1. Who We Are (Data Controller)
This Privacy Policy is enforced by the platform 77ff, operator of the website 77ff.best, responsible for processing the personal data of registered users and visitors to the platform. The 77ff acts as the data controller as defined by the General Data Protection Law (Lei nº 13.709/2018).
For any questions about how your personal data is handled, you can contact our Data Protection Officer (DPO) at suporte@77ff.best — please include "DPO — Data Protection" in the subject line. Response time is up to 15 business days, as established by the LGPD.
2. What Personal Data We Collect
2.1 Data you provide directly
By registering and using the 77ff, you provide us directly with the following data:
- Identification data: full name, date of birth, CPF;
- Contact details: email address, mobile number, full residential address;
- Document data: government-issued identity document images (national ID, driver's license, or passport) and proof of address, when requested during the KYC process;
- Financial data: Pix keys used for deposits and withdrawals, credit or debit card details (processed securely — the 77ff does not store full card details), transaction history on the platform.
2.2 Automatically collected data
While you use the platform, we automatically collect:
- IP address and approximate geographic location;
- Device type, operating system, and browser used;
- Pages visited, session duration, and browsing patterns within the platform;
- Full history of Sports Betting activity, casino sessions, slots, and other gambling activity;
- Data from cookies and similar tracking technologies (detailed in section 5).
2.3 Data received from third parties
In some cases, we may receive data from external sources for specific purposes:
- Payment providers such as PicPay and Mercado Pago, for transaction confirmation;
- Third-party identity verification services, for document authenticity confirmation;
- Politically exposed persons (PEPs) and sanctions screening lists, for AML/CFT compliance purposes.
3. How We Use Your Personal Data
The 77ff uses the collected data for the following purposes, always based on one of the legal bases provided for under the LGPD:
- Service operation: account creation and management, processing deposits and withdrawals via Pix and other methods, recording and settling Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, NBB), and operating casino games and slots;
- Identity verification & compliance: confirmation that the user is 18 or older, identity verification for withdrawals, compliance with anti-money laundering obligations (AML/CFT) as required by Brazilian law;
- Security & fraud prevention: detection and prevention of unauthorized account access, identification of suspicious betting patterns, protection against the creation of multiple accounts for bonus abuse;
- Responsible gambling: monitoring usage patterns to identify signs of problematic behavior and offer support resources when relevant — in line with the commitment of 77ff with responsible entertainment;
- Platform improvement: analysis of aggregated and anonymized usage data to improve the experience, fix bugs, and develop new features;
- Communications: sending essential operational communications (deposit and withdrawal confirmations, account security alerts) and, where you have given consent, marketing communications about promotions, slots tournaments, boosted odds on the Brasileirão, and platform updates.
4. Who We Share Your Data With
The 77ff does not sell, rent, or otherwise commercialize users' personal data. Data sharing only occurs in the following situations, always for a specific purpose and with appropriate safeguards:
- Payment providers: financial data is shared with the payment processors required to carry out deposits and withdrawals — Pix (Banco Central do Brasil), card operators (Visa, Mastercard, Elo), PicPay, and Mercado Pago. These partners are bound by confidentiality agreements and process data solely for the purpose of completing transactions;
- Game providers: for the operation of casino games and slots, technical session data is shared with providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Playtech — only what is necessary for the games to function. These providers do not receive personally identifiable data beyond the session identifier;
- Identity verification services: document images are shared with KYC partners for authenticity verification — under a data processing agreement with clauses equivalent to those required by the LGPD;
- Regulatory and legal authorities: when required by law, court order, or request from a competent authority — such as the Receita Federal, the Financial Activities Control Council (COAF), and the ANPD — the 77ff provides the required data as instructed;
- Technology infrastructure: cloud computing and hosting services that process data on behalf of 77ff under data processing agreements with equivalent protection clauses.
5. Cookies and Tracking Technologies
The 77ff uses cookies and similar technologies to ensure the platform functions properly and to improve the user experience. The types of cookies used are:
- Essential cookies: required for the basic operation of the platform — session authentication, security, and language preferences. They cannot be disabled without compromising your use of the platform;
- Performance cookies: collect anonymous data on how users navigate the platform to identify areas for improvement. They do not identify individual users;
- Functionality cookies: remember user preferences such as favorite odds, followed sports, and display settings;
- Marketing cookies: used only with explicit consent to personalize promotional communications. They can be disabled in your browser settings or in the platform's privacy preferences.
You can manage your cookie preferences in your browser settings at any time. Disabling non-essential cookies does not affect access to the core features of 77ff.
6. How Long We Retain Your Data
Personal data is retained for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations:
- Active account data: retained for the full duration of your account with 77ff and for up to 5 years after account closure, in accordance with AML/CFT and regulatory requirements;
- Financial and betting records: retained for a minimum of 5 years after each transaction, in accordance with Brazilian tax and anti-money laundering legislation;
- KYC Documents: retained for the mandatory regulatory period — generally 5 years after the last transaction;
- Support communication data: retained for 2 years for dispute resolution purposes;
- Consent-based data (marketing): retained until consent is withdrawn by the user.
Once the applicable retention periods have expired, data is securely deleted or anonymized for statistical use without individual identification.
7. International Data Transfers
Some of the service providers that 77ff uses — such as game providers and cloud infrastructure — may store or process data on servers located outside Brazil. When this occurs, 77ff ensures that transfers are carried out with adequate safeguards, as required by Article 33 of the LGPD, including standard contractual data protection clauses or confirmation that the recipient country offers an adequate level of protection.
8. Data Security
The 77ff applies technical and organizational measures to protect your personal data against unauthorized access, accidental or unlawful destruction, loss, alteration, or improper disclosure. Key measures include:
- 256-bit SSL/TLS encryption on all connections;
- Secure password hashing with salt (bcrypt) — passwords are never stored in plain text;
- Role-based access controls (RBAC) — only team members with an operational need have access to specific data;
- Audit logs of all access to sensitive data;
- Periodic vulnerability scans and penetration testing;
- Two-factor authentication (2FA) for internal system access;
- Regular team training on information security and the LGPD.
Despite all measures in place, no system is completely immune. In the event of a security incident, the 77ff acts immediately to contain, investigate, and notify affected users as described in section 11.
9. Data of Minors
The platform 77ff is exclusively for users aged 18 and over. We do not intentionally collect personal data from anyone under 18. If we identify that an account was created by a minor, we close the account immediately and delete all associated data, except where retention is required by law.
If you believe a user under 18 has created an account on 77ff, please contact us immediately at suporte@77ff.best so we can take the necessary steps.
10. How to Exercise Your Rights
To exercise any of your rights under the LGPD — access, correction, deletion, portability, withdrawal of consent, or information about data sharing — follow the steps below:
- Contact 77ff via live chat on the platform or by emailing suporte@77ff.best;
- Clearly state the type of request (e.g., "I want to access my personal data" or "I want to unsubscribe from marketing emails");
- Verify your identity — for requests involving data access or deletion, identity verification is required to protect you from fraudulent requests;
- Allow up to 15 business days for a response on most requests, as established by the LGPD.
All requests are free of charge and do not require justification for data access or correction. Exercising your rights does not affect your use of the services of 77ff, except where deleting the data would technically prevent us from continuing to provide the service — in which case you will be notified before any action is taken.
If you are not satisfied with the response from 77ff regarding the exercise of your rights, you have the right to file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.
11. Security Incidents and Data Breaches
In the event of a security incident resulting in unauthorized access, destruction, loss, alteration, or disclosure of users' personal data, 77ff commits to:
- Contain the incident immediately and launch an internal investigation;
- Notify affected users within 72 hours of confirming the incident, where the incident poses a significant risk to data subjects;
- Report to the ANPD within the deadlines and requirements set out in current regulations;
- Provide clear information about what happened, which data was affected, and what steps were taken to minimize the impact;
- Implement corrective measures to prevent the incident from recurring.
12. Changes to This Policy
This Privacy Policy may be updated periodically to reflect changes in the services of 77ff, applicable legislation, or adopted privacy practices. For significant changes that affect user rights, the 77ff will notify users via their registered email and a prominent notice on the platform at least 15 days in advance. Minor editorial changes may be made without prior notice. The date of the last update is always visible at the top of this page.
13. Contact and Data Protection Officer (DPO)
For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact 77ff:
- Live chat: available 24/7 on the 77ff.best platform — average response time under 3 minutes;
- Email (DPO): suporte@77ff.best — subject line: "DPO — Data Protection" — response time: up to 15 business days.
Our support team is made up of Brazilian agents who assist exclusively in Portuguese. The Data Protection Officer (DPO) oversees all LGPD-related matters and is available to answer any questions about how we handle your information.