AS7Games Privacy Policy – Data Protection and LGPD

1What Data We Collect About You

The AS7Games only collects the data strictly necessary to operate the platform safely and legally. Below is a clear description of each data category collected and the reason it is required.

Data in sensitive categories — such as racial origin, health data, or sexual orientation — are not collected by the AS7Games under any circumstances. The only data that may be considered sensitive under the LGPD and that we collect is the CPF — required by law for identity verification and compliance with Brazilian Central Bank regulations.

2How We Use Your Data

Every piece of data collected by AS7Games has a specific, declared purpose. We do not use data for purposes incompatible with those listed below without requesting fresh consent:

• Account management: create and manage your account, authenticate your access, and maintain your preference history on AS7Games.
• Payment processing: process deposits via Pix (Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago), boleto bancário, credit and debit card, and handle your withdrawals securely and efficiently.
• Identity verification (KYC): confirm that you are who you say you are, that you are over 18, and that there is no legal restriction preventing you from using the platform — as required by anti-money laundering regulations (Law No. 9.613/1998).
• Security and fraud prevention: detect suspicious behavior, prevent unauthorized access, identify multiple accounts created with the same CPF, and monitor transactions in accordance with Brazilian Central Bank regulations.
• Player support: answer questions, resolve complaints, and provide technical support in Portuguese 24 hours a day.
• Account communications: send transaction confirmations, security alerts, promotional notifications (when you have opted in), and notices about changes to the platform's terms.
• Responsible gambling: monitor gameplay patterns to identify signs of problem behavior and apply the appropriate safeguards in line with our responsible gambling policy.
• Platform improvement: analyze aggregated and anonymized usage data to improve the experience, fix bugs, and develop new features.
• Compliance with legal obligations: respond to requests from regulatory, tax (Receita Federal), and judicial authorities when required by law.

3Legal Basis for Data Processing

The LGPD requires that every processing of personal data have a specific legal basis. The AS7Games operates under the following legal bases, as set out in Article 7 of Law No. 13,709/2018:

• Contract performance (art. 7, V): processing is necessary to provide the contracted service — meaning, to allow you to play, deposit, and withdraw on AS7Games. Without this data, the platform simply cannot function at an operational level.
• Compliance with a legal obligation (art. 7, II): identity verification (KYC), the recording of financial transactions, and the retention of history for 5 years are obligations imposed by Law No. 9,613/1998 (anti-money laundering) and the regulations of the Banco Central do Brasil — independent of our discretion or yours.
• Legitimate interest (Art. 7, IX): fraud prevention, multiple-account detection, and security monitoring are carried out on the basis of AS7Games's legitimate interest in protecting players, platform integrity, and legal compliance — always proportionate and using the minimum data necessary.
• Consent (Art. 7, I): promotional emails and marketing notifications are sent exclusively with your express consent given at registration or through your account settings. This consent can be withdrawn at any time.

The AS7Games does not process data on legal bases not declared in this policy. If the purpose or legal basis of any processing needs to change, this policy will be updated and you will be notified in advance.

4Data Sharing with Third Parties

The AS7Games does not sell or transfer players' data to third parties for commercial purposes. Data is shared only in the situations below, with partners who have signed confidentiality and data processing agreements in accordance with the LGPD:

• Payment processors: to process deposits and withdrawals via Pix, boleto bancário, credit and debit card, and integrations with PicPay and Mercado Pago. These partners receive only the data necessary to complete the transaction — name, CPF, and banking details — and are contractually prohibited from using it for any other purpose.
• Game providers: to provide slots, live casino, poker, and crash games in partnership with certified providers. These partners may receive an anonymous user identifier to personalize the gaming experience — without access to your real name, CPF, or financial data.
• Technology infrastructure: servers, security systems, monitoring tools, and customer support platforms used by AS7Games. All operate under data processing agreements compatible with the LGPD.
• Public authorities: when required by law, court order, or request from a law enforcement or regulatory authority (Banco Central, Receita Federal, COAF). In such cases, AS7Games provides only the minimum information necessary to comply with the legal request, with no additional voluntary disclosure.

5Cookies and Tracking Technologies

The AS7Games uses cookies and similar technologies to ensure the platform works properly, enhance your experience, and — with your consent — personalize communications. See the types used below:

• Essential cookies: required for the platform to function — they keep your session active, store basic preferences, and secure the deposit and withdrawal pages. They cannot be disabled without compromising the site's functionality.
• Functional cookies: remember your language preferences, theme, and game settings so you don't have to reconfigure everything on each visit. They can be disabled in your browser settings.
• Analytical cookies: collect aggregated and anonymized data on how players navigate the platform — pages visited, session duration, clicks — to help improve the experience. This data does not identify you individually.
• Marketing cookies (with consent only): used to personalize communications and measure the effectiveness of AS7Games campaigns. Enabled only if you gave consent during registration or through your account settings.

You can manage your cookie preferences in your account dashboard or in your browser settings. Disabling analytics and marketing cookies does not affect how the platform works — only essential cookies are required. On mobile devices, cookie settings are available in the browser options (Chrome, Safari, Firefox) you use to access the AS7Games.

6Data Security

The AS7Games implements technical and organizational measures to protect your personal data against unauthorized access, improper alteration, accidental destruction, or unlawful disclosure. The main measures in place include:

• 256-bit SSL/TLS Encryption: across all communications between your device and AS7Games servers.
• Encryption at rest: sensitive data stored on our servers (such as CPF and Pix keys) is encrypted, so that even unauthorized physical access to a server would not result in exposure of that information.
• Two-Factor Authentication (2FA): available and recommended for all players. When enabled, a second verification factor is required in addition to your password to access your account.
• Internal access control: player data is accessible only to staff with a direct functional need, with all access recorded in an immutable log.
• Continuous monitoring: automated systems monitor suspicious access attempts, brute-force attacks, and transaction anomalies in real time, with alerts sent to the security team.
• Penetration testing: platform security is periodically assessed by specialist professionals to identify and address vulnerabilities before they can be exploited.

7How Long We Retain Your Data

The AS7Games retains your personal data only for as long as necessary for the stated purposes or for the period required by law. The retention criteria by category are:

• Financial and transaction data (Pix deposits, withdrawals, betting history): retained for 5 years after account closure, as required by the Banco Central do Brasil and the Receita Federal for tax audit and anti-money laundering compliance purposes.
• Identification data (name, CPF, KYC documents): retained for the same 5-year period as required by law, even after account closure.
• Contact details (email, mobile, address): deleted or anonymized within 30 days of account closure, except where required for the legal retention period described above.
• Support history (tickets and conversations): retained for 2 years for quality assurance and dispute resolution purposes.
• Analytics cookie data: retained for up to 13 months from collection, after which they are deleted or renewed with fresh consent where applicable.
• Inactive account data: accounts inactive for more than 24 months have their non-mandatory data anonymized, retaining only the legal minimum required for regulatory compliance.

After the retention period, data is securely and irreversibly deleted from the systems of the AS7Games. In the event of an early deletion request, data subject to a legal retention period is anonymized — made impossible to associate with you individually — rather than deleted, in order to maintain regulatory compliance.

8Your Rights as a Data Subject — LGPD

The LGPD grants you a set of rights over your own data. AS7Games AS7Games is committed to handling all requests within the legally required timeframes. See your rights and how to exercise them:

If you are not satisfied with the response from the AS7Games to your request, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), as provided under Article 18, § 1 of the LGPD.

9Minors

The AS7Games is a platform exclusively for users aged 18 and over. Registration by minors is strictly prohibited and violates the platform's Terms and Conditions. In compliance with Article 14 of the LGPD, which provides special protection for children's and adolescents' data, AS7Games takes the following measures:

• Date of birth is collected at registration and verified during the KYC process — accounts showing signs of belonging to a minor are immediately suspended pending investigation.
• The AS7Games does not knowingly collect data from anyone under 18. If we determine that a minor's data was collected by mistake, it will be deleted immediately.
• If a legal guardian discovers that their minor child has created an account on AS7Games, they should contact us immediately at suporte@as7games.net. The account will be closed and the data deleted — any deposited balance will be refunded to the original payment method after verification.

10Updates to This Privacy Policy

The AS7Games may update this Privacy Policy periodically to reflect changes in legislation, platform practices, or guidance from the National Data Protection Authority (ANPD). Changes are communicated according to the following guidelines:

• Material changes: changes that significantly affect your rights or the way your data is handled will be communicated by email at least 15 days in advance. You will have the option to close your account without penalties if you do not agree with the changes.
• Minor updates: language corrections, contact updates, or clarifications with no material impact may be published immediately on this page, with the update date revised at the top of the document.
• Version history: previous versions of this policy are available upon request by contacting AS7Games support.
• Continued use as acceptance: continued use of the platform after the effective date of an update constitutes acceptance of the new practices described. If you disagree with any change, please get in touch before the effective date to discuss your options.

This policy was written in Brazilian Portuguese to ensure that all players of AS7Games understand it without difficulty. Any questions about this content may be directed to our DPO at suporte@as7games.net. The version in force is always the one available on this page — the date of the last update is indicated at the top of the document.