By law, you have the right, at any time, to:

• Access the data we collect about you;
• Change and correct your data;
• Deny consent to data processing. However, this measure may make your objectives with FLAMENGO unfeasible. It is important to observe the necessity, and if you have questions, we recommend contacting us so that we can clarify them in detail. See the "Contact for your request" section at the end of the document
• Anonymization, blocking, or deletion of data. You do not want your personal data exposed in any way? We can do this, provided there is no law or regulation preventing us. Furthermore, such deletion may affect the way or make the provision of the service impossible, but we will explain better when this request occurs.
• Data portability. Portability has to do with the transfer of your data from one provider to another of the same nature. We do not expect you to change teams! But, if this right is applicable to our case someday, we will fulfill your request.
• Be aware of the partners and third parties with whom FLAMENGO shares your data.

Meeting all your rights is FLAMENGO's commitment, under the terms of the LGPD and through our actions. Therefore, we provide a communication channel, the Data Subject Portal, so that you can open your requests and ask for any of your rights listed previously. Through it, you contact our DPO, and he will be responsible for returning responses to your requests. We provide the following ways to contact us:

• Through the Flamengo website: https://flamengo.com.br/privacidade, click on Data Subject Portal.
• Through the Fan Member website: https://mengo.com.br/privacidade, click on Data Subject Portal.
• We provide a QR Code for immediate access via your mobile device.

Due to the nature of Flamengo's operations, there is a very broad diversification of personal data processing purposes, according to the subject's objective. For example, for Club members: identification data (registration), contact, financial history, medical certificates for school students, digital biometrics, images from CCTV cameras (for the physical security of our member and their children) and legal responsibility – if minor; for fan members: identification data (registration), contact, billing data, purchase history, and facial biometrics; for fans who are not fan members: registration data, purchase data, bank data and or credit card (which are stored in banking institutions), facial biometrics (for access to Maracanã); for employees: registration data, employee data for proof of employment bond, security (PIS, PASEP, NIS, E-social, among others) and benefit maintenance; for athletes, in addition to the previously mentioned data, health and physical performance data is needed, to enable health care inherent to the exercise of the function; for third parties: registration data, document images, contractual data (for hiring), digital biometrics for access to facilities and physical security, and payment history. for access to facilities.

• Access, Registration and/or Cadastro (Enrollment): registration of employees or third parties for access to Club facilities for leisure or work purposes, to sponsor, market licensed products, participate in tenders, supply and/or provide services. In relation to Club members or athletes, to exercise rights and obligations as a member or athlete, according to their sport; if a fan member, for identification and exercise of the rights offered by the acquired plan. Documents and/or certificates regarding health conditions are used to attest to health fitness, according to the nature of the data subject, necessity, legislation, regulation, and objectives. All these registrations are linked to the legal basis of contract execution, preliminary or otherwise, agreed upon between the parties. We collect digital biometrics for access to Club facilities, as a form of security for members, employees, and third parties, and facial biometrics for entry to the Mario Filho Stadium (Maracanã) as required by Law No. 14597 of June 14, 2023, and in accordance with the Estádio Seguro (Safe Stadium) project, of which Flamengo will be part.
• Active Data Collection: when registering a Club member, employee, service provider allocated to Club facilities, members of embassies and consulates, or Fan Member and non-member fan, at a minimum, full name, email, CPF, cell phone number, date of birth, address, and purchase history are collected. In the case of minors, date of birth, affiliation, and the legal guardian's Consent Form are requested. Data processing may occur for checking the member's active registration, disclosing advertising material, promotions, sweepstakes, discounts, loyalty programs, satisfaction surveys, partner benefits, and for selling tickets for sporting events at Maracanã/others, or entry to the Flamengo Museum. These cases will fall under the same legal bases as access, registration, or enrollment.
• Automatic Data Collection: FLAMENGO collects and/or shares a series of information automatically – directly or via API (
• Communications and Marketing Initiatives: sending information or disclosing brands, products, promotions, and discounts from FLAMENGO, operationalization and dissemination to Club members or Fan Member programs, Embassies, and Consulates; also, for conducting satisfaction surveys and planning the offer of its own products and services and those of partners to employees, third parties, and customers. Communication and marketing initiatives are also linked to the execution of contracts with our partners, given the legal nature and business purpose, to compliance with a legal or regulatory obligation, in cases of communicating records, for example, labor issues and/or accidents with members, research (with the purpose of sizing or fostering promotions and advertising), exercising rights in judicial and administrative proceedings, health protection (when we carry out actions aimed at the physical or mental well-being of employees, members, or athletes) and/or credit protection, when we need to verify a condition to enter into agreements that require this action; remembering that everything depends on the purpose of the processing, as we are discussing all possible purposes here.

We do not rent, sell, or share your information with third parties, except as described in this Privacy Notice.

Eventually, we may share information in the following ways:

• with partners and service providers, so that they use personal data for the strict fulfillment of the purposes provided in contractual instruments and which relate to the activities carried out by FLAMENGO to achieve its results. However, they do not have any right to share the referred information without prior authorization: yours or FLAMENGO’s (when doing so to comply with a legal or regulatory obligation).
• Our commercial partners, given the partnership, sponsorship, and brand strength, usually work with us to offer our members, fans, and customers opportunities arising from the partnership with FLAMENGO. Thus, we seek to minimize, but – due to business practice, we sign agreements for unidirectional or mutual sharing of databases to enable propositions of benefits, sales, and exclusive promotions from FLAMENGO or the commercial partner. All based on the legal bases of contract execution and legal or regulatory obligation (if the partner is a competent authority); of course, subject to your consent, which can be revoked at any time through the
• .

NOTE: FLAMENGO's partner organizations are aware of and commit to the Club to respect, under the terms of this document and our internal guidelines, the protection and privacy of your data, under the terms of the LGPD or other related national or foreign laws, depending on the application.

Cookies are files or information that can be stored on devices when a user visits FLAMENGO's website pages and accepts the use of Cookies. Generally, a cookie contains the name of the website that originated it, its lifespan, and a value, randomly generated.

FLAMENGO uses cookies to facilitate navigation and adapt the pages to your interests and needs. Cookies are also used to compile information about the use of our websites and services, which contributes to the improvement of our structures and content.

Another way we use cookies is to accelerate users' future activities and experiences on our pages. They can also be used to indicate FLAMENGO pages on the websites the user visited. FLAMENGO may share this information with third parties and business partners. But it is important to warn that you can (and should) choose your cookie usage options on the website(s). We provide this functionality, and you can change your preferences at any time. See the types we use below:

a) Necessary: are those that help understand how visitors interact with FLAMENGO pages, providing information about visited areas, time spent on the website, and any problems encountered, such as error messages.

b) Functional: are those that allow FLAMENGO pages to remember your choices to provide a more personalized experience. Furthermore, they allow users to watch videos and use social tools, comment fields, forums, among others.

c) Analytics and/or Performance: are cookies used to provide statistical information about our website - they are used to measure and improve performance. This category is also known as Analytics. Activities such as counting page visits, page loading speed, bounce rate, and technologies used to access our website are included in this category.

d) Advertising: are cookies used to provide content of interest to the User and display more targeted advertising or limit the number of times it is displayed on FLAMENGO Pages. It is also possible to allow the measurement of the effectiveness of an advertising campaign.

After the user consents to the use of cookies, FLAMENGO stores a cookie on their device to remember this in the next session, and the user may revoke their consent regarding cookies when they deem it appropriate. Warning: if the user does not accept some cookies from FLAMENGO pages, certain services may not function optimally.

Third-party analytics are used to track and measure website usage, to enable the continuous production of attractive content. These cookies can track items such as the time you spend on the website or the pages visited, which helps us understand how we can improve the websites for you. New features are periodically tested, and subtle changes are made to how the website is presented. And these cookies can be used to ensure you receive a consistent experience while browsing, while FLAMENGO understands which optimizations our users appreciate most.

The transfer can only be made to another country if it meets the requirements of article 33 of the General Personal Data Protection Law, especially its first clause, which states that the country or territory in question or the international organization concerned ensures an adequate level of protection for the user's data.

If there is no adequate level of protection, FLAMENGO will make greater efforts to protect your data in accordance with the most rigorous rules, through specific contractual clauses for a given transfer, standard contractual clauses, global corporate rules, or regularly issued seals, certificates, and codes of conduct.

We have some service providers such as AWS, Google, and Microsoft that maintain their Data Centers outside the country, but we prioritize using them in countries that have privacy agreements with Brazil or have specific legislation on data privacy and protection.

FLAMENGO's Privacy Management is composed of a team of people dedicated to the governance and management of personal data privacy and protection. In it, we also have the figure of the “DPO” (Data Protection Officer), who is the professional designated, under the terms of the law, to mediate the relationship between FLAMENGO, its data subjects, and competent authorities on the matter. In Brazil, under the LGPD, he is called “

The DPO of Clube de Regatas do Flamengo is Mr. Leandro Rocha, and you can contact him through the Data Subject Portal.

This Privacy Notice is governed, interpreted, and executed in accordance with the Laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 - General Data Protection Law, regardless of the Laws of other States or countries, with the jurisdiction of the Capital District of Rio de Janeiro being competent to resolve any doubt arising from this document.

Rio de Janeiro, 07/23/2024.