Obg777 Privacy Policy – Your Data Protection

1. Introduction

Obg777 understands that your personal data is an extension of your privacy, and that handling it responsibly is an obligation — not just a legal one, but an ethical one. This Privacy Policy was written so that you, as a Brazilian user, know exactly what happens with your information from the moment you access the site to after you close your account.

The reference legislation for this document is the General Personal Data Protection Law (LGPD — Law No. 13,709/2018), which sets the rules for the collection, storage, processing, and sharing of personal data in Brazil. obg777 is fully committed to complying with the LGPD across all operations involving Brazilian users' data.

This policy applies to all individuals who:

• Access the obg777 site, even without creating an account;
• Create an account and use any service on the platform — live casino, slots, crash games, roulette, blackjack, football betting, MMA, e-sports, and more;
• Contact obg777 support through any available channel — live chat, email, or other means.

Please read this policy carefully. If anything is unclear, reach out to our team before completing your registration. Transparency is one of obg777's core principles — and it starts right here.

2. Data Controller

For the purposes of the LGPD, the controller is the entity that makes decisions about personal data processing — what to collect, how to use it, how long to keep it, and who to share it with. For obg777 users, the data controller is the company operating the obg777 platform, identified in the legal documents available on the platform.

Obg777 is a Data Protection Officer (DPO) responsible for responding to data subject requests, monitoring internal LGPD compliance, and serving as the communication channel with the National Data Protection Authority (ANPD). To contact the obg777 DPO, use the following address: privacidade@obg777.best.

3. Data We Collect

Obg777 collects only the data necessary to operate the platform securely and deliver a personalized experience to Brazilian players. The data collected falls into the following categories:

Data you provide directly:

• Full name as it appears on your ID;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile number with area code;
• Residential address (requested during KYC verification);
• Identity documents (RG, CNH, or passport) submitted during the verification process;
• Information on registered payment methods, such as Pix key, card details (tokenized), and bank account for withdrawals.

Data collected automatically during use of the platform:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, time spent, and browsing sequence;
• Betting history, games accessed, and financial transactions made;
• Access logs including date, time, and device used for each login;
• Data from cookies and similar technologies (detailed in section 9).

Data received from third parties:

• Identity verification information from credit bureaus or CPF validation services integrated into the KYC process;
• Fraud prevention data supplied by payment security providers, in compliance with Banco Central do Brasil regulations.

4. Purpose of Processing

Every piece of data collected by obg777 has a specific, legitimate purpose. The table below summarizes the main uses:

Obg777 does not use your data to sell third-party advertising, build behavioral profiles for external monetization, or share information with companies that have no direct relationship with the operation of the platform.

5. Legal Basis for Processing

The LGPD requires that all personal data processing have a specific legal basis. obg777 grounds its processing activities on the following bases set out in Article 7 of the LGPD:

• Contract performance (art. 7º, V): data required to create and operate your account, process deposits via Pix and other methods, release withdrawals, and make the platform's games available. Without this data, the service cannot be provided;
• Compliance with a legal obligation (art. 7º, II): data required to comply with anti-money laundering (AML/CFT) obligations, identity verification as required by regulation, and financial record retention under applicable law;
• Legitimate interest (art. 7º, IX): browsing and platform usage data processed for security purposes, fraud detection, continuous service improvement, and personalization of the gaming experience — provided this does not override your fundamental rights;
• Consent (Art. 7, I): for marketing communications and promotional emails or SMS messages that are not strictly necessary for account operation. You may withdraw this consent at any time in your account settings or by contacting support.

6. Data Sharing

Obg777 does not sell users' personal data to third parties. Data sharing occurs only in the situations below, all strictly necessary to operate the platform or fulfill legal obligations:

• Payment providers: to process deposits and withdrawals via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED transfers. These providers receive only the minimum data necessary to complete the transaction and are certified by the Banco Central do Brasil;
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Spribe, and other content partners receive anonymized identifiers to run game sessions. These providers do not receive personally identifiable data such as your name, CPF, or address;
• Identity verification services (KYC): partner bureaus that validate CPF and documents during the account verification process, as required by regulatory standards;
• Competent authorities: when required by law, court order, or determination of a competent regulatory authority, obg777 will provide the requested data as required by law, notifying the user whenever legally permitted;
• External auditors and consultants: who operate under strict confidentiality agreements and only access anonymized or aggregated data for security auditing and compliance purposes.

7. Data Retention

Obg777 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet legal obligations. The general retention periods are:

• Registration and identity data: retained for the full duration of the account and for up to 5 years after account closure, in compliance with anti-money laundering requirements;
• Financial transaction history: retained for up to 5 years after the transaction, in accordance with Banco Central do Brasil regulations and applicable tax legislation;
• Betting history: available to the account holder for the duration of the account and retained for up to 3 years after account closure for regulatory purposes;
• Access and security logs: retained for up to 6 months for security incident investigation purposes;
• Support communications: retained for up to 2 years for quality assurance, training, and the resolution of any disputes.

Once mandatory retention periods have expired, data is securely deleted or irreversibly anonymized, making it impossible to identify the original data subject.

8. Data Security

Obg777 has implemented a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:

• SSL/TLS 256-bit encryption: all communication between your device and obg777's servers is encrypted using the same standard adopted by Brazil's leading banks;
• Two-factor authentication (2FA): available to all users who want to add an extra layer of security to their account access;
• Secure password storage: user passwords are stored as salted hashes, making them unreadable even if the database is compromised;
• Tokenized payment data: credit card data is processed by PCI DSS-certified providers — obg777 does not store card numbers on its servers;
• Continuous monitoring: automated intrusion detection systems and anomalous behavior analysis operate 24 hours a day on the platform's servers;
• Internal access controls: only employees with a legitimate business need can access users' personal data, and that access is logged and audited;
• Periodic audits: obg777's security infrastructure undergoes regular reviews conducted by external specialists.

In the event of a security incident that may put your data at risk, obg777 will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

9. Cookies and Similar Technologies

Obg777 uses cookies and similar technologies to ensure the platform works correctly, enhance the user experience, and analyze site performance. The types of cookies used are described below:

• Essential cookies: required for the basic functioning of the platform — session authentication, login security, and bet slip management. They cannot be disabled without impairing platform functionality;
• Performance cookies: collect anonymized data on how users navigate the platform — which pages they visit, which games they access, and load times. Used exclusively to improve the experience and technical performance;
• Preference cookies: store your language, currency, and layout preferences so you don't have to reconfigure them every time you log in;
• Analytical cookies: used to understand aggregate user behavior and improve the platform's game catalog and features. Data is processed in anonymized form.

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from working correctly, including login and bet processing. Other cookie types can be disabled without critically impacting access to obg777 services.

10. Your Rights as a Data Subject

The LGPD grants you, as a data subject, a set of rights that obg777 is fully committed to upholding. To exercise any of these rights, please contact privacidade@obg777.best or via live chat. Requests are answered within 15 business days.

11. Minors

Obg777 is a platform intended exclusively for individuals who are 18 years of age or older. The collection and processing of data from users under 18 is strictly prohibited and is not intentionally carried out by obg777.

During registration, all users confirm they are 18 or older. The identity verification (KYC) process validates this information via CPF and identity documents. Accounts opened by minors, if identified, are closed immediately and any deposited funds are returned to the legitimate holder of the payment method used.

If you believe a minor has used personal data to create an account on obg777, please contact privacidade@obg777.best so that the matter can be investigated and resolved as a priority.

12. International Data Transfers

Due to partnerships with international game providers — such as Evolution Gaming and Pragmatic Play — and IT infrastructure providers, some obg777 user data may be processed on servers located outside Brazil. When this occurs, obg777 ensures that:

• Transfers are made only to countries or organizations that provide an adequate level of data protection, as assessed by the ANPD or through equivalent contractual safeguards;
• All contracts with international providers include data protection clauses equivalent to those required by the LGPD;
• Directly identifying data (such as CPF and official documents) is shared with international providers only to the extent strictly necessary and always in encrypted form.

Obg777 maintains an up-to-date record of all international data transfers and can provide details about specific recipients upon request to the DPO.

13. Changes to This Policy

Obg777 may periodically update this Privacy Policy to reflect regulatory changes, new platform features, or improvements to its data protection practices. When that happens:

• The "Last updated" date at the top of this page will be revised;
• You will receive an email notification to your registered address for any relevant changes that affect your rights;
• An informational banner may appear on your account dashboard to notify you of the update.

Continued use of the platform after a new version of this policy takes effect constitutes acknowledgment of and agreement to the changes. We recommend checking this page periodically to stay up to date on how obg777 handles your data.

14. Contact & Data Protection Officer (DPO)

For any request related to this Privacy Policy, to exercise your rights as a data subject, or to report a security incident involving your data, please use the channels below:

If you are not satisfied with obg777's response to a personal data request, you have the right to file a complaint with the National Data Protection Authority (ANPD), through the channels available on the official website of the authority.