7kbt Privacy and Data Protection Policy

The 7kbt collects personal data at different points during your interaction with the platform. Below is a full description of the data collected and the circumstances under which each category is obtained:

Every piece of data collected by 7kbt has a specific, defined purpose. We don't collect information for the sake of collecting — we collect it because we need it to deliver the service or fulfill legal obligations. The purposes are:

• Create and manage your account — Name, CPF, email, and phone number are required to uniquely identify you on the platform and for account-related communications.
• Processing deposits and withdrawals — Financial data is required to securely process transactions via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago in compliance with Banco Central do Brasil rules.
• Identity verification (KYC) — CPF, date of birth, and identity documents are used to verify that the user is who they claim to be, prevent fraud, and meet anti-money laundering compliance requirements.
• Fraud prevention and security — Technical data such as IP address, device, and behavioral patterns are analyzed by the anti-fraud system to protect your account against unauthorized access.
• Customer Support — Communication history is retained to make customer support more efficient and to resolve any potential disputes.
• Responsible gambling — Betting history and usage patterns are monitored to identify signs of at-risk behavior and apply protective tools in accordance with our Responsible Gambling policy.
• Communications and marketing — Email and phone number may be used to send communications about promotions, tips, and news from 7kbt, subject to express consent, which may be withdrawn at any time.

The 7kbt processes personal data on the following legal bases established by the LGPD:

• Contract performance (art. 7, V) — To create and manage your account, process deposits and withdrawals, and provide Sports Betting and casino services.
• Legal or regulatory obligation (art. 7, II) — To comply with legal requirements for user identification, anti-money laundering measures, and retention of financial records under Brazilian regulation.
• Legitimate interest (art. 7º, IX) — For fraud prevention, platform security, and continuous service improvement, provided these interests do not override the rights and freedoms of the data subject.
• Consent (art. 7º, I) — For sending marketing communications and promotions. This consent is optional and may be withdrawn at any time without affecting your use of the platform.

The security of your data is a technical priority at the 7kbt. The protection measures in place include:

• SSL 256-bit across all communications between your device and the platform's servers, preventing data interception in transit.
• AES-256 Encryption in the storage of sensitive data, including CPF, financial data, and betting history.
• Tokenization of credit and debit card data — the 7kbt never stores your full card number on its systems.
• Role-based access control — only employees with a specific operational need are granted access to certain data categories, with auditable logs of all access.
• Continuous monitoring of suspicious activity across internal systems, with automatic alerts sent to the information security team.
• Regular backups with encryption, stored on separate servers with controlled access.
• Penetration testing conducted periodically by a specialized team to identify and address vulnerabilities before they can be exploited.

Data is stored on servers located in Brazil or in countries that offer an adequate level of data protection, as assessed by the 7kbt in compliance with the LGPD.

The 7kbt does not sell, rent, or trade your personal data. Data may be shared with the following categories of partners, strictly to the extent necessary for the stated purpose:

• Payment processors — Pix, PicPay, and Mercado Pago providers receive only the data necessary to process the specific transaction you requested (e.g., destination Pix key for withdrawals).
• Casino game providers — Receive an anonymous session identifier to record the outcome of each round. No identity or financial data is shared with game providers.
• Anti-fraud services — Technical data such as IP addresses and usage patterns may be shared with specialized fraud prevention partners under confidentiality agreements.
• Public authorities — When required by law, court order, or applicable Brazilian regulation, such as the Receita Federal, Banco Central do Brasil, or public security authorities.

The 7kbt uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:

• Essential cookies — Required for the platform's basic operation, such as keeping you logged in during a session. They cannot be disabled without impacting your use of the site.
• Performance cookies — Collect anonymous data on how users navigate the platform (pages visited, session duration) to identify and resolve usability issues.
• Functionality cookies — Remember your preferences, such as language, odds displayed in American or decimal format, and selected sport filters.
• Marketing cookies — Used to measure the effectiveness of advertising campaigns and personalize communications. Enabled only with your express consent.

You can manage cookie preferences in your browser or device settings. Blocking essential cookies may prevent the platform from functioning correctly.

The 7kbt retains personal data for as long as necessary to fulfill the purposes described in this policy or to meet legal obligations:

• Active account data — Retained for as long as the account is active.
• Financial data and transaction records — Retained for at least 5 years after each transaction, as required by Brazilian anti-money laundering regulations.
• Support communication data — Retained for up to 2 years after account closure for dispute resolution purposes.
• Technical data and access logs — Retained for up to 6 months, unless required for the investigation of specific incidents.
• Data from an account closed at the user's request — Deleted or anonymized within 30 days, except for data subject to mandatory legal retention.

After the applicable retention period, data is securely deleted or anonymized so that it can no longer be linked to a specific user.

The platform 7kbt is intended exclusively for individuals aged 18 and over. We do not intentionally collect data from minors. Registration requires a CPF and date of birth, which are verified against official databases to confirm that users meet the age requirement.

If 7kbt identifies that a registered user is under 18, the account will be immediately closed and all collected data will be deleted, except for the minimum data necessary to document the closure and any refund of deposits made.

In some cases, personal data of users from the 7kbt may be processed on servers located outside Brazil — for example, by cloud infrastructure providers or casino game providers headquartered abroad.

When this occurs, the 7kbt adopts one or more of the following safeguards, as required by the LGPD:

• Transfer to countries recognized by the ANPD as providing an adequate level of data protection.
• Standard contractual clauses that impose on the recipient data protection obligations equivalent to those required under the LGPD.
• Internationally recognized security certifications or standards.

The 7kbt prioritizes partners that process data in Brazil whenever technically feasible and economically reasonable.

To exercise any of the rights provided under the LGPD (access, correction, deletion, portability, withdrawal of consent, or information about sharing), the data subject must:

• Send an email to privacidade@7kbt.best with the subject line "LGPD Request".
• Provide your full name, registered CPF, and a clear description of your request.
• In cases requiring identity verification, you may be asked to submit a photo ID.

The 7kbt commits to responding within 15 business days from the date the request is received. In highly complex cases, the deadline may be extended by a further 15 business days, with prior notice to the requester.

If you are not satisfied with the response from 7kbt, you have the right to file a complaint with the National Data Protection Authority (ANPD), through the authority's official website.

The 7kbt maintains internal processes for responding to information security incidents. In the event of a data breach that could pose a significant risk or harm to data subjects, the 7kbt commits to:

• Notify the ANPD within a reasonable timeframe, as set out under the LGPD and applicable regulatory guidelines.
• Notify affected users in a clear and direct manner, specifying which data was involved, the potential impact, and the steps that 7kbt is taking to mitigate the damage.
• Provide a dedicated contact channel so affected users can get additional information and guidance on how to protect themselves.

Minor incidents that do not pose a significant risk to data subjects are documented internally and used to strengthen the platform's security measures.

The 7kbt may update this Privacy Policy periodically to reflect changes in its services, Brazilian legislation, or industry best practices. When this occurs:

• The "last updated" date at the top of this page will be changed.
• Significant changes will be communicated by email to registered users at least 7 calendar days in advance.
• Continued use of the platform after a new version takes effect constitutes acceptance of the changes.

Previous versions of this policy are available upon request at privacidade@7kbt.best for historical reference.

The 7kbt has appointed a Data Protection Officer (DPO) as required by the LGPD. For any questions related to the processing of personal data, you may get in touch:

• Privacy email: privacidade@7kbt.best
• General email: contato@7kbt.best
• Live chat: available on the site 24 hours a day, 7 days a week

All data privacy support is handled in Brazilian Portuguese by professionals trained in LGPD compliance.