Summary
- We ask for your name, CPF, date of birth, email and phone to create your account and confirm your age.
- We don't sell your data.
- We only share data with those who help us run the service, such as hosting, app stores and identity verification.
- You can ask to access, correct or delete your data at [email protected].
This summary helps you read, but it doesn't replace the full text below.
This English version is provided for convenience. If there is any difference between versions, the Portuguese version prevails.
1. Who handles your data
The controller of the personal data processed in Super Jogos is SAYPLUS TECHNOLOGY LTDA, CNPJ 38.004.674/0001-37, headquartered at R. Doutor João Salerno, 47, Sala 2-B, Jardim Vergueiro, Sorocaba/SP, CEP 18030-020, Brazil. This policy explains, under Brazil's General Data Protection Law (Law 13,709/2018, "LGPD"), which data we process, why, and what your rights are.
2. Data we collect
| Type | Examples | Source |
|---|---|---|
| Sign-up | Name, CPF (Brazilian taxpayer ID), date of birth, email and phone number | You, at sign-up |
| Age verification | Confirmation that the CPF and date of birth belong to a person aged 18 or over | Identity verification service |
| Purchases | Pack purchased, amount, date, payment method and transaction ID (we don't store card data) | App stores and payment partner |
| Gameplay | Matches, results, balance and history of caps and chips | Use of the Service |
| Technical | Device model and operating system, IP address, access and error logs | Use of the Service |
| Attribution and communication | Campaign that led to the install, usage events and communication preferences | Use of the Service, with your consent where required |
3. How we use it and the legal basis
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Create and maintain your account and let you play | Performance of contract |
| Confirm that you are 18 or older | Legal obligation and performance of contract |
| Process cap purchases, refunds and reversals | Performance of contract |
| Prevent fraud, cheating and misuse; keep the Service secure | Legitimate interest and credit protection |
| Keep app access logs | Legal obligation (Brazilian Internet Civil Framework) |
| Handle requests and complaints | Performance of contract and regular exercise of rights |
| Measure campaigns and send marketing communications | Consent, which you can withdraw at any time |
We do not sell your personal data.
4. Who we share it with
We only share data with those who help us provide the Service, always to the extent necessary and under contract:
- Development and operations: Suprema Promoção de Eventos, which develops and operates the Service for SayPlus;
- Hosting and infrastructure: Amazon Web Services and Cloudflare;
- App stores: Apple and Google, for purchases made on phones;
- Payments: the payment partner for Pix purchases on computers;
- Identity verification: the service that confirms CPF and age;
- Attribution and engagement: AppsFlyer and Smartico, to measure campaigns and send communications;
- Authorities: when required by law or court order.
5. International transfer
Some of our servers are located in the United States. When data leaves Brazil, the transfer follows article 33 of the LGPD, with contractual clauses and adequate protection safeguards.
6. How long we keep it
We keep data while your account is active and, after that, for as long as the law requires. For example, access logs are kept for at least 6 months (Brazilian Internet Civil Framework), and purchase data for the period of tax obligations. When these periods end, the data is deleted or anonymized.
7. Your rights
Under article 18 of the LGPD, you can request:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability of your data to another provider;
- deletion of data processed based on your consent;
- information about who we share your data with;
- withdrawal of consent;
- review of decisions made solely by automated means.
To exercise your rights, contact the data protection officer (section 12). You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
8. Security
We use technical and administrative measures to protect your data, such as encryption in transit, role-based access control and audit logs. If a security incident poses a significant risk to you, we will notify you and the ANPD, as required by law.
9. Minors
Super Jogos is not allowed for anyone under 18 and does not knowingly collect data from children or teenagers. If we identify an account belonging to a minor, it is closed and its data is deleted, except for data the law requires us to keep.
10. Cookies
The use of cookies and similar technologies on the website is described in the cookie policy.
11. Changes to this policy
We may update this policy. The last update date is shown at the top of the page, and significant changes are announced in the app or by email.
12. Data protection officer
To exercise your rights or ask questions about how your data is handled, contact our data protection officer (DPO): [email protected].
For other matters: [email protected].
Back to top