Privacy Policy – ceu77: Protecting Your Data

The ceu77 is a Sports Betting and online casino platform operated for the Brazilian market, accessible at ceu77.best. For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the ceu77 acts as the controller of personal data collected from its users, and is responsible for determining the purposes and means of processing.

Our Data Protection Officer (DPO) is the official point of contact for all privacy-related matters and the exercise of LGPD rights. You can reach us through the following channels:

• Live chat — available on the platform 24 hours a day, 7 days a week;
• Email — suporte@ceu77.best (for LGPD matters, use the subject line "LGPD – Right Request");
• Help Center — Frequently Asked Questions with answers about privacy and data.

This Privacy Policy applies to all registered users and visitors of ceu77.best, regardless of the device used to access it — desktop, mobile, tablet, or any other internet-enabled device.

The ceu77 collects only the data necessary to provide its services and meet applicable legal obligations. Collection takes place at different points throughout the user relationship:

During registration:

• Full name;
• CPF (Brazilian individual taxpayer registry);
• Date of birth;
• Full residential address (street, number, complement, neighborhood, city, state, and ZIP code);
• Email address;
• Mobile phone number;
• Access password (stored exclusively as a cryptographic hash — never in plain text).

While using the platform:

• Full history of sports bets and casino sessions;
• Deposit and withdrawal history, including payment methods used (Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, TED);
• Pix key and bank details linked to transactions;
• Platform access logs (IP address, login date and time, device and browser used);
• Browsing preferences and most frequently used features.

During KYC verification:

• Identity document image (national ID or driver's license, front and back);
• A selfie of the account holder for identity confirmation;
• Proof of residence issued within the last 90 days;
• Proof of ownership of the payment method, where applicable.

The ceu77 uses the collected data exclusively for the following purposes:

The ceu77 does not use your data to send third-party advertising or to build consumer profiles for external commercial purposes. First-party marketing communications (platform promotions, Sports Betting and casino updates) are sent only to users who opted in and can be canceled at any time through the account panel or by contacting support.

Every data processing operation carried out by the ceu77 has an identified legal basis, as required by Article 7 of the LGPD. The applicable bases are:

• Contract performance — most processing is necessary to provide the services contracted by the user when creating an account: bet processing, Pix withdrawals, support, and account maintenance;
• Legal obligation — data processing for KYC verification, anti-money laundering, and reporting to tax and regulatory authorities is required by Brazilian law, regardless of user consent;
• Legitimate interest — fraud prevention activities, suspicious behavior analysis, and platform security are carried out on the basis of the legitimate interest of the ceu77 and its users in maintaining a safe environment;
• Consent — used solely for sending marketing communications. Consent may be withdrawn at any time without affecting other processing activities based on different legal grounds.

The ceu77 does not carry out processing based on unidentified legal grounds. Should the legal basis for any specific processing change, this Policy will be updated in advance.

The ceu77 shares users' personal data only when strictly necessary and always with adequate safeguards to protect privacy. The categories of recipients are:

• Payment processors — partners regulated by the Banco Central do Brasil that process Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transactions. These partners act as data processors and only handle the financial information strictly necessary to complete each transaction;
• Identity verification providers (KYC) — specialized companies that review the documents submitted for the mandatory verification required before the first withdrawal. They operate under data processing agreements with confidentiality obligations and LGPD compliance requirements;
• Casino game providers — providers such as Pragmatic Play, PG Soft, Evolution, and Play'n GO receive an anonymized user identifier to process game rounds. They have no access to the user's name, CPF, or financial data;
• Public and regulatory authorities — when required by law, court order, or specific sports betting market regulation, the ceu77 shares data with competent authorities — Receita Federal, Banco Central, law enforcement, and the ANPD, as applicable;
• Technology infrastructure — cloud and hosting service providers that maintain the platform's servers operate under data processing agreements with recognized security certifications.

The ceu77 does not share data with external marketing companies, data brokers, social networks, or advertisers. User data is never monetized in any form.

The ceu77 retains personal data only for as long as necessary to fulfill the purpose of processing or to meet the applicable legal obligation. Retention periods are:

• Registration and KYC data — retained for the duration the account is active and for up to 5 years after closure, in accordance with anti-money laundering obligations (Law No. 9.613/1998) and Receita Federal regulations;
• Financial transaction history — retained for 5 years after each transaction, in accordance with Brazilian tax and regulatory requirements;
• Access logs — retained for 6 months in accordance with the Brazilian Internet Act (Law No. 12.965/2014), and for up to 1 year in active fraud investigation cases;
• Betting history and casino sessions — retained for the duration the account remains active and for up to 1 year after closure;
• Customer support data — interaction records kept for 2 years for quality assurance and dispute resolution purposes.

Once retention periods expire, data is permanently deleted or irreversibly anonymized. Users who request account closure have their usage data deleted or anonymized, with only the information legally required to be retained being kept.

The ceu77 implements technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or accidental destruction. The main safeguards include:

• SSL/TLS Encryption across all communications between the user's device and the platform's servers;
• Cryptographic hash for password storage — passwords are never stored in plain text, making it impossible to recover the original password even if the database is improperly accessed;
• Two-factor authentication (2FA) available to all users as an additional layer of account protection;
• Continuous monitoring of suspicious access attempts and intrusion attempts using automated anomaly detection systems;
• Access control restricted to internal staff — each team member has access only to the data required for their specific role;
• Penetration testing and periodic security audits conducted by independent specialized firms;
• Encrypted backup of data across geographically separate environments, with restricted and monitored access.

Despite all measures in place, no security system is 100% breach-proof. Should an incident occur that may affect your data, the ceu77 notifies affected users and the ANPD within the deadlines established by the LGPD, providing transparent information about what occurred and the corrective measures taken.

Users also share responsibility for their account security: keep your password confidential, do not share your credentials with third parties, enable two-factor authentication, and contact support immediately if you suspect unauthorized access to your account.

The General Data Protection Law grants you, as a data subject, a set of rights that ceu77 fully upholds. See how to exercise each of them:

• Access — request a copy of all the data that the ceu77 holds about you. A response is provided within 15 days;
• Correction — notify support of any outdated or incorrect data. Registration details can be updated directly in the account dashboard for certain fields;
• Deletion — request the deletion of data processed on the basis of consent. Data required to fulfill a legal obligation cannot be deleted before the applicable legal retention period expires;
• Portability — request your data in a structured format (CSV or JSON) for transfer to another service, in accordance with ANPD regulations;
• Data sharing information — find out exactly which partners the ceu77 shared your data and for what purpose;
• Withdrawal of Consent — unsubscribe from marketing communications at any time via your account dashboard or through support, free of charge and without penalty;
• Objection — challenge processing based on legitimate interest by presenting your particular situation to the DPO;
• Complaint to the ANPD — if your request is not satisfactorily resolved, you have the right to file a complaint with the National Data Protection Authority (gov.br/anpd).

The ceu77 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies — required for the platform's basic operation, such as maintaining authenticated sessions and storing the betting slip. These cannot be disabled without affecting the use of the site;
• Performance cookies — collect information about how users navigate the platform (pages visited, time on page, errors encountered) in an aggregated and anonymized form, for ongoing experience improvements;
• Functionality cookies — remember user preferences such as selected language, preferred odds, and display settings, to personalize the experience on future visits;
• Security cookies — used for detecting suspicious behavior, preventing fraud, and verifying the authenticity of login sessions.

The ceu77 does not use tracking cookies for external advertising purposes. There is no integration with third-party ad networks that would collect behavioral data to serve ads on other websites.

You can manage your cookie preferences through your browser. Disabling non-essential cookies may limit some platform features, but will not prevent access to betting or the casino.

The ceu77 is a platform exclusively for users aged 18 and over. Registration requires a valid CPF, and the system verifies age during account creation. Users under 18 are not permitted to create accounts, make deposits, place bets, or access casino games on the platform.

The ceu77 does not intentionally collect data from minors. If we identify that an account was created by or on behalf of a minor, we immediately close the account, reverse any deposits made, and permanently delete all collected data with no possibility of recovery.

If you believe an underage account has been improperly created on the platform, please contact us immediately through support or at suporte@ceu77.best. We treat these reports as the highest priority.

Parents or guardians who come across this type of situation can use the parental control tools available on Android and iOS to block access to betting sites on shared devices.

Some of ceu77's technology partners ceu77 — such as cloud infrastructure providers and some casino game providers — may process data on servers located outside Brazil. When this occurs, the ceu77 ensures that international data transfers meet at least one of the requirements established by the LGPD:

• The destination country offers a level of personal data protection compatible with that established by Brazilian LGPD, as assessed by the ANPD;
• Or the operator provides sufficient guarantees of compliance with data protection principles and rights through specific contractual clauses, binding corporate rules, or recognized certifications.

Under no circumstances is directly identifying user data (name, CPF, address) transferred internationally without adequate safeguards. Casino game providers receive anonymized user identifiers to process game rounds and have no access to the account holder's personal or financial data.

The ceu77 may update this Privacy Policy periodically to reflect changes in Brazilian law, the services offered, or data processing practices. The date of the last update is always shown at the top of this page.

Material changes — especially those that expand the scope of processing, introduce new data types, or add new recipients — will be communicated to the user via their registered email at least 7 days before taking effect. For changes with a lower operational impact, publication on this page is sufficient as notice.

Continued use of the ceu77 after a new version of this Policy is published constitutes acceptance of the updated terms. If you do not agree with the changes, you may close your account before the effective date and request a withdrawal of your available balance via Pix or another supported method.

We recommend revisiting this page periodically to stay up to date with any changes — especially during regulatory shifts in the Sports Betting and online gaming market in Brazil.

To exercise any right as a data subject, ask questions about this Privacy Policy, or report any situation related to the protection of your personal information, please contact the ceu77 through the channels below:

• Live chat — available 24/7, directly on the platform, with support agents in Brazilian Portuguese;
• DPO Email — suporte@ceu77.best with the subject line "LGPD – [Request Type]";
• Help Center — Frequently Asked Questions with answers on privacy, data, and security.

The deadline for responding to rights requests is up to 15 calendar days from receipt of the identified request, as established by Article 19 of the LGPD. For more complex cases requiring in-depth legal analysis, the ceu77 may request an extension of the deadline with a justified explanation.

If you are not satisfied with the response from the ceu77 regarding a rights request, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.