Last updated: January 2026

Pk77 Privacy Policy — How We Protect Your Data

No pk77, your personal data is handled with care and transparency. This Policy explains what we collect, how we use it, who we share it with, and what your rights are as a data subject — all in compliance with the General Data Protection Law (LGPD).

Please read carefully

This Privacy Policy describes how the pk77 collects, uses, stores, and protects your personal data. By creating an account or using any service on the platform, you confirm that you have read and understood this document. If you have any questions, our support team is available 24 hours a day in Portuguese.

1

Who We Are — The Data Controller

The controller of personal data processed in connection with the services of the pk77 is the entity operating the platform available at pk77-khelo.net. For the purposes of the General Data Protection Law (LGPD — Law No. 13.709/2018), the pk77 is the controller responsible for decisions regarding the processing of data collected from the platform's Brazilian users.

The pk77 offers Sports Betting — with special coverage of the Brasileirão Série A, Copa do Brasil, Libertadores, and other tournaments —, Live Casino, crash games, slots, and e-sports for adult users residing in Brazil. All services are operated exclusively in BRL (R$) and are tailored for the Brazilian market.

For questions related to privacy and personal data processing, you can get in touch by emailing suporte@pk77-khelo.net or via the live chat available on the platform.

2

What Personal Data We Collect

The pk77 collects personal data in the following situations and categories:

Data you provide directly during registration:

  • Full name;
  • CPF (Cadastro de Pessoas Físicas issued by the Brazilian Receita Federal);
  • Date of birth;
  • Email address;
  • Mobile phone number;
  • Full residential address (street, number, neighborhood, city, state, and zip code).

Data collected during identity verification (KYC):

  • Image of an official government-issued ID (RG, CNH, or passport);
  • Proof of address;
  • Proof of the payment method used, when requested.

Financial and transaction data:

  • Deposit and withdrawal history, including the payment method used (Pix, card, PicPay, Mercado Pago, boleto);
  • Pix key registered for withdrawals;
  • Full history of bets and gaming sessions on the platform.

Data collected automatically during your use of the platform:

  • IP address and approximate geographic location data;
  • Device type, operating system, and browser used;
  • Session data: pages visited, time spent browsing, clicks, and interactions;
  • Cookie and similar tracking technology data (detailed in Section 9).

The pk77 does not collect sensitive data categories — such as racial origin, religious belief, political opinion, genetic or biometric data — except where strictly required to fulfill a specific legal obligation and with the appropriate safeguards provided under the LGPD.

3

How and Why We Use Your Data

The pk77 uses the personal data collected solely for the purposes described below:

  • Delivery of contracted services: create and manage your account, process deposits and withdrawals via Pix and other Brazilian payment methods, record bets, calculate and pay out winnings, and maintain transaction history;
  • Identity verification and compliance: meet KYC (Know Your Customer) legal obligations, anti-money laundering requirements, and counter-terrorism financing rules, as required by Brazilian law;
  • Fraud prevention and security: detect and block suspicious behavior, multiple accounts, bot usage, and other activities that violate the Terms and Conditions or applicable law;
  • Account-related communications: send transaction confirmations, security alerts, notifications about changes to the Terms or this Policy, and support communications;
  • Marketing and promotions: send offers, Brasileirão promotions, free bets, crash game tournaments, and other benefits — only with your consent, which can be withdrawn at any time;
  • Responsible gambling: monitor behavioral patterns to identify signs of problem gambling and trigger protective tools in accordance with our responsible gambling policy;
  • Platform improvement: analyze aggregate usage data to improve the user experience, fix technical issues, and develop new features.

The pk77 does not use your data for purposes incompatible with those described above without first informing you and, where required, obtaining fresh consent.

4

Legal Bases for Processing (LGPD)

The LGPD requires that all personal data processing have a specific legal basis. The pk77 processes your data based on the following legal grounds set out in Article 7 of Law No. 13,709/2018:

Purpose of processing Legal basis (LGPD)
Account creation and management, bet processing, deposits and withdrawals Contract performance (art. 7, V)
KYC verification, anti-money laundering Compliance with a legal obligation (art. 7, II)
Fraud prevention, account security Legitimate interest (art. 7, IX)
Sending marketing communications and promotions Consent (Art. 7, I)
Responsible gambling monitoring Legitimate interest / legal compliance (art. 7, II and IX)
Usage analysis for platform improvement Legitimate interest (art. 7, IX)

Where processing is based on consent, you may withdraw it at any time without affecting any processing carried out prior to that withdrawal. Withdrawing consent for marketing, for example, does not impact processing that is necessary for service delivery or compliance with legal obligations.

5

Data Sharing with Third Parties

The pk77 does not sell your personal data to third parties. Data is only shared in the situations described below and always with appropriate safeguards in place:

  • Game providers: Evolution Gaming, Pragmatic Play, Spribe, and other iGaming partners receive minimal technical data (session identifier, currency, applicable bonus balance) to operate games within the platform. These providers are contractually prohibited from using that data for their own purposes;
  • Payment processors: financial institutions and payment intermediaries (such as those responsible for processing Pix, PicPay, and Mercado Pago) receive the data necessary to process each transaction. This data is handled by those institutions in accordance with their own policies and Central Bank of Brazil regulations;
  • Technology service providers: companies that provide hosting, security, data analytics, and fraud prevention services. All are engaged as operators under the LGPD, with contractual clauses ensuring proper data handling;
  • Legal and regulatory authorities: the pk77 may disclose personal data when required by law, court order, or a request from a competent police or regulatory authority in Brazil;
  • External auditors: when required for compliance auditing, auditors may access aggregate or anonymized data, with no individual identification of users.

Any sharing beyond the cases above only takes place with your explicit consent, requested clearly before it occurs.

International data transfer

Some of our technology and game providers are based outside Brazil. When this is the case, pk77 ensures that the transfer is carried out with standard contractual clauses or other equivalent safeguards provided for under the LGPD, guaranteeing a level of protection compatible with that required by Brazilian law.

6

How Long We Retain Your Data

The pk77 retains your personal data for as long as necessary to fulfill the purposes described in this Policy or to meet specific legal requirements. Retention periods vary depending on the data category:

  • Active account data: retained for as long as your account is active or as long as necessary to provide the contracted services;
  • Financial transaction data: retained for a minimum of 5 years after each transaction, in accordance with Brazilian anti-money laundering legislation (Law No. 9,613/1998) and Central Bank regulations;
  • KYC and identification data: retained for a minimum of 5 years after account closure, as required by law;
  • Browsing data and cookies: retained for the period described in Section 9, generally between 30 days and 2 years depending on the cookie type;
  • Marketing data: retained for as long as you keep your consent active. After consent is withdrawn, your data is removed from communication lists within 30 days.

Once the applicable retention periods have expired, data is securely deleted or anonymized for statistical purposes, so that the individual can no longer be identified.

When you request the deletion of your account, pk77 will begin the process of deleting data that is not subject to legal retention obligations. Data subject to legal retention periods will be kept until those periods expire and then deleted.

7

Personal Data Security

The pk77 adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

Among the security measures implemented on the platform:

  • 256-bit SSL/TLS Encryption across all communications between your device and pk77 — the same technology used by Brazilian banks and financial institutions;
  • Secure password storage with a one-way cryptographic hash — no employee of pk77 can see your password — only you can;
  • Two-factor authentication (2FA) available and recommended for all users;
  • Access monitoring continuous monitoring to detect unauthorized access attempts or suspicious behavior;
  • Internal access control strict — only employees with a legitimate need have access to specific personal data, and that access is logged and audited;
  • Regular security testing, including vulnerability assessments and penetration testing carried out by specialized teams.

Despite all measures in place, no digital system is completely immune to breaches. In the event of a security incident that may affect your data, the pk77 will notify the National Data Protection Authority (ANPD) within the legal deadline and inform the affected data subjects with clear details about what occurred, the data involved, and the measures taken.

On your end, you can help keep your account secure by using a strong, unique password, not sharing your credentials, and enabling two-factor authentication. If you suspect unauthorized access to your account on pk77, please contact support immediately.

8

Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject, a set of rights that pk77 is committed to respecting and facilitating the exercise of these rights. See each right and how to exercise it below:

Right of Access

You may request confirmation that pk77 processes your data and access a copy of the personal data we hold about you, including the purposes of processing, the recipients, and the retention periods.

Right to Correction

If any of your personal data is incomplete, inaccurate, or out of date, you can request a correction directly in your account settings or by contacting pk77.

Right to Erasure

You may request the deletion of data processed on the basis of consent. Data processed under a legal obligation cannot be deleted before the legal retention period expires, but pk77 will clearly inform you which data cannot be deleted and explain why.

Right to Data Portability

You may request the portability of your personal data to another controller, in a structured and interoperable format, where technically feasible and in accordance with ANPD regulations.

Right to Withdraw Consent

For processing based on consent — such as sending marketing communications from pk77 —, you may withdraw your consent at any time, without affecting the lawfulness of any processing carried out prior to that withdrawal.

Right to Information on Sharing

You may request information about which public and private entities have received your data and for what purpose. The pk77 will provide that information in a clear and accessible manner.

Right to Object

You may object to processing carried out on the basis of legitimate interest when you believe your fundamental rights outweigh that interest. The pk77 will review each request individually.

How to exercise your rights

To exercise any of the rights listed above, contact us via the platform's live chat or send an email to suporte@pk77-khelo.net with a description of your request. The response time is up to 15 business days. We may ask you to verify your identity before processing the request to ensure we are responding to the rightful data subject.

9

Cookies and Tracking Technologies

The pk77 uses cookies and similar technologies to ensure the platform functions correctly, personalize the user experience, and analyze site performance. Below we explain the types of cookies used:

Cookie Type Purpose Duration
Essential Required for basic platform functionality: maintaining an authenticated session, remembering language and accessibility preferences. Without these cookies, the site will not function properly. Session / up to 1 year
Functional Remember your preferences — such as the last game you played, betting settings, and interface preferences — to make your experience on pk77 most convenient. Up to 1 year
Analytics Collect aggregate data on how users navigate the platform: most visited pages, average session duration, traffic sources. They help pk77 to continuously improve the experience. Up to 2 years
Security They help detect suspicious behavior, fraud attempts, bot access, and multiple accounts. Essential for protecting legitimate users. Session / up to 30 days

The pk77 does not use third-party advertising cookies to track you across other sites. Analytics cookies are used in aggregate form and do not identify individual users in the reports generated.

You can manage your cookie preferences through the cookie settings panel available on the platform or through your browser settings. Disabling essential cookies may affect how the platform functions — in particular, the authentication system may not work correctly without session cookies.

10

Marketing Communications and Notifications

The pk77 may send marketing communications — such as Brasileirão promotions, free bets, crash game tournaments, weekend reload offers, and other deals — via email, SMS, or push notifications in the app, exclusively with your consent.

When creating your account, you have the option to consent or not to receiving marketing communications. This consent can be managed at any time in your account settings, under the "Communication Preferences" section.

Transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and communications regarding changes to the Terms or this Policy — are not marketing communications and are sent regardless of your preferences, as they are necessary for the provision of the contracted services.

To unsubscribe from marketing emails from pk77, you may:

  • Clicking the "Unsubscribe" link found in all marketing emails;
  • Adjust your preferences directly in your account settings on the platform;
  • Request cancellation via the support chat or by emailing suporte@pk77-khelo.net.

Marketing unsubscribe requests are processed within 10 business days. During that period, you may still receive a few additional emails while the system updates your preferences.

11

Minors

The services provided by pk77 are intended exclusively for individuals aged 18 and over. The platform does not intentionally collect personal data from anyone under 18.

At the time of registration, the user confirms they meet the minimum age requirement. The pk77 applies age verification measures as part of its KYC procedures to confirm that users meet the minimum age requirement.

If the pk77 identifies that data from a minor under 18 has been collected, the account will be immediately blocked, the data will be deleted, and any balances will be held for review. The matter may be reported to the relevant authorities in accordance with Brazilian child protection legislation.

If you believe a minor has created an account on pk77, please contact support in Portuguese immediately so we can act quickly.

12

Changes to This Privacy Policy

The pk77 may update this Privacy Policy periodically to reflect changes in applicable Brazilian legislation — such as ANPD regulations —, updates to the services offered, new partnerships with game providers, or improvements to security practices.

When we make material changes, we will notify you at least 7 days in advance by email and through a prominent notice in the logged-in area of the platform. The date of the last update is always displayed at the top of this page.

Continued use of the platform after an updated version of this Policy takes effect constitutes acceptance of the changes made. If you do not agree with the new terms, you may close your account through support before the effective date of the changes.

Previous versions of this Policy are available upon request to pk77.

13

Contact, DPO & Privacy Channel

The pk77 has appointed a Data Protection Officer (DPO), as required by the LGPD for data controllers that carry out large-scale processing of personal data.

To exercise your rights as a data subject, get answers about how your data is handled, report a security incident, or submit any privacy-related request, please use the channels below:

  • Live chat: available on the platform 24/7 in Portuguese — response times are generally under 5 minutes during peak hours;
  • Privacy email: suporte@pk77-khelo.net — include "LGPD Request" in the subject line so your message is routed to the correct channel;
  • Response time: up to 15 business days for data subject rights requests, as established by the LGPD.

If you are not satisfied with the response from pk77 regarding a request related to your personal data, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for enforcing the LGPD in Brazil.

How pk77 Protects You in Practice

Concrete measures that keep your data and your money secure

256-bit SSL Encryption

All communication between your phone or computer and the servers of pk77 is encrypted with SSL 256-bit — the same standard used by Brazil's largest banks. Your banking details, CPF, and account information never travel as plain text over the internet.

Full LGPD Compliance

The pk77 operates in compliance with the General Data Protection Law (Law No. 13.709/2018). All data processing activities have a defined legal basis, a clear purpose, and established retention periods. You can exercise all rights guaranteed by the LGPD by contacting our support team in Portuguese.

Control in Your Hands

You decide what you want to receive: marketing communications can be turned on or off at any time in your account settings. Likewise, you can request access to, correction of, or deletion of your data without needing a lawyer or formal process — simply reach out to pk77.

No Data Selling

The pk77 does not sell, rent, or trade your personal data with third parties for commercial purposes. Sharing only occurs with essential operational partners — game providers and payment processors — and always with the appropriate contractual safeguards.

Incident Notification

In the event of a security incident that may affect your data, pk77 notifies the ANPD within the legally required timeframe and informs affected users in a clear, straightforward manner — covering what happened, which data was involved, and what we are doing to address it. Transparency, even in difficult situations.

24/7 Privacy Support

Privacy questions, data access requests, or deletion requests are handled by the support team at pk77 24 hours a day, in English, with no red tape. The response time for formal requests is up to 15 business days, in accordance with the LGPD.

Pix Payment Security

Pix is the primary payment method at pk77 and operates within the instant payment system regulated by the Central Bank of Brazil. Pix keys used in transactions are handled with the same level of confidentiality as other financial data — stored in encrypted form and accessible only when required to process a specific transaction.

The pk77 never requests your Pix key via email, SMS, or unsolicited messages. All Pix key requests for deposits take place within the platform's authenticated area, after logging in with your verified account. If you receive a message outside the platform asking for financial information on behalf of the pk77, disregard it and let us know immediately through support.

Pix withdrawals from pk77 are processed exclusively to Pix keys registered under the account holder's name on the platform, with additional verification applied when necessary. This measure protects you against fraudulent withdrawals by third parties who may gain access to your account.

Privacy FAQ at pk77

Direct answers to the most common questions from Brazilian users

Your CPF is collected by pk77 to verify your identity, confirm that you meet the minimum age requirement (18 years old), and fulfill KYC legal obligations. It is not shared with third parties for commercial purposes. In specific situations — such as compliance with a court order or a request from a competent Brazilian regulatory authority — providing registration data to the authorities may be required, always within the limits of the law. No game provider has access to your CPF; they receive only a technical session identifier to operate games within the platform.

You can request the deletion of your personal data via the platform's live chat or by emailing pk77 or by emailing suporte@pk77-khelo.net with the subject line "LGPD Request — Data Deletion". After the request is submitted, the privacy team has up to 15 business days to respond. Please note that data subject to legal retention obligations — such as financial transaction records required by law for a minimum of 5 years — cannot be deleted before those periods expire. The response to your request will specify which data can be deleted immediately and which must be retained by legal obligation.

No. pk77 does not use third-party advertising cookies or share your data with ad networks for tracking across other sites. Marketing communications from pk77 — such as Brasileirão promotions, free bets, and crash game tournaments — are sent exclusively through the platform's own channels (email, SMS, and in-app push notifications) and only with your explicit consent. If you see an ad from pk77 on another site, it was served through paid media channels without using your individual personal data for targeting.

Yes. The 256-bit SSL encryption used by pk77 works the same way on mobile and desktop — all communication between your device and the platform is encrypted regardless of how you access it. For players using the app, we recommend keeping your phone's operating system up to date, using a secure Wi-Fi network for financial transactions, and enabling two-factor authentication (2FA) on your account. If you lose your phone, contact the support team at pk77 to block access to the account while the issue is being resolved.

Yes. pk77 makes your complete history of Sports Betting, casino sessions, crash games, deposits, and withdrawals available in the logged-in area of the platform. You can filter by date range and export the data to track your activity over time — which also serves as a useful responsible gambling tool to evaluate your behavior. If you need a full statement that is not available through the platform interface, contact support and we will process your request within up to 15 business days.
Terms & Conditions — Full Rules of Use for pk77

This Privacy Policy supplements the Terms and Conditions of pk77. The Terms detail the rules for registration, betting, payments via Pix, bonuses, withdrawals, user conduct, and responsible gambling. Read both documents for a full picture of your rights and obligations on the platform.

In the event of a conflict between this Policy and the Terms and Conditions regarding personal data processing, this Policy takes precedence.

Read the full Terms and Conditions →

Your Data Protected. Now Play with Peace of Mind.

Sign up at pk77, deposit via Pix, and bet with the confidence of a platform that respects your privacy

Create Free Account I already have an account
Português