Privacy Policy 888g – Protecting Your Data under the LGPD

This Privacy Policy describes how 888g ("Platform", "we", or "888g"), operator of the website 888g.life, collects, uses, stores, and protects the personal data of registered users and visitors to the platform.

For the purposes of the General Data Protection Law (LGPD — Law No. 13,709/2018), 888g acts as Data Controller — meaning we are the entity that determines the purposes and means of processing your personal data. The 888g Data Protection Officer (DPO) can be reached by email at suporte@888g.life for any questions regarding privacy and data processing.

This Policy applies to all services available on 888g, including Sports Betting (Brasileirão Série A, Copa do Brasil, Libertadores, Superliga de Vôlei, NBB, UFC, e-sports, and other competitions), Live Casino, slots, crash games, and all other platform features.

The 888g collects only the personal data necessary to deliver the contracted services and ensure the security of the platform and its users. The table below details the data categories, specific examples, and the purpose behind each collection:

We do not collect data in sensitive categories as defined by the LGPD — such as health, biometric, racial or ethnic origin, or religious belief data — except where strictly necessary for identity verification during the KYC process, with explicit consent.

When you contact us through live chat or email support, the data from that interaction is stored to improve service quality and for internal audit purposes. These conversations are never shared with third parties for commercial use.

The LGPD requires that every instance of personal data processing have a specific legal basis to justify it. 888g processes your data under the following legal grounds set out in Article 7 of the LGPD:

• Performance of a contract (art. 7º, V): we process your identification, contact, and financial data because it is essential to delivering the contracted service — so that you can create an account, deposit, bet, and withdraw at 888g.
• Compliance with a legal obligation (art. 7º, II): as a financial platform subject to Banco Central do Brasil regulations, we are required to collect and verify identity data (KYC) and to maintain financial transaction records for regulatory and anti-money laundering purposes.
• Legitimate interest (art. 7, IX): we use technical data such as IP address and device information to keep the platform secure, detect fraud, and ensure each CPF has only one active account — protecting you and every 888g user.
• Consent (art. 7º, I): for marketing communications — such as emails about special Brasileirão or Superliga de Vôlei promotions and push notifications — we ask for your explicit consent, which can be withdrawn at any time in your account settings.

The 888g does not sell, rent, or trade your personal data with third parties for any purpose. Data sharing is limited to the situations below, all of which are necessary for the provision of the service or required by law:

• Payment processors: we share only the financial data strictly required by payment providers to process deposits and withdrawals via Pix (Banco Central do Brasil), boleto bancário, credit/debit card, PicPay, Mercado Pago, and bank TED. These providers receive only the data needed for each specific transaction.
• Identity verification services (KYC): during the verification process, your documents are handled by a provider specializing in regulatory compliance, under contract with mandatory data protection clauses.
• Technology infrastructure: server and cloud storage providers that host the 888g platform have access to data at the infrastructure level only — with no access to the specific content of your bets or transactions.
• Competent authorities: when required by Brazilian law, a court order, or a regulatory authority (such as the Central Bank, the Federal Revenue Service, or law enforcement), 888g provides the legally required information. In such cases, we notify the user whenever the law permits.
• Fraud and money laundering prevention: in cases of well-founded suspicion of fraudulent activity, we may share information with partners specializing in financial security and with the relevant Brazilian authorities.

All third parties that receive data from 888g are bound by data processing agreements imposing obligations of confidentiality, security, and use strictly limited to the stated purpose — in full compliance with the LGPD.

The 888g adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction:

• Encryption in transit: all communication between your phone or computer and 888g's servers is encrypted with TLS 1.3 and a 256-bit SSL certificate. No data is transmitted in plain text.
• Encryption at rest: sensitive financial data — such as Pix keys and banking details — is stored with additional AES-256 encryption, accessible only by payment processing systems.
• Access control: internal access to user data is restricted to personnel on a strictly need-to-know basis, with multi-factor authentication and a full audit log of all access.
• Continuous monitoring: automated systems monitor the 888g infrastructure in real time to detect anomalous behavior, intrusion attempts, and suspicious activity.
• Secure backup: data backups are performed regularly and stored with encryption in physically separate locations, ensuring service continuity in the event of an incident.
• Security testing: we conduct periodic penetration tests (pentests) carried out by independent specialized firms to identify and fix vulnerabilities before they can be exploited.

In the event of a security incident that compromises personal data and may pose a significant risk or harm to users, 888g will notify the Autoridade Nacional de Proteção de Dados (ANPD) and the affected users within the legally required timeframe, with information about the nature of the incident, the data involved, and the measures taken to mitigate its effects.

The 888g retains your personal data only for as long as necessary for the purposes for which it was collected, in compliance with the legal retention obligations applicable to operating a financial platform in Brazil:

• Active account data: retained for the entire period the account is active, plus the applicable statute of limitations after closure.
• Financial records (KYC and transactions): retained for at least 5 years after the last transaction, as required by Brazilian anti-money laundering legislation (Law No. 9,613/1998) and Central Bank regulations.
• Tax data: transaction records relevant for tax purposes are retained for 5 years, as per the Código Tributário Nacional.
• Security logs: access and activity logs for security purposes are retained for 6 months, under the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
• Marketing data (with consent): retained for as long as consent remains active. If you withdraw your marketing consent, that data is deleted or anonymized within 30 days.

After voluntary account closure and the fulfilment of all legally required retention periods, personal data that no longer needs to be kept is securely deleted or irreversibly anonymized, so that the account holder can no longer be identified.

If you request the deletion of your data before the end of the legal retention period, we will clearly explain which data we are required to keep and for how long, and we will immediately delete everything that is not legally required to be retained.

The 888g uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze service performance. Below we detail the types of cookies we use:

You can manage your cookie preferences at any time in your browser settings. Clearing your browser cookies may reset platform settings that are not saved to your account. 888g does not use third-party cookies for behavioral advertising outside of its own platform.

The LGPD guarantees you, as a personal data subject, a set of rights that 888g is committed to fully upholding. See each right and how to exercise it below:

To exercise any of these rights, please contact the 888g Data Protection Officer (DPO) at suporte@888g.life, providing your full name, CPF, and the right you wish to exercise. We respond within 15 business days. If the request is particularly complex or there is a high volume of simultaneous requests, we may extend this deadline by a further 15 days, with prior notice.

If you are not satisfied with our response, you have the right to file a complaint with Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.

The 888g strictly prohibits the use of the platform by anyone under 18 years of age. We do not intentionally collect personal data from minors.

As an eligibility check, we require a CPF at registration — which technically prevents anyone without a valid CPF from signing up. The KYC process carried out before the first withdrawal includes date-of-birth and photo ID verification, adding a second layer of age verification.

If you are a parent or legal guardian and suspect that a minor accessed the 888g platform using your details, please contact us immediately at suporte@888g.life. We treat these cases as a top priority.

The 888g may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or platform features. You will be notified of any relevant update at least 7 days' notice via the registered account email and through an in-platform notification.

The most recent version of this Policy is always available at 888g.life/privacy-policy, with the date of the last update shown at the top of the page. We recommend revisiting this page periodically.

For any questions, rights requests, or complaints related to the processing of your personal data by 888g, please contact our Data Protection Officer (DPO) through the channels below:

• DPO Email: suporte@888g.life — please include "LGPD – [your right or request]" in the subject line
• Live chat: available 24 hours a day directly on the 888g platform
• Frequently Asked Questions: visit our Frequently Asked Questions for quick responses on privacy and security

This Privacy Policy is effective as of January 2026. Brazilian Portuguese version (pt-BR). Applies to all registered 888g users, including unregistered visitors with respect to technical data automatically collected during browsing.