New777 Privacy Policy – Data Protection in Brazil

01About Us — Data Controller

New777 is the operator responsible for the platform available at https://new777.best, offering sports betting, online casino, slots, crash games, and live casino services targeted at the Brazilian market.

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), new777 acts as the data controller of the personal data collected and processed in connection with the provision of its services. The data protection officer (DPO) can be reached at suporte@new777.best.

This Policy applies to the website, the mobile web app, and any other digital platform operated by new777. By interacting with any of these channels, you are subject to the terms described herein.

02Data We Collect

New777 collects only the data necessary to deliver its services securely, meet legal obligations, and provide the best possible experience to users in Brazil. Data collection falls into the following categories:

2.1 Data provided directly by you

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address;
• Verification documents: National ID (RG), driver's license (CNH), or passport — collected during the KYC (Know Your Customer) process when required;
• Financial data: payment method details (Pix key, credit/debit card data, bank account for wire transfer) — we never store your full card number;
• Communications: messages exchanged with support via live chat or email.

2.2 Automatically collected data

• Browsing data: IP address, device type, operating system, browser, pages visited, and session duration;
• Platform usage data: games accessed, bets placed, filters and preferences applied, transaction history;
• Approximate location data: inferred from IP address for eligibility verification and security purposes — we do not collect GPS data;
• Cookies and similar technologies: as described in section 6 of this Policy.

2.3 Third-party data

In some cases, new777 may receive data about you from external sources for identity verification, fraud prevention, or regulatory compliance purposes. This includes credit bureau services, CPF verification systems, and payment partners such as card networks, PicPay, and Mercado Pago — strictly to the extent necessary to process transactions.

03How We Use Your Data

Data collected by new777 is used exclusively for the purposes described below. No data is used in a manner incompatible with its original collection purpose without the explicit consent of the data subject.

New777 does not use your personal data for solely automated decisions that produce legal effects or significant impacts without the possibility of human review. Should such a mechanism be implemented in the future, you will be notified in advance and will have the right to request review by a human analyst.

04Legal Basis for Data Processing

Every personal data processing operation carried out by new777 is grounded in at least one legal basis provided under the LGPD. The main bases we rely on are:

• Contract performance (art. 7, V): processing is necessary to deliver the services you signed up for when creating your new777 account — betting, payments, and support;
• Legal obligation (art. 7, II): certain operations are required by law, such as identity verification, financial record retention, and anti-money laundering measures under Brazilian legislation;
• Consent (art. 7, I): for marketing communications and advanced personalization, we ask for your explicit consent at registration, and you may withdraw it at any time;
• Legitimate interest (art. 7, IX): for platform security, fraud prevention, and ongoing service improvement, provided these purposes do not override your fundamental rights and freedoms.

Where the legal basis is consent, you have the right to withdraw it at any time without affecting access to the core services. Withdrawing consent for marketing, for example, does not impact account access or the processing of bets and withdrawals.

05Data Sharing with Third Parties

New777 does not sell your personal data. We share information only when strictly necessary for the purposes described in this Policy, and always with partners that provide adequate data protection guarantees.

5.1 Payment partners

To process deposits and withdrawals, we share the necessary data with the operators of each payment method — including Pix processors, Mercado Pago, PicPay, credit and debit card networks (Visa, Mastercard), and banking partners (Nubank, Itaú, Bradesco, Banco do Brasil). Sharing is limited to the minimum required to complete each transaction.

5.2 Game providers

New777's casino and slots provider partners — including PG Soft, Pragmatic Play, NetEnt, Play'n GO, Microgaming, Hacksaw Gaming, and Spribe — receive only the technical session data required to operate games within the platform. These providers do not receive complete financial data or identity documents.

5.3 Technical service providers

New777 works with IT infrastructure, cybersecurity, data analytics, and customer support partners who may access personal data in the course of their work. All service providers are bound by contracts that establish confidentiality and data protection obligations equivalent to those set out in this Policy.

5.4 Competent Authorities

New777 may disclose personal data to law enforcement, judicial, or regulatory authorities when required by law, court order, or applicable regulation — including requests from the Banco Central do Brasil, Receita Federal, or public security agencies within legal limits.

06Cookies and Tracking Technologies

New777 uses cookies and similar technologies to improve the user experience, ensure the platform functions correctly, and understand how users interact with the site. Below we explain the types of cookies we use:

6.1 Strictly necessary cookies

These are essential for the platform to function — such as keeping your session active while you browse, remembering language preferences, and ensuring authentication works correctly. These cookies cannot be disabled without impairing your use of the site.

6.2 Performance and analytics cookies

These collect information about how users interact with the platform — which pages are visited most, where errors occur, and loading times. The data is aggregated and anonymized, used solely to improve site performance.

6.3 Personalization Cookies

These allow new777 to remember your preferences — such as favorite games, filters applied in the Sports Betting section, or display settings — to deliver a more personalized experience on every visit.

6.4 Marketing Cookies

Used to present relevant content within the platform, such as promotions for games you've shown interest in. new777 does not use cookies to display advertising on third-party websites.

6.5 How to manage cookies

You can configure your browser to block or delete cookies at any time. Most modern browsers — Chrome, Firefox, Safari, Edge — offer detailed cookie controls in their privacy settings. Keep in mind that disabling certain cookies may affect platform functionality.

07Data Security

New777 applies technical and organizational safeguards proportional to the risk involved to protect your personal data against unauthorized access, loss, alteration, or improper disclosure. Security practices in place include:

• 256-bit SSL/TLS Encryption across all communications between your device and new777's servers;
• Encryption at rest for sensitive data stored in databases — including identity documents and financial data;
• Two-Factor Authentication (2FA) available and encouraged for all users;
• Continuous monitoring of suspicious access attempts and intrusion attempts, with automated alerts;
• Access segregation internal — staff members only have access to the data strictly necessary for their role;
• Periodic security audits carried out by internal teams and specialized external partners;
• Incident response plan established for prompt notification in the event of a data breach, as required by the LGPD.

Despite all measures in place, no system is 100% invulnerable. In the event of a security incident that could cause risk or harm to you, new777 commits to notifying you and the Autoridade Nacional de Proteção de Dados (ANPD) within the legal deadlines established by the LGPD.

08Data Retention

New777 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, respecting the minimum retention periods required by law. General retention criteria are:

• Registration and active account data: retained for the full lifetime of the account and for up to 5 years after closure, in accordance with audit and anti-money laundering obligations;
• Financial and transaction records: retained for 5 years from the transaction date, in compliance with Brazilian tax and financial legislation;
• Identity verification documents (KYC): retained for a minimum of 5 years after account closure or as required by applicable law;
• Support communication data: stored for up to 2 years for quality assurance, auditing, and dispute resolution purposes;
• Cookie and browsing data: according to the technical configuration of each cookie type — typically between 30 days and 13 months;
• Marketing data (with consent): retained until consent is withdrawn or a deletion request is submitted by the data subject.

Once the applicable retention period expires, data is securely deleted or anonymized so that re-identification of the individual is no longer possible.

09Your Rights as a Data Subject — LGPD

The LGPD grants you a set of rights over your personal data. new777 is committed to making it easy to exercise those rights — no unnecessary red tape. Your rights include:

9.1 How to exercise your rights

To exercise any of the rights above, please contact new777's data protection officer by email at suporte@new777.best with the subject line "LGPD Rights — [your right]". We will respond within 15 business days of receiving your request, as required by law.

9.2 Complaint to the ANPD

If you believe your rights have not been properly addressed by new777, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.

10International Data Transfer

Some of new777's service providers and technical partners may process data on servers located outside Brazil. When this occurs, new777 ensures that international transfers are carried out with appropriate safeguards, as required by art. 33 of the LGPD, including:

• Transfer to countries that offer a level of data protection equivalent to the LGPD, as assessed by the ANPD;
• Use of specific contractual clauses requiring the recipient to maintain an equivalent standard of data protection;
• Assurances backed by internationally recognized security certifications.

New777 prioritizes partners that process data in Brazil or in jurisdictions with recognized robust data protection legislation. Any international transfer is documented and can be reviewed by the data subject upon request to the data protection officer.

11Minors Under 18

New777 services are strictly intended for users aged 18 and over. The platform does not intentionally collect, store, or process personal data from minors.

CPF verification at registration is new777's primary age-control mechanism. Accounts identified as belonging to users under 18 are immediately closed, with any balances held pending completion of the review process.

If you believe that a minor's data has been inadvertently collected by new777, please contact support immediately at suporte@new777.best. We will take the necessary steps to delete the data as soon as the situation is confirmed.

12Changes to this Privacy Policy

New777 may update this Privacy Policy periodically to reflect changes in data processing practices, new services offered, or legal and regulatory requirements.

Material changes will be communicated by email at least 10 days before taking effect. The "Last updated" date at the top of this page always reflects the current version. We recommend reviewing this Policy periodically.

Continued use of new777's services after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the new terms, you may request account closure before the effective date without affecting your ability to withdraw any available balance.

13Contact and Data Protection Officer (DPO)

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, please contact new777's data protection officer:

• Email: suporte@new777.best — with the subject line "Privacy / LGPD";
• Live chat: available 24 hours a day, 7 days a week, directly on the platform;
• Response time: up to 15 business days for LGPD rights requests; up to 24 hours for other urgent privacy matters.

Our team operates exclusively in Brazilian Portuguese and is fully prepared to handle privacy matters with the confidentiality and seriousness they require.