888sports Privacy Policy – Your Data Protected

 1. Who We Are (Data Controller)

The 888sports, operator of the platform available at 888sports.world, is the controller of the personal data collected and processed under this Privacy Policy. As the data controller, 888sports is responsible for defining the purposes and means of processing your data, ensuring that such processing complies with the General Personal Data Protection Law (LGPD — Law No. 13.709/2018) and all other applicable legislation in Brazil.

888sports is a Sports Betting and online casino platform serving exclusively the Brazilian market, offering betting on the Brasileirão Série A, Copa do Brasil, Libertadores, UFC, e-sports, and other sports, as well as live casino games, crash games, roulette, and slots. All services operate exclusively in BRL (R$) and use local payment methods such as Pix, boleto bancário, and credit card.

 2. Data We Collect

2.1 Data You Provide Directly

During registration and your use of 888sports, you voluntarily provide us with the following information:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile phone number, full residential address (street, number, complement, neighborhood, city, state, and zip code);
• Verification documents (KYC): copy of national ID, driver's license, or passport; proof of address; proof of bank account ownership for Pix withdrawals;
• Financial data: information about deposits and withdrawals, payment methods used (Pix key, tokenized card data), and transaction history;
• Communications: messages sent to support via live chat or email.

2.2 Automatically Collected Data

When you access 888sports via browser or mobile, we automatically collect certain technical data necessary for the platform to operate securely:

• IP address and approximate geolocation information;
• Browser type and version, operating system, and device type;
• Pages visited, access times, and session duration;
• Session identifiers and authentication tokens;
• Platform behavior data: bets placed, games accessed, markets viewed;
• Cookies and similar tracking technologies (detailed in section 6).

2.3 Third-Party Data

In specific situations, 888sports may receive information about you from authorized third parties, such as:

• Credit bureaus and identity verification services to confirm your registration details;
• Payment processors (such as card networks and Pix operators) to confirm transaction ownership;
• Brazilian government authorities, when legally required.

 3. How We Use Your Data

888sports uses the data it collects exclusively for the following purposes:

888sports does not use your data to build automated profiles that produce decisions with significant legal effects on you, except in fraud prevention scenarios where Brazilian law permits or requires it.

 4. Legal Basis for Processing (LGPD)

All personal data processing carried out by 888sports is grounded in one of the legal bases established by the LGPD:

• Contract performance (Art. 7, V): to create your account, process deposits and withdrawals via Pix, and provide the sports betting and casino services you signed up for;
• Compliance with legal obligation (Art. 7º, II): for KYC identity verification, anti-money laundering compliance, and responding to requests from competent Brazilian authorities;
• Legitimate interest (Art. 7, IX): for security analysis, fraud prevention, and platform improvement, always in respect of your fundamental rights;
• Consent (Art. 7º, I): for sending marketing communications, promotions, and 888sports updates — consent that can be withdrawn at any time.

 5. Sharing Data with Third Parties

888sports does not sell members' personal data. Sharing only occurs in the following situations and exclusively with partners that provide adequate data protection guarantees:

• Payment processors: to confirm and process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. Only the information strictly necessary for each transaction is shared;
• Identity verification services: partners that assist with the KYC process and anti-money laundering compliance, as required by Brazilian law;
• Casino game providers: in some live casino games and slots provided by third parties, minimal session data is shared with the game provider for technical functionality;
• Technology infrastructure providers: servers, security analysis platforms, and customer support systems, all operating under contracts that include confidentiality and data protection clauses;
• Competent authorities: when required by law, court order, or formal request from a Brazilian regulatory authority (such as the Ministry of Finance, Federal Revenue Service, or Federal Police).

All third parties that receive data from 888sports members are contractually bound to handle that information with the same level of confidentiality and security we apply internally, and may not use the data for any purpose beyond what is specified in the contract.

 6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored in your browser or device when you access 888sports. They keep your session active, remember your preferences, and help us understand how the platform is used so we can continuously improve it.

6.2 Types of Cookies We Use

• Essential cookies: required for the platform's core functionality — authentication, active session maintenance, and security. They cannot be disabled without affecting your use of 888sports;
• Performance cookies: collect anonymized data on how members navigate the platform, which pages are most visited, and where technical errors occur. They help improve the experience without identifying individual users;
• Functionality cookies: remember your language preferences, display settings, and in-platform browsing history to personalize your experience;
• Analytical cookies: used for aggregated platform usage analysis. Data is processed in anonymized, aggregated form, with no individual member identification.

6.3 Cookie Management

You can manage and disable cookies through your browser settings (Chrome, Safari, Firefox, etc.) or on your mobile device through your browser app settings. Disabling essential cookies may prevent 888sports from functioning properly. Performance and analytics cookies can be disabled without affecting your main access to the platform.

 7. Data Security

888sports employs robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction:

• SSL/TLS 256-bit encryption across all communications between your device and our servers — the same standard used by Brazilian banks;
• Secure storage of data on servers with strict physical and logical access controls, with encrypted and geographically distributed backups;
• Two-factor authentication (2FA) available to all members who want an extra layer of protection when accessing their account;
• Continuous monitoring of suspicious access attempts, brute-force attacks, and anomalous activity on member accounts;
• Internal access control based on the principle of least privilege — each employee can only access the data necessary to carry out their role;
• Regular security testing, including vulnerability assessments and attack simulations conducted by independent specialists.

In the event of a security incident that may affect your personal data, 888sports will notify the National Data Protection Authority (ANPD) and the affected members within the timeframes established by the LGPD, describing the nature of the incident and the measures taken to mitigate its effects.

 8. Data Retention and Deletion

888sports retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations in Brazil. The general retention periods are:

• Registration and KYC data: retained for a minimum of 5 years after account closure, as required by anti-money laundering legislation (Law No. 9,613/1998) and Brazilian Central Bank regulations;
• Financial transaction history (deposits, withdrawals via Pix, bets): retained by 5 years after each transaction for accounting, tax, and audit purposes;
• Customer support records: retained by 2 years after each case is closed, for quality and compliance purposes;
• Browsing data and analytical cookies: kept for a maximum of 13 months from the date of collection;
• Marketing and communication data (email, mobile number): retained until you withdraw your consent or close your account.

Once the legal retention periods have expired, data is permanently deleted or irreversibly anonymized within 888sports systems.

 9. Your Rights as a Data Subject

The LGPD grants you, as the data subject whose information is processed by 888sports, the following rights, which may be exercised at any time by emailing suporte@888sports.world:

To exercise any of these rights, please contact us at suporte@888sports.world identifying yourself with your full name and registered CPF. 888sports will respond to rights requests within up to 15 business days from the date a complete request is received.

If you believe that 888sports's processing of your data violates the LGPD, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal body responsible for overseeing personal data protection in Brazil.

 10. Protection of Minors' Data

888sports services are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors. Registration requires age confirmation and a CPF, and the KYC verification process includes date-of-birth confirmation via an official government-issued document.

If 888sports identifies that data from a person under 18 has been inadvertently collected, that information will be immediately deleted and the account will be closed. If you become aware of a minor using the platform, please contact us at suporte@888sports.world immediately so we can take the appropriate action.

 11. International Data Transfers

In some cases, 888sports operations may involve processing data on servers located outside Brazil, particularly for cloud infrastructure services, security analysis, and international casino game providers. When this occurs, 888sports ensures that international transfers are carried out only to countries or organizations that offer an adequate level of data protection, in accordance with ANPD criteria.

All contracts with international partners who receive data from Brazilian members include standard data protection clauses compatible with LGPD requirements, ensuring your rights as a data subject are upheld regardless of where the data is processed.

 12. Changes to This Privacy Policy

888sports may update this Privacy Policy periodically to reflect changes in Brazilian law, our services, or our data processing practices. All changes will be published on this page with the update date clearly indicated.

Significant changes — those that materially affect how your data is processed or your rights as a data subject — will be communicated by email or in-platform notification at least 7 days in advance before they take effect. Continued use of 888sports after any update's effective date constitutes acceptance of the new practices described.

 13. Data Protection Officer (DPO)

In accordance with Art. 41 of the LGPD, 888sports has appointed a Data Protection Officer (DPO — Data Protection Officer). The DPO is the official communication channel between 888sports, data subjects, and the National Data Protection Authority (ANPD).

To contact the 888sports Data Protection Officer regarding the processing of your personal data, the exercise of your rights as a data subject, or any questions about this Privacy Policy, please email suporte@888sports.world with the subject line "DPO – Data Protection".

 14. Contact

For any questions, requests, or complaints related to this Privacy Policy or the processing of your personal data by 888sports, please reach out through the following channels:

• Email: suporte@888sports.world
• Live chat: available directly on the 888sports.world platform, 24 hours a day, 7 days a week

Our team responds in Brazilian Portuguese and is committed to handling all privacy-related requests within a maximum period of 15 business days.