6778bet – Privacy and Data Protection Policy

1 Who We Are — The Data Controller

This Privacy Policy describes how the platform 6778bet, accessible at https://6778bet.best, collects, processes, stores, and protects the personal data of its users. For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), the 6778bet acts as the Controller of personal data processed in connection with the services provided on the platform.

The 6778bet is a sports betting and online entertainment platform intended exclusively for users aged 18 and over residing in Brazil. All services are offered in Brazilian Reais (R$), with Portuguese-language support and local payment methods — Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago.

2 What Personal Data We Collect

2.1 Data provided directly by you

During registration and use of the platform, 6778bet collects the following data provided directly by the user:

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address;
• Identity verification data (KYC): copy of a government-issued ID (National ID, Driver's License, or passport) and proof of address, requested in certain situations as described in Section 2.4;
• Support data: messages sent via live chat, emails, and any other content shared with the support team;
• Preference data: account settings, responsible gambling limits set by the user, and communication preferences (opting in or out of promotional emails).

2.2 Automatically Collected Data

By accessing and browsing the platform, 6778bet automatically collects certain technical data required for the secure operation of the service:

• Access data: IP address, date and time of access, session duration, country and region of origin;
• Device data: device type (mobile, tablet, desktop), operating system, browser model and version;
• Browsing data: pages visited, clicks, navigation flow, and time spent in each section;
• Gaming data: betting history (Sports Betting, live casino, slots, crash games), amounts wagered, results, and cash out used.

2.3 Financial data

To process deposits and withdrawals, the 6778bet collects financial data limited to what is strictly necessary:

• Pix: Pix key (CPF, phone number, email, or random key) and the account holder's name for the source/destination account;
• Credit/debit card: card data is not stored on 6778bet's servers — transactions are processed directly through a PCI DSS-certified payment gateway;
• Bank slip (Boleto): transaction data for payment confirmation;
• PicPay and Mercado Pago: transaction identifier and payment status received from the digital wallet.

2.4 Identity Verification Data (KYC)

Identity verification may be requested by 6778bet in the following situations: withdrawals exceeding R$ 5,000.00; cumulative monthly withdrawals exceeding R$ 10,000.00; suspected fraudulent activity or inconsistencies in registration data; or as required by legal obligations related to anti-money laundering. Documents collected during the KYC process are stored in encrypted form and accessible only by the platform's compliance team.

3 How and Why We Use Your Data

The 6778bet uses the personal data collected solely for the following purposes:

• Performance of contracted services: creating and managing your account, processing bets, deposits, and withdrawals via Pix, boleto, card, or digital wallets;
• Identity verification and fraud prevention: to confirm your identity and verify that your transactions are legitimate, in compliance with the regulations of the Central Bank of Brazil;
• Platform security: to detect and block unauthorized access, fraud attempts, bot activity, and any behavior that violates the Terms & Conditions;
• Compliance with legal obligations: meet regulatory requirements applicable to the betting and entertainment sector in Brazil, including anti-money laundering (AML/PLD) regulations;
• Service improvement: analyzing usage data in aggregate to identify issues, improve the user experience, and develop new features;
• User communication: to send transaction confirmations, security notifications, account updates, and — with your express consent — marketing communications and promotions;
• Customer Support: resolve questions, complaints, and technical issues reported by the user;
• Responsible gaming: monitor gaming patterns to identify behaviors that may indicate problem gambling and activate the available protection tools.

4 Legal Basis for Processing (LGPD)

All personal data processing carried out by 6778bet is grounded in one of the legal bases set out in Article 7 of the LGPD. Below, we detail the legal bases applied to each primary purpose:

• Contract performance (Art. 7, V): processing necessary for the performance of the contracted services — account creation, betting, payments via Pix, and balance management;
• Compliance with a legal obligation (art. 7, II): processing required by anti-money laundering regulations, Central Bank of Brazil rules, and other legal obligations applicable to the sector;
• Legitimate interest (Art. 7, IX): processing for platform security, fraud prevention, service improvement, and risk analysis, provided it does not override the data subject's fundamental rights and freedoms;
• Consent (art. 7º, I): processing for sending marketing communications, personalized promotions, and the use of analytics cookies — always with a clear opt-out option available to the user.

5 Data Sharing with Third Parties

The 6778bet does not sell, rent, or transfer your personal data to third-party companies for their own commercial purposes. Data is shared only in the following situations, always with contractual data protection guarantees:

5.1 Essential Operational Partners

• Payment providers: to process deposits and withdrawals via Pix, boleto, Visa/Mastercard cards, PicPay, and Mercado Pago. Only the minimum data required for the transaction is shared;
• Game providers: live casino providers (Evolution Gaming, Pragmatic Play Live, Ezugi), slots (Pragmatic Play, PG Soft, Hacksaw, NetEnt), and Sports Betting receive session and betting data for game delivery — no access to full financial data;
• Identity verification services (KYC): specialized providers that assist with document verification to fulfill legal obligations, under contracts containing confidentiality clauses;
• IT infrastructure providers: server hosting, CDN (content delivery network), and cybersecurity services, which process data as operators under 6778bet's instructions.

5.2 Legal Obligation

The 6778bet may be required to share data with competent authorities — such as the Receita Federal, Banco Central do Brasil, COAF (Financial Activities Control Council), or judicial authorities — when required by law, court order, or legitimate administrative process. In such cases, only the data specifically requested will be shared.

5.3 What We Do NOT Do

• We do not sell data to brokers, insurers, or financial institutions;
• We do not share data with external advertising platforms for ad targeting outside of 6778bet;
• We do not transfer data to any company without a contract containing data protection clauses aligned with the LGPD.

6 Data Storage and Security

6.1 Technical Security Measures

The 6778bet implements multiple layers of protection to ensure the security of data both at rest and in transit:

• Encryption in transit: TLS 1.3 / 256-bit SSL encryption on all communications between the user's device and the platform's servers;
• Encryption at rest: sensitive data stored in databases is encrypted using AES-256;
• Access control: access to user data is role-restricted, and only team members who need the data to perform their work are granted access, with two-factor authentication required;
• Continuous monitoring: intrusion detection systems (IDS) and 24/7 monitoring to identify and block unauthorized access attempts;
• Regular security testing: security audits and penetration testing are carried out periodically by specialized firms.

6.2 Incident Response

In the event of a security incident with potential impact on users' personal data, 6778bet follows this procedure: immediate incident containment, assessment of the scope and affected data, notification to the Autoridade Nacional de Proteção de Dados (ANPD) within the deadlines set by the LGPD, and direct communication to affected users with relevant information and recommended steps. The 6778bet maintains an incident response plan that is regularly updated and tested.

7 Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device by your browser when you visit 6778bet. They serve specific functions, from keeping you logged in to ensuring the platform runs correctly. The 6778bet uses both proprietary and third-party partner cookies.

7.2 Types of Cookies We Use

• Strictly necessary cookies: essential for the platform to function. Without them, core services such as keeping your session active, processing bets, and accessing your account dashboard will not work. No consent is required.
• Performance cookies: collect anonymous information about how users navigate the platform (most visited pages, session duration, errors encountered) to improve the experience. Require consent.
• Functionality cookies: remember your preferences (language, account settings, favorite game type) to personalize your experience. Require consent.
• Security cookies: assist in detecting suspicious behavior, preventing fraud, and protecting against attacks. Required for platform security.

7.3 Cookie Management

You can manage your cookie preferences at any time through the cookie banner displayed on your first visit or through your browser settings. Disabling performance and functionality cookies does not affect access to the essential services of the 6778bet. Disabling strictly necessary cookies may prevent the platform from functioning properly.

8 Protection of Minors' Data

The services of 6778bet are intended exclusively for individuals aged 18 and over residing in Brazil. The platform takes active measures to prevent access by minors:

• CPF verification at registration — the system automatically validates the date of birth associated with the CPF against the Federal Revenue database;
• Identity verification (KYC) confirming that the account holder is of legal age;
• Monitoring of access patterns that may indicate account use by a minor.

The 6778bet does not knowingly collect personal data from individuals under 18. If we become aware that a minor has provided personal data to create an account, the account will be immediately closed, all collected data will be deleted, and any deposits will be returned to the holder of the payment method used.

If you believe a minor has accessed or created an account on the 6778bet, contact us immediately via live chat or by email at suporte@6778bet.best.

9 How to Exercise Your Rights as a Data Subject

The LGPD grants data subjects a set of rights regarding the processing of their personal information. To exercise any of the rights listed below, users of 6778bet can get in touch via live chat or by email at suporte@6778bet.best, identifying yourself with the email registered on your account and describing the right you wish to exercise.

9.1 Data Access Request

You can request a full report at any time containing all the personal data that 6778bet holds about you. The report is delivered in a readable format within 15 business days and may include registration data, financial history, betting history, and access logs.

9.2 Correction of Incorrect Data

Account details such as address, email, and mobile number can be updated directly in the account dashboard. To correct data that affects identity verification (such as name or CPF), supporting documentation will be required and the process may take up to 5 business days for review by the compliance team.

9.3 Data Deletion

You may request the deletion of your personal data when processing is no longer necessary for the original purposes or when you withdraw the consent you gave. However, certain data must be retained by 6778bet by legal obligation — such as financial and transaction records, which must be retained for a minimum of 5 years under Brazilian anti-money laundering legislation. This data will be anonymized wherever possible.

9.4 Data Portability

You may request the portability of your data to another controller. The file will be made available in a structured, machine-readable format (JSON or CSV) within 15 business days. Portability covers registration data and preferences — it does not include third-party data (such as from game providers) or data that cannot be ported for technical or legal reasons.

10 How Long We Retain Your Data

The 6778bet retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or for the period required by applicable Brazilian law. Below are the retention periods for each data category:

• Registration data (active account): retained for the full duration of the account and for up to 5 years after closure, to meet legal obligations and resolve any disputes;
• Financial history (deposits, withdrawals, transactions): retained for a minimum of 5 years as required by anti-money laundering regulations (COAF Resolution and Banco Central do Brasil rules);
• Betting history: retained for 2 years for audit and dispute resolution purposes; after that period, anonymized for aggregated statistical use;
• Identity verification documents (KYC): retained for 5 years after collection as required by regulation, then securely destroyed;
• Access and security logs: retained for 6 months for security and incident investigation purposes;
• Support conversation content: retained for 2 years for customer service quality and complaint resolution purposes;
• Performance cookie data (with consent): retained for up to 12 months from the date of collection.

Once retention periods expire, data is either anonymized (where it holds statistical value for the service) or securely and irreversibly deleted, with no possibility of recovery.

11 International Data Transfers

Some of the service providers used by 6778bet operate servers outside Brazil — such as cloud IT infrastructure providers, live casino game providers (such as Evolution Gaming, with servers in multiple countries), and identity verification systems. In these situations, international data transfers take place with the following safeguards:

• Data processing agreements (DPA) with each vendor, including protection clauses equivalent to those required by the LGPD;
• Preference for providers operating in countries with a level of data protection recognized as adequate by the ANPD, or that have adopted Standard Contractual Clauses (SCCs);
• Data transferred is limited to the minimum necessary for the provision of the specific service.

The 6778bet does not transfer personal data internationally to countries classified by the ANPD as having an inadequate level of protection, unless additional approved contractual safeguards are in place.

12 Changes to this Privacy Policy

The 6778bet may periodically update this Privacy Policy to reflect changes to its services, applicable legislation, or privacy practices. When significant changes occur — those that affect data subjects' rights or expand the purposes of data processing — the 6778bet will notify users at least 15 days in advance through the following channels:

• Email sent to the address registered on the account;
• Prominent notification on the platform dashboard upon next login;
• Publication of the new version on this page with a clear indication of the effective date.

Continued use of the services of 6778bet after the effective date of the new terms constitutes acceptance of the changes. If you do not agree with the changes, you may close your account before the effective date without penalty.

Minor changes — such as text corrections or clarifications that do not alter the substance of the policy — may be published without prior notice, but the last updated date will always be refreshed at the top of this page.

13 Data Protection Officer (DPO)

In accordance with Article 41 of the LGPD, 6778bet has appointed a Data Protection Officer (DPO), responsible for:

• Guide the company and its staff on data protection practices in accordance with the LGPD;
• Receive and respond to communications from the National Data Protection Authority (ANPD);
• Receive and handle complaints from data subjects regarding the processing of their personal information;
• Take necessary steps and guide the company in the event of a security incident;
• Conduct data protection impact assessments for new features and processes.

To contact the DPO of the 6778bet for specific privacy and data protection matters, please use the email suporte@6778bet.best with the subject line "DPO — Data Protection". Requests are responded to within 15 business days.

14 Contact Channels for Privacy Matters

To exercise your rights as a data subject, report a privacy concern, question data processing practices, or contact the Data Protection Officer (DPO) of 6778bet, use the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the platform — the fastest channel for urgent matters;
• Email: suporte@6778bet.best — for formal requests for access, correction, deletion, or data portability, with a response time of up to 15 business days;
• Related documents: Terms & Conditions and Responsible Gaming.

If you are not satisfied with the response from the 6778bet to a data protection request, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) at gov.br/anpd.