7000bet Privacy Policy: How We Protect Your Data

For the purposes of this Privacy Policy and the LGPD, the 7000bet — operator of the platform available at 7000bet.express — is the data controller for personal data processed in connection with its sports betting and online casino services dedicated to the Brazilian market.

As the data controller, 7000bet is responsible for determining the purposes and means by which users' personal data is collected, stored, and processed. All data processing decisions follow the LGPD principles: purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability.

The 7000bet collects only the information necessary to provide the contracted services and to meet applicable legal obligations. The data collected falls into the following categories:

Registration and identification data:

• Full name, date of birth, and CPF (Individual Taxpayer Registry);
• Email address and mobile phone number;
• Full residential address including ZIP code;
• Government-issued ID (national ID card, driver's license, or passport) for KYC verification.

Financial and transaction data:

• Pix key registered for withdrawals;
• Deposit and withdrawal history including amounts in BRL, dates, and payment methods used (Pix, bank slip, credit/debit card, PicPay, Mercado Pago, TED);
• Complete history of all bets placed on the platform.

Usage and browsing data:

• IP address, browser type, operating system, and device identifiers;
• Pages visited, session duration, clicks, and interactions with the platform;
• Approximate geolocation data (derived from IP address);
• Access logs including date, time, and actions performed.

Communication data:

• Records of support conversations via live chat or email;
• Communication preferences (email marketing, promotional notifications).

Personal data collected by 7000bet are used exclusively for the purposes described below. No data is processed in a way that is incompatible with the purposes stated in this policy:

The 7000bet processes personal data on the legal bases set out in Article 7 of the LGPD. For each processing purpose, we identify the corresponding legal basis:

• Contract performance (Art. 7, V): processing required for the creation and operation of your account, bet processing, Pix deposits, withdrawals, and all features you agreed to upon registering on the platform;
• Compliance with a legal obligation (Art. 7, II): identity verification (KYC), financial record retention, anti-money laundering compliance under Law No. 9.613/1998, and reporting to the relevant authorities when required by law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, monitoring of suspicious activity, and usage analysis for service improvement — always respecting the rights and freedoms of data subjects;
• Consent (art. 7, I): sending marketing emails, promotional notifications, and communications not essential to account operation. Consent can be withdrawn at any time in your account's communication settings.

The 7000bet does not sell or trade your personal data. Data is only shared with third parties in the situations described below, solely for the purpose of delivering the contracted services or meeting legal obligations:

• Payment processors: data required to process transactions via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago is shared with the respective financial institutions and payment processors, which operate under their own privacy policies and Brazilian Central Bank regulations;
• Identity verification providers: for KYC purposes, documents may be processed by partners specialized in digital identity verification, operating under security standards equivalent to those of 7000bet;
• Regulatory and judicial authorities: data may be disclosed to COAF, the Federal Revenue Service, the Public Prosecutor's Office, and other competent authorities when required by court order or specific legal obligation;
• Infrastructure and technology providers: cloud hosting, cybersecurity, and data analytics services may process data as operators under contract, with specific data protection clauses compatible with the LGPD;
• Casino game providers: for Live Casino and slots, minimal session data is shared with certified providers such as Pragmatic Play, NetEnt, and similar partners, solely to enable the gaming experience.

The personal data of users of the 7000bet are stored on servers located in data centers that meet enterprise-grade physical and logical security standards. The technical and organizational measures in place include:

• 256-bit SSL encryption for all communications between the user's browser and the platform's servers;
• Encryption of data at rest for sensitive information, including identity documents and financial data;
• Role-based access control (RBAC) — only team members with a legitimate need can access user data;
• Continuous security monitoring with automatic alerts for suspicious activity;
• Penetration testing and periodic security audits conducted by specialized teams;
• Regular backups and data redundancy to ensure availability and recovery in the event of an incident;
• Formal incident response process with ANPD notification deadlines as required by the LGPD.

Despite all the measures in place, no security system is foolproof. The 7000bet recommends that users create strong, unique passwords for their account and never share their login credentials with anyone.

The 7000bet retains personal data for the shortest period necessary to fulfill the original processing purpose, always respecting the minimum retention periods required by law:

• Registration and identification data: retained for the full duration of the active account and for up to 5 years after closure, in accordance with anti-money laundering requirements (Law No. 9.613/1998);
• Financial transaction records: retained for 5 years from the date of each transaction, in compliance with the National Tax Code and Brazilian Central Bank regulations;
• Betting History: stored for up to 3 years for support, dispute resolution, and internal audit purposes;
• Access and Security Logs: retained for up to 6 months, which may be extended if a security investigation is ongoing;
• Marketing Communication Data: retained for as long as consent remains active. After consent is withdrawn, data is deleted or anonymized within 30 days.

Once the applicable retention periods have expired, data is securely deleted or irreversibly anonymized.

The 7000bet uses cookies and similar technologies to ensure the platform functions properly, enhance the user experience, and analyze service performance. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, session management, and security. They cannot be disabled without impairing your use of the platform;
• Performance and analytics cookies: collect anonymized data on how users interact with the platform (pages visited, session time, clicks) to identify areas for improvement. The information is aggregated and does not identify users individually;
• Functionality Cookies: store user preferences such as language, display settings, and favorite sports to personalize your experience without requiring reconfiguration on each visit;
• Security cookies: detect suspicious activity, fraud attempts, and unauthorized access, helping to keep user accounts protected.

You can manage your cookie preferences in your browser settings. Disabling non-essential cookies does not affect access to the core features of the 7000bet, but it may affect some personalization features.

The LGPD grants you, as a data subject, a complete set of rights that 7000bet respects and facilitates the exercise of these rights. To exercise any of the rights listed below, please contact us at suporte@7000bet.express with the subject line "LGPD Request — [type of right]":

• Right of access: request a full copy of the personal data we hold about you, including its purposes and recipients;
• Right to correction: request the correction of inaccurate, incomplete, or outdated data;
• Right to erasure: request the deletion of data processed on the basis of consent. Data retained under a legal obligation is kept for the regulatory period;
• Right to portability: receive your data in a structured format for transfer to another service;
• Right to object: object to processing based on legitimate interest or consent;
• Right to withdraw consent: withdraw consent previously given for marketing and non-essential communications;
• Right to information: find out which entities your data has been shared with.

Requests are answered within 15 business days. For more complex cases, this deadline may be extended by the same period, with prior notice to the data subject. To verify your identity before processing any request, we may ask you to confirm your registration details.

If you believe your data is being processed in violation of the LGPD, you also have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

Some of our technology providers and casino partners may be located outside Brazil. When personal data needs to be transferred to countries that do not offer a level of protection equivalent to the LGPD, the 7000bet adopts appropriate contractual safeguards — such as standard data protection clauses approved by the ANPD — to ensure your data remains protected at the same level of security required under Brazilian law.

International data transfers occur only when strictly necessary for the provision of services — such as with internationally certified casino software providers — and always with documented contractual guarantees.

The 7000bet is a platform intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process requires CPF and date of birth verification, and any account found to belong to a user under 18 will be immediately closed.

If you are a parent or legal guardian and suspect that a minor has created an account on the platform, please contact us immediately at suporte@7000bet.express. We will investigate and close the account once the situation is confirmed, returning any existing real balance to the legal guardian after verification.

The 7000bet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or the services offered. The date of the most recent revision is always shown at the top of this document.

Material changes will be communicated by email to the address registered on your account at least 15 days before taking effect, except in urgent cases involving security or legal compliance that require immediate implementation.

Continued use of the platform after the effective date of any changes is understood as acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account as described in our Terms and Conditions.

The 7000bet has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO serves as the official communication channel between the platform, data subjects, and the National Data Protection Authority (ANPD).

For any questions related to privacy, data protection, the exercise of your rights as a data subject, or complaints about the processing of personal data, please get in touch:

• Email: suporte@7000bet.express (subject: "Privacy / LGPD")
• Support: in English, Monday through Sunday
• Response timeframe: up to 15 business days for data subject requests

If you do not receive a satisfactory response from the 7000bet, you may file a formal complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for overseeing LGPD compliance in Brazil.