7iwin Privacy Policy – Protection of Your Personal Data

For the purposes of this Privacy Policy and the LGPD, the controller responsible for processing personal data collected on the 7iwin platform is the company operating the platform accessible at 7iwin.asia, providing sports betting and online casino gaming services to Brazilian users.

For any privacy or data-related inquiries, the official contact channel is suporte@7iwin.asia. 7iwin has appointed a Data Protection Officer (DPO) who can be reached at the same address for formal requests related to the LGPD.

By using any feature of the 7iwin platform — including browsing, registration, deposits, bets, and withdrawals — you acknowledge that you have read and agree to the terms of this Privacy Policy. This document should be read together with the Terms and Conditions of the platform.

7iwin collects personal data at different points throughout your journey on the platform. Below is a detailed description of each category:

Registration data: To create a 7iwin account, you'll need to provide your full name, CPF, date of birth, email address, mobile number, and full residential address. This information is required to verify your identity, confirm that you are over 18, and meet our legal obligations under anti-money laundering regulations.

Identity verification (KYC) data: During the verification process, we may request a copy of a government-issued photo ID (RG, CNH, or passport), proof of address issued within the last 90 days, and a selfie with your document. This information is collected solely to confirm account ownership and verify the user's identity.

Financial data: To process deposits and withdrawals, 7iwin records the Pix keys used, the originating bank or digital wallet (Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago, and others), and the transaction history on the platform. Full credit card data is processed by the payment gateway and is not stored on 7iwin's servers.

Platform usage data: 7iwin automatically logs information about how you use the service — betting history, games accessed, live casino sessions, login times, and gaming preferences. This data is used to personalize your experience, detect fraud, and improve the platform.

Technical data: When you access the platform, we automatically collect your IP address, device type (Android phone, iPhone, or desktop), operating system, browser, device identifiers, and approximate geolocation data. This information helps us detect fraudulent access attempts and optimize performance across different devices.

Every piece of data collected by 7iwin has a specific and legitimate purpose. We do not use your information for anything beyond what is described below:

7iwin may send communications via email or mobile regarding your account — such as Pix deposit confirmations, security alerts, policy updates, and withdrawal notifications. Marketing communications and promotions (such as welcome bonus offers or Crash Games tournaments) are only sent with your consent, which may be withdrawn at any time.

The LGPD requires that every processing of personal data have a specific legal basis. 7iwin relies on the following legal bases set out in Art. 7 of Law No. 13.709/2018:

• Contract performance (art. 7, V): Most of the data we collect is necessary to fulfill the service agreement between you and 7iwin. Without a CPF and email address, an account cannot be created. Without a Pix key, withdrawals cannot be processed. These uses do not require additional consent;
• Compliance with a legal obligation (Art. 7, II): Identity verification (KYC) and transaction monitoring for anti-money laundering purposes are legal obligations imposed on 7iwin. These processing activities are mandatory and cannot be waived at the user's request;
• Legitimate interest (art. 7, IX): Fraud detection, gaming experience personalization, and monitoring of patterns associated with problem gambling are carried out based on the legitimate interests of 7iwin and its users;
• Consent (Art. 7, I): Marketing communications, non-essential cookies, and data sharing beyond the purposes listed above require your explicit consent, which may be withdrawn at any time without affecting your access to the core service.

7iwin does not sell its users' personal data. Information is only shared with third parties in the following situations, all of which are justified by operational necessity or legal obligation:

• Payment processors: To process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, and Mercado Pago, we share only the strictly necessary financial data with the relevant financial institutions and payment gateways. These partners are contractually required to use the data solely for the specific purpose of payment processing;
• Game providers: Online casino providers (such as Pragmatic Play, Evolution Gaming, and Spribe) receive minimal session data necessary for their games to function properly on the 7iwin platform. These providers maintain their own privacy policies and are certified by international regulatory bodies;
• IT and security service providers: Companies that provide technological infrastructure, fraud analysis, and cybersecurity services to 7iwin may access technical data in the course of delivering those services, always under a confidentiality agreement;
• Competent authorities: 7iwin complies with formal requests from Brazilian judicial, law enforcement, regulatory, or tax authorities when required by law. We cooperate fully with investigations into financial fraud, money laundering, and related offenses;
• Auditors and consultants: During internal or external audits, anonymized or aggregated data may be shared. Identifiable data is only shared when strictly necessary and under rigorous confidentiality agreements.

Under no circumstances are 7iwin users' personal data sold, transferred, or made available to marketing companies, data brokers, or any other organization for commercial purposes unrelated to the direct operation of the platform.

The 7iwin platform uses cookies and similar technologies to enhance your browsing experience, ensure account security, and analyze service performance. Cookies are small text files stored on your device by your browser.

Types of cookies used by 7iwin:

• Essential cookies: Required for the platform's basic operation — such as keeping your session active while you play and processing transactions securely. These cookies cannot be disabled without affecting the functionality of the service;
• Performance cookies: They collect information about how you use the platform — which pages you visit, how long you spend in each section, and which casino games you open most often. Data is used in aggregate form to improve the experience for all users;
• Personalization cookies: They remember your preferences — such as language (Portuguese) and game settings — so you don't have to reconfigure everything each time you log in;
• Security cookies: They identify suspicious access patterns — such as multiple logins from different devices within short intervals — helping to protect your account against unauthorized access.

You can manage cookie settings through your browser's preferences (Chrome, Safari, Firefox). Disabling essential cookies may affect core 7iwin platform features, including bet processing and wallet access. Performance and personalization cookies can be turned off without impacting basic functionality.

7iwin retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods. The main retention criteria are:

• Active account data: retained for as long as the account remains active on the platform. Usage data, betting history, and financial transactions are retained throughout the life of the account;
• Closed account data: after account closure — whether at the user's request or by 7iwin's decision — data is retained for up to 5 years to meet tax and legal obligations, particularly those related to anti-money laundering compliance (Law No. 9.613/1998);
• KYC documents: retained for a minimum of 5 years after account closure, as required by applicable financial compliance regulations;
• Security log data: access logs, login attempts, and security events are retained for up to 12 months for incident investigation purposes.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. 7iwin does not retain data beyond what is necessary for the purposes described above.

7iwin employs a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or destruction:

• Encryption in transit: all communication between your device and 7iwin servers is secured by TLS 1.3 with a 256-bit SSL certificate — the most current standard available;
• Encryption at rest: sensitive data stored on our servers — such as KYC documents and financial information — is encrypted using AES-256 algorithms;
• Role-based access control: 7iwin staff only have access to the data strictly necessary for their role. The support team, for example, does not have access to full KYC documents or credit card data;
• Continuous monitoring: automated systems monitor servers in real time to detect intrusion attempts, abnormal behavior, and potential vulnerabilities;
• Two-factor authentication: available for user accounts and mandatory for internal administrative access to the platform;
• Regular security testing: 7iwin's infrastructure undergoes regular security assessments, including penetration testing carried out by specialized teams.

In the event of a security incident that may compromise users' personal data, 7iwin will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes set out in the LGPD — within 72 hours for the ANPD in cases of significant risk.

The LGPD grants you, as the holder of personal data processed by 7iwin, a set of rights that can be exercised at any time by submitting a request to the platform's support team:

• Access: you have the right to know what personal data 7iwin holds about you and how it is being used;
• Correction: if any information is incorrect or outdated — such as a home address or phone number — you can request a correction at any time;
• Deletion: you may request the deletion of data collected on the basis of consent. For data retained under a legal obligation, 7iwin will inform you of the deletion timeframe once the mandatory retention period has been fulfilled;
• Portability: you may request a copy of your data in a structured, machine-readable format for use with another service, as regulated by the ANPD;
• Objection: you may object to data processing carried out on the basis of legitimate interest, provided there is no legal obligation that requires the processing to continue;
• Withdrawal of consent: consents given for marketing communications or non-essential cookies may be withdrawn at any time at no cost;
• Sharing information: you have the right to know which third parties 7iwin shares your data with and under what conditions;
• Filing a complaint with the ANPD: if you believe your rights are not being respected by 7iwin, you may file a complaint directly with the National Data Protection Authority (anpd.gov.br).

To exercise any of these rights, contact 7iwin at suporte@7iwin.asia. 7iwin will respond within 15 calendar days, in accordance with the deadline established by the LGPD.

The 7iwin platform is intended exclusively for individuals aged 18 or older. Registration by minors is prohibited, and 7iwin takes active measures to verify users' ages during the KYC process.

7iwin does not knowingly collect personal data from anyone under 18 years of age. If we identify that an account was created by a minor, the account will be immediately closed, the data will be deleted, and any available balance will be returned following ownership verification with a legal guardian.

If you are the guardian of a minor and believe they have created a 7iwin account, please contact our support team immediately at suporte@7iwin.asia. We will handle your case with priority and discretion.

To deliver its services, 7iwin may transfer personal data to servers or service providers located outside Brazil — particularly to cloud infrastructure vendors and the international casino game providers available on the platform.

When such a transfer takes place, 7iwin ensures that the receiving country or organization offers a level of data protection equivalent to that required under the LGPD, or adopts standard contractual clauses that impose the same data protection obligations applicable in Brazil.

The international game providers on 7iwin — such as Pragmatic Play and Evolution Gaming — are licensed and audited by recognized international regulatory bodies, and maintain data protection policies that meet European standards (GDPR), and are therefore at least equivalent to Brazil's LGPD.

7iwin reserves the right to update this Privacy Policy at any time. When significant changes are made — those that directly affect your rights or the way we handle your data — you will be notified by email and/or via a notice on the platform the next time you log in.

Changes that materially affect the rights of data subjects will be communicated at least 15 days before taking effect. Minor changes may take effect immediately upon publication, with simultaneous notification.

We recommend visiting this page periodically to stay informed of any updates. Continued use of the 7iwin platform after any changes take effect indicates that you are aware of and agree to the updated practices described.

For any questions, requests, or complaints regarding how 7iwin handles your personal data, please use the channels below:

• General email: suporte@7iwin.asia — for general privacy inquiries or requests to access, correct, or delete your data;
• Live chat: available 24/7 on the 7iwin platform, in Portuguese, for urgent matters related to your account and personal data;
• DPO (Data Protection Officer): 7iwin's designated data protection officer can be reached at the same email address, suporte@7iwin.asia, with the subject line "LGPD – DPO Request".

7iwin is committed to responding to all personal data requests within 15 calendar days. Requests requiring further investigation may take longer; in such cases, the requester will be notified in advance of the new estimated timeframe.

If you believe your rights under the LGPD have not been respected after contacting 7iwin, you may file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil.