1. Who We Are — The Data Controller
A 77ss (accessible at 77ss.best) is the data controller for personal data collected on this platform. 77ss is a Sports Betting and online casino platform intended exclusively for users residing in Brazil who are aged 18 and over. All personal data processing described in this Privacy Policy is carried out by 77ss in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018).
For questions, rights requests, or to contact our Data Protection Officer (DPO), please email suporte@77ss.best. Our team is available in Brazilian Portuguese 24 hours a day, 7 days a week.
Data controller: 77ss — 77ss.best. DPO: privacidade@77ss.best · This policy applies to all registered users and visitors of the 77ss platform in Brazil.
2. Personal Data We Collect
A 77ss collects personal data in different ways throughout your interaction with the platform. Below are the categories of data collected and the circumstances in which they occur:
2.1 Data provided directly by you
- Registration data: full name, CPF, date of birth, email address, mobile number and full residential address;
- Identity verification data (KYC): photo ID (national ID, driver's license, or passport), proof of address, and a selfie when requested;
- Financial data: Pix key, credit or debit card details (tokenized, never stored in plain text), bank account information for wire transfers;
- Communications: messages exchanged with support via chat, email or WhatsApp.
2.2 Automatically collected data
- Login details: IP address, browser type, operating system, device (mobile, tablet, desktop), language, and time zone;
- Usage data: pages visited, events clicked, session duration, bets placed, games accessed, and transaction history;
- Cookie and similar technology data: session identifiers, user preferences, and analytics data (detailed in section 9).
| Data Category |
Examples |
Primary Purpose |
| Identification |
Full name, CPF, date of birth |
Registration, KYC, fraud prevention |
| Contact |
Email, phone number, address |
Communication, verification, support |
| Financial |
Pix key, card details (tokenized) |
Processing deposits and withdrawals |
| Behavioral |
Betting history, games accessed |
Personalization, responsible gambling |
| Technical |
IP, device, browser |
Security, anti-fraud, UX |
| Documents |
National ID/Driver's license, proof of address |
Identity Verification (KYC) |
3. How 77ss Uses Your Data
A 77ss uses your personal data solely for the purposes described below. We never use your data for purposes incompatible with those that justified its collection.
- Service delivery: account creation and management, Sports Betting processing, casino games, deposits via Pix, boleto and card, withdrawals and cashouts;
- Identity verification (KYC/AML): comply with legal anti-money laundering and counter-terrorism financing obligations, as required by Brazilian law;
- Service communications: sending bet confirmations, deposit and withdrawal receipts, security alerts, and important account updates;
- Marketing communications: sending promotions, bonuses, platform news, and relevant sports events — only with your prior and explicit consent;
- Personalization: tailoring your platform experience based on your preferences, betting history, and favorite games;
- Security & anti-fraud: monitoring of suspicious activity, detection of unauthorized access, prevention of multiple account creation, and protection against platform misuse;
- Responsible gambling: analyzing behavioral patterns to identify signs of problem gambling and provide appropriate support when needed;
- Compliance with legal obligations: responding to requests from competent authorities in accordance with applicable Brazilian law.
Marketing communications are opt-in. You can opt out of marketing emails and notifications at any time by clicking "Unsubscribe" in the footer of any communication or by adjusting your preferences in your 77ss account settings.
4. Legal Bases for Processing
A 77ss only processes your personal data when an appropriate legal basis exists, as established by the LGPD. The legal bases we rely on are:
- Contract performance (Art. 7, V of the LGPD): processing necessary to fulfill the service agreement you accepted when registering on 77ss — this includes processing bets, payments, and account management;
- Compliance with a legal obligation (Art. 7, II of the LGPD): data required to meet obligations under Brazilian law, including Central Bank regulations, anti-money laundering rules, and tax requirements;
- Legitimate interest (Art. 7, IX of the LGPD): processing for platform security, fraud prevention, and service improvement purposes, always balanced against your rights and reasonable expectations;
- Consent (Art. 7, I of the LGPD): for marketing communications, non-essential cookies and advanced personalization — you may withdraw this consent at any time without affecting your access to core services.
Transparency on legal bases: When you exercise your right of access, 77ss will inform you of the specific legal basis applied to each category of personal data processed about you.
5. Data Sharing with Third Parties
A 77ss does not sell, rent, or trade your personal data. We only share your data in the situations described below, always with an appropriate legal basis and with partners who contractually commit to the same data protection standards as 77ss:
- Payment processors: payment gateways that process your transactions via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and wire transfer — only the data strictly necessary to complete the transaction;
- Identity verification (KYC) providers: specialized partners that assist with document verification and fraud prevention;
- Casino game providers: slots developers, live casino, and other game providers that require an anonymous session identifier to process results — never your full personal data;
- Public authorities: when required by law, court order, or formal request from a competent Brazilian authority;
- Technology infrastructure providers: cloud hosting services, security monitoring, and technical support, always under contractual agreements that ensure the protection of your data.
All third parties that receive personal data from users of 77ss are contractually required to: (a) process data only for authorized purposes; (b) apply security measures consistent with 77ss standards; (c) not subcontract data processing without prior authorization from 77ss.
6. International Data Transfers
Some of our technology vendors and casino game providers may be located outside Brazil. When this is the case, the 77ss ensures that international transfers of personal data are made only to countries or organizations that provide an adequate level of data protection, or through specific contractual safeguards as required by the LGPD and the National Data Protection Authority (ANPD).
We never transfer your complete financial data (such as an untokenized credit card number) outside Brazil. Payment information is processed by certified gateways operating within the standards of the Central Bank of Brazil.
7. How Long We Retain Your Data
A 77ss retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with the mandatory legal retention periods applicable in Brazil:
- Active account data: retained for the entire duration of the contractual relationship with 77ss;
- Financial transaction data: retained for a minimum of 5 years after the transaction, as required by tax and anti-money laundering legislation;
- Identity verification data (KYC): retained for a minimum of 5 years after account closure, in accordance with applicable regulations;
- Support communication data: retained for 2 years after each support ticket is closed;
- Non-essential cookie data: retained in line with each cookie's lifespan, generally between 30 days and 2 years;
- Marketing data: retained until consent is withdrawn or the account is closed.
Once the applicable retention period has expired, your data is securely deleted or irreversibly anonymized so that you can no longer be identified.
8. Information Security at 77ss
A 77ss employs robust technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure:
- 256-bit SSL Encryption across all communications between your device and 77ss servers;
- Encryption at rest for all sensitive data stored on our servers;
- Two-factor authentication (2FA) available to all users — strongly recommended;
- Tokenization of credit and debit card data — we never store full card numbers;
- Continuous monitoring security monitoring and intrusion detection, 24 hours a day;
- Access control strict: only employees with a specific need are granted access to users' personal data, and all such access is logged and audited;
- Regular penetration testing and security audits conducted by independent firms.
In the event of a security incident: If 77ss detects a data breach that may pose a risk to you, we will notify you and the National Data Protection Authority (ANPD) within the deadlines established by the LGPD, with information about the nature of the incident and the measures taken.
9. Cookies and Tracking Technologies
A 77ss uses cookies and similar technologies (pixels, local storage) to ensure the platform works correctly and to improve your experience. The types of cookies we use are:
- Essential cookies: required for the platform to function — authentication, betting session, security, and basic preferences. They cannot be disabled without affecting site usability. Do not require consent;
- Analytical cookies: used to understand how users interact with 77ss — most visited pages, navigation flows, and session duration. Used in anonymized form. Requires consent;
- Personalization cookies: allow 77ss to remember your preferences (language, odds format, favorite sports) for a smoother experience. Require consent;
- Marketing cookies: used to display relevant communications about 77ss promotions and bonuses. Require consent and can be revoked at any time.
You can manage your cookie preferences at any time in your browser settings (Chrome, Firefox, Safari, Edge) or through the privacy dashboard available in your account on the 77ss. Disabling essential cookies may prevent certain platform features from working properly.
10. Minors
A 77ss is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. If you suspect that someone under 18 has created an account on 77ss or provided their data to the platform, please contact us immediately at suporte@77ss.best.
Upon detecting that an account was created by a minor, the 77ss will immediately close the account, cancel all balances, delete the minor's personal data, and, where applicable, report the matter to the relevant authorities. Mandatory identity verification (KYC) prior to the first withdrawal is one of the measures 77ss uses to prevent minors from accessing the platform.
11. How to Exercise Your Rights
To exercise any of your rights as a personal data subject under the LGPD, submit a request to suporte@77ss.best with the subject "LGPD Rights — [your full name]" and clearly describe what you need. Our team will respond within 15 business days, as set out in the timeframe established by Law No. 13.709/2018.
To verify your request and prevent unauthorized access to your data, we may ask you to confirm your identity before processing it. This is a simple process handled entirely in Portuguese via live chat or email.
- Access: request a copy of your data — response time: 15 business days;
- Correction: correction of incorrect data — deadline: immediate for account data, up to 5 business days for other data;
- Deletion: deletion of data processed under consent — deadline: up to 15 business days;
- Portability: export of your data in a structured format — deadline: up to 15 business days;
- Consent withdrawal: marketing and optional cookie opt-out — effective immediately for communications, within 48 hours for cookies.
Email for exercising LGPD rights: suporte@77ss.best. Subject: "LGPD Rights — [your name]". Also available via 24/7 live chat on the 77ss platform.
12. Changes to This Privacy Policy
A 77ss may update this Privacy Policy periodically to reflect changes in our services, Brazilian legislation, or industry best practices. When material changes are made, you will be notified by email and through a prominent notice on the platform at least 7 calendar days in advance.
The most current version of this policy will always be available at 77ss.best/privacy-policy, with the last updated date shown at the top of the document. Continued use of the platform after new terms take effect constitutes acceptance of those changes.
For changes that require new consent — such as the addition of new consent-based processing purposes — the 77ss will explicitly ask you to confirm your agreement before any new processing begins.
13. Contact, DPO & Reporting Channel
For questions related to this Privacy Policy, the processing of your personal data, or to exercise your rights as a data subject, please contact 77ss through the following channels:
- General support email: suporte@77ss.best (24/7 support);
- DPO (Data Protection Officer) email: privacidade@77ss.best;
- Live chat: available directly on the 77ss platform, 24 hours a day, 7 days a week;
- Reporting channel: denuncia@77ss.best — to report suspected privacy violations or misuse of personal data.
If you believe that the processing of your data by 77ss violates the LGPD and you have not received a satisfactory response through our contact channels, you have the right to file a complaint with the National Data Protection Authority (ANPD) via the gov.br portal.
Privacy questions
Frequently Asked Questions — Privacy at 77ss
No. 77ss never sells, rents, or shares your personal data with third parties for commercial purposes. Your data may only be shared with partners who need it to process your payments (such as Pix and card gateways), verify your identity (KYC), or provide casino games — and always under strict contractual agreements that prohibit any other use.
You can unsubscribe from 77ss marketing emails in three ways: by clicking the "Unsubscribe" link in the footer of any promotional email you receive; by accessing your 77ss account settings and adjusting your communication preferences; or by emailing suporte@77ss.best with the subject line "Cancel marketing". Unsubscribe requests are processed within 48 hours.
After your 77ss account is closed, your personal data is retained for the mandatory legal periods — primarily 5 years for financial and identification data, as required by tax and anti-money laundering legislation. Once the applicable legal retention period expires, your data is securely deleted or irreversibly anonymized. Data processed solely on the basis of your consent (such as marketing) is deleted immediately upon account closure.
Yes, and transparently. 77ss analyzes your betting patterns for three main purposes: to personalize your platform experience (such as suggesting sports markets relevant to you); to identify signs of problem gambling as part of our responsible gambling practices; and to detect suspicious or fraudulent activity. These analyses are carried out on the basis of our legitimate interest and compliance with legal obligations. You can request detailed information about how your behavioral data is processed by emailing suporte@77ss.best.
Payment data at 77ss is protected by multiple layers of security. For Pix transactions, we use the certified APIs of the Banco Central do Brasil. For credit and debit cards, we apply tokenization — meaning we never store your full card number, only an encrypted token generated by the payment gateway. All transactions are subject to real-time anti-fraud monitoring. Communication between your device and our servers is always encrypted with 256-bit SSL.
Yes. You have the right to request a complete copy of all your personal data held by 77ss. To do so, send an email to suporte@77ss.best with the subject line "Data Access Request — [your name]". We will verify your identity before processing the request and will respond with a detailed report within 15 business days, in accordance with the LGPD. The report will include what data we hold, the purposes for which we use it, and any partners with whom it may have been shared.