Privacy Policy 888login – Your Data Protected with Transparency

For the purposes of the General Data Protection Law (LGPD, Law No. 13,709/2018), the controller of personal data for 888login platform users is the operating company of 888login.asia, responsible for all decisions regarding the personal data processing described in this Policy.

888login acts as the data controller for information collected during registration, platform use, financial transactions (deposits via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED transfer), sports betting, and casino games conducted by users in Brazil.

For any questions regarding the processing of your personal data, please contact us through the official channel: suporte@888login.asia. The 888login Data Protection Officer (DPO) is available through this same channel to handle LGPD-related requests.

888login collects only the data necessary for the platform to function and to meet its legal obligations. No data is collected beyond what is strictly required for the purposes described in this Policy.

Data You Provide Directly

• Registration data: Full name, CPF, date of birth, full residential address, email address, and mobile number.
• Identity verification data (KYC): Photo of a government-issued photo ID (RG, CNH, or passport), a selfie for facial verification, and, when required, a current proof of address.
• Financial data: Registered Pix key, credit or debit card details (processed via secure gateway — 888login does not store full card numbers), and bank account information for wire transfers (Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, and others).
• Communication data: Content of conversations with support via live chat, emails sent to 888login, and service history.

Automatically Collected Data

• Platform usage data: Sports Betting history, casino games accessed, gaming sessions (duration, bets placed, results), and bonuses activated and used.
• Technical data: IP address, browser type and version, operating system, device used (Android phone, iPhone, computer), configured language, and time zone.
• Browsing data: Pages visited within 888login, time spent in each section, clicks and interface interactions, and traffic source (organic search, direct link, or marketing campaign).
• Cookies and similar technologies: Details are described in Section 8 of this Policy.

Every piece of data collected by 888login has a specific, documented purpose. Data is never used for anything beyond what is listed below:

• Account creation and management: Identity verification, CPF validation, and platform registration. Ensuring each CPF corresponds to a single active account.
• Financial transaction processing: Confirmation of deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago; processing of withdrawals via Pix to accounts in the registered holder's name; balance reconciliation and transaction history.
• Betting and gaming operations: Sports Betting records (Brasileirão, Copa do Brasil, Libertadores, UFC, NBB, e-sports, and other disciplines), casino game history, and calculation and crediting of winnings and bonuses.
• Fraud prevention and anti-money laundering (AML): Monitoring of suspicious transactions, compliance with the Financial Activities Control Council (COAF) regulations, and other legal reporting obligations.
• Customer support: Handling questions, complaints, and requests via live chat and email; maintaining service history to ensure continuity of support.
• Experience personalization: Display of relevant sports, games, and promotions based on usage history — such as highlighting Brasileirão matches for football bettors or crash games for Aviator users.
• VIP Program: Automatic VIP level calculation (Bronze, Silver, or Gold), weekly cashback crediting, and monthly bonuses based on betting volume.
• Marketing communications: Sending emails and notifications about promotions, bonuses, and sporting events — only with the user's explicit consent (opt-in).
• Platform Security: Detection of unauthorized access, VPN or proxy use, multiple accounts linked to the same CPF, and any behavior indicating fraud or platform misuse.
• Compliance with legal obligations: Retention of financial records for the period required by Brazilian law; responding to court orders and requests from competent regulatory authorities.

The LGPD requires that every instance of personal data processing have a specific legal basis. 888login grounds its processing activities in the following bases set out in Article 7 of Law No. 13.709/2018:

• Contract performance (Art. 7, V): Processing necessary for the performance of the service agreement between the user and 888login — including registration, bet processing, deposits, and Pix withdrawals and other platform operations.
• Compliance with a legal or regulatory obligation (Art. 7, II): Processing required to fulfill legal obligations, such as anti-money laundering regulations, COAF reporting, and retention of financial records for the legally mandated period.
• Legitimate interest (Art. 7, IX): Processing for fraud prevention, platform security, abuse detection, and protection of other 888login users.
• Consent (Art. 7º, I): Processing based on the user's free, informed and unambiguous consent — applied to personalization cookies and marketing communications. Consent may be withdrawn at any time.

888login does not sell, rent, exchange or otherwise commercialize users' personal data. Data sharing only occurs in the specific situations outlined below, always limited to the minimum data necessary for each purpose:

Service Providers (Processors)

• Payment processors: Partners responsible for processing transactions via Pix, credit/debit card, PicPay, and Mercado Pago. These partners receive only the data strictly necessary to process each transaction and are contractually bound to confidentiality and LGPD compliance.
• Casino game providers: Pragmatic Play, PG Soft, NetEnt, Evolution Gaming, Microgaming, Spribe, and other certified providers receive a session identifier to personalize the gaming experience. No personally identifiable data is transmitted to these providers.
• Identity verification services (KYC): Specialized partners in biometric verification who process identity documents and selfies to confirm user identity during registration and for withdrawals above R$ 500.00.
• IT infrastructure providers: Hosting services, cloud servers, and cybersecurity tools that keep the platform running.

Competent Authorities

888login may share personal data with Brazilian regulatory, law enforcement, judicial, or tax authorities when required by law, court order, or official investigation — without requiring user consent in such cases, as provided under the LGPD.

888login applies a comprehensive set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Technical Measures

• 256-bit SSL/TLS Encryption: All communication between the user's browser and 888login's servers is encrypted with 256-bit SSL. This covers login, registration, betting, deposits, and Pix withdrawals.
• Encryption at rest: Personal and financial data stored in 888login's databases is encrypted at rest, preventing access even in the event of physical server compromise.
• Two-factor authentication (2FA): Available to all users; strongly recommended for accounts with significant betting volume or balance.
• 24/7 monitoring: Automated intrusion detection and anomalous behavior monitoring run continuously on the platform, with real-time alerts sent to the 888login security team.
• Payment data tokenization: Credit and debit card numbers are never stored on 888login's servers — they are tokenized by our partner payment gateway, reducing risk in the event of a security incident.

Organizational Measures

• Access to personal data is restricted to employees with an operational need, requiring strong authentication and access logging.
• Regular information security and data protection training for the entire 888login team.
• Regular security audits conducted by independent specialized firms.
• Security incident response plan with notification to the National Data Protection Authority (ANPD) and affected users within the timeframes required by the LGPD.

888login retains personal data only for as long as necessary for the purposes for which it was collected, in accordance with the minimum storage periods required by Brazilian law.

Retention Periods

• Registration and identity data: Retained while the account is active and for up to 5 years after account closure, as required by law for customer record-keeping (AML/CFT regulations).
• Financial transaction history: Retained for 5 years after each transaction, as required by the Federal Revenue Service and anti-money laundering regulations.
• Sports betting and casino history: Retained for 2 years after the last account activity, for dispute resolution, bonus auditing, and rollover verification.
• Customer support data: Retained for 2 years after each ticket is closed, for reference in future support interactions and dispute resolution.
• Cookies and browsing data: As specified in Section 8 — ranging from session to 2 years depending on the cookie type.

Data Deletion

Once retention periods expire, data is securely deleted from 888login's systems. Where data must be anonymized rather than deleted for statistical or internal analysis purposes, the anonymization process makes re-identification of the data subject impossible.

You may request the early deletion of your personal data, subject to cases where the LGPD permits or requires data to be retained (such as the legal obligation to store financial records). Requests must be submitted by email to suporte@888login.asia.

888login uses cookies and similar technologies to keep the platform running, improve the user experience, and — with your consent — personalize the content you see. The types of cookies used are listed below:

The LGPD grants you, as the data subject of personal data processed by 888login, a set of rights that can be exercised at any time. See each right and how to exercise it below:

• Access (Art. 18, II): Request a copy of all personal data 888login holds about you, presented in a clear and readable format.
• Correction (Art. 18, III): Request the correction of incomplete, inaccurate, or outdated data — such as a misspelled name, an old phone number, or an incorrect address.
• Anonymization, blocking or deletion (Art. 18, IV): Request the anonymization, blocking, or deletion of unnecessary data or data processed in violation of the LGPD.
• Portability (Art. 18, V): Request the portability of your personal data to another service controller, in a structured and commonly used format.
• Deletion of data processed on the basis of consent (Art. 18, VI): Request the deletion of personal data processed on the basis of your consent — such as personalization and marketing data.
• Information on data sharing (Art. 18, VII): Obtain information about which public and private entities 888login has shared your data with.
• Withdrawal of consent (Art. 18, IX): Withdraw consent previously given for specific processing activities — such as email marketing — at any time, free of charge.
• Right to object to processing (Art. 18, § 2): Object to processing based on legitimate interest when it conflicts with your fundamental rights.

In certain operational situations, personal data of 888login users may be transferred to servers or service providers located outside Brazil — such as cloud computing services or casino game providers headquartered abroad.

Every international data transfer carried out by 888login meets at least one of the following conditions set out in the LGPD:

• Transfer to countries or international bodies that provide a level of personal data protection equivalent to that of the LGPD (Art. 33, I).
• Transfer covered by specific contractual clauses ensuring protection equivalent to that of the LGPD (Art. 33, II).
• Transfer necessary for the performance of the contract between the user and 888login (Art. 33, V).

888login ensures that all international partners who receive personal data from Brazilian users are contractually bound to protection standards equivalent to those required by the LGPD and, where applicable, the European GDPR.

888login is a Sports Betting and online casino platform intended exclusively for users aged 18 and over. Access, registration, and use of the platform by minors is strictly prohibited.

888login takes the following measures to prevent access by minors:

• CPF verification during registration, which confirms the account holder's date of birth directly with the Receita Federal.
• KYC identity verification process using a photo ID, confirming the user's age before withdrawals are enabled.
• Monitoring of accounts whose behavior is inconsistent with the registered profile.

If 888login determines that personal data from users under 18 was inadvertently collected, that information will be deleted immediately and the account closed. Parents and guardians should use parental control software to block minors' access to online betting platforms.

We do not knowingly collect personal data from children (under 12) or teenagers (ages 12–17). To report unauthorized platform access by a minor, please contact us at suporte@888login.asia.

888login may send marketing communications by email, SMS, or push notification about promotions, bonuses, sporting events (Brasileirão, Copa do Brasil, Libertadores, UFC, NBB, and others), and platform news — only with your prior consent.

How Consent Works

During registration, there is an opt-in option to receive marketing communications. This option is not pre-checked — you must actively select it to start receiving marketing messages from 888login.

How to Opt Out

• Email marketing: Click the "Unsubscribe" link in the footer of any 888login marketing email. Opt-outs are processed within 48 hours.
• Push notifications: Disable via your browser settings or your phone's operating system.
• SMS: Reply "STOP" to any SMS received from 888login.
• Account dashboard: Go to your notification settings in your 888login account and uncheck the options you wish to disable.
• Support: Submit your cancellation request via live chat or email at suporte@888login.asia.

Opting out of marketing does not affect essential transactional communications — such as deposit, withdrawal, and bet confirmations, account security alerts, and legally required notifications.

888login may update this Privacy Policy periodically to reflect changes in legislation, data processing practices, or platform features.

Any material changes will be communicated at least 7 days' notice through:

• Email sent to the address registered on your account.
• Visible notification in the account dashboard on the next login after an update.
• Informational banner on the 888login homepage.

The date of the last update is always shown at the top of this page. Continued use of the platform after the effective date of any updated terms constitutes acceptance of the revised Privacy Policy.

If you do not agree with the changes, you may exercise your right to data deletion and close your account before the effective date, as described in Sections 7 and 9 of this Policy and in the Terms and Conditions from 888login.

For any questions about this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, contact 888login through the channels below:

• Privacy email (DPO): suporte@888login.asia — Subject: "LGPD – [your request]". Response time: up to 15 business days.
• Live chat: Available 24 hours a day, 7 days a week, directly on the platform. Average response time: under 2 minutes. Recommended for general questions and urgent account security requests.
• National Data Protection Authority (ANPD): If your request to 888login is not satisfactorily resolved within the legal timeframe, you may file a complaint directly with the ANPD through the official Brazilian government website (gov.br/anpd).