Privacy Policy bis777 — Data Protection in Brazil

Bis777 collects only the personal data necessary to provide platform services, verify your identity, process your Pix deposits and BRL withdrawals, and meet applicable legal obligations. The categories of data collected are:

Bis777 never intentionally collects data from users under 18. If we identify that an account was created by a minor, all associated data will be deleted immediately and the account closed as described in the minors section.

Personal data collected by bis777 is used exclusively for the purposes described at the time of collection. The main purposes are:

• Account operation: create and maintain your bis777 profile, process registration, verify eligibility, and manage account preferences.
• Payment processing: process deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED through partner banks (Nubank, Itaú, Bradesco, Banco do Brasil); process withdrawals in BRL to your verified bank account.
• Identity verification: meet Know Your Customer (KYC) legal requirements and prevent fraud, money laundering, and access by minors.
• Provision of gaming services: provide the catalog of slots, crash games, jackpots, live casino, and Sports Betting; record results; calculate and credit prizes in BRL.
• Responsible gambling: monitor usage patterns that may indicate problem gambling and trigger the configured protection tools — deposit limits, session breaks, and self-exclusion.
• Communication: send transactional notifications (deposit confirmations via Pix, withdrawals, bet results) and, with your consent, communications about promotions, bonuses, and platform news.
• Security and compliance: detect and prevent fraudulent activity, maintain records required under Brazilian law, and respond to legal obligations or court orders.
• Service improvement: analyze aggregated, anonymized usage data to improve the bis777 platform experience, fix technical issues, and develop new features.

Bis777 does not sell or rent players' personal data. Information is shared only in the following situations, and always limited to the minimum necessary for each purpose:

• Payment processors: financial data is shared with the institutions responsible for processing Pix, boleto, card, and TED transactions in Brazil. These partners act as data processors and are bound by confidentiality agreements and LGPD compliance requirements.
• Game providers: username (never CPF or financial data) may be shared with providers such as Pragmatic Play, Evolution, Microgaming, NetEnt, and Spribe for game operation and result auditing purposes.
• Identity verification services: documents submitted for KYC verification are processed by specialized compliance partners under contractual confidentiality.
• Competent authorities: bis777 shares data when required by law, court order, or directive from the ANPD, the Banco Central do Brasil, or any other competent regulatory authority. In such cases, you will be notified whenever legally permitted.
• Auditors & consultants: contracted professionals hired to audit the platform (security, financial, compliance) may have limited access to data in a controlled, confidential environment.

Bis777 implements technical and organizational measures to protect players' personal data against unauthorized access, alteration, disclosure, or destruction. The platform's key security layers include:

• 256-bit SSL Encryption across all pages and all data flows — from registration to Pix processing.
• Tokenized financial data: credit/debit card details are never stored in plain text — only encrypted tokens generated by PCI-DSS certified payment processors.
• Two-factor authentication (2FA) available to all players in the bis777 account security settings.
• Continuous monitoring of access and activity for detecting suspicious patterns, intrusion attempts, and anomalous account usage.
• Internal access controls: bis777 employees access players' personal data only to the extent required to perform their duties, with full access audit logs maintained.
• Regular backups of data in a secure environment, with a disaster recovery policy to ensure service continuity.

In the event of a security incident that may affect your personal data — such as a breach that poses a real risk to account holders — bis777 will notify the ANPD and the affected players within the legal timeframe established by the LGPD, with clear information about what happened and the steps taken.

Bis777 uses cookies and similar technologies to ensure the platform runs properly, personalize the player experience, and analyze service usage. The types of cookies used are:

Bis777 retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. Retention periods vary according to the category of data and the corresponding legal requirement:

• Identification & KYC data (CPF, RG, proof of address): retained for the full duration of the active account and for at least 5 years after closure, as required by anti-money laundering legislation (Law No. 9,613/1998).
• Financial transaction history (Pix deposits, BRL withdrawals, betting history): retained for at least 5 years after each transaction, in accordance with fiscal and regulatory obligations.
• Contact data & communications: retained for as long as the account is active and for up to 2 years after closure, unless the account holder requests early deletion.
• Technical and security logs: retained for up to 12 months for diagnostic purposes and security incident investigation.
• Marketing data (preferences, consents): retained until consent is withdrawn or the account is closed.

Once the applicable retention period ends, data is securely deleted or anonymized so that the account holder can no longer be identified. You may request early deletion of your data — except where bis777 has a legal obligation to retain it — by emailing suporte@bis777.best.

Brazil's General Data Protection Law grants you, as a data subject, a set of rights that bis777 fully respects. Here is what you can request at any time:

If you believe that bis777's processing of your data violates the LGPD and your request has not been adequately addressed, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian regulatory authority responsible for overseeing compliance with the law.

The bis777 platform is strictly intended for users aged 18 and over. bis777 does not knowingly collect, store, or process personal data from minors.

• Registration requires a date of birth — accounts created with a date indicating the user is underage are automatically blocked at the time of registration.
• Identity verification (photo ID submission) is an additional layer of protection to ensure only adults can access the platform's services.
• If bis777 identifies at any point that personal data from a minor was inadvertently collected — for example, due to a false date of birth entered during registration — the account will be immediately closed, all of the minor's data will be deleted, and any deposited funds will be returned to the legal guardian upon identity verification.

Bis777 has formally appointed a Data Protection Officer (DPO), as required by Article 41 of the LGPD. The DPO is the official point of contact between bis777, its players, and the ANPD for all matters related to the processing of personal data.

To exercise your rights as a data subject, report a privacy incident, or ask questions about this Policy, please use the following channels:

• DPO Email / Privacy Channel: suporte@bis777.best — use the subject line "Privacy LGPD" for priority handling. Responses within 15 business days.
• Live chat: available 24/7 on the platform for initial privacy inquiries. For formal requests to exercise your rights, please use the email address provided.
• Language: all bis777 support and privacy channels operate in Brazilian Portuguese.

This Privacy Policy may be updated periodically to reflect changes in legislation, bis777's services, or data processing practices. Material changes are communicated via the registered email address at least 7 calendar days before taking effect. The "last updated" date at the top of this document is revised with every edit.