888w Privacy Policy – Your Data Protected in Brazil

1. Data Controller

The controller of the personal data collected through the platform 888w is the company responsible for operating the 888w.world website in Brazil. For questions regarding data processing, the exercise of rights guaranteed under the LGPD, or to contact the Data Protection Officer (DPO), please use the email contato@888w.world.

This Privacy Policy applies to all registered users of 888w in Brazil, including website visitors who do not yet have an active account on the platform. By using the site or creating an account, you confirm that you have read and understood the data processing practices described in this document.

2. Data We Collect

The 888w collects the personal data needed to operate the platform securely, process payments, and meet regulatory obligations. The data collected falls into the following categories:

The 888w does not collect sensitive data such as health information, sexual orientation, or religious or political beliefs. All data listed above is collected directly from the user at registration, during platform use, or when contacting support.

3. Purpose of Processing

The personal data collected by 888w are used exclusively for the following purposes:

• Account operations: create, maintain, and manage your user account on the platform, including login authentication and password recovery.
• Identity verification (KYC): confirm legal age (18 or older), Brazilian residency, and ownership of the bank account or Pix key used for withdrawals and fraud prevention.
• Payment processing: process deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer; process withdrawals via Pix to the account holder's verified account.
• Service delivery: enable Sports Betting, live betting, casino use, crash games, poker, and jackpot; calculate and pay out winnings; process cash out.
• Security and fraud prevention: detect and prevent fraudulent activity, multiple account usage, bet manipulation, and money laundering.
• Communications: send account notifications, deposit and withdrawal confirmations, security alerts, and — with your consent — promotions and news from 888w.
• Responsible gambling: monitor usage patterns to identify signs of problematic behavior and provide appropriate support in line with our responsible gambling policies.
• Legal compliance: comply with obligations imposed by Brazilian betting legislation, the LGPD, and determinations from competent regulatory authorities.

4. Legal Basis for Processing (LGPD)

Each personal data processing purpose at 888w has a specific legal basis under the LGPD (Art. 7 and Art. 11). The main legal bases used are:

• Contract performance (Art. 7º, V): processing is necessary to perform the contract entered into with you when you created an account at 888w — that is, to operate your account, process bets, and handle payments.
• Compliance with a legal obligation (Art. 7º, II): data such as CPF and identity documents are processed to fulfill obligations required by Brazilian betting regulations, including age verification and anti-money laundering measures.
• Legitimate interest (Art. 7, IX): technical and platform usage data are processed based on 888w's legitimate interest in ensuring platform security and preventing fraud.
• Consent (Art. 7, I): promotional communications and newsletters are sent exclusively based on your consent, which can be withdrawn at any time.

5. Data Sharing with Third Parties

The 888w does not sell, rent, or transfer users' personal data to third parties for their own commercial purposes. Data sharing only occurs in the following situations, always with appropriate safeguards in place:

• Payment processors: payment data is shared with the financial institutions required to process deposits and withdrawals — such as banks within the Pix network, card operators, and platforms like PicPay and Mercado Pago. These partners act as data processors under 888w's oversight and are bound by confidentiality agreements and LGPD compliance obligations.
• Technology providers: 888w uses cloud infrastructure providers, fraud detection systems, and casino gaming platforms. These partners access only the data strictly necessary to deliver their specific services.
• Regulatory and judicial authorities: data may be disclosed to governmental, regulatory, or judicial authorities when required by law, court order, or formal request from a competent body — for example, in money laundering investigations or compliance with betting regulations.
• Auditors and consultants: professionals engaged for auditing, legal, or accounting services may access personal data to the extent necessary to perform those services, always subject to a confidentiality obligation.

Under no circumstances will 888w shares data with third-party marketing companies, data brokers, or any entity that would use the information for purposes other than those described in this Policy.

6. Data Retention & Deletion

The 888w retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The retention criteria are:

• Active accounts: data is retained for as long as the account remains active on the platform.
• After account closure: identification data and financial records are retained for up to 5 years after account closure, as required by applicable Brazilian law (Civil Code, tax legislation, and anti-money laundering regulations).
• Security logs: technical records related to security and fraud prevention are retained for up to 2 years.
• Marketing communications: data used for promotional communications is deleted or anonymized as soon as consent is withdrawn.

When requesting account deletion, the 888w anonymizes data that does not need to be retained under a legal obligation and deletes the rest within 30 days. Data kept under a legal obligation is stored in isolation and used solely for the purposes that justify its retention.

7. Data Security

The 888w implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or destruction. The main security measures in place are:

• SSL/TLS Encryption: all communications between the user's device and 888w's servers are encrypted, including login, Pix deposits, withdrawals, and registration data.
• Secure password storage: passwords are stored in hashed and salted format; the original password cannot be recovered, even by 888w's technical team.
• Access control: internal access to users' personal data is restricted to staff who need that information to perform their duties, following the principle of least privilege.
• Anti-fraud monitoring: automated systems monitor the platform around the clock for suspicious access patterns, anomalous transactions, and account breach attempts.
• Incident response plan: in the event of a security incident affecting personal data, 888w will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.

Despite every effort, no security system is completely infallible. We recommend that users create strong, unique passwords for their account at 888w, enable two-factor authentication whenever available, and never share your login credentials with anyone.

8. Cookies and Tracking Technologies

The 888w uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and keep accounts secure. The types of cookies used are:

• Essential cookies: required for the platform's core functionality — session authentication, bet slip, and language preferences. They cannot be disabled without affecting how the site operates.
• Security cookies: used to detect suspicious activity, unauthorized access attempts, and anomalous behavior that may indicate fraud.
• Performance cookies: collect anonymous data on how users navigate the platform (most visited pages, session duration, devices used) to continuously improve the experience on 888w.
• Functionality cookies: remember your preferences — such as selected language, betting settings, and favorite sports — to personalize your experience on 888w.

You can manage your cookie preferences through the consent banner displayed on your first visit to the site or through your browser settings. Disabling essential cookies may prevent access to certain platform features.

9. How to Exercise Your Rights

To exercise any of the rights guaranteed by the LGPD regarding your personal data at 888w, please contact our Data Protection Officer (DPO) at contato@888w.world. Clearly state the right you wish to exercise and the relevant information so we can process your request.

The response deadline of 888w for rights requests is up to 15 days from receipt of the request. In complex cases, this deadline may be extended by an additional 15 days, with proper justification communicated to the user. Fulfilling rights requests is free of charge, except in cases of manifestly unfounded or excessive requests.

If you believe that the 888w did not handle your request appropriately, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under Art. 18, § 1º of the LGPD.

10. Minors

The platform 888w is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The identity verification (KYC) process includes age confirmation through analysis of an official government-issued photo ID.

If 888w identifies, during the verification process or at any other time, that a user is under 18, the account will be immediately closed, any bets placed will be voided, and deposited funds will be returned to the original payment method holder. If you believe a minor has created an account at 888w, contact us immediately at contato@888w.world.

11. International Data Transfers

Part of the technological infrastructure used by the 888w may involve processing data on servers located outside Brazil — for example, with cloud providers or casino game systems supplied by international companies. In such cases, 888w ensures that international data transfers comply with Art. 33 of the LGPD by applying the following safeguards:

• Data processing agreements with protection clauses equivalent to LGPD standards;
• Transfers only to countries with an adequate level of data protection recognized by the ANPD, or subject to specific safeguards provided by the data recipient;
• Periodic assessment of technology partners to ensure compliance with required privacy standards.

12. Changes to this Privacy Policy

The 888w may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or the expansion of services offered. Any material change will be communicated to registered users by email at least 15 days before taking effect.

The date of the last update to this Policy is shown at the top of this document. We recommend reviewing it periodically. Continued use of the platform after the effective date of any new terms constitutes acceptance of the updated Policy. The most recent version is always available on this page.

13. Contact the Data Protection Officer (DPO)

The Data Protection Officer (DPO) of 888w is responsible for receiving communications about personal data processing, handling data subject requests, and interacting with the National Data Protection Authority (ANPD).

To contact the DPO of 888w:

• Email: contato@888w.world (include "DPO – LGPD" in the subject line)
• Live chat: available on the platform, 24 hours a day, 7 days a week
• Response time: up to 15 days for rights requests; up to 48 hours for general privacy inquiries

The 888w is committed to handling every request with care, transparency, and within the deadlines set out by the LGPD. Your privacy is a priority — not just a legal obligation.