Vip757 Privacy Policy – How We Protect Your Data

1Who We Are – The Data Controller

Vip757 (accessible at vip757.best) is the data controller responsible for processing personal data collected on this platform, in accordance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018). We are a digital entertainment platform serving the Brazilian market, offering slots, live casino, Sports Betting, progressive jackpots, and other gaming formats.

As the data controller, VIP757 defines the purposes and means of processing your personal data. For questions, requests, or to exercise rights related to this Privacy Policy, you can reach our team directly at suporte@vip757.best or via the 24-hour live chat available on the platform.

2Personal Data We Collect

Vip757 collects different categories of personal data depending on how you interact with the platform. We collect only what is necessary to operate the service securely and in compliance with Brazilian law.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, genetic or biometric data beyond what is required for identity verification, or health-related data, except when voluntarily provided by the player in a responsible gambling context.

3Purpose of Data Processing

VIP757 uses collected personal data exclusively for the purposes listed below. Each piece of data collected has a specific reason and is not used for purposes incompatible with its original intent without a new legal basis.

• Account creation and management: account registration, authentication, password recovery, and preference management;
• Payment processing: deposits via Pix, boleto bancário, credit or debit card, PicPay, Mercado Pago, and TED; processing of withdrawals to the account holder's bank account;
• Identity verification (KYC): confirmation that the account holder is over 18 years of age and the true beneficiary of the transactions;
• Fraud and money laundering prevention: monitoring of transactions and suspicious behavior in accordance with regulatory requirements;
• Experience improvement: analysis of gameplay behavior to personalize recommendations and promotions relevant to each player's profile;
• Communication: sending transactional emails (deposit confirmations, withdrawal notifications, security alerts) and, with consent, promotional communications;
• Responsible gambling: monitoring of gameplay patterns to identify signs of compulsive behavior and apply preventive tools;
• Compliance with legal obligations: compliance with determinations from competent authorities, including tax and regulatory obligations applicable to the industry.

4Legal Basis for Processing (LGPD)

All data processing carried out by VIP757 is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): the primary legal basis for processing registration, payment, and identity verification data — necessary for delivering the contracted service;
• Compliance with a legal obligation (Art. 7, II): legal basis applied to data processing for anti-money laundering, KYC, and regulatory compliance purposes;
• Consent (Art. 7, I): the legal basis used for sending promotional communications via email, SMS, or push notifications — consent may be withdrawn at any time;
• Legitimate interest (Art. 7, IX): the legal basis applied to the processing of technical and gameplay behavioral data for platform improvement, fraud prevention, and security — always respecting the data subject's rights and reasonable expectations.

5Data Sharing with Third Parties

VIP757 does not sell or trade players' personal data. Data is shared with third parties only when strictly necessary, as outlined below:

• Payment processors: banking and transaction data are shared with Pix operators, card networks, and other payment processors to facilitate deposits and withdrawals. These partners act as data processors under contract with vip757 and may not use the data for any other purpose;
• Game providers: username and session information are shared with providers such as Pragmatic Play, Evolution, PG Soft, NetEnt, and Microgaming for game operation purposes. No sensitive or financial data is transmitted to game providers;
• Identity verification companies: documents submitted for KYC may be processed by partners specialized in digital identity verification, operating under contract as data processors with obligations equivalent to those of vip757;
• Public authorities: data may be shared with the Receita Federal, Banco Central, ANPD, Ministério Público, or the Judiciary when required by law, court order, or regulation applicable to the industry;
• Support and analytics tools: anonymized or pseudonymized technical data may be used in performance analytics and customer support tools, always under contractual data protection clauses.

6Data Storage and Security

Players' personal data is stored on servers with multi-layered security infrastructure. VIP757 applies the following technical and organizational measures to protect your data:

• 256-bit SSL encryption on all data transmissions between the player's device and VIP757 servers;
• Passwords are stored using secure hashing algorithms — no vip757 employee has access to a player's password;
• Role-based access control (RBAC) — each team member can only access the data strictly necessary for their role;
• Audit logs for all access operations involving sensitive data, retained for analysis in the event of an incident;
• Periodic penetration testing and vulnerability scanning carried out by specialized third-party firms;
• Encrypted backups with controlled retention periods and documented recovery procedures;
• Mandatory information security training for all staff who handle player data.

In the event of a security incident resulting in significant risk or harm to data subjects, VIP757 will notify those affected and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, including details about the nature of the incident, the data involved, and the measures taken.

7Cookies and Tracking Technologies

VIP757 uses cookies and similar technologies to ensure the platform works correctly, improve the player experience, and analyze service usage. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, session management, language preferences, and security. These cannot be disabled without affecting your use of the service;
• Performance cookies: collect anonymized data on how players use the platform — pages visited, session duration, errors encountered — to improve the service. These can be disabled in your account settings;
• Personalization cookies: store player preferences such as favorite games, interface settings, and in-platform browsing history to personalize the experience. These can be disabled;
• Security cookies: used to detect suspicious behavior, fraud attempts, and unauthorized access. These are essential to protecting your account.

VIP757 does not use third-party tracking cookies for behavioral advertising purposes outside the platform. You can manage your cookie preferences through your browser settings or via the privacy panel available in your VIP757 account.

8Protection of Minors' Data

VIP757 does not accept registrations from users under 18 years of age and does not knowingly collect personal data from anyone under 18. Access to the platform and all its services is expressly restricted to individuals aged 18 and over residing in Brazil.

During registration, the user declares they are at least 18 years old. VIP757 performs age verification as part of the KYC process and may request additional documentation whenever there is reason to suspect the user may be a minor.

If you believe a child or teenager may have accessed or created an account on VIP757, please contact our 24/7 support immediately via platform chat or at suporte@vip757.best.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that vip757 is committed to upholding in full. See each right and how to exercise it below:

To exercise any of these rights, contact our Data Protection Officer (DPO) at privacidade@vip757.best or through the 24/7 support chat on the platform. vip757 responds to all requests within 48 business hours.

10Data Retention and Deletion

VIP757 retains personal data for as long as needed to fulfill the purposes for which it was collected and to meet the legal and regulatory obligations applicable to the digital entertainment sector in Brazil.

• Active account data: kept for as long as the account is active or as long as necessary for service delivery;
• Financial transaction data: retained for a minimum of 5 years after the last transaction, in accordance with tax and anti-money laundering obligations;
• KYC verification documents: retained for a minimum of 5 years after account closure, in accordance with regulatory requirements;
• Access and security logs: retained for a minimum of 6 months as required by the Brazilian Internet Civil Framework;
• Consent data for communications: retained for as long as consent remains valid, or for up to 2 years after revocation, for proof of consent purposes.

Once the mandatory retention period ends, data is securely deleted or anonymized in a way that makes it impossible to identify the data subject. Anonymized data may be retained for statistical and platform improvement purposes.

11International Data Transfers

Due to partnerships with international game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and others, some technical session data may be processed on servers located outside Brazil. When this occurs, VIP757 ensures that:

• Transfers are carried out only to countries or organizations that provide an adequate level of data protection;
• Standard contractual clauses are used, imposing data protection obligations equivalent to those of the LGPD on the data recipient;
• Transferred data is limited to the minimum necessary for game operation — session identifiers and preferences only, with no sensitive financial data;
• No international transfer includes identity documents, full banking details, or KYC verification information.

12Changes to This Privacy Policy

VIP757 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. The date of the last update is shown at the top of this page.

Changes that materially affect data subjects' rights will be communicated at least 7 days in advance via the registered email address and through a notification on the vip757 platform. It is the user's responsibility to keep their registered email address up to date in order to receive these communications.

Continued use of the platform after the updated version of this Policy takes effect constitutes acceptance of the new terms. If you do not agree, you may request account closure and data deletion as described in the data subject rights section.

13Contact – Data Protection Officer (DPO)

Vip757's Data Protection Officer (DPO) is responsible for receiving communications from data subjects, handling rights exercise requests, and serving as the point of contact with the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, request clarification about this Policy, or report a concern regarding the handling of your data, please reach out through one of the channels below:

• DPO Email: privacidade@vip757.best
• General support 24h: suporte@vip757.best or live chat on the VIP757 platform

Vip757 responds to all personal data requests within 48 business hours. For requests requiring additional identity verification — such as delivery of a full data copy or a deletion request — the deadline may be extended by up to 15 days as permitted under the LGPD, with transparent communication to the data subject.