Privacy Policy of 79x1: How We Take Care of Your Data

The 79x1 (operated at 79x1.best) is the controller responsible for processing the personal data collected from all registered users and visitors of the platform. As the controller, it is our responsibility to define the purposes and means by which personal data is processed, always in accordance with the General Data Protection Law (LGPD — Lei nº 13.709/2018) and other applicable regulations in Brazil.

This Privacy Policy applies to all services provided by 79x1, including Sports Betting (Brasileirão, Copa do Brasil, Libertadores, e-sports, MMA/UFC, and other sports), online casino games (slots, live blackjack, Crash Games, and more), bonuses and promotions, deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as all customer support interactions.

For any questions related to the processing of personal data, please contact us through the dedicated channel described in Section 13 of this policy.

The 79x1 collects personal data at various points during your interaction with the platform. The categories of data collected and the circumstances in which collection takes place are outlined below:

Data you provide directly:

• Registration: full name, CPF, date of birth, email address, mobile number, residential address (ZIP code, city, state);
• Identity verification (KYC): image of your identity document (RG or CNH) and a selfie to confirm ownership;
• Financial data: Pix key, banking details for TED, partial credit/debit card number (we do not store the full number — this is handled by the PCI-DSS certified payment processor);
• Support communications: full chat, email, and any other correspondence history with our team.

Automatically collected data:

• IP address and approximate geolocation;
• Browser type and version, operating system, and device model;
• Pages visited, access times, session duration, and browsing flow on the platform;
• Session identifiers and cookies (detailed in section 6);
• Full history of bets, games, and financial transactions made on the platform.

The 79x1 uses the personal data collected solely for the purposes described below. We do not carry out any processing beyond these purposes without first notifying you and, where applicable, obtaining fresh consent:

Your sports betting history — including matches from the Brasileirão, Copa do Brasil, Libertadores, NBB, UFC, and e-sports — is stored in full for bet settlement, dispute resolution, and regulatory compliance purposes, and also lets you review your own history at any time within the platform.

The 79x1 processes personal data always grounded in at least one of the legal bases set out in Article 7 of the LGPD. The primary bases used are:

• Contract performance (art. 7, V): Most data is necessary to provide the services themselves — without it, we cannot create your account, process Pix deposits, or record your bets. Processing on this basis does not require separate consent.
• Compliance with a legal or regulatory obligation (art. 7, II): Identity and financial data are processed to comply with obligations imposed by Brazilian anti-money laundering legislation (Law No. 9,613/1998 and COAF regulations), consumer protection laws, and future regulatory frameworks for the betting sector.
• Legitimate interest (Art. 7, IX): Browsing data and usage patterns are analyzed to improve the platform, detect fraud, and ensure account security. This interest is always weighed to ensure it does not override the rights and freedoms of the data subject.
• Consent (Art. 7, I): Promotional communications, such as emails about bonuses and 79x1 updates, are sent only with your express consent, obtained at registration. You may withdraw that consent at any time.

The 79x1 does not sell personal data. Sharing with third parties occurs only in the situations described below, always for a specific purpose and, where applicable, under contractual data protection clauses:

• Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, the necessary financial data is shared with the financial institutions and payment processors involved in the transaction. All are certified to the applicable PCI-DSS standards.
• Game providers: Session data and user identification are shared with partner casino providers (such as Evolution Gaming and Pragmatic Play) to enable the operation of live tables and round integrity verification. These providers act as data processors and are subject to data protection agreements.
• Identity verification services (KYC): Documents and selfies may be processed by specialized identity verification providers. These providers handle the data solely for verification purposes and may not use it for any other purpose.
• Public and judicial authorities: In compliance with legal, judicial, or regulatory requirements, 79x1 may be required to share data with competent authorities, such as COAF, the Federal Revenue Service, the Public Prosecutor's Office, or pursuant to court orders. In such cases, only the data expressly requested will be shared.
• Fraud prevention: In cases of suspected fraud, money laundering, or criminal activity, data may be shared with fraud prevention systems and consortiums in the financial and iGaming sectors.

Under no circumstances is 79x1 users' personal data shared with advertising networks, third-party ad platforms, data brokers, or any company for marketing purposes outside the platform.

The 79x1 uses cookies and similar technologies to ensure the platform operates correctly, improve the user experience, and carry out usage analytics. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — they keep your session active after login, secure transactions, and save your language preferences and settings. They cannot be disabled without affecting your use of the platform.
• Analytics cookies: They collect anonymized data about how users navigate the platform — most visited pages, session duration, and browsing flow. This data is used exclusively to improve the 79x1 experience and identify technical issues. Data is anonymized before storage and cannot be used to identify individual users.
• Security cookies: They help detect suspicious behavior, unauthorized access, and fraud attempts. They are essential for protecting the integrity of your account.
• Preference cookies: They store choices such as theme, betting settings, favorite sports, and other personalized preferences that make each visit more convenient.

79x1 does not use third-party advertising cookies or integrate external tracking networks for behavioral advertising purposes. You can manage preferences for non-essential cookies through the consent banner displayed on your first visit to the platform, or through your browser settings. Disabling essential cookies, however, may prevent login and transactions from working correctly.

The security of users' personal data is an operational priority for 79x1. The platform adopts technical and organizational measures proportionate to the risk involved in the processing, including:

• Encryption in transit: All communication between your device and 79x1's servers is protected by TLS 1.2 or higher, indicated by the padlock icon in your browser;
• Encryption at rest: Sensitive data stored on our servers — such as passwords (stored as salted hashes) and document data — is encrypted at rest;
• Access control: Access to 79x1 users' personal data by the internal team is restricted to the minimum necessary (principle of least privilege) and recorded in audit logs;
• Two-factor authentication (2FA): Available to all users as an additional layer of protection — we recommend enabling it in your account settings;
• Continuous monitoring: Automated systems monitor abnormal access, suspicious login attempts, and transaction patterns that may indicate account compromise;
• Security testing: The platform undergoes regular security assessments, including penetration testing and code reviews.

In the event of a security incident that may pose a significant risk or harm to data subjects, 79x1 will notify the National Data Protection Authority (ANPD) and affected users within the applicable legal timeframes, as required by the LGPD.

The 79x1 retains personal data for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations. The general retention periods are as follows:

• Registration and identity data: Retained for as long as the account remains active and for a minimum of 5 (five) years after account closure, in accordance with anti-money laundering and financial record-keeping legislation;
• Financial transaction records (Pix, boleto, card, TED): Retained for at least 5 years for audit purposes, tax obligations, and compliance with Brazilian financial legislation;
• Betting and gaming history: Retained for at least 5 years for dispute resolution, audits, and regulatory compliance;
• Customer support data: Retained for 2 years after the last contact, for reference in cases of repeat incidents or disputes;
• Browsing data and analytics cookies: Anonymized or deleted 13 months after collection;
• Marketing communications: Data used to send promotional emails is retained for as long as you have not withdrawn your consent. Once consent is revoked, your address is added to a suppression list to prevent unwanted contact.

Once the applicable retention periods have expired, data is securely deleted or anonymized so that it can no longer be linked to you as a data subject.

The LGPD grants you, as the data subject whose personal data is processed by 79x1, the right to exercise the following rights at any time:

The services of 79x1 are intended exclusively for users aged 18 and over. 79x1 does not knowingly collect personal data from individuals under 18 and does not permit minors to use the platform, place bets or play casino games, or carry out any financial transactions.

If we identify that an account was created by a minor, it will be immediately closed and the associated data deleted or anonymized, with any real BRL balance deposited returned to the legal guardian. Any bonus balance will be fully cancelled.

If you are aware or suspect that a minor has used the platform with someone else's information, please contact 79x1 support immediately so the appropriate measures can be taken without delay.

Some of the service providers used by 79x1 — such as Live Casino game providers, cloud infrastructure services, and international payment processors — may process data on servers located outside Brazil.

When such a transfer occurs, 79x1 ensures it is covered by one of the legal bases permitted under the LGPD for international data transfers, including:

• Transfer to countries with an adequate level of protection recognized by the ANPD;
• Transfer covered by standard contractual clauses that impose on the recipient the same data protection obligations required by the LGPD;
• Transfer necessary for the performance of the service agreement between 79x1 and the user (such as the processing of an international payment transaction).

Where live casino providers (such as Evolution Gaming, with studios in Europe) process data to enable connections to live tables, this is done on the basis of the service contract accepted at registration and data processing agreements (DPA) entered into between 79x1 and those providers.

The 79x1 may update this Privacy Policy periodically to reflect changes in its services, applicable Brazilian legislation (including ANPD regulations), or data processing practices. Any significant update will be communicated to your registered email address at least 7 (seven) days before taking effect.

The date of the last update appears at the top of this page. We recommend revisiting this policy periodically. Continued use of the platform after the effective date of any new terms constitutes acceptance of the changes. If you do not agree with the changes, you may close your account before they take effect.

Changes that involve new data processing based on consent will be communicated with an explicit request for fresh consent — we do not assume tacit consent for new purposes.

The 79x1 has appointed a Data Protection Officer (DPO), as recommended by the LGPD, to serve as the communication channel between 79x1, data subjects, and the National Data Protection Authority (ANPD).

For any questions about this Privacy Policy, the processing of your personal data, or how to exercise your rights as a data subject, please reach out through the channels below:

• Email: suporte@79x1.best (subject: "LGPD — Rights Request" or "LGPD — Privacy Questions")
• Live chat: available 24 hours a day directly on the platform, in Brazilian Portuguese
• Response time: up to 15 business days for formal rights requests; up to 3 business days for general inquiries via chat