Privacy Policy of r7be – Your Data, Always Protected

1. Personal Data We Collect

The r7be collects users' personal data at various points of interaction with the platform. Data collection is proportionate to the purposes described in this Policy and follows the data minimization principle set out in the LGPD: we only collect what is necessary to provide the service safely and efficiently.

Data collected at registration:

• Full name as shown on official document
• CPF (Individual Taxpayer Registration)
• Date of birth
• Email address
• Mobile phone number
• Residential address (zip code, street, city, state)

Data collected during platform use:

• Betting history and activity across casino games, slots, and crash games
• Financial transaction history (deposits via Pix, boleto, card, PicPay, Mercado Pago, and withdrawals)
• IP address and technical device data (model, operating system, browser)
• Approximate geolocation data for security and regulatory compliance purposes
• Access logs (login times, sessions, actions performed on the platform)
• Communications with support via live chat or email

Data collected during identity verification (KYC):

• Image of official government-issued ID (RG, CNH, or passport)
• Selfie for biometric validation when requested
• Proof of address

2. How We Use Your Data

Data collected by r7be is used solely for the purposes described below. No data is used for purposes not covered by this Policy without notifying the user and, where required by the LGPD, without obtaining fresh consent.

• Creating and managing the user's account on the platform
• Processing of deposits and withdrawals in BRL (R$) via Pix, boleto bancário, card, PicPay, Mercado Pago, and TED
• Identity verification (KYC) to meet legal obligations and prevent money laundering
• Personalization of your platform experience (language, favorite sports, game history)
• Sending mandatory operational communications (deposit confirmation, withdrawal results, security alerts)
• Sending marketing communications, promotions, and personalized offers — only to users who have given consent
• Prevention of fraud, bonus abuse, and illegal activity on the platform
• Compliance with applicable legal and regulatory obligations in Brazil
• Continuous platform improvement based on aggregated, anonymized usage behavior data
• Dispute resolution and handling of support requests

R7be does not use automated decisions that produce significant legal effects for users without the possibility of human review. Any relevant automated decision-making process — such as identifying suspected fraudulent behavior — is reviewed by the compliance team before any action is taken on a user's account.

3. Legal Basis for Data Processing (LGPD)

R7be processes personal data based on the following legal grounds established under the LGPD (Art. 7 and Art. 11):

• Contract performance: processing required to provide the services agreed upon when creating an account and accepting the Terms and Conditions
• Legal or regulatory obligation: sharing with public authorities and maintenance of financial records required by law (Law 9,613/1998 – anti-money laundering; Central Bank regulations)
• Legitimate interest: fraud prevention, platform security, and improvement of the user experience, where these do not conflict with the data subject's rights and freedoms
• Consent: sending marketing communications, using non-essential cookies, and collecting data for advanced personalization — always with the option to withdraw consent

4. Data Sharing with Third Parties

R7be shares users' personal data only in the situations described below and always on an appropriate contractual or legal basis. We never sell, rent, or share data for third-party advertising purposes.

Operational partners: payment processors (for transactions via Pix, credit/debit card, boleto bancário, PicPay, and Mercado Pago), casino and slots game providers (for game session validation), and identity verification partners (KYC). All partners are bound by contracts requiring proper and secure data handling.

Public authorities: r7be may share data with competent Brazilian authorities when required by law, court order, or to fulfill regulatory obligations, including COAF (Conselho de Controle de Atividades Financeiras) and the Banco Central do Brasil.

Technology infrastructure providers: cloud hosting, cybersecurity, and platform performance analysis services may process anonymized or pseudonymized technical data for operational purposes.

5. Data Security and Protection

R7be implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, improper disclosure, destruction, or accidental loss. The key security measures in place include:

• 256-bit SSL encryption across all communications between the user and the platform
• Passwords stored using irreversible cryptographic hashing (bcrypt) — r7be never has access to your password in plain text
• Two-factor authentication (2FA) available to all users as an additional layer of account security
• Continuous monitoring for suspicious access and unauthorized login attempts
• Internal access segmentation: r7be employees access only the data required for their specific role
• Regular security testing and vulnerability audits conducted by a specialized team
• Security incident response plan with notification to the ANPD (National Data Protection Authority) when required by the LGPD

In the event of a security incident affecting user data, r7be will notify affected data subjects via their registered email as quickly as possible, providing details about what occurred and the measures taken, in accordance with Art. 48 of the LGPD.

6. Cookies and Tracking Technologies

R7be uses cookies and similar technologies to ensure the platform functions properly, personalize the user experience, and analyze site performance. Cookies are classified as follows:

• Essential cookies: required for the platform's basic functionality, such as maintaining your login session and language preferences. These cannot be disabled without affecting your use of the platform.
• Analytical cookies: collect anonymized data on how users navigate the platform (pages visited, session duration, traffic source) to improve the experience. These can be declined without affecting platform functionality.
• Functional cookies: store user preferences such as favorite sports, odds settings, and filter history. These can be declined, though doing so will disable personalization features.
• Security cookies: used to detect and prevent fraud, bots, and suspicious access. These are essential for account security and cannot be disabled.

The first time you access r7be, you will see a cookie notice with the option to manage your preferences. You can update your cookie settings at any time via the cookie banner or by contacting support. Essential and security cookies remain active regardless of the preferences you select.

7. Data Retention and Deletion

R7be retains users' personal data for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations. General retention periods are as follows:

Once legal retention periods have elapsed, data is securely and irreversibly deleted or anonymized for statistical purposes. Data not subject to a legal retention obligation may be deleted upon the data subject's request at any time, as described in the user rights section of this Policy.

8. Your Rights as a Data Subject

The LGPD grants data subjects a set of rights that r7be fully respects. You may exercise any of these rights at any time through live chat support or the platform's privacy email. r7be has up to 15 business days to respond to data subject rights requests.

9. Minors

R7be is a platform exclusively for users aged 18 (eighteen) or older. Registration by minors is strictly prohibited and constitutes a violation of the platform's Terms and Conditions.

R7be does not intentionally collect personal data from minors. If an account is found to have been created by someone under 18, it will be immediately closed, the collected data will be deleted, and any remaining balance will be returned to the original payment method, subject to applicable legal obligations.

Legal guardians who discover that a minor has created an account on r7be should contact support immediately via live chat or at contato@r7be.best so that the appropriate measures can be taken promptly.

10. Data Protection Officer (DPO) and Contact

R7be has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the LGPD, handling data subject requests, and maintaining the relationship with the National Data Protection Authority (ANPD).

To contact r7be's DPO or for any questions relating to privacy and personal data protection on the platform, use the following channels:

• Live chat available 24 hours on the r7be platform (response in under 5 minutes)
• Email: contato@r7be.best (subject: "Privacy and Data Protection")
• Email response time: up to 2 business days
• Deadline to exercise LGPD rights: up to 15 business days after identity confirmation

If you believe your data protection rights have not been adequately addressed by r7be, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal body responsible for enforcing the LGPD in Brazil.

11. Updates to This Policy

R7be may update this Privacy Policy periodically to reflect changes in data processing practices, Brazilian legislation, or the services offered by the platform. The date of the most recent update is always shown at the top of this page.

Significant changes that affect your rights or the processing of sensitive data will be communicated by email at least 15 calendar days before taking effect. Continued use of the platform after the effective date of the updated terms constitutes acceptance of the revised Policy.

The version of this Policy currently in effect is always the one published on this page. Previous versions may be requested from r7be support for reference and comparison purposes.