Oxe777 Privacy Policy – Your Data Protected

1. Who We Are – The Data Controller

A oxe777 is the data controller for all personal data processed under this Privacy Policy. As data controller, oxe777 is responsible for determining the purposes and means of processing personal data collected from players and visitors on the platform, in compliance with Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018).

For any questions regarding the processing of personal data, please contact our team at suporte@oxe777.best. Our data protection team responds to data subject requests within 15 calendar days, as required by the LGPD.

2. Personal Data We Collect

Oxe777 only collects the personal data necessary to provide its services properly, fulfill legal obligations, and maintain platform security. The data collected may be classified into the following categories:

2.1 Identification data

• Full name as it appears on your official government-issued ID;
• CPF (Cadastro de Pessoas Físicas);
• Date of birth;
• Gender (optional, for personalization);
• Government-issued ID number (RG, CNH, or passport), requested during the KYC verification process.

2.2 Contact data

• Email address;
• Mobile phone number with Brazilian area code (DDD);
• Full residential address (requested during KYC verification for withdrawals above R$ 500.00).

2.3 Financial and transactional data

• Registered Pix key (CPF, email, phone number, or random key);
• History of deposits and withdrawals made on the platform;
• Payment method used (Pix, boleto bancário, PicPay, Mercado Pago, credit/debit card, TED);
• Partial credit or debit card details (last 4 digits only — never the full card number).

2.4 Platform behavior and usage data

• Complete betting history (type, amount, odds, outcome);
• Live Casino sessions, slots, poker, and other games;
• Session duration and pages visited within the platform;
• Gaming preferences, sports, and tournaments followed.

2.5 Technical Data

• IP address at the time of access;
• Device type and version, and operating system;
• Browser used (version and language);
• Device identifiers (Device ID) for fraud prevention;
• Approximate location data derived from IP address (no GPS data is collected).

3. How We Collect Your Data

Oxe777 collects data through the following means:

• Directly from the player: registration form completion, KYC verification process, support interactions, and account settings;
• Automatically by the platform: when browsing the website or app, technical and behavioral data is collected through cookies, server logs, and similar technologies;
• Through financial transactions: when making deposits via Pix, PicPay, Mercado Pago, boleto, credit/debit card, or TED, transaction data is captured for processing and accounting records;
• From authorized third-party sources: for identity verification and fraud prevention purposes, oxe777 may consult credit bureaus or public databases, always on a specific legal basis.

4. How We Use Your Data

The personal data collected by oxe777 is used for the following purposes:

5. Legal Bases for Processing (LGPD)

All personal data processing carried out by oxe777 has a legal basis under the LGPD. The main bases used are:

• Contract performance (art. 7º, V): processing required to deliver the services contracted by the player upon account creation — including bet processing, deposits, withdrawals, and support;
• Compliance with a legal obligation (art. 7º, II): identity verification (KYC), anti-money laundering compliance, and reporting to regulatory authorities in accordance with Brazilian law;
• Legitimate interest (art. 7, IX): fraud prevention, platform security, monitoring of anomalous betting patterns, and maintaining game integrity;
• Consent (art. 7º, I): sending marketing communications by email and SMS about promotions, new features, and bonuses. Consent can be withdrawn at any time through your account panel or by emailing suporte@oxe777.best.

6. Sharing Data with Third Parties

Oxe777 does not sell, rent, or share personal data of players to third parties for commercial or advertising purposes. Data sharing occurs only in the following situations, each with a defined legal basis:

• Payment processors: data strictly necessary to process transactions via Pix (Banco Central), PicPay, Mercado Pago, card operators, and partner banks. Each processor has a data protection agreement signed with oxe777;
• Identity verification providers: CPF and identity document data for validation against authorized databases during the KYC process, used solely to verify the account holder's identity;
• Regulatory and legal authorities: in response to court orders, requests from the Receita Federal, COAF, or other competent authorities, as required by law;
• Technology and infrastructure providers: cloud hosting providers, security systems, and analytics tools, all bound by data processing agreements and contractual confidentiality obligations;
• Casino and slots game providers: for the operation of live tables and slots, the minimum necessary data (anonymized session ID) is shared with game content providers, with no exposure of personally identifiable information.

7. International Data Transfers

Some of the technology and infrastructure providers used by oxe777 may be located outside Brazil. When this occurs, international transfers of personal data are carried out only to countries with an adequate level of protection recognized by the ANPD, or through appropriate contractual safeguards — such as Standard Contractual Clauses or internationally recognized certifications — in accordance with Article 33 of the LGPD.

In all cases of international data transfer, players' personal data remains protected under the same standards applied in Brazil, and international service providers are contractually prohibited from using that data for any purpose other than delivering the specific service contracted by oxe777.

8. Data Retention and Deletion

Oxe777 retains players' personal data for as long as necessary for each specific purpose:

• Active account data: retained for the entire period the account remains active;
• Financial and transaction data: retained for a minimum of 5 years after account closure, as required by tax and anti-money laundering legislation;
• KYC verification data: retained for a minimum of 5 years after account closure;
• Betting history data: retained for 5 years for audit, dispute resolution, and regulatory compliance purposes;
• Technical access logs: retained for up to 6 months, unless required for security incident investigations.

After the mandatory retention period, data is securely deleted or anonymized. Deletion requests from data subjects are handled within the limits set by law — data whose retention is legally required cannot be deleted before the legal deadline, but the player will be informed which data must be kept and why.

9. Information Security

Oxe777 applies technical and organizational measures to protect players' personal data against unauthorized access, alteration, disclosure, or destruction. The main safeguards in place include:

• 256-bit SSL/TLS encryption on all communications between the client (browser or app) and the platform's servers;
• Encryption at rest for data stored in internal databases;
• Multi-factor authentication (MFA) for internal team access to sensitive systems;
• Role-based access controls (RBAC) — each team member has access only to the data required for their specific role;
• Continuous access monitoring with automated alerts for suspicious patterns;
• Regular penetration testing and vulnerability assessments;
• Encrypted backups with periodic integrity checks;
• Internal incident management policy with clear response and notification procedures.

10. Cookies and Similar Technologies

Oxe777 uses cookies and similar technologies to ensure the platform works correctly, enhance the user experience, and analyze site performance. The types of cookies used are:

• Essential cookies: required for the platform's basic functionality — authentication, session management, and security. They cannot be disabled without affecting the account's operation;
• Performance cookies: collect anonymous data on how players use the platform — pages visited, session duration, errors encountered — for continuous improvement purposes;
• Functionality cookies: remember player preferences — such as language, favorite odds, and followed sports — to personalize the experience without needing to reconfigure settings each session;
• Analytics cookies: used to understand platform usage patterns in an aggregated, anonymous way, with no individual player identification.

You can manage your cookie preferences through your browser or app settings. Disabling non-essential cookies does not affect account access or transaction processing.

11. Your Rights as a Data Subject

The LGPD grants you, as the data subject, the following rights regarding your personal data processed by oxe777:

To exercise any of these rights, submit a request by email to suporte@oxe777.best identifying yourself with the full name and CPF registered on the account. The response deadline is up to 15 calendar days from the date the request is received. If it is not possible to fully comply with the request (for example, when retention is required by law), oxe777 will clearly explain the reasons in detail.

12. Minors' Data

The oxe777 platform is strictly prohibited for individuals under 18 years of age. oxe777 does not intentionally collect data from minors. If we identify that an account was created by someone under 18, it will be closed immediately, the data will be deleted within the minimum legal timeframe, and any deposited balance will be refunded after verification of the legal guardian's identity.

If you believe a minor may have created an account on oxe777, please contact us immediately at suporte@oxe777.best. Parents or guardians who identify a minor using the platform can request account closure and data deletion through the same channel, with no additional justification required.

13. Marketing Communications

With your express consent at registration or at any time thereafter, oxe777 may send you communications about:

• Available promotions and bonuses — including weekly cashback, free bets, and referral bonuses;
• New features and updates added to the platform;
• Major sporting events — Brasileirão, Copa do Brasil, Libertadores, UFC, CBLOL, and more;
• Poker tournaments and competitions with guaranteed prize pools in BRL.

These communications are sent by email and/or SMS to the contact registered on your account. You can opt out at any time by clicking the unsubscribe link in any communication, adjusting your notification settings in the account dashboard, or emailing suporte@oxe777.best with the subject line "Cancel marketing". Opt-out requests are processed within 48 hours and do not affect essential operational communications, such as transaction confirmations and security alerts.

14. Changes to This Privacy Policy

Oxe777 may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. Material changes — those that significantly affect data subjects' rights or processing purposes — will be communicated by email at least 10 days before taking effect.

Minor changes for clarity, formatting, or to reflect legislative updates with no direct impact on data subject rights may be made without prior notice. The date of the last update is always shown at the top of this page. Continued use of the platform after the new terms take effect constitutes acceptance of the changes.

15. Contact, DPO, and ANPD

For any questions about the processing of your personal data, the exercise of your data subject rights, or this Privacy Policy, please contact oxe777 through the following channels:

• Email: suporte@oxe777.best (subject line: "Data Privacy – LGPD");
• Live chat: available directly on the platform, 24 hours a day;
• WhatsApp: number available in your account support panel.

If you believe your rights as a data subject have not been adequately addressed by oxe777, you have the right to file a complaint with the National Data Protection Authority (ANPD), which is the Brazilian regulatory body responsible for overseeing LGPD compliance. Information on how to contact the ANPD is available on the authority's official website.