Privacy Policy – Your Data Safe at 777x

The 777x (operated at 777x.express) is the controller of personal data collected from users who register and use the Sports Betting and online casino platform. As the controller, 777x defines the purposes and means of data processing, always in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018).

This Privacy Policy applies to all platform users — whether you are a football bettor who follows the Brasileirão Série A and the Copa do Brasil, a live casino player or someone who is still just exploring what the 777x has to offer.

By creating your account, you acknowledge that you have read and understood this Policy. If you have any questions before signing up, feel free to reach out to our support team via live chat — available 24 hours a day, in Portuguese.

The 777x collects only the data necessary to operate the platform securely and lawfully. Below are the categories of data we process:

The data collected by 777x are used exclusively for the purposes listed below. Your data is never used for undisclosed purposes under this Policy without your prior and express consent:

• Manage your account: create, maintain, and manage your account on the platform, including authentication, password recovery, and profile settings.
• Process financial transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay and Mercado Pago; withdrawals via Pix to your registered key.
• Identity verification (KYC): confirm your identity, age, and address as required by regulatory and fraud prevention obligations.
• Provide user support: answer questions, resolve issues, and maintain a support history for future reference.
• Experience personalization: tailor game recommendations, promotions, and content based on your usage history — always in aggregated and anonymous form where possible.
• Fraud and money laundering prevention: monitor suspicious activity in compliance with Law No. 9,613/1998 and COAF regulations.
• Account communications: sending transactional emails about deposits, withdrawals, bonuses and important updates. Marketing communications are sent only with your consent and include an unsubscribe option in every email.
• Compliance with legal obligations: comply with court orders, requests from competent authorities, and regulatory requirements applicable to the betting industry in Brazil.

The 777x processes your personal data always on the basis of at least one of the legal grounds set out in the LGPD. The bases we rely on are:

• Contract performance (art. 7, V): processing is necessary to deliver the services you signed up for when creating your account — betting, casino, payments, and support.
• Compliance with a legal obligation (art. 7, II): certain information must be collected and retained to meet legal requirements, such as anti-money laundering rules and identity verification.
• Consent (art. 7, I): for marketing communications and offer personalization, we ask for your explicit consent — and you can withdraw it at any time.
• Legitimate interest (art. 7, IX): to improve platform security, detect fraud and enhance the user experience, provided that your fundamental rights are not violated.

The 777x does not sell or trade users' personal data. Sharing only occurs in the situations below, always with appropriate safeguards in place:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These companies act as processors under the instructions of 777x and are contractually bound to protect your data.
• Identity verification (KYC) providers: certified partners who assist with document verification and fraud prevention, subject to confidentiality and data protection agreements.
• Platform technology providers: companies that provide hosting infrastructure, cybersecurity, and platform maintenance — always with access strictly limited to what is necessary.
• Game and casino providers: Evolution Gaming, Pragmatic Play, NetEnt, and other partners receive only the minimum data required to run game sessions (such as an anonymous session identifier).
• Regulatory and judicial authorities: when required by law, court order, or a ruling from a competent regulatory authority in Brazil.

The platform 777x uses cookies and similar technologies to ensure the site functions correctly, improve the user experience and, with your consent, personalize content. The types of cookies we use are:

• Essential cookies: required for the platform to function — session authentication, language preferences, bet slip. Cannot be disabled without affecting your use of the platform.
• Performance cookies: collect anonymous information about how users navigate the platform, which pages are visited most, and where errors occur. Used to improve the product. Can be disabled without affecting functionality.
• Functionality cookies: remember your personalized preferences, such as favorite odds or display settings. They can be disabled, though some features may become unavailable.
• Marketing cookies: used only with your consent, to display relevant communications based on your usage history. You may withdraw this consent at any time in your account settings.

You can manage your cookie preferences through your browser settings — Chrome, Safari, Firefox — or through the privacy settings within your account on 777x. Rejecting essential cookies may prevent access to some platform features.

The 777x retains your personal data for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations. General retention periods are:

• Active account data: retained for as long as your account is active and you remain a platform user.
• Financial data and transaction history: retained for a minimum of 5 (five) years after account closure, in accordance with Brazilian tax and anti-money laundering legislation.
• Identity verification documents (KYC): retained for a minimum of 5 (five) years after account closure.
• Support history: retained for 2 (two) years after account closure or after the last interaction, whichever comes later.
• Marketing data (with consent): retained for as long as consent remains active. Once consent is withdrawn, data used solely for that purpose is removed or anonymized.

Once the retention periods above have expired, data is securely deleted or anonymized so that it can no longer be linked to you.

The security of your data is a technical and operational priority for 777x. The protective measures we have implemented include:

• SSL/TLS 256-bit encryption: all communication between your browser or device and the servers of the 777x is encrypted. This includes login, registration, Pix deposits, and withdrawals.
• Two-factor authentication (2FA): available to all users in the account settings. We strongly recommend enabling this additional layer of protection.
• Internal access controls: only authorized employees with a legitimate business need have access to users' personal data. All access is audited and logged.
• Secure KYC document storage: documents submitted for identity verification are stored in an isolated environment with encryption at rest.
• Continuous security monitoring: intrusion detection systems, anomaly monitoring and incident response operating 24 hours a day.
• Regular security testing: the infrastructure of the 777x undergoes periodic penetration testing and security audits conducted by independent specialized firms.

In the event of a security incident that may affect your data, the 777x will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

The LGPD grants you, as the holder of personal data processed by 777x, the following rights — all of which can be exercised at any time via the support chat or by emailing contato@777x.express:

The 777x is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from anyone under 18. During registration, we request your CPF and date of birth to verify user eligibility.

If we determine that an account was created by a minor, it will be immediately suspended, the data will be deleted, and any balance will be refunded to the original payment method. If you suspect a minor is using the platform, please contact our support team via live chat immediately.

The 777x performs periodic identity checks as an additional safeguard against unauthorized access by minors.

Some of the technology providers and game partners that the 777x uses may process data on servers located outside Brazil. In cases where this occurs, the 777x ensures the transfer meets LGPD requirements by using one of the following safeguards:

• Transfer to countries or international bodies that provide a level of personal data protection equivalent to that of the LGPD.
• Specific contractual data protection clauses requiring partners to meet the same privacy standards applied in Brazil.
• Certifications or compliance seals recognized by relevant data protection authorities.

You can request more information about specific international transfers and the applicable safeguards by emailing contato@777x.express.

The 777x may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, or updates to applicable legislation.

When significant changes occur — those that affect your rights or the way we handle your data — you will be notified at least 7 days in advance via your registered email. The date of the last update will always be visible at the top of this page.

Your continued use of the platform after a new version of this Policy takes effect constitutes your acceptance of the changes. If you do not agree with the changes, you may close your account as described in the Terms and Conditions before the effective date.

To exercise any of your rights under the LGPD, ask questions about this Policy, or file a privacy and data protection complaint, you can contact 777x through the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform. For urgent questions about your account and data.
• Privacy channel e-mail: contato@777x.express — for formal requests to access, correct, delete or port your data. We respond within 15 business days, in line with the LGPD deadline.

When reaching out through the privacy channel, please provide: your full name, CPF and a clear description of your request. This helps us locate your data accurately and respond within the required timeframe.