7bek Privacy Policy – LGPD Data Protection

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of the personal data processed as a result of the use of the platform 7bek is the company responsible for operating the 7bek.net website, focused exclusively on the Brazilian market.

The Data Protection Officer (DPO) of 7bek can be reached at privacidade@7bek.net for any questions related to personal data processing, the exercise of rights, or inquiries about this policy.

The 7bek collects personal data at various points during your interaction with the platform. The main types of data and the situations in which they are collected are outlined below:

Registration data:

• Full name as it appears on your identity document
• CPF (Cadastro de Pessoas Físicas)
• Date of birth
• Full residential address (zip code, street, number, neighborhood, city, state)
• Email address
• Mobile phone number
• Access password (stored in encrypted format — never in plain text)

Identity verification (KYC) data:

• Copy of a government-issued ID (national ID card, driver's license, or passport)
• Proof of residence issued within the last 90 days
• Selfie with ID document to confirm account ownership

Usage and browsing data:

• IP address and approximate geolocation
• Browser type and version, and operating system
• Pages visited, session duration, and interactions with the interface
• Betting history and platform activity
• Financial transaction records (deposits and withdrawals)

Payment data:

• Pix key linked to the account holder's CPF
• Partial credit or debit card details (masked card number, card brand)
• Transaction history processed via Pix, boleto, PicPay, Mercado Pago, or TED

The 7bek uses the personal data collected for the following purposes:

• Account creation and management: identity verification, preference settings, password recovery, and keeping your registration active.
• Bet processing: registration and settlement of pre-game and live Sports Betting across competitions such as Brasileirão Série A, Copa do Brasil, Libertadores, e-sports, and others.
• Payment processing: processing of deposits and withdrawals via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED bank transfer.
• Legal verification (KYC/AML): fulfillment of legal identity verification and anti-money laundering obligations, in accordance with applicable regulatory requirements.
• Fraud prevention: detection of suspicious activity, multiple accounts, use of automation tools, and other conduct that violates the Terms and Conditions.
• Operational communications: sending registration confirmations, transaction notifications, security alerts, and notices about changes to our services.
• Marketing communications (with consent): sending promotions, personalized bonuses, game updates, and editorial content about Sports Betting, when you have opted in to receive this type of communication.
• Platform improvement: analysis of aggregated and anonymized usage data to identify improvements in experience, performance, and new features.
• Responsible gambling: monitoring of behavioral patterns to identify signs of problem gambling and provide proactive support when needed.

The 7bek does not use your personal data to make automated decisions that produce significant legal effects without human review, as provided under the LGPD.

All personal data processing carried out by 7bek is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (art. 7, V): processing necessary to perform the contract between you and 7bek — that is, to keep your account running so you can place bets and carry out financial transactions.
• Compliance with a legal obligation (Art. 7, II): processing required to comply with legally imposed obligations, such as identity verification (KYC), anti-money laundering measures, and reporting to competent authorities.
• Legitimate interest (art. 7, IX): processing required to serve 7bek's legitimate interests, such as fraud prevention, platform security, and service improvement, provided these do not override the fundamental rights and freedoms of the data subject.
• Consent (Art. 7, I): for specific purposes such as sending marketing communications and collecting optional preference data. Consent may be withdrawn at any time without affecting your use of the platform.

The 7bek does not sell personal data to third parties. Data is only shared in the situations listed below, always for the purpose of delivering contracted services or meeting legal obligations:

• Payment processors: data required to process transactions via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED is shared with the financial institutions and certified payment processors involved in each transaction.
• Game providers: for Live Casino games, slots, and crash games provided by partners such as Microgaming, NetEnt, and Playtech, minimal session data is shared for the technical operation of the games.
• Identity verification services (KYC): partners specialized in document verification and identity validation may process your KYC data as operators on behalf of 7bek.
• IT infrastructure providers: hosting, CDN, and cybersecurity services that support platform operations, always under confidentiality agreements.
• Competent authorities: in compliance with judicial, administrative, or legal orders from authorities such as the Receita Federal, Banco Central, Ministério Público, or Polícia Federal, when duly substantiated.

All third parties that process personal data as operators of the 7bek are subject to contractual confidentiality obligations and compliance with the LGPD. 7bek does not transfer personal data outside Brazil without the safeguards set out in Chapter V of the LGPD.

The personal data of users of 7bek are stored on servers located in Brazil, with the following security measures in place:

• Encryption in transit: all communications between your device and 7bek's servers use HTTPS with TLS 1.2 or higher.
• Encryption at rest: sensitive data stored in our databases is encrypted using bank-grade algorithms.
• Access control: access to personal data is restricted to employees with a proven operational need, with mandatory two-factor authentication for internal systems.
• Continuous monitoring: automated intrusion detection and anomaly analysis systems operate 24 hours a day, 7 days a week.
• Regular audits: penetration testing and security audits are carried out periodically by independent specialized firms.
• Secure backups: encrypted backups are maintained with a retention policy and recovery procedures that are tested on a regular basis.

The 7bek retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by law:

• Registration and identity data: retained for the entire period the account is active and for a minimum of 5 years after account closure, in accordance with KYC and AML obligations.
• Financial transaction history: retained for a minimum of 5 years for tax and regulatory compliance purposes, as required by the Brazilian Federal Revenue Service and the Central Bank.
• Bet records: retained for a minimum of 5 years from the date of the bet.
• Browsing data and logs: retained for no more than 12 months for security purposes, except when required for ongoing investigations.
• Support communications: retained for 2 years after the support interaction is closed.

Once the retention periods above have been met, data is securely deleted or anonymized so that the data subject can no longer be identified.

The 7bek uses cookies and similar technologies to enhance your browsing experience, ensure the platform works correctly, and analyze usage patterns. See the types of cookies used below:

The LGPD grants you, as a data subject, a robust set of rights that 7bek is committed to honoring in full. See what you can request:

The platform 7bek is intended exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If we identify that an account has been created by someone under 18, the account will be closed immediately and all associated data will be deleted, except for records required to fulfill legal obligations related to the incident.

The 7bek may update this Privacy Policy periodically to reflect changes in our services, applicable law, or data processing practices. The date of the most recent update is always shown at the top of this document.

In the event of material changes that significantly affect how your personal data is processed, the 7bek will send a notification to your registered email address at least 15 days in advance, detailing what changed and why.

Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your data before the changes take effect.

To exercise your rights, clarify questions about this policy, or report any privacy-related incident, please contact the Data Protection Officer (DPO) of 7bek:

• DPO e-mail: privacidade@7bek.net
• General support: suporte@7bek.net
• Live chat: available 24/7 on the platform