Privacy Policy of SW77 — Your Data Protected in Brazil

SW77 collects only the data necessary to deliver the contracted services. Collection falls into three main categories:

Registration and identification data:

• Full legal name, as it appears on an official ID;
• CPF (Cadastro de Pessoa Física) — required for identity verification, anti-money laundering compliance, and linking your Pix withdrawal;
• Date of birth — to verify legal age (18+, required by law);
• Active email address — for operational and security communications;
• Mobile number — for two-factor authentication (when enabled) and support;
• Full residential address — requested during the KYC verification process for accounts with withdrawal volumes above R$ 500.00.

Financial and transaction data:

• Pix key linked to the account holder's CPF — used exclusively to process withdrawals;
• History of deposits and withdrawals made on the platform — retained for the legally required period under Brazilian regulations;
• Credit or debit card data, when used as a deposit method — processed through a certified payment gateway, with no full card number stored on SW77 servers.

Platform usage and behavioral data:

• Game history, bets, and platform sessions — used to personalize your experience and detect responsible gambling patterns;
• IP address and device data — used for security, fraud prevention, and duplicate account detection;
• Browsing data collected via cookies — described in detail in section 6 of this policy;
• Records of support interactions — retained for service quality and dispute resolution purposes.

Every piece of data collected by sw77 has a specific purpose. The platform does not process data for purposes incompatible with those described below. The legal bases used are those set out in the LGPD: contract performance, legal obligation, legitimate interest, and explicit consent, as applicable to each activity.

Account operation and service delivery: Name, CPF, email, and date of birth are required to create and maintain your sw77 account, process Pix deposits and withdrawals, verify eligibility (18 and over), apply promotions and bonuses, and provide personalized support. The legal basis is contract performance — without this data, the services simply cannot be provided.

Compliance and legal obligations: sw77 is required by law to maintain records of financial transactions for anti-money laundering purposes (in accordance with Law No. 9.613/1998 and COAF regulations), tax compliance, and to respond to requests from competent authorities. Processing for these purposes is based on the legal ground of compliance with a legal obligation and does not require your consent.

Security and fraud prevention: IP data, device information, and behavioral patterns are used to detect unauthorized access, fraud attempts, duplicate account creation, and the use of bots or prohibited automation. This activity is based on legitimate interest — it is essential to protect both the platform and its players.

Personalization & experience improvement: gameplay and browsing behavior data is used to personalize the game lobby shown to you, recommend relevant promotions, and identify platform features that need improvement. This activity is based on the legal ground of legitimate interest, and you may request deletion of your behavioral data at any time, as described in section 4.

Communications: Your email is used to send transaction confirmations, security alerts, important policy updates, and, with your consent, promotional communications. Consent to marketing communications may be withdrawn at any time by clicking "unsubscribe" in any promotional email or by requesting it through the Portuguese-language support chat.

Responsible gambling: betting history and usage patterns are monitored to identify signs that may indicate problematic gambling behavior. When such patterns are detected, our responsible gambling team may proactively reach out to offer support. This activity is based on the legal ground of legitimate interest and is fundamental to player protection.

Sw77 does not sell personal data. Sharing with third parties occurs only in the situations below, all with an identified legal basis and contractual data protection guarantees:

Service providers (operators): SW77 works with technology partners to deliver specific services — payment processors for Pix, card, and boleto transactions; game providers that supply slots, live casino, and crash game titles; cloud infrastructure for server hosting; and behavioral analytics tools. These partners act as data operators, receive only the data strictly necessary to perform the contracted service, and are contractually required to handle that data in compliance with the LGPD and SW77's instructions.

Legal obligation compliance: sw77 may be required by law or court order to share data with competent authorities — such as the Receita Federal, COAF, Banco Central, or public security authorities. In such cases, data is provided strictly within the limits of what has been legally requested, without overreach.

Identity verification (KYC): for accounts that reach certain transaction volumes, SW77 uses specialized identity verification services that cross-reference registration data against Brazilian public databases to confirm the validity of the CPF and documents provided. This process is required by anti-money laundering regulations.

International transfers: some of SW77's service providers may be located outside Brazil. When that is the case, SW77 ensures that adequate data protection mechanisms are in place — such as standard contractual clauses or adequacy certifications — guaranteeing users the same rights provided under the LGPD, regardless of where their data is processed.

The LGPD grants you, as the owner of your personal data, a set of rights that can be exercised at any time. sw77 responds to such requests within 15 business days, via the Portuguese-language support chat or by email at suporte@sw77.best.

• Access: you have the right to request a copy of all personal data SW77 holds about you, including registration details, transaction history, and usage behavior records;
• Correction: if any information is outdated or incorrect — such as your email address or phone number — you can request a correction at any time, directly through your account dashboard or via support;
• Portability: you have the right to receive your data in a structured format for transfer to another platform or operator, where technically feasible and within regulatory limits;
• Deletion: You may request the deletion of your personal data. Data that sw77 is legally required to retain (such as financial transaction records for 5 years) cannot be deleted before that period ends, but all other data will be erased;
• Consent withdrawal: where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time, with no impact on your access to the platform's other services;
• Objection: You may object to data processing based on legitimate interest, such as the personalization of game recommendations. sw77 will review the request and communicate the outcome within the applicable timeframe;
• Sharing information: You have the right to know which third parties sw77 shares your data with — this information is detailed in section 3 of this policy and can be further clarified upon request to our support team.

To exercise any of these rights, reach our Portuguese-language live chat inside the SW77 platform or send an email to suporte@sw77.best with the subject line "LGPD Rights — [your name and CPF]". Your request will be handled as a priority and responded to within the legally required timeframe.

SW77 implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or improper destruction. Data security is not a box to check — it is an ongoing practice involving technology, processes, and people.

Technical measures in place:

• SSL/TLS encryption on all communications between the user's device and SW77 servers;
• Passwords stored using salted cryptographic hashing — SW77 never stores passwords in plain text;
• Two-factor authentication (2FA) available for all players — we strongly recommend enabling it;
• Continuous access monitoring and anomalous behavior detection across systems;
• Network segmentation and tiered access controls — staff can only access the data required for their role;
• Regular data backups stored in a separate, secure environment.

Data retention and deletion: SW77 retains personal data only for as long as necessary to fulfill the purpose for which it was collected and to meet applicable legal obligations. Financial transaction data is kept for 5 years, as required by tax and anti-money laundering compliance rules. Registration data for closed accounts is retained for the same period for audit purposes. Once the retention period expires, data is deleted securely and irreversibly, with no possibility of recovery.

Incident response: SW77 maintains a security incident response plan that includes notifying affected users and the ANPD within the deadlines set by the LGPD. In the event of an incident posing real risk to users, communication is sent by email in plain, direct language — without downplaying what occurred — specifying what was compromised, when it happened, and what steps were taken to mitigate the impact.

Sw77 uses cookies and similar tracking technologies to improve the platform experience, ensure session security, and, with your consent, personalize content and recommendations. Below we describe the types of cookies used and how you can manage them.

Essential cookies (cannot be disabled): required for the platform to function at the most basic level — keeping you logged in, authentication, fraud prevention, and storing your language preferences. Without these cookies, the platform simply doesn't work. They do not collect data for marketing purposes.

Performance and analytics cookies: collect information about how you use the platform — which pages you visit, how long you spend in each section, and any errors you encounter. This data is used to improve the experience for all users. It is anonymized before any aggregate analysis. These cookies can be disabled without affecting the platform's core functionality.

Personalization cookies: allow SW77 to remember your preferences — such as favorite games, betting settings, and catalog filters. They improve your individual experience without sharing data with third parties. They can be disabled in your account's privacy settings.

How to manage cookies: you can manage your cookie preferences directly in your SW77 account settings, or through your browser's privacy settings. Blocking essential cookies in your browser may prevent the platform from loading correctly. Disabling analytics and personalization cookies does not affect your ability to play or make transactions.

By continuing to browse sw77 after seeing the cookie notice, you consent to the use of non-essential cookies as described above. You may withdraw this consent at any time through your account settings panel.

Sw77 is an adult entertainment platform intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors. By creating an account, the user confirms they are at least 18 years old, and sw77 performs age verification during the registration process and KYC.

If SW77 becomes aware that data from a minor was inadvertently collected, that data will be deleted immediately and the account closed. If you believe a minor has created an account on the platform, please contact us via the Portuguese-language support chat or send an email to suporte@sw77.best — the matter will be treated as a priority.

Parents and guardians can use parental control tools on shared devices to block access to Sports Betting and online casino platforms. sw77's support team can provide guidance on the options available across the major operating systems and browsers used in Brazil.

This Privacy Policy may be updated periodically to reflect changes in legislation, in the services offered by SW77, or in data processing practices. Every material update is communicated by email to registered players at least 15 days before it takes effect.

The most current version of this policy is always the one published on this page, with the update date shown at the top. We recommend reading it periodically to stay informed about how your data is handled.

Data Protection Officer (DPO): sw77 has appointed a Data Protection Officer responsible for ensuring internal LGPD compliance and serving as the point of contact for data subject requests. You can reach the DPO at suporte@sw77.best, using the subject line "DPO — Data Protection".

If you believe your rights as a data subject have not been adequately addressed by SW77, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD) through the official channels available on gov.br.