Today777 — Privacy Policy and Data Protection

Today777 is a Sports Betting and online casino platform that operates exclusively in the Brazilian market. For the purposes of the Lei Geral de Proteção de Dados (Law No. 13.709/2018 — LGPD), today777 acts as personal data controller of its users — meaning it is the entity responsible for defining the purposes and means of processing the information collected on the platform.

This Privacy Policy applies to all registered users and visitors of the today777 platform — whether accessed via browser or through any official app made available by the platform. It covers all data processing activities carried out by today777 in connection with the provision of its services, including Sports Betting on Brasileirão, Copa do Brasil and Libertadores matches, Live Casino, slots, crash games, e-sports, and the VIP Program.

Today777 collects different categories of personal data depending on the stage of platform use. The main categories and the specific data within each are listed below:

Identification and financial data are provided directly by the user at the time of registration or during the identity verification (KYC) process. Technical and behavioral data are collected automatically while using the platform, through industry-standard technologies such as cookies, server logs, and session identifiers.

Today777 uses users' personal data exclusively for the following purposes:

• Platform service delivery: create and manage user accounts, process bets, deposits, and withdrawals in BRL via Pix, boleto, card, PicPay, Mercado Pago, and TED transfer.
• Identity verification (KYC): verify the user's identity to meet regulatory requirements, prevent fraud, and ensure that only users aged 18 and over can access the platform.
• Anti-money laundering and compliance: monitor financial transactions in compliance with Brazilian law and the guidelines of the Banco Central do Brasil.
• Customer support: answer questions, resolve technical issues, and handle user requests via live chat and email in Brazilian Portuguese.
• Experience personalization: recommend bets, games, or promotions relevant to the user based on their activity history on the platform.
• Marketing communications: send emails and notifications about today777 promotions, bonuses, and updates — only with the user's explicit consent, which may be withdrawn at any time.
• Security and anti-fraud: identify suspicious behavior, duplicate accounts, or misuse of the platform.
• Responsible gambling: monitor behavioral patterns that may indicate problem gambling and trigger protective tools in accordance with the Responsible Gambling.
• Compliance with legal obligations: respond to requests from competent authorities, such as the Receita Federal, Banco Central, and betting regulatory bodies.

Today777 does not use user data for automated decisions that produce significant effects — such as credit denial or account closure — without human review when requested by the user.

Every data processing operation carried out by today777 is grounded in at least one of the legal bases set out in Article 7 of the LGPD. The primary bases used are:

• Contract performance (art. 7, V): processing required to deliver the services contracted by the user upon creating their today777 account — including bet processing, deposits, withdrawals, and platform access.
• Compliance with a legal obligation (art. 7, II): data collected to comply with regulatory requirements in the betting sector, the LGPD, tax legislation, and Banco Central do Brasil regulations.
• Consent (Art. 7, I): sending marketing communications and personalizing the experience based on user preferences — subject to the user's express and revocable consent.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, behavioral analysis for responsible gambling, and continuous improvement of the services offered.

Today777 does not sell personal data of users to third parties under any circumstances. Data sharing occurs only when strictly necessary, with the following categories of recipients:

• Payment processors: minimal financial data is shared with the institutions responsible for processing transactions via Pix (Banco Central), boleto bancário, credit/debit card (Visa, Mastercard), and digital wallets (PicPay, Mercado Pago). These partners follow their own privacy policies and are contractually required to protect data in accordance with the LGPD.
• Live Casino providers: technical session data may be shared with certified game providers (such as Evolution Gaming and Pragmatic Play) solely for the purpose of operating live tables.
• Identity verification (KYC) services: identification data may be shared with verification partners to confirm document authenticity and prevent fraud.
• Public authorities: data may be shared with the Receita Federal, Banco Central, Ministério da Fazenda, or other competent authorities when required by law or court order.
• Technology service providers: cloud infrastructure providers, information security services, and customer support tools, all contractually required to meet data protection standards equivalent to those of the LGPD.

In all sharing situations, today777 requires that partners maintain security and privacy standards compatible with those required by Brazilian law and this policy.

Today777 uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. The types of cookies used are:

• Essential cookies: required for basic platform operation — authentication, session management, CSRF protection. These cannot be disabled without affecting access to the platform.
• Performance cookies: collect anonymous data on how users navigate the platform (pages visited, session duration, errors encountered) to improve service stability and speed.
• Personalization cookies: store user preferences such as language, favorite category, and display settings to improve the experience on return visits.
• Marketing cookies: used with consent to record user behavior and present relevant promotions within the today777 platform itself. today777 does not use third-party marketing cookies to track users on other sites.

You can manage cookie preferences in your browser settings. Disabling essential cookies may affect platform functionality. Performance, personalization, and marketing cookies can be turned off without impacting access to today777's core services.

Today777 implements robust technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or improper destruction. The main security measures in place are:

• 256-bit SSL Encryption: all communications between the user's device and today777's servers are encrypted using the same standard adopted by Brazil's leading digital banks, such as Nubank, Itaú, and Bradesco.
• Encryption at rest: sensitive data stored on servers — such as CPF, banking details, and passwords — is encrypted at rest using modern algorithms.
• Least-privilege access control: today777 staff only access the data strictly required to perform their job functions. Access to financial and identity data is restricted and monitored.
• Two-factor authentication (2FA): available to users and mandatory for all internal staff with access to data systems.
• Continuous monitoring and auditing: automated systems monitor suspicious access 24 hours a day and alerts are triggered whenever anomalous behavior is detected.
• Regular backups: daily backups are performed in geographically separate environments to ensure data availability in the event of a technical failure.

In the event of a security incident that may affect user data, today777 will follow the timelines and procedures set out in the LGPD, notifying the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the legally required timeframes.

Today777 retains users' personal data for as long as necessary for the purposes for which it was collected, in compliance with the minimum retention periods required by Brazilian law. The general retention criteria are:

• Active account data: retained for as long as the account is active and for up to 5 years after closure, to meet legal and tax obligations.
• Financial transaction records: retained for a minimum of 5 years, as required by the Receita Federal and the Banco Central do Brasil for financial transactions.
• KYC data (identity verification): retained for the period required by betting sector regulations — generally 5 to 7 years after the last account activity.
• Support records and communications: retained for 2 years after the support interaction is closed, for audit and dispute resolution purposes.
• Marketing data (with consent): retained until the user revokes consent or requests deletion.

Once the applicable retention period expires, data is securely deleted or anonymized so that the data subject can no longer be identified.

The LGPD grants you, as the owner of your personal data, a set of rights that can be exercised at any time with today777. These rights are set out in Article 18 of Law No. 13.709/2018 and are fully respected by the platform:

To exercise any of these rights, contact today777 via the live chat available on the platform or by email at privacidade@today777.best. The response deadline is up to 15 business days, as required by the LGPD. You also have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have not been adequately upheld.

Today777 is a platform intended exclusively for users aged 18 and over. Registration by minors is strictly prohibited, and today777 takes active measures to prevent underage access, including CPF verification against the Receita Federal database and a KYC process with document validation.

Today777 does not intentionally collect personal data from users under 18 years of age. If it is determined that an account was created by a minor — whether through a false date of birth declaration or by any other means — the account will be immediately closed, the data will be deleted, and the matter may be reported to the relevant authorities.

If a legal guardian identifies that a minor has created an account on the platform, please contact today777 support immediately via live chat or the contact email so the situation can be resolved as a priority.

Today777 may send marketing communications — such as information about promotions, reload bonuses, VIP Program cashback, and special sporting events — exclusively to users who have given explicit consent for this type of communication during registration or in their account settings.

You can opt out of marketing communications at any time through:

• The unsubscribe link included in all promotional emails sent by today777.
• The communication preferences section in your account settings on the platform.
• Direct request to support via live chat or email.

Revoking your marketing consent does not affect the receipt of essential operational communications — such as withdrawal confirmations, account security alerts, identity verification notifications, and important updates to the Terms and Conditions or this Privacy Policy.

Today777 may update this Privacy Policy periodically to reflect changes in Brazilian legislation — particularly the LGPD and betting industry regulations — or as a result of changes to the platform's data processing practices.

Any material changes will be communicated with a minimum advance notice of 15 days by registered email and through a prominent notice within the platform. Changes that involve new data processing or a new purpose of use will require renewed consent where applicable.

The date of the most recent revision is always shown at the top of this document. We recommend checking this policy periodically to stay informed about today777's privacy practices. Continued use of the platform after any changes take effect constitutes acceptance of the updated terms.

Today777 has appointed a Data Protection Officer (DPO) as required by the LGPD, to serve as a communication channel between the platform, data subjects, and the Autoridade Nacional de Proteção de Dados (ANPD). For questions regarding this Privacy Policy or the exercise of your rights as a data subject, please reach out through the channels below:

• DPO Email: privacidade@today777.best
• General email: contato@today777.best
• Live chat: available 24/7 on the platform, in Brazilian Portuguese
• Help center: Frequently Asked Questions

Today777 is committed to responding to all personal data requests within 15 business days from the date the request is received. In more complex cases, this deadline may be extended, with notice provided to the requester.

Last review of this Privacy Policy: January 2026. Version 2.4.