Privacy Policy of 67ff – Your Data, Protected

1. Personal Data Controller

The controller responsible for processing the personal data collected on the platform 67ff is the company that operates the 67ff.best domain. For any questions regarding data processing, the contact channel is the email suporte@67ff.best, with the subject line "LGPD Request".

The Data Protection Officer (DPO) can be reached at the same email address. 67ff has appointed a DPO responsible for overseeing privacy practices and serving as the point of contact for data subject requests and for the National Data Protection Authority (ANPD).

2. Data We Collect

The 67ff collects only the data necessary to provide its services, meet legal obligations, and ensure platform security. Below are the types of data collected and where each comes from:

The 67ff does not collect sensitive data categories — such as racial origin, religious belief, genetic, biometric, or health data — except where strictly required to fulfill a legal obligation and with the data subject's explicit consent.

3. Purpose of Data Use

Every piece of data collected by 67ff has a specific, legitimate purpose. We do not process data in a generic or speculative manner — each category serves a defined purpose:

• Registration and authentication: create and maintain your account, verify your identity at login, and protect against unauthorized access.
• Transaction processing: process deposits via Pix, credit card, boleto bancário, PicPay, Mercado Pago, and TED, as well as withdrawals to a bank account linked to your CPF.
• Eligibility verification (KYC): to confirm that the user is at least 18 years old and that the information provided is accurate, as required by regulation.
• Fraud and money laundering prevention: monitor unusual behavioral patterns, detect promotional abuse, and fulfill mandatory reporting obligations to the relevant authorities when required by law.
• Experience personalization: display relevant promotions based on your usage history, recommend games that match your profile, and adjust the interface according to your preferences.
• Communication: send notifications about bets, withdrawals, active promotions, security updates, and important platform announcements via email or push notification.
• Responsible gambling: identify behavioral patterns that may indicate problem gambling and trigger the protective tools available on the platform.
• Legal compliance: maintain records required by law for the period set by applicable Brazilian legislation.

4. Legal Basis for Processing

All data processing on the 67ff is grounded in one of the legal bases established by the LGPD (Lei nº 13.709/2018). The applicable legal basis varies depending on the purpose of the processing:

• Contract performance (Art. 7, V of the LGPD): processing required for 67ff to deliver the contracted service — registration, betting, financial transactions, and support.
• Compliance with a legal obligation (Art. 7, II of the LGPD): identity verification (KYC), financial transaction records, and disclosures to authorities when required by law.
• Legitimate interest (Art. 7, IX of the LGPD): fraud prevention, platform security, improving the user experience, and service communications — provided these interests do not override the data subject's rights.
• Consent (Art. 7, I of the LGPD): for sending optional promotional communications and for the use of non-essential cookies. Consent can be withdrawn at any time.

5. Third-Party Sharing

The 67ff does not sell or share users' personal data with third parties for commercial purposes. Data sharing occurs only in the cases listed below, with vendors acting as data processors under the platform's instructions:

• Payment processors: to process deposits and withdrawals via Pix and other available methods. These partners receive only the data strictly necessary to complete the transaction.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, and other providers receive only the minimum data needed to identify the user within the gaming environment (typically an anonymous ID generated by the platform).
• Identity verification services: specialized KYC and fraud prevention companies that assist in verifying documents submitted by users.
• IT Infrastructure: hosting, cloud storage, and CDN providers that keep the platform running, all bound by confidentiality and data protection agreements.
• Competent authorities: when required by court order, regulatory ruling, or legal obligation under Brazilian law — such as COAF (Financial Activities Control Council) in cases of suspected money laundering.

6. Data Security

The 67ff implements robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption: all communications between the user's device and the platform's servers are encrypted using the same standard adopted by Brazilian digital banks such as Nubank and Itaú.
• Encryption of data at rest: sensitive information stored in 67ff's databases is kept in encrypted form — not only during transmission.
• Two-factor authentication (2FA): available to all users as an extra layer of account access protection.
• Internal access controls: only staff with a legitimate business need can access users' personal data, with full audit logs of every access.
• Continuous monitoring: automated systems detect and flag unusual access patterns, intrusion attempts, and suspicious behavior in real time.
• Periodic security testing: the platform undergoes regular security assessments, including penetration testing (pentest) conducted by specialized external teams.

In the event of a security incident that may affect users' personal data, the 67ff will notify the affected individuals and the ANPD within the timeframe set out by the LGPD, with details on the nature of the incident, the data involved, and the mitigation measures taken.

7. Data Retention and Deletion

The 67ff retains personal data only for as long as necessary for the purposes that justified its collection, in compliance with the minimum retention periods required by Brazilian law:

• Registration data and active account: retained while the account remains active. After account closure, essential data is kept for up to 5 years to meet legal obligations and resolve any potential disputes.
• Financial transaction records: retained for a minimum of 5 years in accordance with Brazilian anti-money laundering legislation and financial regulations.
• KYC Documents: retained for up to 5 years after account closure or for the period required by regulatory authorities.
• Betting and game history: retained for up to 2 years after account closure for dispute resolution purposes.
• Support communication records: retained for up to 2 years from the close of each support interaction.

Once the applicable retention period expires, data is permanently deleted or irreversibly anonymized. Anonymization ensures the data can no longer be linked to a specific individual — anonymized data is no longer considered personal data under the LGPD.

8. Your Rights as a Data Subject

The LGPD grants personal data subjects a set of rights that 67ff is committed to upholding and facilitating. Here is what you can request at any time:

9. Cookies and Tracking Technologies

The 67ff uses cookies and similar technologies to enhance the user experience, ensure the platform functions correctly, and — with your consent — personalize content. See the types of cookies used:

• Essential cookies (highlighted in pink): required for the platform's basic operation — authentication, security, and session preferences. They cannot be disabled without compromising the service.
• Analytics cookies: collect anonymous information about how users browse the platform (pages visited, session duration, clicks). Used to improve the overall experience. Can be disabled without affecting functionality.
• Personalization cookies: used to remember your preferences and display relevant promotions and games based on your history. They require your consent and can be disabled in your account or browser settings.

You can manage your cookie preferences at any time in your browser settings or in the "Privacy" section of your account settings on 67ff. Disabling non-essential cookies does not prevent you from using the platform, but may reduce the personalization of your experience.

10. Minors

The platform 67ff is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. Registration on the platform requires confirmation that the user has reached the legal age of majority in Brazil.

If we determine that data from a user under 18 was inadvertently collected, that data will be deleted immediately and the corresponding account will be closed. Parents or legal guardians who suspect that a minor has used the platform should contact 67ff support at suporte@67ff.best right away.

11. International Data Transfers

Part of the technical infrastructure of the 67ff — such as hosting servers and some game providers — may be located outside Brazil. When users' personal data is transferred to other countries, 67ff ensures that such transfers take place with appropriate safeguards, including:

• Contracts with specific data protection clauses aligned with the LGPD and leading international standards (such as the European GDPR).
• Transfers only to countries or organizations with a level of data protection recognized as adequate by the ANPD, where applicable.
• Assurance that data transferred is limited to the minimum necessary for the specific purpose that prompted the transfer.

The international game providers operating on the platform 67ff — such as Evolution Gaming, Pragmatic Play, and Spribe — hold international security and data protection certifications that exceed the LGPD's minimum requirements.

12. Changes to This Policy

The 67ff may update this Privacy Policy periodically to reflect changes in data processing practices, new legal requirements, or platform improvements. Any significant change will be communicated by email to registered users at least 7 days in advance.

The date of the most recent update is always shown at the top of this document. Continued use of the platform after any changes take effect constitutes acceptance of the updated practices described. If you do not agree with any update, you may request account closure before the effective date by contacting support.

13. Contact, DPO & Complaints

For any questions, requests related to your personal data, or complaints about the privacy practices of the 67ff, use the channels below:

• DPO email: suporte@67ff.best — subject line "LGPD Request" — response time: up to 15 business days.
• Live chat: available 24 hours a day directly on the platform — for general questions about privacy and data protection.

If you believe your rights under the LGPD have not been properly addressed by 67ff, you have the right to file a complaint with the National Data Protection Authority (ANPD) through the official ANPD website in Brazil.