1About This Privacy Policy
This Privacy Policy describes how yu77 collects, uses, stores, shares, and protects the personal information of users who access and use the Sports Betting and online casino platform available at yu77.best.
Yu77 acts as the controller of its users' personal data, as defined by the General Data Protection Law – LGPD (Law No. 13,709/2018). This Policy was created to ensure full transparency about the data processing practices adopted by the platform and to inform data subjects of the rights guaranteed to them under Brazilian law.
By creating an account on yu77, making a deposit via Pix or boleto bancário, betting on the Brasileirão, playing in the Live Casino, or simply browsing the platform, you confirm that you have read and agreed to the terms of this Privacy Policy. If you do not agree with any part of this document, we recommend that you do not use yu77's services.
Data controller: yu77 – Sports Betting and online casino platform. To exercise your rights or submit requests related to personal data, please contact us at privacidade@yu77.best.
2Data We Collect
Yu77 collects different categories of personal data depending on how you interact with the platform. See below for a breakdown by category:
| Category |
Data Collected |
When |
| Identification |
Full name, CPF, date of birth, document photo |
Registration & KYC Verification |
| Contact |
Email, mobile number, address |
Registration |
| Financial |
Pix key, deposit and withdrawal history, payment method used |
Transactions |
| Behavioral |
Betting history, games accessed, session duration, preferences |
Platform usage |
| Technical |
IP address, device type, operating system, browser, cookies |
Platform access |
| Communications |
Support interaction history via chat and email |
Support |
Yu77 does not collect data from sensitive categories (such as racial origin, political opinion, health, or biometric data) beyond what is strictly required for the identity verification (KYC) process mandated by regulation, such as a photograph of your identification document.
Payment data: Pix keys and credit or debit card data are processed with data isolation. yu77 does not store full credit or debit card numbers on its servers. This data is handled directly by partner payment processors, which operate under their own security policies.
3How We Use Your Data
Yu77 uses collected personal data solely for the purposes described below. None of these purposes involve selling or commercializing your data to third parties.
- Account operation: Creation, maintenance, and security of your yu77 account, including login authentication, password recovery, and identity verification (KYC);
- Transaction processing: Processing deposits via Pix, boleto bancário, credit/debit card, PicPay, and Mercado Pago, and processing withdrawals via Pix to the key registered under your CPF;
- Service delivery: Availability of Sports Betting (Brasileirão, Libertadores, Superliga de Vôlei, NBB, UFC, e-sports), Live Casino, slots and crash games;
- VIP Program: Points calculation, level progression, and delivery of VIP Program benefits;
- Fraud prevention: Detection of suspicious patterns, prevention of platform misuse, and compliance with anti-money laundering (AML) obligations required under Brazilian law;
- Customer support: Responding to questions, complaints, and requests via live chat and email;
- Communications: Sending transactional emails (deposit, withdrawal, and bet confirmations), as well as promotional and news notifications — always with an opt-out option;
- Platform improvements: Aggregate usage behavior analysis to identify improvements in interface, performance, and user experience;
- Legal compliance: Compliance with legal and regulatory obligations applicable to the sports betting and online entertainment market in Brazil.
4Legal Basis for Processing (LGPD)
Yu77 processes personal data based on the legal grounds set out in the LGPD. Each processing purpose has a corresponding legal basis:
- Contract performance: Processing is necessary to deliver the services you contracted when registering with yu77 – such as processing deposits and withdrawals, recording bets, and managing your account;
- Compliance with a legal or regulatory obligation: Some processing purposes are required by law, such as identity verification (KYC) and anti-money laundering obligations under Brazilian legislation;
- Legitimate interest: Processing necessary to prevent fraud, ensure platform security, and conduct usage behavior analysis for operational improvements, provided it does not override your fundamental rights and freedoms;
- Consent: For sending marketing communications and promotions. You may withdraw this consent at any time through your account preferences or via the privacy email.
5Data Sharing
Yu77 does not sell personal data. User data may be shared with third parties only in the situations described below, and always with appropriate safeguards in place:
- Payment processors: To process deposits via Pix, boleto, credit/debit card, PicPay, and Mercado Pago, the minimum required data is transmitted to our partner payment processors. These partners operate under confidentiality agreements and their own security policies;
- Game providers: To provide Live Casino games and slots, yu77 shares account identifiers with partner game providers. Full name or CPF data is not shared with game providers;
- Identity verification services: To meet KYC requirements, identity data may be transmitted to partners specialized in document verification who operate under confidentiality and LGPD compliance;
- Competent authorities: yu77 may share data with regulatory, judicial, or law enforcement authorities when required by law, court order, or a legally grounded investigation;
- Infrastructure services: Cloud storage providers and digital security services that process data on behalf of yu77, always under contracts with appropriate data protection clauses.
No third-party advertising: yu77 does not share data with advertising networks, social media platforms, or external advertisers for ad-targeting purposes.
6Data Retention
Yu77 retains personal data for as long as necessary to fulfill the purposes for which it was collected, or to meet legal and regulatory obligations. The general retention criteria are:
- Active account data: Retained for the full duration of the account and for the statute of limitations period covering any potential legal obligations after closure;
- Financial transaction data: Retained for a minimum of 5 years after the transaction date, in compliance with legal obligations for financial record-keeping and anti-money laundering;
- KYC verification data: Retained for a minimum of 5 years after account closure, in accordance with applicable regulatory requirements;
- Support data: Support interaction history retained for up to 2 years after the last contact;
- Browsing data and cookies: Retained in accordance with the cookie settings described in Section 8 of this Policy.
Once the applicable retention period expires, data is securely deleted or irreversibly anonymized for statistical purposes, with no possibility of re-identifying the data subject.
7Data Security
Yu77 applies a robust set of technical and organizational measures to protect users' personal data against unauthorized access, loss, alteration, or improper destruction:
- 256-bit SSL encryption: All communication between your device and yu77's servers is encrypted, including registration data, Pix transactions, betting sessions, and support communications;
- Secure storage: Passwords are stored in hashed and salted format, making it impossible to recover the original value even in the event of unauthorized database access;
- Two-factor authentication (2FA): Available to all users in the account security settings. yu77 strongly recommends enabling 2FA for added protection;
- Continuous monitoring: Automated systems monitor access patterns and transactions in real time to detect and block suspicious activity;
- Internal access control: Only yu77 staff with a justified operational need are granted access to users' personal data, subject to access logging and strict internal policies;
- Financial data isolation: Pix key data and card information are processed in an isolated environment, with no persistent storage of sensitive payment data on the main servers.
Phishing awareness: yu77 will never ask for your password, banking details, Pix key, or card information via email, chat, or phone. If you receive any communication of this kind claiming to be from yu77, treat it as a fraud attempt and contact support immediately.
8Cookies and Tracking Technologies
Yu77 uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and analyze usage patterns in aggregate. The types of cookies used are:
- Essential cookies: Required for the platform's core functionality, such as keeping your session active after login, remembering language preferences, and processing transactions. These cannot be disabled without affecting how yu77 operates;
- Analytical cookies: Used to collect information about how users navigate the platform — which pages are visited most, time spent on each page, and navigation paths. This data is aggregated and anonymized, with no individual identification;
- Functionality cookies: These allow yu77 to remember your preferences, such as your preferred betting layout, notification settings, and recently accessed games.
Yu77 does not use third-party advertising cookies or share cookie data with external ad networks. You can manage your cookie settings at any time through the cookie banner displayed on your first visit or through your browser settings.
9Your Rights as a Data Subject
The LGPD grants you, as the data subject whose personal data is processed by yu77, a set of rights that may be exercised at any time. See below for each right and how to exercise it:
Access
Request a copy of the personal data yu77 holds about you, including data categories, purposes, and any sharing that has taken place.
Correction
Request the correction of outdated, inaccurate, or incomplete data in your yu77 account. Basic information can be updated directly from your account dashboard.
Deletion
Request the deletion of your personal data when it is no longer needed for the purposes that justified its collection, subject to applicable legal retention periods.
Portability
Request your personal data in a structured, interoperable format for transfer to another controller, as regulated by the ANPD.
Consent Withdrawal
Withdraw consent for marketing communications at any time through your account preferences or by emailing our privacy address, without affecting any contracted services.
Sharing Information
Request information about which entities yu77 has shared your personal data with and for what purposes.
To exercise any of these rights, submit a request to privacidade@yu77.best with the subject line "LGPD Rights – [Request Type]". yu77 will respond within 15 business days. For complex cases, this deadline may be extended by an additional 15 business days, with prior notice to the requester.
Identity verification: To confirm that a request is being made by the legitimate data owner, yu77 may require identity verification before processing it.
10Minors
Yu77 is a platform exclusively for users aged 18 and over. yu77 does not intentionally collect personal data from anyone under 18. If we identify that an account was created by a minor, the account will be closed immediately and all collected data will be deleted.
If you are a parent or guardian and believe a minor has used the yu77 platform, please contact us immediately at privacidade@yu77.best so we can take the necessary steps with the utmost urgency.
11International Data Transfers
In some cases, yu77's data processing may involve transferring data to servers or service providers located outside Brazil — for example, cloud infrastructure providers or international casino game providers.
When such transfers occur, yu77 ensures that data is protected by appropriate mechanisms, such as standard contractual data protection clauses or recognized certifications, in accordance with Article 33 of the LGPD. yu77 does not transfer data to countries that do not offer a level of personal data protection compatible with Brazilian law, unless the appropriate safeguards are in place.
12Changes to This Policy
Yu77 may update this Privacy Policy periodically to reflect changes in data processing practices, regulatory updates, or platform service improvements. Any material update will be communicated at least 7 days in advance via your registered email and by publishing the new version on this page, along with its effective date.
Continued use of the yu77 platform after any changes take effect constitutes acceptance of the updated Privacy Policy. We recommend reviewing this document periodically to stay informed about how your data is handled.
13Contact & Data Protection Officer (DPO)
To exercise your rights as a data subject, ask questions about this Privacy Policy, or report any concerns related to data processing by yu77, you may use the following channels:
- Privacy email: privacidade@yu77.best – responses within 15 business days;
- General support: suporte@yu77.best or live chat available 24 hours a day on the platform;
- General inquiries: Access FAQ for quick answers to the most common questions.
Yu77 has appointed a Data Protection Officer (DPO) responsible for overseeing the platform's privacy practices and serving as the point of contact for data subjects and the National Data Protection Authority (ANPD). To contact the DPO directly, use the email privacidade@yu77.best with the subject line "DPO – [Request Subject]".
Regulatory authority: If you believe your rights as a data subject have not been adequately addressed by yu77, you have the right to file a complaint with the National Data Protection Authority (ANPD), as provided under the LGPD.
yu77 is exclusively for users aged 18 and over. Bet responsibly. Visit Responsible Gambling to set limits and use the self-control tools available on the platform.