Privacy Policy of 67ee – Your Data Protected by the LGPD

The platform 67ee, accessible at 67ee.best, is the data controller for Users' personal data as defined by the Lei Geral de Proteção de Dados (LGPD). This means we are responsible for determining the purposes and means of processing your data — and for complying with all related legal obligations.

This Privacy Policy describes how the 67ee collects, uses, stores, shares and protects the personal data of anyone who accesses or uses our services, including:

• Site visitors who have not yet created an account;
• Users registered with an active account on the platform;
• Users who have closed their accounts, for the applicable retention period;
• Anyone who contacts our support team.

A 67ee collects different categories of data depending on how you use the platform. We follow the principle of data minimization: we only collect what is strictly necessary for each purpose.

A 67ee does not collect sensitive data such as biometrics, health data, sexual orientation, racial or ethnic origin, religious beliefs or political affiliation. Under no circumstances is this type of data requested during registration or in any other interaction with the platform.

Every piece of data collected by 67ee has a specific, documented purpose. We do not use data for purposes incompatible with those described here without obtaining new consent. The main purposes are:

• Account operation: creation, maintenance, identity verification and closure of the User's account;
• Financial processing: deposits via Pix, boleto bancário, card, Mercado Pago, PicPay, or TED bank transfer, withdrawals, and receipt generation;
• Security and fraud prevention: detection of suspicious activity, anti-money laundering measures, and CPF-based duplicate account verification;
• Personalization: tailoring the game catalog, suggesting sports bets on football competitions like the Brasileirão or Copa Libertadores, and offering promotions relevant to the player's profile;
• Communication: sending notifications about account activity, transactions, promotions (with opt-out option) and policy updates;
• Responsible gambling: monitoring of gaming patterns to identify risk signals and proactively offer support tools;
• Legal compliance: compliance with requests from competent authorities, and with tax and regulatory obligations in the Brazilian sports betting market.

The LGPD requires that all data processing have a legal basis justifying it. The 67ee processes data based on the following legal grounds set out in Lei nº 13.709/2018:

• Contract performance (Art. 7, V): processing required to operate the account, handle financial transactions, and deliver Sports Betting and online casino services;
• Legitimate interest (Art. 7, IX): fraud prevention, platform security, responsible gambling monitoring, and continuous service improvement, provided these purposes do not override the data subject's rights and freedoms;
• Consent (Art. 7, I): sending marketing communications, personalization based on stated preferences, and use of non-essential cookies;
• Compliance with a legal obligation (Art. 7, II): tax and regulatory obligations, and compliance with requests from competent authorities.

Where processing is based on consent, you have the right to withdraw it at any time. Withdrawing consent for marketing communications, for example, does not affect the operation of your account or the processing of financial transactions — those activities have their own independent legal basis.

A 67ee does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the following specific, documented situations:

• Payment processors: only the minimum necessary data is shared with the platforms responsible for processing transactions via Pix, boleto bancário, credit card, Mercado Pago, PicPay and TED transfers. These partners act as data processors and are contractually required to protect your information in compliance with the LGPD;
• Game providers: technical session data (with no personally identifiable information) is shared with providers of slots, live blackjack, crash games, and other games to ensure proper functionality and result auditing;
• Security tools: IP addresses and technical data are processed by fraud detection and unauthorized access prevention tools;
• Competent authorities: when required by law or court order, 67ee is obligated to provide data to the competent authorities. Whenever legally permitted, you will be notified of such disclosure;
• Independent auditors: aggregated and anonymized data is shared with certifiers that audit the RNG of casino games. No personally identifiable data is included in these reports.

A 67ee uses cookies and similar technologies to ensure the platform functions properly and to improve the User experience. Cookies are divided into the following categories:

• Essential cookies: required for the platform's basic operation — login, active session, bet slip, and security. These cannot be disabled without affecting your use of the platform;
• Performance cookies: collect anonymous information about how Users navigate the platform (which pages are visited most, load times, errors). They help identify technical issues without linking the data to any specific User;
• Preference cookies: store settings such as language, visual theme and notification preferences so you don't have to reset them every time you log in;
• Personalization cookies: used to tailor game suggestions and promotions to the User's profile based on usage history. They are activated only with explicit consent.

A 67ee does not use third-party tracking cookies for external advertising purposes. You will not be tracked by our site while browsing other platforms.

You can manage your cookie preferences at any time through the account settings panel. On mobile devices — Android or iOS — cookie preferences can also be managed through the browser settings used to access the platform.

A 67ee retains personal data for as long as necessary for the purposes described in this Policy, in compliance with mandatory legal retention periods. The general retention criteria are:

• Active account: all data is retained for as long as the account remains active and throughout the duration of the relationship with the User;
• Financial transaction data: retained for a minimum of 5 years from the transaction date, as required by Brazilian tax and anti-money laundering legislation (Lei nº 9.613/1998);
• Security logs: retained for 12 months for incident investigation;
• Support history: retained for 2 years for reference in the event of complaints or disputes;
• Closed account data: non-financial personal data is deleted within 90 days after voluntary account closure, except where retention is required by law.

Once the retention period has ended, data is securely and irreversibly deleted from 67ee. Data that cannot be immediately deleted for technical reasons is anonymized until permanent deletion.

A 67ee implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The main measures include:

• SSL/TLS encryption: all communications between the User and the platform are encrypted in transit;
• Encryption at rest: sensitive data stored on servers — including financial and identity data — is encrypted;
• Two-factor authentication (2FA): available to all accounts, especially recommended for Users who frequently transact via Pix;
• 24-hour monitoring: automated systems monitor access and transactions for suspicious patterns, with alerts sent to the security team;
• Internal access control: 67ee staff only access the data required for their specific roles, with an audit trail recorded for every access;
• Security testing: the platform's infrastructure undergoes periodic vulnerability assessments carried out by specialized security teams.

The LGPD grants data subjects a range of rights that 67ee recognizes and facilitates the exercise of these rights. You can exercise any of them at any time through live chat support or by emailing contato@67ee.best:

A 67ee responds to rights-exercise requests within 15 business days from the date of receipt. Cases requiring more detailed investigation may have this deadline extended, with prior notice to the data subject. Exercising your rights is free of charge and does not require an attorney or legal representation.

The platform 67ee is intended exclusively for individuals aged 18 or older residing in Brazil. We do not intentionally collect, process or retain personal data from minors.

The registration form requires your date of birth and CPF, both of which are verified. Any account identified as belonging to a minor will be immediately closed and the deposited balance will be refunded to the original payment method — Pix, card, or any other Brazilian method available at the time of the deposit. The data will be deleted within a reduced timeframe following account closure.

If you believe a minor has created an account at 67ee, contact our support team immediately via live chat so we can investigate and take the necessary action urgently.

A 67ee may update this Privacy Policy periodically to reflect changes in our services, applicable legislation, or our data processing practices. The date of the last update is always displayed at the top of this page.

When changes are significant — especially if they expand data collection or alter the purpose of processing — you will be notified at least 15 days in advance by email and through a prominent notice in your account dashboard. Minor wording or clarity updates may be made without prior notice.

Continued use of the platform after the notice period implies acceptance of the new practices. If you do not agree with the changes, you may request account closure before the effective date of the changes, without penalty.