Renda777 Privacy Policy – How We Protect Your Data

1. Personal Data Controller

For the purposes of the General Data Protection Law (LGPD – Law No. 13,709/2018), the controller of personal data collected through the renda777, available at renda777.net, is the company operating the platform, hereinafter referred to simply as "renda777".

The renda777 is responsible for making decisions regarding the processing of your personal data: what data to collect, for what purpose, how long to retain it, and with whom it may be shared — always within the limits established by the LGPD and this Privacy Policy.

Any question, request, or complaint related to the processing of your personal data should be directed to the Data Protection Officer (DPO) of renda777 by emailing suporte@renda777.net with the subject "Data Protection – LGPD".

2. What Data We Collect

The renda777 collects personal data at different points during your interaction with the platform. Each category is detailed below:

2.1 Registration Data

When you create an account on renda777, we collect the following required information:

• Full name as it appears on your identity document;
• Valid CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address including ZIP code.

2.2 Identity Verification Data (KYC)

To meet legal anti-money laundering and age verification requirements, the renda777 may request:

• Government-issued photo ID (RG, CNH, or passport);
• Verification selfie alongside the document;
• Recent proof of address;
• Proof of the payment method used, where applicable.

2.3 Financial Data

To process deposits and withdrawals, the renda777 collects transaction-related information, including Pix keys registered in your name, partial credit/debit card details (the full card number is never stored locally), deposit and withdrawal history, and transaction amounts. The renda777 does not store full card details — payment processing is handled by PCI-DSS certified payment gateways.

2.4 Platform Usage Data

While using the renda777, we automatically collect:

• IP address and approximate geolocation;
• Device type, operating system, and browser used;
• Sports betting history and casino sessions;
• Pages visited, session duration, and interactions on the platform;
• Sport, category, and bet type preferences.

2.5 Communication Data

When you contact renda777 via chat, email, or WhatsApp, the content of those communications is recorded for service, quality control, and dispute resolution purposes.

3. How We Use Your Data

The renda777 uses your personal data exclusively for the following purposes:

The renda777 does not use your data to build behavioral profiles for sale to advertisers, does not make automated decisions with significant impact without the possibility of human review, and does not use your data in any context unrelated to the operation of the sports betting and online casino platform.

4. Legal Basis for Processing

The renda777 processes your personal data on the basis of the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): processing is necessary to perform the service agreement you entered into when creating an account — including account management, bet processing, and payments;
• Compliance with a legal obligation (Art. 7, II): certain categories of data are processed to comply with legally imposed obligations, such as identity verification (KYC) and anti-money laundering requirements (BACEN Resolution and Law No. 9,613/1998);
• Consent (Art. 7, I): marketing communications and promotions are sent solely on the basis of the data subject's express consent, which may be withdrawn at any time;
• Legitimate interest (art. 7, IX): platform usage data is processed on the basis of the legitimate interest of the renda777 to improve the user experience, detect fraud, and maintain platform security, always in a proportionate manner and with full respect for data subject rights.

5. Sharing Data with Third Parties

The renda777 does not sell personal data. Sharing occurs only in the following specific situations:

5.1 Service Providers (Processors)

The renda777 uses third-party service providers that process data on the platform's behalf, always under contract with confidentiality clauses and LGPD compliance requirements. These providers include:

• Payment gateways: process transactions via Pix, credit/debit card, PicPay, and Mercado Pago, receiving only the data strictly necessary to complete each transaction;
• Cloud infrastructure providers: host the platform's servers and databases under internationally recognized security certifications;
• Identity verification providers: perform KYC verification of documents submitted by users;
• Customer service platforms: manage the chat and email support system for the renda777;
• Casino game providers: receive anonymous session identifiers to record game results, with no access to personally identifiable data.

5.2 Legal Obligations

The renda777 may share data with public authorities, regulatory bodies, the Financial Activities Control Council (COAF), and the Central Bank of Brazil when required by law, regulation, or court order. In such cases, the renda777 will share only the data specifically requested and strictly necessary to fulfill the legal demand.

5.3 Corporate Transfers

In the event of a merger, acquisition, incorporation, or sale of operational assets, user data may be transferred to the successor company, which will be bound by the same data protection obligations set out in this Policy. Users will be notified of any material change in controller.

6. Data Retention and Deletion

The renda777 retains personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods required by Brazilian law:

• Registration and identity data (KYC): retained for the period the account remains active and for a minimum of 5 years after closure, in accordance with financial compliance requirements;
• Financial transaction history: retained for a minimum of 5 years after the last transaction, in accordance with tax and anti-money laundering legislation;
• Usage data and betting history: retained for the duration of the account and for up to 2 years after closure;
• Support communications: retained for up to 2 years from each interaction, for quality control purposes and resolution of potential disputes;
• Cookie and browsing data: retained in accordance with the retention periods defined in the cookies section of this document.

Once the stated purposes and minimum legal retention periods have been met, data is securely deleted or irreversibly anonymized. Anonymized data may be retained indefinitely for statistical and platform improvement purposes, with no way to identify the original data subject.

7. Data Security

The renda777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main safeguards include:

• 256-bit SSL/TLS Encryption in all communications between client and server;
• Encryption at rest for sensitive data stored in databases;
• Role-based access control (RBAC): only staff with a proven operational need have access to specific personal data;
• Continuous monitoring of unauthorized access attempts and suspicious activity across systems;
• Two-factor authentication (2FA) available and encouraged for all user accounts;
• Security audits periodic audits conducted by internal teams and, where applicable, independent external auditors;
• Regular training of the renda777 on information security practices and the LGPD.

In the event of a security incident that may pose a significant risk or harm to data subjects, the renda777 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected data subjects within the timeframes set by the LGPD, providing information on the nature of the incident, the data involved, and the measures taken to mitigate its effects.

Although the renda777 employs robust security measures, no system is completely immune to risk. We recommend you also follow good security practices: use a strong, unique password for your account, never share your login credentials, and contact support immediately if you suspect unauthorized access to your account.

8. Cookies & Tracking Technologies

The renda777 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze service performance. A cookie is a small text file stored in your browser when you access the site.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may affect the platform's proper functioning. For optional cookies, you may decline their use without any impact on the main features of the renda777.

9. Your Rights as a Data Subject (LGPD)

The General Data Protection Law grants you, as a data subject whose information is processed by renda777, the following rights, which may be exercised at any time:

10. Minors

The services of renda777 are intended exclusively for users aged 18 and over. The renda777 does not intentionally collect personal data from minors. If we determine that a minor's data was provided during registration — whether through a false declaration of age or for any other reason — the account will be immediately suspended, the data will be securely deleted, and the incident will be handled in accordance with the Child and Adolescent Statute (ECA – Law No. 8,069/1990) and all other applicable regulations.

Parents or legal guardians who identify that a minor has used the renda777 should contact support immediately at suporte@renda777.net so that the necessary steps can be taken as a priority.

11. International Data Transfers

Some of the service providers that the renda777 uses — such as cloud infrastructure providers and casino game platforms — may process data on servers located outside Brazil. When this occurs, the renda777 ensures that any international data transfer complies with the requirements of Article 33 of the LGPD, including:

• Transfer only to countries with a level of data protection equivalent to Brazil's, as recognized by the ANPD; or
• Adoption of adequate contractual safeguards with international operators, including specific data protection clauses and security obligations equivalent to those required under the LGPD; or
• Obtaining the data subject's specific consent for the transfer, where other legal bases do not apply.

The renda777 maintains an up-to-date record of all international data transfers carried out and can provide specific details upon request to the DPO.

12. Changes to this Privacy Policy

The renda777 may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or internal process improvements. The date of the most recent update is always shown at the top of the document.

For changes that materially affect data subjects' rights or introduce new consent-based processing purposes, the renda777 will notify active users by email at least 7 days in advance. For all other updates, publishing the new version at renda777.net/privacy-policy will be sufficient to communicate the change.

Continued use of the renda777 following the entry into force of changes to this Policy constitutes acceptance of the new terms. If you do not agree with the changes, you must close your account before the effective date and request the deletion of data processed on the basis of consent.

13. Contact, DPO & Complaints Channel

To exercise your rights as a data subject, clarify questions about how your data is processed, or file a privacy-related complaint, please contact the renda777 through the channels below:

If, after contacting the renda777, you feel that your rights as a data subject have not been adequately addressed, you have the right to file a petition with the National Data Protection Authority (ANPD) through the official channels available on the federal government website.