7 days before the changes take effect. For minor updates — such as contact information changes or wording clarifications that do not alter the substance — notification may be made solely through a notice on the platform.

We recommend reviewing this policy periodically. Continued use of CC11 after an updated version takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data as described in Section 10.

14. How to Reach Us – Privacy Channel

For any questions, requests, or complaints related to how CC11 handles your personal data, you can use the channels below:

• Privacy email (DPO): privacidade@cc11.best — for LGPD rights requests and specific privacy matters;
• General support: suporte@cc11.best — for general questions about your CC11 account, Pix payments, and other matters;
• Live chat: available 24 hours a day on the CC11 platform for immediate support in Portuguese;
• ANPD: If you believe CC11 has not adequately addressed your request, you may file a complaint with the Autoridade Nacional de Proteção de Dados through the official ANPD portal.

CC11 is committed to responding to all privacy-related requests within 15 business days, as required by the LGPD. For more complex requests that require additional identity verification or legal review, this deadline may be extended, with prior notice given to the requester.