Privacy & LGPD

11ccc Privacy Policy – Your Data, Protected

The 11ccc handles your personal data responsibly and transparently, in compliance with the General Data Protection Law (Lei nº 13.709/2018 — LGPD). This policy explains what we collect, why we collect it, and how you can exercise your rights at any time.

Last updated: January 2026

How 11ccc Protects Your Data

Before getting into the technical details, here are the points that matter most for everyday platform users.

256-Bit SSL Encryption

All communication between your phone or computer and the servers of 11ccc is protected by 256-bit SSL encryption — the same standard used by Brazil's leading banks. Your registration data and payment information are never transmitted in plain text.

Full LGPD Compliance

The 11ccc operates in full compliance with the Lei Geral de Proteção de Dados (Law No. 13,709/2018). Your data is collected only for legitimate purposes, on a defined legal basis, and retained only for as long as strictly necessary for each purpose.

No Third-Party Data Sales

The 11ccc does not sell, rent, or trade your personal data with any third party for advertising or commercial purposes. Your data is used solely to operate your account and ensure transaction security.

Identity Verification (KYC)

The identity verification process of 11ccc complies with anti-money laundering requirements. Submitted documents are stored securely and used exclusively for verification and regulatory compliance purposes.

Your Guaranteed Rights

You can access, correct, port, or request deletion of your data at any time. A 11ccc responds to data subject requests within the deadlines set by the LGPD — without unnecessary red tape.

Communications with Easy Opt-Out

Promotional emails and notifications from 11ccc always include an unsubscribe link. You control what you receive — and can adjust your communication preferences directly in your account settings.

256
bits SSL encryption
LGPD
Lei nº 13.709/2018
0
Data sold to third parties
24/7
Support for privacy inquiries

1Who We Are

The 11ccc is a Sports Betting and online casino platform available in 11ccc.net, operated for the Brazilian market. For the purposes of this Privacy Policy, the 11ccc acts as the controller of its users' personal data, pursuant to Article 5, item VI, of the General Data Protection Law (Lei nº 13.709/2018 — LGPD).

This Privacy Policy applies to all registered users of the 11ccc, site visitors, and anyone who interacts with the platform — whether to place Sports Betting wagers, play at the online casino, make deposits via Pix, boleto bancário, credit or debit card, PicPay, or Mercado Pago, or simply browse the content.

This Policy should be read together with the Terms and Conditions and the rules of Responsible Gambling of the 11ccc, which form an integral part of the agreement between you and the platform.

2Data We Collect

The 11ccc collects different categories of personal data depending on how you interact with the platform. We only collect what is necessary for each purpose — nothing more.

Data you provide directly during registration:

  • Full name;
  • CPF (Cadastro de Pessoa Física);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Full residential address (ZIP code, street, number, unit, neighborhood, city, state).

Data collected during the identity verification (KYC) process:

  • Government-issued photo ID (RG, CNH, or passport);
  • Updated proof of residence;
  • Selfie for facial verification, when requested.

Financial and transaction data:

  • Pix keys registered for withdrawals;
  • Partial credit or debit card details (never the full number — we store only the last 4 digits and the card brand);
  • Deposit and withdrawal history;
  • Betting history and gaming session records.

Data collected automatically during platform use:

  • IP address;
  • Browser type and version;
  • Operating system and device type (mobile, tablet, desktop);
  • Pages visited, session duration, and actions taken on the platform;
  • Cookie and similar technology data (detailed in section 8).

3How We Use Your Data

The 11ccc uses your personal data for the following purposes, each on a defined legal basis:

Purpose Data used Legal basis (LGPD)
Account creation and management Full name, CPF, email, phone number, date of birth Contract performance (Art. 7, V)
Identity Verification (KYC) Documents, selfie, address Legal obligation (Art. 7, II)
Processing of financial transactions Banking details, deposit and withdrawal history Contract performance (Art. 7, V)
Fraud and money laundering prevention IP address, transaction data, betting history Legal obligation (Art. 7, II)
Account and security communications Email, phone number Legitimate interest (Art. 7, IX)
Promotional communications (with opt-out) Email, phone number Consent (art. 7º, I)
Platform improvement and usage analytics Browsing data, analytical cookies Legitimate interest (Art. 7, IX)
Responsible gambling and problem behavior detection Betting history, gaming frequency, deposits Legitimate interest (Art. 7, IX)

4Legal Basis for Processing

The LGPD requires that all personal data processing have a valid legal basis. The 11ccc grounds its data processing activities on the following legal bases:

  • Contract performance (Art. 7, V): processing required to perform the contract with the user — creating an account, processing deposits and withdrawals via Pix, boleto, credit or debit card, PicPay, Mercado Pago, and TED, recording bets, and paying out winnings;
  • Legal obligation (art. 7º, II): processing required to fulfill legal obligations — identity verification (KYC), anti-money laundering compliance (Law No. 9,613/1998), and retention of tax records;
  • Legitimate interest (art. 7º, IX): processing required for the legitimate interests of the 11ccc that do not infringe your fundamental rights — fraud prevention, platform security, product improvement, and responsible gambling support;
  • Consent (art. 7º, I): for marketing communications and the use of non-essential cookies — you may withdraw your consent at any time without affecting your access to the account.
Withdrawing consent for promotional communications does not affect how your account functions on the 11ccc. You will continue to receive only essential communications related to account security and operations.

5Data Sharing

The 11ccc does not sell or trade your personal data. Sharing occurs only in the following situations, always with a valid legal basis and limited to what is strictly necessary:

  • Payment providers: required financial data is shared with Pix processors, credit and debit card operators, PicPay, Mercado Pago, and banks to process deposits and withdrawals — including Nubank, Itaú, Bradesco, Banco do Brasil, and other financial institutions;
  • Game providers: technical session data (without complete financial information) is shared with slots and Live Casino providers — NetEnt, Playtech, Pragmatic Play, Evolution Gaming, and others — to enable gaming sessions;
  • Identity verification services: documents and selfies are processed by specialized KYC partners for validation in accordance with regulatory requirements;
  • Infrastructure and analytics services: cloud hosting providers and platform analytics tools have access only to anonymized or pseudonymized data;
  • Competent authorities: when required by law, court order, regulatory authority directive, or for anti-money laundering purposes — always within the limits prescribed by applicable regulations.

All partners that receive data from 11ccc are contractually required to handle that information with the same level of security and confidentiality demanded by this policy and the LGPD.

6Data Retention

The 11ccc retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by Brazilian law:

  • Registration and active account data: retained for as long as the account is active and for up to 5 years after closure, for audit and legal compliance purposes;
  • Financial records (deposits, withdrawals, bets): retained for a minimum of 5 years, as required by tax and anti-money laundering legislation;
  • KYC documents: retained for the same period as financial records, or as expressly required by the relevant regulatory authority;
  • Browsing data and access logs: retained for up to 6 months, unless needed for a security incident investigation;
  • Consent records: retained for as long as consent is active and for 2 years after it is withdrawn, for verification purposes.

Once the applicable retention period has elapsed, data is securely deleted or anonymized in a way that no longer permits identification of the data subject.

7Data Security

The 11ccc implements technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, or destruction:

  • 256-bit SSL/TLS encryption across all communications between the user and the platform;
  • Encryption at rest for sensitive data stored on our servers;
  • Role-based access control (RBAC) — only employees with a legitimate business need are granted access to personal data, and all such access is logged;
  • Continuous monitoring of unauthorized access attempts and suspicious activity;
  • Periodic security testing, including vulnerability assessments and configuration reviews;
  • Two-factor authentication (2FA) available to users and mandatory for employees accessing internal systems containing personal data.
In the event of a security incident that may affect your data, the 11ccc is committed to notifying you within the timeframe established by the LGPD and to reporting the incident to the Autoridade Nacional de Proteção de Dados (ANPD) where applicable.

Although 11ccc implement the best security practices available, no system is completely immune to risk. We also recommend that you follow good practices on your end: use a strong, unique password for your account, enable two-factor authentication when available, and never share your login credentials with anyone.

8Cookies and Similar Technologies

The platform of 11ccc uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and analyze platform usage.

Types of cookies used:

  • Essential cookies: required for the platform's basic operation — session authentication, language preferences, betting cart. These cannot be disabled without impairing platform functionality;
  • Analytical cookies: collect data on how users interact with the platform — most visited pages, session duration, errors encountered. Used to improve the experience. Require consent;
  • Functional cookies: remember user preferences to personalize the experience — such as displaying favorite sports or preferred odds. Require consent;
  • Security cookies: detect suspicious behavior, fraud attempts, and multiple simultaneous sessions. Essential for account security.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies won't prevent you from using your account, but may limit some of the platform's personalization features.

9Data of Minors

The 11ccc is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. Registration requires a CPF, which is verified to confirm the user's age.

If we become aware that we have collected data from a person under 18 without adequate verification, the account will be immediately closed, the data will be deleted, and any existing balance will be handled in accordance with applicable law.

If you believe a minor has created an account on 11ccc, please contact our support team immediately via the platform chat or by emailing contato@11ccc.net.

10Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that the 11ccc is fully committed to upholding. You may exercise any of these rights at any time via the support chat or by emailing contato@11ccc.net:

Your Rights Guaranteed by the LGPD

The 11ccc respects each of the rights set out in the Lei Geral de Proteção de Dados. See how to exercise them.

1
Right of Access

You may request a complete copy of all personal data that 11ccc holds about you. We respond to access requests within 15 business days.

2
Right to Rectification

If your data is incorrect, incomplete, or out of date, you can request a correction at any time. Basic registration details can be updated directly in your account settings.

3
Right to Erasure

You may request the deletion of your data. Exercising this right will result in account closure. Data subject to legal retention obligations (such as financial records) cannot be deleted before the applicable legal period expires.

4
Right to Data Portability

You may request a copy of your data in a structured, machine-readable format for transfer to another service. Requests are fulfilled within 15 business days.

5
Right to Object

You may object to data processing based on legitimate interest when you have a valid reason related to your specific situation. The 11ccc will assess each case individually.

6
Right to Withdraw Consent

For consent-based processing (marketing emails, non-essential cookies), you may withdraw your consent at any time without affecting the operation of your account.

To exercise any of the rights listed above, reach out via the 24-hour support chat on the platform or by email at contato@11ccc.net. Clearly identify which right you wish to exercise and include the information needed for us to verify your identity securely before processing the request.
Security Summary
  • 256-bit SSL
  • LGPD Compliance
  • No Data Sales
  • Secure KYC
  • Guaranteed rights
  • DPO available

11International Data Transfers

Some of the service providers that 11ccc uses — such as casino game providers (NetEnt, Playtech, Pragmatic Play, Evolution Gaming) and cloud infrastructure services — may process data on servers located outside Brazil.

When this occurs, 11ccc applies the following safeguards to ensure your data receives protection equivalent to that required by the LGPD:

  • We only engage service providers that demonstrate compliance with international data protection standards (such as GDPR, ISO 27001, or equivalent);
  • Inclusion of data protection clauses in all contracts with providers that process data in foreign jurisdictions;
  • Periodic review of the security practices of international service providers;
  • Data minimization in transfers — only the minimum data necessary for each specific purpose is shared with international providers.

12Changes to This Policy

The 11ccc may update this Privacy Policy periodically to reflect changes to the platform, Brazilian legislation, or data processing practices. Significant changes will be communicated in advance via your registered email or a notification on the platform.

The last updated date is always shown at the top of this page. We recommend reviewing this policy periodically. Continued use of the platform following notification of any changes constitutes acceptance of the updated version.

If changes require new consent (for example, a new consent-based processing purpose), the 11ccc will request your approval before initiating the new processing.

13Contact and Data Protection Officer (DPO)

The 11ccc has appointed a Data Protection Officer (DPO) under Article 41 of the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD).

For any questions, requests related to your rights as a data subject, or complaints about the handling of your personal data, please get in touch:

  • Support chat: available 24 hours a day on the 11ccc.net platform;
  • Email: contato@11ccc.net — include "Privacy / LGPD" in the subject line for priority handling;

We are committed to responding to data subject requests within the timeframes set by the LGPD. If you are not satisfied with our response, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) — the federal body responsible for LGPD enforcement in Brazil.

To exercise your rights as a data subject or for any questions about this policy, the fastest channel is the 24-hour support chat on the platform. Email: contato@11ccc.net with the subject line "Privacy / LGPD".
Ready to Get Started?

Bet Safely at 11ccc

Now that you know how 11ccc takes care of your data, create your free account, deposit from R$ 20.00 via Pix, and start betting with complete peace of mind.

+18 · Gamble Responsibly · Data Protected under the LGPD

Responsible Gambling

Betting and casino games on the 11ccc are intended exclusively for users aged 18 and over and should be treated as entertainment — never as a source of income. Never wager amounts that could strain your personal or household budget. Deposit limit tools, session controls, and self-exclusion options are all available in your account.

If you or someone close to you is struggling with gambling-related issues, CVV (Centro de Valorização da Vida) offers 24-hour support at 188.

Learn more about Responsible Gambling
Português