722bet Privacy Policy — Data Protection and LGPD

1. Introduction and Data Controller

This Privacy Policy describes how 722bet — Sports Betting and online entertainment platform available at 722bet.click — collects, uses, stores, shares, and protects its users' personal data in accordance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable Brazilian legislation.

The 722bet acts as controller of the personal data collected on this platform, being responsible for decisions regarding the purposes and means of processing. To exercise your rights or clarify any questions, the official channel is the email privacy@722bet.click.

This policy applies to all registered users and visitors of the 722bet.click platform, regardless of how they access it — desktop, mobile, or any other device.

2. Personal Data Collected

The 722bet collects only the data strictly necessary for each stated purpose — the data minimization principle established by the LGPD. Data processed includes:

• Registration data: full name, CPF, date of birth, residential address, email, and mobile number.
• Identity verification (KYC) data: image of an official ID document (national ID, driver's license, or passport) and, where required, proof of address.
• Financial data: Pix key linked to the account, deposit and withdrawal history, payment method used (boleto bancário, credit card, debit card, PicPay, Mercado Pago, TED). Card numbers are not stored by 722bet.
• Platform usage data: betting history, preferred bet types, amounts wagered, access frequency, usage times, and interactions with promotions.
• Technical data: IP address, browser type and version, operating system, device identifier, session cookies, and approximate geolocation data.
• Communications: records of support conversations via chat, emails exchanged with the platform, and any formal complaints on file.

3. How We Collect Your Data

Data is collected in different ways throughout your interaction with the 722bet:

• Directly from you: in the registration form, during the KYC verification process, when entering payment details, when contacting support, or when taking part in promotions.
• Automatically: through cookies, tracking pixels, and similar technologies when you access the platform — even without an account. See the Cookies section for details.
• From third parties: from partner payment processors (to confirm transactions via Pix, bank slip, or card), from identity verification providers, and, where required by law, from Brazilian regulatory authorities.

4. Purpose of Data Processing

The 722bet uses your personal data for the following purposes:

• Account operation: create, manage, and maintain your active account on the platform, including access authentication and password recovery.
• Payment processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED; process withdrawals and issue transaction receipts.
• Compliance with legal obligations: verify age eligibility, carry out the KYC process, meet tax obligations, prevent money laundering (AML), and respond to requests from competent authorities.
• Experience personalization: recommend sports modalities and promotions based on your usage history, personalize the interface, and improve the relevance of communications sent to you.
• Security and fraud prevention: monitor suspicious activity, identify multiple accounts, detect bonus abuse, and protect the integrity of the platform.
• Communications: send transaction confirmations, bet notifications, promotional communications, and relevant platform updates — with the option to unsubscribe at any time.
• Product improvement: analyze aggregated usage patterns (with no individual identification) to improve features, fix bugs, and develop new functionality.

5. Legal Basis for Processing (LGPD)

The 722bet processes personal data only where a legal basis under the LGPD exists. The bases applicable to each purpose are:

• Contract performance (Art. 7, V): processing required to operate your account and handle bets, deposits, and withdrawals — in other words, to deliver the service you signed up for.
• Compliance with a legal or regulatory obligation (Art. 7º, II): identity verification (KYC), anti-money laundering compliance, retention of financial records as required by tax regulations, and compliance with court orders.
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, aggregated usage analysis for product improvement, and essential operational communications.
• Consent (Art. 7, I): sending marketing communications, using non-essential cookies, and sharing data for advanced personalization. Consent may be withdrawn at any time without affecting your use of the platform.

6. Sharing Data with Third Parties

The 722bet does not sell personal data. Data sharing occurs only in the following situations, always with appropriate safeguards:

• Payment processors: financial data is shared with partners such as Pix operators, card acquirers (Visa, Mastercard), PicPay, Mercado Pago, and banks that process TED transfers — exclusively to settle transactions.
• KYC verification service providers: companies contracted to verify identity documents and check eligibility. These partners are contractually required to process data solely for that purpose.
• Technology infrastructure providers: hosting, security, performance monitoring, and technical support services — all subject to data processing agreements with confidentiality clauses.
• Government and regulatory authorities: when required by law, court order, Banco Central do Brasil regulation, or other competent authorities, 722bet provides the requested data through formal legal process.
• Affiliate program: if you were referred by an affiliate partner, limited data (such as registration confirmation and first deposit) may be shared with the affiliate for commission purposes — with no exposure of sensitive data or detailed history.

In all cases of data sharing, 722bet requires that the third parties involved adopt security measures consistent with those of the platform and use the data strictly for the contracted purpose.

7. International Data Transfers

The 722bet may use technological infrastructure from service providers whose servers are located outside Brazil. When this occurs, we take steps to ensure the transfer complies with Art. 33 of the LGPD, including:

• Verification that the destination country provides an adequate level of data protection.
• Execution of standard contractual clauses with the foreign service provider.
• Use of internationally recognized certifications (such as ISO 27001) as an additional guarantee.

Brazilian users' data is never transferred to countries that do not offer a level of protection equivalent to the LGPD without the appropriate contractual safeguards in place.

8. Data Retention and Deletion

The 722bet retains your personal data only for as long as necessary to fulfill each purpose or legal obligation. General retention periods are:

• Active account data: retained for the entire period your account remains active on the platform.
• Financial and transaction data: retained for 5 years after the last transaction, as required by Brazilian tax and anti-money laundering legislation.
• KYC records: retained for 5 years after account closure, as required by regulatory obligations.
• Access and security logs: retained for 6 months, as set forth in the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014).
• Customer support data: retained for 2 years after the ticket is closed, for potential disputes.

After the periods above, data is securely deleted or irreversibly anonymized. Early deletion requests are evaluated based on the legal grounds for each processing activity — data retained under a legal obligation cannot be deleted before the applicable regulatory deadline.

9. Data Security

The 722bet adopts technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. The key measures currently in place include:

• SSL/TLS encryption on all communications between the user and the platform.
• Password storage using irreversible cryptographic hashing (bcrypt) — never in plain text.
• Access to personal data is restricted to employees and service providers, protected by multi-factor authentication and the principle of least privilege.
• Continuous monitoring of access and intrusion attempts with real-time alerts.
• Periodic penetration testing and security audits conducted by specialized teams.
• Card data processed exclusively by PCI-DSS certified partners — not stored on 722bet's servers.

No system is 100% breach-proof. In the event of an incident involving your data, 722bet will notify affected users and the ANPD within the timelines and procedures established by the LGPD.

10. Cookies and Tracking Technologies

The 722bet uses cookies and similar technologies to ensure the platform operates correctly and to improve your experience. The types of cookies used are:

• Essential cookies: required for session authentication, keeping your login active, and basic platform functionality. They cannot be disabled without affecting your use of the service.
• Performance cookies: collect anonymized data on how users navigate the platform — which pages are most visited, where errors occur — for technical improvements.
• Preference cookies: store your language settings, favorite sport, and preferred layout to personalize your experience on future visits.
• Analytical cookies: used to understand aggregated usage patterns, always in anonymized form, with no individual identification.

You can manage your cookie preferences in the platform's settings panel or through your browser options. Disabling non-essential cookies does not prevent you from using 722bet, but may reduce some personalization features.

11. Minors

The 722bet is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. The registration process includes date of birth and CPF verification, and the KYC process confirms the account holder's age.

If 722bet determines that an account was created by a minor — whether through false information at registration or following a report — the account will be immediately closed, all balances will be frozen for review, and the data will be deleted in accordance with applicable legal retention requirements.

If you are the guardian of a minor and believe they have created an account on the platform, please contact us immediately via support or at privacy@722bet.click.

12. Your Rights as a Data Subject (LGPD)

The LGPD grants you a set of rights over your personal data processed by 722bet. You may exercise any of these rights at any time through the data subject channel:

• Access: request a copy of all personal data that 722bet holds about you.
• Correction: request the update or correction of inaccurate, outdated, or incomplete data.
• Portability: request an export of your data in a machine-readable format for portability to another service.
• Deletion: request the deletion of your data, subject to mandatory retention periods established by law.
• Withdrawal of consent: withdraw any consent previously given — such as for marketing communications or non-essential cookies — without affecting your ability to use the platform.
• Objection: object to processing carried out on the basis of legitimate interest, with justification.
• Sharing information: request a list of the third parties with whom your data has been shared.
• Review of automated decisions: request human review of any automated decision that has had a significant impact on you.

All requests are answered within 15 business days. In more complex cases, this period may be extended by an equal amount of time, with prior notice to the data subject.

13. Data Subject Channel & Data Protection Officer (DPO)

The 722bet has appointed a Data Protection Officer (DPO) as required by the LGPD. To exercise your rights, file a complaint, or ask questions about how your personal data is handled, please use the official channel:

• DPO Email: privacy@722bet.click
• Support chat: available 24 hours on the platform — for urgent issues related to account security.

The DPO serves as the point of contact between users, 722bet, and the ANPD (Autoridade Nacional de Proteção de Dados). If you believe a request has not been properly fulfilled, you have the right to file a complaint directly with the ANPD.

14. Changes to This Privacy Policy

The 722bet may update this Privacy Policy periodically to reflect changes in legislation, platform practices, or the services offered. Material changes will be communicated by email at least 7 days before taking effect.

The current version is always the one available on this page, with the last updated date shown at the top. Continued use of the platform after new terms take effect constitutes acceptance of the changes. If you disagree with any update, you may request account closure before the effective date.

For questions about this policy or about how your personal data is handled at 722bet, please contact us at privacy@722bet.click or via the support chat available 24 hours a day.