This document explains how the boa777 collects, uses, stores, and protects your personal data — all in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018), written in plain language, free of unnecessary legal jargon.
Six pillars that ensure the security and privacy of every player registered on the platform.
All connections between your phone or computer and the servers of boa777 are protected by 256-bit SSL encryption — the same standard used by Brazilian banks and financial institutions. This means no data is transmitted in the clear over the internet while you use the platform.
Documents submitted during KYC verification — national ID (RG), driver's license (CNH), passport, and proof of address — are stored in an isolated environment with access restricted to the compliance team at boa777. No document is shared with third parties without legal justification.
The boa777 does not sell players' personal data to third parties. Name, CPF, email, phone number, and banking details are used exclusively to operate the account, process payments, and meet regulatory obligations. Full stop.
The platform of boa777 was developed in compliance with the General Data Protection Law (Lei nº 13.709/2018). You have the right to access, correct, port, and request the deletion of your personal data at any time through our support channel.
Within the boa777, only the teams that need the data to perform their functions have access to it — support, compliance, and finance. No employee has unrestricted access to all data for all players.
Should any security incident occur that may affect players' personal data, the boa777 will notify affected users and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD — promptly and without omission.
The boa777 is a Sports Betting and online casino platform built for the Brazilian market. We operate the website available at boa777.click and all its subdomains and associated services.
For the purposes of this Privacy Policy, the boa777 acts as the controller of personal data for registered players, as defined by the General Data Protection Law (LGPD — Law No. 13.709/2018). This means we are responsible for decisions about how and why your data is processed.
This policy applies to all registered players, site visitors, and anyone who interacts with the platform of boa777, regardless of the device used — mobile, tablet, or desktop.
The boa777 collects personal data at different points during your interaction with the platform. The categories of data collected and their respective contexts are outlined below:
| Category | Data Collected | When |
|---|---|---|
| Identification | Full name, CPF, date of birth | Registration / KYC |
| Contact | Email address, mobile number | Registration |
| Documents | National ID (RG), driver's license (CNH), passport, proof of address | KYC Verification |
| Financial | Pix key, banking details, deposit/withdrawal history | Transactions |
| Behavior | Betting history, games accessed, time spent on the platform | Platform usage |
| Technical | IP address, device type, browser, operating system | Site Access |
| Location | Country and state inferred by IP | Geographic verification |
We do not collect sensitive data categories such as racial or ethnic origin, religious beliefs, health data, biometrics, or political opinions, except where strictly required to comply with a legal obligation.
The boa777 does not collect credit card data directly. Card transactions are processed by our partner payment gateways, which maintain their own PCI-DSS security policies. boa777 never stores full card details on its servers.
The data collected by the boa777 are used exclusively for the following purposes:
The boa777 does not use your data to build psychological profiles, sell third-party advertising, or for any purpose not listed above without your explicit consent.
The LGPD requires every organization that processes personal data to have a valid legal basis for each processing purpose. boa777 bases the processing of your data on the following legal grounds set out in Art. 7 of Law No. 13,709/2018:
Important: withdrawing consent for marketing communications does not affect the data processing required to operate your account — deposits, withdrawals, and bets will continue to work normally.
The boa777 does not sell, rent, or transfer players' personal data to third parties for commercial purposes. Data sharing occurs only in the situations listed below, all with a clear legal basis:
All third parties that receive personal data from players of boa777 are subject to contractual obligations of confidentiality and restricted use, and are regularly assessed for their level of security and compliance with Brazilian data protection law.
The boa777 uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:
The boa777 does not use third-party advertising cookies to track your activity on other sites outside the platform. You can manage non-essential cookie preferences through your mobile or desktop browser settings, though this may affect some platform functionality.
The personal data of players at boa777 are stored on servers housed in data centers that meet international physical and logical security standards. The key security measures in place include:
Despite all measures in place, no security system is completely infallible. In the event of a security incident that may affect your data, boa777 will follow the notification protocols required by the LGPD, informing the ANPD and affected users within the legally established timeframes.
Your role in security: use a strong, unique password for boa777, enable two-factor authentication where available in your account dashboard, and never share your login credentials with anyone — including anyone claiming to be platform support.
The boa777 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the minimum retention periods required under Brazilian law:
Once retention periods expire, data is securely deleted or anonymized so that the data subject can no longer be identified. A data deletion request from a subject may be only partially fulfilled when there is a legal obligation to retain the data — in such cases, the boa777 clearly states which data must be retained and the reason for doing so.
The LGPD grants you, as the data subject, a set of rights that the boa777 is committed to respecting and facilitating the exercise of these rights. You may request, at any time, via live chat or by emailing suporte@boa777.click:
Confirm whether we process your data and obtain a full copy of the information we hold about you.
Request the update or correction of incomplete, inaccurate, or outdated information on your account.
Request the deletion of your personal data, subject to mandatory legal retention periods.
Receive your data in a structured, machine-readable format for transfer to another controller.
Know which entities we share your data with and the legal basis for each processing activity.
Withdraw at any time your consent for marketing communications and personalized promotions.
The boa777 will respond to rights requests within up to 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, with notice to the data subject. If you are not satisfied with the response, you may file a complaint directly with the National Data Protection Authority (ANPD).
The boa777 is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The KYC verification process includes confirmation that the account holder meets the legal age requirement to use the platform.
Should the boa777 identifies that data belonging to a minor was inadvertently collected — for example, through the use of someone else's documents — that data will be immediately deleted and the associated account will be closed. If you are a parent or legal guardian and believe a minor has created an account on the platform, please contact our support team immediately via live chat so we can act quickly.
Document verification during KYC includes date-of-birth validation. Any attempt to use the platform by a minor is detected and results in permanent account closure, with notification to the relevant authorities when required.
The platform of boa777 may occasionally contain references to third-party services — such as payment gateways (Pix via Banco Central, PicPay, Mercado Pago) and casino game providers. These third parties have their own privacy policies, independent of this one.
The boa777 is not responsible for the privacy practices of third parties. We recommend reviewing the privacy policies of any services you use outside our platform, especially when making payments through banking apps such as Nubank, Itaú, Bradesco, or Banco do Brasil — where each institution's own rules apply.
The boa777 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or platform features. The date of the most recent update is always shown at the top of this page.
Significant changes will be communicated by email to account holders and/or through a visible notification on the platform, with at least 7 days' notice before taking effect — except in cases where changes are urgently required by law.
Continued use of the platform of boa777 after an updated version of this policy takes effect constitutes acceptance of the new terms. If you do not agree with any change, you may request account closure before the new version's effective date.
The boa777 has appointed a Data Protection Officer (DPO) as required by the LGPD, responsible for handling communications from data subjects and the National Data Protection Authority (ANPD).
To exercise your rights as a data subject, clarify questions about this Privacy Policy, or file a complaint regarding the handling of your personal data by the boa777, use the channels below:
The response time for data subject rights requests is up to 15 business days. If you are not satisfied with the response, you may file a complaint directly with the National Data Protection Authority (ANPD) at gov.br/anpd.
The most common questions about how boa777 handles your data.
Privacy and protection go hand in hand with responsible gaming at the boa777.
Set daily, weekly, or monthly limits in your account dashboard. Decreases take effect immediately; increases require 24 hours to apply.
Pause your access for 24 hours, 7 days, or 30 days through your dashboard. Your real balance stays protected during the break.
Permanent closure with CPF block. Any available real balance will be returned after identity verification.
If gambling is affecting your life, our team is here to help. See the resources at Responsible Gambling.
To exercise any right under the LGPD — access, correction, portability, deletion, or withdrawal of consent — please contact the support team at boa777 via live chat (available 24h) or by emailing suporte@boa777.click with the subject line "LGPD Request". We respond within up to 15 business days.
You can also check the Terms & Conditions full platform terms to understand how the rules of use relate to data processing.
Read the full Terms and Conditions →