77zz Privacy Policy – Data Protection in Brazil

The 77zz is a Sports Betting and online casino platform operated and available to players located in Brazil at https://77zz.life. The 77zz acts as the controller of personal data collected during use of the platform, as defined by the Lei Geral de Proteção de Dados Pessoais (LGPD – Law No. 13.709/2018).

This Privacy Policy applies to all personal data collected by the 77zz through the website https://77zz.life, including the registration process, account use, placing bets, participating in promotions, use of the VIP Program, and any other user interaction with the platform.

When you create an account on 77zz, the user confirms having read and understood this Privacy Policy and consents to the processing of their personal data under the terms described herein. This consent may be withdrawn at any time, as detailed in Section 8 of this document.

The 77zz collects only the data necessary to operate the platform, verify your identity, process payments, and meet legal obligations. Below are the categories of data we collect:

Data provided directly by you:

• Full name and date of birth.
• CPF (Cadastro de Pessoa Física) — required for identity verification and Pix processing.
• Email address and mobile phone number.
• Full residential address, including ZIP code.
• Identity documents (RG, CNH, or passport) when requested during the KYC process.
• Partial banking details required to process withdrawals via Pix, TED, or other accepted methods.
• Communication preferences and account settings.

Data collected automatically during platform use:

• IP address and approximate geolocation information.
• Device type, operating system, and browser used.
• Betting history, games accessed, and amounts wagered.
• Session times and duration on the platform.
• Browsing data and clicks within the site.
• Access logs and security records.

Data received from third parties:

• Financial transaction confirmations from payment processors such as Pix, PicPay, Mercado Pago, and partner banks (Nubank, Itaú, Bradesco, Banco do Brasil).
• Results of identity checks carried out by partner KYC services.
• Fraud prevention information from specialized providers.

The 77zz uses collected data solely for the purposes described below. We never use personal data for purposes incompatible with those listed here without notifying you in advance:

The 77zz uses betting history and platform behavior data to identify patterns that may indicate excessive gambling, protecting player well-being. This analysis is carried out to trigger responsible gambling tools when needed — never to drive more bets from players who may be at risk.

The General Data Protection Law (LGPD) requires that every personal data processing operation have a valid legal basis. The 77zz bases its data processing on the following legal grounds established by the LGPD:

The 77zz does not sell, rent, or trade players' personal data with third parties. Full stop. We share data only when strictly necessary to operate the platform or fulfill legal obligations, and always with partners bound by confidentiality and data protection agreements:

• Payment processors: Pix (via Banco Central), PicPay, Mercado Pago, and banks such as Nubank, Itaú, Bradesco, and Banco do Brasil receive only the data necessary to process each specific transaction. No complete history is shared.
• Identity verification (KYC) providers: Specialized services that verify the authenticity of documents and CPF ownership, in compliance with regulatory requirements for the betting industry in Brazil.
• Game providers: Pragmatic Play, PG Soft, Hacksaw Gaming, and other providers in the 77zz receive anonymous session identifiers to integrate the games — never full identifiable personal data.
• Technology infrastructure providers: Servers, CDN, and hosting services that support the platform operate under strict confidentiality agreements and are prohibited from using data for any purpose beyond the contracted service.
• Legal authorities: The 77zz may disclose data when required by law, court order, or request from a competent Brazilian authority. Whenever legally permitted, we will notify the player before complying with such a request.

The 77zz implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key safeguards include:

• 256-bit SSL Encryption across all data transmissions between your device and 77zz's servers.
• Encryption at rest for sensitive stored data, including CPF, banking details, and identity documents.
• Multi-factor authentication (MFA) available for your account, with codes sent to your registered mobile number.
• Continuous monitoring of suspicious activity and unauthorized access attempts.
• Data segregation — financial data is stored in systems separate from profile and gaming behavior data.
• Restricted access — only 77zz staff with a legitimate need have access to personal data, and that access is logged and audited.
• Regular security testing, including penetration testing conducted by independent teams.

In the event of a data breach that may pose a risk or harm to players, 77zz will notify the National Data Protection Authority (ANPD) within the legal deadline and will inform affected data subjects in a clear and timely manner, as required by the LGPD.

The servers of 77zz are located in ISO 27001-certified data centers with geographic redundancy to ensure availability and protection against data loss.

The 77zz uses cookies and similar technologies to ensure the platform runs correctly, enhance the player experience, and analyze site usage. When you access 77zz, you are informed about the use of cookies and can set your preferences.

Types of cookies used by 77zz:

• Essential cookies: Required for basic platform operation — login, active session, language preferences. These cannot be disabled without affecting your use of the site.
• Performance cookies: Collect anonymous information about how players browse the site, which pages are visited most, and where errors occur. Used exclusively to improve the platform.
• Functionality cookies: They remember your configuration preferences — such as your set betting limits, chosen theme, and notification settings — to personalize your experience without requiring you to reconfigure everything on each visit.
• Analytical cookies: Used to understand aggregated platform usage patterns. Data is anonymized prior to any analysis.

The 77zz does not use third-party tracking cookies for behavioral advertising on external websites. Information collected via cookies is used exclusively within the 77zz platform and for the purposes described above.

You can manage or disable non-essential cookies at any time through your browser settings — Chrome, Safari, Firefox, or any other. Disabling essential cookies, however, may prevent key features such as login and bet processing from working correctly on 77zz.

The LGPD guarantees you, as the owner of your personal data, a set of rights that 77zz respects and facilitates the exercise of these rights. Here is what you can request:

The 77zz retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The main retention periods are:

• Active account data: Retained for the entire period the account remains active on the platform.
• Financial data and transaction history: Retained for 5 (five) years after the last transaction, in accordance with legal obligations in the financial sector in Brazil and anti-money laundering regulations.
• Identity verification documents (KYC): Retained for 5 (five) years after account closure, in accordance with regulatory requirements.
• Security logs and access records: Retained for 1 (one) year, and may be extended in the event of an active security or fraud investigation.
• Marketing data (with consent): Retained until the player withdraws consent or submits a deletion request.
• Closed account data with no Terms violation: Deleted within 90 days after account closure, except for data whose legally required retention period is still in effect.

At the end of the applicable retention period, the 77zz permanently and securely deletes data using sanitization methods that prevent subsequent recovery of the information.

Some operational partners of 77zz — especially technology infrastructure providers and international game providers such as Pragmatic Play, PG Soft, and Hacksaw Gaming — may be located outside Brazil. When personal data is transferred internationally, the 77zz ensures that such transfers take place in compliance with Art. 33 of the LGPD, specifically through:

• Transfers to countries with an adequate level of data protection as recognized by the ANPD.
• Specific contracts with standard data protection clauses equivalent to LGPD requirements.
• Guarantees that international data recipients are bound by the same data protection obligations applicable in Brazil.

The 77zz maintains an up-to-date record of all international data transfers, available upon request to the DPO (Data Protection Officer) at privacidade@77zz.life.

Under no circumstances will the 77zz transfers personal data to countries that do not provide adequate data protection guarantees, as assessed by the in-house legal team and the standards established by the ANPD.

The services of the 77zz are intended exclusively for users aged 18 and over. The 77zz does not knowingly collect personal data from minors and does not permit anyone under age to register or use the platform.

During the registration process, the 77zz verifies the date of birth provided and may request supporting age documentation as part of the KYC process. Accounts identified as belonging to minors are closed immediately and the data is deleted, except for records required to fulfill legal obligations related to investigations.

If you believe a minor has created an account on 77zz, please contact us immediately at privacidade@77zz.life or via live chat. The 77zz takes this type of situation with the utmost seriousness and acts quickly to close the account and delete the data.

The 77zz may update this Privacy Policy periodically to reflect changes in data processing practices, in response to new legal or regulatory requirements, or to incorporate improvements to privacy and security measures.

When material changes are made to this Policy, 77zz will notify registered players with at least 7 (seven) days' notice by email to the address registered on the account. Changes driven by urgent legal requirements may take effect immediately, with simultaneous notification.

The date of the last update is always visible at the top of this page. The version history of this Policy can be requested by emailing privacidade@77zz.life.

Continued use of the 77zz after a new version of this Policy is published constitutes acceptance of the changes. If you do not agree with the updates, you may request account closure before the effective date and withdraw your available balance via Pix with no penalty.

The 77zz has appointed a Data Protection Officer (DPO) as required by Art. 41 of the LGPD. The DPO is the official point of contact for matters related to privacy and personal data protection.

The 77zz responds to LGPD rights exercise requests within 15 business days. For more complex cases, the deadline may be extended with prior notice to the data subject. The DPO ensures every request receives serious, individualized attention and is handled within the applicable legal requirements.