888azul Privacy Policy – Your Data Protected

1. Data Controller

The controller of the personal data processed under this Privacy Policy is 888azul, a Sports Betting and online casino platform operating in Brazil and accessible at https://888azul.com. For all privacy and data protection inquiries, please contact us at privacidade@888azul.com.

This Privacy Policy applies to all registered users of 888azul, visitors to the website, and anyone whose personal data is processed in connection with the services offered by the platform. By creating an account on 888azul or using any of the platform's services, you confirm that you have read and understood this policy.

2. What Personal Data We Collect

888azul collects only the data necessary to deliver its services safely and with quality. The data collected falls into the following categories:

2.1 Registration Data

• Full name and CPF (Individual Taxpayer Registry number);
• Date of birth and full residential address;
• Email address and mobile number;
• Identity documents submitted for verification (national ID, driver's license, passport);
• Proof of address for address verification.

2.2 Financial Data

• Pix key used for deposits and withdrawals;
• Credit or debit card details (stored in tokenized form by the payment processor);
• History of deposits and withdrawals on the platform;
• Originating bank for TED transfers (Nubank, Itaú, Bradesco, Banco do Brasil, and others).

2.3 Platform Usage Data

• Full Sports Betting and casino game history;
• IP address, device type, operating system, and browser;
• Session data, including access time and duration;
• Game preferences and account settings.

2.4 Communication Data

• Records of interactions with customer support via chat, email, or phone;
• Communication preferences (which notifications you agree to receive).

3. Purpose of Data Processing

888azul processes your personal data solely for the following purposes:

• Identity verification (KYC): confirm that you are who you claim to be and that you are at least 18 years old, as required by law;
• Fraud prevention and anti-money laundering: identify suspicious activity and fulfill the sector's regulatory obligations;
• Transaction processing: process deposits via Pix, boleto, card, PicPay, Mercado Pago, and TED, and handle withdrawals securely;
• Service provision: enable access to Sports Betting, live casino games, slots, and all other platform features;
• Customer support: address your questions and requests in a personalized and efficient manner;
• Service communications: send bet confirmations, withdrawal notifications, and account security alerts;
• Marketing communications: send promotions, bonuses, and personalized offers — only with your consent and with the option to unsubscribe at any time;
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and offer proactive support;
• Platform improvement: analyze aggregated usage data to improve features and the overall player experience.

4. Legal Basis for Processing

Every data processing activity carried out by 888azul is grounded in one of the legal bases set out under the LGPD:

5. Sharing Data with Third Parties

888azul shares personal data only when strictly necessary to deliver its services or to meet legal obligations. The categories of third parties that may receive data are:

• Payment processors: companies that process transactions via Pix, boleto bancário, credit and debit cards, PicPay, Mercado Pago, and TED bank transfers. They receive only the financial data required to process each transaction;
• Game providers: live casino, slots, and other game providers that require minimal session data to function properly on the 888azul platform;
• Identity verification companies: KYC service providers that assist in verifying documents submitted by users;
• Regulatory and judicial authorities: Brazilian government authorities when required by law, court order, or directive from a competent authority;
• Infrastructure providers: hosting and cloud computing providers that store data under contracts with strict data protection clauses.

All third parties that receive data from 888azul are contractually required to handle that information with the same level of protection demanded by the LGPD and this policy. 888azul does not sell, rent, exchange, or transfer personal data to third parties for commercial purposes.

6. Data Retention

888azul retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods established under Brazilian law:

• Registration and verification data: retained for as long as the account remains active and for up to 5 years after closure, in accordance with compliance and industry regulatory requirements;
• Financial and transactional data: retained for a minimum of 5 years to meet tax and regulatory obligations under Brazilian law;
• Betting history: retained for 5 years from the date of each bet, and may be requested by the player during that period;
• Support communication data: retained for 2 years for quality assurance and dispute resolution purposes;
• Marketing data: retained for as long as your consent remains active. Upon withdrawal of consent, marketing preference data is deleted within 30 days.

Once mandatory retention periods have expired, data is securely deleted or irreversibly anonymized.

7. Data Security

888azul applies technical and organizational measures proportionate to the risk to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main measures in place include:

• 256-bit SSL/TLS encryption across all data transmissions;
• Encrypted password storage using bcrypt hashing — 888azul never stores passwords in plain text;
• Two-factor authentication (2FA) available and strongly recommended for all users;
• Strict internal access controls — 888azul employees access personal data only when strictly required by their role;
• Continuous monitoring of unauthorized access attempts and automated intrusion detection systems;
• Periodic penetration testing and security audits conducted by independent specialized firms.

8. Cookies and Similar Technologies

888azul uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. The types of cookies used are:

8.1 Essential Cookies

Required for the platform to function. These include the session cookie that keeps you logged in while browsing. They cannot be disabled without affecting how the platform works.

8.2 Preference Cookies

They store your preferences, such as language, preferred payment method, and bet limit settings. They are removed when you clear your browser data.

8.3 Analytics Cookies

They collect usage data in aggregated, anonymized form to help 888azul understand how players use the platform and where improvements can be made. They do not identify you individually.

You can manage preference and analytics cookies in your browser settings. Browsers like Chrome, Firefox, and Safari let you block, delete, or control cookies on a per-site basis.

9. Minors' Data

The 888azul platform is intended exclusively for users aged 18 and over. 888azul does not intentionally collect personal data from minors. If we identify that a user under 18 has created an account, the account will be immediately closed and all associated data will be deleted from our systems within 30 days, except for data we are required to retain by law.

If you suspect that someone under 18 is using the 888azul platform, please contact us immediately at contato@888azul.com so we can investigate and take swift action.

10. International Data Transfers

Some of the technology and infrastructure providers used by 888azul process data on servers located outside Brazil. When this occurs, 888azul ensures that the international transfer is carried out in compliance with the LGPD, through one of the following safeguards:

• Transfer to countries that provide an adequate level of data protection, as recognized by the National Data Protection Authority (ANPD);
• Inclusion of standard data protection contractual clauses approved by the ANPD in agreements with service providers;
• Binding Corporate Rules where applicable to corporate groups.

11. How to Exercise Your Rights

To exercise any of your rights as a data subject under the LGPD, send an email to privacidade@888azul.com with:

1. Your full name and CPF registered with 888azul;
2. The type of request (access, correction, deletion, portability, withdrawal of consent, etc.);
3. A brief description of what you need, when necessary for clarity.

The response deadline is up to 15 business days from receipt of the complete request. In more complex cases, this deadline may be extended by an additional 15 days, with prior notice to the requester. There is no cost to exercise your rights.

If your request is denied, 888azul will clearly explain the reasons. If you disagree with the response, you have the right to file a complaint directly with the National Data Protection Authority (ANPD) through the gov.br/anpd portal.

12. Security Incidents

888azul maintains an up-to-date security incident response plan that is tested on a regular basis. In the event of an incident that could pose a significant risk or harm to data subjects, 888azul commits to:

• Notify the National Data Protection Authority (ANPD) within the deadline of 72 hours from the moment the incident is identified;
• Notify the affected data subjects within a reasonable timeframe, with information about the nature of the incident, the data involved, and the measures taken;
• Take immediate action to contain the incident and prevent further harm;
• Conduct a full investigation and implement improvements to prevent recurrence.

13. Policy Updates

888azul may update this Privacy Policy periodically to reflect changes in legislation, services offered, or data processing practices. Significant updates will be communicated by email to the registered address at least 7 days before the effective date.

The most recent version of this policy will always be available on this page, with the update date shown at the top. Continued use of the platform after a new version takes effect constitutes acceptance of the changes made.

14. Contact the Data Protection Officer (DPO)

888azul has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and handling data subject requests. The DPO can be contacted exclusively through the privacy channel:

• Email: privacidade@888azul.com
• Subject: [DPO] followed by your request
• Support hours: Monday to Friday, 9 AM to 6 PM (Brasília time)

For general support questions unrelated to data privacy, use the live chat or email contato@888azul.com, available 24 hours a day, 7 days a week, in Brazilian Portuguese.