Privacy Policy of 888gme — LGPD Data Protection

This Privacy Policy describes how 888gme collects, uses, stores, and protects the personal data of its customers and visitors in Brazil. For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), the 888gme acts as the Controller of personal data processed within the scope of the platform's services.

The 888gme is a sports betting and online entertainment platform that operates exclusively in BRL (R$) and is aimed at residents in Brazil. By creating an account and using any service available on the 888gme, you agree to the data processing practices described in this Policy.

The 888gme only collects the data necessary to provide the contracted services and meet applicable legal obligations. The categories of data collected are:

The 888gme does not intentionally collect data in sensitive categories, such as racial or ethnic origin, religious beliefs, health data, or sexual orientation. If such information is voluntarily shared during a support interaction, it will not be stored in a structured way within the platform's systems.

The data collected by the 888gme are used for the following purposes:

• Service delivery: account creation and management, processing of deposits via Pix, boleto, and card, withdrawal processing, bet recording, and access to live casino, slots, and crash games;
• Identity verification (KYC): confirmation that the account holder is over 18 years of age, resides in Brazil, and is the legitimate owner of the payment methods used;
• Fraud and money laundering prevention: monitoring atypical transactions, detecting multiple accounts, and fulfilling financial compliance obligations;
• Transactional communications: registration confirmations, deposit and withdrawal notifications, security alerts, and support responses;
• Promotional communications: sending offers, bonuses, and news from 888gme — only with consent and always with an opt-out option;
• Experience Personalization: betting recommendations and relevant content based on your platform usage history;
• Responsible Gambling: monitoring of usage patterns to identify at-risk behaviors and offer proactive player support;
• Compliance with legal obligations: responding to requests from competent authorities and complying with applicable tax and financial legislation in Brazil.

The processing of personal data by the 888gme is grounded in the following legal bases set out in the LGPD (Art. 7 and Art. 11):

• Contract performance (art. 7, V): the processing is necessary to deliver the services the User contracted when creating their account on 888gme — includes registration, betting, deposits, and withdrawals;
• Compliance with a legal obligation (art. 7, II): financial and identity data are processed to fulfill Brazilian legal obligations, including anti-money laundering regulations and financial compliance requirements;
• Legitimate interest (Art. 7, IX): technical and behavioral data on the platform are used for security, fraud prevention, and ongoing service improvement, always in compliance with data subject rights;
• Consent (art. 7, I): promotional communications and advanced personalization are subject to the User's express consent, which may be withdrawn at any time.

The 888gme does not sell personal data. Sharing with third parties takes place only in the situations below, based on the legitimate purposes described in this Policy:

• Payment processors: to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, and Mercado Pago — we share only the minimum data required for each transaction;
• Identity verification providers: specialized KYC (Know Your Customer) providers used to verify identity and prevent fraud — operating under contracts that include confidentiality and data protection clauses;
• Game providers: live casino, slots, and crash game developers who supply the games available on the platform — data shared is limited to what is strictly necessary for gaming sessions to function;
• Legal authorities: mandatory disclosure to Brazilian law enforcement, judicial, or regulatory authorities upon legal order, court warrant, or specific regulatory obligation;
• IT service providers: cloud infrastructure and technical support providers acting as processors under the instruction of the 888gme, bound by data processing agreements.

All third parties that receive personal data from customers of 888gme are assessed for their security practices prior to engagement and operate under contractual clauses requiring LGPD compliance.

The 888gme uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and understand how our services are used. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — maintaining login sessions, language preferences, and the bet slip. They cannot be disabled without affecting your ability to use the service;
• Performance cookies: collect anonymous information about how users navigate the platform, which pages they visit most, and where errors occur — used to improve 888gme's performance and stability;
• Functional Cookies: remember user preferences, such as preferred layout, last sport accessed, and live betting settings;
• Analytical cookies: used to understand aggregated, anonymous usage patterns without identifying individual users — the data generated informs product decisions and platform improvements.

By accessing the 888gme for the first time, you will see a cookie notice with the option to accept or customize your preferences. At any time, you can adjust cookie settings through your browser or the preferences section of your account.

The 888gme retains personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. General retention periods are:

• Registration and identity data: retained for the full duration of the account and for a minimum of 5 years after closure, as required by Brazilian anti-money laundering legislation (Law 9,613/1998);
• Financial transaction history (deposits and withdrawals via Pix, boleto, card): retained for at least 5 years for audit and tax compliance purposes;
• Betting History: retained for the full duration of the account and for at least 2 years after closure;
• Support and communications data: retained for up to 2 years after the last interaction, for the purposes of service improvement and dispute resolution;
• Non-essential cookie data: retained according to user settings, with a maximum period of 13 months.

Once the applicable retention period expires, data is securely deleted or anonymized so that the data subject can no longer be identified. A deletion request submitted by the data subject may accelerate this process, subject to any mandatory legal retention obligations.

The 888gme implements technical and organizational measures to protect its customers' personal data against unauthorized access, loss, alteration, or destruction. The key measures in place include:

• 256-bit SSL/TLS encryption on all communications between the user's device and the servers of 888gme;
• Passwords stored exclusively in hashed format (bcrypt), with no possibility of plain-text recovery;
• Role-based access control (RBAC): only employees with a legitimate need can access customer data;
• Continuous monitoring of unauthorized access attempts and suspicious activity across systems;
• Regular security testing and vulnerability audits of the platform;
• Security incident response policy: in the event of a data breach that may pose a risk to the data subject, the 888gme will notify affected users and the National Data Protection Authority (ANPD) within the legally required timeframe.

Despite the measures in place, no system is completely immune to threats. We therefore recommend protecting your account with a strong password, unique to 888gme, and never share your login credentials with third parties. If you suspect your account has been compromised, contact our support team immediately.

The LGPD grants personal data subjects a set of rights that 888gme commits to fulfilling in full. You may exercise any of the rights below via support chat or by emailing contato@888gme.net:

The services of the 888gme are intended exclusively for individuals aged 18 or older. The 888gme does not intentionally collect personal data from individuals under 18 years of age.

During registration, your CPF and date of birth are requested to verify that you are of legal age. The 888gme may request proof-of-age documentation at any time, particularly before processing withdrawals. Accounts identified as belonging to minors will be closed immediately and any deposited balance will be returned to the original payment method.

If you discover that a minor has created an account on 888gme, please contact our support team immediately via chat or at contato@888gme.net. We take this type of incident with the utmost seriousness.

The 888gme may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or adopted privacy practices. Material changes will be communicated:

• By email to the address registered on the account, at least 15 days before the changes take effect;
• Via a prominent notice on the platform during the transition period;
• By the updated date shown in the header of this page.

Continued use of the services of the 888gme after the changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure and withdrawal of your available balance before the effective date.

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concern related to the processing of personal data by 888gme, you can reach us through the channels below:

• Live Chat: available directly on the 888gme platform, 24 hours a day, 7 days a week, in Brazilian Portuguese — the fastest channel for urgent requests;
• Privacy email: contato@888gme.net — include "LGPD Request" in the subject line and describe your request in as much detail as possible. Response time: up to 15 business days after identity verification.

The 888gme has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance within the organization and serving as the communication channel between data subjects and the company. Requests addressed to the DPO should be sent to contato@888gme.net with the subject line "DPO — Data Protection".

If you are not satisfied with the response from the 888gme to your request, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the body responsible for overseeing LGPD compliance in Brazil.