Privacy Policy of sortudo7k — Your Data, Protected

1. Who We Are and Who Controls Your Data

Sortudo7k is a Sports Betting and online casino platform operated for the Brazilian market. For the purposes of this Privacy Policy and in accordance with the Lei Geral de Proteção de Dados (LGPD), sortudo7k acts as the controller of personal data collected from its users during platform browsing and use.

Sortudo7k operates exclusively for users residing in Brazil, with all services priced and transacted in BRL. Brazilian users' data is processed in compliance with national legislation, with particular attention to the requirements of the LGPD.

2. What Data sortudo7k Collects

2.1 Data Provided by the User at Registration

To create and maintain an account at sortudo7k, we collect the following information:

• Full name;
• CPF (Individual Taxpayer Registry);
• Date of birth;
• Email address;
• Mobile phone number;
• Full residential address, including postal code (CEP);
• Government-issued ID (RG, CNH, or passport) when requested for account verification.

2.2 Payment data

To process deposits and withdrawals, we collect the information required for each available payment method:

• Pix: Pix key (CPF, email, phone number, or random key) linked to the account holder's bank account;
• Credit or debit card: masked card number, expiration date, and cardholder name — we never store the full card number;
• Bank slip (boleto): data required to generate the billing document;
• TED/bank transfer: bank branch and account number for settlement purposes, for banks such as Nubank, Itaú, Bradesco, Banco do Brasil, and other institutions within the Brazilian financial system;
• PicPay and Mercado Pago: account identifier linked to the user's CPF.

2.3 Data automatically generated during use

When you access and use sortudo7k — whether on mobile or desktop — we automatically collect:

• IP address and approximate location (city/state);
• Device type, operating system, and browser version;
• Betting history and casino games played on the platform;
• Access logs with date, time, and actions performed;
• Interface interaction data — pages visited, session duration, and features used.

3. How We Use User Data

The following table outlines the purposes for which sortudo7k uses the data collected, along with the corresponding legal basis under the LGPD:

Sortudo7k does not use your personal data for purposes incompatible with those stated above. If a new purpose becomes necessary, you will be informed and, where required by the LGPD, your consent will be requested again.

4. Legal Basis for Data Processing (LGPD)

Sortudo7k processes personal data based on the following legal grounds set out in the General Data Protection Law (Lei nº 13.709/2018):

• Contract performance (art. 7, V): to create and maintain your account, process payments via Pix, boleto, credit/debit card, and TED, and deliver the Sports Betting and casino services you have contracted;
• Legal obligation (art. 7º, II): to meet customer identification (KYC) requirements, anti-money laundering obligations, and reporting to regulatory authorities as required by Brazilian law;
• Legitimate interest (art. 7, IX): to improve the platform, prevent fraud, and ensure the safety of other users — always respecting the rights and reasonable expectations of data subjects;
• Consent (art. 7, I): for sending marketing communications, promotions, and updates from sortudo7k — consent that may be withdrawn at any time in account settings or by emailing contato@sortudo7k.net.

5. Sharing Data with Third Parties

Sortudo7k does not sell, rent, or transfer users' personal data to third parties for commercial purposes. Data sharing occurs only in the following situations:

5.1 Essential service providers

To operate the platform, sortudo7k works with partners that process data on the company's behalf, including:

• Payment processors for transaction settlement via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and TED;
• Cloud infrastructure providers for secure data hosting;
• Identity verification companies for the KYC process;
• Casino game providers that operate the live tables and slots — with access limited to the technical data required for each round.

All sortudo7k service providers are contractually required to handle data in accordance with this Policy and in compliance with the LGPD.

5.2 Legal and regulatory obligations

Sortudo7k may be required to share data with public authorities — such as the Banco Central do Brasil, the Receita Federal, COAF, and other regulatory bodies — when required by law, court order, or regulatory investigation. In such cases, sortudo7k will disclose the minimum information necessary and, where legally permitted, will notify the user.

5.3 Protection of sortudo7k's rights

In cases of suspected fraud, money laundering, match-fixing, or other illicit activity, sortudo7k may share data with the relevant authorities for investigation and accountability purposes.

6. Data Storage and Security

6.1 Where Data Is Stored

Sortudo7k user data is stored on servers located in security-certified data centers, using cloud infrastructure providers that meet the requirements of Brazilian data protection law.

6.2 Security measures in place

Sortudo7k applies a set of technical and organizational measures to protect user data:

• Encryption in transit: all communication between the user's browser/app and sortudo7k's servers is protected by an up-to-date TLS protocol;
• Encryption at rest: sensitive data such as financial information and identity documents are encrypted on our servers;
• Access control: only employees with a verified operational need are granted access to personal data — and that access is audited;
• Continuous monitoring: automated systems monitor unauthorized access attempts, suspicious activity, and security breach attempts;
• Two-factor authentication: available to all users who want an extra layer of account security.

6.3 Security Incidents

In the event of a security incident that may affect user data, sortudo7k will follow the procedure required by the LGPD — notifying the National Data Protection Authority (ANPD) and the affected users within the legally established timeframes, detailing the nature of the incident, the data involved, and the measures taken to mitigate any harm.

7. How Long Is Your Data Kept

Sortudo7k retains personal data for as long as necessary to fulfill the purpose for which it was collected, or to meet legal and regulatory obligations. The general criteria are:

• Registration and account data: retained for as long as the user holds an active account at sortudo7k;
• Betting history and financial transactions: retained for a minimum of 5 years from the transaction date, in accordance with Brazilian tax and regulatory requirements;
• Identity verification data (KYC): retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legislation;
• Access and security logs: retained for 12 months for audit and security investigation purposes;
• Marketing data: retained until consent is withdrawn by the user.

Once the applicable retention periods expire, data is securely deleted or anonymized for statistical purposes, making it no longer possible to identify the user.

8. Your Rights as a Data Subject

The LGPD grants you, as the holder of personal data processed by sortudo7k, the following rights — all of which can be exercised free of charge:

To exercise any of these rights, contact sortudo7k at contato@sortudo7k.net or through the 24-hour live chat available on the platform. sortudo7k will respond to requests within 15 business days, in accordance with the timeframe set out by the LGPD.

9. Cookies and Tracking Technologies

Sortudo7k uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and collect aggregated analytical data. Below we explain the types of cookies used:

You can manage or disable cookies in your browser settings. Disabling essential cookies may affect how your sortudo7k account functions. For all other cookie types, disabling them will not prevent you from using the platform.

10. Minors

Sortudo7k is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. If you are under 18, you must not create an account, make deposits, or use any feature of sortudo7k.

If sortudo7k identifies that data belonging to a user under 18 has been collected — whether through false information provided at registration or by any other means — the account will be immediately closed, the data will be deleted, and any deposits will be refunded to the original payment method, with no release of winnings.

Parents or guardians who believe a minor under 18 has created an account on sortudo7k may contact us at contato@sortudo7k.net to request the immediate deletion of the account and all associated data.

11. Changes to This Privacy Policy

Sortudo7k may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or the services offered. When changes are significant, users will be notified at least 7 days in advance via their registered email or through a prominent notice on the platform.

The date of the last update is always shown at the top of this page. The most recent version of this Policy will be permanently available at sortudo7k.net/privacy-policy. Continued use of the platform after the effective date of any changes will be considered acceptance of the updated terms.

12. Contact and Data Protection Officer (DPO)

To exercise your rights as a data subject, ask questions about this Policy, or report any privacy concern at sortudo7k, please use the following channels:

• DPO email: contato@sortudo7k.net — LGPD-related requests are prioritized and responded to within 15 business days;
• Live chat: available 24 hours a day, 7 days a week, directly on the platform, with an average response time of under 2 minutes;
• Frequently asked questions: see our FAQ page for immediate answers to the most common questions about privacy and data security.

Sortudo7k has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO is responsible for ensuring that data processing complies with applicable law and for serving as the point of contact with the National Data Protection Authority (ANPD). All data protection inquiries sent to the email address above are forwarded directly to the DPO.

Sortudo7k is committed to responding to all privacy-related communications in Brazilian Portuguese, without generic automated replies for situations that require individual review of the requested data.