Privacy Policy of gmc00 — Your Data

The data controller responsible for processing your personal data on the gmc00 platform is the operating entity of the site gmc00.best. For the purposes of this Privacy Policy, all references to "gmc00" refer to the data controller.

Gmc00 operates exclusively in the digital environment, with a focus on the Brazilian market. All data collected is processed in accordance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable regulations.

To exercise any right related to your personal data or for questions about this policy, the official contact channel is support@gmc00.best, with support in Portuguese 24 hours a day.

Gmc00 collects personal data at different points throughout your experience on the platform. Below are the main types of data and the situations in which they are collected:

Data you provided during registration:

• Full legal name as shown on official ID.
• CPF (Cadastro de Pessoa Física) — a unique number required for registration.
• Date of birth — to verify the user is of legal age (18+).
• Email address — for communications and account recovery.
• Mobile phone number — for two-factor authentication and support.
• Residential address — for account verification and KYC purposes.

Data collected during platform use:

• Full Sports Betting history — events, markets, amounts, and results.
• Casino session history — games accessed, duration, amounts wagered, and results.
• Financial transactions — deposits via Pix, boleto, card, PicPay, and Mercado Pago; withdrawals and amounts involved.
• IP address of each access and device information (operating system, browser, device type).
• Session logs including login and logout times and actions taken on the platform.

Identity verification (KYC) data:

• Official government-issued photo ID (RG or CNH).
• Proof of address.
• Selfie with ID document, when requested by the compliance team.

Every piece of data collected by gmc00 has a specific purpose. The platform will not use your data for purposes other than those described in this policy without notifying you in advance.

Main purposes:

• Account creation and management — full name, CPF, email, and mobile number are required to uniquely identify you on the platform and ensure that only you can access your account.
• Payment processing — Pix, card, and other payment method data are used exclusively to process deposits and withdrawals. gmc00 does not store full card details — only tokens generated by the payment processor.
• Identity verification (KYC) — documents are used to confirm that you are 18 or older, that your registration details are accurate, and that the account holder is the same person requesting withdrawals.
• Fraud prevention and security — session logs, IP addresses, and usage patterns are analyzed to detect unauthorized access, multiple accounts under the same CPF, and atypical behavior that may indicate fraud or money laundering.
• Customer Support — betting history, transactions, and interactions are accessed by the support team to resolve disputes, clarify questions, and provide personalized assistance.
• Compliance with legal obligations — financial and identity records are retained for the period required by Brazilian law, including obligations with the Banco Central and COAF.
• Communications and promotions — email and mobile number are used to send account notifications, security updates, and, where you have opted in, promotional communications and gmc00 news.
• Platform improvement — aggregated and anonymized usage data is analyzed to understand platform behavior and improve the experience, without identifying individual users.

Every personal data processing operation carried out by gmc00 has a specific legal basis under the LGPD. The bases used are:

• Contract performance (Art. 7, V) — processing required to create your account, handle bets, process Pix payments, and deliver the contracted services. Without this data, the platform cannot operate.
• Legal obligation compliance (Art. 7, II) — financial and identity data retained for the period required by law, including obligations with the Banco Central, Receita Federal, and anti-money laundering legislation (Law No. 9.613/1998).
• Legitimate interest (Art. 7, IX) — security data, access logs, and usage pattern analysis for fraud prevention and protection of platform integrity and other users, always limited to the minimum necessary.
• Consent (Art. 7, I) — promotional communications and the use of non-essential cookies require your explicit consent, which may be withdrawn at any time.

Gmc00 does not sell your personal data. Sharing with third parties is limited to what is strictly necessary to provide our services and meet legal obligations. The categories of third parties with whom we share data are:

• Payment processors — to process deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data required to complete the transaction and are contractually prohibited from using it for any other purpose.
• Game providers — such as Evolution, Pragmatic Live, and Ezugi, which operate the live casino tables. These providers receive an anonymized session identifier — not your name or CPF.
• Identity verification services — specialized KYC partners who assist with document verification, under confidentiality agreements and LGPD compliance.
• Brazilian regulatory and judicial authorities — gmc00 complies with legitimate requests from authorities such as COAF, the Central Bank, and the Judiciary, as required by Brazilian law.

All contracts with partners that process gmc00 data include data protection clauses aligned with the LGPD, prohibiting the use of data for any purpose other than those agreed upon.

Gmc00 uses cookies and similar technologies to ensure the platform runs properly, improve user experience, and analyze site usage in aggregate. The types of cookies used are:

• Essential cookies — required for the site to function properly. These include maintaining your login session, language preferences, and the betting slip. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — they collect anonymous information about how users navigate gmc00, such as the most visited pages and any loading errors. The data is aggregated and does not identify individual users.
• Functional cookies — allow the site to remember your preferences, such as display settings and favorite bets, personalizing your experience without having to reconfigure anything on each visit.
• Marketing cookies — used only with your explicit consent, to personalize gmc00 communications based on your interests. You may decline these cookies in the consent banner shown on your first visit.

You can manage your cookie preferences through your browser settings at any time. Disabling essential cookies may affect critical platform features, such as staying logged in and placing bets.

Gmc00 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, improper disclosure, accidental loss, or destruction.

Technical measures in use:

• 256-bit SSL/TLS encryption on all connections between your device and gmc00 servers.
• Encryption at rest for sensitive data stored in our databases — CPF, banking details, and identity documents are never stored as plain text.
• Two-factor authentication (2FA) available to all users via mobile.
• Continuous monitoring of suspicious access using automated anomaly detection systems.
• Environment segregation — production data is isolated from development and testing environments.
• Encrypted backups with retention periods in accordance with applicable legal obligations.

Organizational measures:

• Access to users' personal data is restricted to staff members with a demonstrated operational need.
• Regular staff training on data protection best practices and information security.
• Confidentiality agreements with all staff and partners who access personal data.

In the event of a security incident that may affect your data, gmc00 will follow the procedures required by the LGPD — including notifying the Autoridade Nacional de Proteção de Dados (ANPD) and informing affected users, where applicable, within 72 hours of identifying the incident.

Gmc00 retains your personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. The main retention periods are:

• Account registration and active account data — retained for the entire duration of the account.
• Financial data and transaction history — 5 years after each transaction, as required by Brazilian financial and tax legislation.
• Identity documents (KYC) — 5 years after account closure, in accordance with anti-money laundering obligations.
• Betting history — 5 years for dispute resolution and regulatory compliance purposes.
• Session logs and IP addresses — 12 months, for security and fraud detection purposes.
• Performance cookies — maximum 12 months, renewed with fresh consent.

Once retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified. Anonymized data may be retained indefinitely for internal statistical purposes.

The LGPD grants you, as the data subject whose personal data is processed by gmc00, the following rights, all exercisable by emailing support@gmc00.best or via the support chat:

To exercise any of these rights, please contact us at support@gmc00.best identifying yourself as the data subject and specifying the right you wish to exercise. gmc00 will respond within 15 business days, as required by the LGPD. In complex cases, this deadline may be extended with a reasoned explanation.

Gmc00 is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors and do not allow anyone under 18 to create an account or use the platform.

The registration process requires a date of birth and, where necessary, identity documents confirming the user is of legal age. Accounts identified as belonging to minors are closed immediately and any collected data is deleted, unless retention is required to fulfill a legal obligation arising from the identified situation.

In certain operational situations, personal data of gmc00 users may be processed on servers located outside Brazil — particularly in the context of technology infrastructure providers and gaming partners with global operations, such as live casino suppliers.

When this occurs, gmc00 applies the safeguards required by the LGPD for international data transfers:

• Transfers only to countries or international organizations that provide a level of data protection equivalent to that of the LGPD.
• Specific data protection contractual clauses with international recipients.
• Guarantees that data transferred is limited to what is strictly necessary for the specific purpose.

International transfers never include the CPF or identity documents of Brazilian users — that data is stored exclusively in infrastructure covered by Brazil or countries with equivalent legislation.

Gmc00 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or platform features.

• Material changes that negatively affect your rights will be communicated by email at least 30 days in advance.
• Changes that expand your rights or make them easier to exercise take effect immediately, with no prior notice required.
• The date of the last update is always displayed at the top of this page.
• Continued use of the platform after the changes take effect constitutes acceptance of the new terms, provided you were notified in accordance with the process described above.

We recommend checking this page periodically to stay informed about how gmc00 protects your data. If you have any questions about an upcoming update, please contact us before the effective date through our support channels.

For all privacy-related matters and questions about how gmc00 handles your personal data, please use the channels below:

• Privacy and DPO email: support@gmc00.best — use the subject line "Data Privacy" to ensure your message is routed directly to the responsible officer.
• Live chat: available within the gmc00 platform, 24 hours a day in Portuguese, for urgent matters related to account security and data.

The response time for LGPD rights requests is up to 15 business days. For security incidents involving your data, gmc00 responds on an urgent basis — typically within 24 hours of identifying the issue.

If you are not satisfied with gmc00's response to an LGPD rights request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), as provided under Art. 55-J of the LGPD.