7kbe Privacy Policy – Your Data Protected by the LGPD

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of personal data for users of the 7kbe platform is the entity responsible for operating the site 7kbe.click.

This Privacy Policy applies to all users who access, register with, or use any service offered by 7kbe, including Sports Betting (Brasileirão, Copa do Brasil, Libertadores, UFC, NBB, e-sports, and other modalities), Live Casino, slots, roulette, crash games, and all other products on the platform.

By creating an account on 7kbe and using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. This policy should be read together with the Terms and Conditions of the platform.

7kbe collects only the data strictly necessary to provide the contracted services and comply with applicable legal obligations. Data is grouped into the following categories:

Registration data (provided by the user):

• Full name as it appears on a government-issued ID;
• CPF (Cadastro de Pessoas Físicas) — required under Brazilian law for financial transactions;
• Date of birth — to verify legal age (18+);
• Active email address;
• Mobile phone number;
• Full residential address including ZIP code.

Financial data (generated by transactions):

• Pix key used for deposits and withdrawals;
• History of deposits made via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, or TED wire transfer;
• History of requested and processed withdrawals;
• Last 4 digits of a registered credit or debit card (never the full card number, CVV, or expiration date — that information never passes through 7kbe's servers).

Identity verification data (KYC):

• Digital image of a government-issued photo ID (RG, CNH, or passport);
• Proof of address dated within the last 90 days;
• Selfie with document for liveness verification, when requested.

Usage and browsing data (collected automatically):

• Access IP address;
• Browser type and version, and operating system;
• Device used (mobile phone, tablet, or computer);
• Pages visited within the platform and time spent on each;
• History of bets and games played on the platform;
• Access times and frequency;
• Session data and cookies (detailed in section 8 of this policy).

7kbe uses the personal data collected solely for the following purposes:

• Account operation: creation, maintenance, and closure of the player's account on the platform, including access authentication and password recovery;
• Processing of financial transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED wire transfer; processing of withdrawals to the account holder's Pix key or bank account;
• Identity verification (KYC/AML): compliance with legal identity verification and anti-money laundering requirements, in accordance with Brazilian law (Law No. 9,613/1998 and COAF regulations);
• Service provision: provision of platform features — Sports Betting, Live Casino, slots, roulette, crash games, and other 7kbe products;
• Player communications: sending transaction confirmations, security alerts, promotional notifications, and platform updates (players can manage their communication preferences in the account settings);
• Customer support: logging and resolution of tickets opened via live chat or email;
• Platform security: detection and prevention of fraud, unauthorized access, multi-account use, and other behaviors that violate the Terms and Conditions;
• Responsible gambling: monitoring of usage patterns to identify behaviors that may indicate a need for responsible gambling intervention, in accordance with the tools available on the platform;
• Compliance with legal obligations: responding to requests from competent authorities, court orders, and regulatory obligations applicable to the platform's operation in Brazil;
• Service improvement: aggregate analysis of usage patterns to improve the platform, fix bugs, and develop new features.

As required by the General Data Protection Law (LGPD), all personal data processing must be grounded in a specific legal basis. 7kbe processes data based on the following grounds set out in article 7 of the LGPD:

• Contract performance (art. 7, V): processing necessary to perform the contract entered into between 7kbe and the player upon account creation — includes processing deposits and withdrawals, maintaining the account, and providing betting and casino services;
• Legal or regulatory obligation (art. 7, II): identity verification (KYC), anti-money laundering (AML), reporting to competent authorities such as COAF, and compliance with court orders;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, detection of irregular account use, and protection of the legitimate interests of 7kbe and other users, provided this does not prejudice the fundamental rights and freedoms of the data subject;
• Consent (art. 7, I): for marketing communications, promotions, and platform news — players may withdraw this consent at any time through their account notification settings or by emailing contato@7kbe.click.

Where processing is based on consent, withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Withdrawing consent for marketing communications does not result in account closure or affect access to 7kbe's services.

7kbe does not sell, rent, or share personal data with third parties for commercial purposes. Data sharing occurs only in the following specific and limited situations:

• Payment processing partners: financial institutions and payment intermediaries required to process deposits and withdrawals — Pix (Banco Central do Brasil), credit/debit card acquirers, PicPay, Mercado Pago, and banks partnered for TED wire transfers. These partners receive only the data strictly necessary to complete the transaction;
• Identity verification providers (KYC): specialized companies providing document verification services that act as data processors on behalf of 7kbe, under contracts that include confidentiality and use-limitation clauses;
• Technical infrastructure providers: cloud hosting, CDN, and security services that process data solely to support platform operations, without access to the content of players' accounts;
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, and Play'n GO may receive minimal technical data required to run the games (such as an anonymized session identifier) — never full personal identification data;
• Competent authorities: Ministério da Fazenda, COAF, Receita Federal, the Judiciary, and any other authorities that, by legal or court order, require the disclosure of information. 7kbe only complies with such requests when they are duly formalized and within the limits established by law;
• Corporate proceedings: in the event of a merger, acquisition, or corporate restructuring, players' data may be transferred to the acquiring party, which will be required to uphold the same protection standards set out in this policy.

7kbe retains personal data only for as long as strictly necessary for the purposes for which it was collected, in compliance with the mandatory legal retention periods applicable to the financial and betting sector in Brazil.

The main retention periods applied by 7kbe are:

• Registration and identity data (KYC): retained for the period the account remains active, plus 5 years after account closure — the minimum period required by anti-money laundering legislation (Law No. 9.613/1998);
• Financial transaction history: retained for 5 years after each transaction is completed, as required by the Receita Federal and accounting regulations;
• Betting and gaming history: retained for 2 years after a bet or gaming session is completed, for dispute resolution and responsible gambling purposes;
• Access data and security logs: retained for 6 months for security purposes and incident investigation;
• Support communications: retained for 2 years for quality assurance and dispute resolution purposes;
• Marketing consent data: retained for as long as consent remains active, with a record of revocation history for 5 years.

Once applicable retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified from the remaining information.

7kbe applies appropriate technical and organizational measures to protect players' personal data against unauthorized access, accidental loss, destruction, alteration, or improper disclosure. The main security measures in place include:

• Encryption in transit: all communication between the player's browser or mobile device and 7kbe's servers is protected by 256-bit SSL/TLS encryption — indicated by the padlock in the browser and the "https" prefix;
• Encryption at rest: sensitive data such as passwords (stored as irreversible salted hashes), identity documents, and financial information are encrypted on 7kbe's servers;
• Two-factor authentication (2FA): available to all players in the account security settings — we strongly recommend enabling this feature;
• Internal access controls: only employees with a legitimate need for access are permitted to view specific player data, with an audit log recorded for every access;
• Continuous monitoring: automated systems monitor suspicious access attempts, brute-force attacks, and other risk patterns in real time;
• Segregated environment: payment data is processed in an environment segregated from the main infrastructure, with access restricted to the minimum number of systems required;
• Security testing: the platform is periodically subjected to penetration testing (pentests) and security audits conducted by independent specialist teams.

Despite all measures in place, no digital system is 100% immune to risk. 7kbe recommends that players use strong, unique passwords for their account, enable 2FA, and never share their credentials with anyone — including 7kbe's own support team, which will never ask for your password.

7kbe uses cookies and similar technologies to maintain active sessions, personalize the user experience, ensure platform security, and collect aggregated analytical data to improve our services. A cookie is a small text file stored in your browser or on your device when you access the platform.

The types of cookies used by 7kbe are:

You can manage cookie permissions in your browser or mobile device settings. Declining essential cookies may affect the proper functioning of the platform, including the login process and the bet slip. Analytical and functional cookies can be disabled without impacting basic access to the platform.

7kbe does not use third-party tracking cookies for external advertising purposes. Data collected via cookies is used exclusively within the 7kbe platform for the purposes described above.

The LGPD grants you, as the owner of your personal data, a set of rights that 7kbe is committed to respecting and facilitating. You may exercise any of these rights at any time, free of charge, by contacting our privacy team:

• Access (art. 18, I and II): request a copy of the personal data 7kbe holds about you, including confirmation of whether such data exists;
• Correction (art. 18, III): request the correction of incomplete, inaccurate, or outdated data — for certain fields (such as name and CPF), changes may require supporting documentation;
• Deletion (art. 18, VI): request the deletion of data processed on the basis of consent, once that consent is withdrawn. Data retained to meet a legal obligation cannot be deleted before the legally required retention period expires;
• Portability (art. 18, V): request the transfer of your personal data in a structured format to another service or product, where technically feasible;
• Withdrawal of consent (art. 18, IX): withdraw consent given for processing activities based on that legal basis (e.g., marketing communications) at any time, without affecting the lawfulness of any processing carried out prior to withdrawal;
• Information on data sharing (art. 18, VII): know which public or private entities 7kbe shares your data with;
• Review of automated decisions (art. 20): request human review of decisions made solely on the basis of automated data processing (such as account blocks triggered by the system);
• Filing a complaint with the ANPD: file a complaint with the National Data Protection Authority (ANPD) if you believe your rights have not been adequately upheld.

To exercise any of these rights, send an email to contato@7kbe.click with the subject line "Exercise of LGPD Rights" and a description of the right you wish to exercise. 7kbe will respond within 15 business days of receiving your request.

The 7kbe platform is intended exclusively for users aged 18 (eighteen) and over. 7kbe does not knowingly collect personal data from minors.

The registration process requires a CPF number and date of birth, and registrations from individuals under 18 are automatically rejected. Where there is reason to suspect an account was created by a minor or using a third party's details, the account will be suspended immediately pending completion of identity verification (KYC).

If you are a parent or legal guardian and believe that a child or adolescent has created an account on 7kbe using false information or your data without authorization, please contact support immediately at contato@7kbe.click. 7kbe will take the necessary steps to close the account and delete the collected data, subject to applicable legal retention periods.

7kbe may update this Privacy Policy periodically to reflect changes in the services offered, updates to data protection legislation, decisions by the National Data Protection Authority (ANPD), or improvements to internal privacy practices.

When significant changes are made:

• 7kbe will notify active account holders by email at least 7 days before the new rules come into effect;
• A prominent notice will be displayed on the platform informing users of the update;
• The "last updated" date at the top of this page will be revised;
• For changes involving new consent-based processing purposes, explicit consent will be requested before the changes take effect.

We recommend reviewing this policy periodically to stay informed about how your data is handled. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact 7kbe's Data Protection Officer (DPO):

• Email: contato@7kbe.click (subject line: "Privacy and LGPD");
• Live chat: available directly on the platform after login, 24 hours a day, 7 days a week;
• Response time: up to 15 business days for formal LGPD rights requests; up to 24 hours for general inquiries via live chat.

If you are not satisfied with the response received from 7kbe, or believe your rights have not been properly addressed, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the body responsible for enforcing the LGPD in Brazil.