07win Privacy Policy – LGPD Data Protection

1Who We Are — Your Data Controller

The 07win, operated at 07win.click, is the controller of the personal data collected on this platform. This means 07win is the entity responsible for making decisions about how, why, and for how long your personal data is processed.

As data controller, 07win assumes the obligations set out in Brazil's General Data Protection Law (LGPD – Law No. 13.709/2018) and is committed to handling your data with transparency, security, and full respect for your rights as a data subject.

This Privacy Policy applies to all players registered on 07win, regardless of how they access the platform — via mobile browser, desktop, or any other device. By creating an account and using the platform, you confirm that you have read and understood this policy.

2What Data We Collect

07win collects only the information necessary to operate the platform, process transactions, verify identities, and meet regulatory obligations. The main types of data collected are outlined below:

Information provided directly by you

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address.
• Identity verification documents (KYC): copy of national ID, driver's license, or passport, plus proof of address — requested before the first withdrawal.
• Payment data: Pix key details, credit or debit card information (tokenized — 07win does not store the full card number), PicPay or Mercado Pago details, or bank account information for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil).
• Support communications: chat history and emails exchanged with the 07win support team.

Automatically collected data

• Usage data: pages visited, games played, bets placed, access times, and session duration.
• Technical data: IP address, device type, operating system, browser used, and session identifiers.
• Cookie data: information stored locally in your browser to keep your session active, personalize your experience, and analyze platform usage (detailed in section 7).

3How and Why We Use Your Data

07win uses collected data exclusively for the purposes described below. No data is used for any purpose unrelated to the operation of the platform and compliance with legal obligations:

• Account creation and management: process registration, verify player eligibility (18 years of age or older, valid CPF, not listed on any self-exclusion registry), and maintain secure account access.
• Financial transaction processing: process deposits via Pix, bank slip (boleto bancário), credit or debit card, PicPay, Mercado Pago, and TED, and handle withdrawals via Pix or TED to registered bank accounts.
• Identity verification (KYC): confirm that the information provided at registration corresponds to a real person, of legal age, residing in Brazil, as required by regulatory standards.
• Fraud prevention and security: monitor access patterns and suspicious transactions, detect multiple accounts linked to the same individual, prevent money laundering, and protect the integrity of the platform.
• Player support: review communication history to resolve disputes, respond to inquiries, and improve the quality of our Portuguese-language support.
• Experience personalization: tailor promotions, game suggestions, and communications based on usage history — always respecting your privacy and without building intrusive profiles.
• Fulfillment of legal obligations: comply with orders from competent authorities, respond to legal proceedings, and maintain records required by law for the period established by Brazilian regulations.
• 07win communications: send deposit and withdrawal confirmations, security alerts, and updates on bonuses and promotions (you can opt out of marketing communications at any time).

07win does not use your data to build profiles for sale to third parties, does not make automated decisions with a legal impact on you without human review, and does not process data for purposes incompatible with those described above.

4Legal Basis for Processing (LGPD)

Every personal data processing operation carried out by 07win has a defined legal basis, as required by Article 7 of the LGPD. The legal bases applied are:

• Contract performance (Art. 7, V): processing is necessary to perform the contract entered into when you created your 07win account — including bet processing, deposits, withdrawals, and compliance with the Terms and Conditions.
• Compliance with a legal obligation (Art. 7, II): data required to meet regulatory and legal obligations applicable to the operation of betting and gaming platforms in Brazil, including KYC and anti-money laundering requirements.
• Legitimate interest (Art. 7, IX): processing required for fraud prevention, platform security, and the protection of other users, provided it does not override your fundamental privacy rights.
• Consent (Art. 7, I): for marketing communications, use of non-essential cookies, and advanced content personalization. Consent can be withdrawn at any time without affecting your access to the platform.

5Data Sharing with Third Parties

07win does not sell, rent, or transfer players' personal data to third parties for commercial purposes. Data may be shared only in the situations listed below, always limited to what is strictly necessary and subject to contractual confidentiality obligations:

Contracted service providers

• Payment processors: partners responsible for processing Pix, boleto, credit/debit card, PicPay, and Mercado Pago payments receive only the data strictly necessary to execute the transaction.
• Game providers: companies such as Pragmatic Play, NetEnt, Playtech, Red Tiger, and PG Soft receive anonymous session identifiers to record game outcomes — they do not receive players' full personal data.
• Identity verification services: KYC platforms that assist with document validation may have access to the document images submitted, solely for the purpose of the requested verification.
• Technology infrastructure: cloud storage providers and server infrastructure companies that host the 07win platform, under strict security and confidentiality contracts.

Legal obligations

07win may share data with competent Brazilian authorities — including the Federal Police, Public Prosecutor's Office, Federal Revenue Service, and COAF — when legally required to do so, pursuant to a duly substantiated court or administrative order, in accordance with applicable Brazilian law.

What we never do

07win does not share player data with third-party advertising or marketing companies, does not sell user lists, does not provide data to competitors, and does not share information with any entity outside the operational scope described above.

6Information Security

07win applies robust technical and organizational measures to protect players' personal data against unauthorized access, loss, alteration, or improper disclosure:

• 256-Bit SSL Encryption across all communications between the player's device and 07win's servers — the same standard required by the Central Bank of Brazil for financial transactions.
• Payment data tokenization: credit and debit card data is tokenized immediately — 07win never stores the full card number in its systems.
• Access controls: player data is accessible only to 07win staff members who require it to perform their roles, with multi-factor authentication required for access to critical systems.
• Security monitoring: 07win's systems are continuously monitored to detect unauthorized access attempts, brute-force attacks, and suspicious activity.
• Security testing: the platform undergoes regular security testing, including pentests and technical audits, to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: in the event of a security incident with potential impact on personal data, 07win will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframes established by the LGPD.

Despite all the measures in place, no security system is 100% foolproof. Players also share responsibility for their account security — use a strong, unique password, never share your credentials with anyone, and enable two-factor authentication when available.

7Cookies and Tracking Technologies

07win uses cookies and similar technologies to maintain platform functionality, analyze usage, and personalize the experience. The types of cookies used are listed below:

You can manage optional cookie preferences in your browser settings. Disabling essential cookies may affect how the platform functions. 07win does not use third-party advertising cookies for cross-site tracking.

8Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that 07win is committed to upholding and making easy to exercise. Here is what you can request at any time:

• Confirmation and access: find out whether 07win processes your data and access what information is stored about you.
• Correction: request the update or correction of data that is incorrect, incomplete, or out of date.
• Anonymization, blocking, or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted.
• Portability: receive your data in a structured format for transfer to another service, where technically feasible and in accordance with ANPD regulations.
• Data sharing information: know which third parties 07win shares your data with.
• Withdrawal of consent: withdraw consent for processing based on that legal basis at any time, with no penalty to your use of the platform.
• Right to object: object to data processing activities that lack explicit consent or that cause you harm.
• Automated decision review: request human review of decisions made based solely on automated processing of your data.

To exercise any of these rights, please contact us by email contato@07win.click or via 07win's support chat. We identify your request, verify your identity, and respond within 15 business days, as required by the LGPD. In complex cases, the deadline may be extended with proper justification.

If you feel your rights have not been adequately addressed, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD).

9Data Retention and Deletion

07win retains players' personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods:

• Active account data: retained for the entire duration of the player's account on 07win.
• Financial and transaction data: retained for at least 5 years after account closure, in accordance with Brazilian tax and regulatory requirements.
• KYC documents: retained for the period required by anti-money laundering regulations — at minimum 5 years after the last transaction.
• Support communication history: retained for up to 2 years after account closure for dispute resolution purposes.
• Self-exclusion data: retained indefinitely to prevent a self-excluded player from creating a new 07win account.

Once legal retention periods have expired, data is securely deleted or anonymized. Anonymization means the data can no longer be linked to you and is no longer subject to the LGPD.

If you request account deletion, any data that must be retained for legal compliance will remain stored only for the minimum required period — without active use — and will be automatically deleted once that period expires.

10Minors

07win is an online Sports Betting and casino platform intended exclusively for individuals of 18 years of age or older. We do not knowingly collect personal data from anyone under 18 years of age.

If we identify that an account was created by someone under 18, the account will be closed immediately, the data will be deleted within the legal timeframe, and any remaining balance will be handled in accordance with the platform's Terms and Conditions.

If you are responsible for someone under 18 and believe they may have created an account with 07win, contact our support team immediately via the Portuguese-language chat or by email contato@07win.click.

11International Data Transfers

Some third-party service providers engaged by 07win — such as cloud infrastructure providers and game suppliers — may process data on servers located outside Brazil. Where this occurs, 07win ensures that the transfer is carried out with the appropriate safeguards required by the LGPD, including:

• Standard contractual clauses for data protection with the relevant providers.
• Verification that the destination country provides an adequate level of data protection, as assessed by the ANPD.
• Data minimization in transfers — only the minimum necessary for the specific service being provided.

The most sensitive financial data of Brazilian players — such as Pix transaction data and banking information — is preferentially processed on infrastructure located in Brazil, minimizing the need for international transfers.

12Updates to This Privacy Policy

07win may update this Privacy Policy periodically to reflect changes in data processing practices, new regulatory requirements, or improvements to the security measures in place.

Significant changes will be communicated by email to affected users and through a prominent notice on the platform at least 7 days in advance before they take effect. Minor changes, such as editorial corrections that do not alter substantive content, may be made without prior notice.

The version in effect is always the one published on this page, with the last update date indicated at the top of the document. If you do not agree with the changes, you may request account closure before the effective date to withdraw your available real balance without penalties.

Previous versions of this policy may be requested from 07win support by email — we maintain a full history for transparency purposes and to respond to any requests from regulatory authorities.

13Contact, DPO & Privacy Channel

To exercise your rights as a data subject, ask questions about this policy, or report any privacy concern related to 07win, please use the channels below:

• Privacy email: contato@07win.click — mark the subject as "Privacy / LGPD" for prioritization.
• Support chat: available 24 hours a day in Portuguese via the platform's live chat. For formal rights requests, we recommend contacting us by email to ensure proper tracking and a record of submission.

07win has a designated Data Protection Officer (DPO) responsible for overseeing LGPD compliance, handling data subject requests, and maintaining the relationship with the National Data Protection Authority (ANPD). The DPO's contact details can be requested by email for the purpose of exercising formal rights under the LGPD.

We are committed to responding to all privacy-related requests within 15 business days of receipt, as required by the LGPD. In cases requiring more detailed analysis, we will notify you of the extended timeframe with justification.