Privacy Policy of aajogo3: Your Data Protected

This Privacy Policy describes the personal data collection, use, storage, and protection practices adopted by aajogo3, a Sports Betting and online casino platform operated for the Brazilian market, accessible at aajogo3.net.

This document applies to all registered and non-registered users who access any part of the aajogo3 platform, including the website, live casino games, Sports Betting, customer support services, and any other available features. By using aajogo3's services, the user confirms they have read and understood this Privacy Policy.

Aajogo3 acts as data controller as defined by the General Data Protection Law (LGPD – Law No. 13.709/2018). This means we are responsible for decisions regarding the processing of personal data collected through the platform.

Aajogo3 collects different categories of data depending on how you use the platform. All data categories and when each is captured are detailed below.

Aajogo3 does not collect sensitive data such as racial origin, political opinions, health information, or biometrics for registration or platform operation purposes. Identity documents submitted for KYC verification are used solely to confirm identity and are not processed automatically for any other purpose.

Data voluntarily provided by the user — such as communication preferences, account settings, and profile information — is handled with the same level of protection as mandatory registration data.

Aajogo3 uses collected data exclusively for the purposes described below. No data is used for purposes incompatible with those stated here without the user's renewed consent:

• Platform Service Delivery — processing registrations, login authentication, bet management, live casino, and financial transactions via Pix, boleto bancário, credit/debit card, and other accepted payment methods;
• Identity Verification (KYC) — confirm that the user is 18 or older and is who they claim to be, preventing fraud and misuse of the platform;
• Security & fraud prevention — monitor activity patterns to detect suspicious behavior, multiple accounts and attempts to manipulate bonuses or outcomes;
• Compliance with legal obligations — to meet the requirements of Brazilian regulators, tax authorities, and courts as required by law;
• Platform Improvements — analyzing usage data in aggregated, anonymized form to identify opportunities to improve the user experience;
• Service communications — send notifications about your account, transaction confirmations, security alerts and terms updates;
• Marketing communications — send information about promotions, bonuses, and platform news exclusively to users who have consented to this type of communication.

Aajogo3 does not use your data for solely automated decision-making that produces significant legal effects on you — any analysis that may impact your account is reviewed by a team member before any action is taken.

Every data processing activity carried out by aajogo3 has a corresponding legal basis under Article 7 of Law No. 13.709/2018 (LGPD). The table below summarizes the legal bases applied:

• Contract performance — processing required to deliver the services contracted by the user upon registering on the platform, including bet processing and payments;
• Legal obligation — processing required by applicable Brazilian legislation, including anti-money laundering regulations and customer identification rules;
• Legitimate interest — processing required for fraud prevention and platform security, always balanced against the rights and expectations of data subjects;
• Consent — processing for sending marketing communications and use of non-essential cookies, which the user may withdraw at any time.

When processing is based on consent, aajogo3 ensures that consent is collected freely, informedly and unambiguously — never as a mandatory condition for access to the platform's core services.

Aajogo3 does not sell, rent, or trade your personal data with third parties for any purpose. Sharing only occurs in the following specific situations, always under confidentiality and data protection agreements:

• Payment processors — to process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers. Each payment processor receives only the data strictly necessary to complete the transaction;
• Game providers — such as Evolution Gaming and Pragmatic Play, which require a user identifier to manage Live Casino sessions. No personally identifiable data beyond the user ID is shared;
• Identity Verification Services — for document validation during the KYC process, as required by anti-fraud and AML (anti-money laundering) regulations;
• Competent Authorities — when required by a judicial, administrative, or regulatory order issued by Brazilian authorities with legal jurisdiction to make such a request;
• IT Infrastructure — hosting and cloud service providers that store platform data, subject to data processing agreements and security standards equivalent to those adopted by aajogo3.

Any partner company that receives user data from aajogo3 is contractually required to: use the data solely for the specific authorized purpose, maintain equivalent security standards, notify aajogo3 in the event of a security incident, and return or destroy the data upon completion of the services.

Aajogo3 applies a set of technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption across all communications between the user's browser or mobile device and the platform's servers — the same standard used by major Brazilian banks;
• Encryption at rest for sensitive data stored in the platform's databases, including identity and financial information;
• Two-Factor Authentication (2FA) available and recommended for all users, adding an extra layer of protection to your login;
• Least-privilege access control — internal team members only access the data required for their specific role;
• Continuous monitoring of suspicious access attempts, with automatic blocking and alerts to the security team;
• Security audits periodically conducted by external professionals to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that may affect users' personal data, aajogo3 is committed to notifying the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes and in the manner set out by the LGPD. Users will be notified via the email address registered on their account, with clear information about what happened, which data was affected, and what steps were taken.

Aajogo3 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention obligations:

• Registration & identity data — retained for the full duration of the account and for 5 years after closure, as required by AML (anti-money laundering) regulations and Brazilian tax laws;
• Financial history — records of deposits and withdrawals via Pix, boleto and other methods are retained for 5 years for audit purposes and compliance with legal obligations;
• Betting and gaming history — retained for 2 years after the activity, and may be kept longer if an investigation is ongoing;
• Support data — chat conversations and emails are retained for 2 years for quality assurance and resolution of potential disputes;
• Technical & browsing data — access logs are retained for 6 months, which is sufficient for security purposes and incident investigation;
• Marketing data — retained until consent is withdrawn by the user, with no fixed term while consent remains in effect.

Once the retention period expires, data is securely deleted or irreversibly anonymized. You may request early deletion of your personal data, subject to legal retention obligations — aajogo3 will explain which data can be deleted immediately and which must be kept as required by law.

Aajogo3 uses cookies and similar technologies to ensure the platform works properly, analyze usage, and personalize the experience. The types of cookies used are listed below:

You can manage your cookie preferences at any time through your aajogo3 account settings. Most browsers also let you control cookies directly — Chrome, Safari, Firefox, and Edge all offer options to block or delete specific cookies.

Aajogo3 does not use third-party cookies for behavioral advertising outside the platform. Data collected through analytical cookies is processed in aggregate form and cannot be used to identify individual users.

The LGPD grants you, as a personal data subject, a set of rights that aajogo3 is fully committed to upholding. See each right and how to exercise it below:

To exercise any of these rights, contact aajogo3 at contato@aajogo3.net with the subject line "LGPD Rights — [your user number]". aajogo3 will respond within 15 business days, as provided under the LGPD. In complex cases, this period may be extended by a further 15 days, with prior notice to the user.

If you believe your rights have not been adequately met, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for enforcing the LGPD in Brazil.

Aajogo3 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Registration requires date of birth confirmation and CPF verification, which are cross-referenced with records that allow minors to be identified.

Should aajogo3 identify that data from a minor was inadvertently collected, the following actions will be taken immediately:

• The account will be closed immediately;
• All personal data belonging to the minor will be deleted from our systems;
• Any available account balance will be held and handled in accordance with applicable legal obligations.

Parents or guardians who believe a minor has accessed or registered on aajogo3 should contact us immediately at contato@aajogo3.net. All requests of this nature are treated as a top priority by our team.

Some services used by aajogo3 — such as cloud infrastructure providers and game suppliers like Evolution Gaming and Pragmatic Play — may process data on servers located outside Brazil.

When this occurs, aajogo3 ensures that the international transfer complies with Article 33 of the LGPD by adopting the following safeguards:

• Data processing agreements with protective clauses equivalent to those required by the LGPD;
• Prior assessment of the data protection level of the destination country or organization;
• Limiting the transfer to the minimum necessary for the delivery of the specific service.

Users' financial data — including Pix details, boleto bancário information, and card data — is processed exclusively by PCI-DSS certified processors operating in Brazil, with no international transfer of this sensitive information.

Aajogo3 may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered by the platform.

Whenever a significant change is made, aajogo3 will notify users by email at least 7 days before the new terms take effect. The most recent version of this policy will always be available on this page, with the last updated date shown at the top.

Continued use of the platform after an updated version of this policy takes effect constitutes acceptance of the new terms. If you disagree with any change, you may request account closure and data deletion as described in the Rights section.

For changes involving new data processing based on consent, aajogo3 will request fresh explicit consent before beginning that processing — it will never assume that prior consent covers new purposes not originally anticipated.

For any questions, requests, or complaints related to the processing of personal data by aajogo3, please reach out through the channels below:

• Data Protection Officer (DPO) Email — contato@aajogo3.net with the subject line "DPO – [your request]";
• Live chat — available within the aajogo3 platform, 24 hours a day, 7 days a week;
• FAQ — the aajogo3 FAQ covers common questions about privacy and data protection.

The aajogo3 Data Protection Officer (DPO) is responsible for overseeing compliance with this policy, responding to data subject requests, and maintaining the communication channel with the ANPD. The role is held by an internal team member with training and experience in data protection and Brazilian legislation.

We are committed to responding to all personal data requests within 15 business days of receipt. Complaints that are not resolved satisfactorily may be referred to the ANPD — Autoridade Nacional de Proteção de Dados, the regulatory body responsible for overseeing LGPD compliance in Brazil.