Privacy Policy – Data Protection at 76k002

76k002 is a Sports Betting and online casino platform operating with a full focus on the Brazilian market. This Privacy Policy applies to all users who access, register for, or use any service available at 76k002.best — including betting on football, UFC, MMA, slots, roulette, Live Casino, crash games, and all other features on the platform.

We take our users' privacy seriously. Every piece of data collected by 76k002 has a specific purpose, a defined legal basis, and a set retention period — all in compliance with the General Personal Data Protection Law (LGPD – Law No. 13,709/2018), Brazil's primary data protection legislation. Our commitment is to be transparent about what we collect, why we collect it, and what we do with that information.

76k002 collects only the data necessary to provide the contracted services and to meet applicable legal obligations. Collection takes place at different points during your interaction with the platform:

Data you provided directly during registration:

• Full name
• CPF (Individual Taxpayer Registration)
• Date of birth
• Email address
• Mobile number
• Residential address (street, city, state, ZIP code)
• Login password (stored in encrypted form — 76k002 has no access to the original value)

Data collected during platform use:

• Betting history — sports wagered on, markets selected, amounts, and results
• Casino game history — titles accessed, sessions, amounts wagered, and results
• Financial transaction history — deposits made via Pix, card, boleto, PicPay, Mercado Pago, TED, and completed withdrawals
• Browsing data — pages visited, session duration, clicks, and interface interactions
• IP address and device technical data — device type, operating system, browser, screen resolution
• Approximate geographic location (based on IP address) for regulatory compliance purposes

Data collected during the identity verification (KYC) process:

• Official government-issued photo ID (national ID card, driver's license, or passport)
• Proof of current address
• Selfie with ID document for identity verification, when requested
• Proof of ownership of the payment method, where applicable

Every piece of data collected by 76k002 has a defined purpose. We do not use your data for anything beyond what is described below:

76k002 does not sell personal data to third parties, does not build profiles for third-party marketing purposes without explicit consent, and does not use data for solely automated decision-making that produces significant effects on you — except in fraud detection cases, where human review is always guaranteed afterward.

76k002 always processes your personal data on the basis of one of the legal grounds set out in the LGPD. Each processing operation falls under at least one of the following:

• Contract performance: Processing is necessary to provide the services you signed up for at registration — including bet processing, payments, and account management.
• Compliance with a legal or regulatory obligation: Certain data must be processed to comply with Brazilian law, including anti-money laundering regulations (Law No. 9,613/1998), tax obligations, and betting industry requirements.
• Legitimate interest: Browsing and usage behavior data may be used to improve the platform and prevent fraud, provided this does not override your fundamental rights and freedoms.
• Consent: For sending marketing communications, promotions, and 76k002 news by email or mobile, processing is based on your explicit consent, which may be withdrawn at any time through your account settings or by contacting support.
• Exercise of legal rights: Data may be retained for 76k002's defense in judicial, administrative, or arbitration proceedings.

76k002 does not sell your personal data or share it with third parties for those third parties' own commercial purposes. Sharing occurs only in the specific, necessary situations described below:

• Payment processors: Data required to process deposits and withdrawals via Pix, credit and debit card, boleto bancário, PicPay, Mercado Pago, and TED bank transfer is shared with the respective payment processors and banks, under their own privacy terms.
• Game and casino providers: Session identifiers (not your CPF or full personal details) may be shared with providers such as Evolution Gaming and Pragmatic Play for game record-keeping and technical dispute resolution.
• Identity verification (KYC) tools: Documents submitted for verification may be processed by specialized service providers under the same confidentiality obligations as 76k002.
• Authorities and regulatory bodies: 76k002 may be legally required or compelled by court order to share data with the Brazilian Central Bank, Federal Revenue Service, Federal Police, or other competent authorities — always within the limits set by law and with notice to the data subject where permitted.
• Anti-money laundering: In compliance with Brazilian law, suspicious transactions may be reported to COAF (Financial Activities Control Council).

76k002 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet applicable legal obligations. General retention periods are:

• Registration and active account data: Retained for the full duration of the contractual relationship (for as long as the account remains active).
• Financial transaction history: Retained for a minimum of 5 years after account closure, as required by Brazilian anti-money laundering legislation and tax obligations.
• Identity verification (KYC) documents: Retained for a minimum of 5 years after account closure or after the last significant transaction.
• Betting and gaming records: Retained for up to 5 years for audit, dispute resolution, and regulatory compliance purposes.
• Marketing communication data: Until consent is withdrawn by the data subject, or 2 years after their last access to the platform, whichever comes first.
• Access logs and technical data: Up to 6 months after collection, unless retention is required due to an ongoing investigation.

Once applicable retention periods expire, your data is securely deleted or anonymized so it can no longer be linked to your identity.

76k002 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key safeguards currently in place include:

• 256-bit SSL/TLS encryption: All communication between your device and 76k002's servers is encrypted, preventing data from being intercepted in transit.
• Encrypted passwords: User passwords are stored using salted hash algorithms — not even the 76k002 team has access to your original password.
• Internal access controls: Only employees with a proven operational need are granted access to personal data — with an audit log recorded for every access.
• Continuous monitoring: Automated intrusion detection and anomalous behavior monitoring systems keep watch over the infrastructure 24 hours a day.
• Encrypted backups: Data backups are stored in secure environments with encryption at rest.
• Two-factor authentication: Available for users who want to add an extra layer of security to their account access.

In the event of a security incident affecting users' personal data, 76k002 will take the necessary containment measures, notify the National Data Protection Authority (ANPD) within the legally required timeframe, and inform affected data subjects when the risk is significant.

76k002 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — for usage analytics. The first time you access 76k002, you will see a cookie notice with the option to accept or customize your preferences.

The types of cookies used by 76k002 are:

• Essential cookies (required): Required for the platform's basic operation — keeping your session active, remembering language preferences, and securing transactions. They cannot be disabled without affecting your ability to use the platform.
• Performance (analytics) cookies: Collect information about how users interact with the platform — most visited pages, session duration, technical errors. Used to improve the experience and identify issues. Require your consent.
• Functional cookies: These allow the platform to remember your preferences — such as the last sport you viewed or filters you applied — improving the personalization of your experience. They require your consent.
• Marketing cookies (with consent): May be used to display relevant 76k002 communications on other channels, such as social media, based on your usage history. Only activated with your explicit consent.

You can manage your cookie preferences at any time through your browser settings or via the privacy preference panel available on the 76k002 platform. Disabling essential cookies may affect the platform's proper functionality.

The LGPD grants you a robust set of rights over your own personal data. 76k002 is committed to making it easy to exercise those rights — quickly and without unnecessary red tape. You may exercise any of the rights below at any time:

• Right of access: Request a copy of all personal data 76k002 holds about you.
• Right to rectification: Request the correction of incomplete, inaccurate, or outdated data.
• Right to erasure: Request the deletion of your personal data processed on the basis of consent. Data retained due to a legal obligation cannot be deleted before the applicable retention period expires.
• Right to data portability: Request that your data be provided in a structured, machine-readable format for transfer to another controller, where technically feasible.
• Right to object: Object to the processing of your data carried out on the basis of legitimate interest, provided no overriding legal basis applies.
• Right to withdraw consent: Withdraw consent for processing based on that legal ground at any time, without affecting any processing carried out prior to withdrawal.
• Right to information about sharing: Request information about which entities 76k002 has shared your data with.
• Right not to be subject to automated decisions: Request human review of decisions made solely by automated systems that produce significant effects for you.

To exercise any of these rights, contact our privacy team at suporte@76k002.best, providing your full name and CPF and describing the right you wish to exercise. We will respond within 15 business days, in accordance with the timeframe established by the LGPD.

76k002 services are intended exclusively for individuals aged 18 and over. The platform does not knowingly collect personal data from minors under 18 and does not allow them to register or use any available service.

The identity verification (KYC) process includes date-of-birth confirmation and document review specifically to prevent access by minors. Any account identified as belonging to someone under 18 is closed immediately, with the real deposited balance refunded and any winnings forfeited.

Some service providers used by 76k002 — such as live casino game providers, technical analytics tools, and cloud infrastructure systems — may process data on servers located outside Brazil. When this occurs, 76k002 ensures the transfer is carried out in compliance with the LGPD's rules on international data transfers.

The measures in place to protect your data during international transfers include:

• Contractual data protection clauses requiring recipients to adopt standards equivalent to the LGPD.
• Transfers carried out only to countries or organizations that offer an adequate level of data protection, as assessed by the ANPD.
• Data minimization in transfers — only the information strictly necessary for the specific purpose is transferred.

76k002 does not transfer personal data to jurisdictions that do not offer adequate protection guarantees, except with your explicit consent or as permitted under Brazilian law.

76k002 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. The current version date is always shown at the top of this page.

Significant changes that affect data subjects' rights will be communicated by email and/or through a prominent notice on the platform at least 15 days in advance. Minor changes — such as wording corrections or clarifications that do not alter how data is processed — may be implemented without prior notice.

Continued use of the platform after significant changes take effect constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the effective date.

76k002 has appointed a Data Protection Officer (DPO), as required by the LGPD, responsible for serving as a communication channel between the company, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights, ask privacy-related questions, report a concern, or request any information about how 76k002 processes your personal data, please reach out through the following channels:

• Privacy email: suporte@76k002.best — subject line: "Privacy and LGPD"
• Live chat: Available 24 hours a day, 7 days a week, on the 76k002 platform, in Portuguese.

We are committed to responding to all personal data requests within 15 business days, as required by the LGPD. For more complex cases requiring additional review, we will inform you of the estimated response time.