Win757 Privacy Policy – Your Data, Protected

Who We Are and Who Controls Your Data

Win757 is a sports betting and online casino platform operated for the Brazilian market, accessible at win757.best and through the app available for Android and iOS. For the purposes of the General Personal Data Protection Law (LGPD – Law No. 13,709/2018), Win757 acts as the controller of the personal data collected from registered users on the platform.

As the data controller, Win757 is responsible for determining the purposes and means of processing your personal data. All processing operations — collection, storage, use, sharing, and deletion — are carried out in compliance with the principles and obligations established by the LGPD and other applicable Brazilian regulations.

This Privacy Policy applies to all registered Win757 users, website visitors, and anyone whose data is processed in connection with our services — including sports betting on football, volleyball, MMA, UFC, and other sports, as well as casino products such as slots, live casino, crash games, and progressive jackpots.

What Personal Data We Collect

Win757 collects different categories of data depending on how you interact with the platform. Each type is detailed below:

Registration and identity data:

• Full name and date of birth
• CPF (Cadastro de Pessoas Físicas) — required for identity verification and payment processing
• Email address and mobile phone number
• Full residential address (street, number, unit, ZIP code, city, state)
• Identity documents (RG, CNH, or passport) — requested during the KYC verification process before withdrawals

Financial data:

• Pix key for deposits and withdrawals
• Partial credit or debit card details (masked number, card brand — never the full card number)
• History of deposits, withdrawals, and bets placed on the platform
• Bank account information linked to TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil, and others)

Usage and browsing data:

• IP address and approximate geolocation data
• Browser type and version, operating system, and device used
• Pages visited, session duration, games accessed, and features used
• Cookie and similar technology data (described in Section 7)

Communication data:

• Content of messages sent to support (chat, email, or WhatsApp)
• Registered complaints, requests, and feedback

How and Why We Use Your Data

Win757 uses your personal data solely for the purposes described below. Each use has a corresponding legal basis detailed in Section 4:

Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing operation have a specific legal basis. Win757 grounds the processing of your data on the following grounds set out in Article 7 of Law No. 13.709/2018:

• Performance of a contract (art. 7, V): Processing is necessary for the performance of the Win757 platform usage agreement — without registration and payment data, it is not possible to create an account or process deposits and withdrawals.
• Compliance with a legal or regulatory obligation (art. 7, II): Some data collection is required by law — such as CPF verification for anti-money laundering purposes and compliance with tax obligations.
• Legitimate interest (art. 7, IX): Fraud prevention, platform security, and service improvement based on anonymized data, always in accordance with data subjects' rights and reasonable expectations.
• Consent (art. 7, I): For marketing communications and promotions, we operate on the basis of your express consent. You may withdraw that consent at any time in your account settings or by contacting support.
• Legitimate exercise of rights (art. 7, VI): Data retained for the legally required period to support defense in administrative or judicial proceedings.

Who We Share Your Data With

Win757 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. Sharing occurs exclusively in the cases listed below, always with adequate data protection safeguards in place:

• Payment processors: Financial institutions and payment gateways that process your transactions via Pix, boleto, credit and debit card, PicPay, Mercado Pago, and TED. These partners receive only the data strictly necessary to process each transaction.
• Game providers: Certified studios such as Pragmatic Play, PG Soft, Hacksaw Gaming, Spribe, and other partners receive an anonymized user identifier for round recording and settlement purposes — never full identity data.
• Identity verification services (KYC): Certified document verification platforms used to confirm user identity prior to higher-value withdrawals, in compliance with anti-money laundering regulations.
• IT infrastructure providers: Hosting, cloud storage, and security service providers that process data on behalf of Win757, under data processing agreements with confidentiality and security obligations.
• Public authorities: When required by court order, regulatory authority ruling, or express legal obligation — such as requests from the Financial Activities Control Council (COAF) related to anti-money laundering compliance.

Data Security

Win757 implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption: All communication between your device and Win757's servers is encrypted. This applies to the website, the Android and iOS app, and all payment APIs.
• Cryptographic password hashing: Your password is never stored in plain text. We use modern salted hashing algorithms to ensure that even our internal team cannot access your actual password.
• Two-factor authentication (2FA): Available and recommended for all users, adding an extra layer of protection to your account access.
• Real-time anti-fraud monitoring: All financial transactions are automatically analyzed by systems that detect suspicious patterns and block fraud attempts before they cause any impact.
• Internal access control: Only staff members with a verified operational need have access to users' personal data, and all access is logged in auditable records.
• Regular security testing: Win757's infrastructure undergoes periodic penetration testing and security audits conducted by specialized third-party firms.

In the event of a security incident that may affect your personal data, Win757 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected data subjects within the timeframes established by the LGPD, according to the severity of the incident.

Cookies and Tracking Technologies

Win757 uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and analyze service performance. A cookie is a small text file stored in your browser or device when you access the platform.

We use the following types of cookies:

• Essential cookies: Required for basic platform functionality — session management after login, language preferences, and security settings. Without these cookies, the platform cannot function properly. They cannot be disabled.
• Performance and analytics cookies: They collect anonymized information about how users interact with the platform — which pages are visited most, where errors occur, and page load times. Used exclusively to improve the user experience.
• Functional cookies: Store user preferences such as preferred layout, game filters, and betting settings so you don't have to reconfigure them on every visit.
• Security cookies: They help detect fraud and recognize trusted devices, reducing the need for repeated verification checks every session.

You can manage or disable non-essential cookies through your browser settings or the Win757 cookie preference panel. Disabling essential cookies may prevent the platform from functioning properly. On Android and iOS apps, tracking preferences follow your mobile device's operating system settings.

Data Retention and Deletion

Win757 retains your personal data only for as long as necessary to fulfill the purposes described in this policy or to meet legal and regulatory obligations. The retention criteria are as follows:

• Active account data: Retained for as long as your Win757 account is active and necessary for the provision of services.
• After account closure: Financial transaction data and betting history are retained for up to 5 (five) years after account closure, as required by tax and anti-money laundering legislation.
• KYC verification data: Identity documents and proof of address submitted for verification are retained for the minimum period required by anti-money laundering regulations — generally 5 years after the last transaction.
• Security logs: Access logs and security activity records are retained for up to 6 (six) months for incident investigation purposes.
• Marketing data: Retained until you withdraw consent for communications or request deletion.

Once the applicable retention period expires, data is securely and permanently deleted from Win757's systems, with no possibility of recovery. Anonymized data — which cannot be used to identify you individually — may be retained indefinitely for statistical analysis and service improvement purposes.

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a data subject, a set of rights that Win757 is committed to respecting and upholding. Here is what you can request at any time:

To exercise any of these rights, contact Win757 support via 24/7 live chat, by email at suporte@win757.best, or through WhatsApp. Win757 will respond to requests within the timeframe set by the LGPD — within 15 days for straightforward requests. Requests requiring more complex analysis may take up to 30 days, with advance notice of the extended deadline.

If you believe your rights have not been properly addressed, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), as provided under article 18, § 1 of the LGPD.

Minors

Win757 services are intended exclusively for users aged 18 (eighteen) and over. The platform does not intentionally collect personal data from minors under 18 and does not allow registration by individuals in that age group.

If we identify that an account was created by a minor, the account will be immediately closed, the data will be removed, and any deposited funds will be refunded upon verification. If you, as a guardian, discover that a minor accessed the platform using someone else's information, contact our support team immediately so we can take the appropriate action.

International Data Transfer

In some situations, personal data from Win757 users may be transferred to and processed on servers located outside Brazil — for example, when using cloud infrastructure services or game platforms from international providers such as Pragmatic Play, PG Soft, Hacksaw Gaming, and Spribe.

Whenever such a transfer occurs, Win757 ensures your data is protected by safeguards equivalent to those required under the LGPD, including:

• Standard data protection contractual clauses with international recipients
• Transfers only to countries or organizations that the ANPD recognizes as providing an adequate level of data protection
• Internationally recognized compliance certifications and seals held by the recipient providers

You can request information about international data transfers involving your personal data by contacting Win757 support.

Changes to This Privacy Policy

Win757 may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data protection practices. When that happens:

• Significant changes will be communicated by email and through a prominent notice on the platform at least 7 (seven) days before taking effect.
• Minor changes — such as wording corrections or clarifications that have no impact on data subjects' rights — may be implemented immediately, with the revision date at the top of this page updated accordingly.
• For changes that involve new data processing or new purposes based on consent, we will request your consent again before the new processing begins.

The date of the last update to this policy is always shown at the top of this page. We recommend reviewing this document periodically to stay informed about how Win757 handles your personal data.

Contact, Data Protection Officer (DPO) & Privacy Channel

To exercise your rights as a data subject, get clarification on this Privacy Policy, or report any concern regarding how Win757 handles your data, please use the channels below:

• General email: suporte@win757.best
• Live chat: Available 24 hours a day, 7 days a week, on the Win757 platform — in Brazilian Portuguese
• WhatsApp: See the current number in the contact section of the platform

Win757 has appointed a Data Protection Officer (DPO), as required by the LGPD for organizations that process data at scale. You can reach the DPO directly through our support email by using the subject line "Subject: Data Protection / DPO".

All requests related to personal data are handled as a priority by the Win757 team and logged for traceability and legal deadline compliance. You will receive an acknowledgment within 48 hours and a full response within the timeframes established by the LGPD.