Privacy Policy of 27game – Your Data Always Protected

The 27game is an online casino and Sports Betting platform operated by 27game Entertainment Ltd., serving exclusively the Brazilian market. Our site is available at 27game.best and offers products such as slots, progressive jackpot, poker, football betting (Brasileirão, Copa do Brasil, Libertadores), MMA/UFC, crash games, and Live Casino.

To provide these services securely and in a personalized way, 27game needs to collect and process certain personal data from its users. This Privacy Policy transparently describes everything you need to know about that process – in plain language, without unnecessary legal jargon.

The 27game collects personal data at different points during your interaction with the platform. Below are the categories of data we may process, depending on how you use the service:

The 27game does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or sexual orientation. We collect only what is necessary to provide our services, meet legal obligations, and ensure platform security.

Each piece of data collected by the 27game has a specific and legitimate purpose. We do not use your information for purposes not stated in this policy, and we do not sell it to third parties. See how we use each category of data:

• Registration data: creation and maintenance of your account, identity verification, operational communications (registration confirmation, password reset, security alerts);
• Identity data (KYC): age verification, account ownership confirmation, and compliance with anti-money laundering regulatory obligations;
• Financial data: processing of deposits via Pix, credit/debit card, boleto bancário, PicPay, Mercado Pago, and TED; processing of withdrawals via Pix; compliance with tax and regulatory obligations;
• Usage data: personalizing your platform experience, recommending relevant games, and analyzing patterns for responsible gambling detection and fraud prevention;
• Technical data: account security, detection of unauthorized access, technical troubleshooting, and performance optimization on mobile and desktop;
• Communication data: resolving requests, improving customer service, training the support team, and maintaining a historical record of interactions to protect both parties.

The 27game may use aggregated and anonymized data – with no possibility of individual identification – for statistical purposes and product improvement, without requiring specific consent, in accordance with the LGPD.

The General Data Protection Law (LGPD) requires that all personal data processing have a valid legal basis. The 27game applies the following legal bases, as set out in Article 7 of the LGPD, depending on the purpose of each processing activity:

• Contract performance – processing required to deliver the contracted services when you create an account and use the platform;
• Compliance with a legal or regulatory obligation – such as identity verification (KYC), anti-money laundering compliance, and legally required retention of financial records;
• Legitimate interest – for platform security, fraud prevention, and service improvement purposes, provided these do not override your interests or fundamental rights;
• Consent – for marketing communications, promotional offers, and personalized content. You may withdraw this consent at any time without affecting your access to the platform.

The 27game does not sell users' personal data. Sharing with third parties occurs only in the following situations, all with a legitimate and proportionate purpose:

• Payment providers: only the minimum necessary financial data is shared with Brazilian payment processors to carry out deposits via Pix, card, and boleto bancário, and withdrawals via Pix. These partners operate under contracts with strict data protection clauses;
• Game providers: technical session data is shared with providers such as Pragmatic Play, NetEnt, and Play'n GO to run the games. No personally identifying data is transmitted beyond what is necessary for the gaming session;
• Identity verification services (KYC): for identity document validation and fraud prevention, in compliance with regulatory obligations;
• Public authorities: when required by law, court order, or police or regulatory investigation. 27game does not voluntarily share data with authorities without a formal legal order;
• Auditors and consultants: accounting, auditing, and legal advisory professionals who require access to data in the course of their duties, always under professional confidentiality obligations.

All third parties that receive data from the 27game are contractually required to handle this information with the same level of protection demanded by the LGPD, using it solely for the purposes for which it was provided.

The 27game applies appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, accidental disclosure, or destruction. Key safeguards in place include:

• Encryption in transit: all communication between your device and 27game's servers uses TLS/HTTPS protocol, preventing data interception over open networks;
• Encryption at rest: sensitive data at rest – including financial information and identity documents – is encrypted on our servers;
• Financial data tokenization: credit card data is not stored directly by 27game – it is tokenized by the PCI-DSS certified payment processor;
• Access control: only staff with a justified operational need have access to personal data, under multi-factor authentication and activity logging;
• Security monitoring: intrusion detection systems and continuous monitoring to identify and respond to threats in real time.

The 27game uses cookies and similar technologies to improve your experience on the platform. See the types of cookies we use:

• Essential cookies: required for the basic operation of the platform – such as keeping your session active after login. They cannot be disabled without affecting your use of the service;
• Performance cookies: collect anonymous data about how you use the site – which pages you visit most often, where errors occur – to help improve the experience. They do not identify you individually;
• Functionality cookies: remember your preferences, such as language and display settings, to personalize your experience without requiring you to reconfigure them on every visit;
• Analytical cookies: help 27game understand aggregated usage patterns and optimize platform performance on mobile devices and across different browsers.

You can manage your cookie preferences through your browser. Please note that disabling certain cookies may affect platform functionality. For details on how to manage cookies in each browser – Chrome, Safari, Firefox – refer to the privacy settings of your preferred browser.

The 27game retains your personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the mandatory legal retention periods applicable to the financial and entertainment sectors in Brazil.

The main criteria that determine the retention period are:

• Duration of the contractual relationship – for as long as your account remains active at 27game;
• Legal obligation to retain financial records – minimum period of 5 years under Brazilian tax legislation;
• Anti-money laundering – transaction records may be retained for up to 10 years pursuant to Law No. 9,613/1998;
• Defense in judicial, administrative, or arbitration proceedings, while pending or within the applicable statute of limitations.

Once the applicable retention period ends, data is securely deleted or anonymized so it can no longer be linked to you individually. If you request account closure, your data will be deleted or anonymized within the timeframes above, except where retention is legally required.

The LGPD guarantees you, as a data subject, a set of rights that the 27game is committed to respecting and facilitating. You may exercise any of these rights at any time through the platform's 24/7 support:

• Confirmation and access: find out whether we process your data and obtain a copy of the information we hold about you;
• Correction: request the update or correction of incomplete, inaccurate, or outdated personal data;
• Anonymization, blocking, or deletion: request that data which is unnecessary, excessive, or processed in violation of the LGPD be anonymized, blocked, or deleted;
• Portability: receive your personal data in a structured, interoperable format for transfer to another service provider;
• Deletion: request the deletion of data processed on the basis of consent, subject to mandatory legal retention periods;
• Consent withdrawal: withdraw consent given for processing based on that legal basis, without affecting your use of the service;
• Information on data sharing: know which third parties 27game has shared your data with;
• Objection: object to processing carried out on the basis of legitimate interest when you disagree with the balancing assessment made.

The services of 27game are intended exclusively for users aged 18 and over. The platform does not knowingly collect or process personal data from minors.

If you believe a child or minor has provided personal data to 27game without authorization, please contact our 24h support immediately. The data will be promptly deleted following verification of the case.

Some of the technology and game providers with which 27game operates infrastructure based outside Brazil. When this occurs, international data transfers are carried out in compliance with the LGPD requirements, which include:

• Transfer to countries with an adequate level of data protection, as assessed by the National Data Protection Authority (ANPD);
• Execution of standard contractual clauses ensuring protection equivalent to the LGPD for any transferred data;
• Adoption of binding corporate rules by the recipient, where applicable.

The 27game does not carry out international data transfers without contractual safeguards ensuring equivalent protection. If you would like details on which countries receive your data and what safeguards are in place, please contact our support team or the platform's DPO.

The 27game may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates to the LGPD, or product developments.

When material changes occur, you will be notified by email to your registered address and by a visible notice on the platform before the new version takes effect. The "last updated" date at the top of this page will always reflect when the current version was published.

We recommend reviewing this policy periodically. Continued use of the services of 27game following the publication of an updated version constitutes acceptance of the new terms.

The 27game has appointed a Data Protection Officer (DPO), as provided for in Art. 41 of the LGPD, responsible for serving as the communication channel between the platform, data subjects, and the National Data Protection Authority (ANPD).

To exercise your rights as a data subject, ask questions about this policy, or report any concern related to the processing of your personal data by 27game, please contact us through one of the channels below:

• 24/7 support chat: available directly on the 27game.best platform, with support in Portuguese;
• DPO Email: privacidade@27game.best – for formal requests related to your LGPD rights;
• General support email: suporte@27game.best – for operational questions about your account.

If you feel that your rights have not been adequately addressed by the 27game, you may file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the federal authority responsible for enforcing LGPD compliance in Brazil.