Privacy Policy of 888wiw — How We Protect Your Data

1Data Controller

The controller of the personal data processed in connection with the services of 888wiw is the platform itself 888wiw, responsible for determining the purposes and means of processing users' information in accordance with this Privacy Policy and the General Data Protection Law (LGPD — Law No. 13.709/2018).

For any questions regarding the processing of your personal data, you may contact the Data Protection Officer (DPO) of the 888wiw at contato@888wiw.com, with the subject line "Privacy and Personal Data". The DPO is the official channel for exercising your rights as a data subject.

2Data We Collect

The 888wiw collects personal data at different points during your interaction with the platform. Below are the categories of data collected and the context in which each is obtained:

Credit and debit card data are not stored directly on the servers of 888wiw — are processed by payment gateways certified in Brazil that comply with PCI DSS standards. 888wiw receives only payment confirmation and a transaction identifier.

3Purpose of Processing

The data collected by 888wiw are used exclusively for the purposes listed below. No data is processed for purposes incompatible with those for which it was collected, in accordance with the purpose limitation principle set out in the LGPD:

• Account creation and management: user identification, eligibility verification (18 years of age or older), access authentication, and operational account communications.
• Service provision: process Sports Betting on the Brasileirão Série A, Copa do Brasil, UFC, e-sports, Live Casino, slots, and all other products available on 888wiw.
• Payment processing: receive deposits via Pix, credit and debit card, PicPay, Mercado Pago, boleto bancário, and TED, as well as process withdrawals to the registered Pix key.
• Fraud and money laundering prevention: monitoring of suspicious activity, identity verification, and compliance with KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations.
• Compliance with legal obligations: record retention in accordance with regulatory requirements applicable to the betting and entertainment sector in Brazil.
• Platform improvement: usage behavior analysis (in aggregated and anonymized form) to improve the experience, identify technical issues, and develop new features.
• Marketing communications (with consent): sending 888wiw offers, promotions, and updates by email or mobile — only to users who have expressly consented to this type of communication.
• Customer Support: log and resolve requests, complaints, and inquiries submitted via live chat or email.

The 888wiw does not use your personal data for automated decisions that produce significant legal effects without the possibility of human review, except in cases expressly provided for under the LGPD.

4Legal Basis (LGPD)

Every personal data processing operation carried out by the 888wiw is based on at least one of the legal grounds set out in Article 7 of the General Data Protection Law (LGPD — Law No. 13,709/2018):

• Contract performance (art. 7, V): processing required to deliver the services contracted by the user when creating an account and using the platform — Sports Betting, casino, payments, and support.
• Compliance with a legal obligation (art. 7, II): identity verification, anti-money laundering, and other regulatory requirements applicable to the sector in Brazil.
• Legitimate interest (art. 7, IX): fraud prevention, platform security, and aggregated usage analysis for service improvement — always with respect for the fundamental interests and rights of data subjects.
• Consent (art. 7, I): sending marketing communications and using non-essential cookies. Consent may be withdrawn at any time at no cost and without affecting access to the services.

5Data Sharing

The 888wiw does not sell, rent, or share your personal data with third parties for their own commercial or advertising purposes. Data sharing occurs only in the situations described below, and always with appropriate safeguards in place:

• Payment processors: gateways certified in Brazil that enable transactions via Pix, credit and debit card, PicPay, Mercado Pago, boleto bancário, and TED. These partners act as data processors under contract with data protection clauses aligned with the LGPD.
• Identity verification providers: companies specializing in KYC (Know Your Customer) used to verify documents and confirm user identity before account activation or the processing of withdrawals above certain thresholds.
• Game providers: companies that develop slots, crash games, and live casino products integrated into the 888wiw platform. Only the minimum data required for the gaming session is shared.
• Competent authorities: when required by law, court order, or request from a competent regulatory authority, 888wiw may share data with Brazilian public bodies — such as COAF, the Federal Revenue Service, and the Public Prosecutor's Office — without requiring user consent in such cases.
• Auditors and legal advisors: professionals engaged for compliance audits, legal counsel, or regulatory processes, under confidentiality obligations.

In the event of a merger, acquisition, or corporate restructuring of 888wiw, user data may be transferred to the new entity — which will assume the same obligations set out in this Privacy Policy. You will be notified in advance of any significant change to the controller of your data.

6Storage & Security

The personal data of users of 888wiw are stored on secure servers with the following technical and organizational protection measures:

• Encryption in transit: all communication between your device and 888wiw's servers is protected by HTTPS with a 256-bit SSL certificate.
• Encryption at rest: sensitive data at rest — such as identity documents and financial information — is encrypted on our servers.
• Access control: access to personal data is restricted to staff and systems with a legitimate need, protected by multi-factor authentication and audit logs.
• Continuous monitoring: 888wiw's systems are continuously monitored for unauthorized access attempts, intrusion attempts, and behavioral anomalies.
• Backup and recovery: regular backups are performed to ensure data availability in the event of a technical failure — without compromising information security.

In the event of a security incident affecting users' personal data, 888wiw will notify the National Data Protection Authority (ANPD) and affected users within the timeframes established by the LGPD, detailing the nature of the incident, the data involved, and the measures taken.

7Retention Period

The 888wiw retains users' personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required by Brazilian law:

• Registration and identity data: retained for as long as the account remains active and for up to 5 years after closure, in accordance with sector regulatory requirements and anti-money laundering obligations.
• Financial history: deposit, withdrawal, and transaction records are retained for up to 5 years, in compliance with applicable tax and regulatory legislation.
• Betting history and casino sessions: retained for up to 3 years for audit purposes, dispute resolution, and compliance with regulatory obligations.
• Support records: conversations with 888wiw support are retained for up to 2 years to ensure service quality and resolve any disputes that may arise.
• Marketing communications: communication preferences and consents are retained for as long as the account remains active or until consent is withdrawn.

After account closure and once the minimum retention periods have been met, personal data is irreversibly anonymized or permanently deleted from the systems of 888wiw, where technically feasible.

8Cookies and Tracking Technologies

The 888wiw uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are as follows:

• Essential cookies: required for the platform's basic functionality — authentication, live betting sessions, bet slip, and language preferences. They cannot be disabled without affecting your use of the site.
• Analytical cookies: collect aggregated and anonymized data on how users navigate the platform — pages visited, session duration, and technical errors. Used to improve the product. Can be disabled without affecting platform use.
• Preference cookies: remember your personalized account settings, such as odds format (decimal or fractional), favorite sports, and preferred layout.
• Security cookies: help detect suspicious behavior, prevent fraud, and protect against brute-force attacks.

The 888wiw does not use third-party behavioral advertising cookies without your explicit consent. When you first access the platform, you will see a cookie notification with configuration options. You can manage your cookie preferences at any time through your browser settings or via your account's privacy dashboard.

9Data of Minors

All services provided by 888wiw — Sports Betting, e-sports, live casino, slots, crash games — are intended exclusively for users aged 18 and over. The platform does not intentionally collect, store, or process personal data from minors.

Registration requires date of birth confirmation and a valid CPF. Identity documents may be requested at any time to verify age. Accounts created by users under 18 are closed immediately upon identification, and any data collected is deleted in accordance with the applicable minimum legal retention period.

If you believe that the 888wiw inadvertently collected data from a minor, please contact us immediately at contato@888wiw.com. We will investigate and take the necessary steps without delay.

10How to Exercise Your Rights

The LGPD grants you, as a data subject, a set of rights that 888wiw is fully committed to upholding. To exercise any of the rights listed below, please reach out through the official channel:

• Access: request a full report of your data — response within 15 business days.
• Correction: request the correction of incorrect or incomplete data — registration data corrected within 72 hours.
• Deletion: request deletion of your data after account closure, subject to mandatory legal retention periods.
• Portability: request your data in a structured format (CSV or JSON) to transfer it to another service.
• Consent withdrawal: withdraw your consent for non-mandatory processing, such as marketing communications, at any time.
• Objection: object to processing carried out on the basis of legitimate interest whenever it infringes on your rights.
• Information: request details about who your data was shared with and the legal basis for doing so.

If you believe your rights have not been adequately addressed by the 888wiw, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for overseeing LGPD compliance in Brazil.

11International Data Transfer

In certain operational situations, personal data of users of the 888wiw may be processed by systems or partners located outside Brazil — such as casino game providers and analytics tools. When this occurs, 888wiw ensures the transfer complies with article 33 of the LGPD, through:

• Contracts with data protection clauses equivalent to LGPD requirements.
• Transfers to countries or international organizations whose level of data protection has been recognized as adequate by the ANPD.
• Necessity for the performance of the service agreement entered into with the user.

The 888wiw does not transfer data internationally for third-party commercial purposes. Where technically feasible, personal information of Brazilian users is preferably processed on servers located in Brazil.

12Changes to this Policy

The 888wiw may update this Privacy Policy periodically to reflect changes in its services, applicable Brazilian legislation — such as new ANPD regulations — or internal data processing practices.

Any material updates will be communicated via your registered email and/or an in-platform notification at least 7 days before the new version takes effect. The date of the last update is always displayed at the top of this document.

If you disagree with the changes made, you may exercise your right to close your account and request deletion of your data before the new version's effective date. Continued use of the 888wiw after that date constitutes acceptance of the updated Privacy Policy.

13Contact & DPO

For questions, requests related to your personal data, or inquiries about this Privacy Policy, please contact the Data Protection Officer (DPO) of 888wiw:

• Email: contato@888wiw.com — subject line "Privacy and Personal Data" or "LGPD Rights"
• Live chat: available 24 hours a day, 7 days a week, directly on the 888wiw platform
• Help center: section Frequently Asked Questions with answers on privacy and account security

The DPO of 888wiw is the official point of contact for privacy and data protection matters. All requests are handled confidentially and responded to within the timeframes established by the LGPD.