Privacy Policy for 7ypg – Your Data Protected

1. Who We Are: Data Controller

For the purposes of this Privacy Policy, the controller of personal data — that is, the entity that determines how and why data is processed — is the 7ypg platform, available at 7ypg.best.

7ypg is an online entertainment platform serving the Brazilian market, offering Live Casino, slots, Sports Betting (including Brasileirão Série A, Copa do Brasil, Libertadores, MMA/UFC, and NBB basketball), crash games, blackjack, and progressive jackpots — all denominated and operated in BRL.

7ypg's Data Protection Officer (DPO) can be reached at privacidade@7ypg.best. Requests related to your rights as a data subject should be sent to this address or submitted directly through your account dashboard.

2. Data We Collect

7ypg collects only the data necessary to operate the platform, process financial transactions, and keep accounts secure. Collection follows the LGPD's data minimization principle: no data is collected without a clear and justified purpose.

2.1 Data Provided by the User at Registration

• Full name
• CPF (Cadastro de Pessoas Físicas)
• Date of birth
• Email address
• Mobile number
• Residential address (requested only when required for KYC verification)

2.2 Data collected automatically during use

• IP address and approximate location (state/city)
• Browser type and version, and operating system
• Device used (mobile phone, tablet, computer)
• Pages visited, session duration, and interactions with the platform
• Technical connection and performance data (for diagnostics and service improvement)

2.3 Financial and transactional data

• Pix key used for deposits and withdrawals
• Credit or debit card data (processed by Central Bank-certified intermediaries — 7ypg does not store full card numbers)
• Transaction history: deposits, withdrawals, bets placed, and results
• Account data from PicPay, Mercado Pago, or banks (Nubank, Itaú, Bradesco, Banco do Brasil) used in TED wire transfers

2.4 Identity Verification Data (KYC)

For withdrawals above certain amounts or upon regulatory request, 7ypg may ask for identity verification documents — national ID, driver's license, or passport — as well as proof of address. These documents are handled under a high-security protocol and discarded once verification is complete.

3. How We Use Your Data

Personal data collected by 7ypg is used exclusively for the purposes described below. No data is used for purposes not covered by this Policy without your explicit consent.

Marketing communications — promotions, bonuses, and personalized offers — are sent only to users who have opted in. You can manage your communication preferences at any time through the account dashboard or by contacting 7ypg support.

4. Legal Basis for Data Processing

Under the LGPD (Art. 7), all personal data processing must have a clear legal basis. 7ypg processes your data under the following legal grounds:

• Contract performance (Art. 7, V): the primary basis for processing data required to operate the account, process transactions, and deliver the contracted services.
• Legal obligation (Art. 7, II): for data processed in compliance with Central Bank of Brazil requirements, anti-money laundering legislation (Law No. 9,613/1998), and other regulatory obligations.
• Legitimate interest (Art. 7, IX): for processing related to platform security, fraud prevention, and improving the user experience — always proportionate and respectful of data subject rights.
• Consent (Art. 7, I): for marketing communications, non-essential cookies, and optional processing activities. Consent may be withdrawn at any time.

5. Data Sharing with Third Parties

7ypg does not sell, rent, transfer, or share users' personal data for commercial or third-party advertising purposes. Data sharing only occurs in the cases below, all with a defined purpose and appropriate legal basis:

5.1 Payment Processors

To process deposits via Pix, credit/debit card, PicPay, Mercado Pago, and TED transfers, 7ypg uses payment intermediaries certified by the Banco Central do Brasil. These processors receive only the data strictly necessary to complete the transaction and are contractually required to protect it to standards equivalent to those of 7ypg.

5.2 Game and betting providers

The slots, live casino, and Sports Betting providers that run their games on the 7ypg platform may receive technical identifiers (not personally identifiable data such as name or CPF) for game integrity and RTP audit purposes. All providers are contractually bound to confidentiality standards.

5.3 Legal and regulatory obligations

7ypg may share data with Brazilian public authorities — such as the Central Bank, the Federal Revenue Service, COAF (Financial Activities Control Council), or the Judiciary — when legally required to do so, upon receipt of a duly substantiated formal request.

5.4 Rights Protection

In cases involving investigation of fraud, abuse, or violation of 7ypg's Terms and Conditions, relevant data may be shared with competent authorities to protect the rights of the platform and its users.

6. Data Storage and Security

7ypg implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main security measures in place are:

• 256-bit SSL/TLS Encryption on all connections to the platform.
• Encryption at rest for sensitive data stored on our servers — including financial data and KYC documents.
• Strict access control: only staff with a proven operational need have access to users' personal data, and all access is recorded in a log.
• Continuous monitoring of unauthorized access attempts, attacks, and security anomalies.
• Periodic security testing carried out by internal teams and, where applicable, by external auditors.
• Financial data (full card numbers, banking passwords) are not stored on 7ypg's servers — processing is handled entirely by intermediaries certified by the Central Bank of Brazil.

In the event of a security incident that may compromise users' personal data, 7ypg will fulfill the notification obligations set out in Art. 48 of the LGPD: notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected data subjects within the applicable timeframe, with a description of the nature of the incident and the measures taken.

7. Cookies and Tracking Technologies

7ypg uses cookies and similar technologies to ensure the platform works properly, improve the user experience, and — with your consent — personalize content and offers. The types of cookies used are:

You can manage your cookie preferences at any time through the account settings panel or via the cookie banner displayed on your first visit. Disabling non-essential cookies does not affect the core features of the platform — you can still log in, deposit, and play as normal.

8. How to Exercise Your Rights as a Data Subject

7ypg provides two channels through which you may exercise your data subject rights under the LGPD:

• Account dashboard: go to "Settings" → "Privacy & Data" to request access, correction, portability, or deletion, or to withdraw consent directly — no need to contact support.
• DPO Email: for more complex requests or those requiring individual review, please send an email to privacidade@7ypg.best with your full name, CPF, and a detailed description of your request.

7ypg responds to all data subject requests within 15 business days from the date of receipt. In cases requiring additional review — such as data deletion subject to legal retention obligations — the deadline may be extended by an equal period, with prior notice to the data subject.

9. Personal Data Retention

7ypg retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable minimum legal retention periods. The main retention periods are:

• Registration and active account data: retained for as long as the account remains active and for up to 5 years after closure, in accordance with anti-money laundering obligations (Law No. 9,613/1998).
• Financial and transaction records: retained for 5 years as required by the Central Bank of Brazil and applicable tax legislation.
• KYC verification documents: retained for 5 years after verification, in accordance with regulatory obligations. After this period, they are securely deleted.
• Access and security logs: retained for 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
• Analytical and functional cookie data: retained for up to 13 months, in line with privacy best practices.

Once retention periods expire, data is securely deleted or irreversibly anonymized, making any future identification of the data subject impossible.

10. Minors

7ypg services are intended exclusively for individuals who are 18 years of age or older. 7ypg does not intentionally collect personal data from minors and does not permit, under any circumstances, the registration or use of the platform by anyone under the legal age.

If 7ypg identifies that a minor's data was inadvertently collected, the account will be immediately closed, the data will be deleted, and any existing balance will be handled in accordance with the platform's Terms and Conditions.

If you are responsible for a minor and suspect they have created an account on 7ypg, please contact us immediately via 24-hour support or at suporte@7ypg.best so we can act quickly.

11. Changes to this Privacy Policy

7ypg reserves the right to update this Privacy Policy to reflect changes in the services offered, applicable legislation, or data processing practices. When this occurs:

• The "last updated" date at the top of this document will be revised.
• For material changes that significantly affect data subjects' rights, active account holders will be notified by email at least 7 days in advance.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated terms.
• Previous versions of this Policy are available upon request to the DPO.

12. Contact, DPO & Privacy Channel

To exercise your data subject rights, report a privacy concern, or get clarification on this Policy, 7ypg offers the following contact channels:

• DPO (Data Protection Officer): privacidade@7ypg.best — for formal data subject rights requests and LGPD-related matters.
• General Support: suporte@7ypg.best or live chat available 24 hours a day in Portuguese — for general questions about privacy, cookies, and account settings.
• Account dashboard: go to "Settings" → "Privacy & Data" for most requests, quickly and directly.

7ypg is committed to responding to all privacy requests within 15 business days, with a confirmation of receipt sent within 2 business days of the request.