Privacy Policy — RR Store

RR Store (https://rrstore.pro) is the controller of personal data processed through its platform, under the terms of the LGPD.

• Trade Name: RR Store
• CNPJ (Brazilian Tax ID): 44.015.912/0001-02
• Digital company — no physical establishment. Online service only.
• Contact email: rrstore@rrstore.pro
• Data Protection Officer (DPO): rrstore@rrstore.pro

This Policy applies to all Users who access, browse, register or conduct transactions on the platform.

We collect only the personal data necessary to provide our services, as detailed below:

• Registration data: username, email address and password (stored in encrypted form). This data is necessary for creating and maintaining your account.
• Order data: items purchased, amounts, selected payment method, transaction history and order status. Necessary for processing, delivering and recording your purchases.
• Game data: UID (unique player identifier), server, character name and, in ID-PASS modalities, game access credentials when voluntarily provided by the User. Necessary for top-up execution.
• Payment data: information processed by the payment provider (Mercado Pago, PIX, etc.). RR Store does not store complete credit card data — this information is processed directly by the provider.
• Technical and browsing data: IP address, device type, operating system, browser, pages accessed, date and time of access, and cookies. Used for security, performance analysis and fraud prevention.
• Communication data: messages sent through support chat, emails and interactions with the support team. Stored for support history and service improvement.

• Directly from you: when you create an account, place an order, fill out forms or contact support.
• Automatically: through cookies, server logs and tracking technologies when you browse the platform.
• From third parties: payment confirmation information received from payment providers.

We use your personal data for the following specific purposes:

• Contract execution: processing orders, delivering top-ups, RR Coins and other digital products as requested by the User.
• Account management: creating, maintaining and administering your account on the platform.
• Customer support: answering questions, requests, complaints and providing technical support.
• Payment processing: intermediating and confirming financial transactions with payment providers.
• Security and fraud prevention: protecting the platform and Users against fraudulent activities, unauthorized access and cyber attacks.
• Legal compliance: meeting legal, regulatory, tax and judicial requirements.
• Transactional communications: sending order confirmations, status updates, security alerts and relevant service notices.
• Continuous improvement: analyzing platform performance, identifying technical problems and enhancing User experience.

We process your personal data based on the following legal grounds provided in art. 7 of the LGPD:

• Contract execution (art. 7, V): to process orders and deliver contracted services.
• Consent (art. 7, I): when applicable, for specific purposes such as promotional communications — you can revoke consent at any time.
• Legitimate interest (art. 7, IX): for platform security, fraud prevention and service improvement, always respecting your rights.
• Legal or regulatory obligation (art. 7, II): to comply with tax, accounting and regulatory requirements.
• Exercise of rights (art. 7, VI): for defense in judicial, administrative or arbitration proceedings.

Your personal data may be shared in the following situations, always in observance of the purposes described in this Policy:

• Payment providers: for processing and confirmation of financial transactions (e.g., Mercado Pago).
• Infrastructure and technology providers: hosting, database and security services necessary for platform operation.
• Email and communication providers: for sending transactional notifications and support communications.
• Public authorities: when required by law, court order, or to comply with legal or regulatory obligations.
• Protection of rights: for defense of RR Store's rights in judicial or administrative proceedings.

RR Store does NOT sell, rent or trade Users' personal data to third parties for marketing or advertising purposes.

We adopt appropriate technical and administrative measures to protect your personal data against unauthorized access, destruction, loss, alteration or any form of inadequate processing:

• Encryption of passwords and sensitive data in transit (TLS/SSL) and at rest.
• Restricted access control with authentication and role-based permissions.
• Continuous monitoring of logs and detection of suspicious activities.
• Regular backups and data recovery procedures.
• Periodic security updates across all infrastructure.

Despite our efforts, no system is 100% secure. In the event of a security incident involving relevant risk to data subjects, we will notify the National Data Protection Authority (ANPD) and affected Users, as required by the LGPD.

The platform uses cookies and similar technologies to improve the browsing experience, maintain active sessions and ensure security:

• Essential cookies: necessary for basic site operation — authentication, session, language and currency preferences. Cannot be disabled.
• Performance cookies: collect information about how the platform is used (pages visited, errors found) for improvement purposes. They do not individually identify the User.
• Security cookies: used for fraud prevention, login attempt limitation and protection against automated attacks.

You can manage or disable non-essential cookies in your browser settings. However, disabling essential cookies may compromise platform functionality.

Personal data is stored for the time necessary to fulfill the purposes for which it was collected, including legal and regulatory obligations:

• Account data: while the account is active. After deletion request, data will be removed or anonymized within 30 days, except for legally required retention.
• Transaction and order data: for the legally required period for tax and accounting purposes (minimum 5 years under Brazilian legislation).
• Communication and support data: for up to 2 years after the last interaction, for history and rights defense purposes.
• Technical and security logs: for up to 6 months under the Brazilian Internet Framework (Law No. 12,965/2014), or for the time necessary for incident investigation.

Under the LGPD (art. 18), you have the following rights regarding your personal data:

• Confirmation and access: confirm whether we process your data and obtain a copy of the personal data we hold about you.
• Correction: request correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion: request anonymization, blocking or deletion of unnecessary, excessive or non-compliant data under the LGPD.
• Portability: request portability of your data to another service provider, upon express request.
• Deletion of consent-based data: request deletion of personal data processed based on consent, except in legally required retention cases.
• Information about sharing: obtain information about public and private entities with which we share your data.
• Consent revocation: revoke your consent at any time without affecting the lawfulness of prior processing.
• Opposition: object to processing of personal data that is not in compliance with the LGPD.

To exercise any of these rights, contact us at rrstore@rrstore.pro or through our WhatsApp support channel. We will respond to your request within the legal period of up to 15 days.

The platform is not intended for persons under 18 years of age. We do not intentionally collect data from minors. Access and use of the platform by minors must occur under the supervision and responsibility of parents or legal guardians.

If we become aware that data from a minor has been collected without proper consent, we will take necessary measures to delete such information.

Your personal data may be transferred and processed on servers located outside Brazil, specifically when we use cloud infrastructure services or international providers.

When applicable, we adopt appropriate safeguards (such as standard contractual clauses or verification of equivalent data protection legislation in the destination country) to ensure your data receives a level of protection compatible with the LGPD.

This Privacy Policy may be updated periodically to reflect changes in our practices, legislation or services.

When significant changes are made, we will notify Users by email or prominent notice on the platform. We recommend consulting this page regularly.

To exercise your rights, clarify questions about data processing or file complaints, contact our Data Protection Officer (DPO):

• Email: rrstore@rrstore.pro
• WhatsApp: +55 (11) 96304-1504
• Website: https://rrstore.pro/contato

If you believe that the processing of personal data by RR Store violates the LGPD, you also have the right to file a complaint with the National Data Protection Authority (ANPD).