87a87 Privacy Policy – Your Data Protected by the LGPD

1. Who Controls Your Data

The controller of personal data collected by 87a87 is the operating company behind the 87a87.net platform. Under the LGPD, the controller is the party that determines how and why personal data is processed. For any matter related to the processing of your data, the contact channel is contato@87a87.net, with Portuguese-language support, 24 hours a day.

The 87a87 has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that carry out large-scale processing of sensitive personal data. The DPO can be reached at the same email address above, with the subject line "LGPD Request – DPO".

2. What Data We Collect and Why

The 87a87 collects only the data strictly necessary for each purpose. The table below lists the data types, collection source, and legal basis used under the LGPD:

3. How We Use Your Data

The data collected by the 87a87 are used exclusively for the purposes described at the time of collection. The main purposes are:

3.1 Account and platform operation

Create and manage your account, process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer, record and settle bets, calculate bonuses and cashback, and provide a complete activity history on the platform.

3.2 Identity verification and fraud prevention

The 87a87 is legally required to verify users' identities before processing withdrawals (KYC — Know Your Customer) and to implement anti-money laundering controls (AML/CFT). These processes involve reviewing identity documents and financial data provided by the user.

3.3 Platform security and integrity

Access data such as IP address, device information, and browsing patterns are used to detect unauthorized access, identify the use of multiple accounts, prevent betting fraud, and ensure platform stability and security for all users.

3.4 Communications

The 87a87 sends mandatory transactional communications (deposit, withdrawal, and bet confirmations) without requiring additional consent, as these are part of the contract's execution. Promotional communications — promotions, bonuses, news — are only sent with explicit consent given at registration or in the account settings. You can withdraw this consent at any time.

3.5 Responsible gambling

Betting history and usage patterns are analyzed by the 87a87 to identify signs of compulsive behavior and offer proactive support when needed. This use is based on the legitimate interest of the 87a87 in promoting a healthy gaming environment and is aligned with the sector's obligations.

4. Data Sharing with Third Parties

The 87a87 does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only in the situations listed below, always with appropriate safeguards in place:

• Payment processors: financial data is shared with the financial institutions and processors required to execute deposits and withdrawals (Pix via Banco Central, card acquirers, PicPay, Mercado Pago, TED bank transfers). These partners act as data processors and are contractually required to handle data in accordance with the LGPD.
• KYC providers: identity documents may be validated by specialized identity verification services. These providers are selected based on strict security and compliance criteria.
• Competent authorities: the 87a87 is legally required to report suspicious transactions to COAF (Conselho de Controle de Atividades Financeiras) and to comply with lawful requests from competent judicial or regulatory authorities.
• Infrastructure providers: hosting, database, and cloud security services that operate as data processors under contracts ensuring compliance with the LGPD and international security standards.

5. Cookies and Tracking Technologies

The 87a87 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze usage patterns in an aggregated way. The types of cookies used are described below:

5.1 Essential cookies

Required for basic platform functionality: maintaining your login session, bet slip, language preferences, and security settings. These cookies cannot be disabled without affecting how the site works.

5.2 Functional cookies

These allow the platform to remember your preferences across sessions: favorite sports, preferred layout, and accessibility settings. They are based on the legitimate interest of the 87a87 in delivering a personalized experience.

5.3 Analytical cookies

Used to understand how users navigate the platform in an aggregated, anonymous way — which sections are most visited, where navigation difficulties occur, and page load performance. Analytical data does not identify users individually and is used solely to improve the platform. The use of analytical cookies is subject to your consent.

You can manage your cookie preferences through your account settings panel or through your browser settings. Removing essential cookies may prevent access to your account.

6. Data Security

The 87a87 applies technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, disclosure, or destruction. The key measures include:

• TLS encryption across all communication between the user's device and our servers;
• Encryption at rest for sensitive data stored in the database;
• Role-based access control — only staff with a specific operational need are granted access to identifiable personal data;
• Audit logs of all access to sensitive data;
• Periodic penetration testing and security audits;
• Multi-factor authentication for administrative access to infrastructure;
• Internal privacy and security awareness program for all employees.

6.1 Incident notification

In the event of a security incident that may pose a significant risk to data subjects, 87a87 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframe set by the LGPD, with information about the nature of the incident, the data involved, and the measures taken to mitigate its effects.

7. Your Rights as a Data Subject (LGPD)

The Lei Geral de Proteção de Dados grants you, as the data subject, a set of rights over your personal data processed by 87a87. These rights can be exercised at any time by emailing contato@87a87.net with the subject line "LGPD Request". Requests are responded to within 15 business days.

8. How Long We Retain Your Data

The 87a87 does not retain personal data for longer than necessary for the purposes that justified its collection, always respecting the minimum retention periods required by law. The retention criteria are:

• Registration and KYC data: retained for as long as the account remains active and for a minimum of 5 years after closure, as required by anti-money laundering regulations;
• Financial transaction history (deposits and withdrawals): minimum of 5 years after the transaction, as required by tax and regulatory law;
• Betting history: minimum of 3 years after the bet is settled;
• Access logs (IP, device, session): minimum of 6 months as required by the Marco Civil da Internet (Law No. 12.965/2014), which may be extended in the event of an active investigation;
• Contact details (email, mobile number): retained while the account is active. After closure, retained for 12 months for contact purposes regarding residual matters, unless you request deletion before that period.

Once the applicable retention period expires, data is securely deleted or anonymized so that the individual can no longer be identified.

9. DPO Contact & Exercising Your Rights

To exercise any right under the LGPD or to ask questions about how your data is handled by 87a87:

If you believe your rights have not been adequately addressed by 87a87, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the body responsible for enforcing the LGPD in Brazil.

10. Changes to This Privacy Policy

The 87a87 may update this Privacy Policy to reflect changes in data processing practices, legislative updates, or new platform features. Material changes will be communicated by email and via an in-platform notice at least 7 days before the effective date.

The most current version of this policy is always the one published at 87a87.net/privacy-policy, with the last updated date indicated at the top of the document. For questions about previous versions or the change history, please contact the DPO at contato@87a87.net.