87app Privacy Policy – Protecting Your Data

87app is the controller of personal data processed under this Privacy Policy. The platform is available at https://87app.best and offers Sports Betting, Live Casino, slots, crash games, and a VIP Program exclusively to users residing in Brazil with a valid CPF and a minimum age of 18.

For any privacy or personal data processing inquiries, the official contact channels are contato@87app.best or the 24-hour support chat on the platform. 87app's Data Protection Officer (DPO) can be reached through these same channels — simply identify your message as a DPO request.

87app collects the minimum data necessary to operate its services securely and in compliance with Brazilian law. The data collected is grouped into the categories below:

87app does not collect unnecessary sensitive data such as biometrics, racial origin, political opinion, religious belief, or health information. Credit and debit card data is processed directly by a certified payment processor and is never stored on the platform's servers.

Every piece of data collected by 87app has a specific purpose. We do not engage in generic or open-ended processing — each use is tied to a clear operational need or legal obligation:

• Creating and managing your account: name, CPF, email, and mobile number are used to uniquely identify you on the platform, ensure there is only one account per CPF, and grant access to our services.
• Processing deposits and withdrawals: financial data is used solely to process your transactions in BRL — whether via Pix, boleto, card, PicPay, or Mercado Pago — and to verify that deposits and withdrawals come from the CPF linked to your account.
• Operate the VIP Program: deposit history and betting volume are used to calculate your VIP level (Bronze, Silver, Gold, Platinum, or Black) and to apply cashback benefits, priority withdrawals, and exclusive odds.
• Providing customer support: Your account data and activity history are accessed by support agents 24/7 solely to resolve issues you raise — including your dedicated VIP manager for Platinum and Black members.
• Fraud and money laundering prevention: financial transaction data and betting activity are monitored to identify patterns indicating fraudulent use of the platform, in compliance with Law No. 9,613/1998.
• Personalize your experience: sports preference data (football, Libertadores, volleyball, NBB, MMA/UFC) and product preferences (Live Casino, slots, crash games) are used to show relevant content and promotions suited to your profile — never to be sold to third parties.
• Operational communications: email and mobile number are used to send registration confirmations, security alerts, account updates, and VIP Program communications. You may opt out of promotional communications at any time.
• Compliance with legal obligations: data may be retained to comply with orders from Brazilian regulatory and judicial authorities, including the Receita Federal, Banco Central, and the judiciary, when a reasoned order is issued.

The LGPD requires that every processing of personal data be grounded in a legal basis listed in Article 7 of the law. 87app processes your data under the following legal bases:

87app never sells, rents, or trades users' personal data. Data is shared only when strictly necessary to operate our services or meet legal obligations:

• Payment processors: minimal financial data is shared with the processors responsible for Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago — all PCI DSS-certified and contractually prohibited from using the data for any other purpose.
• Casino and slots providers: to operate live casino games and slots, 87app shares only the minimum session data required with partner providers — no full name, CPF, or financial details.
• Cloud infrastructure: hosting servers located in data centers with certified security standards. Contracts with infrastructure providers include data protection clauses compatible with the LGPD.
• Competent authorities: 87app may share data with Brazilian regulatory, law enforcement, or judicial authorities when there is a valid legal requirement — including the Receita Federal, Banco Central, Ministério Público, or a reasoned court order.

All third parties that receive 87app user data are bound by contracts that impose confidentiality obligations and restrict data use strictly to the agreed purpose. 87app conducts periodic due diligence on partners that process user data.

87app implements technical and organizational measures to protect your personal data against unauthorized access, accidental loss, improper alteration, or destruction. The main measures in place include:

• 256-bit SSL/TLS encryption on all communications between the user's device and 87app's servers.
• Passwords are stored using secure hashing — 87app never stores passwords in plain text.
• Internal access control based on the principle of least privilege — only employees with a genuine need can access user data.
• Continuous monitoring of access and intrusion attempts on platform systems.
• Two-factor authentication (2FA) is available for your account — we strongly recommend enabling it.
• Encrypted backups performed regularly in an isolated environment.
• Penetration testing and security audits conducted periodically by a specialized team.

87app retains personal data only for as long as necessary for the purposes for which it was collected, or to fulfill legal obligations. Retention periods vary by data category:

• Active account data: retained for as long as the account remains active on the platform.
• Financial and transactional data: retained for 5 years after the last transaction, as required by tax legislation and anti-money laundering laws (Law No. 9,613/1998).
• Registration data after account closure: retained for up to 5 years for audit and legal compliance purposes, then deleted.
• Access logs: retained for 6 months as required by the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
• Non-essential cookie data: expire according to each cookie's lifespan, typically between 30 days and 1 year.

Once the applicable retention period has passed, data is securely deleted or anonymized so it can no longer be linked to a specific user. You may request early deletion of your data — except for data that the law requires 87app to retain for a set period.

The LGPD grants you, as the data subject whose personal data is processed by 87app, the following rights. All of them can be exercised via support chat or at contato@87app.best:

Requests are responded to within 15 business days. In more complex cases, this period may be extended by an equal amount of time, with notice to the requester. If 87app is unable to fulfill a request due to a legal obligation, the reason will be clearly communicated. If you are not satisfied with the response, you may contact the National Data Protection Authority (ANPD).

87app uses cookies and similar technologies to ensure the platform works correctly, improve your experience, and — with your consent — personalize content and analyze platform usage. The types of cookies we use are:

You can manage cookie preferences in your browser settings or in the 87app preferences panel. Disabling performance and preference cookies may affect experience personalization, but will not prevent you from using the platform's core features.

87app is a platform intended exclusively for users aged 18 and over. Registration or use of the platform by minors is strictly prohibited — this restriction is stated in the Terms and Conditions and enforced through the platform's identity verification processes.

87app does not intentionally collect personal data from users under 18 years of age. If we identify that a registered user does not meet the minimum age requirement, the account will be closed immediately and all collected data will be deleted, except for information that must be retained under legal obligation.

If you suspect a minor is using the platform — even with an adult's consent or credentials — contact 87app support immediately via the 24-hour chat or by emailing contato@87app.best. We have a zero-tolerance policy toward any situation involving minors.

Some of 87app's operational partners — such as cloud infrastructure providers and Live Casino and slots game providers — may have servers located outside Brazil. When this occurs, 87app ensures that international data transfers comply with LGPD requirements:

• International transfers occur only to countries with a level of data protection equivalent to the LGPD, as assessed by the ANPD.
• Where no recognized equivalence exists, 87app enters into standard contractual clauses that impose on the recipient data protection obligations equivalent to those required under the LGPD.
• Data transferred internationally is limited to the minimum necessary for the specific service — no complete financial data or full CPF unless required by local regulation.

87app prioritizes partners with servers located in Brazil or South American countries whenever technically and economically feasible, as part of our commitment to keeping Brazilian users' data as close to its origin as possible.

87app may update this Privacy Policy periodically to reflect changes in its services, Brazilian legislation, or data processing practices. Any material change will be communicated at least 7 days in advance via the registered email address and a banner on the platform.

The date of the last update is always shown at the top of this page. Continued use of the platform after changes take effect will be considered acceptance of the updated version. If you do not agree with the changes, you may request account closure before the effective date.

Changes arising from new legal obligations or ANPD determinations may take effect immediately, with simultaneous notice to users. 87app will maintain a version history of this policy, available upon request to the DPO.

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, 87app provides the following contact channels:

• Support chat: available 24 hours a day, 7 days a week, directly on the platform — identify your message as a privacy request to be routed to the DPO.
• DPO email: contato@87app.best — include "Privacy" or "DPO" in the subject line for priority handling.

87app is committed to responding to personal data requests within 15 business days. If a request is more complex, the deadline may be extended by an additional 15 business days, with prior notice and a justification provided to the requester.

If you are not satisfied with 87app's response or believe your rights have been violated, you may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil.