Privacy Policy

1. About Broker Gain and this policy

Broker Gain is an educational simulator for stocks listed on B3, NASDAQ, and NYSE, as well as cryptocurrencies. All trading uses virtual cash; no real money is invested. This policy explains what we collect, on what legal basis, who we share it with, how long we keep it, and what rights you have under the General Data Protection Law (Law No. 13,709/2018 — “LGPD”).

2. Data we collect from every user

When you create an account and use the platform, we collect:

• Identification data provided by Google during sign-in, such as name, e-mail, and profile picture;
• Your chosen public ranking nickname;
• Platform usage data, including simulated orders, virtual balances, wealth history, and championship participation;
• Access records — IP address, date, and time of your interactions with the platform;
• Cookies and technical identifiers required for the service and, with your consent, analytics cookies.

3. Legal basis for processing

Under article 7 of the LGPD, we rely on:

• Performance of a contract (art. 7, V) — running your account, your portfolios, and championships;
• Compliance with a legal or regulatory obligation (art. 7, II) — keeping access records under the Brazilian Internet Civil Framework;
• Legitimate interest (art. 7, IX) — preventing fraud, multiple accounts, and manipulation of results, and keeping the platform secure and available;
• Consent (art. 7, I) — analytics cookies only, which you may grant or withdraw at any time.

4. How we use your data

We use the data collected to authenticate your account, preserve your progress, display your position in the regional ranking, run championships and determine their results, prevent fraud and duplicate accounts, improve the product, and comply with legal obligations. We do not use your data to provide personalised financial advice, to execute real trades, or for advertising or ad targeting of any kind, and we never sell personal data.

5. Sharing with third parties

We share personal data only with the providers strictly necessary to operate the service, and only to the extent needed:

• Google — authentication (sign in with Google);
• Our hosting and infrastructure provider — storage and operation of the platform;
• Google Analytics — usage measurement, only if you consent to analytics cookies.
• We may also disclose data to public authorities when required by a court order or a legal obligation.

6. Access records (Internet Civil Framework)

As required by article 15 of Law No. 12,965/2014, we keep records of access to the application — including IP address, date, and time — under confidentiality and in a controlled, secure environment, for a minimum period of 6 (six) months. These records are disclosed to authorities only by court order.

7. Retention and deletion

Account and usage data are kept while your account is active. Once you request deletion, they are erased or anonymised, except for data we are legally required to retain, which is erased or anonymised once the applicable legal period elapses.

8. Security

We apply technical and administrative measures to protect your data. Sensitive data is stored encrypted at rest with AES-256-GCM. Traffic is encrypted in transit, sessions expire, and access to production data is restricted. No system is completely immune to incidents; if a security incident occurs that may create a relevant risk to you, we will notify you and the ANPD as required by article 48 of the LGPD.

9. Cookies

We use essential cookies to keep your authenticated session and, with your consent, analytics cookies to understand how the platform is used. Advertising and ad-personalisation storage are permanently denied — this platform never does ad targeting. You can review or change your cookie preferences at any time through the link in the footer.

10. Your rights

Under article 18 of the LGPD, you may request at any time:

• Confirmation that we process your data, and access to it;
• Correction of incomplete, inaccurate, or out-of-date data;
• Anonymisation, blocking, or deletion of unnecessary or excessive data, or data processed unlawfully;
• Portability of your data to another provider;
• Deletion of data processed on the basis of your consent;
• Information about the public and private entities with which we have shared your data;
• Information about the possibility of not giving consent and the consequences of refusing;
• Withdrawal of consent at any time.
• Requests can be sent to the contact address below and are answered within the legal time limits. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

11. Children and adolescents

The platform is not directed at children. Processing of data of children and adolescents follows article 14 of the LGPD, always in their best interests. If we learn that an account has been created by a child without the appropriate consent, we will delete the associated data.

12. Changes to this policy

We may update this policy to reflect changes to the platform or to the law. The latest revision date is always shown at the top of this page, and material changes are announced on the platform.

13. Data protection officer and contact

The controller of the personal data described here is the operator of Broker Gain. Questions about this policy, requests concerning your rights, or contact with our data protection officer may be sent to [email protected].