Privacy Policy of 777gg — Data Protection & LGPD

777gg is a Sports Betting and online casino platform operated and made available at 777gg.click, serving the Brazilian market. For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), 777gg acts as the controller of its users' personal data — meaning it is the entity that makes decisions regarding the processing of information collected during use of the platform.

777gg is committed to handling all users' personal data responsibly, transparently, and in strict compliance with applicable Brazilian law, particularly the LGPD, the Consumer Protection Code (Law No. 8,078/1990), and the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).

777gg collects personal data at different points during your interaction with the platform. Collection is limited to the minimum necessary for each specific purpose:

777gg does not collect sensitive data as defined by the LGPD (such as health data, religion, sexual orientation, or biometrics) unless strictly required by a legal obligation.

Data collected by 777gg is used exclusively for the following purposes:

• Service delivery: Create and manage your account, process deposits via Pix, boleto bancário, PicPay, Mercado Pago, or credit/debit card, process withdrawals, record Sports Betting activity, and log Live Casino access;
• Identity verification (KYC): Confirming that you are 18 or older, verifying the accuracy of your registration details, and fulfilling regulatory anti-money laundering obligations;
• Operational communications: Sending deposit and withdrawal confirmations, account security alerts, bet result notifications, and policy updates;
• Marketing communications: Send offers, bonuses, and platform updates — only to users who have not opted out of such communications. You can unsubscribe at any time;
• Security & fraud prevention: Detect suspicious activity, prevent unauthorized access, identify multiple accounts, and protect platform integrity;
• Responsible gambling: Monitoring behavioral patterns that may indicate problem gambling and offering appropriate self-control tools;
• Legal obligations: Comply with requirements from competent regulatory, judicial, or tax authorities.

All data processing carried out by 777gg has a legal basis under the LGPD. The table below summarizes the bases used for each processing category:

777gg does not sell or trade users' personal data. Information is only shared with third parties in the following situations, always with contractual data protection guarantees in place:

• Payment processors: Required financial data is shared with Pix processors, credit and debit card acquirers, and platforms such as PicPay and Mercado Pago to process deposits and withdrawals. These companies act as data operators under contract and may not use the information for any other purpose;
• Live casino providers: Required identification data is shared with partner providers such as Evolution Gaming and Pragmatic Play to grant access to live tables. Sharing is limited to the minimum necessary to deliver the service;
• Identity verification (KYC) services: Identity documents are processed by specialized identity verification companies to meet regulatory obligations;
• Public authorities: 777gg may share data with regulatory, tax, or judicial authorities when required by law or a substantiated court order;
• Fraud prevention: Information may be shared with fraud prevention and anti-money laundering systems when necessary to protect the integrity of the platform and its users.

All third parties that receive 777gg user data are bound by contractual agreements requiring LGPD compliance and prohibiting the use of such information for unauthorized purposes.

777gg adopts robust technical and organizational measures to protect your personal data against unauthorized access, breaches, accidental destruction, or any form of improper processing:

• 256-bit SSL/TLS encryption on all communications between the user and 777gg's servers;
• Financial data — including credit card information — is stored in tokenized form and never as readable text;
• Servers hosted in data centers with security certification, physical access control, and 24-hour monitoring;
• Internal access to users' personal data is restricted to staff members who need it to perform their roles, with role-based access controls (RBAC);
• Mandatory two-factor authentication for administrative access to internal systems;
• Continuous monitoring to detect suspicious access and intrusion attempts;
• Periodic security audits carried out by internal and external teams.

777gg uses cookies and similar technologies to improve your experience on the platform. The types of cookies used are:

• Essential cookies: Required for the basic operation of the platform, such as maintaining login sessions and security. They cannot be disabled without affecting the service's core functionality;
• Functional cookies: They store your preferences, such as language, preferred payment method, and betting limit settings. They improve your experience without collecting data for marketing purposes;
• Analytical cookies: Collect aggregated and anonymized data on how users interact with the platform — most visited pages, session duration, traffic source. Used to improve the product. Data is anonymized before processing;
• Security cookies: Detect suspicious behavior, fraud attempts, and abnormal access patterns to protect user accounts.

777gg does not use third-party tracking cookies for behavioral advertising. You can manage your cookie preferences in the consent banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies will prevent normal use of 777gg.

The LGPD grants personal data subjects a set of rights that can be exercised at any time with 777gg. To exercise any of the rights below, send an email to suporte@777gg.click with the subject line "LGPD Request — [your name]":

• Confirmation and access: Confirm whether your data is being processed and obtain a full copy of all information 777gg holds about you;
• Correction: Request the update of outdated data or the correction of inaccurate information;
• Anonymization, blocking, or deletion: Request that unnecessary or excessively processed data be anonymized, temporarily blocked, or deleted;
• Portability: Request your data in a structured, interoperable format for transfer to another service;
• Information on data sharing: Know who 777gg shares your data with and why;
• Consent withdrawal: Withdraw previously given consent for processing based on that legal basis, such as marketing communications;
• Objection: Object to processing carried out on the basis of legitimate interest when you believe the LGPD has not been complied with;
• Automated decision review: Request human review of decisions made solely by automated systems that affect your interests.

Requests are responded to within 15 business days. If immediate fulfillment is not possible, 777gg will inform you of the reason and the estimated completion timeframe. If your request is denied, you will receive a substantiated justification and may appeal to the National Data Protection Authority (ANPD).

777gg retains your personal data for as long as necessary to fulfill the purposes for which it was collected, always observing the minimum retention periods required by Brazilian law:

• Registration and identification data: Retained for the lifetime of the account and for a minimum of 5 years after closure, in accordance with anti-money laundering obligations (Law No. 9,613/1998);
• Financial transaction history: Retained for 5 years as required by tax and regulatory obligations, counted from the date of each transaction;
• Access logs: Stored for 6 months in accordance with the Brazilian Internet Civil Framework (Art. 15);
• Support communications: Retained for 2 years after the support ticket is closed;
• Marketing data: Deleted immediately upon withdrawal of consent, where consent is the sole legal basis for processing.

Once the applicable retention periods expire, data is securely deleted or irreversibly anonymized in a way that no longer allows the data subject to be identified.

The 777gg platform is intended exclusively for users aged 18 and over. 777gg does not knowingly collect personal data from minors.

If you have reason to believe that a person under the age of 18 has created an account or provided data to 777gg, please contact us immediately at suporte@777gg.click. Upon receiving the notification, 777gg will take the necessary steps to verify the situation, close the account if the minor's age is confirmed, and delete any data collected from the minor.

Due to partnerships with international live casino providers — such as Evolution Gaming and Pragmatic Play, which operate servers outside Brazil — some user data may be transferred to other countries as part of the delivery of these services.

777gg ensures that these international data transfers always take place in compliance with Art. 33 of the LGPD, through:

• Standard contractual clauses that require recipients to maintain a level of protection equivalent to that required by the LGPD;
• Transfers to countries or international organizations that provide an adequate level of personal data protection, as assessed by the ANPD;
• Adoption of global corporate data protection policies by partners.

Data transferred internationally is limited to what is strictly necessary to provide the live casino service and does not include identification documents or financial data beyond what is essential for session verification.

777gg may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered.

Material changes will be communicated by email to the registered address and via a prominent notice on the platform at least 15 days before taking effect. For changes required by immediate legal obligation, the update may occur without prior notice, but users will be informed as soon as possible.

The current version of this policy is always the one available on this page, with the update date indicated at the top of the document and in the footer of this section. Continued use of the 777gg platform after the effective date of any changes constitutes acceptance of the updated policy.

As required by the LGPD, 777gg has appointed a Data Protection Officer (DPO) responsible for:

• Acting as the communication channel between 777gg, data subjects, and the National Data Protection Authority (ANPD);
• Receive complaints and communications from data subjects regarding data processing;
• Internally guide the 777gg team on data protection practices;
• Carry out any other duties assigned by the controller or by supplementary regulations.

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please use the channels below:

• General email: suporte@777gg.click
• LGPD Requests: suporte@777gg.click with the subject line "LGPD Request — [your full name]"
• Live chat: Available on the platform, 24 hours a day, 7 days a week
• Response time: Up to 15 business days for personal data requests; general support responses within 24 hours by email or immediately via chat

If you are not satisfied with the response received from 777gg, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.