Uu888 Privacy Policy – Your Data Protected in Brazil

For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the controller of personal data collected through the platform uu888 is the platform's operating company, responsible for defining the purposes and means of processing data belonging to Brazilian users.

The Data Protection Officer (DPO) of uu888 can be contacted at privacidade@uu888-khelo.com for requests related to data subject rights, questions about this policy, or any matter involving the processing of personal data on the platform.

This Privacy Policy applies to all users who access, register with, or use any service on the platform uu888, including Sports Betting, Live Casino, crash games, slots, jackpots, and all other available features.

The uu888 collects only the data necessary to provide its services and comply with applicable legal obligations. Below are the categories of data collected and their sources:

The uu888 does not collect sensitive data such as health information, racial or ethnic origin, religious beliefs, or sexual orientation. The CPF is collected solely for identity verification and anti-money laundering purposes, in accordance with legal obligations.

Each piece of data collected by uu888 has a specific and legitimate purpose. Personal data on the platform is processed for the following purposes:

• User account creation and management — registration, authentication, password recovery, and profile management on the uu888.
• Financial Transaction Processing — deposits via Pix, boleto bancário, credit and debit card, Mercado Pago, PicPay, and TED; withdrawal processing via Pix; and receipt generation.
• Identity verification (KYC) — fulfillment of legal obligations related to anti-money laundering and counter-terrorism financing (AML/CFT), in accordance with applicable Brazilian law.
• Service delivery — offering sports betting on the Brasileirão, Copa do Brasil, Libertadores, and other competitions; live casino; crash games; slots; jackpots; and other products from uu888.
• Customer Support — support via live chat and email; logging and resolution of disputes; maintenance of interaction history for quality control.
• Security & Fraud Prevention — detection of suspicious behavior, multiple accounts, bonus abuse, and other activities that violate the platform's Terms and Conditions.
• Compliance with legal and regulatory obligations — responding to court orders, requests from competent Brazilian authorities, and accounting and tax obligations.
• Marketing communications — sending promotions, news, and personalized offers from uu888, exclusively for users who have given explicit consent to receive this type of communication.
• Platform improvement — analysis of usage data (in aggregated and anonymized form) to improve the user experience, identify technical issues, and develop new features.

The uu888 does not use personal data for purposes incompatible with those described above. Any new use of data will be communicated to users in advance, where required by the LGPD.

As required by the LGPD, each personal data processing operation carried out by the uu888 is grounded in one of the legal bases set out in Article 7 of the law:

Consent for receiving marketing communications may be withdrawn by the user at any time, without affecting access to the platform's other services uu888. To withdraw your consent, access your account settings or contact us at privacidade@uu888-khelo.com.

The uu888 does not sell users' personal data to third parties under any circumstances. Data sharing occurs only in the following situations, each with an appropriate legal basis:

• Payment processors — financial data is shared with the financial institutions and intermediaries required to process deposits and withdrawals via Pix, boleto, credit and debit card, Mercado Pago, PicPay, and TED. These entities operate under the regulation of the Banco Central do Brasil and have their own confidentiality and data protection obligations.
• Game and content providers — to provide slots, live casino, and crash games, the uu888 integrates third-party content providers. These partners may receive session data required for game operation — such as user ID and betting history — without access to full identification data.
• Identity Verification Services (KYC) — documents submitted for verification may be processed by specialized analysis services operating under contract with uu888 and are subject to contractual confidentiality obligations and compliance with the LGPD.
• Technology infrastructure — hosting servers, CDN, monitoring, and security services that support platform operations may have technical access to data in encrypted form, without the ability to directly interpret it.
• Brazilian public authorities — uu888 responds to data requests from judicial authorities, the Public Prosecutor's Office, the Federal Revenue Service, COAF, and other entities legally authorized to request information, in accordance with applicable Brazilian law.

All third parties with access to personal data of users of uu888 are contractually required to implement security measures consistent with LGPD requirements and to use data solely for the purpose for which it was provided.

The uu888 retains users' personal data for as long as necessary for the purposes described in this policy and to fulfill applicable legal obligations. General retention periods are as follows:

• Registration and identification data (CPF, full name, date of birth) — retained for the full duration of the active account and for a minimum of 5 years after closure, in accordance with anti-money laundering obligations.
• Financial transaction records (deposits and withdrawals via Pix, boleto, card) — retained for a minimum of 5 years, in compliance with tax and COAF obligations.
• Betting history and platform activity — retained for the duration of the account and for 2 years after closure for dispute resolution and audit purposes.
• Support communication records — retained for 2 years for quality control and dispute resolution purposes.
• Browsing data and cookies — retained in accordance with the cookie policy described in Section 8, with varying retention periods by cookie type.

Once retention periods have expired or there is no longer a legal basis for processing, data is securely deleted or irreversibly anonymized. Anonymized data may be kept for statistical and platform improvement purposes without a time limit, as it cannot be used to identify any individual.

Users may request early deletion of their data, subject to verification of any legal obligations that may require retention. To submit a deletion request, contact us at privacidade@uu888-khelo.com.

Protecting users' personal data is one of the top priorities of uu888. The platform adopts the following technical and organizational measures to ensure the security of your information:

• SSL 256-bit encryption across all communication between the user's device and the servers of the uu888 — the same standard used by major Brazilian banks such as Itaú, Bradesco, Banco do Brasil, and Nubank.
• Secure password storage with one-way hashing algorithms — no employee of uu888 has access to the user's password in plain text.
• Protected financial data — Pix details, credit card information, and banking data are not stored in plain text on the platform's servers.
• Two-factor authentication (2FA) available and recommended for all users as an additional layer of account access protection.
• Continuous security monitoring with intrusion detection systems, anomalous activity monitoring, and automatic alerts for suspicious access.
• Internal access controls — only employees with a legitimate need have access to users' personal data, and all access is recorded in logs.
• Encrypted backups with disaster recovery procedures to ensure data availability in the event of technical incidents.

In the event of a security incident that may affect users' personal data, uu888 is committed to notifying affected data subjects and the National Data Protection Authority (ANPD) within the timeframes established by the LGPD, with information about the nature of the incident, the data involved, and the measures taken.

The uu888 uses cookies and similar technologies to ensure the platform works correctly, improve user experience, and — with your consent — personalize content and communications. The types of cookies used are:

• Essential Cookies — required for core platform functionality, such as maintaining authenticated sessions, language preferences, and security. They cannot be disabled without affecting your ability to use the platform.
• Performance cookies — they collect information about how users interact with the platform (most visited pages, session duration, errors encountered) in an aggregated and anonymized form, without identifying individual users. Used exclusively to improve the uu888.
• Functional cookies — remember user preferences such as betting settings and odds display preferences, personalizing the experience without requiring reconfiguration on each visit.
• Marketing cookies — used only with the user's express consent to personalize communications and display relevant content within the platform. They can be disabled in the account settings or through browser tools.

Most modern browsers allow you to manage cookies through your privacy settings. Blocking essential cookies may prevent the uu888, including login and bet processing. Disabling other cookie types does not affect core functionality.

The LGPD guarantees data subjects a set of rights that uu888 is fully committed to upholding. You may exercise any of the rights below at any time by contacting us at privacidade@uu888-khelo.com:

Requests to exercise data rights will be responded to by uu888 within up to 15 business days. In cases of high complexity or a large volume of requests, this period may be extended by a further 15 days, with prior notice to the user. To exercise any right, send your request to privacidade@uu888-khelo.com with the subject line "Data Subject Rights – LGPD" and include your registered CPF for identity validation.

If you believe your rights have not been properly upheld, you may file a complaint with the National Data Protection Authority (ANPD), the body responsible for enforcing LGPD compliance in Brazil.

The services of uu888 are intended exclusively for individuals aged 18 or older. The platform does not intentionally collect personal data from minors under 18, and registration by minors is strictly prohibited under the platform's Terms and Conditions.

CPF is collected at registration and verified during the KYC process to confirm that the user is of legal age and properly identified with the Brazilian Federal Revenue Service. Accounts found to have been created by minors are closed immediately, and any data collected is deleted, subject to applicable minimum legal retention periods.

If you suspect that a minor has used the platform of uu888, please contact us immediately at privacidade@uu888-khelo.com so that the appropriate measures can be taken as quickly as possible.

Some of the infrastructure services and technology partners used by uu888 may be located outside Brazil, which may involve the international transfer of personal data. In such cases, uu888 has adopted the following safeguards to keep your data protected:

• Execution of standard contractual clauses with data recipients, ensuring a level of protection equivalent to that required by the LGPD.
• Preference for partners located in countries whose data protection legislation is deemed adequate by the ANPD.
• Data encryption during transmission and storage, regardless of the country where the servers are located.
• Limiting access to transferred data to the minimum necessary for the provision of the contracted service.

Whenever possible, uu888 gives preference to infrastructure providers based in Brazil or Latin America to minimize international data transfers and reduce latency for Brazilian users.

This Privacy Policy may be updated periodically to reflect changes in Brazilian data protection legislation, in particular amendments to the LGPD and ANPD regulations, as well as changes to the services or data processing practices of uu888.

When a relevant update is made, uu888 will follow these notification procedures:

• Update of the revision date displayed at the top of this page.
• Email notification to all users with an active account, with reasonable advance notice before the new terms take effect.
• Prominent display of the new version on the platform with an alert in the user dashboard, when changes are significant and directly affect data subjects' rights.

For minor changes — such as wording corrections, updated contact details, or clarifications that do not materially affect user rights — notification may be made solely by updating this page, without sending individual emails.

Continued use of the platform of uu888 after a new version of this Policy comes into effect constitutes acceptance of the changes. If you do not agree with the new terms, you must close your account before the effective date by requesting a withdrawal of your available real balance via Pix.