Privacy Policy of zz777 — Your Data Protected

Zz777 is the controller of the personal data processed under this policy, pursuant to the LGPD (Law No. 13,709/2018). This means we are responsible for defining the purposes and means of processing your information — and for ensuring that such processing is carried out securely, transparently, and in compliance with Brazilian law.

This policy applies to all zz777 services, including the zz777.express website, the mobile app for Android and iOS, and any electronic communications sent by the platform. By using any of these services, you are subject to this Privacy Policy.

Zz777 treats privacy as a strategic priority — not just a legal obligation. Brazilian bettors entrust the platform with their financial and personal data, and that trust is only maintained when data is handled with respect and transparency. That's exactly what you'll find here, without unnecessary legal jargon.

Zz777 collects different categories of data depending on how you interact with the platform:

Zz777 does not collect sensitive data such as racial origin, religious belief, health information, or biometrics, except where required by law for identity verification purposes in high-value transactions.

Zz777 uses your personal data exclusively for the following purposes:

• Operating your account: create, maintain, and manage your betting account, including login authentication, transaction history, and notification preferences.
• Process payments: process deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED transfer, as well as withdrawals to your registered bank account.
• Verify your identity (KYC): verify that you are who you claim to be, prevent fraud, money laundering, and multiple accounts, in compliance with the requirements of the Banco Central do Brasil.
• Personalize your experience: suggest relevant sports markets for you — Brasileirão, Copa do Brasil, Superliga de Vôlei, UFC — based on your usage history on the zz777 platform.
• Account communications: send transaction confirmations, security alerts, and updates on zz777 promotions and news. You can opt out of marketing communications at any time.
• Security and fraud prevention: monitor suspicious activity, protect the integrity of the platform, and investigate violations of the Terms and Conditions.
• Comply with legal obligations: maintain financial records as required by the Banco Central do Brasil, the Receita Federal, and applicable Sports Betting legislation.

All data processing by zz777 has a defined legal basis as established under Article 7 of the LGPD. The legal bases applied are:

• Contract performance (art. 7, V): processing required to operate your account, handle bets, and carry out financial transactions — without this data, the contracted service cannot be provided.
• Compliance with a legal obligation (art. 7, II): financial and identity data processing required by law — Banco Central, Receita Federal, and anti-money laundering legislation (Law No. 9.613/1998).
• Consent (Art. 7, I): for marketing communications, advanced personalization, and the use of non-essential cookies. Consent may be withdrawn at any time without affecting your use of the platform.
• Legitimate interest (art. 7, IX): for fraud prevention, platform security, and continuous improvement of zz777 services, provided these interests do not override your fundamental rights.

Zz777 does not sell your personal data. We never sell, rent, or share user information for third-party advertising or commercial purposes. Data sharing only occurs in the following specific situations, always on a lawful basis:

• Payment processors: banking and card data are shared with PCI-DSS certified gateways to process deposits via Pix, boleto, credit or debit card, PicPay, Mercado Pago, and TED. These processors act as data operators and are bound by data protection agreements.
• Identity verification (KYC): documents such as CPF and RG may be verified through credit bureau and Brazilian government database services to confirm identity and prevent fraud.
• Legal authorities: zz777 responds to lawful requests from Brazilian authorities — including the Federal Police, Public Prosecutor's Office, Receita Federal, and Banco Central do Brasil — when required by law or court order. We do not share data voluntarily beyond what is legally required.
• Infrastructure providers: hosting, cybersecurity, and technical analysis service providers that support zz777's operations have access only to the data strictly necessary for their function, always under confidentiality and data protection agreements.

Any data sharing with third parties is documented in zz777's processing activity records as required by the LGPD. You may request information about this record through the channel indicated in Section 12.

Zz777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper alteration:

• 256-bit SSL Encryption: all data transmissions between your device and zz777 servers are encrypted using TLS 1.3 protocol with 256-bit keys.
• Secure storage: personal data is stored on servers with strict access controls, firewalls, and continuous monitoring. Passwords are stored using irreversible hashing (bcrypt) — no zz777 staff member has access to your password in plain text.
• PCI-DSS Gateway: credit card data is processed and tokenized by certified payment gateways. zz777 never stores your full card number.
• Two-factor authentication (2FA): available to all users in the account settings area. We strongly recommend enabling 2FA for greater protection against unauthorized access.
• Security monitoring: intrusion detection systems and behavioral analytics monitor the platform around the clock to identify and respond to threats in real time.

In the event of a security incident that may pose a significant risk to users, zz777 will notify the ANPD (Autoridade Nacional de Proteção de Dados) and the affected data subjects within the timeframe required by the LGPD, with clear information about what occurred and the measures taken.

Zz777 uses cookies and similar technologies to operate the platform, personalize your experience, and analyze service usage. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping your session active, processing transactions, and securing your login. They cannot be disabled without affecting zz777's core functionality.
• Performance cookies: collect aggregated, anonymous data on how users navigate the zz777 site, helping identify technical issues and improve platform speed and stability.
• Personalization cookies: store preferences such as language, favorite sports, and display settings to personalize your experience on zz777. They can be disabled in your browser or app settings.
• Marketing cookies (with consent): used to display relevant zz777 promotional communications on other channels. Only activated with your explicit consent, which can be withdrawn at any time.

You can manage cookie preferences in your browser settings or mobile device OS. Disabling non-essential cookies will not prevent you from using the platform, but may limit some personalization features.

Zz777 retains your personal data only for as long as necessary for the purposes described in this policy or for the minimum period required by applicable Brazilian law.

Standard retention periods are:

• Active account data: retained for the full duration of the account and for up to 5 years after closure, as required by anti-money laundering legislation (Law No. 9,613/1998) and Banco Central do Brasil regulations.
• Financial transaction records: retained for a minimum of 5 years after each transaction, in accordance with the legal regulatory obligation applicable to payment operators in Brazil.
• Support communication data: retained for 2 years for quality assurance and dispute resolution purposes.
• Cookies and session data: session cookies expire when the browser is closed; persistent cookies have a maximum lifespan of 12 months, renewable with your consent.

Once the applicable retention period expires, data is either irreversibly anonymized or securely deleted from zz777's systems. Anonymization preserves aggregated statistics for service improvement without retaining any link to your identity.

The LGPD grants you a set of rights regarding your personal data processed by zz777. These rights are exercised free of charge, and zz777 will respond within 15 business days from the date the request is received:

Zz777 may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered. Material changes are communicated with a minimum advance notice of 15 days via registered email and through a prominent notice on the platform.

The "last updated" date at the top of this page is always revised when changes are made. We recommend reviewing this policy periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated terms.

If a change materially reduces your rights or significantly expands how your data is used, zz777 will request your explicit consent before applying it — not just a passive notice. That is our commitment to transparency with Brazilian users.

For any questions related to privacy, data protection, or exercising your rights as a data subject, you can reach zz777 through the following channels: