Privacy Policy of pg987: How We Handle Your Data

This Privacy Policy describes how pg987 ("the Platform", "we") collects, uses, stores, and protects the personal information of users who register and use the Sports Betting and online casino services available at pg987.best.

Pg987 is a platform built exclusively for the Brazilian market, operating in BRL (R$) and serving users residing in Brazil. All data processing described in this document follows the General Data Protection Law (Law No. 13.709/2018 — LGPD) and all other regulations applicable to operations in Brazil.

By creating an account at pg987, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data under the terms described herein. If you do not agree with any part of this document, please refrain from using the platform's services.

The pg987 collects personal information at different points during your interaction with the platform. The types of data collected are as follows:

Registration data:

• Full name, CPF, date of birth, and e-mail address — collected at the time of registration;
• Mobile phone number, when provided for two-factor authentication (2FA) or verification;
• Full residential address, requested during the identity verification (KYC) process.

Identity verification data (KYC):

• Copy of an official photo ID (RG, CNH, or passport);
• Proof of address issued within the last 3 months;
• Any additional documents requested for regulatory compliance or fraud prevention purposes.

Financial data:

• Pix keys registered for deposits and withdrawals (CPF, phone number, e-mail, or random key);
• Partial credit or debit card information — only the last 4 digits and card brand are stored by pg987; full processing is handled by PCI-DSS-compliant payment intermediaries;
• History of financial transactions on the platform (deposits, withdrawals, and bonus adjustments).

Platform usage data:

• Sports betting and casino game history;
• IP address and device information (operating system, browser type) used to access the platform;
• Login records, access times, and activity within the platform;
• Account configuration preferences (deposit limits, session alerts).

Each piece of data collected by pg987 has a specific purpose, and no information is processed beyond what is necessary to achieve that stated goal. The legal bases for data processing follow Articles 7 and 11 of the LGPD. See the main purposes below:

• Provision of contracted services: account management, bet processing, deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED transfers, as well as the payment of winnings;
• Identity verification and anti-fraud: confirmation that the user is over 18 years of age, resides in Brazil, and is not creating multiple accounts under the same CPF;
• Anti-money laundering: transaction monitoring to fulfill obligations under Brazilian financial crime prevention legislation;
• Responsible gaming: analysis of gaming patterns to identify at-risk behavior and offer proactive support when needed;
• Account communications: security notifications, deposit and withdrawal confirmations, access alerts, and important platform updates;
• Promotional communications: sending offers, promotions, and news from pg987 — only for users who have consented to this type of communication, with an unsubscribe option in every message;
• Compliance with legal obligations: compliance with requests from judicial, regulatory, or tax authorities as required by Brazilian law.

Pg987 does not use user data to build behavioral profiles for sale to third parties, for discriminatory automated decisions, or for any purpose not listed in this document.

The pg987 does not sell, rent, or transfer your personal data to third parties for commercial purposes. Information is shared only in the strictly necessary situations outlined below:

• Payment processors: minimal financial data is transmitted to payment intermediaries (such as Pix processors and card acquirers) to process transactions. All such partners have data processing agreements in place and operate in compliance with PCI-DSS and the LGPD;
• Infrastructure providers: hosting and cloud computing companies that store user data. These contracts include confidentiality and data protection clauses requiring compliance with the LGPD;
• Identity verification bureaus: specialized KYC services used to validate identity documents and proof of residence, acting solely for verification purposes;
• Legal and regulatory authorities: pg987 complies with requests from judicial, law enforcement, tax, or regulatory authorities when required by law, pursuant to a court order or duly substantiated formal request.

The pg987 uses cookies and similar technologies to ensure the platform works correctly and to improve the user experience. No data collected via cookies is shared with external advertising networks.

Types of cookies used:

• Essential cookies (required): necessary for the platform to function correctly — they keep the session active after login, store language preferences, and ensure bets are recorded securely. They cannot be disabled;
• Performance cookies: collect anonymized information about how users navigate the platform — which pages are visited most, where technical errors occur — to help us improve the experience. They do not identify individual users;
• Functionality cookies: remember personalized preferences such as display theme, saved sport filters, and betting settings. They can be disabled without affecting the platform's core functionality.

Pg987 does not use third-party tracking cookies for targeted advertising and does not integrate with networks such as Google Ads, Meta Pixel, or similar platforms that collect user data for advertising purposes outside the platform.

You can manage cookie settings directly in your browser. Disabling non-essential cookies does not affect account access or the betting and casino features on pg987.

The pg987 takes a layered security approach to protecting user information. The key measures in place include:

• 256-bit SSL Encryption across all communication between client and server, ensuring that financial and personal data cannot be intercepted in transit;
• Data encryption at rest for sensitive information stored on servers, including KYC documents and financial data;
• Role-based access control (RBAC) — only staff with a verified operational need can access user data, and every access is recorded in an auditable log;
• Two-factor authentication (2FA) available to all users and mandatory for staff with access to internal systems;
• Continuous monitoring of suspicious activity, unauthorized access attempts, and anomalies in transaction patterns;
• Periodic security audits carried out by an internal team and supplemented by external reviews;
• Incident response plan with defined procedures for containment, investigation, and notification in the event of a data breach.

The pg987 retains users' personal data for as long as necessary to fulfill the purposes for which it was collected and to meet applicable legal obligations. The general retention criteria are:

• Registration and active account data: retained for as long as the account remains active on the platform;
• Financial data and transaction history: retained for a minimum of 5 years after the last transaction, as required by Brazilian anti-money laundering regulations and tax obligations;
• KYC Documents: retained for the minimum period required by applicable regulations, generally 5 years after account closure;
• Security and access logs: retained for 12 months for incident investigation and compliance with legal requests;
• After account closure at the user's request: data is anonymized or deleted within 30 days, except where retention is required by law.

After the applicable retention period, data is securely deleted or irreversibly anonymized and can no longer be linked to the user's identity.

The General Data Protection Law grants you concrete rights over your personal data processed by pg987. See what you can request and how to exercise each right:

To exercise any of these rights, please contact our team by email at suporte@pg987.best with the subject line "LGPD – [Right Name]". We respond within the legal deadline of 15 business days.

The services of the pg987 are intended exclusively for users aged 18 and over. The platform does not intentionally collect personal data from minors under 18 and does not permit registration or use of its services by this audience.

If pg987 identifies that it has inadvertently collected data from a user under 18, that information will be deleted immediately and the account will be closed, with any available balance returned to the verified legal guardian.

If you believe a minor has created an account on pg987, contact us immediately at suporte@pg987.best with the subject line "Minor's Account". We will investigate the matter as a priority and take the necessary steps.

The pg987 can send two types of communications to users:

Transactional communications (mandatory): notifications directly related to your account and use of the services — Pix deposit confirmations, processed withdrawal alerts, security notices (suspicious login attempts, password changes), and important updates to the Terms and Conditions and this Privacy Policy. These communications cannot be opted out of, as they are necessary for the secure operation of your account.

Marketing communications (optional): promotional offers, exclusive bonuses, pg987 news, and updates on new betting markets and casino games. These communications are sent only to users who have consented to receive them and can be cancelled at any time:

• By clicking the unsubscribe link included in every marketing e-mail;
• Adjusting your communication preferences in the account dashboard;
• By sending a request to suporte@pg987.best with the subject line "Unsubscribe from Marketing Communications".

Unsubscribing from marketing communications takes up to 5 business days to process and does not affect the receipt of essential transactional communications about your account.

The pg987 may update this Privacy Policy to reflect changes in its services, Brazilian legislation, or data processing practices. Whenever a change is made:

• The update date at the top of the document will be changed;
• Material changes will be communicated to active users by email at least 7 days before the effective date;
• A notice will be displayed within the platform until the user confirms acknowledgment of the changes.

Continued use of the platform after the effective date of an updated version constitutes acceptance of the new terms. If you do not agree with the changes, you may request account closure before the effective date, with any available real-money balance returned via Pix.

The pg987 has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for receiving and responding to data subject requests and serving as the communication channel with the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, clarify any questions about this Privacy Policy, or report any concerns regarding the processing of your data, please contact us through the channels below:

If you are not satisfied with pg987's response to your personal data requests, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), the Brazilian regulatory body responsible for enforcing the LGPD.