7bbb Privacy Policy – Data Protection & LGPD Compliance

1Data Controller

The platform operator 7bbb, accessible at https://7bbb.best, is the entity responsible for processing the personal data collected in connection with the provision of online casino services, Sports Betting, and digital entertainment for the Brazilian market.

For privacy and data protection inquiries, you can reach us directly at contato@7bbb.best, handled in Portuguese by our specialized team. 7bbb's Data Protection Officer (DPO) can be reached at the same email address — please mark your message as "LGPD Request / DPO".

2What Data We Collect

A 7bbb collects only the data necessary to provide the contracted services and meet legal obligations. The categories of data processed by the platform are described below:

7bbb does not collect sensitive data — such as racial origin, religious beliefs, health information, or biometric data — except to the extent strictly necessary to fulfill legal identity verification obligations (KYC), in which case explicit consent is obtained.

3How We Use Your Data

Each piece of data collected by the 7bbb has a specific, documented purpose. We do not process personal data for purposes incompatible with those described below:

• Account management: create and maintain your account, handle login, password resets, and profile settings.
• Financial transaction processing: process deposits via Pix, bank slip (boleto), credit/debit card, PicPay, and Mercado Pago; process withdrawals exclusively to the Pix key registered under the account holder's CPF.
• Identity verification (KYC): comply with regulatory obligations related to anti-money laundering and eligibility verification — in particular, confirming that the player is at least 18 years of age.
• VIP Program: calculate accumulated points, determine status level, and calculate the weekly cashback in BRL based on real-money wagering history.
• Platform security: detect and prevent fraud, unauthorized access, duplicate account creation, and bonus abuse.
• Customer support: answer questions, resolve issues, and maintain a support history for future reference — always in Portuguese.
• Marketing communications: send offers, VIP Program promotions, and platform updates exclusively to players who have opted in to this type of communication.
• Platform improvement: analyze usage patterns in an aggregated and anonymized manner to improve the gaming experience, fix technical issues, and develop new features.

4Legal Basis for Processing

A 7bbb processes personal data only where an appropriate legal basis exists under the LGPD (Law No. 13.709/2018). The legal bases used by the platform are:

• Contract performance (Art. 7, V of the LGPD): primary basis for processing registration data, financial transactions, KYC, and VIP Program management. This data is necessary to provide the services you signed up for when creating an account.
• Compliance with a legal obligation (Art. 7, II of the LGPD): legal basis for processing data required by specific legislation — such as financial records for tax purposes and KYC data for anti-money laundering compliance.
• Consent (Art. 7, I of the LGPD): basis for sending marketing communications and collecting usage data for advanced personalization. Consent may be withdrawn at any time without affecting access to core services.
• Legitimate interest (Art. 7, IX of the LGPD): legal basis for processing technical data (IP address, device data) used for platform security and fraud prevention, provided such processing does not override the fundamental rights of the data subject.

5Data Sharing with Third Parties

A 7bbb does not sell players' personal data. Data is only shared with third parties in the situations outlined below, always on a defined legal basis and under appropriate data protection agreements:

• Payment processors: transaction data is shared with payment partners certified by the Banco Central do Brasil to process Pix, boleto, card, and other accepted payment methods. These partners are contractually prohibited from using this data for their own purposes.
• KYC Providers: identity documents and personal data are shared with specialized identity verification services to meet regulatory requirements. Documents are processed exclusively for that purpose.
• Game providers: minimal technical data (anonymous session identifier) is shared with casino and crash game providers to ensure session integrity and continuity. No personally identifiable data is shared with game providers.
• Competent authorities: data may be shared with judicial, law enforcement, or regulatory authorities when required by law, court order, or a legitimate administrative request.
• Technology infrastructure: cloud storage providers and IT services that operate 7bbb's infrastructure have technical access to data as data processors, subject to strict data protection agreements.

6Cookies and Tracking Technologies

A 7bbb uses cookies and similar technologies to ensure the platform functions correctly, improve the player experience, and, with consent, personalize communications. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping the session active, processing transactions, and ensuring login security. These cookies cannot be disabled without affecting access to the services.
• Performance cookies: collect aggregated and anonymized data on how players navigate the platform — which pages are most visited, where errors occur — to identify and fix technical issues.
• Functionality cookies: store player preferences — such as language, display settings, and saved options — to personalize the experience without requiring reconfiguration on every visit.
• Analytical cookies: with consent, we use analytics tools to understand usage patterns in aggregate. This data is used internally and does not identify individual players.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning correctly, including login and transaction processing.

7How Long We Retain Your Data

A 7bbb retains personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods:

• Active account data: retained for as long as the account remains active. After account closure, data is anonymized or deleted within 90 days, unless legal retention obligations apply.
• Financial records: retained for a minimum of 5 years after the transaction, in accordance with Brazilian tax and anti-money laundering regulations.
• KYC documents: retained for a minimum of 5 years after account closure, in accordance with compliance and anti-money laundering regulations.
• Support records: retained for up to 2 years after a support ticket is closed, for reference in the event of disputes or review requests.
• Security logs: retained for up to 12 months for the purpose of detecting and investigating suspicious activity and unauthorized access.

Once the applicable retention period expires, data is securely deleted or anonymized in a way that makes it impossible to identify the individual.

8How We Protect Your Data

A 7bbb implements robust technical and organizational measures to protect players' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-bit SSL encryption: all communication between the player's device and 7bbb's servers is encrypted. This includes login, Pix deposits, withdrawals, and general platform browsing.
• Secure storage: personal data is stored on servers with strict access controls. Internal access is granted only to employees who need the data to perform their specific job functions.
• Two-factor authentication: available for players who want an extra layer of security when accessing their account.
• Continuous monitoring: anomalous activity detection systems monitor the platform 24 hours a day to identify and respond quickly to unauthorized access attempts.
• Regular security testing: the 7bbb infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that compromises players' personal data, 7bbb will notify the affected individuals and the National Data Protection Authority (ANPD) within the timelines and procedures established by the LGPD.

9Data of Minors

A 7bbb is a platform intended exclusively for individuals aged 18 and over. The intentional collection of personal data from minors is not carried out under any circumstances.

During the registration process, players are required to declare that they are at least 18 years of age. Mandatory identity verification (KYC) prior to the first withdrawal confirms the date of birth based on an official government-issued document.

If 7bbb identifies that a minor's data was inadvertently collected — for example, as a result of false information provided during registration — the account will be immediately closed, the balance held for review, and the data deleted in accordance with applicable procedures. The minor's legal guardians may contact us at contato@7bbb.best to address the matter.

10International Data Transfer

Given the technological nature of the services provided by 7bbb, some data may be processed by infrastructure providers located outside Brazil — such as cloud hosting servers or game providers headquartered abroad.

When such international transfer occurs, 7bbb ensures that recipients provide a level of data protection equivalent to that required by the LGPD, through:

• Standard data protection contractual clauses included in agreements with international vendors.
• Certifications demonstrating compliance with internationally recognized privacy regulations.
• Transfer impact assessments are conducted before any data is shared with new third-party providers abroad.

7bbb does not transfer personal data to countries that do not provide an adequate level of protection as assessed by the ANPD, unless equivalent contractual safeguards are in place.

11How to Exercise Your Rights

To exercise any of your rights as a data subject — access, correction, deletion, portability, withdrawal of consent, blocking, or information about sharing — follow the steps below:

• Contact us by email at contato@7bbb.best or via the 24/7 Portuguese-language support chat on the platform.
• Identify yourself with your full name and the CPF linked to your account.
• Clearly describe your request — which right you wish to exercise and, where applicable, which specific data is involved.
• 7bbb will confirm receipt of your request by email and provide a response within 15 business days, as per the retention period established by the LGPD.

For complex or high-volume requests, the deadline may be extended by an additional 15 days, with prior notice explaining the reason. There is no charge to exercise these rights.

12Changes to this Privacy Policy

A 7bbb may update this Privacy Policy periodically to reflect changes in Brazilian law, the services offered, or data processing practices. Significant changes will be communicated at least 30 days' notice via registered email and in-platform notification.

The date of the last update is always shown at the top of this page. We recommend reviewing this document periodically. Continued use of the platform after a new version of this Policy takes effect constitutes acceptance of the changes.

If you do not agree with the changes, you may request account closure before the new version's effective date — any available real-money balance will be returned via Pix after the applicable security procedures.

13Contact, DPO & Privacy Channel

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, the contact channels of the 7bbb are:

• General support email: contato@7bbb.best — Portuguese-language support, available 24 hours a day.
• LGPD / DPO Requests: contato@7bbb.best, with the subject line "LGPD Request / DPO" for direct forwarding to the Data Protection Officer.
• Live chat: available on the platform for logged-in players, with an average response time of under 2 minutes during peak hours.

The 7bbb Data Protection Officer (DPO) is the official point of contact with the Autoridade Nacional de Proteção de Dados (ANPD) and with data subjects on all matters related to personal data processing. All requests identified as "LGPD / DPO" are handled as a priority and within the timeframes established by law.