Privacy Policy of 88games – How We Protect Your Data

1. Data Controller

For the purposes of the Lei Geral de Proteção de Dados (LGPD – Law No. 13.709/2018), the controller responsible for processing the personal data of 88games platform users is the company operating the website https://88games.click, with customer support available via live chat on the platform itself and by email at privacidade@88games.click.

The controller is responsible for defining the purposes and means of processing the personal data collected during registration, gameplay, financial transactions, and general use of the 88games platform by Brazilian players.

2. Personal Data We Collect

2.1 Data you provide directly

During registration and use of the 88games platform, you provide us directly with:

• Identification data: full name, CPF, date of birth, gender;
• Contact details: email address, mobile number;
• Residential address: street, number, unit, neighborhood, city, state, and ZIP code;
• Verification documents (KYC): copy of an official photo ID (RG, CNH, passport), proof of address, selfie holding the document;
• Financial data: Pix key for withdrawals, bank details for wire transfers, credit or debit card details (stored in tokenized form by the payment processor).

2.2 Data generated through platform use

While you use 88games, the system automatically collects:

• Full history of Sports Betting, Live Casino, crash games, slots, and e-sports wagers;
• Deposit history, withdrawals, and account balance;
• Usage sessions: login and logout times, session duration, pages and games accessed;
• Technical data: IP address, device type (mobile, tablet, desktop), operating system, browser and version;
• Security logs: login attempts, password changes, withdrawal requests.

2.3 Communication data

When you contact 88games support via live chat, email, or any other channel, the content of those communications is stored for dispute resolution, service improvement, and legal compliance purposes.

3. How We Use Your Data

88games uses the personal data collected exclusively for the following purposes:

• Account operation: creation, maintenance, and security of the player's account on the platform;
• Identity verification (KYC): age, identity, and residency confirmation to meet the legal obligations of the sports betting market;
• Transaction processing: deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago; withdrawals via Pix and TED;
• Bet and game execution: processing, settlement, and recording of all bets and game rounds;
• VIP Program: betting volume calculation, level progression, weekly cashback calculation and crediting;
• Promotions and bonuses: eligibility verification, rollover tracking, and bonus crediting;
• Responsible gambling: monitoring gameplay patterns to identify at-risk behaviors; enforcing limits and self-exclusions requested by the player;
• Fraud prevention and anti-money laundering: analysis of transaction patterns and behavior to detect illicit activity;
• Customer support: handling and resolution of requests, complaints, and disputes;
• Operational communications: account notifications, transaction updates, changes to terms, and promotions the player has opted in to receive;
• Legal compliance: compliance with orders from competent judicial, law enforcement, or regulatory authorities.

4. Data Sharing

88games shares personal data only in the following situations, always with the necessary safeguards in place:

4.1 Essential service providers

To operate the platform, 88games works with service providers that necessarily have access to personal data, including:

• Payment processors: companies responsible for processing Pix, boleto bancário, credit and debit cards, PicPay, and Mercado Pago. These processors receive only the data strictly necessary to complete each transaction and are contractually bound to maintain confidentiality.
• Game providers: companies such as Spribe, Pragmatic Play, Evolution Gaming, SmartSoft Gaming, and other casino and crash game providers receive the session identifiers required to operate the games. These providers are internationally licensed and audited.
• Infrastructure providers: hosting, CDN, and security companies that support the platform's technical operation, subject to strict confidentiality agreements.
• KYC providers: document and identity verification services used to fulfill the legal obligations of the sports betting market.

4.2 Legal Obligations

88games may share data with government, law enforcement, judicial, or regulatory authorities when legally required to do so — for example, in compliance with a court order, a financial crime investigation, or a determination by the ANPD. In such cases, we share only the minimum information required by the legal demand.

5. Cookies and Tracking Technologies

88games uses cookies and similar technologies to ensure the platform functions correctly, improve the player experience, and meet security obligations. The types of cookies used are:

• Essential cookies: required for the platform's basic operation — maintaining login sessions, language preferences, and security. These cookies cannot be disabled without affecting the platform's functionality.
• Performance cookies: collect anonymous information about how players use the platform to help identify technical issues and improve the experience. No personally identifiable information is collected by these cookies.
• Functionality cookies: remember player preferences (such as preferred layout or game settings) to personalize the experience without requiring reconfiguration on every visit.

You can manage your cookie preferences through the consent banner displayed on your first visit to the platform or through your browser settings. Disabling essential cookies may prevent 88games from functioning normally.

6. Data Security

88games implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL encryption on all connections between the player and the platform's servers;
• Passwords stored with strong cryptographic hashing — even the support team cannot access your password;
• Credit card data stored in tokenized form by the payment processor — never on 88games's own servers;
• Strict access controls on personal data — only staff with a verified business need can access players' personal information;
• Audit log of all access to personal data by employees and internal systems;
• Penetration testing and periodic security assessments carried out by specialized external firms;
• Two-factor authentication is available for all accounts and mandatory for high-value transactions.

No system is 100% invulnerable. If you notice any suspicious activity on your account — an unrecognized login, an unauthorized transaction, or any other irregularity — contact 88games support immediately via the live chat available 24 hours a day.

7. Data Retention and Deletion

88games retains personal data for as long as necessary for each purpose, respecting the minimum retention periods required by law:

• Active account data: retained for as long as the account remains active on the platform;
• Financial and transaction data: retained for a minimum of 5 years after the last transaction, in accordance with Brazilian tax and anti-money laundering legislation;
• Betting records: retained for a minimum of 5 years for dispute resolution and regulatory audit purposes;
• KYC documents: retained for at least 5 years after account closure, in accordance with legal obligations;
• Security logs: retained for a minimum of 1 year for incident analysis;
• Support communications: retained for 2 years for dispute resolution purposes.

Data that is no longer needed for any legitimate purpose and is not subject to a legal retention period is deleted securely and irreversibly. You may request early deletion of data not subject to mandatory retention through the privacy channel.

8. International Data Transfers

Some service providers used by 88games — including international game providers, cloud infrastructure services, and fraud prevention systems — may process personal data outside Brazil. When this occurs, 88games ensures the transfer complies with Article 33 of the LGPD through:

• Specific data protection clauses in contracts with international providers;
• Internationally recognized security certifications and standards (ISO 27001, SOC 2) from the providers involved;
• Verification that the destination country offers an adequate level of protection for the data of Brazilian users.

9. Minors

The 88games platform is intended exclusively for users aged 18 and over. 88games does not intentionally collect or process personal data from minors. Registration requires a date of birth and CPF, and the system automatically blocks registrations from individuals under 18.

If 88games becomes aware that data belonging to a minor was inadvertently collected, that data will be immediately deleted and the account will be closed. If you believe a minor has created an account on the platform, contact privacidade@88games.click immediately.

10. Marketing & Communications

88games may send communications about promotions, bonuses, platform updates, and VIP Program information to players who opted in to receive such messages during registration or via their account settings.

You can opt out of marketing communications at any time:

• Via the unsubscribe link included in every marketing email;
• Through the notification settings in your account dashboard;
• By contacting support via live chat or by emailing privacidade@88games.click.

Opting out of marketing communications does not affect essential operational messages — transaction notifications, account security alerts, and communications about changes to our terms are sent regardless of your marketing preferences.

11. How to Exercise Your Rights

To exercise any of the rights described in this policy — access, correction, deletion, portability, objection, blocking, information, or withdrawal of consent — you may use the following channels:

• Live chat: available 24 hours a day, 7 days a week, directly on the 88games platform. Average response time: under 5 minutes;
• Privacy email: privacidade@88games.click — for more formal or complex requests that require a detailed review;
• Account dashboard: some actions, such as updating contact details and marketing preferences, can be done directly by the player in the dashboard.

88games responds to data subject rights requests within 15 business days of receipt, as required by the LGPD. For complex requests that require in-depth analysis, the deadline may be extended by an additional 15 business days, with prior notice to the data subject regarding the need for the extension.

12. Data Protection Officer (DPO)

88games has a designated Data Protection Officer (DPO) responsible for:

• Ensure 88games's compliance with the LGPD and all other applicable data protection regulations;
• Handle data subject requests and complaints;
• Guide company staff on data protection best practices;
• Serve as the point of contact between 88games and the Autoridade Nacional de Proteção de Dados (ANPD).

To contact the 88games DPO directly: privacidade@88games.click. This channel is monitored on business days, with a first-response time of up to 2 business days.

13. Security Incidents

Despite all security measures in place, the occurrence of a security incident cannot be entirely ruled out. In the event of an incident involving players' personal data, 88games commits to:

• Immediately investigate the scope and nature of the incident once it is identified;
• Contain the incident and take steps to prevent further harm;
• Notify the ANPD within the timeframe established by the LGPD (generally 2 business days for high-risk incidents);
• Notifying affected data subjects when an incident could cause significant risk or harm, with clear information about what happened and the steps we are taking to address it;
• Take corrective measures to prevent recurrence.

Transparency with players in the event of a security incident is a non-negotiable commitment at 88games. We do not attempt to conceal or downplay occurrences that may affect your data.

14. Changes to This Policy

88games may update this Privacy Policy periodically to reflect changes to the platform, privacy practices, or legal requirements. Material changes — especially those that expand data use or affect data subjects' rights — will be communicated by email at least 15 days before they take effect.

The date of the last update is always shown at the top of this page. The current version is available at https://88games.click/privacy-policy. Previous versions can be requested by emailing privacidade@88games.click.