Privacy Policy of 7777win – Your Data Always Protected

The 7777win is an online entertainment platform — live casino and Sports Betting — operated for the Brazilian market. We are the controller of the personal data collected and processed during your use of the platform, as defined by the General Data Protection Law (LGPD, Law No. 13.709/2018).

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person — including your name, email, CPF, address, mobile phone number, banking details, and transaction history on the platform.

Any questions about how your data is handled can be sent to our privacy channel at contato@7777win.click, with the subject line "Data Privacy – LGPD".

The 7777win collects personal data in different ways throughout your experience on the platform. Below is a summary of the categories and specific data collected at each stage:

The 7777win does not collect sensitive category data — such as racial origin, religious belief or health data — except where strictly required by law or for responsible gaming verification, always based on the data subject's explicit consent.

The 7777win uses your personal data solely for the purposes described below. We will never use your data for purposes incompatible with those that originally justified its collection:

• Account creation and management: authentication, password recovery, session management, and account-related communications.
• Processing financial transactions: deposits via Pix, boleto, card, PicPay, and Mercado Pago; withdrawal processing; compliance with tax and anti-money laundering (AML) obligations.
• Service delivery: placing Sports Betting on football, volleyball, MMA and UFC, NBB basketball, and other sports; accessing slots, crash games, roulette, and Live Casino.
• Identity verification (KYC): confirm that the account holder is 18 years of age or older and that the registration details are accurate, as required by applicable regulations.
• Customer support: answer questions, resolve disputes, handle complaints, and keep a record of support interactions.
• Security and fraud prevention: detect suspicious access, prevent bot usage, identify duplicate accounts, and protect the platform ecosystem.
• Responsible gambling: monitor usage patterns that may indicate problem gambling behavior, in order to provide proactive support and meet regulatory obligations.
• Marketing communications: send offers, promotions and news about the 7777win — only for users who consented to this type of communication during registration. You may unsubscribe at any time.
• Product improvements: aggregated and anonymized usage analysis to improve the platform's interface, stability, and features.

The 7777win does not use your data for automated decision-making that produces legal effects or significant impacts without the possibility of human review, except in cases of clear fraud detection, which may trigger an automatic preventive block subject to subsequent review by the security team.

All personal data processing carried out by 7777win is grounded in at least one of the legal bases set out in the LGPD (art. 7 and art. 11). The table below maps each purpose to its corresponding legal basis:

• Contract performance: account management, bet processing, deposits and withdrawals — necessary to fulfill the service agreement accepted by the User at registration.
• Legal obligation fulfillment: KYC verification, reporting of suspicious transactions to the relevant authorities (COAF/BACEN), and retention of financial records in accordance with Brazilian tax legislation.
• Legitimate interest: platform security, fraud prevention, bonus abuse detection, and aggregated analysis for product improvement — always balanced against the User's interests.
• Consent: sending marketing communications, collecting personalization cookies, and non-essential behavioral analytics. Consent may be withdrawn at any time.
• Credit protection: risk analysis in cases of chargebacks and financial disputes.

The 7777win does not sell, rent, or trade your personal data. Period. We share information with third parties only in the situations described below, always limiting data to the minimum necessary for each purpose:

• Payment processors: PCI-DSS certified partners that process transactions via Pix, boleto, card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to complete the transaction.
• Game providers: companies such as Pragmatic Play, Evolution Gaming, and BGaming receive an anonymous player identifier to load and record game results — with no access to the player's name, tax ID, or actual financial data.
• Identity verification services (KYC): verification platforms that confirm document authenticity. These services operate under contract with confidentiality and data protection clauses.
• Government and regulatory authorities: when required by law, court order, or regulatory obligation — such as reporting to COAF in cases of suspected money laundering.
• IT service providers: companies that provide hosting infrastructure, cybersecurity, and data analytics — always bound by contracts with LGPD-compliant data protection clauses.

In all cases of data sharing with third parties, the 7777win contractually requires all partners to maintain security and privacy standards consistent with those set out in this Policy. No data is shared with third parties for marketing purposes without your explicit consent.

The 7777win retains personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. General retention periods are:

• Registration data and active account: kept for as long as the account remains active. After voluntary closure, retained for up to 5 years to fulfill legal obligations (Civil Code and tax legislation).
• Financial transaction data (deposits, withdrawals via Pix, boleto, card): retained for a minimum of 5 years, in accordance with tax and anti-money laundering requirements.
• KYC documents (government-issued ID, CPF, proof of address): retained for up to 5 years after account closure, in accordance with BACEN regulations and COAF rules.
• Betting and gaming history: retained for 3 years after the last account activity, for audit and dispute resolution purposes.
• Access logs and technical data (IP address, device): retained for 6 months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
• Support communications: retained for 2 years for record-keeping and quality improvement purposes.

Once the above retention periods have elapsed, data is securely deleted or anonymized for use in aggregated statistical analysis, with no possibility of re-identifying the data subject.

The security of our players' data is a technical and operational priority for 7777win. The protection measures in place include:

• 256-bit SSL/TLS encryption: all communications between your device and the servers of the 7777win are encrypted, preventing data interception in transit.
• Data encryption at rest: sensitive data stored at rest — such as passwords (hashed with bcrypt) and KYC documents — is encrypted on our servers.
• Access control based on the principle of least privilege: only employees with a direct operational need have access to players' personal data, and that access is logged and audited.
• Two-factor authentication (2FA) for internal staff: all administrative access requires 2FA, reducing the risk of compromise from leaked credentials.
• Continuous security monitoring: intrusion detection systems (IDS) and anomalous behavior analysis operate in real time to identify unauthorized access attempts.
• Regular penetration testing: the infrastructure of 7777win undergoes periodic security audits carried out by specialized external teams.
• Incident response plan: in the event of a data breach, the 7777win will notify the ANPD and affected data subjects within the legal timeframe established by the LGPD.

The 7777win uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize content and analyze site performance. See the types of cookies we use:

• Essential cookies: required for basic platform functionality — session authentication, language preferences, and bet slip. These cannot be disabled without affecting your experience on the platform.
• Performance cookies: collect data on how users navigate the 7777win — most visited pages, load times, errors. Used in aggregate and anonymous form for technical improvements.
• Personalization cookies: remember your game preferences, applied filters, and preferred layout. They can be disabled in your account settings.
• Marketing cookies: used only with your explicit consent to show you relevant offers from the 7777win. We do not share cookie data with external ad networks without authorization.

You can manage your cookie preferences at any time through your browser settings or via the account settings page on 7777win. Disabling non-essential cookies does not affect access to the platform's core services.

The LGPD grants you a set of rights over your personal data processed by 7777win. You may exercise any of these rights at any time by emailing contato@7777win.click with the subject line "LGPD Rights". Response time: up to 15 business days.

The platform 7777win is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors. The registration process includes date-of-birth verification, and any account created with a minor's details will be closed immediately upon detection.

If you are the guardian of a child or teenager and believe their data has been inadvertently collected, please contact us immediately at contato@7777win.click. Your data will be deleted as soon as possible and your account will be closed.

Some of the services used by the 7777win — such as cloud infrastructure, game providers and security tools — may process data on servers located outside Brazil. When this occurs, the 7777win ensures that the transfer is carried out in compliance with art. 33 of the LGPD, through:

• Contracts with specific data protection clauses and security obligations equivalent to those required by the LGPD.
• Preference for partners located in countries with a level of data protection recognized as adequate by the ANPD.
• Periodic evaluation of international partners to ensure ongoing compliance with required security standards.

Data used in the Pix and boleto payment processing infrastructure is handled exclusively on servers located in Brazil, as required by the Brazilian Central Bank.

The 7777win may update this Policy periodically to reflect changes in legislation, our data practices, or the services offered. Whenever significant changes are made, you will be notified by email at least 7 days before the changes take effect.

Minor changes — such as text corrections, clarifications, or contact updates — may be made without prior notice. The date shown in the "Last updated" field at the top of this page always reflects when the current version was published.

We recommend reviewing this Policy periodically. Your continued use of the 7777win after changes take effect constitutes acceptance of the updated version. If you do not agree with the changes, you may close your account and request deletion of your data before the effective date.

The 7777win has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and serving as the communication channel between the 7777win, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights under the LGPD, report a privacy concern, or contact our DPO, please use the channels below:

• Email (Privacy/LGPD): contato@7777win.click — subject line: "Data Privacy – LGPD". Response time: up to 15 calendar days.
• Live chat: available 24 hours a day, 7 days a week on the platform, for urgent issues related to account security or potential data breaches.
• ANPD: if your request is not satisfactorily resolved by the 7777win, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD).