Data Protection

Privacy Policy of a777 – LGPD and Your Data

A777 handles your personal data responsibly, transparently, and in full compliance with the General Data Protection Law (LGPD — Law No. 13,709/2018). Here you will find everything about how we collect, use, and protect your information.

Last updated: January 1, 2026 LGPD Compliant 256-bit SSL

What this document covers

  • What personal data a777 collects
  • How and why your data is used
  • Who your data may be shared with
  • How your data is protected
  • Your Rights as a Data Subject
  • Cookies and tracking technologies

How a777 Protects Your Data

Six pillars supporting personal data protection on the a777 platform

256-bit SSL encryption

All communication between your phone or browser and a777's servers is encrypted with 256-bit TLS/SSL — the same standard used by Brazil's largest banks. Your data is never transmitted in the open.

Full LGPD Compliance

A777 operates in compliance with the General Data Protection Law (Law No. 13.709/2018). We collect only the data strictly necessary for each stated purpose, with a defined legal basis.

Data Never Sold

A777 does not sell, rent, or transfer your personal data to third parties for marketing purposes. Data sharing occurs only with strictly necessary operational partners and under confidentiality agreements.

Secure Payments in BRL

Credit card data is not stored directly by a777 — we use secure tokens provided by the payment processors. All payments are in BRL via Pix, boleto, card, PicPay, or Mercado Pago.

Your Guaranteed Rights

You have the right to access, correct, port, and request the deletion of your data at any time, as provided under the LGPD. The process is straightforward and can be initiated through Portuguese-language support.

DPO and 24/7 Support

A777 has a Data Protection Officer (DPO) responsible for ensuring LGPD compliance. Support is available in Portuguese 24 hours a day for requests related to personal data.

This Privacy Policy describes how a777 collects, uses, stores, protects, and shares the personal data of users who access and use the platform available at a777-khelo.com. By registering and using a777's services — Sports Betting, live casino, slots, crash games, and other products — you confirm that you have read and understood this policy. Questions can be directed to our Portuguese-language support at any time.

1. Introduction and Data Controller

A a777 is the data controller for personal data collected through the a777-khelo.com platform. As data controller, a777 determines the purposes and means of processing users' personal data, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and other applicable Brazilian regulations.

This policy applies to all registered a777 users residing in Brazil, as well as visitors to the platform who have not yet created an account. By browsing a777, you agree to the practices described in this document.

A777 has appointed a Data Protection Officer (DPO) as required by the LGPD. To reach the DPO directly, use the email address privacidade@a777-khelo.com or access Portuguese-language support via live chat.


2. Personal Data We Collect

A a777 collects different categories of personal data depending on how you use the platform. Below are the types of data collected and their respective sources:

2.1 Data provided directly by you

  • Registration: full name, date of birth, CPF, full residential address (including zip code), mobile number, and email address;
  • Identity verification (KYC): copy of a government-issued ID (RG, CNH, or passport), proof of current address, and, when requested, a selfie with the document;
  • Payments: registered Pix key data, bank account details for TED transfers, and credit/debit card tokens provided by the payment processors (a777 does not store the full card number);
  • Communications: messages sent via live chat, support emails, and any communication initiated by the user with a777.

2.2 Automatically collected data

  • Browsing data: IP address, browser type and version, operating system, device used, pages visited, session duration, and clicks;
  • Location data: approximate location derived from IP address (state/city), with no precise GPS location collected unless express consent is given;
  • Betting data: betting history, amounts, markets selected, results, and financial transactions;
  • Cookies and similar technologies: session identifiers, platform preferences, and analytics data (detailed in Section 10).
Data Category Examples Required?
Identification Full name, CPF, date of birth Yes
Contact Email, mobile number, address Yes
Documents (KYC) National ID, driver's license, proof of address For withdrawals
Financial Pix key, payment data Yes
Navigation IP, device, pages visited Automatic
Sports Betting History, markets, amounts Automatic

3. How We Use Your Personal Data

A a777 uses collected personal data solely for the purposes described below. We do not use your data for any purpose not listed here without your prior consent.

  • Account creation and management: verify your identity, process your registration, maintain platform access, and personalize your experience;
  • Transaction processing: receive deposits via Pix, boleto, card, PicPay, and Mercado Pago, process withdrawals to your bank account or Pix key, and maintain your financial history;
  • Identity verification (KYC): verify your identity, meet regulatory requirements, and prevent fraud and money laundering;
  • Regulatory compliance: comply with legal obligations, respond to requests from competent authorities, and maintain records required by law;
  • Platform security: detect and prevent fraud, unauthorized access, bot usage, and bonus abuse;
  • Customer support: answer your questions and resolve account, payment, or betting issues through our Portuguese-language support;
  • Service communications: send notifications about your account, transactions, processed withdrawals, and important platform updates;
  • Marketing (with consent): send promotions, bonus offers, and a777 news only when you have given your express consent.

You can withdraw your consent to marketing communications at any time, directly in your account preferences or by contacting a777 support.


4. Legal Basis for Processing (LGPD)

A a777 processes your personal data based on the following legal grounds established by the LGPD:

  • Contract performance (Art. 7, V): processing necessary for the performance of the platform's terms of use, including bet processing, Pix deposits, and withdrawals;
  • Compliance with a legal obligation (Art. 7, II): identity verification, anti-money laundering compliance, and responding to requests from regulatory authorities;
  • Legitimate interest (Art. 7, IX): platform security, fraud detection, product improvement, and personalization of the user experience;
  • Consent (Art. 7, I): sending marketing communications, using non-essential cookies, and collecting precise location data when authorized.

The legal basis applicable to each processing activity is detailed in the Record of Processing Activities maintained by a777 and available upon request to the DPO.


5. Data Sharing with Third Parties

A a777 does not sell or rent your personal data. Sharing occurs only in the situations described below, with partners who are contractually bound to confidentiality and LGPD compliance:

5.1 Operational Partners

  • Payment processors: companies responsible for processing Pix, boleto bancário, credit and debit cards (Visa, Mastercard, Elo), PicPay, and Mercado Pago. They receive only the data strictly necessary to process the transaction;
  • KYC providers: specialized identity verification companies that process documents and validate registration data in accordance with Brazilian law;
  • Technology infrastructure providers: cloud servers and security services that host and protect the a777 platform;
  • Game providers: slots, Live Casino, and crash game providers, which receive only the anonymized identifiers required for the games to function.

5.2 Authorities and Legal Obligations

A777 may share personal data with government authorities, regulatory bodies, or judicial entities when required by law, court order, or to fulfill regulatory obligations. This includes, for example, requests from the Financial Activities Control Council (COAF) related to anti-money laundering efforts.

A777 will never share your data with third parties for marketing purposes without your explicit prior consent. If you receive unsolicited communications claiming to be from a777, contact our support immediately.


6. International Data Transfer

Some of the technology partners of a777 — such as cloud infrastructure providers and game suppliers — may have servers located outside Brazil. When this occurs, a777 ensures that such transfers are carried out in compliance with Art. 33 of the LGPD, through:

  • Standard contractual clauses requiring a level of protection equivalent to that of the LGPD;
  • Prior assessment of the destination country's level of data protection adequacy;
  • Specific technical and organizational security guarantees from the partners involved.

A777 prioritizes partners with servers in Brazil or in countries with recognized adequate data protection regulations. In all cases, the level of protection applied to your information remains the same, regardless of where the data is processed.


7. Data Retention and Deletion

A a777 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with mandatory legal retention periods. The criteria used to determine retention periods include:

  • Active account data: retained for as long as the account remains active, or until the user requests deletion;
  • Financial and betting data: retained for a minimum of 5 (five) years after account closure, in accordance with tax legislation and anti-money laundering requirements;
  • KYC documents: retained for the period required by applicable regulations, generally 5 years after the end of the relationship;
  • Support communication data: retained for up to 2 years for historical records and dispute resolution purposes;
  • Non-essential cookie data: retained for the period defined in each cookie, generally between 30 days and 12 months.

Once the applicable retention period expires, data is securely deleted or anonymized for statistical purposes, making it impossible to identify the data subject.


8. Data Security

A a777 implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

TLS/SSL encryption

All connections between users and the platform use TLS 1.2 or higher with 256-bit SSL certificates, preventing data from being intercepted in transit.

Password Hashing

Passwords are stored using modern salted hashing algorithms — never in plain text. Not even a777 staff can access your password.

Payment Tokenization

Credit and debit card details are not stored by a777. We use secure tokens provided by payment processors, eliminating the risk of card data exposure.

Continuous Monitoring

Automated systems monitor suspicious access attempts, attacks, and security anomalies in real time, with an immediate response in the event of an incident.

In the event of a security incident that may compromise your personal data, the a777 will notify affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD — within 2 business days of the incident being identified.


9. Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights regarding the processing carried out by the a777. These rights can be exercised at any time through support or via the DPO email:

Right of Access

Know what personal data a777 holds about you and how it is used.

Right to Correction

Request the correction of incomplete, inaccurate, or outdated information in your account.

Right to Deletion

Request the deletion of unnecessary data or data processed without a valid legal basis.

Right to Data Portability

Receive your data in a structured format for transfer to another service or provider.

Right to Object

Object to processing carried out on the basis of legitimate interest when you disagree with it.

Right to Information

Be informed about who your data is shared with and why.

To exercise any of these rights, contact us via a777's live chat or by email at privacidade@a777-khelo.com. a777 will respond to your request within 15 business days, as required by the LGPD. In more complex cases, this deadline may be extended by an equal period, with notice to the data subject.

You also have the right to lodge a complaint with the National Data Protection Authority (ANPD) if you believe your rights as a data subject have not been adequately addressed by a777.


10. Cookies and Tracking Technologies

A a777 uses cookies and similar technologies to improve your platform experience, ensure session security, and — with your consent — personalize content and analyze browsing behavior.

You can manage your cookie preferences at any time through the platform settings or your account's privacy dashboard. Rejecting non-essential cookies does not prevent you from using a777's core features.


11. Minors

The platform a777 is intended exclusively for users aged 18 and over. a777 does not knowingly collect personal data from anyone under 18 and will reject any registration attempt from individuals who do not meet this minimum age requirement.

If a777 determines that personal data was collected from a user under 18 without parental or guardian consent, that data will be immediately deleted and the account closed. If you suspect that a minor has created an account on a777, please contact support so we can take the appropriate action.

Betting and casino games are prohibited for individuals under 18 in Brazil. a777 employs active age and document verification as part of the KYC process. Accounts identified as belonging to minors are closed immediately.


12. Changes to this Privacy Policy

A a777 may update this Privacy Policy periodically to reflect changes in data processing practices, new platform features, regulatory updates, or ANPD decisions.

Relevant changes will be communicated at least 15 days in advance via the registered email address and/or a prominent notice on the platform. For minor or purely clarifying updates, only the "last updated" date at the top of the document will be changed.

Continued use of the platform after a new version of this policy takes effect constitutes acceptance of the changes. We recommend reviewing this page periodically to stay informed about how a777 protects your data.


13. Contact, DPO, and Privacy Channel

To exercise your rights as a data subject, ask questions about this policy, or report privacy and data protection concerns, please contact a777 through the channels below:

  • Live chat: available 24 hours a day, 7 days a week, directly on the platform after login;
  • Privacy email / DPO: privacidade@a777-khelo.com;
  • General support email: suporte@a777-khelo.com.

Data subject rights requests received via the privacy email are handled as a priority and responded to within 15 business days. For urgent inquiries — such as suspected misuse of your data — live chat is the fastest channel.

If you are unable to resolve your privacy request directly with a777, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.

Privacy at a777: What This Means for You in Practice

Privacy policies are among the most ignored documents on the internet — and understandably so, since many platforms write them in deliberately complicated language. At a777, the approach is different: to write clearly, state exactly what happens with your data, and ensure you have real control over your information. Here is what this policy means in practice for everyday platform users.

When you register at a777, you provide some basic information — your name, CPF, date of birth, email, and phone number. This data is required to create your account, verify that you are 18 or older, and ensure that Pix or TED payments are sent to the right person. Without this information, it is not possible to operate a responsible and secure Sports Betting platform. a777 uses this data exclusively for that purpose — not to sell to third parties or to bombard you with advertising outside the platform without your permission.

The part that tends to raise the most questions is the KYC process — the identity verification process that requires documents before releasing withdrawals. This is not red tape for its own sake: it is a legal requirement tied to anti-money laundering and regulatory compliance. a777 requests these documents through the platform's secure channel, processes them with certified KYC providers, and stores them with encryption. The process is done only once — once verified, you will not need to repeat it for future withdrawals.

About the payments: a777 does not store your full credit or debit card number. When you deposit by card, your financial details are sent directly to the card network (Visa, Mastercard, or Elo) and a777 receives only a secure token representing that card for future transactions. This means that even in a hypothetical security incident, your full card details would not be exposed on a777's servers. For Pix deposits, the key used is stored to facilitate future transactions, but is protected to the same security standards as the rest of the platform.

A LGPD guarantees you a set of rights that a777 is committed to upholding in practice — not just on paper. If you want to know exactly what data a777 holds about you, you can request a full report. If any data is outdated or incorrect, you can request a correction. If you want to close your account and delete your data, you can submit that request through support. a777 responds to these requests within 15 business days. For urgent privacy matters — such as suspected unauthorized access to your account — the live chat in Portuguese is the fastest channel.

The cookies on a777 work similarly to what you already know from other websites. Some are essential for the platform to function — keeping you logged in, securing forms, remembering basic preferences. Others are optional and require your consent, such as personalization cookies that remember your favorite games or marketing cookies for relevant promotions. You can manage these preferences in your account settings without affecting the platform's core functionality.

Finally, it is worth noting that the a777 has a dedicated Data Protection Officer (DPO), as required by the LGPD for companies that process data at scale. The DPO is internally responsible for ensuring all a777 processes comply with the law and for handling user privacy requests. You can reach the DPO directly at privacidade@a777-khelo.com. Data protection is not an add-on at a777 — it is a core part of how the platform operates.

Policy Summary

  • Data used solely to operate the platform
  • We never sell your data to third parties
  • 256-bit SSL Encryption Across the Board
  • Tokenized card data, not stored
  • Full LGPD compliance
  • Dedicated DPO for privacy matters
  • Your rights fulfilled within 15 business days

Related Documents

Privacy Channel

  • DPO / Privacy privacidade@
    a777-khelo.com
  • General Support Live chat
  • Response time 15 business days

Your Data, Your Protection

Create your account and bet with confidence on a platform 100% compliant with the LGPD.

Create Free Account
BET RESPONSIBLY
Sign up at a777 and earn R$ 1.000,00
bonus on your first Pix deposit

100% LGPD-compliant platform, payments in BRL, 24/7 support in Portuguese, and SSL encryption on every transaction. Bet on football, volleyball, UFC, slots, and much more.

Privacy and Data Protection Policy – a777

A777 operates in full compliance with the LGPD (Brazil's General Data Protection Law — Law No. 13.709/2018). Your personal data is collected exclusively for account registration, identity verification, payment processing, and platform operation. No information is shared with third parties for marketing purposes without your consent. All connections are encrypted with 256-bit SSL. To exercise your rights as a data subject or to contact the DPO, write to privacidade@a777-khelo.com.

Frequently Asked Questions about Privacy at a777

The most common questions about data protection, LGPD compliance, and privacy on the platform

No. a777 does not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Data sharing occurs only with operational partners strictly necessary for the platform to function — such as payment processors (Pix, boleto, card, PicPay, Mercado Pago), identity verification providers (KYC), and technology infrastructure suppliers — and always under a confidentiality agreement and LGPD compliance obligations.

You may request the deletion of your personal data by contacting a777 support via live chat or by emailing privacidade@a777-khelo.com. Your request will be processed within 15 business days. Please note that some data must be retained for mandatory legal periods — such as financial and KYC records, which must be kept for a minimum of 5 years under tax and anti-money laundering legislation. Once those periods expire, the data is permanently deleted or anonymized.

Not in the way you might think. a777 uses tokenization — a security technique in which your full card number is replaced by a token (a secure code) generated by your card network (Visa, Mastercard, or Elo). a777 stores only that token, never the actual card number, security code, or expiry date. This means that even in a hypothetical security incident, your full card details would remain protected. For Pix deposits, the key used is stored securely to streamline future transactions, but can be removed at any time in your account settings.

a777 shares data with government authorities only when required by law, court order, or determination from a competent regulatory body. This includes requests from the Financial Activities Control Council (COAF) in the context of money laundering investigations, court orders, and requests from tax authorities. In all cases, data sharing is limited to the minimum required by the request and carried out within the legal boundaries established by the LGPD and Brazilian procedural rules.

After account closure, a777 retains part of your data for the mandatory legal retention periods. Financial, betting, and KYC data are kept for a minimum of 5 years in accordance with tax legislation and anti-money laundering requirements — even after the account is closed. Non-mandatory browsing and preference data are deleted or anonymized within a shorter timeframe. You may request detailed information about which data remains stored after closure by emailing privacidade@a777-khelo.com. Once all applicable legal retention periods have expired, all your data is permanently and securely deleted from a777's systems.
Português