Legal Document — LGPD

Bomb777 Privacy Policy – Your Data Protected with Full Transparency

Bomb777 is committed to handling each user's personal data with respect, security, and full compliance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018). This document explains exactly what data we collect, why we collect it, and how we use it.

Your Rights at bomb777
Access all the data we hold about you
Request correction of incorrect data
Request deletion of your personal data
Withdraw consent at any time
Data never sold to third parties
256-bit SSL encryption across the entire platform

Our Commitments to You

How bomb777 protects your privacy

Six pillars that summarize bomb777's commitment to the security and privacy of every user registered on the platform.

Full LGPD Compliance
bomb777 operates in full compliance with the Lei Geral de Proteção de Dados (Law No. 13,709/2018). All processes involving the collection, storage, processing, and disposal of personal data follow LGPD guidelines. You have real control over your information — this is not just a marketing promise.
256-Bit SSL Encryption
All communication between your phone or computer and the bomb777 platform is protected by 256-bit SSL encryption — the same standard used by Brazilian banks such as Nubank, Itaú, and Bradesco. No information travels in plain text — Pix deposits, registration data, and betting history are always encrypted.
Data Never Sold to Third Parties
bomb777 does not sell, rent, or transfer users' personal data to marketing companies, data brokers, or any third party for commercial purposes. The data collected has one purpose only: to let you use the platform safely. Full stop — no asterisk, no exceptions.
User Access & Control
You may request at any time a copy of all data bomb777 holds about you, ask for corrections to inaccurate or incomplete information, and request deletion of your data where there is no legal obligation to retain it. Simply send a request to suporte@bomb777.net — we respond within 15 business days.
Minimum Necessary Data
bomb777 collects only the information strictly necessary to provide the service: full name, CPF, date of birth, email, mobile number, and payment details. We do not collect sensitive information beyond what Brazilian law requires for identity verification and fraud prevention in the betting sector.
Incident Notification
In the event of any security incident that may affect users' personal data, bomb777 will notify the affected users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD. Transparency in this process is a legal obligation that bomb777 takes seriously.
Last updated: January 2026 — Version 2.4

This Privacy Policy describes how bomb777 collects, uses, stores, and protects the personal data of platform users, in accordance with the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018). By creating an account or using any bomb777 service, you confirm that you have read and understood this document.

1. About This Policy

This Privacy Policy applies to all users of the bomb777 platform, accessible at bomb777.net and through any associated apps or extensions. It covers all services offered by bomb777, including Sports Betting (football, volleyball, basketball/NBB, MMA/UFC, e-sports, and other disciplines), Live Casino, crash games, blackjack, slots, and the VIP Program.

Protecting user privacy is a priority at bomb777 — not just because the law requires it, but because we believe a relationship of trust with our users starts with being transparent about what we do with each person's data. If you have any questions about this Policy, please contact us at suporte@bomb777.net before completing your registration.

This Policy is written in plain, accessible language — no unnecessary legal jargon. The goal is for anyone, regardless of their legal background, to understand exactly what happens with their data at bomb777.

2. Data Controller

The controller of personal data collected by the bomb777 platform is the company responsible for operating the service, registered in accordance with applicable legal requirements. For LGPD purposes, the controller is the entity that makes decisions about how personal data is processed.

For matters related to privacy, data protection, or the exercise of rights guaranteed by the LGPD, bomb777's official contact channel is:

  • Email: suporte@bomb777.net
  • Live chat: available 24 hours on the bomb777 platform
  • Suggested subject: "LGPD — [describe your request]"

Bomb777 will respond to all privacy-related requests within 15 (fifteen) business days, as required by the LGPD.

3. Data We Collect

Bomb777 collects personal data in the following situations and categories:

3.1 Data provided directly by the user

  • Registration: full name, CPF, date of birth, email address, mobile number, password (stored as a cryptographic hash);
  • Identity verification (KYC): government-issued ID (RG, CNH, or passport), recent proof of address;
  • Financial data: Pix key, credit/debit card details (tokenized — bomb777 does not store the full card number), bank account information for wire transfers, PicPay or Mercado Pago details depending on the payment method used;
  • Communications: messages sent to support via email or live chat.

3.2 Automatically collected data

  • IP address and approximate geolocation data;
  • Device type, operating system, and browser version;
  • Pages visited, session duration, and interactions on the platform;
  • Full betting history, deposits, withdrawals, and transactions;
  • Cookies and similar technologies (detailed in Section 7).

Bomb777 does not collect sensitive data such as racial origin, religious beliefs, health information, biometrics, or sexual orientation. The only "sensitive" data collected is that required by law for identity verification in the regulated betting sector.

4. How We Use Your Data

Personal data collected by bomb777 is used exclusively for the following purposes:

  • Service delivery: account creation and management, bet processing, deposits via Pix, boleto, credit/debit card, PicPay, or Mercado Pago, and withdrawals via Pix or TED to Nubank, Itaú, Bradesco, Banco do Brasil, and other banks;
  • Identity verification: confirming that the user is 18 or older and that the information provided is accurate, in compliance with the sector's legal obligations;
  • Fraud prevention: identify and block suspicious activity, duplicate accounts, money laundering, and misuse of the platform;
  • Communication: sending transaction confirmations, security alerts, promotional information (for users who have opted in) and updates to the Terms and Conditions or this Policy;
  • Platform improvement: aggregated and anonymized usage analysis to improve the user experience, mobile interface performance, and overall service quality;
  • Legal compliance: compliance with regulatory obligations, responses to court orders, or requests from competent Brazilian authorities.

Bomb777 does not use your personal data to sell third-party advertising, build consumer profiles for external purposes, or for any purpose beyond those listed above. Every piece of data collected has a clear, proportionate justification.

5. Legal Basis for Processing (LGPD)

The LGPD requires that every personal data processing operation have a legal basis to justify it. bomb777 processes your data under the following grounds established by Law No. 13,709/2018:

Purpose Legal Basis (LGPD) Type
Account creation and service provision Contract performance (art. 7, V) Contract
Identity verification (KYC) Compliance with a legal obligation (art. 7, II) Legal
Fraud and money laundering prevention Compliance with a legal obligation and legitimate interest (art. 7, II and IX) Legal
Sending transactional communications Contract performance (art. 7, V) Contract
Sending marketing communications Data subject's consent (art. 7, I) Consent
Product improvement and usage analytics Legitimate interest (art. 7, IX) Legitimate interest
Compliance with court orders Compliance with a legal obligation (art. 7, II) Legal

6. Data Sharing

Bomb777 does not sell, rent, or transfer users' personal data. Information is shared only in the cases below, all strictly necessary for the operation of the service:

6.1 Payment partners

To process financial transactions via Pix, boleto bancário, credit/debit card, PicPay, or Mercado Pago, bomb777 shares with payment processors only the information strictly necessary to complete the transaction. These partners are contractually required to maintain confidentiality and comply with the LGPD.

6.2 Game providers

Live casino game providers (such as Evolution Gaming and Pragmatic Play Live) may receive a session identifier for technical purposes related to game operation. These partners do not receive any personally identifiable data beyond what is strictly necessary to run the game session.

6.3 Competent authorities

Bomb777 may share data with Brazilian authorities — such as the Banco Central do Brasil, COAF (Conselho de Controle de Atividades Financeiras), the Polícia Federal, or the Judiciary — when required by law, court order, or well-founded suspicion of criminal activity. These disclosures are mandatory and do not require user consent.

Bomb777 never shares user data with third-party marketing firms, data brokers, advertising platforms, or any entity for commercial purposes unrelated to the direct provision of the platform's services.

7. Cookies and Tracking Technologies

Bomb777 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and — with your consent — personalize communications. The types of cookies used are listed below:

You can manage cookie preferences in your browser settings or in the bomb777 platform's privacy center. Declining non-essential cookies does not prevent use of the services — it only limits personalization features.

8. Data Retention

Bomb777 retains users' personal data for as long as necessary to fulfill the purposes described in this Policy and to meet applicable legal obligations. The criteria used to determine retention periods include:

  • While the account is active: all data required to provide the service is retained for as long as the account remains active;
  • After account closure: financial and identification data is retained for the minimum period required by applicable Brazilian legislation governing the financial and betting sector — generally 5 (five) years;
  • Transaction data: records of deposits via Pix, boleto, card, and withdrawals are kept for a minimum of 5 years for tax audit purposes and compliance with anti-money laundering regulations;
  • Support communication data: retained for 2 years for quality control and dispute resolution purposes;
  • Marketing consent data: retained for as long as consent remains active and may be withdrawn at any time.

Once the applicable retention period has expired, data is securely deleted or anonymized so that the individual can no longer be identified.

9. Information Security

Bomb777 implements appropriate technical and organizational measures to protect users' personal data against unauthorized access, alteration, disclosure, or destruction. The key security measures currently in place include:

  • 256-bit SSL encryption on all communication between the user and the platform;
  • Passwords stored exclusively as cryptographic hashes (plain-text passwords cannot be retrieved);
  • Tokenized credit/debit card data — the full card number is never stored on bomb777's servers;
  • Role-based access control: only team members with an operational need may access specific user data;
  • Continuous monitoring for suspicious activity and unauthorized access attempts;
  • Regular vulnerability testing and security audits;
  • Encrypted backups with restricted access controls.

No system is 100% immune to threats. In the event of a security incident that puts user data at risk, bomb777 will notify those affected and the Autoridade Nacional de Proteção de Dados (ANPD) within the timeframes established by the LGPD. Users should also protect their own access credentials — never share your password with anyone.

10. Your Rights as a Data Subject (LGPD)

The LGPD grants bomb777 users a robust set of rights over their personal data. You may exercise any of these rights at any time by contacting us at suporte@bomb777.net with the subject line "LGPD":

1
Right of Access
Request a copy of all personal data bomb777 holds about you, including your betting history, deposits, and communications.
2
Right of Correction
If any of your information is incorrect or out of date, you can request a correction. Some data (such as your CPF) cannot be changed after verification.
3
Right to Erasure
You may request the deletion of your personal data. This will result in the closure of your account. Data subject to legal retention obligations will be kept for the period required by law.
4
Right to Data Portability
Request your data in a structured, machine-readable format for potential transfer to another service, as provided under the LGPD.
5
Consent Withdrawal
For processing activities based on consent (such as marketing communications), you may withdraw your authorization at any time, with no penalties.
6
Right to Object
You may object to the processing of your data where that processing is based on legitimate interest and you have a justified reason for doing so.

Bomb777 will respond to all LGPD rights requests within 15 business days. If a request is complex or involves a large volume of data, this deadline may be extended by an additional 15 business days, with prior notice to the requester.

11. Minors

Bomb777's services are intended exclusively for users aged 18 (eighteen) and over. bomb777 does not knowingly collect personal data from minors. If we identify that an account was created by a minor, it will be immediately suspended, the data will be deleted, and the case may be reported to the relevant authorities.

If you are a parent or legal guardian and believe your child has created an account on bomb777, please contact us immediately at suporte@bomb777.net. The platform will take appropriate action as quickly as possible.

Bomb777 uses identity verification (KYC) processes that include CPF validation and photo ID checks to confirm users are of legal age. Circumventing this process is a serious violation of the platform's Terms and Conditions.

12. International Data Transfers

To operate its live casino services, bomb777 works with international technical partners — such as broadcasting studios and gaming software providers. In some cases, this may involve processing data on servers located outside Brazil.

When this occurs, bomb777 ensures the transfer is carried out in compliance with Article 33 of the LGPD, using one of the following safeguards:

  • Transfer to countries with an adequate level of data protection recognized by the ANPD;
  • Specific contractual clauses requiring the recipient to uphold standards equivalent to those of the LGPD;
  • Internationally recognized certifications and compliance seals.

No international transfer involves sensitive financial data such as full Pix keys or banking details — this information is processed exclusively by Brazilian payment partners authorized by the Banco Central.

13. Changes to This Policy

Bomb777 may update this Privacy Policy periodically to reflect changes to its services, applicable legislation, or information security practices. Significant changes will be communicated to users via their registered email and through a prominent notice on the platform, at least 7 (seven) days before taking effect.

The most current version of this Policy will always be available at bomb777.net/privacy-policy. The date of the last update is displayed at the top of the document. We recommend checking back periodically for any changes.

Continued use of the bomb777 platform after a new version of this Policy is published constitutes acceptance of the updated terms. If you do not agree with the changes, you must close your account before the new version takes effect.

14. Contact & Data Protection Officer (DPO)

Bomb777 has appointed a Data Protection Officer (DPO) as required by the LGPD, serving as the point of contact between the platform, its users, and the Autoridade Nacional de Proteção de Dados (ANPD).

To exercise your rights as a data subject, report a privacy concern, or ask questions about this Policy, please reach out through the channels below:

  • Email: suporte@bomb777.net (subject: "LGPD / Privacy")
  • Live chat: available 24 hours a day directly on the bomb777 platform
  • Response time: up to 15 business days for LGPD-related requests

If you believe bomb777 has not properly handled a request related to your privacy, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as provided under Article 18 of the LGPD.

Bomb777 takes all privacy requests seriously. If you send an email to suporte@bomb777.net with the subject line "LGPD", you will receive a confirmation of receipt within 24 hours and a full response within 15 business days.

Bomb777 and the LGPD: Transparency Is the Standard, Not the Exception

Bomb777 processes your data in compliance with the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018). Your data is never sold. The platform operates with 256-bit SSL encryption. You can exercise your rights — access, correction, deletion, portability — by emailing suporte@bomb777.net. To learn more about your rights as a bettor, also visit our Terms and Conditions and the Responsible Gambling.

🔒 SIGN UP SECURELY

Your data protected. Your bet, your choice.

Now that you know how bomb777 takes care of your privacy, create your account with confidence. Sign up in under 2 minutes, deposit via Pix, and get instant access to football, volleyball, live casino, crash games, and blackjack — all with security and full LGPD compliance.

18+. Play responsibly. See our Responsible Gambling page.

🔐
bomb777
Real privacy. Fair play. Brazil.
LGPD Compliance 256-bit SSL Data never sold
Português