Privacy Policy of 7kwin – Your Data

1. What Data 7kwin Collects

1.1 Data provided directly by you

When you create an account, use the platform, or contact our support team, 7kwin may collect the following data:

• Registration data: full name, email address, CPF, date of birth, mobile number, and home address;
• Identity verification data (KYC): photo ID (RG, CNH, or passport) and a selfie holding the document;
• Financial data: registered Pix key for withdrawals, credit or debit card details (tokenized — we never store your full card number), deposit and withdrawal history;
• Communication data: messages sent to support via live chat or email, including interaction content for quality assurance and dispute resolution purposes.

1.2 Automatically Collected Data

When you access the 7kwin platform via browser or mobile, we automatically collect:

• IP address and approximate geographic location (state/city in Brazil);
• Device type, operating system, browser, and version;
• Pages visited within the platform, time spent, and browsing behavior;
• Betting and gaming history within the platform (matches wagered, amounts, results);
• Session data: login time, session duration, and actions taken during access.

1.3 Third-Party Data

In specific cases, 7kwin may receive data from external sources for identity verification or fraud prevention purposes, such as CPF lookup services and anti-money laundering databases used in Brazil. This data is used exclusively for the purposes described and is not retained beyond what is necessary.

---

2. How We Use Your Data

7kwin processes your personal data based on the following purposes and legal grounds established under the LGPD:

7kwin does not use your personal data for purposes other than those listed above without notifying you first and, where applicable, requesting your consent for the new use.

---

3. Who 7kwin Shares Your Data With

3.1 Sharing Required for Operations

To operate the platform, 7kwin shares data with specific partners, always under confidentiality agreements and within the limits required by the LGPD:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to process each transaction;
• Casino game providers: providers such as those supplying slots, live casino, and crash games receive only an anonymous user identifier to record gaming history. Your name or CPF is never shared with game providers;
• Identity verification services: certified KYC companies that assist with document verification and database checks for fraud prevention and anti-money laundering compliance in Brazil;
• Cloud infrastructure providers: the platform operates on cloud infrastructure with certified security controls. Data is processed within the terms of the data processing agreements in place with these providers.

3.2 Sharing Under Legal Obligation

7kwin may be required to share data with competent Brazilian authorities — such as the Financial Activities Control Council (COAF), the Federal Revenue Service, the Central Bank of Brazil, or judicial authorities — when mandated by court order, official investigation, or a regulatory obligation applicable to the online betting and gaming market in Brazil. In such cases, 7kwin has no discretion to refuse and bears no responsibility for how those authorities use the information.

3.3 What We Never Share

7kwin never shares your personal data with third-party marketing companies for advertising purposes without your explicit consent. We also do not sell user lists, behavioral profiles, or any other set of personal data to companies that are not operational partners required for the platform to function.

---

4. How We Protect Your Data

4.1 Technical security measures

7kwin implements a robust set of technical measures to protect your personal data against unauthorized access, loss, alteration, or destruction:

• Encryption in transit: all communication between your device and 7kwin's servers uses TLS 1.3 with 256-bit ciphers;
• Encryption at rest: sensitive data such as KYC documents and financial data is stored with AES-256 encryption;
• Password hashing: your password is never stored in plain text. We use salted hashing algorithms for secure credential storage;
• Card data tokenization: credit and debit card numbers are never stored on 7kwin's servers — only tokens provided by the PCI-DSS certified payment processor;
• Continuous monitoring: intrusion and anomaly detection systems operate 24 hours a day to identify unauthorized access attempts;
• Internal access controls: only employees with a specific need have access to users' personal data, following the principle of least privilege.

4.2 Account Authentication

Your account security is a shared responsibility. We strongly recommend using a strong, unique password for 7kwin — different from your bank or email password — and never sharing your credentials with anyone. Two-factor authentication (2FA) is available in your account dashboard and is highly recommended for an extra layer of protection.

4.3 Data Retention

7kwin retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet legal obligations. The main retention periods are:

• Registration and account data: for as long as the account is active and for up to 5 years after closure, in accordance with Brazilian financial compliance requirements;
• Financial transaction records (deposits via Pix, boleto, card): minimum of 5 years as required by applicable law;
• KYC data (identity documents): retained for the same period as financial data, as it is linked to the payment verification process;
• Support communication data: up to 2 years after the ticket is closed;
• Marketing data: until you withdraw your consent or after 2 years of inactivity, whichever comes first.

---

5. How to Exercise Your Rights Under the LGPD

To exercise any of your rights under the Lei Geral de Proteção de Dados (Law 13.709/2018), please contact 7kwin's Data Protection Officer at suporte@7kwin.best with the subject line "LGPD – [your right]".

When submitting a request, please specify the type of right you wish to exercise (access, correction, deletion, portability, etc.), your full name, and the email address registered to your 7kwin account. To protect your account, we may require identity verification before processing the request. Response timeframes are:

• Acknowledgment of receipt: within 2 business days;
• Full response to request: within 15 calendar days from confirmation, extendable by an additional 15 days in complex cases, with prior notice to the requester.

---

6. Cookies and Tracking Technologies

6.1 What are cookies and why do we use them

Cookies are small text files stored in your browser or device when you access the 7kwin platform. We use cookies and similar technologies (such as localStorage and tracking pixels) for the following purposes:

• Essential cookies: required for the platform to function, such as keeping your session active after login and remembering account settings. They cannot be disabled without affecting your use of the platform;
• Performance cookies: collect anonymous data on how users interact with the platform to identify errors and improve the experience. Information is aggregated and does not identify individual users;
• Preference cookies: store your language preferences, interface settings, and other preferences to personalize your experience;
• Marketing cookies (with your consent): used to display relevant content about 7kwin promotions and bonuses. These are only activated with your explicit consent.

6.2 Managing Cookies

You can manage and clear cookies at any time through your browser settings (Chrome, Firefox, Safari, Edge) or in the settings of your Android or iOS device. Disabling essential cookies may affect the platform's functionality. Disabling marketing cookies does not affect the usability of 7kwin.

---

7. Protection of Minors

The 7kwin platform is restricted to users aged 18 and over and does not intentionally collect data from minors. If we identify that an account was created by a minor, it will be closed immediately and the data deleted, except for records needed to document the incident and comply with any applicable legal obligations. If you are a guardian and believe a minor may have created a 7kwin account, please contact our support team immediately.

---

8. International Data Transfers

In some cases, 7kwin's technology partners (such as cloud infrastructure providers or casino game providers) may process data on servers located outside Brazil. When this occurs, 7kwin ensures that international transfers are covered by the mechanisms set out in the LGPD, such as standard contractual clauses or confirmation that the destination country offers an adequate level of data protection as assessed by the ANPD.

---

9. Changes to this Privacy Policy

7kwin may update this Privacy Policy periodically to reflect changes in our practices, applicable Brazilian legislation, or the services we offer. Significant changes will be communicated by email to the address registered on your account and by an in-platform notice at least 7 days in advance. The date of the last update is always shown at the top of the document. We recommend reviewing this policy periodically.

---

10. Contact and Data Protection Officer

For any questions related to the privacy of your data on 7kwin — whether to exercise your rights, clarify doubts about this policy, or report a concern — please contact our Data Protection Officer (DPO) through the channels below:

• Email: suporte@7kwin.best with the subject line "LGPD – Privacy"
• Live chat: available 24 hours a day on the platform, in Brazilian Portuguese