Privacy Policy of 2767pg – LGPD & Your Data

The 2767pg, operated through the website 2767pg.net, is the controller of the personal data of users registered on the platform. Under the LGPD, the "controller" is the entity that makes decisions about data processing — what data to collect, for what purpose, and how long to retain it.

All communications relating to personal data, the exercise of rights, or questions about this Privacy Policy should be directed to the 2767pg through the official channels listed in section 13 of this document. We do not use intermediaries for privacy matters.

The 2767pg only collects the data necessary to operate the platform, meet legal obligations, and provide a safe experience for players. The data collected falls into the following categories:

Identification and registration data:

• Full name;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (zip code, street, city, state).

Identity verification data (KYC):

• Government-issued photo ID (RG, CNH, or Passport);
• Proof of address issued within the last 3 months;
• Selfie for identity confirmation (when requested).

Financial data:

• Pix key, card details (tokenized — 2767pg does not store your full card number), or bank account for withdrawals via TED;
• Transaction history: deposits, withdrawals, and bets placed.

Platform usage data:

• IP address and approximate location;
• Device type, operating system, and browser;
• Pages visited, session duration, and actions taken on the platform;
• Betting and gaming history.

The 2767pg collects personal data in the following ways:

• Directly from you: at the time of registration, identity verification, form completion, support contact, or financial transactions;
• Automatically: while using the platform, through cookies, pixels, and similar technologies that record browsing, device, and behavioral data within the site;
• By payment processors: when you make a deposit via Pix, credit card, debit card, boleto bancário, PicPay, or Mercado Pago, the data required to process the transaction is transmitted by those platforms directly to the 2767pg securely and in encrypted form.

The 2767pg does not purchase third-party personal data lists or collect data from any sources other than those mentioned above.

Each piece of data collected by 2767pg has a specific purpose and a corresponding legal basis under the LGPD. The table below summarizes the main cases:

Where the legal basis is consent, you may withdraw it at any time without affecting the basic functioning of your account on the 2767pg. Revoking consent for marketing communications, for example, does not affect your access to the platform.

The 2767pg does not sell, rent, or share personal data with third parties for commercial purposes. Sharing occurs exclusively in the following situations, each with a defined legal basis:

• Payment processors: Pix (via Banco Central), card operators, PicPay, and Mercado Pago receive only the data strictly necessary to process the financial transactions you request. These partners have their own privacy policies and are contractually required to protect your data;
• Game providers: companies that provide slots, crash games (Aviator, Spaceman, JetX), roulette, and live casino receive anonymized session identifiers to process bets. Personally identifiable data is not shared with game providers;
• Identity verification services: specialized KYC platforms may process documents for identity validation, acting as data processors under instruction from the 2767pg and under contractual confidentiality obligations;
• Legal and regulatory authorities: when required by law, court order, or a legitimate request from the competent Brazilian authorities, 2767pg may share data with bodies such as the Banco Central, Receita Federal, COAF, or Polícia Federal;
• Business transfer: in the event of a merger, acquisition, or corporate restructuring of the company operating 2767pg, user data may be transferred to the new controller, who will be required to honor the same conditions set out in this Policy.

The 2767pg uses cookies and similar technologies to ensure the platform functions correctly, personalize the experience, and analyze site usage. The types of cookies used are:

• Essential cookies: required for the platform's basic operation, such as maintaining login sessions and ensuring security. They cannot be disabled without affecting access to your account;
• Performance cookies: collect anonymous data on how users interact with the platform (most visited pages, session duration, errors encountered) to improve the experience. They do not identify users individually;
• Functionality cookies: store user preferences — such as language and account settings — to personalize the experience on return visits;
• Analytical cookies: used by the 2767pg team to understand usage patterns and identify opportunities to improve the platform.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent access to certain features of the 2767pg. Disabling analytics and performance cookies does not affect account functionality.

The 2767pg adopts a comprehensive set of technical and organizational measures to protect users' personal data against unauthorized access, loss, destruction, or improper disclosure:

• 256-bit SSL/TLS Encryption across all communications between the user's device and 2767pg's servers;
• Encrypted storage of passwords using irreversible hash algorithms — 2767pg never stores your password in plain text;
• Financial data tokenization — credit card numbers are processed by PCI-DSS certified operators and are never stored on 2767pg's servers;
• Two-factor authentication (2FA) available to all users as an additional layer of account security;
• Continuous security monitoring with automatic alerts for suspicious access, login attempts from new devices, or unusual locations;
• Internal access control — only 2767pg employees with a proven operational need have access to personal data, and that access is logged and audited on a regular basis.

Despite all these measures, no system is 100% breach-proof. In the event of a security incident that may affect your data, the 2767pg will notify affected users and the ANPD within the timeframes established by the LGPD.

The 2767pg retains users' personal data for the minimum periods required for each purpose:

• Active account data: kept for the entire duration of the account at 2767pg;
• Financial transaction data (deposits, withdrawals via Pix, boleto, card): retained for a minimum of 5 years after the transaction, as required by Brazilian financial legislation and anti-money laundering regulations;
• KYC data (identity documents): retained for at least 5 years after account closure, in accordance with regulatory requirements;
• Log and access data: retained for up to 12 months for security purposes and incident investigation;
• Marketing communications data: deleted immediately upon withdrawal of consent by the user.

Once retention periods expire, data is securely deleted or anonymized so that the individual can no longer be identified. You may request early deletion of your personal data, subject to mandatory legal retention periods — contact the 2767pg through the channel indicated in section 13.

The LGPD grants you, as a data subject, a set of rights that 2767pg is fully committed to honoring. See what they are and how to exercise them:

The 2767pg is a platform intended exclusively for adults aged 18 and over. We do not intentionally collect, process, or store personal data from individuals under 18.

During registration, users are required to explicitly confirm that they are at least 18 years of age. If we identify that an account was created by a minor, that account will be closed immediately and all associated data will be deleted, except for records whose retention is required by law for investigative purposes.

Some of the technology partners of 2767pg — such as cloud infrastructure providers, gaming platforms, and analytics tools — may be based outside Brazil, which may involve international data transfers.

When this occurs, the 2767pg ensures that the transfer meets at least one of the following conditions set out by the LGPD:

• The destination country provides a level of data protection equivalent to that required by the LGPD, as recognized by the ANPD;
• Standard contractual clauses are in place to ensure data subjects retain the same rights provided under the LGPD;
• The transfer is necessary to perform the service agreement with the data subject.

The updated list of countries and partners to which data may be transferred is available upon request at contato@2767pg.net.

The 2767pg may update this Privacy Policy periodically to reflect changes in Brazilian law, data processing practices, or the services offered. Each new version takes effect on the date it is published at 2767pg.net/privacy-policy.

For changes considered significant — such as a change in the purpose of processing or the inclusion of new types of data collected — the 2767pg will notify users by email at least 7 days in advance. For minor editorial or structural changes, the update will be published directly on the page without prior notice.

We recommend reviewing this Policy periodically. The date of the last update is always shown at the top of the document.

For any questions related to the privacy of your data at 2767pg — whether to exercise a right under the LGPD, ask a question about how your data is handled, or file a complaint — use the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the 2767pg.net website;
• Privacy email: contato@2767pg.net — requests related to personal data are responded to within 15 business days.

If you believe your rights as a data subject are not being respected by 2767pg, you have the right to file a complaint with the National Data Protection Authority (ANPD), the Brazilian body responsible for overseeing compliance with the LGPD.

The 2767pg has a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the LGPD internally. For direct contact with the DPO, use the same email contato@2767pg.net, with "DPO Contact" in the subject line.