This Privacy Policy describes how the Leo777 collects, uses, stores, and protects your personal data, in compliance with the General Personal Data Protection Law (LGPD — Law No. 13,709/2018). By creating an account or using the platform, you confirm that you have read and understood this policy.
1. Who We Are — The Data Controller
The Leo777 is the Sports Betting and online casino platform operated for the Brazilian market, accessible at leo777.best. For the purposes of the LGPD, Leo777 acts as personal data controller of its users — meaning it is leo777 that defines the purposes and means by which data is processed.
Leo777 has a designated Data Protection Officer (DPO), who can be reached at contato@leo777.best for any request related to personal data. The response period for data subject requests is up to 15 calendar days, as provided under the LGPD.
Jurisdiction: This policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Law No. 13.709/2018) and the Marco Civil da Internet (Law No. 12.965/2014). Any disputes will be resolved in the competent courts of Brazil.
2. What Personal Data We Collect
Leo777 collects different categories of personal data depending on how you interact with the platform. Below, we detail each category and when it is collected:
2.1 Registration Data
Provided directly by you when creating your account:
- Full name — for account holder identification.
- CPF — for identity verification and legal compliance.
- Date of birth — to confirm that you are at least 18 years old.
- Email address — for account communications, notifications, and password recovery.
- Mobile number — for two-step verification and security communications.
- Residential address — to verify Brazilian residency when required.
2.2 Financial Data
Collected in the context of deposits and withdrawals:
- Pix Key — to process withdrawals to your bank account.
- Credit card data — masked number, card brand, and expiry date (full card details are never stored by leo777, only by the PCI-DSS certified payment processor).
- Transaction History — deposits, withdrawals, and bets placed on the platform.
- Banking institution — Nubank, Itaú, Bradesco, Banco do Brasil, or another bank provided for withdrawals via TED transfer.
2.3 Identity Verification Data
Collected when we request additional identity verification (KYC):
- Photo or scan of an official government-issued photo ID (RG, CNH, or passport).
- Proof of address issued within the last 3 months.
- Selfie holding the document, when required for advanced verification.
2.4 Platform Usage Data
Collected automatically during use of the platform:
- IP Address — for security, fraud prevention, and location verification.
- Device type and operating system — Android/iOS mobile device, Windows/Mac computer.
- Browser — Chrome, Safari, Samsung Internet, and version in use.
- Platform browsing history — pages visited, games accessed, bets viewed.
- Session Data — login time, session duration, activity during use.
| Category |
Data Examples |
When It Is Collected |
| Registration |
Name, CPF, email, mobile number |
At the time of registration |
| Finance |
Pix key, transaction history |
When depositing or withdrawing |
| Identity (KYC) |
Photo ID, proof of address |
When requested for verification |
| Platform usage |
IP, device, sessions |
On every login and use |
| Cookies |
Preferences, active session |
By accessing the site |
3. How We Use Your Data
The Leo777 uses your personal data solely for the following purposes:
- Account creation and management: registration, authentication, password recovery, and account-related communications.
- Payment processing: deposit confirmation via Pix, bank slip, credit card, PicPay, and Mercado Pago; withdrawal processing via Pix.
- Identity verification (KYC): confirm that you are at least 18 years old and that your information is accurate, as required by Brazilian gambling regulations.
- Fraud prevention and anti-money laundering: monitoring of suspicious transactions and compliance verification with anti-money laundering legislation (Lei nº 9.613/1998).
- Customer Support: answer questions, resolve technical issues, handle requests, and ensure a great experience on the platform.
- Experience personalization: display games, bets, and offers relevant to you based on your usage history on the platform.
- Marketing communications: send emails and notifications about bonuses, promotions, and leo777 news — only if you have opted in to receive this type of communication.
- Platform security: detect and block unauthorized access attempts, multiple account use, and other violations of the Terms of Use.
- Compliance with legal obligations: respond to requests from competent authorities as required by law.
Important: leo777 never uses your data for purposes other than those listed above without your explicit consent. If we ever need to use your data for a new purpose, you will be notified in advance and may choose not to authorize it.
4. Legal Basis for Processing (LGPD)
As required by the LGPD, all personal data processing must have a legal basis. Leo777 processes your data under the following grounds set out in Art. 7 of Law No. 13,709/2018:
- Contract performance (Art. 7, V): to process deposits, withdrawals, and bets — activities that are part of the service you agreed to when registering.
- Compliance with a legal obligation (Art. 7, II): for identity verification (KYC), anti-money laundering compliance, and responding to competent authorities.
- Legitimate interest (Art. 7º, IX): for platform security, fraud prevention, and experience personalization, provided it does not override your fundamental rights.
- Consent (Art. 7, I): for sending marketing communications by email and push notifications — you may withdraw this consent at any time through your account settings.
5. Data Sharing with Third Parties
Leo777 does not sell your personal data to third parties. Sharing only occurs in the following situations, always with appropriate confidentiality safeguards:
5.1 Essential Service Providers
Companies that provide essential services for the platform to operate and therefore require access to some of your data:
- Payment processors: to process transactions via Pix, boleto bancário, credit card, PicPay, and Mercado Pago. These providers are PCI-DSS certified and adhere to strict security standards.
- Identity verification (KYC) providers: to verify documents and registration data as required by law.
- Game and betting providers: such as Spribe (Aviator), Pragmatic Play (Spaceman), SmartSoft (JetX), and other providers, which require some session data to function properly.
- Cloud infrastructure services: secure servers where the platform and its data are hosted, under confidentiality and security agreements.
5.2 Legal Obligations
Leo777 may be legally required to share data with public authorities — such as the Banco Central do Brasil, the Receita Federal, the Financial Activities Control Council (COAF), or the Judiciary — when required by law, court order, or formal request from a competent authority. In such cases, Leo777 will respond within the limits required by law, disclosing only the minimum data necessary.
All third parties that receive data from leo777 are contractually required to protect that information and use it solely for the purpose for which it was shared. leo777 is not responsible for data processing carried out by third parties outside the agreements in place.
6. Cookies and Tracking Technologies
Leo777 uses cookies and similar technologies to enhance your experience on the platform. A cookie is a small text file stored in your browser that allows the site to remember information about your visit — such as your preferred language, login status, and interface preferences.
6.1 Types of Cookies Used
- Strictly necessary cookies: essential for the platform to function — keeping your session active, processing transactions, and securing your login. They cannot be disabled without affecting your ability to use the platform.
- Performance cookies: collect anonymous information about how you use the platform — most visited pages, load times, and errors encountered. They help Leo777 continuously improve the user experience.
- Functional cookies: remember your preferences — such as language, betting settings, and favorite games — to personalize your experience without requiring you to reconfigure everything on every login.
- Analytics cookies: used to understand aggregated, anonymous usage patterns on the platform. No individually identifiable data is shared from these cookies.
6.2 How to Manage Cookies
You can configure your browser — Chrome, Safari, Samsung Internet, or any other — to block or delete cookies at any time. Most modern browsers offer this option in their privacy settings. Keep in mind that disabling necessary cookies may affect how the leo777 platform works, including the login process and live betting.
7. Data Security
The Leo777 implements a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, destruction, or improper disclosure:
- 256-bit SSL Encryption across all data transmissions between your device and the platform's servers.
- Encrypted Storage of sensitive data such as passwords (bcrypt-hashed) and identity documents.
- Two-Factor Authentication (2FA) available to all users who want an extra layer of account security.
- 24/7 Security Monitoring to detect suspicious access attempts, brute-force attacks, and other threats in real time.
- Internal Access Controls with restricted permissions: only leo777 staff who need the data to carry out their duties have access to it.
- Periodic Security Audits to identify and fix vulnerabilities before they can be exploited.
- Incident response plan to notify affected users and the National Data Protection Authority (ANPD) in the event of a significant security incident, within the timeframes set out by the LGPD.
Despite all measures in place, no system is 100% immune to breaches. If you suspect unauthorized access to your leo777 account, contact support immediately via live chat so we can block access and launch an investigation.
8. Data Retention and Deletion
Leo777 retains your personal data only for as long as necessary for the purposes for which it was collected, or for the period required under Brazilian law. Retention periods vary by data category:
- Registration data and betting history: retained while the account is active and for up to 5 years after closure, in accordance with the Brazilian Civil Code and tax legislation.
- Financial and transactional data: retained for up to 10 years after each transaction, as required by the Federal Revenue Service and anti-money laundering legislation (Law No. 9,613/1998).
- Identity documents (KYC): retained for as long as the account is active and for up to 5 years after it is closed.
- Security logs (IPs, sessions): retained for up to 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Law No. 12,965/2014).
- Marketing data (emails): retained until you withdraw your consent to receive communications.
Once the applicable retention period expires, your data is securely and permanently deleted from leo777's systems, with no possibility of recovery.
9. Your Rights as a Data Subject
The LGPD grants you, as a personal data subject, a set of rights that Leo777 is fully committed to honoring. Here is what those rights are and how to exercise them:
🔍
Right of Access
Request a copy of all personal data leo777 holds about you, including the category, purpose of use, and with whom it has been shared.
✏️
Right to Correction
Request the correction of any data that is incorrect, outdated, or incomplete — for example, updating your registered address, email, or mobile number.
🗑️
Right to Erasure
Request the deletion of your personal data following account closure, subject to applicable legal retention periods. Data will be permanently and securely erased.
📦
Right to Data Portability
Request delivery of your data in a structured, machine-readable format (such as CSV or JSON) so you can transfer it to another service if you wish.
🚫
Right to Object
Object to the processing of your data when it is based on legitimate interest and you believe your fundamental rights override the claimed interest.
↩️
Consent Withdrawal
Withdraw consent for marketing communications at any time via the unsubscribe link in our emails or through your Leo777 account settings.
How to exercise your rights: send your request to contato@leo777.best or via live chat, providing your CPF and full name. Leo777 will respond within 15 calendar days, as provided under Art. 19 of the LGPD. Urgent account-blocking requests due to suspected unauthorized access are handled immediately via 24h chat.
10. Minors
Leo777 is a platform exclusively for users aged 18 and over. We do not intentionally collect personal data from minors. Registration requires a CPF and date of birth, which are verified against official databases to confirm the user's age.
If leo777 determines at any time that an account belongs to a user under 18, the account will be closed immediately, all balances will be returned to the legal guardian following verification, and the data will be deleted from the platform's systems. If you believe a minor has created an account on leo777, please contact support immediately via live chat or by emailing contato@leo777.best.
11. International Data Transfers
Some technology and game providers used by leo777 may process personal data on servers located outside Brazil. When this occurs, leo777 ensures that international data transfers are protected by:
- Specific contractual clauses that bind the recipient to the same data protection obligations required under the LGPD.
- Transfers only to countries or organizations that provide an adequate level of data protection, as assessed by the National Data Protection Authority (ANPD).
- Data minimization — only the data strictly necessary to provide the specific service is transferred.
Leo777 maintains an up-to-date record of all international data transfers carried out, available for review by the ANPD upon request.
12. Changes to This Privacy Policy
Leo777 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, platform operations, or data processing practices. The date of the most recent update is always shown at the top of this page.
Any material changes will be communicated to your registered email address at least 7 days before taking effect, giving you time to review the updates and decide whether you wish to continue using the platform. If you do not agree with the changes, you may request account closure before the new terms come into force. Continued use of the platform after the effective date constitutes acceptance of the changes.
13. Contact, DPO and Complaints Channel
For any questions, data rights requests, security incident reports, or complaints related to data protection at leo777, you can reach us through the following channels:
- Live chat: available 24 hours a day, 7 days a week, directly on the platform. The fastest channel for urgent matters.
- DPO Email: contato@leo777.best — for formal requests regarding data access, correction, deletion, or portability. Response time: up to 15 calendar days.
If you believe leo777 has handled your personal data improperly and have not received a satisfactory response through the channels above, you have the right to file a complaint directly with the National Data Protection Authority (ANPD), as set out in Art. 18, §1º of the LGPD.
This Privacy Policy was last updated on July 2026 and applies to all leo777 platform users in Brazil. Previous versions can be requested by emailing the DPO.
leo777's Commitments to Your Privacy
Full Compliance with the LGPD (Law No. 13,709/2018)
Data processing grounded in explicit legal bases, with a designated DPO and a maintained record of processing activities.
256-bit SSL Encryption Across All Layers
Personal and financial data protected in transit and at rest to the same standard as Brazil's leading banks.
No sale of data to third parties, ever
Your personal data belongs to you. leo777 does not sell, rent, or share it with marketing or advertising companies.
Response within 15 days for data subject requests
Your right to access, correct, export, or delete your data is fulfilled within the legal timeframe established by the LGPD.