8888pg Privacy Policy – Protecting Your Data

For the purposes of the General Data Protection Law (LGPD – Law No. 13.709/2018), the 8888pg acts as the controller of personal data collected through the platform available at 8888pg.best. 8888pg is a Sports Betting and online casino platform built for the Brazilian market, with a focus on football (Brasileirão Série A, Copa do Brasil, Libertadores), UFC, basketball (NBB), volleyball, e-sports, slots, crash games, and Live Casino.

All privacy-related inquiries and requests regarding personal data processing can be submitted through our official support channel: suporte@8888pg.best, available 24 hours a day with support in Brazilian Portuguese. 8888pg's Data Protection Officer (DPO) can also be reached at the same address, with the subject line "DPO – Privacy".

8888pg collects personal data at different points during your interaction with the platform. Below are the data categories and the contexts in which they are collected:

2.1 Registration Data

When you create an account with 8888pg, we collect:

• Full name;
• CPF (Cadastro de Pessoa Física);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address (including postal code).

2.2 Identity Verification Data (KYC)

For withdrawals above R$ 2,000.00 and in other situations required by anti-money-laundering regulations, we may request:

• Photo or scan of a government-issued ID (RG, CNH, or passport);
• Proof of address dated within the last 3 months;
• Selfie of the user holding their identity document.

2.3 Financial Data

To process deposits and withdrawals, we collect payment information such as your registered Pix key, credit or debit card details (processed in encrypted form by certified payment partners), and your transaction history on the platform.

2.4 Platform Usage Data

While using 8888pg, we automatically collect technical and behavioral data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser;
• Pages visited, session duration, and browsing sequence;
• Betting history, games accessed, and interactions with promotions;
• Access logs with date, time, and action performed.

2.5 Communication Data

When you contact 8888pg support via live chat or email, the content of those conversations is stored for quality assurance, staff training, and dispute resolution purposes.

8888pg uses your personal data exclusively for the following purposes, each with a legal basis identified under the LGPD:

• Account creation and management: identifying, authenticating, and maintaining your profile on the platform;
• Financial transaction processing: deposits via Pix (Nubank, Itaú, Bradesco, Banco do Brasil, PicPay, Mercado Pago, and others), bank slip (boleto bancário), credit/debit card, and TED bank transfer; withdrawal processing;
• Service delivery: operation of the Sports Betting, Live Casino, slots, crash games, blackjack, and all other available game sections;
• Fraud and money laundering prevention: behavioral analysis to identify suspicious activity, in compliance with Law No. 9,613/1998;
• Customer support: registration and resolution of requests, complaints, and disputes submitted to support;
• Account communications: notifications about transactions, changes to terms, promotions, and platform updates (with the option to unsubscribe from non-essential communications);
• Compliance with legal obligations: compliance with requests from competent judicial, tax, and regulatory authorities;
• Continuous platform improvement: statistical usage analysis (in aggregated and anonymized form) to identify product improvement opportunities.

8888pg does not use your data for purposes beyond those listed above without notifying you in advance and obtaining the necessary consent.

Every data processing activity carried out by 8888pg is grounded in at least one of the legal bases set out in Article 7 of the LGPD (Law No. 13.709/2018):

• Contract performance (art. 7, V): the processing of registration, financial, and usage data is necessary to provide the services you contracted when creating an account and placing bets or playing on 8888pg;
• Compliance with a legal obligation (art. 7, II): identification data and financial transactions are processed to comply with anti-money laundering legislation, tax law, and betting sector regulations;
• Legitimate interest (art. 7, IX): usage and communication data is processed for fraud prevention, platform security, and service improvement, provided that this interest does not override your fundamental rights;
• Consent (Art. 7, I): For marketing communications and non-essential cookies, 8888pg requires express consent, which can be withdrawn at any time.

8888pg does not sell personal data of users to third parties. Information is shared only when strictly necessary for service delivery or as required by law, in the following situations:

• Payment providers: financial data is shared with Pix operators, credit card processors, and other payment partners solely to process transactions requested by the user. All such partners are contractually required to protect data in accordance with the LGPD;
• Game providers: to offer slots, live casino, crash games, and blackjack, we share the minimum necessary data with partners such as Evolution Gaming, Pragmatic Play, PG Soft, and others. This data is used solely for game operation and fraud prevention;
• Sports data providers: for Sports Betting on Brasileirão, UFC, NBB, and other leagues, we use services from providers such as Sportradar to feed real-time odds — without sharing users' personal data with those providers;
• Legal authorities: when required by a court order, tax authority, or competent regulatory body, 8888pg discloses the necessary data as required by Brazilian law, including Law No. 9,613/1998 (money laundering) and the Marco Civil da Internet;
• Auditors and compliance: independent audit firms may access aggregated and anonymized data for compliance verification purposes — never personally identifiable data.

All third parties with access to 8888pg users' personal data are bound by contracts requiring confidentiality and full compliance with the LGPD.

8888pg retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum retention periods required by Brazilian law:

• Registration and identity data: retained for as long as the account remains active. After account closure, this data is kept for a minimum of 5 years for audit purposes and compliance with legal obligations;
• Financial transaction history: retained for a minimum of 5 years as required by tax and anti-money laundering legislation (Law No. 9.613/1998);
• Access logs: retained for 6 months as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014), and may be kept for a longer period if there is an ongoing investigation;
• Support conversations: retained for up to 2 years after the ticket is closed for dispute resolution purposes;
• Usage and browsing data: retained for up to 12 months and then anonymized for statistical purposes.

Once retention periods have elapsed, data is securely deleted or anonymized so that the data subject can no longer be identified.

Protecting your data is an absolute priority at 8888pg. We apply the following technical and organizational measures to ensure information security:

7.1 Technical Measures

• SSL/TLS encryption on all connections between your device and 8888pg's servers;
• Passwords stored using hashing and salt (never stored in plain text);
• Sensitive financial data encrypted at rest using AES-256 standards;
• Intrusion detection and prevention systems (IDS/IPS) under continuous monitoring;
• Two-factor authentication (2FA) available for all users who wish to enable it;
• Penetration testing and security audits conducted periodically by a specialized third-party firm.

7.2 Organizational Measures

• Access to personal data is restricted to employees who require the information to perform their duties (principle of least privilege);
• Mandatory information security and LGPD training for all 8888pg staff;
• Internal security incident management policy, including a procedure for notifying the ANPD and affected users in the event of a data breach, as required by the LGPD.

Despite all measures in place, no security system is completely infallible. We recommend using strong, unique passwords for your 8888pg account and enabling two-factor authentication for added protection.

8888pg uses cookies and similar technologies to ensure the platform works correctly and to improve your experience. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — authentication, active session maintenance, and security. They cannot be disabled without compromising the use of the service;
• Performance/analytics cookies: collect data on how you use the platform (pages visited, session time, errors encountered) in an aggregated and anonymized form to help us improve the service. They can be disabled without affecting functionality;
• Functional cookies: remember your preferences (language, interface settings) to personalize your experience. These can be disabled;
• Marketing cookies: used to personalize communications about 8888pg promotions based on your browsing behavior. These require express consent and can be disabled at any time.

You can manage your cookie preferences in your account dashboard under the "Privacy & Cookies" section. You can also configure your browser to block or delete cookies, though this may affect the functionality of certain parts of the platform.

The LGPD grants you, as a data subject, the following rights regarding your personal information held by 8888pg:

• Access (art. 18, II): request confirmation that your data is being processed and obtain a full copy of the information we hold about you;
• Correction (Art. 18, III): request the correction of incomplete, inaccurate, or outdated data — for example, updating your address, email, or phone number;
• Anonymization, blocking, or deletion (art. 18, IV): request that unnecessary data or data processed without a legal basis be anonymized, blocked, or deleted;
• Portability (art. 18, V): request your data in a structured, interoperable format for transfer to another service provider;
• Withdrawal of consent (art. 18, IX): withdraw consent given for processing based on this legal basis — such as receiving marketing emails — at any time;
• Right to Object (Art. 18, II combined with Art. 20): object to processing based on legitimate interest when there are grounds to do so;
• Review of automated decisions (Art. 20): request human review of decisions made exclusively by algorithms that affect your interests.

To exercise any of these rights, contact us via 24h live chat or by email at suporte@8888pg.best with the subject line "LGPD Rights – [your name]". 8888pg has up to 15 business days to respond to the request. For more complex cases, this deadline may be extended with justification.

If your request is not resolved to your satisfaction, you have the right to file a complaint with the National Data Protection Authority (ANPD), the federal authority responsible for overseeing compliance with the LGPD in Brazil.

8888pg is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. Account registration requires a valid CPF and a declaration of legal age — both verified during the sign-up process and the identity verification (KYC) stage.

If we determine that data from a person under 18 was collected by mistake — for example, through the use of someone else's document — the account will be closed immediately, the data will be deleted from our systems as soon as possible, and the case may be reported to the relevant authorities.

If you suspect that someone under 18 is using the platform, contact 8888pg support immediately via live chat or at suporte@8888pg.best.

To provide certain services — such as live casino games from international providers (Evolution Gaming, Pragmatic Play, PG Soft) — minimal session data may need to be transferred to servers located outside Brazil. When this occurs, 8888pg ensures that:

• Data transfers occur only to countries or organizations that provide a level of data protection compatible with the LGPD;
• Data processing agreements with standard protection clauses are signed with all international partners;
• Data transferred is limited to the minimum necessary for the specific service — never complete registration or financial data.

8888pg's core operations — including registration data, financial data, and betting history — are stored on servers located in Brazil or on infrastructure with equivalent protections, in accordance with Article 33 of the LGPD.

8888pg may update this Privacy Policy periodically to reflect changes in data practices, legislation, or the services offered. Whenever a relevant change affecting your rights is made, you will be notified at least 7 days in advance via:

• Email sent to the address registered on your account;
• Prominent notice on the account dashboard at next login;
• This page will be updated with the new effective date shown in the header.

We recommend reviewing this policy periodically. The current version will always be available on this page, with the date of the last update clearly indicated. Continued use of the platform after any changes take effect constitutes acceptance of the updated version.

To exercise your rights as a data subject, clarify questions about this policy, or report any privacy-related incident, you can reach 8888pg through the following channels: