Privacy Policy of tinger777 — Your Data, Your Security

Tinger777 understands that privacy is not a technical detail — it is a core part of the trust we build with every user. When you register your CPF, make a deposit via Pix, or add your phone number to the platform, you are entrusting us with sensitive information. That is a responsibility we take seriously.

This Policy was drafted in compliance with the General Personal Data Protection Law (LGPD — Law 13.709, of August 14, 2018), Brazil's most comprehensive data protection legislation. It also observes the Marco Civil da Internet (Law 12.965/2014) and the Consumer Protection Code (Law 8.078/1990) as they apply to the handling of information from online service users.

Tinger777's core data processing principles are: a clear and legitimate purpose for every piece of data collected, necessity (we collect only what is needed to provide the service), full transparency with the user, adequate technical security, harm prevention, non-discrimination, and accountability for data processed.

For the purposes of the LGPD, the controller of personal data for tinger777 platform users is tinger777. The controller is the entity that makes decisions about data processing — what to collect, for what purpose, how long to retain it, and with whom to share it when applicable.

To exercise any right under this Policy or the LGPD, or to ask questions about how your personal data is handled, you can reach our privacy channel directly:

Tinger777 has appointed a Data Protection Officer (DPO) responsible for overseeing LGPD compliance and serving as the point of contact between the company, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD). DPO inquiries can be submitted via the privacy email address above.

Tinger777 collects different categories of data depending on how you interact with the platform. Below is a full breakdown of the types of information we may collect and the context in which each is needed:

3.1 Data you provide directly during registration:

• Full name as shown on official ID
• CPF (Cadastro de Pessoas Físicas)
• Date of birth
• Email address
• Mobile number
• Full residential address (ZIP code, street, city, state)
• Access password (stored in encrypted format only — never in plain text)

3.2 Data collected during identity verification (KYC):

• Copy of a government-issued ID (RG, CNH, or passport)
• Verification selfie
• Proof of address (when requested)

3.3 Financial and transaction data:

• Pix key used for deposits and withdrawals
• Credit or debit card data (stored exclusively via secure tokenization — the full card number is never held on our servers)
• History of deposits, withdrawals, and bets placed on the platform
• Bank or financial institution used

3.4 Usage and browsing data collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, session duration, and browsing patterns on the platform
• Most-visited sports and games
• Access times and frequency
• Cookie and similar technology data (detailed in section 9)

Every piece of data collected by tinger777 has a specific, legitimate purpose. We do not collect information that is not necessary to provide the service. The main data processing purposes on the platform are:

• Account operation: Create, maintain, and manage your tinger777 user account, including access authentication, password reset, and profile settings.
• Transaction processing: Process deposits via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED, as well as process withdrawals to your registered bank account or Pix key.
• Provision of betting services: Record sports bets, calculate and pay out winnings, manage live bets on football, UFC, e-sports, and other sports covered by tinger777.
• Identity verification and compliance: Confirm your identity (KYC), verify age eligibility (18+), comply with anti-money laundering obligations (AML/CFT), and respond to directives from competent authorities.
• Responsible gambling: Monitor usage patterns to identify behaviors that may indicate problem gambling, offer self-exclusion tools, and meet regulatory obligations related to responsible gambling.
• Customer support: Handle questions, complaints, and requests via live chat or email, and maintain interaction history for follow-up and quality improvement.
• Platform security: Detect and prevent fraud, unauthorized access, multiple-account use, and other activities that violate the Terms and Conditions or Brazilian law.
• Experience personalization: Display relevant content based on your preferences (favorite sports, most-visited games) to improve your tinger777 experience.
• Communications: Send notifications about your account, bet confirmations, security alerts, and — with your consent — information about platform promotions and news.

The LGPD requires that all personal data processing have a legal basis to justify it. tinger777 processes your data on the following grounds set out in Article 7 of Law 13.709/2018:

• Contract performance (art. 7, V): Most data processing is necessary for tinger777 to deliver the services you signed up for when creating your account — processing bets, executing withdrawals, authenticating logins, and operating the casino.
• Compliance with a legal or regulatory obligation (art. 7, II): Identity verification (KYC), transaction monitoring for anti-money laundering purposes, and the retention of certain records are obligations imposed by Brazilian law (Law 9.613/1998, Law 14.790/2023, and SPA regulations).
• Legitimate interest (art. 7, IX): We use browsing and platform behavior data to improve the user experience, detect fraud, and ensure system security — always proportionately and in respect of users' rights.
• Consent (art. 7, I): For marketing communications, ad personalization, and non-essential cookies, we request and rely on your explicit consent, which can be withdrawn at any time.
• Credit protection (art. 7, X): When required to assess risk in high-value financial transactions.

Tinger777 does not sell users' personal data. Full stop. Information sharing with third parties occurs only in the specific situations listed below, always with adequate data protection and, where applicable, under a contractual basis requiring the third party to uphold the same security standards as tinger777:

• Payment processors: To process deposits and withdrawals via Pix, boleto bancário, credit card, PicPay, Mercado Pago, and TED, we share the necessary financial data with the institutions and operators involved in each transaction. These processors are contractually required not to use your information for any purpose beyond processing the specific payment.
• Identity verification providers (KYC): To validate documents and selfies during identity verification, we use certified specialist partners. Data is transmitted in encrypted form and used exclusively for the verification process.
• Casino game providers: The Live Casino games, slots, and crash games available on tinger777 are provided by third-party suppliers. These suppliers receive only the technical data required to run the game session — they do not have access to your full profile, CPF, or financial data.
• Analytics and security services: We use data analytics and fraud detection services that may process browsing data in anonymized or pseudonymized form to improve platform security and user experience.
• Competent authorities: When required by law, court order, or a legitimate public authority request (such as the Receita Federal, COAF, Ministério da Fazenda, or SPA), tinger777 provides the requested information within the applicable legal limits.
• Corporate restructuring: In the event of a merger, acquisition, or restructuring of tinger777, user data may be transferred to the successor entity, which will be required to honor the terms of this Policy or notify users of any relevant changes.

Tinger777 retains your personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The criteria that determine retention periods are:

• Active account data: Retained for the full duration of the account and for up to 5 years after closure, in line with financial compliance requirements and betting legislation.
• Financial transaction records: Retained for a minimum of 5 years after the transaction, as required by Law 9.613/1998 (anti-money laundering) and Banco Central do Brasil regulations.
• Betting records: Betting history retained for up to 5 years for audit, dispute resolution, and regulatory compliance purposes.
• Identity verification data (KYC): Identification documents retained for up to 5 years after account closure, in accordance with regulatory obligations in the sector.
• Security and access logs: Access logs, IP addresses, and security events retained for up to 12 months for fraud investigation purposes and compliance with the Marco Civil da Internet.
• Marketing communications data: Retained until consent is withdrawn by the user. After withdrawal, the email is moved to a suppression list (opt-out) to ensure no further communications of that type are sent.

Once applicable retention periods expire, data is securely deleted or anonymized, making it impossible to identify the original data subject. Irreversible anonymization removes data from the scope of the LGPD, and the resulting data may be used for aggregated statistical platform analysis.

Tinger777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental or unlawful alteration, disclosure, or destruction. The main security measures in place include:

• 256-bit SSL/TLS Encryption: All communication between your device and tinger777's servers is encrypted using 256-bit SSL/TLS, the same standard used by Brazilian banks.
• Password encryption: User passwords are stored exclusively as salted hashes — never in plain text. Not even our own support team can view your password.
• Financial data tokenization: Credit and debit card numbers are tokenized by the payment processor before any storage. The full card number never passes through tinger777 servers.
• Two-factor authentication (2FA): Available and recommended for all tinger777 users, especially those with a history of frequent withdrawals.
• Internal access control: Only staff with a verified operational need can access user data, always through strong authentication and full audit logging.
• Ongoing monitoring: Intrusion detection systems and anomaly monitoring operate 24 hours a day to identify unauthorized access attempts and suspicious behavior.
• Encrypted backups: Data backups are performed regularly and stored in encrypted format in separate, secure locations.

In the event of a security incident that may pose a real risk to affected data subjects, tinger777 is committed to notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframes established by the LGPD — generally within 72 hours of becoming aware of the incident.

Tinger777 uses cookies and similar technologies to keep the platform running properly, improve the user experience, and understand how the service is used. Below we explain the types of cookies we use and how you can manage them:

• Essential cookies (required): Required for the platform to function. These include login session cookies, language preferences, and session security. Disabling these cookies would compromise platform functionality.
• Performance and analytics cookies: These collect information about how you use tinger777 — which pages you visit, which features you use most, and any errors encountered. This data is used in aggregate and anonymized form to improve the product. You can decline these cookies in the platform's privacy settings.
• Personalization cookies: These allow tinger777 to remember your preferences (favorite sports, display settings) to personalize your experience. They can be disabled without affecting core functionality.
• Marketing cookies (with consent only): Used to display relevant tinger777 communications on other digital platforms. Enabled only with your explicit consent, which can be revoked at any time.

You can manage your cookie preferences at any time through the privacy settings panel in your tinger777 account, or through your browser settings. Rejecting non-essential cookies does not affect your ability to place bets, make deposits, or withdraw via Pix.

The LGPD guarantees you, as a data subject, a set of rights that can be exercised at any time with tinger777. See below what those rights are and how to exercise them:

It is important to note that certain rights, such as data deletion, are not absolute when processing is required to fulfill a legal obligation (such as retaining financial records for the period required by Brazilian law) or to perform the tinger777 service contract. In such cases, tinger777 will inform the data subject of the reasons why the request cannot be fully granted.

Tinger777 services are strictly intended for individuals aged 18 and over. The platform does not knowingly collect data from users under 18. Registration requires age confirmation and a CPF, which is verified in accordance with the KYC procedures in place.

If tinger777 identifies that data from a person under 18 has been collected — whether due to incorrect information provided during registration or by any other means — the data will be deleted immediately and the account will be closed, without prejudice to any applicable legal measures. Parents or guardians who discover that a minor has used the platform should contact us immediately at privacidade@tinger777.com so that the necessary steps can be taken.

In certain operational situations, personal data of tinger777 users may be processed or stored on servers located outside Brazil — for example, when using cloud computing services from international providers or when processing live casino games supplied by foreign operators.

When this occurs, tinger777 ensures that the international transfer is carried out in compliance with the LGPD, using one of the following safeguards:

• Transfer to countries with an adequate level of protection recognized by the ANPD.
• Standard contractual clauses that require the recipient to maintain data protection standards equivalent to those of the LGPD.
• Certifications or best-practice seals recognized by the data protection industry.

Sensitive financial data (CPF, full banking details) is preferably processed and stored on servers located in Brazil, in compliance with Banco Central do Brasil regulations and applicable payment industry rules.

Tinger777 reserves the right to update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian law, or improvements to our security processes.

Users with an active account will be notified of significant changes by email and/or in-platform notification, with reasonable advance notice before the changes take effect. Changes that expand the scope of data processing or materially affect data subjects' rights will be communicated at least 30 days in advance.

The most current version of this Policy will always be available on this page, with the date of the last update shown at the top of the document. We recommend reviewing this document periodically to stay informed about how tinger777 protects your information.

To exercise any right set out in this Policy, ask questions about how your personal data is handled, or submit a privacy-related complaint, you can reach tinger777 through the following channels:

Tinger777 takes all privacy requests seriously and is committed to responding within the deadlines set by the LGPD. If you do not receive a response within the expected timeframe, please follow up via live chat to track your request.