Plays7k Privacy Policy — Protecting Your Data

For the purposes of the LGPD, the personal data controller covered under this policy is the company responsible for operating the plays7k platform, accessible at plays7k.net. The controller is the entity that makes decisions about how and why data is processed.

Plays7k is an online entertainment platform offering casino, Sports Betting, crash games, and other gaming services to users aged 18 and over residing in Brazil. All operations and data processing are carried out in compliance with applicable Brazilian law.

For direct contact regarding personal data:

• Privacy email: privacidade@plays7k.net
• General email: contato@plays7k.net
• Live support: available 24/7 on the platform

Plays7k collects personal data at various points throughout your relationship with the platform. The categories of data collected are detailed below:

Registration and Identity Data:

• Full name;
• Date of birth;
• CPF (Individual Taxpayer Registration number);
• Email address;
• Mobile phone number;
• Full residential address (street, ZIP code, city, state).

Identity Verification Data (KYC):

• Copy of a government-issued photo ID (national ID card, driver's license, or passport);
• Proof of address;
• Proof of bank account ownership or Pix key;
• Selfie with ID document, when requested for biometric verification.

Financial & Transaction Data:

• Deposit and withdrawal history (amounts, dates, methods used);
• Pix key or bank details for withdrawal processing purposes;
• History of bets and games played on the platform.

Usage & Technical Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser used;
• Pages visited, session duration, and browsing patterns on the platform;
• Access logs, login dates and times.

Communication Data:

• Content of messages exchanged with customer support;
• Support and complaint history;
• Communication preferences (email, push notifications, WhatsApp).

Personal data processed by plays7k is collected through the following means:

• Directly from you: by filling out the registration form, completing the identity verification process, making deposits or withdrawals, contacting support, or updating your profile information;
• Automatically during use: while browsing the platform, we automatically collect technical and navigation data through cookies, server logs, and similar technologies — detailed in section 10;
• From authorized third parties: payment service providers (to confirm transactions via Pix, boleto, card, or digital wallets such as PicPay and Mercado Pago), identity verification companies, and game providers, within the limits necessary to deliver the service;
• Public sources: in specific cases of fraud prevention or regulatory compliance, we may consult information held in public databases such as the Federal Revenue Service's National Registry of Individuals (CPF).

Plays7k uses the data collected exclusively for the purposes stated below. No data is used for purposes incompatible with what was disclosed at the time of collection.

Plays7k does not use your data to build credit risk profiles, sell information to external advertisers, or share it with competing platforms.

All data processing carried out by plays7k is grounded in at least one of the legal bases set out in Article 7 of the LGPD:

• Contract performance (Art. 7, V): most data is processed to enable the delivery of the services you contracted — account creation, deposits, withdrawals, game access, and support;
• Legal or regulatory obligation (Art. 7, II): identity verification (KYC), financial transaction records, and anti-money laundering measures are requirements under Brazilian law — not a choice made by plays7k;
• Legitimate interest (Art. 7, IX): the personalization of the user experience, fraud prevention, and continuous platform improvement are carried out on the basis of legitimate interest, always respecting your fundamental rights;
• Consent (Art. 7, I): the sending of marketing communications, promotions, and updates via email, SMS, or WhatsApp is subject to your express consent, which may be withdrawn at any time.

Plays7k internally documents the applicable legal basis for each data processing activity and periodically reviews that documentation to ensure ongoing compliance with the LGPD.

Plays7k may share personal data with third parties exclusively in the situations below, always under contractual security and confidentiality guarantees:

• Payment processors: companies that process transactions via Pix, bank slip, credit/debit card, PicPay, Mercado Pago, and TED receive only the minimum data required to complete the transaction — never the full gaming history;
• Game providers: companies such as Spribe, Pragmatic Play, and SmartSoft Gaming operate the games available on plays7k. To ensure the integrity of gaming sessions, these providers receive an anonymized session identifier and do not have access to the player's full personal data;
• Identity verification companies: KYC service providers that assist with document verification and fraud prevention, bound by contractual confidentiality obligations;
• Competent authorities: when required by law, court order, or money laundering investigation, plays7k is legally obligated to provide data to the relevant Brazilian authorities (Receita Federal, Ministério Público, Polícia Federal). Such sharing occurs only upon a formal legal determination;
• Auditors and legal advisors: strictly within the limits necessary for audit purposes, regulatory compliance, or defense in legal proceedings.

Some of the game and technology infrastructure providers used by plays7k have servers located outside Brazil. When personal data needs to be transferred to other countries, plays7k requires contractual safeguards equivalent to those established under the LGPD, including:

• Standard data protection contractual clauses;
• Compliance certifications with recognized international standards (such as ISO 27001);
• Formal commitments of confidentiality and security equivalent to those required under Brazilian law.

Plays7k maps all international data transfers and regularly reviews vendor contracts to ensure adequate protection mechanisms are in place. If you would like more information about the specific international transfers applicable to your account, please contact privacidade@plays7k.net.

Plays7k retains personal data for as long as necessary to fulfill the stated purposes or to comply with legal obligations. Retention periods vary depending on the type of data:

• Registration and identity data: retained for the full duration of the account and for at least 5 years after account closure, as required by anti-money laundering regulations;
• Financial transaction history: retained for 5 years after each transaction, in compliance with Brazilian tax and financial legislation;
• Betting and gaming history: maintained by 2 years for support and dispute resolution purposes;
• Access logs and technical data: retained for 6 months for security and fraud prevention purposes, in accordance with the Brazilian Internet Civil Rights Framework;
• Support communications: retained for 1 year after the support ticket is closed;
• Marketing data (with consent): retained until consent is withdrawn by the data subject.

Once the applicable retention period expires, data is securely deleted or anonymized in a way that prevents re-identification of the holder. Deletion is carried out through certified processes that make data recovery impossible.

Plays7k implements multiple layers of technical and organizational security to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction:

• Encryption in transit: TLS 1.3 protocol with 256-bit SSL certificate across all communications between your device and our servers;
• Encryption at rest: sensitive data stored in databases is encrypted using AES-256;
• Password hashing: player passwords are never stored in plain text — we use one-way salted hash functions to protect your credentials;
• Two-factor authentication (2FA): available and recommended for all players — adds an extra layer of protection to account access;
• Internal access controls: plays7k employees only access players' personal data when strictly necessary for their role, and only through authenticated, audited access;
• Ongoing monitoring: automated systems detect suspicious access, intrusion attempts, and abnormal usage patterns in real time;
• Periodic security testing: plays7k's infrastructure undergoes regular penetration testing and security audits conducted by specialized firms.

In the event of a security incident that compromises personal data, plays7k will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, providing details about the incident, the data impacted, and the containment measures taken.

Plays7k uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze usage patterns in aggregate form. Below are the categories of cookies used:

Essential cookies are required for the platform to function properly and cannot be disabled without affecting your experience. Analytical and marketing cookies are only used with your consent, which can be managed in the cookie settings available on the platform or directly in your browser preferences.

Plays7k does not use cross-site tracking technologies to build behavioral profiles outside of its own platform.

The LGPD grants you, as the data subject whose personal data is processed by plays7k, the following rights, which may be exercised at any time:

Plays7k services are intended exclusively for individuals aged 18 years of age or older. plays7k does not intentionally collect personal data from anyone under 18 and takes active measures to prevent minors from registering or using the platform.

During the registration process, confirmation of legal age is required. The identity verification process (KYC) includes checking an identity document that confirms the date of birth. Accounts whose holders are identified as under 18 years of age are immediately closed and all data is deleted.

Plays7k may update this Privacy Policy to reflect changes in Brazilian legislation, data processing practices, or the services offered. Any relevant change will be communicated in advance by email or via an in-platform notification.

The date of the most recent update is always shown at the top of this document. Continued use of the platform after a new version takes effect constitutes acceptance of the changes. If you disagree with the updated terms, you may request account closure before the effective date.

Previous versions of this policy may be made available upon request at privacidade@plays7k.net, for historical reference purposes.

Plays7k has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO serves as the official point of contact between the company, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD).

To contact plays7k's DPO or privacy channel:

• Privacy email (DPO): privacidade@plays7k.net
• General email: contato@plays7k.net
• Live chat: available 24 hours a day on the plays7k.net platform

The response deadline for requests related to personal data is up to 15 business days. For urgent requests related to security breaches or data misuse, we respond with top priority via live chat.