Privacy Policy of deusa777 – How Your Data Is Protected

This Privacy Policy describes how deusa777 collects, uses, stores, and protects the personal data of users of the platform available at https://deusa777.com. By creating an account or using any service provided by deusa777, you confirm that you have read and understood the practices described in this document.

This policy was drafted in compliance with the General Personal Data Protection Law (Lei nº 13.709/2018 — LGPD) and other applicable Brazilian regulations governing data processing. Any questions can be directed to our support channel, available 24 hours a day in Portuguese.

The deusa777 is the controller of the personal data collected through the platform. For the purposes of this policy, "controller" refers to the legal entity responsible for making decisions about the processing of users' personal data, as defined by Article 5, Item VI, of the LGPD.

The Data Protection Officer (DPO) of deusa777 can be contacted by email at suporte@deusa777.com or through the live chat channel available on the platform. The DPO is the official point of contact for exercising data subject rights and for any questions regarding data processing.

The deusa777 collects personal data at different points during your interaction with the platform. The categories of data collected and the contexts in which collection takes place are listed below:

Registration and identification data:

• Full name, date of birth, and CPF;
• Email address and mobile phone number;
• Residential address (zip code, street, city, state);
• Government-issued ID (RG or CNH), when requested for identity verification (KYC).

Financial and transaction data:

• Pix key registered for deposits and withdrawals;
• History of deposits, withdrawals, and bets placed on the platform;
• Credit or debit card data (processed by PCI-DSS certified partners — deusa777 does not store full card details);
• Bank account details used for TED transfers.

Platform usage data:

• IP address, device type (mobile, tablet, computer), and operating system;
• Browser used, language, and time zone;
• Pages visited, games played, and session duration;
• Access logs and account activity records.

Communication data:

• Chat or email support conversation history;
• Feedback and reviews voluntarily submitted by the user.

Each piece of data collected by deusa777 has a specific, documented purpose. We do not use data for purposes beyond those described below without notifying the user and obtaining additional consent where required by the LGPD:

The deusa777 processes personal data on the basis of the following legal grounds set out in Article 7 of the LGPD:

• Contract performance (art. 7, V) — processing necessary to fulfill the obligations arising from the contract established when you create a deusa777 account, including processing deposits and withdrawals, maintaining your betting history, and providing support;
• Legal obligation (art. 7º, II) — processing required by law, such as identity verification for anti-money laundering compliance (Law No. 9,613/1998) and adherence to tax and regulatory requirements;
• Legitimate interest (art. 7, IX) — processing for platform security, fraud prevention, product improvement, and usage analysis, always in a proportionate manner and in full respect of data subjects' rights;
• Consent (art. 7º, I) — where applicable, such as for sending promotional communications by email or mobile. Consent may be withdrawn at any time without affecting your use of the platform.

The deusa777 does not sell personal data. Sharing with third parties occurs only in the situations below, always on a restricted basis and with partners who meet LGPD requirements:

• Payment processors — to process transactions via Pix, bank transfer (boleto bancário), credit or debit card, PicPay, and Mercado Pago. These partners operate as data processors under contract and only access the information necessary to process each transaction;
• Game providers — providers such as Evolution Gaming and Pragmatic Play receive only an anonymized session identifier and never the user's full personal data;
• Technology infrastructure providers — hosting, processing, and cloud storage services that operate as data processors under confidentiality agreements;
• Competent authorities — when required by law, court order, or official investigation. deusa777 shares only the minimum necessary to comply with legal requirements and, whenever possible, notifies the user beforehand;
• Fraud prevention — specialized systems for fraud and money laundering detection, which receive data under strict confidentiality and security protocols.

The personal data collected by deusa777 are stored on secure servers with the following technical and organizational safeguards:

• Encryption in transit: SSL/TLS 256-bit encryption on all communications between user devices and platform servers;
• Encryption at rest: sensitive data stored with AES-256 encryption;
• Access control: only employees with a verified operational need have access to personal data, with auditable access logs;
• Multi-factor authentication: mandatory for all internal deusa777 systems that process user data;
• Continuous monitoring: intrusion detection and anomaly monitoring systems operate 24 hours a day;
• Encrypted backups: backups performed regularly and stored in encrypted form at separate locations.

Deusa777 platform security indicators:

The deusa777 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable legal retention obligations:

• Active account data: retained for as long as the account remains active on the platform;
• Financial data and transaction history: retained for a minimum of 5 years after the last transaction, in compliance with tax legislation and anti-money laundering requirements;
• Access and security logs: retained for 6 months, as required by the Marco Civil da Internet (Law No. 12,965/2014);
• Support data: retained for 2 years after each case is resolved;
• Recorded consents: retained for the period necessary to demonstrate compliance with the LGPD.

After account closure and once all legal retention periods have been met, data is securely deleted or anonymized. Secure deletion ensures the data cannot be recovered by any means.

If you request deletion of your data before the applicable legal retention periods expire, the deusa777 will delete as much data as possible and restrict the use of any remaining data to purposes solely justified by the legal obligations that require its retention.

The LGPD grants you, as the data subject whose data is processed by deusa777, a set of rights that can be exercised at any time through our support channel:

The deusa777 uses cookies and similar technologies to improve the user experience, keep accounts secure, and understand how the platform is used. Below are the types of cookies used:

You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent the platform from functioning properly. The deusa777 does not use third-party cookies for behavioral advertising purposes.

In addition to cookies, the platform uses local storage (localStorage) on your device to retain session preferences between visits. This information stays on your own device and is not transmitted to servers unless necessary.

The deusa777 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors under 18, nor do we allow registration or use of our services by individuals in that age group.

The identity verification (KYC) process of deusa777 includes confirmation of date of birth and, where necessary, a request for a government-issued ID to verify legal age. Accounts created by users under 18 are immediately closed upon identification, and any remaining balances are handled in accordance with our fraud prevention policies.

If you believe a minor has created an account on deusa777, please contact our support channel immediately so we can act quickly.

In certain operational situations, personal data of users of deusa777 may be processed on servers or systems located outside Brazil — for example, when using international cloud infrastructure or game provider systems with global operations.

When this occurs, the deusa777 ensures that:

• Transfers are made only to countries or organizations with an adequate level of data protection, as assessed by the ANPD, or on the basis of standard contractual clauses;
• Data recipients are contractually required to guarantee the same level of protection demanded by the LGPD;
• Transfers occur only when necessary to provide the service contracted by the user.

The deusa777 prefers providers with a presence or data centers in Brazil whenever technically and economically feasible, minimizing the need for international data transfers as much as possible.

The deusa777 may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered.

When relevant changes are made, the deusa777 will:

• Notify users via their registered email address at least 15 days in advance;
• Display a prominent notice on the platform during the transition period;
• Update the "last updated" date at the top of this page;
• In cases of changes that affect consent-based processing, request a new expression of consent where applicable.

We recommend reviewing this policy periodically. The version currently in effect is always the one published on this page.

For any questions related to the processing of your personal data, the exercise of rights under the LGPD, or inquiries about this policy, please contact the Data Protection Officer (DPO) of deusa777:

• Email: suporte@deusa777.com
• Live chat: available on the platform 24 hours a day, 7 days a week, in Brazilian Portuguese
• Response time: up to 15 calendar days for LGPD-related requests

If you believe that deusa777 did not adequately uphold your rights as a data subject, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) through the authority's official website.