79xp Privacy Policy – Your Data with Transparency and Respect

A 79xp is the controller of the personal data collected through the 79xp.net platform. This means we are responsible for deciding how and for what purpose your data is processed, and we must ensure that processing stays within the boundaries established by the General Data Protection Law (LGPD — Law 13,709/2018).

For any questions about your personal data, you can reach our Data Protection Officer (DPO) directly at suporte@79xp.net — include "LGPD Request" in the subject line along with the CPF registered to your account. We respond within up to 15 business days, as required by law.

79xp collects only the data necessary to operate the platform, verify identity, process payments, and meet legal obligations. The data collected falls into the following categories:

79xp does not collect unnecessary sensitive data — such as racial or ethnic origin, religious beliefs, health data, or sexual orientation. Identity documents submitted during the KYC process are stored in an encrypted environment and accessed exclusively by the authorized verification team.

Every piece of data collected has a specific, documented purpose. 79xp uses your data to:

• Creating and maintaining your account: registration, authentication, session management, and profile updates.
• Process financial transactions: deposits via Pix, bank slip, credit/debit card, PicPay, and Mercado Pago; withdrawals via Pix to Nubank, Itaú, Bradesco, Banco do Brasil, and other institutions.
• Identity verification (KYC): confirmation that you are over 18 years of age and that the information provided is accurate, as required by anti-money laundering regulations.
• Preventing fraud and protecting the platform: monitoring for anomalous behavior patterns, detection of multiple accounts using the same CPF, identification of automated systems, and misuse of bonuses.
• Providing customer support: resolve queries, handle complaints, follow up on jackpot withdrawals, and provide support via chat, email, or WhatsApp.
• Personalize your experience: recommend games based on your preference history, display relevant promotions (Brasileirão, Copa do Brasil, UFC, popular slots) and adapt the interface to your device.
• Send communications: notifications about deposits, withdrawals, active bonuses, security alerts, and promotions — you can manage your notification preferences in your account settings.
• Compliance with legal obligations: retention of financial records as required by Brazilian law, responding to requests from competent authorities, and compliance with industry regulations.

Under the LGPD, all personal data processing must be grounded in a valid legal basis. 79xp relies on the following legal bases, matched to the purpose of each processing activity:

• Contract performance (art. 7, V of the LGPD): processing required to create and operate your account, and to handle bets, deposits, and withdrawals. Without this data, the service cannot be provided.
• Compliance with a legal obligation (art. 7º, II of the LGPD): identity verification (KYC), anti-money laundering compliance (Law 9,613/1998), retention of financial records, and responding to regulatory authorities.
• Legitimate interest (art. 7, IX of the LGPD): fraud prevention, platform security, anti-fraud monitoring, and analysis of problem gambling patterns for responsible gambling purposes.
• Consent (art. 7, I of the LGPD): sending marketing communications and personalized promotions. You may withdraw this consent at any time through your notification settings or by emailing suporte@79xp.net.

The legal basis applicable to each processing activity is documented internally and available upon request to our DPO.

79xp does not sell, rent, or transfer your personal data to third parties for commercial purposes. Sharing occurs solely in the situations described below, all with legal justification and contractual confidentiality obligations:

• Payment providers: Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago processors receive only the data strictly necessary to confirm and process each transaction.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, PG Soft, and other content partners receive an anonymous session identifier to process game results. They have no access to your name, CPF, or financial data.
• KYC Partners: specialized document verification platforms may process documents submitted during the KYC process, under a data processing agreement with LGPD obligations equivalent to those of 79xp.
• Competent authorities: 79xp complies with court orders and requests from the Central Bank, Federal Revenue Service, and other authorities legally empowered to request data, strictly within the limits of each order.
• Security and anti-fraud tools: fraud detection technology solutions may process platform behavioral data in aggregate form to identify suspicious patterns.

79xp retains your personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. Retention periods are:

• Active account data: retained for as long as the account is active or as long as there is a justified operational need.
• Financial records: as required by tax and anti-money laundering legislation, transaction records are retained for a minimum of 5 years after account closure.
• KYC Documents: retained for a minimum of 5 years after account closure, as required by law.
• History of communications with support: retained for 2 years for quality assurance, dispute resolution, and compliance purposes.
• Marketing data (with consent): deleted within 30 days of consent withdrawal or account closure, whichever comes first.

Once retention periods expire, data is securely deleted or anonymized. Anonymized data — which can no longer be linked to an identified individual — may be kept indefinitely for statistical analysis and platform improvement.

If you request deletion of your data before the applicable legal retention periods expire, 79xp will delete everything it can and will inform you which data must be retained by legal obligation and for how long.

79xp uses cookies and similar technologies to keep the platform running correctly, maintain your active session, remember your preferences, and understand how users interact with the site. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — keeping you logged in, processing bets, and securing your sessions. They cannot be disabled without impacting your ability to use the service.
• Performance cookies: collect anonymous information about how pages are used — load times, errors, clicks — to improve the platform. They do not identify individual users.
• Preference cookies: remember settings such as language, theme, and notification preferences to personalize your experience.
• Analytics cookies: used to understand aggregate user behavior and identify opportunities to improve the platform. Data is anonymized before any analysis.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from working correctly, including login and bet processing.

79xp implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key measures in place include:

• 256-bit SSL encryption on all communications between the user's device and 79xp's servers.
• Passwords are stored using irreversible hashing — not even the support team can access your password in plain text.
• Two-factor authentication (2FA) is available for all accounts, with a verification code sent via SMS or email.
• Role-based access control — staff can only access the data required for their specific function.
• Continuous monitoring for unauthorized access attempts, brute-force attacks, and anomalous behavior.
• Infrastructure hosted on servers with internationally recognized security certifications, with geographic redundancy to ensure availability.
• Penetration testing and security audits conducted periodically by independent specialized firms.
• A documented security incident response procedure, including notification to the National Data Protection Authority (ANPD) within the legal deadlines in the event of a data breach.

If you notice any suspicious activity on your 79xp account — such as a login from an unknown device or a transaction you don't recognize — contact us immediately via live chat so our team can take the necessary security measures.

The LGPD grants you, as the data subject whose information is processed by 79xp, a set of rights that can be exercised at any time, free of charge. See each one below:

79xp is a platform intended exclusively for users aged 18 and over. We do not intentionally collect, process, or store personal data from individuals under 18. Registration requires a valid CPF and is subject to date-of-birth verification during the KYC process.

If we become aware that a user under 18 has created an account on 79xp, the account will be immediately closed, the data will be deleted as soon as legally possible, and any existing balance will be returned to the holder of the payment method used for deposits.

If you become aware that a minor has used the 79xp platform, please contact us immediately at suporte@79xp.net or via live chat so we can take the appropriate action.

Some service providers used by 79xp — such as certified gaming platforms (Pragmatic Play, Evolution Gaming, PG Soft) and infrastructure tools — may process data on servers located outside Brazil.

When international transfers of personal data take place, 79xp adopts the following measures to ensure adequate protection:

• Execution of standard data protection contractual clauses with international recipients, establishing obligations equivalent to those under the LGPD.
• Preference for partners located in countries whose data protection legislation is recognized as adequate by the Autoridade Nacional de Proteção de Dados (ANPD).
• Periodic assessment of the security measures adopted by international data recipients.

Financial data from Pix, boleto, and card transactions is processed exclusively by financial institutions authorized by the Banco Central do Brasil, operating within Brazilian territory.

79xp may update this Privacy Policy periodically to reflect changes in legislation, our practices, or our services. When that happens:

• The updated version will be published on this page with the effective date indicated at the top of the document.
• For material changes — those that significantly affect how your data is used — you will be notified at your registered email address at least 7 days in advance.
• For non-material changes (such as wording corrections or updated contact details), publishing the revised policy on this page is sufficient.
• Continued use of the platform after the new terms take effect constitutes acceptance of the updated policy.

To exercise your rights as a data subject, ask questions about this policy, or file any complaint related to the processing of personal data at 79xp, please reach out through the channels below:

• DPO Email: suporte@79xp.net (subject: "LGPD Request") — response within 15 business days.
• Live chat: available 24/7 on the platform — ideal for quick privacy questions.
• WhatsApp: available Monday through Sunday, from 8 AM to midnight (Brasília time).

If you are not satisfied with 79xp's response to a request related to your personal data, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the federal authority responsible for enforcing the LGPD in Brazil, via the electronic address available on the official federal government portal.

This Privacy Policy was drafted in Brazilian Portuguese and is governed by the Lei Geral de Proteção de Dados Pessoais (Lei 13.709/2018) and other applicable regulations. In the event of a conflict between versions in other languages and the Portuguese version, the Portuguese version shall prevail.