CC77 Privacy Policy – Your Data Protected by the LGPD

2. Data We Collect

2.1 Data Provided Directly by You

During registration and use of the CC77 platform, we collect the following data that you provide directly:

2.2 Automatically Collected Data

When you access and use the CC77 platform, we automatically collect technical information required for the operation and security of the service:

• IP address — used for geolocation, fraud detection, and compliance with geographic restrictions;
• Device identifiers — device model, operating system, and browser version, used to optimize the platform experience and detect duplicate registrations;
• Session data — access times, pages visited, session duration, and actions taken within the platform;
• Betting and gaming history — a complete record of all bets placed, casino games, deposits, and withdrawals, retained as required by law and for support purposes;
• Cookies and similar technologies — detailed in Section 5 of this Policy.

2.3 Financial Transaction Data

All financial transactions on CC77 — deposits via Pix, credit card, debit card, boleto bancário, TED transfer, PicPay, or Mercado Pago — generate transaction records that include the amount, payment method, date, and time. These records are retained for the minimum period required by Brazilian financial regulations and never include full card details (only the last four digits are stored for identification purposes).

3. How We Use Your Data

CC77 uses collected personal data exclusively for the following purposes, each with a defined legal basis as established under Article 7 of the LGPD:

3.1 Contract Performance (Art. 7, V of the LGPD)

• Create and manage your account on the platform;
• Process deposits and withdrawals, including verification of Pix key ownership;
• Offer Sports Betting, slots, crash games, jackpot, and Live Casino;
• Process bet results and credit winnings;
• Provide support in Portuguese via live chat and email.

3.2 Compliance with a Legal Obligation (Art. 7, II of the LGPD)

• Verify user identity (KYC) in accordance with Brazilian regulatory requirements;
• Prevent money laundering and terrorism financing (AML/CFT) under Law 9.613/1998;
• Maintaining financial records for the period required by the Brazilian Central Bank;
• Comply with court orders from competent authorities;
• Report suspicious activity to regulatory authorities when required by law.

3.3 Legitimate Interest (Art. 7, IX of the LGPD)

• Detect and prevent fraud, bonus abuse, and duplicate registrations;
• Improve the platform based on aggregated and anonymized usage analytics;
• Ensure the technical security of our systems and prevent unauthorized access;
• Personalize the in-platform experience based on usage history.

3.4 Consent (Art. 7, I of the LGPD)

• Send CC77 marketing communications, promotions, and updates via email or push notification — only if you have opted in to receive them. Consent can be withdrawn at any time in your account settings or via the unsubscribe link in any email we send.

4. Data Sharing

4.1 Who We May Share Data With

CC77 may share your personal data with the following categories of recipients, always with appropriate safeguards in place:

• Brazilian payment processors — required to process deposits and withdrawals via Pix, credit card, boleto, TED, PicPay, and Mercado Pago. Each processor operates under a contract that includes data protection clauses and purpose limitation;
• Certified game providers — Pragmatic Play, PG Soft, Spribe, Hacksaw Gaming, Play'n GO, BGaming, Red Tiger, Evolution, and other catalog providers receive only the minimum data necessary to run each game (an anonymous or pseudonymous session identifier). Full personal data such as CPF and banking details are never shared with game providers;
• Technology infrastructure providers — hosting, CDN, monitoring, and security services that support platform operations, all under contract with confidentiality and information security obligations;
• Competent authorities — upon court order or request from the Ministério Público, Polícia Federal, Receita Federal, or Banco Central do Brasil, in accordance with applicable law. CC77 will notify the affected user whenever legally permitted before sharing data with authorities.

4.2 International Data Transfers

Some game providers and technology infrastructure services used by CC77 operate outside Brazil. In these cases, international transfers of personal data occur only with adequate protection guarantees, as required by Article 33 of the LGPD — including standard contractual clauses approved by the ANPD or transfers to countries with a recognized adequate level of protection.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device by your browser when you access CC77. They are used to remember your preferences, keep your session active, and collect analytical data that helps us improve the platform.

5.2 Types of Cookies Used by CC77

• Essential cookies — required for the platform to function. These include session cookies (keeping you logged in while browsing), security cookies (protecting against CSRF and other attacks), and language preference cookies. They cannot be disabled without affecting platform functionality;
• Analytical cookies — collect aggregated, anonymized data on how users navigate CC77 (most visited pages, session duration, traffic sources). Used to improve the platform. You can opt out in your account settings;
• Functional cookies — remember preferences such as interface theme, most-used betting limits, and notification settings. They make returning to the platform smoother by removing the need to reconfigure everything on each visit.

CC77 does not use behavioral advertising cookies third-party cookies — the kind that follow you across other sites to serve personalized ads. Our platform does not integrate any ad networks or third-party advertising tracking pixels.

5.3 How to Manage Your Cookies

You can manage your analytical and functional cookie preferences in your CC77 account settings. For essential cookies, you can disable them directly in your browser, though doing so may affect platform functionality — including keeping your session logged in. Check your browser's documentation for instructions on managing cookies.

6. Data Storage & Security

6.1 Where Your Data Is Stored

CC77 user data is stored on high-availability servers with geographic redundancy. We apply technical and organizational information security measures aligned with international standards, including:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest (CPF, banking details, identity documents);
• Role-based access control (RBAC) — only staff with a justified operational need can access personal data;
• Multi-factor authentication for all administrative access to CC77 systems;
• Continuous security monitoring with anomaly detection and 24-hour incident response;
• Encrypted backups retained in accordance with internal policy and legal requirements.

6.2 Retention Period

CC77 retains your personal data for the shortest period necessary for the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law:

• Financial transaction data — 5 years, in accordance with Banco Central do Brasil regulations and the Anti-Money Laundering Law (Lei 9.613/1998);
• Registration data and KYC documents — 5 years after account closure, or for the period required by court order;
• Betting and gaming history — 5 years for regulatory audit purposes;
• Security and access logs — 12 months for fraud investigation and platform security purposes;
• Marketing data — until consent is withdrawn by the user, where applicable.

Once retention periods expire, data is securely deleted using methods that prevent recovery, or anonymized in a way that makes it no longer possible to identify the data subject.

6.3 Incident Notification

In the event of a security incident that may pose a significant risk or harm to data subjects, CC77 will notify the National Data Protection Authority (ANPD) and the affected users within the timeframe established by applicable law — generally within 72 hours of discovering the incident — with information about the nature of the data involved, the risk posed, and the measures taken.

7. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as a personal data subject, a set of rights that CC77 is fully committed to upholding. Here is what you can request at any time:

All LGPD rights requests must be submitted to contato@cc77-jit.com with the relevant subject line. CC77 will respond within 15 business days. In cases of high complexity, this deadline may be extended by an additional 15 business days, with written notice provided to the requester.

If you believe your rights have not been adequately addressed, you may file a complaint directly with the National Data Protection Authority (ANPD), pursuant to Article 18, §1 of the LGPD.

8. Users Under 18

9. Changes to this Privacy Policy

CC77 reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or the services offered. Material changes will be communicated by email with a minimum advance notice of 7 calendar days before it takes effect.

The most current version of this Policy will always be available on this page, with the last updated date shown at the top. We recommend reviewing this Policy periodically. Continued use of the platform after changes take effect constitutes acceptance of the updated terms.

If any changes reduce user rights or expand the scope of data processing, CC77 will request new explicit consent before those changes take effect, as required by Article 8, §6 of the LGPD.

10. Contact & Data Protection Officer (DPO)

For any questions regarding this Privacy Policy, the processing of your personal data, or the exercise of your rights under the LGPD, please contact CC77:

• General email — contato@cc77-jit.com
• LGPD Requests — use the same email address with the subject line corresponding to the right you wish to exercise (e.g., "LGPD – Data Access")
• Live chat — available 24 hours a day, 7 days a week, within the CC77 platform, for general privacy questions

CC77's Data Protection Officer (DPO), appointed in accordance with Article 41 of the LGPD, can be reached at the same email address with the subject line "DPO – [subject of request]". The DPO is responsible for receiving complaints and communications from data subjects, providing clarifications, and taking the necessary steps to fulfill requests.