Privacy Policy 777h: How We Protect Your Personal Data

The entity responsible for processing your personal data is the platform 777h, operated under the domain 777h.click. For LGPD purposes, the controller is the entity that makes decisions regarding the processing of users' personal data.

• Platform Name: 777h
• Domain: 777h.click
• General email: contato@777h.click
• Privacy email (DPO): privacidade@777h.click
• Support language: Brazilian Portuguese

For matters related to personal data, privacy, and the exercise of rights under the LGPD, please use exclusively the privacy email above or the 24/7 support chat available on the platform.

The 777h collects personal data in the following categories:

The 777h does not collect sensitive data such as racial origin, religious belief, political opinion, or genetic or biometric data, except where strictly required to fulfill a legal obligation (e.g., liveness checks in advanced identity verification).

The data collected by the 777h are used exclusively for the following purposes:

• Account creation and management: registration, authentication, password recovery and user profile maintenance.
• Transaction processing: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago and TED bank transfer; withdrawal processing; and receipt generation.
• Provision of betting services: recording of Sports Betting activity (football, Brasileirão, Copa do Brasil, Libertadores), Live Casino, crash games, and slots; calculation and payment of winnings.
• Identity verification (KYC): age verification, anti-money laundering (AML) compliance, and adherence to applicable regulations.
• Fraud prevention and security: detection of duplicate accounts, irregular bets, unauthorized access and other suspicious activity.
• Customer support: handling requests, complaints, questions, and technical support via 24/7 chat and email.
• Service communications: notifications about transactions, account updates, active promotions and changes to the Terms and Conditions or this Policy.
• Platform improvement: usage behavior analysis to improve features, fix bugs, and personalize the experience within the 777h.
• Compliance with legal obligations: compliance with court orders, requests from competent authorities, and tax obligations applicable to the platform's operations in Brazil.

The 777h does not use your data to make automated decisions with significant legal effects without the possibility of human review, in compliance with Article 20 of the LGPD.

All personal data processing carried out by the 777h has a legal basis provided under the LGPD. The bases we rely on are:

• Contract performance (Art. 7, V of the LGPD): is the primary legal basis. Processing is necessary to perform the contract entered into when you create an account — that is, to allow the 777h can provide the Sports Betting and casino services you signed up for.
• Compliance with a legal obligation (Art. 7, II of the LGPD): used for data required to comply with applicable legislation, such as maintaining financial and identity records as required by anti-money laundering regulations.
• Legitimate interest (Art. 7, IX of the LGPD): for purposes such as fraud prevention, platform security, service improvement, and risk analysis — when the legitimate interests of the 777h do not override your fundamental rights and freedoms.
• Consent (Art. 7, I of the LGPD): for optional marketing communications, such as promotional emails and offer notifications. You may withdraw this consent at any time at no cost.

The 777h may share personal data only with the categories of third parties listed below, always for specific purposes and on an identified legal basis:

• Payment providers: financial institutions and payment intermediaries used to process Pix, boleto, card payments, PicPay, Mercado Pago, and TED transfers. These partners receive only the data strictly necessary to process the transaction.
• Identity verification providers (KYC): certified document verification and biometric platforms, used to validate users' identities before the first withdrawal. All submitted data is protected under a data processing agreement.
• Game providers: live casino studios and distributors, slots and crash games providers that supply content to the platform. Data sharing is limited to session identifiers and bet balances — no complete financial data.
• Analytics and infrastructure services: technical monitoring tools, performance analytics and cloud hosting. These services act as data processors operating under the instruction of the 777h.
• Public authorities and regulatory bodies: the 777h complies with requests from Brazilian judicial authorities, law enforcement, and regulatory bodies when required by law. No data is voluntarily provided to public agencies without a court order or legal provision.

The 777h uses cookies and similar technologies to ensure the platform works properly, improve the user experience, and analyze service performance. The types of cookies used are:

• Strictly necessary cookies: essential for the platform to function, including maintaining authenticated sessions, language preferences, and security. They cannot be disabled without affecting the service.
• Performance and analytics cookies: collect information about how users interact with the platform (pages visited, session duration, errors encountered). Data is aggregated and anonymized.
• Functionality cookies: remember user preferences (such as favorite games or display settings) to personalize your experience without requiring you to reconfigure everything each session.

The 777h does not use third-party advertising cookies or cross-site tracking cookies for targeted advertising outside the platform.

You can manage or disable cookies in your browser settings. Disabling strictly necessary cookies may affect essential features such as login and bet processing.

The 777h retains personal data for as long as necessary to fulfill the purposes described in this Policy or to meet legal obligations. General retention periods are:

• Registration data and active account: retained for the full duration of the account and for up to 5 years after closure, in accordance with compliance and anti-money laundering requirements.
• Financial transaction records: retained for a minimum of 5 years after the transaction, in accordance with applicable tax legislation and financial institution regulations in Brazil.
• Identity verification documents (KYC): retained for a minimum of 5 years after account closure or after the last transaction, in accordance with AML/CFT regulations.
• Betting history: retained for 5 years for audit purposes, dispute resolution, and regulatory obligations.
• Support communication data: retained for 2 years after a ticket is closed for quality and training purposes.
• Session cookies: expire automatically when the browser session is closed.

Once retention periods expire, data is securely and irreversibly deleted or anonymized for statistical purposes, with no possibility of re-identification.

The 777h adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL/TLS Encryption: all communication between your device and the servers of the 777h is encrypted, including transactions via Pix, boleto, credit/debit card, PicPay and Mercado Pago.
• Encrypted storage: sensitive data (such as identity documents and financial information) is stored with encryption at rest, on servers with restricted access.
• Role-based access control: only staff members with a proven operational need are granted access to user data, with a full audit log of every access.
• Continuous monitoring: intrusion detection systems and 24/7 monitoring to identify and respond to threats in real time.
• Periodic security testing: we conduct regular vulnerability assessments and penetration testing to identify and fix weaknesses before they can be exploited.
• Two-factor authentication (2FA): available to all users and mandatory for accounts with withdrawals above certain amounts.

No security system is completely infallible. In the event of a security incident that could compromise your data, the 777h will follow the notification procedure set out in the LGPD, informing affected data subjects and the ANPD within the legally required timeframes.

To exercise any of your rights as a data subject under the LGPD, follow the procedure below:

1. Submit a request to privacidade@777h.click with the subject line "LGPD Request – [type of right]".
2. Please include in your email: full name, CPF registered on the account, and a detailed description of your request.
3. Our privacy team will confirm receipt within 48 business hours.
4. Your request will be reviewed and responded to within 15 business days, in accordance with the timeframe established by the LGPD.
5. In complex cases, the deadline may be extended by an additional 15 days, with prior notice and a written explanation.

If you feel your request was not adequately addressed, you may file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados) through the authority's official channel.

The 777h is a betting platform intended exclusively for users aged 18 and over. We do not intentionally collect, store or process personal data from anyone under 18.

By registering, the user confirms they are at least 18 years old. Age verification is carried out during the KYC process, which is mandatory before the first withdrawal.

If we detect that an account was created by a minor or that a minor used someone else's information to register, the account will be closed immediately and all balances frozen pending review. Any inadvertently collected data will be deleted.

Parents or guardians who discover that a child or adolescent has created an account on 777h should immediately contact support via 24/7 chat or by email at contato@777h.click.

Some of the technology providers used by the 777h — such as cloud infrastructure services and international game providers — may be located outside Brazil or may process data on servers in other countries.

When an international data transfer takes place, the 777h ensures that:

• The destination country offers a level of data protection compatible with the LGPD; or
• The transfer is covered by specific data protection contractual clauses between the 777h and the international operator; or
• The transfer is necessary for the performance of the contract entered into with you (e.g., processing a live casino round hosted on an international provider's server).

Under no circumstances are complete financial data (such as credit card details or full transaction histories) transferred internationally without adequate contractual safeguards.

The 777h may update this Privacy Policy periodically to reflect changes in Brazilian legislation, our data processing practices, or the services we offer.

• Significant changes will be communicated by email and through a prominent notice on the platform at least 7 days in advance.
• The date of the last update is displayed at the top of this page.
• For changes that require new consent (e.g., a new purpose for data use), you will be consulted before any new processing takes place.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy.

We recommend reviewing this Policy periodically. If you disagree with any changes, you may close your account and request deletion of your data before the changes take effect.

The 777h has a Data Protection Officer (DPO) responsible for handling data subject requests and ensuring compliance with the LGPD.

• Privacy channel (DPO): privacidade@777h.click — for LGPD rights requests, questions about this Policy, and complaints related to data processing.
• General support: contato@777h.click or the platform's 24/7 live chat — for operational matters and general account inquiries.
• FAQ: our FAQ center at Frequently Asked Questions covers the most common topics on privacy, account security and data.

All inquiries are handled in Brazilian Portuguese. For formal LGPD-related requests, the response time is up to 15 business days from confirmation of receipt.