77tiger Privacy Policy – Data Protected under the LGPD

1 Introduction and Controller Identification

This Privacy Policy describes how 77tiger collects, stores, uses, shares, and protects the personal data of users on the 77tiger.best platform. It applies to all registered players, site visitors, and anyone who interacts with 77tiger's services.

77tiger is the controller of the personal data processed on this platform, as defined by the General Data Protection Law (LGPD – Law No. 13.709/2018). This means we are responsible for determining how and for what purpose your data is used, and for ensuring that such processing takes place within the bounds of Brazilian law.

Whether you're signing up for 77tiger, making a deposit via Pix, betting on the Brasileirão live, playing a slot, or using any other feature on the platform, you're trusting us with personal information. We take that trust seriously — and this document exists so you know exactly what we do with it.

2 What Data We Collect

77tiger collects personal data at different points during your interaction with the platform. See below for the categories of data and the situations in which they are collected:

Registration data:

• Full name
• Email address
• CPF (Individual Taxpayer Registry)
• Date of birth
• Mobile phone number (when voluntarily provided)
• Residential address (collected during the KYC process)

Identity data (KYC — Know Your Customer):

• Copy of a government-issued photo ID (RG or CNH)
• Recent proof of residence
• Face photo (selfie with ID document, when requested)
• Proof of ownership of the payment method

Financial transaction data:

• Deposit and withdrawal history (amounts, dates, methods)
• Pix key data linked to the account
• Credit or debit card information (masked number, card brand, expiry date — never the full CVV)

Platform usage data:

• Betting history and gaming sessions
• Game and sports preferences
• IP address and approximate location
• Device type, operating system, and browser
• Cookies and session identifiers (detailed in Section 8)

77tiger does not collect sensitive data such as racial or ethnic origin, religious beliefs, health information, or biometrics, except where strictly required by law and with your explicit consent.

3 How We Use Your Data

Every piece of data collected by 77tiger has a specific and legitimate purpose. We use your personal data to:

• Account creation & management: register you on the platform, verify your identity, keep account information up to date, and grant access to our services.
• Payment processing: process deposits and withdrawals via Pix, boleto bancário, credit or debit card, PicPay and Mercado Pago securely and efficiently.
• Fraud prevention & legal compliance: verify the authenticity of transactions, fulfill KYC (Know Your Customer) obligations, prevent money laundering (AML/CFT), and comply with regulatory authority requirements.
• Experience improvement: personalize game and betting suggestions based on your preferences, optimize the interface, and identify bugs or technical issues.
• Communications: send transaction confirmations, security alerts, Terms updates and, with your consent, promotions and offers from 77tiger.
• Player support: answer questions, resolve complaints, and handle responsible gambling requests.
• Statistical analysis: generate internal reports to improve our services, always in aggregated and anonymized form.

4 Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing activity have a legal basis. 77tiger bases the processing of your data on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): we process your registration data and financial transactions because they are necessary to perform the service agreement you accepted when signing up for 77tiger.
• Fulfillment of a legal obligation (art. 7, II): KYC data and transaction history are retained to meet legal obligations related to anti-money laundering and regulatory compliance.
• Legitimate interest (Art. 7, IX): usage and behavioral data on the platform are processed for security, fraud prevention, and service improvement purposes, provided they do not override your rights and freedoms.
• Consent (Art. 7, I): marketing communications and advanced personalization are only carried out when you give explicit consent, with the option to withdraw it at any time.

5 Data Sharing with Third Parties

77tiger does not sell, rent, or trade your personal data. Sharing with third parties occurs only in the strictly necessary situations listed below, and always with appropriate safeguards in place:

• Game providers: companies such as Pragmatic Play, Evolution Gaming, NetEnt, and others require minimal session data (player identifier, bet balance) to operate their games. These providers are contractually required to process data in compliance with applicable laws.
• Payment processors: to process transactions via Pix, credit card, PicPay and Mercado Pago, we share the necessary data with the financial institutions involved. These partners maintain their own security policies and are subject to regulation by the Banco Central do Brasil.
• Identity verification services (KYC): to process identity documents securely and efficiently, we may use certified and audited specialist providers.
• Public authorities: when required by law, court order, or request from a competent regulatory authority — such as the Financial Activities Control Council (COAF) or the Federal Revenue Service — data is disclosed as required, without exceptions.

Under no circumstances is 77tiger players' data shared with advertising companies, social media platforms, or any third party for marketing purposes without the data subject's explicit consent.

6 Data Storage and Security

Personal data belonging to 77tiger players is stored on servers with the following security controls:

• Encryption in transit: all data transmitted between your browser or mobile device and 77tiger's servers is protected by TLS 1.3 (Transport Layer Security), the most current encryption protocol available.
• Encryption at rest: sensitive data stored on our servers — such as CPF numbers, KYC documents, and financial data — is encrypted using AES-256, the most robust symmetric encryption standard available.
• Access control: only 77tiger staff with a justified operational need have access to players' personal data. All access is logged and periodically audited.
• Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24 hours a day to identify unauthorized access attempts.
• Secure backups: backups are performed on a regular basis and stored in encrypted form at locations physically separate from the primary servers.

In the event of a security incident affecting players' personal data, 77tiger will notify the impacted data subjects and the National Data Protection Authority (ANPD) within the timeframes and in the manner required by the LGPD.

7 Data Retention Period

77tiger retains players' personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. The general retention periods are:

• Registration and active account data: retained for the entire period the account remains active on the platform.
• Financial transaction data (deposits and withdrawals): retained for a minimum of 5 years after account closure, in compliance with anti-money laundering obligations and Brazilian tax legislation.
• KYC documents: retained for the minimum period required by anti-money laundering regulations — generally 5 years after the end of the relationship with the player.
• Betting history and gaming sessions: retained for at least 2 years after account closure for audit and dispute resolution purposes.
• Cookie and browsing data: retained according to the timeframes set out in Section 8 of this Policy.

Once the applicable retention periods expire, data is securely deleted or anonymized in a way that no longer allows identification of the individual.

8 Cookies & Tracking Technologies

77tiger uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website. They allow the platform to "remember" your preferences between sessions.

We use the following categories of cookies:

77tiger does not use tracking cookies for third-party advertising purposes. You can manage your cookie preferences in the account settings panel or through your browser settings. Disabling essential cookies may affect the platform's proper functioning.

9 Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by 77tiger, a comprehensive set of rights. Each one is outlined below, along with how to exercise it:

To exercise any of the rights listed above, contact our data protection officer at contato@77tiger.best, clearly stating the right you wish to exercise and the data involved. 77tiger responds to data subject requests within 15 business days.

10 Users Under 18

77tiger is an adult entertainment platform. Registration and use of any platform feature is strictly prohibited for users under 18. 77tiger does not knowingly collect personal data from minors.

If we determine that an account was created by a minor — whether through direct disclosure or identification during the KYC process — the account will be immediately closed and all personal data will be deleted, unless retention is required by law.

If you are a parent or legal guardian and believe a minor has used 77tiger, please contact us immediately at contato@77tiger.best so we can take all necessary steps as quickly as possible.

11 International Data Transfers

Some service providers used by 77tiger — such as certain international game providers and cloud infrastructure services — may process data on servers located outside Brazil. When this occurs, 77tiger applies the following safeguards:

• Contracts with partners include specific data protection clauses requiring them to meet standards equivalent to the Brazilian LGPD.
• Preference for partners located in countries whose data protection laws are recognized as adequate by the ANPD.
• Conducting data protection impact assessments (DPIAs) before establishing new international data transfer flows.

77tiger only transfers data internationally when necessary to operate the contracted services — never for commercial or marketing purposes with third parties.

12 Changes to This Privacy Policy

77tiger may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, updates to Brazilian legislation, or ANPD directives.

Material changes will be communicated by email to the address on file and through a prominent notice on the platform, at least 7 days before taking effect. The date of the last update is always shown at the top of this page.

Continued use of the platform after any changes to this Policy take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may exercise your right to delete your data and close your account before the new rules come into force.

13 Contact, Data Protection Officer (DPO) & Privacy Channel

77tiger has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that process personal data at scale. The DPO is responsible for ensuring the platform's compliance with the LGPD and serves as the communication channel between 77tiger, data subjects, and the ANPD.

To contact the 77tiger DPO or exercise any right described in this Policy, please use the following channels:

• Privacy email: contato@77tiger.best (subject line: "Data Privacy – [your name]")
• Live chat: available 24 hours a day, 7 days a week, directly on the platform
• Response time: up to 15 business days for data subject requests; up to 72 hours for urgent security notifications

For specific privacy concerns not satisfactorily resolved by 77tiger, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the authority responsible for enforcing the LGPD in Brazil.