770bet Privacy Policy – Data Protection in Brazil

1. Introduction

This Privacy Policy explains how 770bet collects, uses, stores, and protects the personal data of its users in Brazil. This document was prepared in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018) and with international best practices for digital privacy.

When creating an account on 770bet, access the platform, or use any of its services — Sports Betting, online casino, slots, crash games, or any other available feature — you confirm that you have read and understood this Privacy Policy and agree to the processing of your data as described herein.

A 770bet has a genuine commitment to transparency about data use. The goal isn't to produce a lengthy document filled with legal language that nobody reads — it's to explain clearly and honestly what we collect, why we collect it, who we share it with, and how you can control all of it. If you have any questions about this policy, our support channel is available 24 hours a day, 7 days a week.

2. Data Controller

The controller of the personal data processed under this policy is 770bet, operator of the Sports Betting and online casino platform available at 770bet.best. The controller is responsible for decisions regarding the processing of personal data collected from Brazilian users of the platform.

For matters related to personal data, privacy, or the exercise of rights under the LGPD, users may contact the Data Protection Officer (DPO) of the 770bet by emailing suporte@770bet.best with the subject line "Privacy – LGPD".

A 770bet operates exclusively for users located in Brazil. All payments are made in BRL (R$) through domestic payment methods — Pix, boleto bancário, credit card (Visa, Mastercard, Elo), PicPay, Mercado Pago, and TED bank transfer. Users' financial data is handled in compliance with the regulations of the Banco Central do Brasil and the applicable rules governing the country's instant payments market.

3. What Data We Collect

A 770bet collects different categories of personal data depending on how you use the platform. The types of data collected and how they are obtained are described below:

A 770bet does not collect sensitive data such as racial origin, religious belief, genetic or biometric data, political opinion, or health-related information, except where strictly required by law for financial crime prevention purposes and only on an adequate legal basis under the LGPD.

4. How and Why We Use Your Data

A 770bet uses the data collected exclusively for the following purposes:

• Account operation: create and maintain the user's account, authenticate access, process bets, and manage the account balance;
• Payment processing: process deposits via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED, and process withdrawals to the user's registered Pix key or bank account;
• Identity verification (KYC): confirm that the account holder is over 18, that the information provided is accurate, and that there is no conflict with anti-money laundering policies;
• Fraud prevention: identify suspicious behavior, protect user accounts from unauthorized access, and detect violations of the platform's Terms and Conditions;
• User support: respond to inquiries, resolve disputes, and process requests submitted through the support channels of the 770bet;
• Personalization: tailor the platform experience based on your usage history – such as suggesting sports events or promotions relevant to your betting profile;
• Communications: send account-related notifications (transaction confirmations, security alerts, terms updates) and, with explicit consent, promotional communications about bonuses and offers from 770bet;
• Legal compliance: comply with obligations set out in Brazilian law, including Central Bank regulations, tax legislation, and betting industry regulations.

A 770bet does not use users' personal data to sell information to third parties, build profiles for external advertising purposes, or for any purpose unrelated to the operation of the services described above.

5. Legal Basis for Processing (LGPD)

As required by the Lei Geral de Proteção de Dados (LGPD – Law No. 13,709/2018), all personal data processing carried out by 770bet is grounded in one of the legal bases set out in Article 7 of the law. The bases applicable to the platform's purposes are:

• Contract performance (Art. 7, V): processing is necessary to perform the service contract entered into at the time of registration — that is, to operate your account, process bets, and handle payments in BRL;
• Compliance with a legal obligation (art. 7º, II): applicable to the identity verification (KYC) process, anti-money laundering compliance, and adherence to other regulatory requirements that 770bet is subject to as an operator in the Brazilian market;
• Legitimate interest (art. 7, IX): for fraud prevention, platform security, behavioral analysis for user protection, and experience personalization, where this does not conflict with the data subject's interests and rights;
• Consent (Art. 7, I): for sending promotional and marketing communications. Users may withdraw this consent at any time through their account settings or by contacting our support channel.

A 770bet maintains internal records of the legal bases applicable to each data processing operation, as recommended by the National Data Protection Authority (ANPD). These records are available for review in the event of a regulatory audit.

6. Sharing Data with Third Parties

A 770bet does not sell users' personal data to third parties. Data sharing occurs only in the situations described below and always with the minimum data necessary for each purpose:

• Payment gateways: financial data required to process deposits and withdrawals is shared with payment operators (Pix processors, card networks, PicPay, Mercado Pago) solely to execute the transaction. These partners are certified and operate under their own privacy and security terms;
• Identity verification providers: for the KYC process, identity documents and proof of address may be processed by service providers specialized in digital identity verification, who handle this data under a confidentiality agreement with the 770bet;
• Game and casino providers: slots, Live Casino, and crash game providers may receive minimal session information to ensure games function correctly. These providers do not have access to users' full financial or identification data;
• Regulatory and judicial authorities: data may be shared with the Central Bank of Brazil, tax authorities, betting industry regulators, or law enforcement and judicial authorities when required by law, court order, or applicable regulation;
• Technology service providers: the platform's infrastructure may use third-party cloud hosting, data analytics, and cybersecurity services, which process data in accordance with instructions from the 770bet and under data processing agreements (DPAs) compatible with the LGPD.

7. How Long We Keep Your Data

A 770bet retains personal data for as long as necessary to fulfill the purposes described in this policy, observing the minimum retention periods required by Brazilian law:

• Registration and identification data: retained for as long as the account is active and for a minimum of 5 years after account closure, in accordance with anti-money laundering requirements and tax obligations;
• Financial transaction history: deposit, withdrawal, and betting records are retained for a minimum of 5 years from the transaction date, in compliance with Law No. 9,613/1998 and the regulations of the Banco Central do Brasil;
• Access and security logs: technical access data is retained for 6 months, in accordance with the Marco Civil da Internet (Law No. 12,965/2014);
• Support communications: records of support interactions are retained for 2 years from the date the ticket is closed, for dispute resolution purposes;
• Data for responsible gambling purposes: in cases of voluntary self-exclusion, the data that formed the basis of the exclusion is retained for as long as necessary to ensure the restriction cannot be circumvented.

Once retention periods expire, data is securely deleted or anonymized so that the account holder can no longer be identified. Data that may be part of an ongoing legal proceeding is preserved until the case is definitively resolved.

8. How We Protect Your Data

User data security is a core structural priority at 770bet, not a secondary concern. The technical and organizational measures in place include:

• 256-bit SSL Encryption: all communication between the user's browser or app and the servers of the 770bet is encrypted using the same standard adopted by Brazil's leading digital banks, such as Nubank, Itaú, and Bradesco;
• Payment data tokenization: credit and debit card details are never stored on the platform's servers. All information is tokenized by our partner payment gateways before any processing takes place;
• Two-factor authentication (2FA): available for all accounts. 2FA adds an extra layer of login protection by requiring confirmation via email or an authenticator app in addition to your password;
• Internal access controls: only staff with a specific business need are granted access to user data, and all such access is logged and regularly audited;
• Continuous monitoring: automated systems monitor access and transactions in real time to detect suspicious behavior and unauthorized access;
• Security testing: the infrastructure of 770bet undergoes regular security assessments, including penetration testing and system configuration reviews;
• Incident response plan: in the event of a security incident affecting personal data, the 770bet will notify affected users and the ANPD within the timeframes required by the LGPD.

Despite all these measures, no security system is completely impenetrable. If you suspect unauthorized access to your account on 770bet, please contact support immediately via live chat, WhatsApp, or email at suporte@770bet.best.

9. Cookies and Tracking Technologies

A 770bet uses cookies and similar technologies to ensure the platform runs properly, personalize the user experience, and analyze how services are used. Below are the types of cookies used:

A 770bet does not use tracking cookies for external advertising or to build browsing profiles outside the platform. Analytical cookies are processed in an aggregated and anonymized manner wherever possible.

You can configure your browser to block or delete cookies. However, disabling essential cookies may prevent the platform from functioning correctly, including login and bet processing. To manage cookies, access the privacy settings of your browser (Chrome, Firefox, Safari, Edge) or the device you use to access the 770bet.

10. Your Rights Under the LGPD

The General Data Protection Law (LGPD) guarantees all personal data subjects in Brazil a set of rights that may be exercised with the 770bet at any time. They are:

• Confirmation and access: you have the right to know whether the 770bet processes your personal data and, if so, to access all data held about you;
• Correction: if your data is incorrect, incomplete, or out of date, you may request a correction at any time;
• Anonymization, blocking, or deletion: unnecessary data or data processed in violation of the LGPD may be anonymized, blocked, or deleted upon request, except where retention is required by law;
• Portability: you may request the portability of your personal data to another service provider, in accordance with ANPD regulations;
• Sharing information: you have the right to know which public and private entities the 770bet shares your data;
• Consent withdrawal: where processing is based on consent (such as sending promotional communications), you may withdraw that authorization at any time at no cost;
• Objection: you may object to data processing carried out on the basis of legitimate interest if you believe your rights override the interest invoked;
• Review of automated decisions: in the event of an automated decision that affects your interests (such as an account block by an anti-fraud system), you may request a human review of that decision.

To exercise any of these rights, contact the DPO at 770bet at suporte@770bet.best with the subject line "Privacy – LGPD" and describe your request. The 770bet will respond within 15 business days, in accordance with the deadlines established by law.

11. Protection of Users Under 18

A 770bet is a platform exclusively for users aged 18 and over. Registration, access, or use of the platform by minors is strictly prohibited. This restriction is enforced across multiple layers of the operation:

• The registration process requires confirmation of date of birth and is validated against the CPF provided;
• The identity verification process (KYC) confirms that users are of legal age through an official government-issued photo ID;
• If underage use of the platform is suspected, the account is immediately suspended pending investigation;
• A 770bet does not intentionally collect personal data from users under 18. If an account is found to have been created by a minor, all associated data will be deleted and access will be permanently blocked.

If you suspect a minor is using the platform, report it immediately through the support channel at suporte@770bet.best. Parents and guardians who identify misuse of the platform by a minor in their care should contact support to have the account blocked and to receive guidance on parental control tools available on common operating systems and browsers.

12. International Data Transfers

Some of the service providers used by 770bet – such as cloud infrastructure providers, Live Casino game suppliers, and cybersecurity service providers – may process data on servers located outside Brazil.

When international data transfers occur, the 770bet adopts the following safeguards to ensure your data remains protected in accordance with LGPD standards:

• Only vendors that demonstrate a level of data protection equivalent to that required by Brazilian law are used;
• Data processing agreements (DPAs) are established with all vendors that receive data from Brazilian users;
• Data transfer is limited to what is strictly necessary for the service provided by the vendor in question;
• A 770bet maintains records of international data transfers for ANPD compliance purposes.

For specific information about which international vendors process your data and in which countries, please contact us at suporte@770bet.best with the subject line "Privacy – International Transfer".

13. Changes to This Policy

A 770bet may update this Privacy Policy periodically to reflect changes in the platform's services, data processing practices, or applicable legal requirements in Brazil. Material changes are communicated in advance by email to registered users.

The most current version of this policy will always be available on this page, with the date of the last update displayed at the top of the document. Continued use of the platform after an updated version takes effect constitutes acceptance of the new terms.

If you disagree with material changes to this policy, you may exercise your portability rights or request account closure and data deletion before the new terms take effect. For questions about specific changes, support is available 24 hours a day.

14. Contact, DPO & Privacy Channel

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of rights under the LGPD, please contact the Data Protection Officer (DPO) of 770bet:

• Email: suporte@770bet.best (subject: "Privacy – LGPD")
• Live chat: available on the platform after login, 24 hours a day, 7 days a week
• WhatsApp: available to registered users with access to the number listed in the platform's support area

The response deadline for privacy requests is up to 15 business days from the date of receipt. For complex requests that require detailed legal review, the 770bet may request an additional period of up to 15 days, notifying the user before the initial deadline expires.

If you believe your rights under the LGPD have not been properly respected by the 770bet, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.

This Privacy Policy is governed by Brazilian law, in particular the General Data Protection Law (LGPD – Law No. 13,709/2018), the Internet Civil Rights Framework (Law No. 12,965/2014), and the Consumer Defense Code (Law No. 8,078/1990). In the event of a dispute that cannot be resolved administratively, the courts of the city of São Paulo (SP) are designated as the competent jurisdiction, without prejudice to consumer rights established by law.