77ey Privacy Policy – Your Data Protected

77ey respects your personal data and operates in full compliance with the LGPD. Find out exactly what we collect, why we collect it, and how you can exercise your rights.

Last updated: January 2026  |  Version 2.4

Privacy at 77ey in 6 Principles

A summary of what you can expect from our approach to data protection — before diving into the full policy.

Full LGPD Compliance

The 77ey processes your personal data in accordance with the General Data Protection Law (Law No. 13,709/2018). All collection, storage, and use of information has a defined legal basis and a legitimate purpose clearly described in this policy.

Your Data Is Never Sold

The 77ey does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data is shared only with operational partners strictly necessary for the platform to function — and always under a confidentiality agreement.

Encryption on All Transactions

All communications between your device and the servers of the 77ey are protected by 256-bit SSL encryption. Financial data — including Pix, credit card, and TED information — is handled with additional layers of security and is never stored in plain text.

You Control Your Data

As the owner of your data, you have the right to access, correct, port, and request the deletion of your information at any time, without red tape. The 77ey responds to data subject rights requests within 15 business days through the Portuguese-language support channel.

Cookies Only for What Matters

The 77ey uses strictly necessary cookies to ensure the platform functions properly, and analytical cookies to understand how the site is used and improve it. We do not use third-party advertising tracking cookies without your explicit consent.

Everything in Plain English, No Legal Jargon

This policy was written in clear, plain language so that any user can understand what is being done with their data — no legal background required. If anything is unclear, our support team can walk you through any section before you accept.

What Data 77ey Collects and Why

A summary of data categories, purposes, and legal bases before the full read.

Data Category Examples Primary Purpose Legal Basis (LGPD)
Personal identification Full name, CPF, date of birth Registration, KYC, fraud prevention Fulfillment of Legal Obligation
Contact Email address, mobile number Account communications and promotions Performance of contract / legitimate interest
Address ZIP code, city, state Proof of address (KYC) Fulfillment of Legal Obligation
Financial Pix key, bank details, deposit and withdrawal history Payment processing, anti-money laundering Contract performance / legal obligation
Platform behavior Betting history, games accessed, sessions Platform improvement, responsible gambling, security Legitimate interest
Technical and browsing IP address, device type, browser, cookies Security, fraud prevention, performance analysis Legitimate interest / consent (analytics cookies)
Identity documents Photo of national ID, driver's license, or passport; selfie with document Identity verification before the first withdrawal (KYC) Fulfillment of Legal Obligation

This Privacy Policy describes how the 77ey collects, uses, stores, shares, and protects the personal data of users registered on the 77ey.best platform. By creating an account and using our services, you confirm that you have read and agree to the practices described here. This policy forms an integral part of the Terms and Conditions of 77ey.

1. About This Policy

The 77ey takes its users' privacy seriously. This policy exists so you know exactly what information we hold about you, what we do with it, who we share it with, and how long we keep it. Nothing is hidden between the lines — the goal is to be straightforward and clear.

This policy applies to all users of the platform 77ey, accessed at 77ey.best, regardless of the device used — mobile, tablet, or computer. It also applies to any electronic communication between the user and 77ey, such as emails and messages through the support chat.

If you have any questions about this policy before accepting it, reach out to our Portuguese-language support team via the platform chat or the privacy email listed in section 15. No question is too small to be answered before you create your account.

2. Data Controller

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the company operating the 77ey is the controller of personal data collected from Brazilian users. The controller is responsible for decisions about what data is collected, for what purpose, and for how long it is retained.

The 77ey has appointed a Data Protection Officer (DPO), as required under the LGPD, responsible for receiving and responding to data subject requests and for ensuring internal compliance with this policy. Contact details for the DPO are available in Section 15 of this document.

Data operators acting on behalf of 77ey — such as payment processors and infrastructure providers — process personal data solely in accordance with the instructions of 77ey and under contractual agreements that include data protection clauses compatible with the LGPD.

3. Personal Data We Collect

3.1. Data Provided by the User at Registration

  • Full name;
  • CPF (Individual Taxpayer Registry);
  • Date of birth;
  • Email address;
  • Mobile number;
  • Residential address (ZIP code, city, state);
  • Access password (stored in encrypted form, never as plain text).

3.2. Data Collected for Identity Verification (KYC)

  • Photo of an identity document (RG, CNH, or passport);
  • Proof of address issued within the last 90 days;
  • Selfie holding the document, when requested;
  • Banking details for payment method verification (bank, branch, account number, or Pix key).

3.3. Financial and Transaction Data

  • History of deposits and withdrawals made on the platform;
  • Payment methods used (Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, TED);
  • Pix key and banking details provided for withdrawals;
  • Amount and date of each transaction.

3.4. Platform Behavior Data

  • Complete Sports Betting history — including sport, event, market, amount, and outcome;
  • Casino games accessed, slots played, and live casino sessions;
  • Interactions with activated bonuses and promotions;
  • VIP Program level and accumulated points.

3.5. Technical & Browsing Data

  • IP address of the device used to access the platform;
  • Device type, operating system, and browser version;
  • Pages visited within the platform and time spent in each session;
  • Cookies and session identifiers (detailed in section 10).

4. How We Collect Data

The 77ey collects personal data through the following channels:

  • Directly by the user: registration form, KYC verification form, support communications, account preferences;
  • Automatically during platform use: access logs, session cookies, device data, and browsing behavior;
  • From payment partners: transaction confirmations processed by Pix, card processors, PicPay, Mercado Pago, and partner banks — limited to what is strictly necessary to confirm and record the transaction;
  • From identity verification partners: third-party services used for document validation during KYC, which return only the verification result (approved/rejected) and the minimal data required for the record.

The 77ey does not purchase personal data lists from third parties to grow its user base, and does not collect data from social networks without the express authorization of the data subject.

5. Purposes of Data Processing

The personal data collected by the 77ey are used exclusively for the following purposes:

  • User account creation and management: account registration, authentication, and ongoing platform access;
  • Identity verification and eligibility: mandatory KYC process to verify identity, legal age (18+), and ownership of the payment methods used;
  • Processing deposits and withdrawals: execution and recording of financial transactions in BRL via Pix, card, boleto, PicPay, Mercado Pago, and TED;
  • Anti-money laundering and fraud prevention: transaction monitoring and behavioral pattern analysis in accordance with the requirements of Law No. 9.613/1998 and applicable sector regulatory standards;
  • Compliance with legal and regulatory obligations: compliance with orders from Brazilian authorities, including judicial requests;
  • Continuous platform improvement: analysis of aggregated and anonymized usage data to identify issues, improve the mobile experience, and develop new features;
  • Account communications: transactional notifications regarding withdrawals, deposits, KYC verification, security changes, and promotions for which the user has opted in to receive communications;
  • Responsible gambling: identifying behavioral patterns that may indicate compulsive use of the platform, in order to offer preventive interventions as described in the Terms and Conditions.

The 77ey does not use personal data to build user profiles for the purpose of selling advertising to third parties, and does not apply automated decisions with significant effects on users without the possibility of human review.

6. Legal Bases for Processing (LGPD)

All personal data processing carried out by 77ey has a legal basis under the LGPD. The applicable bases are:

  • Performance of contract (art. 7, V): processing necessary to provide the services agreed upon by the user when creating an account — including bet processing, payments, and VIP Program management;
  • Compliance with a legal or regulatory obligation (art. 7, II): processing required by Brazilian law — includes KYC, anti-money laundering measures, financial record retention, and responses to authorities;
  • Legitimate interest (art. 7, IX): processing necessary for legitimate purposes of 77ey that do not infringe on the fundamental rights and freedoms of the data subject — this includes fraud analysis, platform security, product improvement, and responsible gambling;
  • Consent (Art. 7, I): where applicable, such as for the use of non-essential analytical cookies and for sending marketing communications about promotions beyond transactional ones. Consent may be withdrawn at any time.

7. Sharing Data with Third Parties

The 77ey does not sell or transfer your personal data to third parties for commercial purposes. Sharing occurs only in the situations described below, all of which have a legal basis and are subject to contractual data protection controls:

7.1. Essential Operational Partners

  • Payment processors: minimum financial data is shared with Pix operators, credit/debit card processors, PicPay, Mercado Pago, and banking institutions to execute transactions;
  • Identity verification services (KYC): documents submitted for verification are processed by specialized partners under strict confidentiality agreements, with data retained only for as long as verification requires;
  • IT infrastructure providers: hosting, database, and security services that process technical data to keep the platform running securely and reliably.

7.2. Authorities and Legal Obligations

The 77ey may share data with Brazilian public authorities — such as the Receita Federal, Banco Central, Polícia Federal, Ministério Público, or the judiciary — when required by legal, judicial, or regulatory order. In such cases, sharing is limited to the minimum necessary to fulfill the request.

7.3. What We Never Do

  • We do not sell your data to advertisers, data brokers, or any other company for commercial purposes;
  • We do not share your betting history with insurers or employers;
  • We do not share data with partners without a data protection agreement already in place.

8. Data Retention and Deletion

The 77ey retains personal data for as long as necessary for each purpose, respecting the minimum retention periods required by Brazilian law:

  • Registration and identity data: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering requirements (Law No. 9,613/1998);
  • Financial records (deposits, withdrawals, bets): retained for a minimum of 5 years for tax and regulatory purposes, which may be extended if an investigation is ongoing;
  • Access logs and technical data: retained for a minimum of 6 months, as required by the Marco Civil da Internet (Law No. 12.965/2014);
  • Support communications: retained for 2 years for quality management purposes and potential dispute resolution;
  • Analytical cookie data: retained for up to 13 months from the date of consent, after which they expire automatically or are renewed upon new consent.

Once mandatory retention periods have been met, data is securely deleted or anonymized in a way that makes it impossible to identify the individual originally associated with the information.

If you request deletion of your data before the legal retention period has expired, 77ey will inform you which data cannot be deleted at that time due to a legal obligation and when deletion will become available.

9. Data Security

The 77ey adopts technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or unintended destruction. Key measures include:

  • 256-bit SSL/TLS encryption across all communications between the user's device and the platform's servers;
  • Encryption of data at rest for sensitive information stored on our servers, including KYC documents and financial data;
  • Role-based access control — only employees with a specific need may access users' personal data, and every access is logged in an auditable record;
  • Two-factor authentication (2FA) available and recommended for all user accounts on the platform;
  • Continuous security monitoring with automatic detection of unauthorized access attempts, brute-force attacks, and suspicious login patterns;
  • Penetration testing and security audits periodic audits conducted by independent third parties.

In the event of a security incident that may compromise users' personal data, 77ey will notify affected data subjects and the National Data Protection Authority (ANPD) within the timeframes set out in the LGPD, describing the nature of the incident, the data potentially affected, and the measures taken.

No system is 100% breach-proof. The 77ey recommends using strong passwords, never sharing your credentials with anyone, and enabling two-factor authentication on your account. If you suspect unauthorized access, contact support immediately.

10. Cookies and Tracking Technologies

The 77ey uses cookies — small text files stored on your device — to ensure the platform works correctly and to understand how it is used. Below are the categories of cookies we use:

Essential and security cookies cannot be disabled — without them, the platform will not function properly. Functional and analytics cookies can be turned off in the cookie settings available on the platform, without affecting access to Sports Betting or the casino.

The 77ey does not use third-party behavioral advertising cookies — the kind of tracking that causes an ad for a product to follow you around other sites after you've visited it. That type of technology is not part of our approach.

11. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by the 77ey, the following rights, all of which can be exercised free of charge through the support channel:

Right What this means in practice Response time
Confirmation and access Know what data we hold about you and receive a copy Up to 15 business days
Correction Correct incomplete, inaccurate, or outdated data Up to 15 business days
Anonymization or deletion Request that unnecessary or excessively processed data be anonymized or deleted Up to 15 business days
Portability Receive your data in a structured format to transfer to another service Up to 15 business days
Consent withdrawal Withdraw previously given consent (e.g., marketing emails) Immediate
Objection Object to processing carried out on the basis of legitimate interest Up to 15 business days
Sharing information Know which third parties your data has been shared with Up to 15 business days

To exercise any of these rights, contact us through the 77ey support chat 77ey, via the email address listed in Section 15, or directly through the settings area of your account. You will be required to verify your identity before receiving access information or having your data deletion request processed.

If 77ey cannot fulfill your request — for example, because a legal obligation requires the data to be retained — you will be informed of the reason and the estimated timeframe for future resolution. If you are not satisfied with the response, you may submit a complaint to the National Data Protection Authority (ANPD).

12. Data of Minors

The platform 77ey is strictly prohibited for users under 18 years of age. We do not intentionally collect or process personal data from minors. The identity verification (KYC) process includes age confirmation as a mandatory step before the first withdrawal.

If we determine that an account was created by someone under 18, the account is closed immediately, any deposited balance is returned to the original payment method, and the data is deleted within the timeframes permitted by law. If you become aware that a minor has created an account on 77ey, please contact our support team immediately so we can take action.

13. International Data Transfers

Some of the infrastructure partners used by the 77ey — such as cloud hosting providers and security services — may process data on servers located outside Brazil. When this occurs, the 77ey contractually requires these partners to maintain data protection standards equivalent to or higher than those required by the LGPD.

International transfers are carried out only when:

  • The destination country offers an adequate level of data protection, as assessed by the ANPD; or
  • Standard contractual data protection clauses have been entered into between 77ey and the foreign operator; or
  • The transfer is necessary to perform the contract with the data subject — for example, to process an international payment through a card network.

Data from Brazilian users is never transferred abroad for the purpose of selling or enriching third-party databases.

14. Changes to This Privacy Policy

The 77ey may update this policy at any time to reflect changes in legislation, our data practices, or the services we offer. The date of the most recent update is always displayed at the top of the page and in the version available on the platform.

When changes are significant — such as updates to processing purposes, new types of data collected, or new partners with whom data is shared — registered users will be notified by email at least 14 days before the new version takes effect.

By continuing to use the platform after the effective date of an updated version of this policy, you confirm your acceptance of the new terms. If you do not agree with the changes, you have the right to request account closure before the effective date.

15. Contact, DPO & Privacy Channel

For any questions related to the privacy of your data, the exercise of your rights under the LGPD, or inquiries about this policy, you may contact 77ey through the following channels:

  • Live chat: available 24 hours a day, 7 days a week, on the 77ey.best platform — the fastest channel for urgent requests;
  • General support email: contato@77ey.best;
  • Privacy channel / DPO email: privacidade@77ey.best — use this channel specifically for formal data subject rights requests (access, correction, portability, deletion), LGPD-related complaints, and communication with the Data Protection Officer.

The standard response time for requests submitted through the privacy channel is up to 15 business days from confirmation of receipt. For matters requiring additional legal review, this deadline may be extended, with prior notice given to the requester.

Last updated: January 2026 — Version 2.4. Questions about any part of this policy can be directed to privacidade@77ey.best.

77ey's Commitment to Privacy in Brazil

The 77ey believes that privacy is not a regulatory checkbox — it is part of the respect we have for Brazilian bettors. Every decision about what data to collect went through a genuine necessity review. If we don't need a piece of information to provide the service, we don't collect it. Simple as that. If you have any questions about how your data is being used, our privacy channel is available at privacidade@77ey.best and we respond within the legal deadline.

Frequently Asked Questions about Privacy at 77ey

The questions our privacy channel receives most often.

No, except when required by a competent legal authority. A user's betting history is personal data processed on the basis of contract performance and legal obligations. It is not shared with third parties for commercial, advertising, or any other purpose beyond the platform's own operations 77ey. In the event of a judicial or regulatory request, the 77ey may be required to share records with the relevant Brazilian authorities — in which case, disclosure is limited to the minimum necessary.

You have the right to request deletion of your data, but not all of it can be removed immediately. Data such as your CPF, financial records, and transaction history must be retained for a minimum of 5 years under Brazilian anti-money laundering legislation and for tax purposes. Data with no legal retention requirement — such as browsing preferences and cookies — can be deleted right away. The 77ey will inform you which data is being deleted and which must still be retained due to legal obligations, along with an estimated date for when full deletion will be available.

No. The 77ey does not sell or share user data with advertisers or third-party marketing partners. Communications sent by the platform are about the user's own account — transactional notifications, security alerts, and promotions from the 77ey for which the user has opted in to receive. If you no longer wish to receive promotional emails, you can withdraw your consent at any time in your account settings or by clicking "unsubscribe" at the bottom of any marketing email.

Documents submitted for identity verification (KYC) — such as photos of an RG, CNH, or proof of address — are encrypted during transmission and stored in encrypted form on the 77ey. Access to these documents is restricted to a minimum number of employees with a specific operational need, and every access is recorded in an auditable log. Documents are retained for the minimum period required by Brazilian anti-money laundering legislation. Once that period expires, they are securely deleted. The 77ey does not use document images for any purpose other than identity verification and compliance with legal obligations.

Upon account closure, 77ey initiates the deletion process for data that is not subject to a legal retention obligation — such as browsing preferences, cookies, and behavioral data not required for tax purposes. Data subject to legal retention periods — such as financial transaction records and KYC documents — is kept for the minimum period required by law (generally 5 years) and then securely deleted. You may request written confirmation of which data is being retained and on what legal basis, through the privacy channel of 77ey.

Analytical cookies can be disabled in the cookie settings available on the 77ey, accessible via the "Manage Cookies" link in the site footer. You can also block cookies directly in your browser settings — Chrome, Firefox, Safari, and Edge all have specific options for this. Disabling analytical cookies does not prevent you from using the platform or affect your bets, account balance, or VIP Program. Only essential and security cookies are required for the platform's basic functionality.

Privacy Guaranteed. Real Betting. Welcome to 77ey.

Your data is protected. Now it's time to create your free account and bet on the Brasileirão, Copa do Brasil, and Libertadores with competitive odds and Pix withdrawals in minutes.

Your LGPD Rights Are Guaranteed by 77ey

The General Data Protection Law (Law No. 13.709/2018) guarantees your rights to access, correction, portability, and deletion of your data. The 77ey respects these rights and responds to all requests within the legal deadline of 15 business days. To exercise your rights, please contact us at privacidade@77ey.best. If you are not satisfied with the response, you may file a complaint with the National Data Protection Authority (ANPD).

Responsible Gambling Data: Used to Protect You

The betting and session history on 77ey is used, among other purposes, to identify patterns that may indicate problem gambling — such as excessively frequent sessions, bets far above the user's historical average, or attempts to circumvent configured deposit limits. When such patterns are detected, the 77ey may reach out proactively to offer support, without judgment. This use of data is based on legitimate interest and on our commitment to responsible gambling, which is central to how the platform operates.

The 77ey is exclusively for users aged 18 and over. Self-control tools — including deposit limits, session alerts, and self-exclusion — are available to any user at any time. Learn more on the Responsible Gambling.

Português