Privacy Policy of 77pg1 – Your Data, Protected

1. Who We Are – The Data Controller

For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), the data controller collected on the platform is the 77pg1, operator of the website accessible at 77pg1.best and all services associated with it.

The controller is responsible for defining the purposes and means of processing personal data of Brazilian users who register and use the platform, which includes online casino, Sports Betting, crash games, progressive jackpot slots, and all other products available on 77pg1.

To exercise any right under the LGPD or to clarify questions about how your data is processed, you can reach us by email at suporte@77pg1.best or via live chat available on the platform 24 hours a day.

2. What Personal Data We Collect

77pg1 collects only the data strictly necessary to deliver its services securely. Collection takes place at three key moments: registration, platform use, and interactions with support.

Data you provided directly at registration:

• Full name;
• CPF (Individual Taxpayer Registry);
• Date of birth;
• Email address;
• Mobile number;
• Residential address (requested during the KYC process);
• Pix key registered in your name for withdrawals.

Data collected automatically during platform use:

• IP address and approximate location;
• Browser type and version, and operating system;
• Device identifier (Device ID);
• Betting history, games, deposits, and withdrawals;
• Session times and duration on the platform;
• Cookie and similar technology data (detailed in section 8).

Data collected during identity verification (KYC):

• Government-issued photo ID (RG, CNH, or passport) – front and back;
• Recent proof of address;
• Selfie with ID document, when requested.

3. How We Use Your Data

Every piece of data collected by 77pg1 has a clear, defined purpose. The table below summarizes the main purposes and the data used for each:

77pg1 does not use your personal data to build profiles for third-party advertising, does not use it outside the purposes listed above, and does not make automated decisions with significant legal impact on you without the possibility of human review.

4. Legal Basis for Processing (LGPD)

The LGPD requires that every processing of personal data have a specific legal basis. 77pg1 bases its processing of your data on the following grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance: processing is required to create and maintain your account, handle deposits and withdrawals via Pix, TED, credit and debit cards, boleto bancário, PicPay and Mercado Pago, record bets, and provide the platform's services;
• Compliance with a legal obligation: identity verification (KYC), financial records, and reporting to the relevant authorities are carried out to comply with Brazilian anti-money laundering legislation and other applicable regulations in the sector;
• Legitimate interest: access data, IP addresses, and usage patterns are processed under 77pg1's legitimate interest in preventing fraud, maintaining platform security, and continuously improving the player experience, always weighing and respecting users' rights and expectations;
• Consent: marketing communications, promotional emails, and push notifications are sent based on the consent you provide at registration, which can be withdrawn at any time without affecting your use of the platform.

5. Sharing Data with Third Parties

77pg1 does not sell your personal data to third parties under any circumstances. Sharing occurs only in the strictly necessary situations described below, always governed by data processing agreements that require recipients to maintain security standards equivalent to those of 77pg1:

• Payment processors: to process deposits and withdrawals via Pix, bank TED (Nubank, Itaú, Bradesco, Banco do Brasil), credit/debit cards, PicPay, and Mercado Pago, we share only the data strictly required to execute the transaction (CPF, Pix key, amount);
• Game providers: certified providers such as Pragmatic Play, PG Soft, Novomatic, and Habanero receive only the minimum data required to record bets and results in slots, crash games, and live casino – they do not receive payment data;
• Identity verification services: when the KYC process is triggered, documents are processed by specialized verification partners engaged under confidentiality agreements and subject to limited retention periods;
• Technology infrastructure: cloud hosting and cybersecurity services required to keep the platform operational, all engaged under data processing terms compatible with the LGPD;
• Public authorities: when required by court order, request from a competent regulatory authority, or a specific legal obligation.

6. Data Retention and Deletion

77pg1 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention periods. The general retention criteria are:

• Active account data: retained for as long as your account remains active on the platform;
• Financial transaction data: retained for 5 years after the transaction, in accordance with tax legislation and the Anti-Money Laundering Law (Law No. 9,613/1998);
• KYC documents: retained for 5 years after account verification or closure, in accordance with regulatory requirements;
• Access and security logs: retained for 6 months, as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014);
• Support data: retained for 2 years after a support interaction is closed, for quality assurance and dispute resolution purposes.

Once retention periods expire, data is anonymized or securely deleted so that the individual can no longer be identified. You may request early deletion of data not subject to a legal retention obligation through 77pg1's support channel.

7. Data Security – How We Protect Your Information

77pg1 applies robust technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. The main safeguards currently in place are:

• 256-bit SSL encryption on all connections between your device and the platform;
• Encryption of data at rest on the servers where sensitive data is stored;
• Two-factor authentication (2FA) available to all users as an additional layer of account access protection;
• Role-based access control (RBAC) – only employees with a legitimate operational need are granted access to users' personal data;
• Continuous monitoring of suspicious access attempts and anti-fraud systems active 24 hours a day;
• Penetration testing and security audits conducted periodically by specialized teams;
• Encrypted backups across multiple locations to ensure data recovery in the event of an incident.

In the event of a security incident that may affect your personal data, 77pg1 will notify the National Data Protection Authority (ANPD) and the affected users within the timeframes set out in the LGPD, providing clear information about what occurred and the measures taken to mitigate the risks.

8. Cookies and Tracking Technologies

77pg1 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and understand how players interact with the site. The table below explains the types of cookies used:

You can manage your cookie preferences at any time in your browser settings. Please note that disabling essential cookies may prevent certain 77pg1 features from working properly, such as login and bet registration. Disabling non-essential cookies does not affect normal use of the platform.

9. Your Rights as a Data Subject (LGPD)

The LGPD grants data subjects – that is, you – a set of rights over your personal data that 77pg1 is fully committed to respecting. See each right and how to exercise it below:

To exercise any of these rights, contact 77pg1 via the 24-hour live chat on the platform or by email at suporte@77pg1.best. We will respond within a maximum of 15 business days, as required by the LGPD.

If you believe your rights have not been properly upheld, you may also file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

10. Data of Minors

77pg1 is a platform exclusively intended for users aged 18 and over. We do not intentionally collect personal data from children or minors under 18. Registering on the platform requires a CPF, which is verified to confirm the holder meets the minimum age requirement.

If we determine that an account was created by someone under 18, the account will be closed immediately, any personal data collected will be deleted within the minimum legally required period, and any existing balance will be cancelled. Parents or legal guardians of minors who accessed the platform without authorization may contact us at suporte@77pg1.best to request data deletion.

11. International Data Transfers

Some service providers used by 77pg1 — such as cloud hosting services and security infrastructure providers — may process data on servers located outside Brazil. When this occurs, 77pg1 ensures that such transfers are carried out in compliance with the LGPD's provisions on international data transfers, including:

• Use of standard contractual data protection clauses;
• Requirement that the destination country provides an adequate level of personal data protection;
• Or obtaining the data subject's specific consent for the transfer, where applicable.

77pg1's game provider partners – including Pragmatic Play, PG Soft, Novomatic, and Habanero – are international companies with recognized security certifications, subject to data protection regulations in their home jurisdictions, which ensures equivalent protection standards for any data they may process.

12. Marketing Communications and Notifications

With the consent you provided at registration, 77pg1 may send communications about promotions, bonuses, new games, special odds for the Brasileirão, Superliga de vôlei, and other sporting events, as well as platform updates. Channels may include:

• Email to the address on file;
• Browser push notifications (when enabled by the user);
• SMS to your registered mobile number (occasionally, for important communications).

You can opt out of any marketing communications at any time, with no hassle:

• Clicking the "unsubscribe" link in the footer of any email received from 77pg1;
• Accessing the notification preferences in your account dashboard;
• Submitting a cancellation request via live chat or by emailing suporte@77pg1.best.

Unsubscribing from marketing communications does not affect receiving essential transactional notifications, such as deposit confirmations, withdrawal alerts, security notices, or communications required to operate your account. These notifications are sent regardless of your marketing preferences.

13. Changes to this Privacy Policy

77pg1 may update this Privacy Policy periodically to reflect changes in data handling practices, new legal obligations, or improvements to the services offered. Significant changes will be communicated at least 7 days in advance via a prominent notice on the platform and/or by email to your registered address.

The date of the last update is always shown at the top of this document. We recommend checking this page periodically to stay informed about how your data is being handled. Continued use of the 77pg1 platform after any changes to this policy take effect constitutes acceptance of the new terms.

If you disagree with the changes, you may request account closure and deletion of any non-mandatory data before the effective date by contacting support.

14. Contact and Data Protection Officer (DPO)

77pg1 has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's privacy practices and serving as the point of contact between data subjects, the company, and the National Data Protection Authority (ANPD).

To exercise your rights, ask questions about this policy, report a security incident, or file a formal complaint, please reach out through the following channels:

• Live chat: available on the 77pg1 platform 24 hours a day, 7 days a week;
• DPO Email: suporte@77pg1.best with the subject line "LGPD – [Your Right]";
• Response time: up to 15 business days for data subject rights requests; immediate for urgent security matters via chat.