Pg668 Privacy Policy – Data Protection

1Data We Collect

The pg668 collects personal information necessary to provide Sports Betting and online casino services in Brazil. The data collected falls into the following categories:

Data provided directly by you

• Registration data: full name, CPF, date of birth, email address, mobile number, and residential address including postal code.
• Identity documents: National ID, driver's license, or passport, provided during the identity verification (KYC) process required by industry regulations.
• Payment details: Pix key, bank account number (for wire transfers) and, where applicable, partial credit or debit card details. The pg668 does not store your full card number — that data is processed directly by the certified payment gateway.
• Support communications: chat history from live chat sessions, emails sent to the support team of the pg668 and any voice call recordings, where available.

Automatically collected data

• Platform usage data: pages visited, bets placed, games accessed, login times, and session duration.
• Technical data: IP address, browser type and version, operating system, device identifier (for the mobile app), and screen resolution.
• Approximate location data: inferred from the IP address for the purpose of verifying geographic eligibility to use the platform.
• Cookies and session identifiers: as described in section 5 of this Policy.

2How We Use Your Data

The pg668 uses collected personal data solely for the purposes described below. Data is not used for purposes incompatible with those listed here without the data subject's renewed consent:

• Service provision: create and manage your account on the pg668, process bets, deposits, and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer.
• Identity verification (KYC): confirm that you are who you say you are, that you are 18 years of age or older, and that you are a resident of Brazil — all mandatory requirements for using the platform.
• Fraud prevention and anti-money laundering: monitor usage patterns and financial transactions to identify suspicious activity, in compliance with the legal obligations of the pg668 under Brazilian law.
• Operational communications: send bet confirmations, withdrawal notifications, security alerts, and important updates about your account on the pg668.
• Marketing communications: send promotions, bonuses, and platform news — only with your express consent, which can be withdrawn at any time.
• Platform improvement: analyze usage data in aggregated and anonymized form to improve the Sports Betting, Live Casino, slots, and other services offered by the pg668.
• Compliance with legal obligations: comply with requests from Brazilian regulatory and tax authorities, when legally required.
• Customer support: keep a record of support interactions for efficient resolution of questions and complaints through the 24h chat of the pg668.

3Legal Basis for Data Processing

As required by the LGPD, each data processing operation carried out by the pg668 is grounded in a specific legal basis:

• Contract performance (art. 7, V, LGPD): processing of registration, KYC, and payment data is necessary for the pg668 to provide the contracted service. Without this data, it is not possible to create your account, process bets, or carry out withdrawals.
• Legal obligation (art. 7, II, LGPD): data related to anti-money laundering, user identification, and financial record retention is processed to fulfill obligations imposed by applicable Brazilian legislation governing the sector.
• Legitimate interest (art. 7º, IX, LGPD): platform usage and technical data are processed on the basis of the legitimate interests of the pg668 in ensuring the security and integrity of the platform, preventing fraud, and improving the user experience — always within reasonable limits and with appropriate safeguards.
• Consent (art. 7, I, LGPD): marketing communications and the use of non-essential cookies are based on your explicit consent, which can be withdrawn at any time without affecting your use of the platform.

4Sharing Data with Third Parties

The pg668 does not sell, rent, or transfer users' personal data to third parties for commercial or advertising purposes. Sharing occurs only in the situations below, strictly limited to what is necessary for each purpose:

Payment processing partners

Payment data is shared with the gateways and financial institutions required to process deposits and withdrawals in BRL — including banking systems for Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago. These partners operate as data processors for the pg668 and are bound by confidentiality and data protection agreements.

Technology and infrastructure providers

Cloud hosting services, identity verification (KYC) providers, customer support platforms, and analytics vendors operate with restricted access to the personal data of pg668, solely for the contracted functions, and are subject to agreements that impose obligations equivalent to those in this Policy.

Regulatory and judicial authorities

The pg668 may disclose personal data when legally required by court order or request from a competent Brazilian regulatory or supervisory authority. In such situations, the pg668 will only disclose the data specifically requested and, where permitted, will notify the user about the request.

5Cookies and Tracking Technologies

The pg668 uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and — with your consent — personalize communications. See the types of cookies used below:

Essential cookies

Required for the platform to function properly. These include session authentication, security, and basic interface preference cookies. They cannot be disabled without affecting the functionality of the pg668.

Performance and analytics cookies

Allow the pg668 understand how users navigate the platform — which pages are visited most, where usability issues occur, average session duration, and other indicators that guide service improvements. Data collected by these cookies is processed in aggregate and anonymized form.

Preference cookies

Store user preferences such as preferred language, notification settings, and interface preferences in the pg668, so you do not have to reconfigure these preferences every time you log in.

Cookie management

By accessing the pg668 for the first time, you will see a cookie notice with options to accept all or customize your preferences. You can also manage cookies at any time through your browser or app settings. Disabling non-essential cookies does not prevent you from using the platform, but may affect personalization features.

6Data Security

The pg668 adopts appropriate technical and organizational measures to protect users' personal data against unauthorized access, accidental loss, alteration, improper disclosure, or destruction. Key security measures in place include:

• TLS encryption for all communication between the user's device and the servers of the pg668.
• Sensitive data stored in environments with role-based access controls, restricted to team members with a justified operational need.
• Two-factor authentication (2FA) available and recommended for all accounts registered with pg668.
• Continuous monitoring for suspicious access attempts and automatic blocking after repeated failed login attempts.
• Periodic security audits conducted by an internal team and, where applicable, by external specialists.
• Internal data protection training program for all staff who have access to personal information of users of the pg668.

In the event of a security incident that could result in risk or harm to data subjects, the pg668 will notify the National Data Protection Authority (ANPD) and, where applicable, the affected data subjects themselves, within the timeframes required by the LGPD.

7Data Retention and Deletion

The pg668 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, in compliance with the minimum retention periods established by applicable Brazilian law:

• Registration and KYC data: retained for as long as the account remains active and for up to 5 years after closure, in compliance with anti-money laundering requirements and financial sector regulations in Brazil.
• Financial transaction records: deposits and withdrawals in BRL are retained for a minimum of 5 years from the date of the transaction, in accordance with Brazilian tax and regulatory obligations.
• Betting Records: betting history on the pg668 is retained for up to 5 years for dispute resolution and regulatory audit purposes.
• Support communication data: support history retained for up to 2 years after the case is closed.
• Marketing data and non-essential cookies: retained for as long as consent remains active. After consent is withdrawn, data is deleted or anonymized within 30 days.

Once the applicable retention periods have expired, data is securely deleted or anonymized in a way that prevents re-identification of the data subject. Deletion requests submitted before the minimum regulatory retention period may be partially fulfilled, retaining only records whose storage is legally required.

8Your Rights as a Data Subject

The LGPD grants you, as the data subject whose personal data is processed by the pg668, the following rights, which may be exercised at any time:

To exercise any of the rights listed above, please contact the pg668 via live chat available 24 hours a day in Portuguese, or by email at contato@pg668.best, providing your registered CPF and the type of request. The pg668 will respond within the legal deadline of 15 calendar days from receipt of the request.

9Minors

The services of the pg668 are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from anyone under 18. Registration requires a CPF, which is verified against the Federal Revenue Service database, and date of birth is confirmed during the identity verification (KYC) process.

If the pg668 identifies that data from a user under 18 has been inadvertently collected, that data will be immediately deleted and the account will be closed at no cost to the legal guardian who requests the situation be resolved. If you believe a minor has created an account on the pg668, please reach out to our 24/7 support in Portuguese so we can act promptly.

10International Data Transfers

The pg668 may store and process personal data on servers located outside Brazil, depending on the cloud infrastructure used by the platform. When this occurs, the pg668 ensures that international data transfers are carried out in compliance with the LGPD's requirements for international transfers, applying the following safeguards:

• Transfers to countries with an adequate level of protection recognized by the ANPD.
• Specific contractual clauses that impose on the data recipient protection obligations equivalent to those required under Brazil's LGPD.
• Internationally recognized compliance certifications, where applicable to the infrastructure provider used by the pg668.

The pg668 does not transfer identified personal data to third parties in countries without adequate data protection for commercial or marketing purposes, under any circumstances.

11Changes to this Privacy Policy

The pg668 may update this Privacy Policy periodically to reflect changes in Brazilian data protection legislation, platform features, or internal data processing practices. The date of the last update is shown at the top of this page.

Whenever relevant changes occur that affect your rights as a data subject or that expand the processing purposes previously disclosed, the pg668 will communicate any changes via the registered email and/or through a prominent notice on the platform, at least 7 calendar days before the new terms take effect.

Data processing for new purposes that require consent will only take place after obtaining the data subject's fresh, express consent, as required by the LGPD. Continued use of the platform following notification of changes not based on consent constitutes acceptance of the changes made by the pg668.

12Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concern related to the processing of personal data by the pg668, you may reach us through the channels below:

• Live chat: available 24 hours a day, 7 days a week, directly on the pg668, with support available in Brazilian Portuguese.
• Email: contato@pg668.best — include "Privacy – LGPD" in the email subject line so your request is routed to the Data Protection Officer (DPO) of the pg668.

The pg668 has appointed a Data Protection Officer (DPO) as required by art. 41 of the LGPD, responsible for serving as the communication channel between data subjects, the pg668 and the National Data Protection Authority (ANPD). The DPO can be contacted directly at the privacy email address indicated above.

This Privacy Policy is governed by Brazilian law. Any disputes relating to the processing of data by the pg668 will be resolved in accordance with the mechanisms set out in the LGPD and, if necessary, before the competent courts in Brazil.