BR77 handles your personal data responsibly and transparently, in compliance with the General Data Protection Law (LGPD). Here you'll find exactly what we collect, why we collect it, and how we protect every piece of your information.
Six pillars that protect the privacy of every registered player on the platform
All communication between your mobile device or computer and BR77's servers is protected by 256-bit SSL encryption — the same standard used by banks and financial institutions in Brazil. Your login credentials, personal information, and financial transactions are never transmitted in plain text.
BR77 operates in compliance with the General Data Protection Law (Lei nº 13.709/2018). This means you have clear rights over your data, that BR77 requires a legal basis for every processing activity, and that a Data Protection Officer (DPO) is responsible for the platform's compliance.
BR77 does not sell, rent, or transfer your personal data to third parties for commercial purposes, external marketing, or any purpose unrelated to the platform's operation. Your data is yours — BR77 only processes it to deliver the service you signed up for.
Any registered BR77 player can, at any time, request access to their personal data, ask for incorrect information to be corrected, withdraw previously given consent, or request account and data deletion — all through the support channel or the account dashboard.
When BR77 needs to share data with partners — such as payment providers that process transactions via Pix, boleto, or card — those partners are contractually required to protect your information with the same level of care demanded by the LGPD and the platform's internal standards.
In the event of any security incident that may affect your personal data, BR77 commits to notifying the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with clear information about what happened and what measures were taken.
This Privacy Policy applies to all registered players on BR77 (br77.world) and describes how we handle your personal data. By creating an account or continuing to use the platform, you confirm that you have read and understood this document. Questions: suporte@br77.world.
BR77 is a Sports Betting and online gaming platform operated under the domain br77.world, focused exclusively on the Brazilian market. For the purposes of this Privacy Policy and the General Data Protection Law (LGPD — Lei nº 13.709/2018), BR77 acts as personal data controller of registered players.
As the data controller, BR77 is responsible for defining the purposes and means by which personal data is processed. All processing activities described in this policy follow the principles of the LGPD: purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability.
BR77 has appointed a Data Protection Officer (DPO) responsible for handling communications from data subjects and the National Data Protection Authority (ANPD). The DPO's contact information is available in Section 13 of this policy.
BR77 collects only the data necessary for the platform to operate and to meet legal obligations. The categories of data collected include:
Full name, date of birth, CPF, full address (ZIP code, street, number, complement, neighborhood, city, state), email address, and mobile number. This data is provided by the player during registration and is required to create a BR77 account.
Deposit and withdrawal details: payment method used (Pix, boleto, card, PicPay, Mercado Pago, TED), amounts, dates, and associated account keys or details. BR77 does not store complete credit or debit card numbers — this data is processed directly by our partner payment providers.
Betting history, games played, amounts wagered, winnings, game sessions, time spent on the platform, poker tournaments entered, and interactions with promotions and bonuses. This data is generated automatically through platform use.
IP address, browser type and version, operating system, device (mobile, tablet, or desktop), session identifiers, access date and time, and pages visited within the platform. This data is collected automatically for security purposes and to improve the user experience.
Copies of identity documents (RG, CNH, or passport), proof of address, and any selfies requested for identity verification. These documents are collected when required by the KYC process and are stored with access restricted to BR77's compliance team.
Live chat transcripts, emails sent to support, and records of interactions with the BR77 customer service team. These communications are stored for quality assurance, dispute resolution, and internal training purposes.
BR77 processes personal data solely for the purposes described below. No data is used for purposes other than those listed here without the data subject's express consent or a new legal basis:
Every personal data processing activity carried out by BR77 has a specific legal basis under the LGPD. The bases used are:
When processing is based on legitimate interest, BR77 conducts an internal balancing test to ensure that the interest does not override the fundamental rights and freedoms of data subjects. The results of this test may be requested from the DPO via suporte@br77.world.
BR77 does not sell, rent, or transfer players' personal data to third parties for commercial purposes. Data sharing occurs only in the following situations, all with a valid legal basis:
In all cases of data sharing, BR77 contractually requires recipients to implement appropriate security measures and use the information solely for the authorized purposes.
BR77 uses cookies and similar technologies to ensure the platform works correctly, personalize the player experience, and analyze site usage. The categories of cookies used are:
You can manage your cookie preferences in your browser settings. Disabling essential cookies may prevent access to critical platform features, such as login and transaction processing.
BR77 does not use third-party cookies for external behavioral advertising — meaning your browsing data on the platform is not used to show you ads on other websites outside of BR77.
BR77 implements technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, accidental or unlawful loss, or destruction. Key measures include:
No system is 100% breach-proof. For this reason, BR77 recommends that players also adopt basic security practices: use a strong, unique password for your account, enable two-factor authentication when available, and never share your login credentials with third parties.
BR77 retains personal data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. The main retention periods are:
Once the applicable retention periods have elapsed, data is securely deleted or irreversibly anonymized. Players may request early deletion, but such requests may be limited when retention is legally required or necessary for the defense of judicial, administrative, or arbitration proceedings.
The LGPD grants a range of rights to personal data subjects. As a registered BR77 player, you have the following rights, which can be exercised at any time by contacting us at suporte@br77.world:
| Right | What it means | How to exercise |
|---|---|---|
| Access | Know what data BR77 holds about you | Email support |
| Correction | Correct incomplete or outdated data | Account dashboard or support |
| Anonymization or deletion | Remove unnecessary or excessive data | Email the DPO |
| Portability | Receive your data in a structured format | Email the DPO |
| Withdrawal of consent | Withdraw previously given consent | Account dashboard or support |
| Objection | Object to processing carried out on the basis of legitimate interest | Email the DPO |
| Sharing information | Know who your data has been shared with | Email support |
| Review of automated decisions | Request human review of algorithmically made decisions | Email the DPO |
BR77 responds to rights exercise requests within 15 calendar days from the date of receipt. In more complex cases, this period may be extended by an equal amount of time, with prior notice to the requester.
To confirm that a request is legitimate, BR77 may require identity verification before processing requests for data access, deletion, or portability. This procedure exists to protect the data subject against attempts by third parties to access their information.
BR77 is a platform intended exclusively for users aged 18 and over. Registration is prohibited for minors, and BR77 takes active measures to identify and block underage registration attempts.
If it is determined that a user under 18 has created an account at BR77 — whether through false information provided at registration or by any other means — the account will be immediately closed and all personal data collected will be deleted from the platform's systems as quickly as possible, subject only to any legal obligations requiring minimum retention.
BR77 does not intentionally collect personal data from children or minors and does not direct any communications, advertising, or content toward this audience. If you become aware that a minor has accessed the platform, please contact us immediately at suporte@br77.world.
In certain situations, personal data from BR77 players may be processed or stored on servers located outside Brazil — for example, when game providers or cloud infrastructure services operate internationally.
When this occurs, BR77 ensures that any international data transfer meets at least one of the conditions established by the LGPD:
BR77 maintains an up-to-date record of all international data transfers carried out and can make this information available to players who request it by contacting the DPO.
BR77 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or platform modifications. The date of the most recent update is always shown at the top of this page.
When changes are significant — especially when they affect data subjects' rights or introduce new processing purposes — BR77 will notify active account holders by email and/or platform notification with at least 7 days in advance before the changes take effect.
We recommend revisiting this page periodically to stay informed about how BR77 protects your personal data. Any questions about changes can be sent to suporte@br77.world or directly to the DPO.
To exercise any of the rights described in this policy, ask questions about how your personal data is handled, or file a privacy-related complaint, please contact BR77 through the following channels:
BR77 responds to all personal data requests within 15 calendar days. If the request requires more detailed review, the deadline may be extended by an additional 15 days, with prior notice to the requester explaining the reason for the extension.
If you are not satisfied with BR77's response, you have the right to file a complaint with the National Data Protection Authority (ANPD), the authority responsible for overseeing LGPD compliance in Brazil.
This Privacy Policy should be read together with the Terms and Conditions of BR77. In the event of any conflict between documents on privacy matters, this Privacy Policy shall prevail.
When you create a BR77 account and start depositing via Pix, betting on the Brasileirão, or playing casino slots, you inevitably share personal information with the platform. That's natural and necessary — without a name, CPF, and payment details, there's no way to create an account, process withdrawals, or meet the legal obligations of Brazil's regulated betting market. What isn't natural — and what BR77 firmly rejects — is using that information in any way that doesn't directly benefit the player.
The reality of the online betting market in Brazil — and globally — is that many platforms collect more data than necessary, share information with marketing partners without transparency, and make it very difficult for players to exercise their rights. BR77 was built with a different approach: collect only what is needed to operate effectively, be transparent about what is done with each category of data, and ensure that exercising your rights as a data subject is simple and straightforward.
LGPD compliance is not a differentiator for BR77 — it is the minimum baseline. Brazilian data protection law gives you, the player, the right to know what has been collected, request corrections, ask for deletion, and withdraw consent. These rights exist regardless of whether any company chooses to honor them. BR77 goes beyond mere legal compliance: this privacy policy was written in plain language, the DPO is available for direct contact, and the rights-exercise process was designed to be straightforward, not to create barriers.
In practical terms, the data you most want to protect — CPF, banking details, identity documents — is exactly what BR77 handles with the greatest care. Documents submitted during the KYC process are stored with access restricted to the compliance team, are never shared with game providers or marketing partners, and are securely disposed of after the minimum period required by law. When you deposit via Pix, transaction data stays between you, your bank, and the payment processor — BR77 does not store Pix keys unnecessarily.
Technical security is taken equally seriously. 256-bit SSL ensures no one can intercept your connection when accessing BR77 from your phone on any network. The platform's internal systems are continuously monitored to detect suspicious activity. And if a security incident occurs that affects your data, BR77 notifies both the affected users and the ANPD within the timeframes set by the LGPD — because transparency in difficult moments matters just as much as in routine ones.
If you have any questions about how your data is handled at BR77 — whether a simple question about what is stored in your account or a formal portability request — the fastest way to reach us is through live chat, available 24 hours a day. For more specific privacy matters, the DPO is reachable by email with the subject line "DPO – Data Protection". Your privacy is not a footnote at BR77 — it is a core responsibility of the platform.
The LGPD guarantees these rights to every data subject — and BR77 is fully prepared to honor them
Request a copy of all personal data BR77 holds about you at any time, including the purposes for which each piece of data is processed.
Correct inaccurate, outdated, or incomplete data directly in the account dashboard or by contacting BR77 support.
Request the deletion of data processed on the basis of consent. Data subject to a legal retention obligation is kept only for the minimum period required.
Receive your data in a structured, machine-readable format so you can transfer it to another service, as provided under the LGPD.
Withdraw consent given for processing based on this legal basis — such as marketing communications — at any time, with no penalty.
Object to processing carried out on the basis of BR77's legitimate interest. Your request will be reviewed and answered within 15 calendar days.
Request human review of any automated decision — such as account suspension or withdrawal denial — that affects your interests.
Find out exactly which third parties BR77 has shared your personal data with and the purpose of each disclosure.
Caring for your personal data is part of BR77's broader commitment to player well-being. The platform also offers responsible gaming tools: deposit limits, session alerts, and self-exclusion. Visit the Responsible Gaming to learn more. BR77 is strictly prohibited for users under 18.
With data protected by 256-bit SSL, full LGPD compliance, and complete transparency over every processing activity, you can enjoy BR77 with peace of mind. Sign up, deposit via Pix, and explore over 3,000 games.