Privacy Policy iate777 – Your Data Protected

The iate777 is the sports betting and online casino platform available at iate777.net, operated exclusively for the Brazilian market. For the purposes of this Privacy Policy and under the LGPD, iate777 acts as personal data controller, being responsible for decisions regarding the collection, storage, and processing of player information.

If you have questions about how we handle your data or wish to exercise any of your rights as a data subject, please contact our Data Protection Officer (DPO) at suporte@iate777.net, with the subject line "Data Protection – LGPD".

The iate777 collects only the data strictly necessary to deliver its services in a secure, regulated, and personalized way. The categories of data collected are:

The iate777 does not collect sensitive data categories such as racial origin, religious beliefs, health information, biometrics, or sexual orientation. Financial data collected is limited to what is necessary to process transactions via Pix, boleto bancário, credit and debit cards, Mercado Pago, PicPay, or TED transfer – we never store full card numbers.

The personal data collected by iate777 are used exclusively for the following purposes:

• Account creation and management: identify the player, link their account to their CPF, and ensure that each CPF corresponds to a single active registration on the platform;
• Identity verification (KYC): comply with regulatory obligations related to anti-money laundering and minimum age (18+) verification;
• Payment processing: process deposits and withdrawals via Pix, Boleto Bancário, credit and debit card, Mercado Pago, PicPay, and TED in a secure and traceable manner;
• Service delivery: provide access to Sports Betting (Brasileirão, Copa do Brasil, Libertadores), Live Casino, slots, crash games, and all other products on the platform;
• Security and fraud prevention: detect unauthorized access, anomalous behavior, multiple accounts, and other activities that violate the Terms and Conditions;
• Player support: answering questions, resolving complaints, and handling requests via live chat and email;
• Operational communications: send transaction confirmations, security alerts, and account-related notifications. Promotional communications are only sent with the player's explicit consent;
• Responsible gambling: monitor usage patterns to identify at-risk behavior and apply protective tools when necessary, as required by gambling regulations in Brazil;
• Compliance with legal obligations: respond to requests from competent regulatory and judicial authorities as required by Brazilian law.

Under the LGPD, all personal data processing must have a justifiable legal basis. The iate777 bases the processing of your data on the following legal grounds set out in articles 7 and 11 of Law No. 13.709/2018:

• Contract performance (art. 7, V): the processing of registration, payment, and platform usage data is necessary to fulfill the agreement between iate777 and the player upon acceptance of the Terms and Conditions;
• Legal or regulatory obligation (art. 7, II): KYC verification, anti-money laundering measures, and responsible gambling monitoring are legal and regulatory requirements that iate777 is obligated to comply with;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, and monitoring of anomalous behavior are based on iate777's legitimate interest in protecting both the platform and its players from unlawful activity;
• Consent (art. 7, I): sending promotional communications and personalized offers is subject to the player's express consent, which may be withdrawn at any time via the account dashboard or by email.

The iate777 does not sell, rent, or trade your personal data with third parties. Data is shared only in the cases below, strictly necessary for the operation of the platform:

• Payment processors: partner financial institutions and payment processors (such as Pix operators, bank slips, Mercado Pago, and PicPay) receive only the data necessary to process the specific transaction;
• Game providers: partner studios (such as Evolution, Pragmatic Play, NetEnt, and Spribe) may receive technical session identifiers for game operation purposes, without access to the player's financial data or identity documents;
• Identity verification services: companies specializing in KYC and anti-money laundering that assist with document verification, acting as data processors under contract with iate777 and subject to confidentiality obligations;
• Public and regulatory authorities: data may be shared with the Banco Central, the Secretaria de Prêmios e Apostas (SPA/Ministério da Fazenda), COAF (Conselho de Controle de Atividades Financeiras), and the Judiciary when formally required by law;
• External auditors: audit firms engaged by iate777 for regulatory compliance and certification purposes, bound by confidentiality agreements.

Any third party that receives personal data from players of the iate777 is contractually required to use that information solely for the purpose for which it was shared, and to implement appropriate security and confidentiality measures.

The iate777 retains your personal data for as long as necessary to fulfill the purposes described in this policy or to meet legal obligations. General retention periods are:

• Registration and KYC data: retained for as long as the account is active and for at least 5 years after closure, in accordance with anti-money laundering requirements and the regulatory obligations of the betting market in Brazil;
• Financial transaction history: retained for a minimum of 5 years after each transaction, in accordance with the Brazilian Civil Code and tax obligations;
• Communication records (chat and email): retained for 2 years from the date of contact;
• Technical data (access logs and IP): retained for 6 months, as required by the Marco Civil da Internet (Law No. 12.965/2014).

When the retention period expires and there is no legal obligation that justifies keeping the data, it is securely deleted or anonymized so that it can no longer be linked to a specific individual. Anonymized data may be used for internal statistical purposes without restriction under the LGPD.

The iate777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. The key measures in place are:

• 256-bit SSL/TLS encryption across all communications between the player's device and the platform's servers;
• Encrypted storage passwords with industry-leading hash algorithms (bcrypt), so that even iate777 staff cannot access the player's original password;
• Role-based access control: team members only have access to the data required for their specific roles, with a full log of all queries and operations;
• Two-factor authentication (2FA) available to players in the account dashboard as an additional layer of protection;
• Continuous monitoring of suspicious access attempts, brute-force attacks, and anomalous behavior across systems;
• Periodic security testing, including vulnerability assessments and penetration testing conducted by specialized firms.

In the event of a security incident that could pose a significant risk to data subjects, iate777 will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected players within the timeframe established by the LGPD, including details on the nature of the incident, the data involved, and the measures taken to mitigate the impact.

The iate777 uses cookies and similar technologies to ensure the platform functions correctly and to enhance the player experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation, such as keeping the player's session active after login and processing transactions. They cannot be disabled without affecting the site's functionality;
• Performance cookies: collect aggregated, anonymous data on how players use the platform (most visited pages, session duration, errors), used to improve performance and usability;
• Functionality cookies: remember player preferences, such as language and display settings, to personalize the user experience;
• Security cookies: help detect suspicious behavior, unauthorized access attempts, and protection against fraud.

The iate777 does not use third-party behavioral advertising tracking cookies or share browsing data with ad networks. You can configure your browser to reject non-essential cookies, though this may affect some platform features. Essential cookies must be enabled to use the Live Casino, slots, and Sports Betting normally.

The LGPD grants you, as a data subject, a robust set of rights that iate777 respects and supports the exercise of your rights. Here is what you can request:

To exercise any of these rights, please contact the iate777 by email suporte@iate777.net with the subject line "LGPD Rights – [your right]" or via live chat, available 24 hours a day. iate777 will respond within 15 business days, as required by the LGPD. For straightforward requests, a response typically arrives within 24 hours.

If you believe your rights have not been properly addressed, you may file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for enforcing the LGPD in Brazil.

Due to the nature of the online gaming market, some of the technology and game providers partnering with iate777 – such as Live Casino studios and betting management platforms – operate infrastructure in other countries. When this occurs, iate777 ensures that:

• Data transfers occur only to countries with an adequate level of data protection recognized by the ANPD, or
• Standard contractual clauses and adequate safeguards are in place, binding the recipient to protect data in accordance with LGPD standards;
• Data transferred internationally is limited to the minimum necessary for the specific service (such as technical session identifiers), and does not include identity documents or complete financial data.

The iate777 maintains an up-to-date inventory of international data flows and the safeguards applied. You may request specific information about international transfers involving your data through the DPO contact channel.

The services of iate777 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors and uses active CPF verification to prevent underage registration.

If iate777 discovers that data from a user under 18 was inadvertently collected, that data will be deleted immediately, the account will be closed, and any deposited balance will be refunded to the verified holder of the payment method used.

If you are the legal guardian of a minor and believe they have created an account on iate777, please contact us immediately at suporte@iate777.net or via live chat so the matter can be resolved urgently.

The iate777 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Material changes will be communicated at least 7 days in advance by email and/or by a prominent notice on the account dashboard.

The most current version of this policy will always be available on this page, with the date of the last update shown at the top of the document. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated terms.

For changes that significantly affect how we process your data or that impact your rights as a data subject, the iate777 will request new consent as required by the LGPD before implementing any new practices.

The iate777 has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the National Data Protection Authority (ANPD).

To contact iate777's DPO, use:

• Email: suporte@iate777.net – with the subject line "Data Protection – LGPD";
• Live chat: available 24 hours a day, 7 days a week, at iate777.net – let the team know you'd like to speak about data privacy and you'll be directed to the right channel.

The iate777 is committed to responding to all privacy and data protection requests within the deadlines set by the LGPD – up to 15 business days for formal rights requests, and up to 24 hours for general questions about this policy.