888up Privacy Policy – Data Protection & LGPD

This Privacy Policy describes how the 888up — a Sports Betting and live casino platform available at 888up.best — collects, stores, uses, and protects the personal data of its users. This document is an integral part of the Terms and Conditions of the 888up and should be read together with them.

By 888up operates in full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018), the Marco Civil da Internet (Law No. 12,965/2014), and Banco Central do Brasil regulations applicable to payment operations. Data protection is not merely a legal obligation for us — it is a core value that guides how we build every feature on the platform.

By creating an account on 888up, you agree to the practices described in this policy. If you disagree with any aspect of this policy, we recommend that you do not use the platform and contact our support team for clarification before making any decision. This policy applies to all registered users of the 888up, including users who access the platform on mobile (Android or iOS), via a desktop browser, or through any other device.

By 888up collects only the data strictly necessary to operate its services securely. Data is divided into three categories:

We do not collect sensitive data such as racial or ethnic origin, religious beliefs, or genetic or biometric data beyond what is strictly necessary for identity verification. Credit and debit card data is tokenized by the payment processor and the 888up never stores your full card number at any point.

Each piece of data collected by the 888up has a specific and legitimate purpose. We process your personal data for the following purposes:

• Account creation and management: eligibility verification, CPF validation with the Federal Revenue Service, and maintenance of active registration;
• Processing financial transactions: deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago; withdrawals to accounts linked to the CPF registered with Brazilian banks (Nubank, Itaú, Bradesco, Banco do Brasil, Caixa, Santander, and others with an active Pix key);
• Identity verification (KYC): fulfillment of Know Your Customer regulatory obligations required by the Central Bank of Brazil prior to withdrawal approval;
• Anti-money laundering (AML): monitoring of transaction patterns and reporting to COAF as required by Law No. 9,613/1998;
• Responsible gambling: monitoring of gameplay patterns to identify at-risk behaviors and trigger the responsible gambling tools available on the platform;
• Fraud prevention: analysis of IPs, devices, and behavior patterns to identify multiple accounts, bonus abuse, and other fraudulent activity;
• Customer support: logging and resolution of requests submitted via live chat or email;
• Service communications: notifications about your account, transactions, terms updates, and security alerts;
• Platform improvement: aggregated and anonymized usage analysis to identify improvements to the 888up.

By 888up does not use your data for automated decisions that produce significant legal effects without human oversight. If you believe an automated decision has unfairly impacted your account, please contact support to request a manual review.

The LGPD requires that every personal data processing operation have a justified legal basis. The 888up processes your data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

• Contract performance (Art. 7, V): processing is required to fulfill the service agreement entered into at the time of registration — without this information, we cannot operate your account, process deposits, or handle withdrawals;
• Compliance with legal obligation (Art. 7, II): financial, identity, and transactional data are processed to comply with obligations imposed by the Central Bank, the Federal Revenue Service, and anti-money laundering laws;
• Legitimate interest (Art. 7, IX): browsing data and gameplay behavior are processed for fraud prevention and platform security improvements — legitimate interest of the 888up that does not override your fundamental rights;
• Consent (Art. 7, I): for marketing communications and the use of non-essential analytical cookies, processing is subject to your explicit consent, which may be withdrawn at any time.

By 888up never sells, rents, or trades your personal data with third parties for commercial purposes. Sharing is restricted to the situations below, always with appropriate safeguards:

• Payment processors: to process transactions via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago. These partners operate under a data processing agreement and may only handle the data strictly necessary to complete transactions;
• Identity verification providers (KYC): certified partners that perform document validation (RG, CNH) and facial verification for withdrawal authorization. Data is transmitted with encryption and is not retained beyond what is necessary;
• Game providers (live casino and slots): companies such as Evolution Gaming, Pragmatic Play Live, and Spribe receive an anonymous session identifier — not your personal data — to record game results. These providers are certified by international bodies (eCOGRA, GLI);
• Regulatory and judicial authorities: COAF, the Receita Federal, the Banco Central do Brasil, and the ANPD may receive data when required by law or court order. The 888up complies with all legal requirements and notifies the user whenever legally permitted;
• Technology infrastructure partners: cloud computing and cybersecurity providers that host the platform's infrastructure operate under strict confidentiality agreements and have no access to data content beyond what is required to deliver the technical service.

All partners with whom we share data are assessed for the adequacy of their privacy practices before any engagement. A 888up requires these partners to meet equivalent data protection and LGPD standards.

By 888up adopts a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction:

• Encryption in transit: all communication between your device and the servers of 888up is protected by 256-bit SSL/TLS encryption — including registration, login, financial transactions, and live casino access;
• Encryption at rest: sensitive data stored in our databases is encrypted using industry-standard algorithms (AES-256);
• Two-factor authentication (2FA): available to all users via authenticator app or SMS. We recommend enabling 2FA for added account security;
• Access control: only employees with a proven business need are granted access to users' personal data, with a full log of all accesses recorded;
• Continuous monitoring: automated systems monitor suspicious access attempts, logins from unusual locations, and anomalous transaction patterns in real time;
• Security testing: we conduct periodic penetration testing (pentest) with specialized firms and maintain a responsible vulnerability disclosure program;
• Backups: data is replicated across multiple datacenters with encryption to ensure availability and disaster recovery.

In the event of a security incident that affects your personal data — such as a breach that could pose a risk to your rights —, the 888up will notify you by email and notify the ANPD (Autoridade Nacional de Proteção de Dados) within 72 hours of identifying the incident, as required by the LGPD. The notification will include the nature of the incident, the data affected, and the measures we are taking.

By 888up retains your data for as long as necessary to fulfill the purposes for which it was collected, in accordance with the minimum retention periods established by Brazilian law:

Once retention periods expire, your data is anonymized or securely deleted. Anonymization eliminates any possibility of identification, and the resulting data is no longer considered personal data under the LGPD. To request early deletion of data not subject to a legal retention obligation, please contact 888up.

By 888up uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect aggregated analytical data. A cookie is a small text file stored on your device when you access the platform.

We use the following types of cookies:

• Essential cookies Always active
  Required for core platform functionality — session authentication, login persistence, bet slip, and security settings. These cannot be disabled as the platform cannot function without them.
• Preference cookies Configurable
  They store your preferences such as language, odds display settings, and betting limits so you do not have to reconfigure them on every visit.
• Analytics cookies With consent
  They collect anonymized data about how you use the platform — pages visited, session duration, most-used features — to help us improve your experience. Data is processed in aggregate and cannot be used to identify individual users.
• Security cookies Always active
  Used to detect suspicious behavior, prevent fraud, and protect your account against unauthorized access.

You can manage your cookie preferences at any time through the consent banner shown on your first visit or in your account settings. Disabling analytical cookies does not affect the platform's functionality. The 888up does not use third-party behavioral advertising cookies.

The LGPD grants concrete rights that 888up is committed to responding within the legally required timeframes. To exercise any right related to your personal data, follow the procedure below:

• Request channel: reach us at contato@888up.best with the subject line "Privacy — [Request Type]", or via the 24/7 live chat available on the platform;
• Identification: you will be asked to verify your identity to protect against unauthorized access. This may include submitting a photo ID and a code sent to your registered email or phone number;
• Response time: the 888up will respond to all requests within 15 business days of confirming the requester's identity, as required by the LGPD;
• Free of charge: exercising data subject rights is free of charge. In cases of manifestly unfounded or excessive requests, the 888up may charge a reasonable administrative fee, though this is rarely the case in practice;
• Justified refusal: in cases where fulfilling a request conflicts with a legal retention obligation (such as financial data that must be kept for 5 years), the 888up will explain the reason for refusal in writing;
• ANPD complaint: if you believe your rights have not been adequately addressed, you may file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.

In some cases, the processing of your data may involve transfers to countries outside Brazil — for example, when we use servers from international cloud providers or when live casino game providers process session data on their own systems.

By 888up ensures that all international data transfers are carried out in compliance with Art. 33 of the LGPD, specifically:

• Adequate level of protection: transfers only to countries or international bodies that provide a level of data protection equivalent to that of the LGPD, as assessed by the ANPD;
• Standard contractual clauses: when the recipient country has not been assessed for adequacy by the ANPD, we use specific contractual clauses that bind the recipient to the same data protection standards required by the LGPD;
• International certifications: partners such as payment processors and cloud providers are certified under international standards (ISO 27001, SOC 2) that ensure robust security practices.

Data transferred internationally is limited to the minimum necessary for services to function technically — anonymized session identifiers for gaming and transaction tokens for payment processing. Personally identifiable data such as CPF, full name, and banking details is stored primarily on servers located in Brazil.

This Privacy Policy may be updated periodically to reflect changes in our practices, Brazilian legislation, or the technologies we use. All relevant updates will be communicated by email at least 7 days before taking effect. The date of the last update is always displayed at the top of this document.

Continued use of the platform 888up after an updated version of this policy takes effect constitutes acceptance of the new terms. If you do not agree with the changes, you may close your account and request a withdrawal of your balance before the effective date.

• Data Protection Officer (DPO): 888up has a Data Protection Officer responsible for overseeing LGPD compliance. For privacy-related matters, please contact us at contato@888up.best;
• Applicable law: this policy is governed by the laws of the Federative Republic of Brazil. In the event of a conflict, the Brazilian Portuguese version shall prevail;
• Jurisdiction: the courts of the Comarca of São Paulo, State of São Paulo, are elected as the venue for resolving any disputes related to this policy;
• Related documents: this policy should be read alongside the Terms and Conditions and the 888up Responsible Gambling page.

Last updated on this Privacy Policy: January 2026. If you have any questions about how 888up handles your personal data, please contact support — available 24/7 in Brazilian Portuguese.