Last updated: January 2026

11cc Privacy Policy – How We Protect Your Data

The 11cc takes user privacy seriously. This document clearly explains what data we collect, why we collect it, how we use it, who we share it with, and what your rights are as a data subject — all in full compliance with the Lei Geral de Proteção de Dados (LGPD).

Under Brazil's LGPD 256-bit SSL on all transactions Data stored in Brazil You control your data
Your Data Is Safe
This document is 11cc's formal commitment to protecting your information.
LGPD Compliance
256-bit SSL Encryption
Zero data selling

What This Policy Covers

Six pillars of 11cc's commitment to the privacy of Brazilian users

Data We Collect

Full name, CPF, email, phone number, address and payment details provided at registration. We also collect browsing and device data to improve your experience on 11cc and keep your account secure.

Section 2
How We Use Your Data

Your data is used to operate your account, process deposits via Pix and boleto, verify your identity (KYC), personalize your experience and meet legal obligations — never sold to third parties.

Section 3
Data Sharing

11cc shares data only with strictly necessary partners — payment processors, KYC providers, and game suppliers — and with authorities when required by Brazilian law.

Section 4
Data Security

256-bit SSL encryption across all communications, restricted-access servers, and continuous monitoring. Passwords are stored using cryptographic hashing — not even the 11cc team can access them.

Section 5
Your Rights as a Data Subject

Under the LGPD, you have the right to access, correct, port, and delete your data. 11cc responds to requests within 15 business days. Learn how to exercise each right without any hassle.

Section 7
Cookies and Tracking

11cc uses essential cookies to keep the platform running and analytics cookies to improve the experience. You can manage your preferences at any time through your account settings.

Section 8

The 11cc respects the privacy of all users registered in Brazil. This Privacy Policy describes, in a transparent and accessible way, how the platform available at 11cc.click collects, uses, stores, shares, and protects your personal data.

This document is drafted in accordance with the General Data Protection Law (LGPD — Law No. 13,709/2018), which governs the processing of personal data in Brazil. By creating an account or continuing to use the services of 11cc, you confirm that you have read and understood this policy.

Clear commitment: The 11cc never sells users' personal data to third parties. It never shares financial information with advertisers. And it never uses your data for purposes you did not authorize when accepting this policy.

If you have any questions about this Privacy Policy, please contact our Data Protection Officer (DPO) at privacidade@11cc.click or through our customer support, available 24 hours in Portuguese.

1

Data Controller

Who is responsible for processing your information

For the purposes of this Privacy Policy and as defined by the LGPD, the data controller is the company responsible for operating the platform 11cc, available at 11cc.click.

The controller is responsible for:

  • Define the purposes for processing personal data collected on the platform;
  • Ensure that all data processing is carried out in compliance with the LGPD and other applicable Brazilian regulations;
  • Appoint and maintain a Data Protection Officer (DPO) available to handle data subject requests;
  • Implement technical and organizational measures to protect users' personal data.

To exercise any right as a data subject or for clarification about this policy, the direct contact channel with the controller is privacidade@11cc.click, with a response time of up to 15 business days.

2

Data We Collect

What information is required and why

The 11cc only collects the data necessary to provide the contracted services, meet legal obligations, and ensure platform security. Data is organized into the following categories:

Identification and registration data:

  • Full name;
  • CPF (Cadastro de Pessoa Física) — required under Brazil's online betting regulations;
  • Date of birth — for age verification (18+ years);
  • Email address;
  • Mobile phone number;
  • Full residential address — requested during the KYC verification process.

Financial and payment data:

  • Pix key used for deposits and withdrawals;
  • Partial credit or debit card details (the 11cc does not store the full card number — this is handled by the certified payment gateway);
  • Bank account details used for TED transfers via Nubank, Itaú, Bradesco, Banco do Brasil, and other banks;
  • Transaction history: deposits, withdrawals, credited bonuses and bets placed.

Browsing and device data:

  • Access IP address;
  • Device type, operating system and browser;
  • Pages visited, session duration, and interactions on the platform;
  • Mobile device identifiers (for the Android and iOS app);
  • Approximate geolocation data — used solely to verify geographic eligibility.

Verification documents (KYC):

  • Copy of a government-issued photo ID (RG, CNH, or passport);
  • Proof of address issued within the last 90 days;
  • Selfie photo for document matching — processed by a certified biometric verification system.

Legal basis: The processing of the data listed above is based on contract performance (Art. 7, V of the LGPD), compliance with a legal obligation (Art. 7, II), legitimate interest (Art. 7, IX) and, where applicable, the data subject's explicit consent (Art. 7, I).

3

Purposes of Processing

How we use your data

Every piece of data collected by the 11cc has a specific, legitimate purpose. We do not use data for purposes incompatible with those described below:

  • Account creation and management: verify identity, prevent duplicate registrations, and keep your profile up to date on the platform;
  • Financial transaction processing: enable deposits via Pix, boleto bancário, credit card, Mercado Pago, and PicPay, and process withdrawals via Pix or TED within the established timeframe;
  • Eligibility verification (KYC): confirm that the user is over 18 years old, holds a valid CPF, and resides in Brazil, as required by applicable regulations;
  • Fraud and money laundering prevention: monitor anomalous behavior patterns and meet the financial compliance obligations set by the Banco Central do Brasil and other relevant authorities;
  • Experience personalization: display relevant content, such as odds for the Brasileirão Série A when you follow football, or UFC card notifications when you have a history of MMA betting;
  • Operational communications: send bet confirmations, withdrawal alerts, security notifications, and account updates;
  • Promotional communications: inform you about bonuses, promotions, and platform news — only for users who have consented to this type of communication. You can unsubscribe at any time;
  • Customer support: keep a record of support interactions to ensure continuity and quality across live chat, WhatsApp, and email support;
  • Compliance with legal obligations: comply with requests from Brazilian judicial, administrative, and tax authorities when legally grounded.

The 11cc does not use your data to build consumer profiles for third-party advertising purposes, does not sell it, and does not transfer it to companies outside the operational group without your explicit authorization.

4

Data Sharing with Third Parties

Who your information is shared with and under what conditions

The 11cc shares personal data with third parties only when strictly necessary to provide the services or when required by law. The categories of recipients are:

  • Payment processors: certified payment gateways that process transactions via Pix, credit card, Mercado Pago and PicPay. These partners receive only the data required to authenticate and process the specific transaction;
  • KYC verification providers: companies specializing in biometric identity verification and document analysis, used to confirm the authenticity of documents submitted during the verification process;
  • Game providers: casino providers such as Evolution Gaming, Pragmatic Play, and Ezugi receive an anonymous user identifier to record game sessions, without access to the full personal data from your registration;
  • Technology infrastructure providers: cloud hosting, database, and cybersecurity services that support platform operations, all bound by LGPD-compliant data processing agreements;
  • Brazilian public authorities: the Ministério da Fazenda, the Receita Federal, the Banco Central do Brasil, the Conselho de Controle de Atividades Financeiras (COAF), and the Judiciary, when there is a legally grounded request.

Zero commercial sharing: The 11cc never shares user data with advertising networks, data brokers, external marketing companies, or any third party for commercial purposes not directly related to platform operations.

All partners and vendors that process personal data of users of the 11cc are bound by specific data processing agreements that require confidentiality, security, and compliance with the LGPD.

5

Data Security

Technical and organizational protection measures

The 11cc implements a comprehensive set of security measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

  • Encryption in transit: all communication between your device and the servers of 11cc is protected by TLS 1.3 with a 256-bit SSL certificate. This covers login, registration, financial transactions, and app usage;
  • Encryption at rest: sensitive data stored in the platform's databases — including KYC documents and financial data — is encrypted using AES-256 standard;
  • Password storage: passwords are never stored in plain text. The system uses cryptographic hashing with salt (bcrypt) — not even the 11cc has access to your actual password;
  • Access control: only employees with a specific operational need have access to users' personal data, with an auditable log of all queries;
  • Security monitoring: intrusion detection systems and continuous 24-hour monitoring to identify suspicious activity on the platform;
  • Two-step verification: available to all users as an additional layer of account access protection;
  • Penetration testing: the platform undergoes periodic security audits conducted by independent specialized firms.

In the event of a security incident that may compromise users' personal data, the 11cc will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected data subjects within the timeframes set by the LGPD, according to the nature and risk of the incident.

Security is a shared responsibility: use a strong, unique password for 11cc, enable two-step verification and never share your credentials. 11cc will never ask for your password via email, WhatsApp or chat.

6

Data Retention

How long we retain your information

The 11cc retains personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum retention periods established by Brazilian law:

  • Registration and account data: kept for as long as the account remains active and for the legally required period after closure to meet legal obligations;
  • Financial and betting records: retained for a minimum of 5 years after the transaction, as required by the Receita Federal do Brasil and online Sports Betting regulations;
  • KYC Documents: retained for a minimum of 5 years after last use, in accordance with anti-money laundering regulations (Law No. 9,613/1998);
  • Customer support records: retained for 2 years after the support interaction is closed, for quality assurance and dispute resolution purposes;
  • Browsing data and access logs: stored for a maximum of 12 months, except where needed for ongoing security investigations;
  • Closed accounts: after account closure, data is anonymized or deleted within 90 days, except where retention is required by law.

Once retention periods expire, data is securely deleted or anonymized, making it impossible to identify the data subject.

7

Your Rights as a Data Subject (LGPD)

How to exercise your personal data rights

The LGPD grants you, as the data subject, a set of rights that 11cc is fully committed to honoring. Here is what you can request:

Right What this means in practice How to submit a request
Access Receive a copy of all personal data 11cc holds about you, including your betting and transaction history. Email or chat
Correction Correct inaccurate, incomplete, or outdated information in your account, such as your address or mobile number. Account profile or support
Anonymization or Blocking Request that unnecessary or excessive data be anonymized or that its use be temporarily suspended. Email the DPO
Portability Receive your data in a structured, machine-readable format for transfer to another controller. Email the DPO
Erasure Request the deletion of data processed on the basis of consent. Data retained under a legal obligation cannot be deleted before the required period. Email the DPO
Withdrawal of Consent Withdraw consent at any time for processing based on that legal basis — such as promotional communications. Account settings
Data Sharing Information Obtain the full list of third parties with whom your data has been shared. Email the DPO
Objection Object to processing carried out on the basis of legitimate interest when no overriding legitimate ground exists. Email the DPO

To exercise any of these rights, send your request to privacidade@11cc.click with the subject line "LGPD Rights — [your right]" and include the email address registered to your account for identity verification. A 11cc responds within 15 business days.

If your request is not resolved to your satisfaction, you may file a complaint directly with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for enforcing the LGPD.

8

Cookies and Tracking Technologies

What they are, what they do, and how to manage them

The 11cc uses cookies and similar technologies to keep the platform running, improve user experience, and analyze performance. Cookies are small text files stored on your device when you access the site or use the app.

Types of cookies used:

  • Essential cookies: required for the platform's basic operation — login, session management, betting slip (betslip), and transaction processing. They cannot be disabled without affecting your ability to use the service;
  • Performance and analytics cookies: collect anonymized data on how users interact with the platform — most visited pages, session duration, navigation flow. Used to improve the experience. Can be disabled;
  • Preference cookies: remember individual user settings, such as language, preferred odds format (decimal or fractional), and saved betting filters;
  • Security cookies: help detect fraudulent activity and protect against brute-force attacks and suspicious sessions.

The 11cc does not use third-party behavioral advertising cookies. No data collected through cookies is shared with ad networks.

You can manage and delete cookies at any time through your browser settings (Chrome, Firefox, Safari, Edge) or through the app preferences in your account settings. Disabling essential cookies may prevent the platform from functioning properly.

9

Minors

Special protection for children and adolescents

The platform 11cc is intended exclusively for individuals aged 18 years of age or older. We do not knowingly collect personal data from anyone under 18 or allow minors to use our services.

The age verification process — including CPF confirmation and, where necessary, KYC documentation — is a fundamental part of new user onboarding, specifically to ensure that no minors can access the platform.

If we detect that an account was created by someone under 18, the account is immediately closed, all data is securely deleted, and any deposited funds are returned to the original payment method. This process is irreversible and takes place regardless of any request from the user.

Parents or guardians who become aware of misuse of the platform by a minor may contact the support team at 11cc at support@11cc.click to report the situation and request immediate account closure.

10

International Data Transfer

When data may cross borders and how it is protected

In general, the personal data of users of the 11cc are stored and processed in Brazil. However, some international technology vendors and game providers — such as Evolution Gaming and Pragmatic Play — may process session identifiers on servers outside the country.

When this international transfer occurs, the 11cc ensures that:

  • The destination country provides an adequate level of data protection, as assessed by the ANPD;
  • Specific contractual clauses for data protection are in place with the international recipient, providing a level of protection equivalent to that required by the LGPD;
  • Transferred data is limited to the minimum necessary for the specific purpose (anonymous session identifiers, not full personal data);
  • The transfer is documented and can be detailed to the data subject upon request.

Your banking and financial data — including Pix key, card details, and transaction history — are processed exclusively in Brazil by partners certified by the Banco Central do Brasil. This category of data is never transferred to international servers.

11

Changes to This Policy

How and when this policy may be updated

The 11cc may update this Privacy Policy periodically to reflect changes in Brazilian law, the platform's privacy practices, or the services offered.

Material changes — those that significantly affect your rights or the way we handle your data — will be communicated at least 15 days' notice via registered email and through a prominent notice on the platform upon the next login.

The current version of this Privacy Policy is always the one available on the 11cc.click/privacy-policy, with the date of the last update indicated at the top of the document. Continued use of the platform after the effective date of any changes constitutes acceptance of the revised policy.

If you disagree with any material change, you may exercise your right to close your account and request data portability or deletion before the new terms take effect.

12

Contact the Data Protection Officer (DPO)

How to reach us directly about privacy

The 11cc has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for handling data subject requests and ensuring that personal data processing on the platform remains compliant.

For questions about privacy, data protection, exercising LGPD rights, or inquiries about this policy, the available contact channels are:

  • DPO email: privacidade@11cc.click — for formal LGPD rights requests and privacy matters. Response time: up to 15 business days;
  • General support: suporte@11cc.click or live chat on the platform — for general questions about how your data is used. Chat responses within 2 minutes;
  • WhatsApp: human support available 24 hours a day for urgent account-related matters.

Complaints to the ANPD: if you are not satisfied with the response from the 11cc an LGPD rights request, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal regulatory body responsible for overseeing data protection in Brazil.

Frequently Asked Questions About Privacy at 11cc

Straightforward answers about how your data is handled on the platform

No. The 11cc does not sell users' personal data to third parties under any circumstances. Your data is shared only with strictly necessary operational partners — payment processors to enable Pix and boleto, KYC providers for identity verification, and casino game providers — and with Brazilian authorities when legally required. No data is passed on to advertising networks, data brokers, or external marketing companies.

To close your account and request data deletion, please contact the support team at 11cc via live chat or by email at privacidade@11cc.click with the subject line "Account closure and LGPD data deletion". Before closure, any available real balance will be refunded via Pix. After closure, data that does not need to be retained under a legal obligation (such as 5-year financial records) will be deleted or anonymized within 90 days. Data that must be kept by law — such as transaction records — is retained for the minimum required period and then permanently deleted.

CPF is required at registration for three main reasons. First, to verify that the user is over 18 — the CPF allows cross-referencing the date of birth with the Receita Federal. Second, to ensure each person holds only one account on the platform, preventing bonus fraud. Third, because online sports betting regulation in Brazil requires player identification. Identity documents (RG, CNH, or passport) are only requested during the KYC process — typically before the first withdrawal above R$ 2,000.00 — to confirm that the account belongs to the person claiming it, protecting you against unauthorized use of your account by third parties.

Yes. Under the right of access guaranteed by the LGPD, you may request a complete copy of all personal data that 11cc holds about you. This includes registration data, betting history, financial transaction records, KYC documents submitted and support interaction history. Send your request to privacidade@11cc.click with the subject line "Access Request — LGPD" and include your account email. The 11cc responds within 15 business days with your data in an organized, readable format.

All Pix transactions on 11cc are processed with 256-bit SSL encryption in transit. The Pix key is stored in encrypted form on the platform's servers and is never displayed in plain text outside a transaction context. Processing is carried out by payment gateways certified by the Banco Central do Brasil, which comply with Pix system security standards. Your banking and financial data is processed exclusively in Brazil and is never transferred to international servers. The 11cc does not have access to your bank account balance — only to confirmation that the transaction was completed successfully.

Yes, at any time and at no cost. You can opt out of promotional communications in three ways: by clicking the "Unsubscribe" link in any promotional email from 11cc, by accessing the "Communication Preferences" section in your account settings, or by sending a request to suporte@11cc.click with the subject line "Opt-out comunicações promocionais". Cancellations are processed within 48 hours. Operational communications — bet confirmations, withdrawal alerts, security notifications — cannot be disabled, as they are essential to the secure functioning of your account.
Technical Security

256-bit SSL, bcrypt-hashed passwords, two-step verification and 24/7 monitoring. Your data is protected by multiple layers of security at 11cc.

Terms and Conditions

This Privacy Policy supplements the Terms and Conditions of 11cc. In the event of any conflict, the Terms govern contractual matters and this Policy governs privacy matters.

Responsible Gambling

Your gameplay behavior data is analyzed to identify patterns that may indicate problem gambling. Learn more at Responsible Gambling.

Contact the DPO

To exercise your LGPD rights — access, correction, portability, deletion — please get in touch: privacidade@11cc.click. Response within 15 business days.

Clear Privacy, Trusted Platform.

At 11cc, you know exactly what data you share and why. End-to-end encryption, LGPD compliance, and zero data selling. Create your account and bet with peace of mind.

Create Free Account View Terms and Conditions
Português