776f Privacy Policy — Protecting Your Data

For the purposes of the LGPD, the controller of personal data collected through the 776f platform is the company operating the site 776f.best. The controller is responsible for decisions regarding data processing — what information is collected, for what purpose, how long it is stored, and with whom it may be shared.

776f's Data Protection Officer (DPO) can be contacted for privacy-related matters at suporte@776f.best, with the subject line "Data Protection — LGPD". All formal requests related to personal data are handled within 15 business days, as required by Brazilian law.

776f only collects the data necessary to operate the platform securely, meet legal obligations, and deliver a personalized experience for Brazilian users. Our collection is proportionate — we never collect more than we need.

Identity documents (national ID, driver's license, passport) and proof of address may be requested during the KYC verification process. These documents are stored in encrypted form and accessed exclusively by 776f's compliance team when required.

Every data processing activity carried out by 776f has a defined legal basis, as required by Article 7 of the LGPD. We do not collect or process any data without adequate legal justification. The legal bases we apply are:

• Contract performance: Data required to fulfill the service agreement entered into at registration — such as processing Pix deposits, crediting winnings and withdrawing funds.
• Compliance with a legal or regulatory obligation: Data required by law, such as information for anti-money laundering purposes, user identification and reporting to regulatory authorities when necessary.
• Legitimate interest: Data used for platform security, fraud prevention, and service improvement — always with safeguards to protect users' interests.
• Consent: For sending marketing communications, personalizing offers and using non-essential cookies — you may withdraw consent at any time.
• Credit protection: Checks related to financial transactions carried out on the platform, within the limits permitted by law.

Data collected by 776f is used for specific and legitimate purposes. We never use your data for purposes other than those we have disclosed. See how each usage category applies:

• Account operation: Account creation, maintenance and security — login, password recovery, suspicious access alerts and session control.
• Financial processing: Deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago; withdrawal processing; transaction history.
• Identity verification (KYC): Confirmation that you are over 18, CPF verification, and documentation required under anti-money laundering regulations.
• Fraud prevention: Detection of multiple accounts, bot usage, undue chargebacks, coordinated betting and any pattern indicating a breach of the terms of use.
• Responsible gambling: Monitoring of gambling patterns to identify signs of problematic behavior and offer proactive support when needed.
• Service communications: Emails about your account, transactions, policy updates, and security notices — these communications are essential and cannot be disabled.
• Marketing (with consent): Personalized offers, Brasileirão and Libertadores promotions, slots news and platform updates — you can unsubscribe at any time.
• Product improvement: Aggregated and anonymized analysis of how users interact with the platform, used to improve features, fix issues, and guide development priorities.

776f does not sell personal data. Sharing with third parties occurs only in the situations below, always with appropriate safeguards in place to protect your data:

• Payment processors: PCI-DSS certified gateways that process transactions via Pix, boleto, card, PicPay and Mercado Pago. These partners receive only the data strictly necessary to complete the transaction.
• Game providers: Companies such as Pragmatic Play, PG Soft, Evolution, and others receive technical identifiers (not your name or CPF) to operate game sessions.
• Identity verification services: Specialized KYC platforms that assist with document validation and fraud prevention, operating under confidentiality agreements.
• Authorities and regulatory bodies: When required by law, court order, or a legitimate request from a competent authority in Brazil — such as the Federal Police, Receita Federal, or COAF (Financial Activities Control Council).
• Technology infrastructure: Cloud hosting providers, email services, and technical analytics tools operate under contracts with data protection clauses aligned with the LGPD.

776f implements technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. The main security measures in place are:

• SSL/TLS 256-bit encryption on all data transmissions between the user and 776f's servers.
• Passwords are stored using secure hashing (bcrypt) — 776f never has access to your password in plain text.
• Two-factor authentication (2FA) available in the account dashboard for users who want an extra layer of protection.
• Continuous monitoring for unauthorized access attempts, brute-force attacks, and suspicious access patterns.
• Role-based internal access control — each 776f team member can only access the data necessary to perform their role.
• Regular encrypted backups stored in geographically separate locations to ensure recovery in the event of an incident.
• Periodic security testing and vulnerability assessments carried out by a specialized team.

In the event of a security incident resulting in significant risk or harm to users, 776f will notify the affected individuals and the National Data Protection Authority (ANPD) within the timeframe established by the LGPD — generally within 72 hours of becoming aware of the incident.

776f retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The criteria that determine the retention period are:

• Active account: While you maintain an active account at 776f, your data is retained in full to support the operation of our services.
• After account closure: Identification data and financial transaction records are retained for up to 5 years after account closure, as required by Brazilian anti-money laundering legislation and tax compliance regulations.
• Betting history: Retained for up to 5 years for regulatory and responsible gambling purposes.
• Support data: Support interaction history is retained for 2 years for quality assurance and dispute resolution purposes.
• Marketing data: Removed immediately after consent is withdrawn — you will stop receiving communications within 5 business days.

The LGPD grants you, as the data subject, a set of rights that 776f is fully committed to upholding. See how to exercise each one:

• Access: Request a copy of all personal data we hold about you. We will respond within 15 business days with a full report.
• Correction: If any data is incorrect or out of date, you can request a correction. Basic account details (email, mobile number) can be updated directly in your account dashboard.
• Anonymization, blocking, or deletion: Unnecessary, excessive or non-LGPD-compliant data may be anonymized, blocked or deleted — subject to legal retention exceptions.
• Portability: Request your data in a structured, machine-readable format (JSON or CSV) to transfer it to another controller, in accordance with ANPD regulations.
• Sharing information: You have the right to know which public or private entities your data has been shared with.
• Consent withdrawal: Withdraw your consent for processing based on this legal ground — such as marketing — at any time, at no cost.
• Objection: If you believe that any processing based on legitimate interest is harmful to your rights, you may object and 776f will assess the case individually.
• Review of automated decisions: If any decision that affects you is made solely by an algorithm, you have the right to request human review.

To exercise any of these rights, contact us via live chat or send an email to suporte@776f.best with the subject line "LGPD Rights — [Your Right]". All requests are handled within 15 business days.

776f uses cookies and similar technologies to ensure the platform runs correctly, improve user experience, and — with your consent — personalize content and ads. When you first access the platform, you are notified about the use of cookies and can manage your preferences.

• Strictly necessary cookies: Essential for platform operation — login session, bet slip, language preferences. Cannot be disabled.
• Analytical cookies: Collect aggregated data on how you use the platform — pages visited, session duration, errors encountered. Used to improve 776f. Can be disabled.
• Functional cookies: Remember your preferences — such as favorite games, football league filters and display settings. They improve your experience without collecting sensitive data. Can be disabled.
• Marketing cookies: Used to personalize offers and measure campaign effectiveness — activated only with your express consent. May be withdrawn at any time.

776f is a platform exclusively for users aged 18 and over. We do not intentionally collect data from anyone under 18 and do not permit minors to register or use any of the platform's services.

• Every registration requires a date of birth and CPF verification — data that allows us to confirm legal age.
• Accounts identified as belonging to users under 18 are closed immediately, with balances frozen while verification is in progress.
• If you are a parent or guardian and believe a minor has used the platform, please contact 776f support immediately at suporte@776f.best.
• Any data belonging to a minor that is identified will be permanently deleted from 776f's systems without the need for a formal request.

Some of 776f's technology partners — such as cloud infrastructure providers and international game providers — may process data on servers located outside Brazil. When this occurs, 776f adopts the safeguards required by the LGPD to ensure your data remains protected to the same security standard applied in Brazil:

• Specific international transfer agreements with data protection clauses aligned with the LGPD.
• Data sharing only with countries or organizations that provide an adequate level of data protection, as assessed by the ANPD.
• Data minimization in transfers — only what is strictly necessary to deliver the service is shared with international partners.
• Contractual prohibition on sub-processing data without prior authorization from 776f.

Most data from Brazilian users is processed on servers located in Brazil or in North American and European countries with data protection legislation equivalent to or stronger than the LGPD.

776f may update this Privacy Policy periodically to reflect changes in Brazilian law, the services offered, or data processing practices. Updates follow these rules:

• Material changes are communicated by email to your registered address at least 10 days before the effective date.
• The "last updated" date at the top of this page is always refreshed with each policy revision.
• Continued use of the 776f platform after the effective date of the updated terms constitutes acceptance of the revised policy.
• If any changes reduce your rights as a data subject, 776f will request new explicit consent before those changes take effect.
• Previous versions of this policy are archived and can be requested through support for reference purposes.

We recommend reviewing this policy periodically. If you have any questions about changes, 776f support is available 24 hours a day via live chat or at suporte@776f.best.

For any questions related to the processing of personal data, the exercise of your rights as a data subject, or this Privacy Policy, you can contact 776f's Data Protection Officer (DPO) through the channels below:

• Email: suporte@776f.best — subject line "Data Protection — LGPD". Responded to within 15 business days.
• Live chat: Available 24 hours a day, 7 days a week. For privacy matters, mention "LGPD" at the start of your conversation to be directed to the specialized team.
• FAQ: Our FAQ center at /faq answers the most common questions about privacy and data protection.

You also have the right to file a complaint directly with the National Data Protection Authority (ANPD) if you believe your rights as a data subject have been violated and 776f has not adequately resolved the issue. The ANPD is the regulatory body responsible for enforcing the LGPD in Brazil.