Privacy Policy of PG777:
How We Protect Your Data

PG777 is the Sports Betting and online casino platform available at pg777.cash, serving the Brazilian market exclusively. For the purposes of the LGPD, PG777 acts as personal data controller collected during your use of the platform — meaning PG777 defines the purposes and means of processing your information.

PG777's data protection officer (DPO) can be reached by email at privacidade@pg777.cash. For requests related to your rights as a data subject — access, correction, deletion, portability, or consent withdrawal — please use this dedicated channel with the subject line "LGPD Rights – [your full name]".

PG777 collects different categories of personal data depending on how you use the platform. The table below outlines the main categories:

Pg777 does not collect sensitive data such as racial or ethnic origin, religious belief, political opinion, health information, or biometrics, except where required by law in specific fraud prevention situations.

PG777 collects personal data through various means throughout your interaction with the platform:

• Registration: When you create a PG777 account, you provide your identification and contact details directly.
• Identity verification (KYC): When we request documents such as an RG, CNH, or proof of address to confirm your eligibility or process withdrawals, those documents are collected and stored securely.
• Financial transactions: Payment data is collected when you make deposits via Pix, boleto bancário, credit card, debit card, PicPay, Mercado Pago, or TED bank transfer. Card data is tokenized and never stored in plain text on PG777's systems.
• Platform usage: When you bet on the Brasileirão, play slots, join Poker tournaments, or access any feature, the system automatically logs behavioral and usage data for operational and security analysis.
• Cookies and tracking technologies: pg777 uses cookies and tracking pixels to enhance the user experience, personalize content, and analyze platform performance. See Section 8 for more details.
• Customer support: Whenever you reach out to the pg777 team via chat or email, the conversation records are stored to ensure service quality and maintain a history of your requests.
• External sources: In specific situations, PG777 may verify data against public sources or Brazilian credit bureaus for fraud prevention and compliance with legal obligations.

Pg777 uses the personal data collected for the following purposes:

• Account operation: Create, maintain, and manage your account on the platform, process deposits, bets, and withdrawals, and ensure all features function correctly.
• Identity verification: Confirm that you meet the eligibility requirements — particularly the legal age (18+) and residence in a permitted jurisdiction — and fulfill our legal Know Your Customer (KYC) obligations.
• Fraud and money laundering prevention: Monitor transactions and behavioral patterns to detect and prevent suspicious activity, in compliance with Brazilian anti-money laundering legislation.
• Operational communications: Send registration confirmations, security alerts, account notifications, bet confirmations, and other service-related communications.
• Customer support: Identify you when you contact our support team and ensure your request is handled with the correct account history.
• Marketing & promotions: With your consent, to send personalized offers, special bonuses, and promotional information tied to the Brasileirão calendar, Copa Libertadores, and other competitions. You can opt out of marketing communications at any time in your account settings or via the unsubscribe link in our emails.
• Platform improvement: Analyze usage data in aggregate to identify areas for improvement, test new features, and optimize the overall user experience.
• Compliance with legal obligations: Maintain records required by applicable Brazilian legislation governing the betting sector, respond to requests from competent authorities, and comply with judicial or regulatory orders.

All personal data processing carried out by PG777 is grounded in one of the legal bases set out in the LGPD (Law No. 13,709/2018). Below, we indicate the legal bases used for each primary purpose:

• Contract performance (Art. 7, V): Required for the performance of the contract established with the user at registration — covers account operation, bet processing, deposits, and withdrawals.
• Compliance with a legal or regulatory obligation (art. 7, II): Identity verification (KYC), anti-money laundering compliance, fulfillment of orders from competent authorities, and maintenance of legally required records.
• Legitimate interest (art. 7, IX): Fraud prevention, platform security, service improvement based on aggregated usage data, and monitoring of behaviors that violate the Terms and Conditions.
• Consent (art. 7, I): Sending marketing communications and personalized promotions. Consent may be withdrawn at any time without affecting your use of the platform.

When processing is based on consent, PG777 records the moment and scope of the consent provided by the user. Withdrawing consent for marketing does not affect processing carried out under other legal bases, such as contract performance.

PG777 may share personal data with third parties in the situations described below. In all cases, sharing is limited to what is strictly necessary for the stated purpose and is subject to contractual confidentiality and data protection obligations.

• Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit card, debit card, PicPay, Mercado Pago, and TED bank transfer, the required financial data is shared with the relevant payment providers. These partners operate as data processors under PG777's instructions.
• Identity verification (KYC) providers: Companies specializing in identity verification and fraud prevention may receive your identification data to confirm the authenticity of the information provided during registration.
• Technology providers: Cloud hosting services, analytics platforms, customer support tools, and other technology providers that help operate the pg777 platform may access personal data to the extent necessary to deliver their services.
• Game developers: Casino and poker game providers whose titles are available on PG777 may receive the minimum identification data required to authenticate the user session and ensure the game functions correctly.
• Competent authorities: PG777 responds to requests from Brazilian law enforcement, judicial, or regulatory authorities when there is a legal determination, court order, or need to prevent financial crimes.
• Independent auditors: Audit firms conducting compliance checks and RNG certification may access operational data in anonymized or aggregated form.

PG777 does not share data with social networks, third-party advertising platforms, or other websites without your explicit consent.

PG777 implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure. Among the key measures in place:

• Encryption in transit: All communication between your device and pg777's servers is protected by TLS/SSL protocol with a valid certificate.
• Encryption at rest: Sensitive data stored on pg777's servers is encrypted at rest, including identity documents and financial information.
• Payment data tokenization: Credit and debit card data is tokenized by payment providers and never stored in plain text on PG777's systems.
• Access control: Access to personal data is restricted to PG777 employees who need that information to perform their duties. All access is recorded in a log.
• Two-factor authentication: pg777 offers two-factor authentication for user accounts and requires it for all internal administrative access.
• Security monitoring: Intrusion detection systems and continuous anomaly monitoring operate 24 hours a day to identify and respond to security incidents.
• Security testing: Penetration tests and security audits are conducted periodically by independent specialized firms.

In the event of a security incident that may affect your personal data, pg777 will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.

PG777 uses cookies and similar technologies (such as pixels and local storage) for various purposes. When you first access the platform, you will see a cookie notice with configuration options.

Types of cookies used by pg777:

• Essential cookies: Required for basic platform functionality — authentication, session management, and security. These cannot be disabled, as the platform will not work without them.
• Performance and analytics cookies: They collect anonymized information about how you use PG777 — pages visited, session duration, errors encountered. This helps identify issues and improve the overall experience.
• Functionality cookies: They remember your configuration preferences — such as language, favorite filters, and preferred layout — so you don't have to set them up again every time you log in.
• Marketing cookies: With your consent, these are used to personalize offers and promotions displayed within the platform based on your usage behavior. They are not used for tracking across external websites.

You can manage your cookie preferences at any time through the platform's privacy settings panel. Disabling non-essential cookies may affect certain features, but it will not prevent basic use of pg777.

The LGPD grants you a set of rights over your personal data processed by pg777. All of them can be exercised by sending a request to privacidade@pg777.cash with the subject line "LGPD Rights – [your full name]". pg777 will respond to requests within 15 business days.

Pg777's operations may involve servers, cloud services, or technology providers located outside Brazil. Where international transfers of personal data occur, pg777 ensures they take place only under the following conditions established by the LGPD:

• For countries or organizations that the ANPD recognizes as providing an adequate level of data protection;
• Through standard contractual clauses approved by the ANPD that guarantee data subjects the same rights provided under the LGPD;
• To fulfill a legal or regulatory obligation by the controller;
• With the data subject's specific consent for that transfer.

In all cases of international data transfer, pg777 requires recipients to uphold the same level of data protection applied internally, through specific contractual confidentiality and security clauses.

PG777 does not accept registrations from or collect personal data of individuals under 18. The platform is intended exclusively for adults with full legal capacity and does not offer any content aimed at minors.

The registration process includes date-of-birth verification, and pg777 may request proof-of-age documents at any time. Accounts opened with false information indicating adulthood when the user is a minor will be immediately closed, and any collected data will be deleted as soon as the minor status is identified.

If you identify a minor using the platform, please notify pg777 immediately via 24h live chat or by emailing contato@pg777.cash. We treat these situations with the highest priority.

PG777 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet applicable legal obligations. The general retention periods are:

• Identification and account data: Retained while the account is active. After closure, kept for up to 5 years to meet legal obligations related to anti-money laundering and tax records.
• Financial transaction history: Retained for up to 5 years after the last transaction, as required by Brazilian anti-money laundering legislation.
• KYC documents (ID, proof of address): Retained for up to 5 years after account closure or last use of the platform.
• Customer support records: Retained for up to 2 years after the support interaction is closed.
• Analytics cookie data: Retained for up to 13 months from the date of collection.

After the applicable retention period, data is securely deleted or permanently anonymized. You may request early deletion of your data, subject to verification of any legal retention obligations that may prevent immediate deletion.

PG777 may update this Privacy Policy periodically to reflect changes in legislation, our data practices, or platform features. When material changes occur, PG777 will notify users via their registered email and/or an in-platform notification at least 15 days before the new version takes effect.

The most recent version of this Policy is always available at pg777.cash/privacy-policy, with the date of the last update shown at the top of the document. Continued use of the platform after the effective date of any changes constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account as described in the Terms and Conditions.

To exercise your rights as a data subject or to ask questions about this Privacy Policy, the available contact channels are:

• DPO (Data Protection Officer): privacidade@pg777.cash — for formal LGPD rights requests, with the subject line "LGPD Rights – [your name]". Response time: up to 15 business days.
• General support: contato@pg777.cash or 24h live chat on the platform — for general privacy and data protection inquiries.

If you feel that PG777 has not adequately addressed your privacy request, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for overseeing the LGPD in Brazil.