At aa77, privacy is not a line in the footer — it's a real commitment. This page explains clearly what data we collect, why we need it, how we protect it, and what your rights are as a personal data subject under the General Data Protection Law (LGPD).
Six concrete commitments from aa77 to the privacy of every user
Aa77 operates in full compliance with Brazil's General Data Protection Law (Lei 13.709/2018). All personal data processing is carried out with a defined legal basis, specific purpose, and justified retention period. We have a designated Data Protection Officer (DPO) and dedicated channels for exercising your rights.
All communications between your device and aa77's servers are protected by TLS 1.3 encryption (HTTPS) — the same security standard used by major Brazilian banks such as Nubank, Itaú, and Bradesco. Financial data such as Pix and card information is never stored in plain text.
You can access, correct, port, or request the deletion of your personal data at any time by sending an email to contato@aa77.run. aa77 responds to LGPD rights requests within 15 business days, with no unnecessary red tape and no fees for exercising your rights.
Aa77 never sells, rents, or transfers your personal data to third parties for commercial purposes. Data is shared with partners only when strictly necessary to operate the services you have contracted — payment processors, certified game providers — and always under data protection agreements.
You decide which communications you want to receive from aa77 — promotional emails, bet notifications, bonus alerts, and responsible gambling messages. Preferences can be updated at any time directly in your account or by contacting support, with no need to close your account.
This Privacy Policy was written in plain Brazilian Portuguese. The goal is for any user to understand what we collect, why we collect it, and what you can do with your data — no legal background required.
Lei 13.709/2018 guarantees these rights to every personal data subject in Brazil
Confirm whether we process your data and obtain a full copy of the information we hold.
Request the correction of incomplete, inaccurate, or outdated information in your aa77 account.
Request the anonymization or deletion of unnecessary data or data processed in violation of the LGPD.
Receive your data in a structured format for transfer to another service, in accordance with ANPD regulations.
Know which public or private entities aa77 has shared your personal data with.
Withdraw consent given for consent-based processing at any time, with no penalty.
Object to processing carried out on legal bases other than consent, where the LGPD has not been complied with.
Request human review of decisions made solely by automated processes that affect your interests.
This Privacy Policy applies to all registered users of aa77 and to visitors of the site aa77.run, regardless of the device used to access it. By creating an account, you confirm that you have read and understood this document and agree to the processing of your data as described herein.
The controller of personal data processed within the aa77 platform is the company operating the aa77.run website, hereinafter referred to simply as aa77. For the purposes of the General Data Protection Law (LGPD — Law 13.709/2018), the controller is the legal entity that makes decisions regarding the processing of personal data and defines the purposes and means of such processing.
Aa77 has appointed a Data Protection Officer (DPO), whose contact information is available in Section 13 of this policy. The DPO is the official channel for LGPD rights requests, privacy-related inquiries, and communication with the Autoridade Nacional de Proteção de Dados (ANPD).
Privacy channel: For all requests relating to your personal data and LGPD rights, use the email contato@aa77.run with the subject line "LGPD — [Request Type]". aa77 responds within 15 business days.
Aa77 collects personal data in the following categories, depending on the stage of platform use:
Aa77 processes personal data exclusively for the following purposes, each with a defined legal basis under the LGPD:
| Purpose | Data used | LGPD Legal Basis |
|---|---|---|
| User account creation and management | Name, CPF, email, date of birth, phone number | Performance of a contract (art. 7, V) |
| Processing deposits and withdrawals | Payment data, CPF, transaction history | Performance of a contract (art. 7, V) |
| Identity verification (KYC) | ID document, selfie, proof of address | Legal obligation (art. 7, II) |
| Fraud prevention and anti-money laundering | IP, device, betting history, financial data | Legal obligation / Legitimate interest (art. 7, II and IX) |
| Customer Support | Email, communication history, account data | Performance of a contract (art. 7, V) |
| Sending account-related communications | Email, mobile number | Performance of a contract (art. 7, V) |
| Marketing communications and promotions | Email, phone number, user preferences | Consent (Art. 7, I) |
| Product improvement and user experience | Anonymized navigation and behavioral data | Legitimate interest (art. 7, IX) |
| Responsible gambling and user protection | Betting history, usage frequency, amounts | Legitimate interest / Legal obligation (art. 7, II and IX) |
| Compliance with regulatory obligations | Full registration and financial data | Legal obligation (art. 7, II) |
The LGPD requires that all personal data processing have a legal basis to justify it. aa77 relies on the following legal bases set out in Article 7 of Lei 13.709/2018:
Aa77 does not sell personal data. Sharing occurs exclusively in the situations described below, always with operators contractually bound by data protection obligations compatible with the LGPD:
To process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED bank transfer, we share the minimum necessary data with the respective processors. These partners act as data processors for aa77 under contracts that restrict data use exclusively to payment processing and prohibit any other use.
Live Casino and slots providers (such as Evolution Gaming and Pragmatic Play) receive an anonymous account identifier to record round results and calculate game history. These providers do not receive the user's full name, CPF, or financial data — only the internal identifiers required for the technical operation of the games.
For the KYC process, aa77 may use specialized document verification and CPF validation services. These services operate as processors and do not retain copies of documents after verification is complete beyond the minimum period required by regulation.
Aa77 may share personal data with judicial, law enforcement, regulatory, and tax authorities when required by a legal, judicial, or administrative order, in accordance with article 7, section VI of the LGPD. Where permitted by law, aa77 will notify the user of such a request before complying.
Data protection agreements: All partners who receive personal data from aa77 users sign contracts with specific data protection clauses (Data Processing Agreements — DPAs), restricting use to the contracted purpose and requiring notification in the event of a security incident.
Aa77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or for the minimum periods required by Brazilian law:
Once the retention period expires, data is securely deleted or anonymized in a way that makes re-identification of the data subject impossible.
Aa77 implements technical and organizational measures to protect personal data against unauthorized access, alteration, improper disclosure, accidental loss, or destruction. Measures in place include:
No security system is 100% foolproof. In the event of a security incident that may pose a significant risk or harm to users, aa77 will notify the affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD.
Aa77 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and collect analytical usage data. The types of cookies used are described below:
Cookies essential to the platform's basic operation — maintaining login sessions, language preferences, and temporary bet slips. These cookies cannot be disabled without affecting platform functionality. They do not collect personally identifiable information for marketing purposes.
Used to understand how users navigate the platform — which pages are most visited, where navigation issues occur, and average session duration. Data is collected in aggregated and anonymized form and used exclusively for product improvement. Users may opt out of analytical cookies without losing access to core features.
Cookies used to identify recognized user devices, detect unauthorized access attempts, and prevent fraudulent activity. These cookies are part of account security measures and cannot be disabled by users with an active account.
On your first visit to aa77, you will see a cookie notice with the option to accept, reject, or customize non-essential categories. Your preferences are saved for 12 months and can be changed at any time via the cookie settings in the site footer. Most browsers also allow you to manage cookies directly — consult your browser's documentation for more information.
Aa77 is a platform exclusively for users aged 18 (eighteen) and over. We do not knowingly collect personal data from children or minors. The identity verification (KYC) process requires proof of legal age through an official document showing date of birth.
If aa77 determines that data belonging to a minor was inadvertently collected — for example, through registration using false information — the account will be immediately closed, all personal data relating to the minor will be deleted within 30 days, and the case will be reported to the relevant authorities where required by Brazilian law (Estatuto da Criança e do Adolescente — ECA).
If you are the guardian of a child or minor and believe their data has been collected by aa77, please contact us immediately at contato@aa77.run with the subject line "LGPD — Minor's Data". aa77 will handle the request as a priority.
The LGPD grants eight fundamental rights to personal data subjects, all of which can be exercised with aa77 free of charge and without the need for detailed justification. To exercise any of these rights, follow the procedure below:
Aa77 is committed to responding to all LGPD rights requests within 15 (fifteen) business days from receipt of the complete request. For more complex cases requiring additional time, aa77 will communicate the reason and a revised estimated deadline before the 15-day period expires.
If you believe aa77 has not adequately responded to your LGPD rights request, you have the right to file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian regulatory body responsible for enforcing the LGPD. The ANPD's official website is the designated channel for this type of complaint.
Aa77's primary servers are located in Brazil. Some technology services used by the platform — such as cloud infrastructure providers, live game providers, and fraud detection systems — may be located outside Brazilian territory.
When personal data of Brazilian users is transferred to other countries, aa77 ensures that such transfers are protected by at least one of the following safeguards recognized under the LGPD:
Under no circumstances is personal data of aa77 users transferred to third parties abroad for marketing, sale, or any purpose unrelated to the provision of contracted services.
Aa77 may update this Privacy Policy periodically to reflect changes in Brazilian legislation, data processing practices on the platform, or new features offered. Any material update will be communicated to users via the email address registered on their account with a minimum advance notice of 15 (fifteen) calendar days before the new version takes effect.
The date of the last update to this policy is always shown at the top of this document. Previous versions of the Privacy Policy may be requested through the DPO contact channel for reference purposes. Continuing to use the aa77 platform after the effective date of an updated version indicates acceptance of the new terms — if you disagree with the changes, you may close your account before the effective date.
The aa77 Data Protection Officer (DPO) is responsible for receiving LGPD rights requests, answering questions about this Privacy Policy, and acting as the communication channel with the Autoridade Nacional de Proteção de Dados (ANPD).
For general questions about the platform, betting, payments, or your account that do not involve data privacy, please use our general support via live chat on the platform or by emailing contato@aa77.run without the subject line "LGPD". Our support team is available every day of the week.
Policy Validity Period: This version of the aa77 Privacy Policy takes effect in January 2026 and supersedes all previous versions. Prior versions may be requested through the DPO channel for historical reference.
To access, correct, port, or request the deletion of your personal data on aa77, send an email to contato@aa77.run with the subject line "LGPD". aa77 responds within 15 business days at no charge. Also check out our Terms and Conditions and the Responsible Gambling.
The most common questions about how aa77 handles your personal data
Betting is entertainment. aa77 offers configurable control tools directly in your account: deposit limits, loss limits, session alerts, and self-exclusion. If you feel that gambling is affecting your daily life or finances, seek support: call 188 (CVV — available 24 hours) or visit our Responsible Gambling. Platform exclusively for users aged 18 and over.
Free registration, instant Pix, bonus of up to R$ 1,500.00 and the peace of mind of knowing your data is handled in full compliance with the LGPD.