Privacy Policy of 577f — Data
Protected, Transparency Guaranteed

This Privacy Policy applies to all services offered by 577f, including Sports Betting, live casino games, roulette, poker, slots, crash games, and all other products available on the platform. It applies to both browser and mobile app access.

By creating an account on 577f or when using any feature on the platform — even without registering, such as browsing public pages — you acknowledge that you have read and understood this Policy. For registered users, acceptance is formalized at the time of registration, alongside the Terms and Conditions.

This Policy is a standalone document, but complementary to the Terms and Conditions of the platform. In the event of an apparent conflict between the two documents on privacy matters, the provisions of this Policy shall prevail.

The 577f collects personal data in three distinct situations: data provided directly by the user, data collected automatically during platform use, and data received from third-party partners.

Data you provide directly:

• Full name, CPF, date of birth, and nationality (required at registration);
• Email address and phone number for communications and authentication;
• Full residential address (requested during identity verification);
• Identity documents — RG, CNH, or passport — and a selfie (when requested during KYC);
• Partial financial data for processing deposits and withdrawals: Pix key, card details (only the last 4 digits are stored — the full number is never retained);
• Content of messages exchanged with customer support.

Automatically collected data:

• IP address, device type, operating system, and browser used;
• Betting history, games accessed, sessions started and ended;
• Access logs with the date, time, and duration of each session;
• Approximate geolocation data (country and city, derived from IP address) for eligibility verification;
• Cookies and session identifiers (detailed in section 6).

Each piece of data collected by 577f has a specific purpose. The table below summarizes the main processing categories:

The 577f never uses your data for purposes other than those listed above without prior notice and, where required by the LGPD, without obtaining fresh consent.

The LGPD requires that all personal data processing have a justified legal basis. The 577f bases its data processing on the following legal grounds set out in Article 7 of Law 13.709/2018:

• Contract performance: processing required to fulfill the contracted service — account creation, bet processing, deposits, and withdrawals;
• Compliance with legal obligation: data required by applicable law, such as anti-money laundering obligations (Law 9.613/1998) and betting regulations;
• Legitimate interest: fraud prevention, platform security, and product improvement using anonymized data;
• Consent: marketing communications via email, SMS, and push notification — always revocable by the user at any time.

Where processing is based on consent, 577f will request this consent clearly and separately from other acceptances. You may withdraw your consent at any time without affecting your access to the platform's other services.

The 577f does not sell your personal data to any third party, under any circumstances. Data sharing occurs only in the situations below, all of which are necessary for the operation of the service or required by law:

• Payment processors: minimum data required to process deposits via Pix (Itaú, Bradesco, Banco do Brasil, Nubank, and other partner banks), boleto bancário, credit/debit card, PicPay, and Mercado Pago. These processors are contractually obligated to protect your data to the same standards as 577f;
• Game providers: username and session information shared with Evolution, Pragmatic Play, NetEnt, and other partner providers to process live game rounds and slots. No complete financial data is shared with game providers;
• Identity Verification Services: documents submitted during KYC may be processed by services specializing in biometric and document verification, subject to confidentiality agreements;
• Competent authorities: when required by court order, regulatory ruling, or legal obligation — such as reports to COAF (Conselho de Controle de Atividades Financeiras) in cases covered by anti-money laundering legislation;
• Independent auditors: during compliance audit processes, anonymized or aggregated data may be shared with external auditors bound by confidentiality agreements.

The 577f uses cookies and similar technologies to ensure the platform functions properly, improve the user experience, and — with your consent — deliver more relevant communications. The types of cookies used are:

• Essential cookies: required for basic platform functionality — keeping your session active, saving language preferences, and ensuring login security. These cannot be disabled without affecting platform performance;
• Functional cookies: remember your gaming preferences, in-platform browsing history, and interface settings. They improve your experience with no impact on security;
• Analytics cookies: collect anonymized data on how users navigate the platform in order to identify product improvements. Data is aggregated and not linked to any specific user;
• Marketing cookies: used only with your explicit consent to personalize communications and offers. Can be disabled at any time in your account settings.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent access to some platform features. Disabling analytical and marketing cookies does not affect normal use of the 577f.

The 577f retains your data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. The main retention periods are:

• Active account data: retained for the full duration of the account and for up to 5 years after closure, in compliance with legal anti-money laundering obligations;
• Financial transaction history: retained for a minimum of 5 years after each transaction is completed, as required by regulation;
• KYC records (documents): retained for 5 years after account closure or last use of the service, whichever is later;
• Access and security logs: retained for up to 6 months for security and incident investigation purposes;
• Customer support data: conversation history retained for up to 2 years for reference in disputes or complaints;
• Marketing data: retained for as long as consent remains active. Following withdrawal of consent, removed from communication systems within 30 days.

Once the retention periods above have expired, data is anonymized or securely and permanently deleted from the systems of 577f.

The 577f implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

• Encryption in transit: all communication between your device and 577f's servers is secured by TLS 1.3 with a 256-bit SSL certificate;
• Encryption at rest: sensitive data stored in our databases is encrypted with AES-256;
• Access control: access to personal data is restricted to employees with a legitimate business need, based on the principle of least privilege;
• Two-factor authentication: available and strongly recommended for all accounts on the platform;
• Continuous monitoring: intrusion detection systems and anomaly monitoring operate 24 hours a day;
• Security testing: security audits and penetration testing conducted periodically by independent specialized firms;
• Incident response plan: documented procedures for an immediate response in the event of a security incident, including notification to the ANPD and affected data subjects when required by the LGPD.

The Lei Geral de Proteção de Dados grants you, as a data subject, a set of rights that 577f is fully committed to honoring. You may exercise any of these rights at any time:

The 577f is a platform intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from minors, and the registration of minors is expressly prohibited under the platform's Terms and Conditions.

To ensure compliance with this requirement, the 577f verifies the date of birth during registration and may request supporting documents during the KYC process. Accounts identified as belonging to minors are closed immediately and any collected data is deleted.

If you become aware that a minor has created an account on the platform, please contact our support team immediately. We work with legal guardians and, when necessary, with the relevant authorities to protect minors online.

Some personal data of users of 577f may be processed on servers or by service providers located outside Brazil — such as international game providers (Evolution, NetEnt, Microgaming) or cloud infrastructure services.

When such a transfer occurs, the 577f ensures that the level of protection applied to your data is equivalent to that required by the LGPD through:

• Transfer to countries with an adequate level of data protection recognized by the ANPD;
• Standard contractual clauses requiring the recipient to uphold the same data protection principles applied in Brazil;
• Prior compliance assessment of international service providers before any integration.

Financial data from Brazilian players — including Pix, Mercado Pago, and PicPay information — is always processed by financial institutions regulated by the Banco Central do Brasil and remains within Brazilian territory.

The 577f may update this Privacy Policy periodically to reflect changes in our services, technologies used, or legal requirements. Any material change will be communicated with at least 14 days' notice by email to the registered address and/or via a prominent notice on the platform.

The current version is always the one published on this page, with the "last updated" date shown at the top of the document. We recommend revisiting this Policy periodically to stay informed about how we protect your data.

Continued use of the platform after any changes take effect constitutes acceptance of the updated version. If you disagree with changes that affect how your personal data is processed, you may exercise your right to data deletion as described in section 9, subject to mandatory legal retention periods.

The 577f has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is the official point of contact for any matters related to personal data processing on the platform.

To get in touch regarding privacy matters, to exercise your rights under the LGPD, or to report a security incident that may have compromised your data:

• Preferred channel — LGPD: send an email to contato@577f.best with the subject line "LGPD" to ensure your message is routed directly to the DPO;
• General support: live chat on the platform, available 24 hours a day, 7 days a week, with an average response time of under 2 minutes;
• For urgent security incidents: live chat is the fastest channel — our security team is notified immediately.

You also have the right to file a complaint directly with the National Data Protection Authority (ANPD) if you believe your rights as a data subject have not been respected. The ANPD is the regulatory body responsible for enforcing the LGPD in Brazil.