Privacy Policy 79qq — How We Protect Your Data

For the purposes of Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018), the 79qq is the controller of personal data belonging to registered users and visitors of the platform available at https://79qq.best. The controller is the entity that determines how data is processed — what data to collect, for what purpose, and how long to retain it.

79qq has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance, answering privacy-related questions, and handling data subject requests. You can reach the DPO at contato@79qq.best, with the subject line "LGPD — Privacy".

This Privacy Policy applies to all data collected by 79qq, whether through the website, the mobile app (when available), email, support chat, or any other communication channel on the platform. By using any 79qq service, you acknowledge that you have read and understood the terms of this Policy.

79qq collects personal data at different points throughout your experience on the platform. The categories of data we process are listed below, organized by source.

Data provided directly by you:

• Full name, date of birth, and CPF — collected at registration to verify eligibility and identity;
• Email address and mobile number — used for account communications, password recovery, and transaction notifications;
• Residential address (street, city, state, ZIP code) — required during identity verification (KYC) processes;
• Identity documents (national ID, driver's license, selfie with document) — collected when the KYC process is initiated;
• Pix key and associated bank details — required to process deposits and withdrawals.

Data collected automatically during platform use:

• IP address, device type, operating system, and browser — for security, fraud detection, and technical optimization;
• Complete history of bets, deposits, and withdrawals — required to operate your account, resolve disputes, and meet regulatory obligations;
• Session data: access time, duration, pages visited — used to improve the platform experience and identify suspicious behavior;
• Cookies and tracking identifiers — detailed in Section 5 of this Policy.

79qq uses your personal data solely for the purposes listed below, each with its corresponding legal basis under the LGPD. We do not use your data for purposes incompatible with those that originally justified its collection.

• Account creation and management: processing your registration, verifying eligibility (minimum age of 18), authenticating access, and sending account-related communications (legal basis: performance of a contract — Art. 7º, V of the LGPD);
• Processing financial transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED; withdrawal processing via Pix; generation of financial history (legal basis: contract performance and legal obligation);
• Identity verification (KYC): identity verification for withdrawals above certain amounts and as required by regulation (legal basis: legal obligation);
• Fraud prevention and security: behavioral analysis to detect multi-accounting, money laundering, bot usage, and other prohibited conduct (legal basis: legitimate interest — Art. 7, IX of the LGPD);
• Customer Support: logging and resolution of requests submitted via chat or email (legal basis: performance of contract);
• Marketing communications (with consent): emails about promotions, bonuses, and 79qq news — only for users who consented at registration or in their account settings (legal basis: consent — Art. 7, I of the LGPD);
• Compliance with legal and regulatory obligations: responding to requests from competent authorities, complying with applicable gambling legislation and the LGPD (legal basis: legal obligation — Art. 7º, II of the LGPD).

You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by updating your preferences in your account dashboard. Opting out of marketing communications does not affect essential account notifications (transaction confirmations, security alerts, etc.).

79qq does not sell or rent users' personal data. Data is shared with third parties only in the situations listed below, each with a clear justification and a corresponding legal basis under the LGPD.

Operational partners (data processors):

• Payment processors: to process transactions via Pix, boleto, credit/debit card, PicPay, and Mercado Pago — only the data strictly necessary for each transaction is shared;
• Identity verification providers (KYC): for document validation in verification processes — data is processed under contract with data protection clauses compatible with the LGPD;
• Technology infrastructure providers: servers, CDN, and security services that support the platform's technical operations — all under contracts that guarantee confidentiality and data protection;
• Casino and e-sports game providers: to operate the games available on the platform — sharing is limited to the session identifier required for the game, with no sensitive personal data involved.

Authorities and legal obligations:

• 79qq shares data with Brazilian governmental, regulatory, or judicial authorities when legally required — by court order, request from the Public Prosecutor's Office, the ANPD, or other bodies with legal authority to do so;
• In cases of suspected money laundering or financing of illegal activities, 79qq may proactively report to the appropriate authorities in accordance with Brazilian law.

79qq uses cookies and similar technologies to keep the platform running properly, improve the user experience, and analyze site performance. The first time you access the platform, you will see a cookie notice and can manage your preferences.

Types of cookies used:

• Essential cookies: required for the platform's basic operation — session authentication, bet slip management, and security preferences. Disabling them will directly impact your ability to use the platform;
• Performance and analytics cookies: collect anonymous information about how users interact with the platform — which pages are visited most, load times, and technical errors. Data is aggregated and does not identify individual users;
• Functionality cookies: remember user preferences such as language, odds display settings, and personalized notifications — enhancing the experience without collecting more personal data than necessary;
• Marketing cookies (with consent only): used to personalize communications and measure campaign effectiveness. Enabled only with explicit consent via the cookie banner — and can be disabled at any time.

You can manage your cookie settings directly in your browser (Chrome, Firefox, Safari, Edge) or through the 79qq cookie preferences panel. Disabling essential cookies may affect features such as automatic login and the retention of your betting history during the current session.

79qq implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Data security is not a one-time project — it is an ongoing practice that involves every team across the platform.

Technical security measures:

• 256-bit SSL/TLS encryption on all communications between the user's device and 79qq servers;
• Passwords stored using one-way cryptographic hashing (bcrypt) — no 79qq employee has access to your actual password;
• Two-factor authentication (2FA) available as an additional security layer for account access;
• Continuous monitoring of access and transactions for real-time detection of suspicious activity;
• Penetration testing and security audits conducted periodically by independent third parties;
• Segregation of financial data and personal data across separate systems with independent access controls.

Organizational measures:

• Principle of least privilege: 79qq employees only access the data necessary for their specific roles;
• Regular data protection training for all staff;
• Non-disclosure agreements (NDAs) signed by all staff and vendors with access to user data.

Despite all measures in place, no system is 100% immune to threats. In the event of a security incident that compromises your data, 79qq will notify affected users by email and report the incident to the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes set by the LGPD — no later than 2 business days after the incident is confirmed.

79qq does not keep your personal data indefinitely. Retention periods are defined based on the original purpose of collection, applicable legal obligations, and the LGPD's data minimization principles.

• Registration and identity data (full name, CPF, RG, date of birth): retained for the duration the account is active and for 5 years after closure — as required by Brazilian financial and Sports Betting legislation;
• Financial transaction history (deposits and withdrawals): retained for 5 years after each transaction, in accordance with Brazilian tax and regulatory obligations;
• Betting history: available to the user for 12 months in the account dashboard; stored internally for up to 5 years for compliance and dispute resolution purposes;
• Communication records (support, email, chat): retained for up to 2 years after the conversation is closed;
• Analytics cookie data (anonymized): retained for up to 13 months;
• Data from accounts closed at the user's request: data is anonymized or deleted within a maximum of 30 days after account closure is confirmed, except where retention is required by law.

The LGPD grants you, as a data subject, a set of rights that 79qq respects and makes easy to exercise. You do not need to provide a reason to exercise any of these rights — simply submit your request through the designated channel.

Your rights as a data subject at 79qq:

• Access: know what personal data 79qq holds about you and how it is being used;
• Correction: update incomplete, inaccurate, or outdated information — such as your name, address, or email;
• Portability: receive your data in a structured, machine-readable format to transfer it to another platform;
• Deletion: request the deletion of data processed on the basis of your consent — data retained under a legal obligation cannot be deleted before the minimum retention period;
• Consent withdrawal: withdraw consent given for marketing communications or other consent-based purposes — without affecting your ability to use the platform;
• Objection: object to data processing based on legitimate interest where it conflicts with your rights;
• Information on sharing: know which entities your data has been shared with;
• Review of automated decisions: request human review of decisions made exclusively through automated processing that affect your interests (such as preventive account suspension).

To exercise any of these rights, send an email to contato@79qq.best with the subject line "LGPD — [request type]" and your identification details (full name and registered email address). 79qq responds to all data subject requests within 15 calendar days — in practice, the goal is to respond within 5 business days. If the request is complex or requires additional review, you will be informed of the extended timeframe and the reason for it.

If you believe your rights have not been properly addressed by 79qq, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) at www.gov.br/anpd.

The 79qq platform is strictly intended for users aged 18 and over. 79qq does not knowingly collect personal data from children or adolescents under the age of 18 and does not permit use of the platform by this audience.

The registration process requires a declaration of legal age and the submission of a CPF, which is validated to verify the date of birth. Identity verification (KYC), when triggered, confirms the account holder's age through an official photo ID document.

Parents or guardians who become aware that a minor has used the 79qq platform should contact us immediately at the email address above. 79qq will handle the matter with priority and confidentiality.

Some of 79qq's technology partners — such as cloud server infrastructure providers — may be located outside Brazil, which involves the international transfer of personal data. 79qq takes this matter seriously and applies the safeguards required by the LGPD in such situations.

International data transfers by 79qq occur only:

• For countries or international bodies that provide a level of personal data protection equivalent to that established by the LGPD;
• When the receiving partner has signed standard contractual clauses approved by the ANPD, ensuring the same rights guaranteed to data subjects under Brazilian law;
• To fulfill legal obligations requiring the transfer of data to competent international authorities.

Financial transaction data via Pix processed through the Banco Central do Brasil system remains entirely within Brazilian territory, in compliance with Bacen regulations. Identity data collected for KYC is processed preferably in Brazil or with partners holding certification equivalent to the LGPD.

79qq may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or platform features. Any significant update will be communicated to registered users by email at least 7 days before it takes effect.

The most recent version of this Policy will always be available on this page at https://79qq.best/privacy-policy, with the last updated date shown at the top of the document. By continuing to use the platform after a new version takes effect, you confirm your agreement with the changes.

If a change requires new consent from you — for example, if we start using your data for a new consent-based purpose — we will actively request that consent before any new processing begins. You may decline without losing access to any core platform features that do not depend on that specific consent.

79qq maintains dedicated support channels for privacy and LGPD-related matters. If you have questions about how your data is handled, wish to exercise any of your rights as a data subject, or need to report a security incident, these are the right channels to use:

• Data Protection Officer (DPO) email: contato@79qq.best — use the subject line "LGPD" for prioritization;
• General support in Portuguese: live chat available 24 hours a day in the account dashboard — for questions about data use in the context of day-to-day support;
• Response time for LGPD requests: up to 15 calendar days by law — internal target of up to 5 business days.

For data deletion requests, portability requests, or reviews of automated decisions, please send your email from the address registered to your account and include your CPF for identity verification. This is for your protection — it ensures no one can request the deletion of your data without access to your registered email account.

This Privacy Policy is governed by Brazilian law, in particular the LGPD (Law No. 13.709/2018) and the supplementary rules issued by the ANPD. Any dispute relating to data processing will be submitted to the courts of the user's domicile in Brazil, in accordance with the Consumer Protection Code (Law No. 8.078/1990).