007games Privacy Policy – Your Data, Protected

The controller responsible for processing the personal data collected on the platform 007games is the company that operates the site 007games.best, operating exclusively in the Brazilian Sports Betting and online entertainment market.

For the purposes of this Privacy Policy, "007games", "we", "our", or "Platform" refer to the data controller and the platform accessible at 007games.best, including the mobile app available for Android and iOS.

The data protection officer (DPO) can be reached by email at contato@007games.best for any matters related to the processing of personal data, the exercise of rights guaranteed under the LGPD, or questions about this Policy.

2.1 Data provided directly by the user

When you create an account and use 007games, you provide us directly with:

• Identification data: full name, date of birth, CPF, mobile phone number, and email address;
• Address data: ZIP code, street address, number, complement, neighborhood, city, and state;
• Verification documents: image of a national ID (RG), driver's license (CNH), or passport, along with a selfie with the document, collected during the KYC (Know Your Customer) process;
• Financial data: Pix key, bank details for wire transfer, partial credit/debit card number (the full card number is never stored on our servers);
• Stated preferences: favorite sports, preferred teams, notification settings.

2.2 Data generated through platform use

During normal use of 007games, we automatically collect:

• IP address and approximate geolocation data;
• Device type and version, operating system, and browser;
• Full history of bets, deposits, withdrawals, and bonuses used;
• Access logs with date, time, and session duration;
• Browsing patterns within the platform (pages visited, games accessed, time spent in each section);
• Technical performance data: latency, loading errors, and stream quality in the live casino.

2.3 Third-party data

In some cases, we may receive data from external sources for verification and security purposes, such as credit bureaus for identity confirmation, politically exposed persons (PEP) lists required by anti-money laundering regulations, and payment providers such as Pix, PicPay, and Mercado Pago to confirm transactions.

007games uses the data it collects exclusively for the following purposes:

3.1 Account Operation and Service Provision

Create and manage your account, process deposits and withdrawals via Pix, boleto, card, and other accepted methods, settle sports bets, record live casino game results, poker tables, and crash games, and communicate relevant account information.

3.2 Identity Verification and Fraud Prevention

To verify user identities as required by industry regulations, and to detect and prevent fraud, money laundering, duplicate accounts, and other platform misuse. This purpose is essential to the security of all 007games users.

3.3 Responsible Gambling

Monitor behavioral patterns that may indicate problem gambling, enforce deposit limits set by the user, process self-exclusion requests, and maintain records of users who have chosen to self-exclude from the platform.

3.4 Experience Personalization

Offer personalized game, betting, and promotion recommendations based on your preferences and usage history. Send notifications about your favorite team's matches in the Brasileirão, high-guarantee poker rounds, or live casino promotions when enabled in your communication preferences.

3.5 User Support

Use interaction history and account data to provide efficient support via live chat and email, resolve betting disputes, process complaints, and audit poker hands when necessary.

3.6 Legal and Regulatory Obligations

Comply with legally imposed obligations, including mandatory financial records, reporting of suspicious transactions to the relevant authorities, and responding to legitimate requests from public authorities pursuant to a formal court or administrative order.

As required by the LGPD, all data processing at 007games has a specific legal basis. The main legal bases used are:

• Contract performance (Art. 7, V): processing required to create your account and handle bets, deposits, and withdrawals – without this data, the service cannot be provided;
• Compliance with a legal obligation (Art. 7, II): identity verification, anti-money laundering compliance, and mandatory financial record-keeping;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, and behavioral pattern analysis to protect users;
• Consent (Art. 7, I): marketing communications and personalized recommendations – you may withdraw this consent at any time in your account settings.

007games does not sell users' personal data. Sharing occurs only in the situations described below, all of which are governed by contractual data protection safeguards:

5.1 Payment Providers

To process deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, we share only the data strictly necessary with each payment processor. These providers have access solely to the information required to complete the specific transaction and are contractually prohibited from using that data for any other purpose.

5.2 Game Providers

Evolution Gaming, Pragmatic Play Live, Ezugi, and other live casino, slots, and crash games providers receive an anonymized account identifier and the bet amount in order to process rounds. Your real name, CPF, and financial data are never shared with game providers.

5.3 Identity verification

For the KYC process, we may use specialized document verification services. These services receive the document images provided and return only the verification result (approved/rejected). Images are not stored by these services after the review is complete.

5.4 Legal obligations

007games may share data with public authorities — including the Federal Revenue Service, Public Prosecutor's Office, and Federal Police — exclusively when required by court order, legal warrant, or formal regulatory requirement. We do not comply with informal requests or those lacking proper legal basis.

Personal data collected by 007games is stored on servers located in Brazil or in jurisdictions with an equivalent level of data protection, with strict access controls and encrypted backups.

6.1 Retention Periods

Retention periods vary according to the data category and the purpose of processing:

• Active account data: retained for the full duration of the account and for up to 5 years after closure, as required by the Brazilian Civil Code;
• Financial records (deposits and withdrawals): retained for a minimum of 5 years, in accordance with tax and compliance obligations;
• Betting history: retained for a minimum of 3 years for audit and dispute resolution purposes;
• Verification documents (KYC): retained for the legally required period under anti-money laundering regulations;
• Access and security logs: retained for 12 months for incident investigation purposes;
• Marketing data (with consent): retained until the user revokes their consent.

6.2 Data Deletion

Once the applicable retention period expires, data is permanently deleted or irreversibly anonymized. Users may request early deletion by submitting a formal request, though this may not be possible for data subject to active legal retention obligations.

007games applies technical and organizational measures proportionate to the risk to protect users' personal data:

7.1 Technical Measures

• TLS encryption in all communication between the user's device and our servers;
• Encryption at rest for sensitive data stored in the database;
• Multi-Factor Authentication (MFA) for internal employee access to systems containing personal data;
• Continuous monitoring with automatic alerts for anomalous access patterns;
• Penetration testing periodic audits conducted by specialized teams;
• Encrypted backups with geographically distributed storage.

7.2 Organizational measures

• Access to personal data restricted by the principle of least privilege – only those who need it to perform their role are granted access;
• Regular data protection training for all employees;
• Clean desk and locked screen policy for devices with access to sensitive data;
• Confidentiality and data protection agreements with all vendors that process user data.

007games uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and analyze service performance.

8.1 Types of cookies used

• Essential cookies: required for basic platform operation – login session, betting cart, language preferences. They cannot be disabled without compromising your use of the platform;
• Analytical cookies: collect information on how users navigate 007games to identify usability issues and improve the experience. Data is aggregated and anonymized;
• Functionality cookies: remember preferences such as odds display format (decimal/fractional), favorite game notifications, and live casino settings.

8.2 Cookie Management

You can manage non-essential cookie preferences directly in your browser settings or in your 007games account preferences. Disabling analytics and functionality cookies does not affect platform access, but may limit some personalization features. Essential cookies cannot be disabled without impacting login and betting functionality.

007games is a platform strictly prohibited for users under 18. We do not intentionally collect personal data from individuals under 18, and we do not allow minors to create accounts or use any feature on the platform.

The identity verification process includes date of birth confirmation. Accounts created with false information to circumvent the age restriction will be closed immediately upon detection, and the data will be deleted in accordance with applicable legal retention periods.

If you believe a minor has created an account on 007games, please contact us immediately at contato@007games.best or via live chat so the matter can be investigated and resolved as quickly as possible.

The LGPD grants you, as the data subject whose personal data is processed by 007games, the following rights:

To exercise any of these rights, please contact the 007games DPO by email at contato@007games.best with the subject line "LGPD – [request type]". We will respond within 15 calendar days, as required by law.

Some service providers used by 007games — especially live casino providers such as Evolution Gaming — operate servers in other countries. When user data is transferred outside Brazil, 007games ensures the transfer takes place only to countries with an adequate level of protection recognized by the ANPD, or under standard contractual clauses that guarantee protection equivalent to the LGPD.

In all cases of international data transfer, the data shared is limited to the strict minimum necessary to deliver the service – session identifier and bet amount for live games, with no complete personal data such as CPF, full name, or financial details.

In the event of a security incident that could result in significant risk or harm to data subjects — such as unauthorized access to personal or financial data — 007games will follow the protocol below:

• Immediate incident containment and assessment of the scope of affected data;
• Notification to the National Data Protection Authority (ANPD) within 2 business days of incident confirmation, as required by the LGPD;
• Notification to affected users via their registered email within 5 calendar days, including a clear description of what occurred, which data was compromised, the measures taken, and guidance on protecting their account;
• A complete final incident report made available to the ANPD within the statutory deadlines.

007games maintains an up-to-date incident response plan and runs periodic simulations to ensure the team is ready to act quickly in any situation involving user data.

007games may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. All changes will be communicated with a minimum advance notice of 15 calendar days by registered email and a prominent platform notification before taking effect.

The date of the most recent update will always be displayed at the top of this page. We recommend reviewing this Policy periodically. Continued use of the platform after any changes take effect constitutes acceptance of the new version.

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, please contact the 007games Data Protection Officer (DPO):

• Email: contato@007games.best – subject line: "Privacy – [your request]"
• Live chat: available 24 hours a day on the 007games platform, under the "Privacy & Data" option

The response time for data subject rights requests is up to 15 calendar days from receipt of the complete request. In more complex cases, we may extend this deadline by an additional 15 days, with prior notice and justification.

If you are not satisfied with our response or believe your rights as a data subject have been violated, you may file a complaint directly with the National Data Protection Authority (ANPD).