Last updated: June 2026

Privacy Policy of luz777 — Your Data Protected

Luz777 takes your privacy seriously. Here you'll find a clear, straightforward explanation of how we collect, use, and protect your personal information in compliance with the LGPD.

Your Data in Good Hands

The core principles behind luz777's privacy policy — summarized before the full text.

End-to-End Encryption

All data transmitted between your device and luz777 is protected by 256-bit SSL encryption — the same standard used by Nubank, Itaú, Bradesco, and Banco do Brasil. No information travels in plain text over the network.

100% LGPD Compliant

Luz777 operates in full compliance with the General Data Protection Law (Lei nº 13.709/2018). Every data collection and processing activity has a defined legal basis, a clear purpose, and is internally documented as required by law.

Data Is Never Sold

Luz777 does not sell, rent, or trade users' personal data with third parties for advertising or any other purpose. Your information stays within the platform's ecosystem — full stop.

You Control Your Data

At any time, you may access, correct, export, or request the deletion of your personal data by sending an email to contato@luz777.click. luz777 responds to LGPD rights requests within the legal deadline of 15 business days.

Minimum Necessary

Luz777 collects only the data strictly necessary to operate the platform, process Pix payments, and meet legal obligations. No unnecessary tracking, no collection of data without a specific and documented purpose.

Incident Notification

If any security incident occurs that may affect your data, luz777 will notify impacted users and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with full transparency about what occurred.

Your Rights as a Data Subject

The LGPD grants concrete rights to luz777 users. See what you can request at any time.

Access

Request a copy of all personal data that luz777 holds about you.

Correction

Correct any incomplete, inaccurate, or outdated information in your luz777 profile.

Deletion

Request the deletion of data processed based on your consent, subject to legal exceptions.

Portability

Receive your data in a structured format for transfer to another service.

Block

Request the temporary blocking of any unnecessary or excessive data processing.

Objection

Object to the processing of your data carried out without your express consent.

Information

Request information about the public or private entities with which luz777 has shared your data.

Revocation

Withdraw consent given for consent-based processing at any time and at no cost.

To exercise any of the rights above, send an email to contato@luz777.click with the subject line "LGPD Request" and your CPF for identification. Response time: up to 15 business days.

Quick summary: luz777 collects only what it needs to operate the platform. Your data is never sold. You can access, correct, or delete your information at any time. This Policy is governed by the LGPD (Law No. 13,709/2018) and applies to all registered luz777 users.

1. About Us

Luz777 is a Sports Betting and online casino platform operated for Brazilian users at https://luz777.click. For the purposes of this Privacy Policy, luz777 acts as personal data controller as defined by the LGPD, being responsible for decisions regarding the processing of collected information.

For questions, requests, or to exercise your personal data rights, contact us at contato@luz777.click. Our privacy team responds in Brazilian Portuguese within up to 15 business days from receipt of the request.

2. Data We Collect

Luz777 collects different categories of personal data depending on how you interact with the platform. Below is a detailed overview of what is collected and why:

Category Data Collected When It Is Collected
Registration Data Full name, CPF, date of birth, email, phone number, password (stored as a hash) At the time of registration with luz777
Verification Data Photo ID (RG, CNH, or passport), proof of address, selfie with document Before the first withdrawal or when required by an audit
Financial Data Pix key, deposit and withdrawal history, amounts transacted, payment method used Upon every financial transaction on the platform
Usage Data Betting history, games accessed, session duration, game preferences, account settings During active use of the platform
Technical Data IP address, device type, operating system, browser, screen resolution, unique device identifier Automatically upon every access to luz777
Communication Data Live chat support history, emails exchanged with the support team, complaint records When you contact the luz777 support team

Luz777 does not collect sensitive data such as racial origin, religious belief, political opinion, health information, or biometrics — except where identity verification requires image processing to confirm a match with the submitted document, a process that is automated and immediately discarded after verification.

3. How We Use Your Data

The data collected by luz777 is used for the following purposes, each documented with a specific legal basis:

  • Account operation: creation, maintenance, and management of your account on the platform, including secure authentication;
  • Payment processing: processing deposits via Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago, as well as handling withdrawals to the registered Pix key;
  • Identity verification: confirmation that the user is 18 or older, that the CPF is valid, and that the account holder is the person conducting the transactions — fraud and money laundering prevention;
  • Experience personalization: suggesting relevant promotions and games based on usage history, setting preferences and language — solely to improve your experience on luz777;
  • Account-related communications: notifications about deposits, withdrawals, credited bonuses, active promotions, and important platform updates;
  • Customer support: questions, complaints, and requests handled via live chat and email;
  • Security and fraud prevention: detection of suspicious access, blocking of multiple accounts, identification of irregular betting patterns, and protection of the platform's integrity;
  • Compliance with legal obligations: reporting to the relevant authorities as required by Brazilian law, including anti-money laundering (AML) obligations.

Luz777 does not use your data for behavioral advertising purposes for third parties, the sale of consumer behavior profiles, or any purpose not listed above. If new processing purposes arise, you will be notified in advance and may object or withdraw your consent.

4. Legal Basis for Processing

All personal data processing carried out by luz777 has a legal basis provided for under the LGPD. The main bases used are:

  • Contract performance (art. 7, V of the LGPD): processing of registration, identity verification, and financial data is necessary to fulfill the platform usage agreement accepted by the user at sign-up;
  • Compliance with a legal obligation (art. 7º, II of the LGPD): data used for anti-money laundering prevention, KYC (Know Your Customer) verification, and regulatory reporting;
  • Legitimate interest (art. 7º, IX of the LGPD): technical and usage data used for platform security, fraud detection, and service improvement — always balanced against luz777's interests and users' rights;
  • Consent (art. 7, I of the LGPD): for marketing communications and non-essential promotional personalization. You can withdraw this consent at any time through your account dashboard or by email.

5. Data Sharing

Luz777 shares personal data only when strictly necessary and exclusively with partners that uphold equivalent data protection standards:

  • Payment processors: financial institutions involved in transactions via Pix, boleto, credit card, and debit card receive only the minimum data necessary to process each transaction — the user's name, CPF, and banking details. This includes Nubank, Itaú, Bradesco, Banco do Brasil, and other banks with active Pix, as well as PicPay and Mercado Pago;
  • Identity verification providers: KYC service providers may process documents and images to verify user identity during the verification process prior to withdrawals;
  • Game providers: casino, slots, and Live Casino game providers may receive anonymous technical identifiers (not your CPF or name) to ensure games function correctly and to prevent technical fraud;
  • Competent authorities: data may be shared with the Ministry of Finance, the Financial Activities Control Council (COAF), the Federal Revenue Service, the Public Prosecutor's Office, or judicial authorities when required by law or court order;
  • National Data Protection Authority (ANPD): in the event of security incidents or regulatory investigations, as provided under the LGPD.

Clear guarantee: luz777 never sells, rents, exchanges, or shares personal data with marketing companies, advertising platforms, data brokers, or any third party for commercial purposes without the user's express consent.

6. Cookies and Tracking

Luz777 uses cookies and similar technologies to ensure the platform functions correctly and to improve the user experience. The types of cookies used are:

  • Essential cookies: required for the platform to function — session authentication, login state management, language preferences. They cannot be disabled without affecting your use of the site;
  • Performance cookies: collect anonymous data on how users navigate luz777 — most visited pages, load times, and technical errors. They help identify and fix usability issues;
  • Functionality cookies: store preferences such as account settings, applied game filters, and in-platform browsing history to personalize your experience;
  • Security cookies: detect suspicious behavior, unauthorized access attempts, and patterns indicating bot activity or fraud.

Luz777 does not use third-party cookies for behavioral advertising. You can manage cookie settings in the banner shown on your first visit or through your browser settings. Disabling essential cookies may prevent access to certain platform features.

7. Data Retention

Luz777 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, observing the minimum retention periods required by Brazilian law:

  • Active account data: for as long as the account remains active on the platform and for up to 5 years after closure, for audit and legal compliance purposes;
  • Financial records: minimum of 5 years after each transaction, as required by Brazilian anti-money laundering rules and financial regulations;
  • Identity verification documents: for the duration of the account and for up to 5 years after its closure;
  • Support records: up to 2 years after the support interaction is closed, for quality assurance and dispute resolution purposes;
  • Technical access data (logs): up to 6 months, in accordance with the Brazilian Internet Civil Rights Framework (Lei nº 12.965/2014), and may be retained longer if an investigation is ongoing.

Once the retention periods above have elapsed, or upon a user's deletion request (where applicable), data is securely destroyed or irreversibly anonymized. Anonymized data may be used for statistical analysis without restriction.

8. Information Security

Luz777 applies a robust set of technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or improper disclosure:

  • 256-bit SSL/TLS Encryption: all communications between the user's device and luz777's servers are encrypted. No sensitive information is transmitted in plain text;
  • Secure password storage: passwords are never stored in plain text — we use modern hashing algorithms (bcrypt) with an individual salt per user;
  • Role-based access control: luz777 employees only have access to the data strictly necessary for their role. All access is monitored and logged;
  • Two-factor authentication (2FA): available for users who want an extra layer of account security;
  • 24-hour security monitoring: intrusion and anomaly detection systems operate continuously to identify suspicious access attempts;
  • Regular penetration testing: periodic security audits conducted by independent specialists to identify and remediate vulnerabilities before they can be exploited.

In the event of a security incident that poses a real risk to your data, luz777 will notify affected users and the ANPD as quickly as possible, with information about what happened, which data was affected, and the steps taken to mitigate the damage.

9. International Data Transfer

Some services used by luz777 — such as live casino game providers, server infrastructure, and analytics tools — may involve data processing on servers located outside Brazil.

When this occurs, luz777 ensures that international data transfers meet LGPD requirements, either through:

  • Countries with a level of data protection recognized as adequate by the ANPD;
  • Contracts with specific data protection clauses (standard contractual clauses) that impose the same LGPD obligations on the recipient;
  • Internationally recognized certifications or equivalent compliance mechanisms.

No international data transfers are made to countries that do not provide adequate protection guarantees. Payment data via Pix is processed exclusively within the Brazilian financial system and does not leave the country.

10. Minors

Luz777 is a platform exclusively for users aged 18 and over. We do not intentionally collect or process personal data from individuals under 18 years of age.

During registration, we request your date of birth and CPF to verify you are of legal age. If we identify that an account was created by someone under 18, the account is immediately suspended, the data is deleted, and any deposits are refunded to the original payment method.

Parents and guardians should enable parental controls on minors' devices to prevent unauthorized access to the platform. If you suspect that a minor is using luz777, please contact us immediately at contato@luz777.click so we can investigate and take the appropriate action.

11. How to Exercise Your Rights (LGPD)

To exercise any of the rights guaranteed by the LGPD — access, correction, deletion, portability, blocking, objection, withdrawal of consent, or information about sharing — follow the procedure below:

  1. Send an email to contato@luz777.click with the subject line "LGPD Request";
  2. Include in the body of the email: your full name, CPF registered on luz777, a clear description of the right you wish to exercise, and, where applicable, the specific data you wish to access, correct, or delete;
  3. Luz777 will confirm receipt of the request within 2 business days;
  4. A response to your request will be sent within 15 business days from the date of receipt, in accordance with the deadline set out in the LGPD;
  5. For complex requests or those requiring additional verification, the deadline may be extended by up to 15 business days, with written notice provided to the requester.

If you are not satisfied with the response you received, you may file a complaint directly with the National Data Protection Authority (ANPD) through the gov.br/anpd portal.

12. Changes to This Policy

Luz777 may update this Privacy Policy periodically to reflect changes in the services offered, applicable legislation, or internal data processing practices.

Material changes will be communicated at least 15 days in advance by email to users with an active account and via a prominent notice on the platform. The date of the last update is always shown at the top of this page.

Continued use of luz777 after the updated Policy's effective date constitutes tacit acceptance of the changes. For changes involving new consent-based processing purposes, luz777 will request a new express indication from the user before beginning the new processing.

We recommend reviewing this Policy periodically. Previous versions are archived and available upon request at contato@luz777.click.

13. Contact & Data Protection Officer (DPO)

Luz777 has appointed a Data Protection Officer (DPO) as required by the LGPD. The DPO serves as the official communication channel between users, the ANPD, and the platform on all matters relating to privacy and personal data protection.

To contact luz777's DPO or privacy team:

  • Email: contato@luz777.click (subject: "Privacy" or "LGPD Request")
  • Live chat: available 24 hours a day via the website and mobile app
  • Account dashboard: "Privacy & Data" section accessible after login

Support is provided exclusively in Brazilian Portuguese. Our team is available 24 hours a day for urgent security matters — such as suspected unauthorized account access. For LGPD rights requests, the response deadline is up to 15 business days.

Terms and Conditions: This Privacy Policy should be read together with the Terms & Conditions of luz777, which set out the general rules for using the platform, including betting, payments, and the loyalty program.

Privacy at luz777: What It Actually Means for You

When you create an account at luz777, deposit via Pix, and start betting on the Brasileirão or playing live blackjack, you're trusting a platform with sensitive personal information. Your CPF is the key to your identity in Brazil's financial system. Your phone number is how you access your bank. Your email is where your most important notifications land. luz777 takes this responsibility seriously — not as a regulatory formality, but as a core part of the trust agreement with every user.

LGPD compliance is nothing new for luz777 — the platform was built with data protection as a core requirement from the start, not as an afterthought. Every new feature goes through a privacy impact assessment before launch. If a new promotion requires collecting additional data, the internal team verifies whether an adequate legal basis exists, whether the collection is proportionate, and whether users need to be notified. This process is invisible to users — but it's what ensures privacy rules are followed in practice, not just on paper.

Pix has transformed how Brazilians relate to digital payments — and it has also introduced new security challenges. At luz777, every Pix transaction is subject to an identity check matching the registered key against the account holder's CPF. This means you cannot withdraw to someone else's account — a measure that protects both the user and the platform's financial integrity. Third-party deposits are also not accepted: if someone tries to deposit on behalf of another user, the transaction is declined and the amount is automatically returned.

Behavioral data on the platform — which games you play, how long you spend in each session, which promotions you redeem — is used solely to personalize your experience within luz777. If you frequently bet on Copa do Brasil, you're more likely to receive football promotion notifications than slots offers. This personalization is handled internally, without sharing your behavioral profile with advertising networks or third-party data platforms. luz777 does not run Facebook, Google Ads, or any other ad network remarketing cookies to track your activity outside the platform.

Luz777's technical security is built in layers. The first is transport encryption — 256-bit SSL ensuring that data exchanged between your device and the platform's servers cannot be intercepted. The second is secure storage: passwords are never saved in plain text, verification documents are kept in isolated storage with restricted access, and financial data is segregated from profile data. The third layer is active monitoring: automated systems identify suspicious access patterns — sequential login attempts, logins from different IPs within a short window, unusual password changes — and trigger a preventive block with a notification to the user.

Understanding your rights as a data subject is an important part of using any digital platform in Brazil after the LGPD. At luz777, exercising those rights is straightforward: an email with the subject line "LGPD Request" and your CPF is all it takes to get started. Want to see all the data the platform holds about you? You'll receive a complete file in a readable format. Need to correct an outdated address? Done. Want to delete your account and all associated data? The platform processes the request within the legal timeframe, retaining only what is required by law (financial records for 5 years, as required by AML regulations). The process is transparent, documented, and free of charge.

Responsible Gambling: Privacy and responsible gambling go hand in hand at luz777. Your deposit limit, session, and self-exclusion settings are treated with the same confidentiality as all other account data — never shared with third parties. Visit our Responsible Gambling to explore all available tools. Platform exclusively for users aged 18 and over.

Frequently Asked Questions about Privacy

The most frequently asked questions from luz777 users about data protection and the LGPD.

No. luz777 does not sell, rent, exchange, or share personal data with third parties for commercial or advertising purposes under any circumstances. Your data is used exclusively to operate your account, process payments, and fulfill legal obligations. The only third parties that receive data from luz777 are operational partners directly involved in delivering the service — such as financial institutions that process Pix transactions — and even then, only the minimum necessary data is shared.

To request deletion of your personal data at luz777, send an email to contato@luz777.click with the subject line "LGPD Request – Data Deletion", including your full name and CPF. luz777 will process the request within up to 15 business days. Please note that certain data must be retained for a minimum legal period even after deletion — financial records, for example, must be kept for 5 years under anti-money laundering regulations. In such cases, data is retained only in the volume and for the period strictly required by law, and remains inaccessible for any operational use on the platform.

Yes, the Pix key registered for withdrawals is stored on luz777 and linked to your account. It is protected by the same security controls applied to all other data — encryption at rest, role-based access restrictions, and access monitoring. luz777 uses your Pix key exclusively to process withdrawals you request — never for any other purpose. The key is always verified against the account holder's CPF to prevent withdrawals to third-party accounts. To change or remove your registered Pix key, go to the payments panel in your account or contact support.

After account closure, luz777 initiates the process of deleting and anonymizing personal data. Profile data such as name, email, phone number, and preferences are deleted within 30 days of confirmed closure. Identity verification documents are retained for up to 5 years for audit and legal compliance purposes. Financial transaction records are kept for the minimum period of 5 years required by anti-money laundering regulations. After these periods, all remaining data is irreversibly deleted or permanently anonymized.

Your Data Protected, Your Experience Secured

Luz777 combines the thrill of Sports Betting and live casino with the highest standards of data protection. Create your account now, deposit via Pix, and play with confidence.

Português