Privacy Policy of 888fff – Your Data, Protected

1Data Controller

The data controller responsible for processing personal data collected through the platform 888fff, available at 888fff.best, is the operator of 888fff itself — a duly registered legal entity operating in compliance with applicable Brazilian legislation governing the digital entertainment and gaming sector.

For the purposes of the LGPD (Law No. 13,709/2018), the controller is the entity that makes decisions about the processing of personal data — what to collect, how to use it, how long to retain it, and with whom to share it. 888fff fulfills this role with transparency and accountability toward all users registered in Brazil.

The direct channel for exercising your rights as a data subject or for any questions about this Policy is contato@888fff.best, the official 888fff privacy channel. Responses are provided within up to 15 business days.

2Data We Collect

A 888fff collects only the data necessary to operate the platform, ensure user security, and fulfill applicable legal obligations. Below are the categories of data collected and the circumstances of each collection:

888fff does not collect data in sensitive categories — such as racial origin, political opinions, religious beliefs, or health data — except where strictly required by a specific legal obligation and always with the data subject's knowledge.

3How We Use Your Data

The data collected by 888fff are used exclusively for the purposes described below. No data is used in a manner inconsistent with the purpose stated at the time of collection:

• Account management: creation and management of your 888fff profile, access authentication, and personalization of your platform experience;
• Transaction processing: recording and processing of deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as withdrawals via Pix to the account holder's bank account;
• Identity verification (KYC): compliance with anti-money laundering and counter-terrorism financing obligations under Law No. 9,613/1998 and COAF regulations;
• Security and fraud prevention: detection of suspicious behavior patterns, multi-account verification, analysis of unusual transactions, and protection against unauthorized access;
• Customer support: answer questions, resolve technical issues, handle complaints, and provide assistance related to the use of 888fff;
• Legal compliance: fulfill tax obligations, respond to judicial or regulatory authority requests, and maintain records required by law;
• Marketing communications: sending offers, promotions, and 888fff news by email or notifications, exclusively with the user's express consent — you can opt out at any time.

888fff does not use your data for automated decision-making that produces significant legal effects without human oversight, except in cases of clear fraud where automated action is necessary to protect platform security and other users.

4Legal Bases for Processing

Every data processing operation carried out by 888fff is grounded in at least one of the legal bases set out in article 7 of the LGPD. The applicable basis varies according to the purpose of the processing:

• Contract performance (art. 7, V): primary legal basis for data required to operate the account and process transactions. Without this data, the 888fff service cannot be provided;
• Compliance with a legal obligation (art. 7, II): applied to KYC, anti-money laundering data, tax records, and responses to requests from judicial or administrative authorities;
• Legitimate interest (art. 7, IX): the basis used for security analysis, fraud prevention, platform improvement, and aggregate usage pattern analysis — always respecting the rights and expectations of 888fff users;
• Consent (art. 7, I): the basis used for marketing communications and for any data processing that does not fall under the previous bases. Consent is always freely given, informed, and revocable at any time.

When processing is based on consent, you may withdraw your authorization at any time without affecting your access to other 888fff services that rely on different legal bases. Withdrawal does not affect processing already carried out under previously given consent.

5Data Sharing

A 888fff does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Sharing occurs only in the situations described below, always with the minimum data necessary for each specific purpose:

• Payment processors: the required financial data is shared with Pix, boleto bancário, credit/debit card processors, PicPay, Mercado Pago, and banking institutions (Nubank, Itaú, Bradesco, Banco do Brasil, and others) to process transactions. Each payment processor has its own privacy policies and security obligations;
• Game providers: some slots and Live Casino providers receive minimal session data to operate the game correctly (session identifier, bet amount). No personally identifiable data such as CPF or identity documents is shared with game providers;
• Infrastructure providers: hosting services, servers, and CDN providers that process data on behalf of 888fff as data processors, subject to data processing agreements and confidentiality obligations;
• Competent authorities: data may be disclosed when required by law, court order, or request from the Ministério Público, COAF, or any competent public authority in Brazil. In such cases, 888fff discloses only the minimum necessary and, where legally permitted, notifies the data subject;
• Auditors and consultants: external audit, accounting, or legal advisory professionals may access anonymized data or data in a format that does not allow individual 888fff users to be identified.

6Cookies and Tracking Technologies

A 888fff uses cookies and similar technologies to enhance the user experience, ensure the platform runs correctly, and analyze usage patterns in aggregate. Here are the types of cookies we use:

• Essential cookies: required for the platform's basic functionality — maintaining the logged-in session, securing the betting form, and processing transactions. These cannot be disabled without affecting your use of 888fff;
• Performance cookies: collect anonymous data on how users browse 888fff — most visited pages, session duration, errors encountered. Used to improve the platform. Individual users are not identified;
• Functionality cookies: remember user preferences such as selected language, configured betting limits, and preferred layout on 888fff;
• Marketing cookies: used only with your express consent to personalize communications and measure the effectiveness of 888fff campaigns. You can disable them at any time in the platform's cookie settings.

You can manage your cookie preferences at any time through the 888fff settings panel or your browser settings. Disabling non-essential cookies will not affect your access to the platform's core features.

7Data Security

A 888fff adopts technical and organizational measures in line with financial and digital entertainment industry standards to protect users' personal data against unauthorized access, alteration, improper disclosure, or destruction.

The main safeguards implemented by 888fff include:

• 256-bit SSL/TLS encryption: all communications between the user's device and 888fff servers are encrypted, including login, betting, deposits, and withdrawals;
• Financial data tokenization: credit/debit card data is not stored on 888fff servers — it is tokenized by PCI-DSS certified payment processors;
• Internal access control: only employees with a justified operational need are granted access to users' personal data, with access logs maintained and regular audits conducted;
• Continuous monitoring: automated intrusion detection and anomalous behavior monitoring systems run on the platform 24 hours a day;
• Encrypted backups: data backups are stored in separate, encrypted environments with restricted access;
• Regular security testing: 888fff conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

In the event of a security incident that compromises users' personal data, 888fff will notify the National Data Protection Authority (ANPD) and the affected data subjects within the timeframe established by the LGPD, including details about the nature of the incident, the data affected, and the corrective measures taken.

8Data Retention

A 888fff retains users' personal data for as long as necessary for the purposes that justified its collection, observing the minimum retention periods required by legal obligations:

• Registration and active account data: retained for the full duration of the platform use agreement (while the account remains active);
• Financial transaction data: minimum of 5 years from the transaction date, as required by tax regulations and anti-money laundering law (Lei nº 9.613/1998);
• KYC data (identity documents): minimum of 5 years after account closure, in accordance with compliance obligations and COAF regulations;
• Betting history: minimum of 5 years for audit purposes and compliance with legal obligations;
• Support records and communications: 2 years after the last contact, for quality assurance and dispute resolution purposes;
• Marketing data (consent-based): deleted upon the data subject's request or after 2 years of inactivity, whichever comes first;
• Cookies and session data: as described in the Cookies section — session cookies expire when the browser is closed; persistent cookies last up to 12 months.

After account closure at 888fff, data that does not need to be retained for legal compliance purposes is anonymized or securely deleted within up to 30 calendar days from the closure request.

9Your Rights as a Data Subject (LGPD)

The LGPD guarantees you, as the data subject whose information is processed by 888fff, a set of rights that can be exercised at any time through the platform's privacy channel:

10International Data Transfer

Some of the game providers partnered with 888fff — such as Pragmatic Play, NetEnt, Play'n GO, and others — have servers located outside Brazil. In these cases, minimal session data required to operate the games may be subject to international data transfer.

888fff ensures that all international transfers of personal data comply with art. 33 of the LGPD, adopting the following safeguards:

• Transfer to countries that offer an adequate level of data protection as assessed by the ANPD;
• Standard contractual clauses requiring data recipients to uphold protection obligations equivalent to those under the LGPD;
• Data minimization: only the information strictly necessary to operate the game is transferred — never identity documents, CPF, or full banking details.

To find out which providers receive your data and the countries in which they operate, contact the 888fff privacy channel at contato@888fff.best.

11Users Under 18

A 888fff is a platform exclusively for adults. Access and registration are strictly prohibited for users under 18, as required by Brazilian law applicable to digital entertainment and gaming.

888fff performs age verification during the registration process — the CPF provided is checked against databases to confirm the user is of legal age. Accounts identified as belonging to users under 18 are immediately closed, withdrawals are blocked, and deposits are returned to the original payment method following review.

888fff does not intentionally collect personal data from users under 18. If it is determined that a minor's data was inadvertently collected, that information will be immediately deleted and the account closed, with the legal guardian notified where possible.

12Changes to This Policy

A 888fff may update this Privacy Policy periodically to reflect changes in its data processing practices, Brazilian legislation (especially the LGPD and its regulations by the ANPD), or the platform's business model.

Material changes — those that expand the scope of data processing or reduce data subjects' rights — will be communicated at least 7 calendar days in advance via the registered email address and a prominent notice on the 888fff platform. Editorial adjustments or contact information updates may be implemented without prior notice.

By continuing to use 888fff after a new version of this Policy is published, you accept the updated terms. If you do not agree with the changes, you must close your account and request data deletion before the new terms take effect.

The current version of this Policy is always the most recent one available at 888fff.best/privacy-policy, identified by the "Last updated" date shown at the top of the document.

13Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, ask questions about this Policy, or report any issue related to the processing of personal data by 888fff, use the channels below:

• Privacy email: contato@888fff.best — use the subject line "LGPD Request" to identify your message as a formal data subject rights request;
• Live chat: available 24 hours a day directly on the 888fff platform for general privacy inquiries;
• Response time: up to 15 business days for formal rights requests; up to 2 business days for general email inquiries; under 3 minutes via live chat.

888fff appoints a Data Protection Officer (DPO) as required by the LGPD for large-scale data processing operations. The DPO is the official communication channel with the National Data Protection Authority (ANPD) and can be reached at the privacy email address indicated above.