Privacy Policy of 888verde — Your Data, Always Protected

For the purposes of the LGPD, the controller responsible for processing the personal data collected on the platform 888verde is the operating company of the 888verde.net domain. The Data Protection Officer (DPO) can be reached directly at privacidade@888verde.net.

888verde recognizes that users' personal data belongs to them. Our role as controller is to ensure that this information is handled responsibly, securely, and exclusively for the purposes stated in this Policy.

The 888verde collects only the data necessary to operate the platform, verify identity, process payments, and meet legal obligations. The categories of data processed are:

2.1 Data provided directly by the user

• Registration data: full name, CPF, date of birth, email address, mobile number, password (stored in encrypted hash format);
• Address data: street address, number, neighborhood, city, state, and ZIP code, collected for identity verification and regulatory compliance purposes;
• Identity documents: images of a national ID (RG), driver's license (CNH), or passport submitted during the KYC (Know Your Customer) process;
• Proof of residence: documents submitted during KYC to confirm current address;
• Communication data: messages exchanged with support via chat, email, or any other 888verde channel.

2.2 Data Generated Through Platform Use

• Betting history: record of all bets placed, amounts, events, outcomes, and dates;
• Financial history: record of deposits and withdrawals, methods used (Pix, card, boleto, PicPay, Mercado Pago, TED), amounts, and dates;
• Session data: date, time, and duration of each session on the platform;
• Technical data: IP address, device type, operating system, browser used, and device identifiers;
• Behavioral data: pages visited, features used, and browsing patterns on the platform.

2.3 Data We Do Not Collect

888verde does not collect data from sensitive categories as defined by the LGPD — such as racial or ethnic origin, religious beliefs, political opinions, or genetic or biometric data — except where strictly necessary to fulfill a specific legal obligation, in which case the user will be informed in advance.

The data collected by 888verde are used exclusively for the following purposes:

• Account operation: creation, maintenance, and management of your profile on the platform;
• Identity verification (KYC): confirmation that you are who you say you are, that you are over 18 years old, and that you are eligible to use the platform;
• Payment processing: processing deposits via Pix, boleto, card, PicPay, Mercado Pago, and TED, and handling withdrawals;
• Fraud and money laundering prevention: monitoring of suspicious transactions in compliance with Brazilian anti-money laundering legislation (Law No. 9.613/1998);
• Customer support: handling questions, complaints, and requests via live chat and email;
• Responsible gambling: monitoring usage patterns that may indicate problematic behavior, to proactively offer self-control tools;
• Product improvements: aggregated and anonymized analysis of user behavior to identify opportunities for platform improvement;
• Service communications: sending bet confirmations, deposit/withdrawal receipts, security alerts, and essential operational communications;
• Marketing (with consent): sending promotions, offers, and news from 888verde — only to users who have explicitly consented to this type of communication.

Under the LGPD, all personal data processing must have a legal basis. The 888verde processes your data based on the following legal grounds:

• Contract performance (art. 7, V): processing necessary for the performance of the service agreement entered into between you and 888verde at registration — includes account operation, bet processing, and payments;
• Compliance with a legal obligation (art. 7, II): processing required by Brazilian law, such as anti-money laundering rules, tax compliance, and regulatory requirements in the betting sector;
• Legitimate interest (art. 7, IX): processing for fraud prevention, platform security, and aggregate usage analysis — provided it does not override the user's fundamental rights;
• Consent (art. 7, I): processing for sending marketing communications and personalizing offers — always based on free, informed, and unambiguous consent, revocable at any time.

The 888verde does not sell, rent, or transfer your personal data to third parties for commercial purposes. Data sharing occurs only in the following situations and is always limited to the minimum necessary:

5.1 Service providers

888verde uses third-party providers to operate its platform, all bound by confidentiality agreements and obligations consistent with the LGPD:

• Payment processors: to process transactions via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and TED — we share only the minimum data required to complete the transaction;
• Identity verification provider (KYC): a company specializing in document analysis for the verification process;
• Cloud infrastructure: servers and storage services used to host the platform;
• Fraud analysis tools: systems that analyze transactions for suspicious patterns.

5.2 Legal obligations

888verde may share data with competent authorities — such as the Receita Federal, Banco Central, Conselho de Controle de Atividades Financeiras (COAF), and the Judiciary — when required by law, court order, or valid legal process.

5.3 What we never share

888verde never shares your data with advertisers, ad networks, business partners, or any third party for marketing purposes without your express and specific consent.

The security of your data is one of the technical priorities of 888verde. The protection measures implemented include:

• Encryption in transit: 256-bit SSL/TLS across all communications between your device and the platform's servers;
• Encryption at rest: sensitive data stored in encrypted databases with keys managed by a dedicated secrets management system;
• Password hashing: passwords are stored exclusively as cryptographic hashes with salt — 888verde never stores passwords in plain text;
• Two-factor authentication (2FA): available and recommended for all users as an additional layer of account protection;
• Access control: only employees with a verified operational need are granted access to personal data, and always with an audit trail;
• Continuous monitoring: automated intrusion detection and unauthorized access systems operating 24 hours a day;
• Penetration testing: periodic security assessments carried out by specialized teams to identify and fix vulnerabilities before they can be exploited.

The 888verde retains your personal data for as long as necessary to fulfill the stated purposes and legal obligations. General retention periods are:

• Active account data: retained for as long as the account is active and for the additional period required by law after closure;
• Financial transaction history: minimum of 5 years after the transaction, as required by the Brazilian Central Bank and anti-money laundering legislation;
• KYC documents: minimum of 5 years after account closure, in accordance with regulations applicable to the betting sector;
• Betting history: minimum of 2 years for audit and dispute resolution purposes;
• Access and security logs: up to 12 months for fraud investigation and platform security purposes;
• Support communications: up to 2 years after the ticket is closed, for quality and compliance purposes.

Once retention periods expire, data is securely and irreversibly deleted or anonymized so that the user can no longer be identified.

The 888verde uses cookies and similar technologies to ensure the platform functions correctly, personalize your experience, and analyze site performance. See the types of cookies used:

8.1 How to manage your cookies

You can manage optional cookie preferences directly in your 888verde account settings panel. In addition, most browsers allow you to block or delete cookies individually — check the settings in Chrome, Firefox, Safari, or Edge to adjust your preferences.

Disabling essential cookies may prevent the platform from working properly, including access to your account and the ability to place bets. Analytics and marketing cookies can be disabled without affecting 888verde's core features.

8.2 Local Storage and Session Storage

In addition to cookies, 888verde uses browser local storage (Local Storage and Session Storage) to temporarily store interface preferences and session data that improve platform load speed. This information is stored only on your device and is cleared automatically when you close the browser window (Session Storage) or when you clear site data in your browser settings (Local Storage).

Law No. 13,709/2018 guarantees you, as the data subject, a set of rights that 888verde is committed to respecting and facilitating the exercise of your rights. To exercise any of the rights below, submit a request to privacidade@888verde.net with the subject line "LGPD Rights", stating your full name, registered CPF, and the right you wish to exercise.

• Confirmation and access: you may request confirmation that your data is being processed and receive a copy of all information we hold about you;
• Correction: if any information is incorrect or outdated, you have the right to request an immediate correction;
• Anonymization or blocking: for data that is unnecessary or processed beyond what the stated purpose requires;
• Deletion: you may request the deletion of data processed on the basis of consent. Data whose retention is required by law cannot be erased before the legal deadline, but you will be informed of this;
• Portability: you may request your data in a structured, machine-readable format for transfer to another service;
• Consent withdrawal: at any time, you may withdraw consent given for marketing communications or other consent-based purposes, with no penalty;
• Objection: you may object to the processing of your data for specific purposes, particularly when such processing is based on legitimate interest;
• Review of automated decisions: if any decision affecting you (such as an account block) was made solely by automated systems, you have the right to request a review by a human.

The maximum response time for LGPD rights requests is 15 calendar days from receipt. In complex cases, this deadline may be extended, with written justification provided to the requester.

The 888verde is an exclusive platform for users aged 18 and over. We do not intentionally collect personal data from anyone under 18. Registration requires age confirmation, and the KYC process verifies date of birth through an official ID document.

If 888verde identifies that it has inadvertently collected data from a minor, the account will be immediately closed, all data will be deleted, and any financial transactions will be reversed. If you believe a minor has created an account on the platform using your data or someone else's, please contact support immediately via chat or at contato@888verde.net.

The 888verde sends marketing communications — such as promotions, special offers, product updates, and tournament invitations — only to users who have explicitly consented to this type of communication during registration or at a later time.

11.1 How to opt out of marketing communications

You can opt out of marketing communications at any time through any of the following methods:

• By clicking the "Unsubscribe" link in the footer of any promotional email from 888verde;
• Adjusting your communication preferences in your account settings on the platform;
• Sending a request to contato@888verde.net with the subject line "Cancel Marketing".

Opting out of marketing does not affect the receipt of essential operational communications, such as bet confirmations, payment receipts, and security alerts — these notifications are necessary for your account to function and cannot be disabled.

11.2 Self-excluded users

Users who have activated self-exclusion are automatically removed from all 888verde marketing communications lists. During the exclusion period, no promotional communications will be sent — not by email, SMS, or push notification.

In some cases, personal data of users of the 888verde may be processed on servers located outside Brazil — for example, within the cloud provider infrastructure we operate. When this occurs, 888verde ensures that transfers take place under adequate protection, as required by art. 33 of the LGPD:

• Transfers only to countries or organizations that offer a level of data protection compatible with the LGPD;
• Use of standard contractual clauses approved by the ANPD when the recipient is located in a country without an adequacy recognition;
• Guarantee that the same technical and organizational safeguards applied in Brazil are maintained in the destination environments.

888verde does not transfer personal data to jurisdictions that do not offer protection consistent with the standards established by Brazilian law.

The 888verde may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or improvements to security processes. For significant changes — especially those that expand the scope of data collection or alter the purposes of processing — you will be notified by email at least 7 days in advance.

The current version of this Policy will always be available on this page, along with the date of the last update and the version number (currently v2.4, updated January 2026). Continued use of the platform after a new version takes effect constitutes acceptance of the changes. If you do not agree with the changes, you may close your account before the new version's effective date.

For any questions, requests, or complaints regarding the processing of personal data by 888verde, you may contact our data protection officer (DPO) through the channels below:

• Privacy email: privacidade@888verde.net — for formal requests to exercise LGPD rights and complaints related to personal data. Use the subject line "LGPD Rights" or "Privacy";
• General email: contato@888verde.net — for general questions about the platform and support matters;
• Live chat: available 24 hours a day directly on the platform after login, for quick questions about privacy and other matters.

The response time for LGPD rights requests is up to 15 calendar days. For general questions handled via chat or support email, the response time is up to 48 business hours.