78tt Privacy Policy – Your Data Protected

The 78tt collects users' personal data transparently and for specific purposes. The data collected varies depending on the type of interaction you have with the platform. The main categories are listed below:

The 78tt does not collect or store data in sensitive categories such as racial or ethnic origin, religious beliefs, genetic or biometric data, union membership, or sexual orientation, except where strictly required by law and with your express consent.

The 78tt uses collected data strictly for the purposes disclosed at the time of collection or set out in this policy. The legal bases for processing are: performance of a contract, compliance with a legal obligation, legitimate interest, and, where applicable, your consent.

• Identity verification and fraud prevention: your CPF, name, and documents are used to verify your identity, prevent duplicate accounts, and detect suspicious activity before it causes harm to you or the platform;
• Financial transaction processing: Pix details, deposit and withdrawal history are required to accurately process and record every financial transaction;
• Platform operation: usage data allows bets to be recorded, bonuses calculated, odds updated, and support provided with the appropriate context;
• Support communication: email and support history allow the team at 78tt pick up previous conversations and resolve issues more efficiently;
• Product improvement: behavioral data (aggregated and anonymized wherever possible) helps identify features that need improvement and new functionality that makes sense for the Brazilian user;
• Marketing communications: only if you have given express consent, we may send emails about promotions, reload bonuses, VIP Program news, and relevant sporting events such as Libertadores, Brasileirão, and Superliga de Vôlei. You can unsubscribe from these at any time;
• Compliance with legal obligations: financial data is retained as required by Brazilian tax law and may be shared with competent authorities when legally required.

The 78tt does not use your personal data for automated decision-making that produces significant legal effects without human review. If an account is suspended by an automated system, a human analyst reviews the case before any final action is taken.

The 78tt does not sell, rent, or transfer your personal data to third parties for commercial use. Sharing only occurs in the situations below, and strictly to the extent necessary for each purpose:

• Game providers: Evolution Gaming, Pragmatic Play, Spribe, BGaming, and other partners receive only the data needed to identify the user within the gaming environment (typically an anonymous internal identifier). They do not receive CPF numbers, banking details, or contact information;
• Payment processors: financial institutions and Pix processors receive the banking details required to execute each transaction. Processing follows the regulations of the Brazilian Central Bank (BCB) and the security standards of the respective institution;
• Analytics tools and infrastructure: hosting providers, security monitoring, and traffic analytics services may have access to technical data (IP, device, logs) under data processing agreements with confidentiality clauses compatible with the LGPD;
• Authorities and regulatory bodies: when legally required, data may be shared with the Receita Federal, Ministério Público, Polícia Federal, COAF (Financial Activities Control Council), or other competent authorities in Brazil;
• Anti-money laundering: transactions showing unusual patterns may be reported in accordance with obligations set out in Law No. 9,613/1998 and BCB regulations.

User data from the 78tt are stored on servers with multiple layers of physical and logical security. The main technical measures in place include:

• Encryption in transit: SSL/TLS 256-bit encryption on all communications between devices and servers;
• Encryption at rest: sensitive data such as CPF numbers and banking information is stored in encrypted form in our databases;
• Access control: only staff with documented operational need have access to personal data, with mandatory multi-factor authentication;
• Continuous monitoring: automated systems detect unusual access, intrusion attempts and suspicious activity 24 hours a day;
• Redundant backups: backup copies are kept in geographically separate locations to ensure operational continuity;
• Penetration testing: the infrastructure of 78tt undergoes periodic security audits carried out by independent specialists.

In the event of a security incident that compromises users' personal data, the 78tt will notify the National Data Protection Authority (ANPD) and affected data subjects within the timeframe set by the LGPD, providing information about the nature of the affected data, the measures taken to mitigate the incident, and the contact channels available for questions.

The 78tt uses cookies and similar technologies (such as pixels and local storage) to ensure the platform functions correctly and to improve the user experience. When you access the platform for the first time, you are informed about the use of cookies and can configure your preferences.

You can manage or disable non-essential cookies in your browser settings or through the privacy panel within your account on the 78tt. Disabling essential cookies may prevent the platform from functioning correctly, including logging in and placing bets.

The 78tt does not use third-party tracking cookies for external behavioral advertising. Usage data collected via cookies stays within the platform and is not shared with ad networks.

The LGPD (Law No. 13.709/2018) grants you, as a data subject, a set of rights that 78tt fully respects. You may exercise any of these rights by submitting a request to contato@78tt.best with the subject line "LGPD Request" and details identifying your request.

The response period for rights requests is up to 15 business days. For more complex cases requiring in-depth review, the 78tt will communicate the reason for any deadline extension. Requests are handled free of charge, except in cases of repetitive or manifestly unfounded submissions.

The platform 78tt is strictly prohibited for users under 18. The registration process includes CPF and date of birth verification to confirm that the user has reached the legal age required by Brazilian legislation applicable to gambling and Sports Betting.

The 78tt does not intentionally collect personal data from individuals under 18. If we identify that an account was created by or on behalf of a minor, the account will be closed immediately, the data will be deleted in accordance with the LGPD, and any deposits will be refunded to the legal guardian upon identity verification.

If you suspect that a minor has accessed the platform using your credentials or personal details, contact the support team at 78tt via live chat or at contato@78tt.best so the situation can be investigated and your account protected.

The 78tt retains personal data for as long as necessary to fulfill the purposes described in this policy. Retention periods vary according to the data category and applicable legal obligations:

• Registration and identity data (KYC): retained for the full duration of the account and for up to 5 years after closure, in accordance with anti-money laundering requirements (Law No. 9,613/1998);
• Financial transaction history: retained for up to 5 years after each transaction, in accordance with tax obligations and National Monetary Council requirements;
• Betting history: retained for as long as the account is active and for up to 2 years after closure for dispute resolution purposes;
• Support and communications data: retained for up to 2 years from the last interaction, to allow continuity and resolution of any pending matters;
• Cookie and usage data: in line with each cookie's lifespan, generally between 30 days and 2 years for analytical cookies;
• Consents and their revocations: consent records are kept for an indefinite period to demonstrate legal compliance.

Once retention periods expire, data is securely deleted using methods that prevent recovery, or irreversibly anonymized for aggregated statistical use.

Some technical partners of 78tt – such as international game providers (Evolution Gaming, Pragmatic Play, Spribe) and cloud infrastructure services – may be based or operate servers outside Brazil. In such cases, international data transfers are carried out only when the recipient country offers an adequate level of protection according to ANPD criteria, or when sufficient contractual safeguards are in place, such as standard contractual clauses approved by the competent authority.

The 78tt requires all international partners who receive Brazilian users' data to commit to processing that data in compliance with the LGPD and equivalent privacy protection standards. Transfers are documented and can be audited at any time.

Data transferred internationally is subject to the same rules regarding purpose, necessity, security, and retention periods described in this policy. Under no circumstances is data transferred to countries without an adequate legal data protection framework without supplementary contractual safeguards.

The 78tt has appointed a Data Protection Officer (DPO) responsible for handling data subject requests, guiding the internal team on LGPD compliance, and serving as the communication channel with the ANPD.

To exercise your rights, ask questions about how your data is handled, file a complaint, or request more information about this policy, please use the channels below:

• Email: contato@78tt.best (subject: "LGPD Request" or "Privacy")
• Live chat: available 24 hours a day, 7 days a week, on the 78tt platform
• Response time: up to 15 business days for formal rights requests; under 2 minutes for general inquiries via chat

The data controller at 78tt reviews each request individually, verifies the requester's identity before providing or modifying data, and documents all requests for compliance audit purposes.

The 78tt may periodically review and update this Privacy Policy to reflect changes in data handling practices, new legal requirements, or improvements to our internal privacy processes.

Material changes that affect your rights or the way we handle sensitive data will be communicated at least 7 days in advance by email and in-platform notification. Minor changes for clarity or formatting that do not alter rights or obligations may be made without prior notice.

The most current version of this policy is always available at 78tt.best/privacy-policy, with the last updated date shown at the top of the document. We recommend reviewing this policy periodically, especially before making deposits or sharing additional information with the platform.

Continued use of 78tt after an updated version of this policy takes effect constitutes acceptance of the new terms. If you disagree with any change, you may exercise your right to close your account and request data deletion as described in Section 6.