Brasil777 Privacy Policy – LGPD & Security

1 Who Is Responsible for Processing Your Data

The controller responsible for processing the personal data collected on Brasil777 is the operating company behind the brasil777.best platform. For the purposes of this Privacy Policy, Brasil777 acts as data controller as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018).

Brasil777 has a Data Protection Officer (DPO) responsible for ensuring compliance with this policy and the LGPD. To contact the Brasil777 DPO or exercise any rights related to your personal data, please use the email address privacidade@brasil777.best or the live chat available 24 hours a day on the platform.

This policy applies to all personal data collected during your use of brasil777 — from initial registration through your daily interactions with Sports Betting, casino games, Pix deposits, withdrawals, and support.

2 What Personal Data brasil777 Collects

Brasil777 collects different categories of data depending on how you use the platform. The main types of data collected and the situations in which this occurs are listed below:

Data you provide directly during registration:

• Full name and date of birth
• CPF (Brazilian individual taxpayer registration number)
• Email address and mobile phone number
• Full residential address including ZIP code
• Identity documents (national ID, driver's license, or passport) submitted during the KYC verification process
• Proof of address, when requested for account verification on Brasil777

Data automatically generated during platform use:

• IP address and device information (model, operating system, browser)
• Browsing history within brasil777 — pages visited, session duration, features accessed
• Full Sports Betting history covering football, MMA and UFC, basketball, volleyball, e-sports, and other sports
• Casino session history — slots, blackjack, roulette, Live Casino, crash games, and jackpots
• Approximate geolocation based on IP address, used for eligibility verification and fraud prevention
• Access and authentication logs for account security

Financial data related to deposits and withdrawals:

• Pix transaction details, including the Pix key and information about the originating financial institution (Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, and other Brazilian banks)
• Bank slip (boleto) data for payment clearance tracking
• Credit or debit card tokens — Brasil777 does not store full card numbers, only tokens generated by payment processors
• PicPay and Mercado Pago account details linked to transactions on the platform
• TED transfer data — originating bank, branch, and account number

3 How Brasil777 Uses Your Data

Every piece of data collected by brasil777 has a specific and legitimate purpose. The table below summarizes the main uses:

Brasil777 does not use your data for any purpose beyond those listed above without notifying you and, where required, obtaining fresh consent. Any secondary use of data is communicated to users in advance.

4 Who brasil777 Shares Your Data With

Brasil777 does not sell or transfer personal data to third parties for commercial purposes. However, to operate the platform properly, some data needs to be shared with specific partners. See who they are and why:

• Payment providers: Pix gateways, credit and debit card processors, PicPay, Mercado Pago, and partner banks receive only the minimum data required to process each deposit or withdrawal on brasil777.
• Casino game providers: Companies such as Evolution Gaming, Pragmatic Play, Microgaming, and NetEnt receive an anonymous account identifier to record session history — without access to personally identifiable information such as tax ID numbers or home addresses.
• Identity verification services (KYC): brasil777 may use specialized document verification platforms to confirm user identity. These providers are contractually required to use the data solely for verification purposes.
• Competent authorities: When required by law, court order, or directive from a Brazilian regulatory authority, brasil777 may be compelled to share data with government or public security bodies.
• IT and security service providers: Companies providing cloud infrastructure, cybersecurity, and fraud monitoring services may access data in a limited capacity and under strict confidentiality agreements.

5 How Long brasil777 Retains Your Data

Brasil777 retains users' personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The main retention periods are:

• Registration and identity data: retained for the duration your account remains active on brasil777 and for up to 5 years after account closure, as required by Brazilian financial and tax legislation.
• Financial transaction history (Pix deposits, withdrawals, TED transfers): retained for 5 years after each transaction, in accordance with the obligations set out in Law No. 9.613/1998 (anti-money laundering) and regulations from the Central Bank of Brazil.
• Betting history and casino sessions: retained for the duration your account remains active and for up to 2 years after account closure for dispute resolution, audit, and regulatory compliance purposes.
• Access and security logs: retained for 6 months, the minimum retention period required by the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).
• Marketing communications data: retained while consent is active and deleted within 30 days after the user withdraws consent.

Once retention periods expire, data is securely and irreversibly deleted from brasil777's systems, or anonymized so that the account holder can no longer be identified.

6 Cookies and Tracking Technologies

Brasil777 uses cookies and similar technologies to enhance the user experience, keep sessions active, personalize content, and analyze platform performance. The types of cookies used are:

• Essential Cookies: required for the core operation of brasil777 — session authentication, betting cart, and language preferences. They cannot be disabled without affecting platform functionality.
• Performance cookies: collect information about how users interact with Brasil777 — which pages are visited most, how long users spend in each section, and what errors occur. Anonymized data used for ongoing improvements.
• Functionality cookies: allow brasil777 to remember your preferences — such as your favorite sport for betting, odds settings, or default payment method — to make your experience smoother.
• Security cookies: used to detect suspicious behavior, unauthorized access attempts, and protect user accounts against fraud and attacks.

You can manage cookie preferences directly in your browser or device settings. Disabling non-essential cookies may affect some platform features, but will not prevent basic use of Brasil777.

7 Data Security at Brasil777

Brasil777 applies a combination of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS Encryption on all connections between the user and brasil777's servers — applying to both desktop and mobile access.
• Encrypted storage of passwords — brasil777 never stores passwords in plain text. We use secure hashing algorithms with salting to protect user credentials.
• Two-factor authentication (2FA) available to all users who want an extra layer of protection on their brasil777 account.
• Continuous monitoring of suspicious activity — automated systems detect anomalous access patterns and may temporarily lock an account while a review is carried out.
• Role-based access control — only brasil777 staff with a legitimate business need can access users' personal data, and all access is logged for audit purposes.
• Regular security testing — brasil777 conducts regular audits and penetration tests to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that may affect users' personal data, brasil777 will notify the affected individuals and the Autoridade Nacional de Proteção de Dados (ANPD) within the deadlines established by the LGPD.

8 Your Rights as a Data Subject

The LGPD grants you, as a brasil777 user, a set of rights over your personal data. brasil777 is committed to responding to any request to exercise these rights within 15 business days:

9 Minors and Special Protection

Brasil777 is a platform exclusively for users aged 18 and over. Registration and use of any service on the platform — Sports Betting, casino, slots, blackjack, Live Casino — are strictly prohibited for minors.

Brasil777 does not intentionally collect personal data from users under 18 years of age. If we identify that an account has been created by a minor, the account will be closed immediately and the data will be deleted from our systems, except where retention is required to comply with a legal obligation.

It is the legal guardian's responsibility to ensure that users under 18 do not have access to Brasil777 account credentials. We recommend using parental control tools available on your devices to restrict children's and teenagers' access to betting platforms.

10 International Data Transfers

To operate the brasil777 platform, some data may be processed by service providers located outside Brazil — for example, cloud infrastructure companies and casino game providers with servers in other countries.

Brasil777 ensures that any international transfer of personal data takes place only when the destination country offers an adequate level of protection, or under standard contractual clauses that guarantee protection equivalent to that required by the LGPD. Users will be informed of any relevant international transfers that directly affect their identifiable data.

In all cases, data transferred internationally is limited to the minimum necessary for the specific purpose — such as anonymized session identifiers for game providers — and data like CPF, identity documents, or complete financial details are not transmitted outside Brazil without justified cause.

11 Changes to This Privacy Policy

Brasil777 may periodically update this Privacy Policy to reflect changes in data processing practices, LGPD updates, new services launched on the platform, or relevant technological changes.

Whenever material changes are made to this policy, brasil777 will notify registered users by email and/or through a prominent notice on the platform at least 7 days before the changes take effect. The date of the last update will always be shown at the top of this page.

Continued use of brasil777 after the effective date of an updated version of this policy constitutes acceptance of the new practices described. If you do not agree with the changes, you may request account closure as outlined in the platform's Terms and Conditions.

12 Contact & Rights Exercise Channel

To exercise any right under the LGPD, ask questions about how brasil777 handles your data, or report a privacy concern, please reach out through the channels below:

• DPO (Data Protection Officer) e-mail: privacidade@brasil777.best
• General support e-mail: suporte@brasil777.best
• Live chat: available 24 hours a day, 7 days a week, directly on Brasil777

Brasil777 responds to personal data requests within 15 business days from the date the request is received. In more complex cases, this deadline may be extended by an additional 15 business days, with prior notice to the user.

If you believe your rights have not been properly upheld by brasil777, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing LGPD compliance in Brazil.