Privacy Policy of gq888 — Your Data Protected

The gq888 is a Sports Betting and online casino platform built exclusively for the Brazilian market. We operate the website gq888.best and all associated services, including bets on football (Brasileirão Série A, Copa do Brasil, Libertadores), volleyball, basketball (NBB), MMA and UFC, e-sports, as well as casino games such as slots, blackjack, live roulette, crash games, poker, and bingo.

For the purposes of the LGPD, gq888 acts as the controller of the personal data collected during use of the platform. This means we are responsible for defining how and why your data is processed, and for decisions related to the storage and sharing of that information.

Gq888 collects different categories of personal data depending on how you use the platform. See below what is collected and when:

Gq888 does not collect data in sensitive categories such as racial origin, religious beliefs, health information, or biometrics, except where strictly required by regulation for identity verification.

Gq888 uses your personal data exclusively for the following purposes:

• Account creation and management — identification, authentication, activity history, and experience personalization on the platform;
• Financial transaction processing — deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and bank TED (Nubank, Itaú, Bradesco, Banco do Brasil); withdrawals via Pix and TED;
• Identity Verification (KYC) — compliance with regulatory obligations and prevention of fraud, money laundering, and access by minors under 18;
• Customer support — resolving questions, disputes, and technical issues reported by users;
• Platform security — detecting fraud, misuse, duplicate account creation, and suspicious activity;
• Service-related communications — notifications about transactions, changes to terms, security updates, and promotions you have opted in to receive;
• Compliance with legal obligations — responding to requests from competent authorities in accordance with Brazilian law;
• Continuous Platform Improvement — aggregated, anonymized usage analysis to improve features, performance, and user experience.

As required by the LGPD, every personal data processing activity carried out by gq888 has a legal basis that justifies it. The legal bases we rely on are:

• Contract performance (Art. 7, V of the LGPD): Processing is necessary to provide the contracted services when you create an account and use the gq888 platform — including registration, financial transactions, and support;
• Compliance with a legal or regulatory obligation (Art. 7, II): Identity verification, anti-money laundering compliance, and responding to competent authorities as required by Brazilian law;
• Legitimate interest (Art. 7, IX): Platform security, fraud detection, and service improvement, provided these interests do not override your fundamental rights and freedoms;
• Consent (Art. 7, I): For marketing communications and optional promotions — you may withdraw this consent at any time in your account settings or by contacting support.

Gq888 may share your personal data with third parties only in the following situations, all justified by operational necessity or legal obligation:

• Partner game providers (Pragmatic Play, Evolution Gaming, Spribe, and others) — only the minimum data necessary to authenticate your access and record game results;
• Payment processors — information required to process deposits and withdrawals via Pix, boleto, credit/debit card, PicPay, Mercado Pago, and bank transfer (TED). Card data is tokenized and never stored in plain text by gq888;
• Identity verification providers (KYC) — specialized services for document validation and fraud prevention, operating under confidentiality agreements;
• Competent authorities — when required by law, court order, or Brazilian regulation (Banco Central, COAF, Receita Federal, etc.);
• Technology infrastructure — server, cloud computing, and security providers that process data on behalf of gq888 under LGPD-compliant data processing agreements.

Gq888 uses cookies and similar technologies to ensure the platform works properly, improve the user experience, and analyze usage patterns on an aggregate basis. The types of cookies used are:

• Essential cookies: Required for the platform's basic operation — session authentication, security, and maintaining login state. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember user preferences such as language, interface settings, and last tab visited to improve the experience on return visits;
• Analytical cookies: They collect aggregate, anonymized data on how users navigate the gq888 platform — most-visited pages, session duration, navigation flows. Used exclusively for internal improvements;
• Security cookies: They detect anomalous behavior, fraud attempts, and suspicious access to protect the user's account.

You can manage cookie preferences in your browser settings. Block third-party cookies without affecting the platform's core functionality. Blocking essential cookies may impact login and other critical functions.

Gq888 retains your personal data for as long as necessary to fulfill the purposes described in this policy and to meet applicable legal obligations. The general retention periods are:

• Active account data: Retained for as long as your gq888 account is active;
• Data after account closure: Retained for up to 5 years after account closure to meet Brazilian tax, legal, and regulatory obligations (in accordance with the Civil Code, tax legislation, and anti-money laundering rules);
• Financial transaction records: Retained for a minimum of 5 years as required by the Receita Federal and COAF;
• Security & access logs: Retained for 6 months to 1 year for incident investigation and fraud prevention purposes;
• Support communications: Retained for 2 years for reference in disputes and process improvement;
• Marketing data (with consent): Retained until consent is withdrawn by the user.

Once the applicable retention period has expired, data is securely deleted or anonymized so that the data subject can no longer be identified.

The General Data Protection Law grants you, as the data subject, a set of rights that gq888 is fully committed to upholding. Each of these rights is outlined below:

Gq888 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The key measures in place are:

• Encryption in transit: All communication between the user and gq888's servers is protected with 256-bit TLS/SSL protocol;
• Encryption at rest: Sensitive data stored on gq888 servers is encrypted, including identity documents and financial information;
• Password hashing: User passwords are stored exclusively as salted hashes, making it impossible to recover the original password even in the event of unauthorized database access;
• Least-privilege access control: Each gq888 team member has access only to the data required for their specific role;
• Continuous monitoring: gq888's systems are monitored around the clock to detect anomalies, intrusion attempts, and suspicious activity;
• Two-factor authentication: Available to all users and required for internal access to critical systems by the gq888 team;
• Security audits: The platform undergoes periodic security audits conducted by independent specialized firms.

The gq888 platform is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors. The registration process includes mandatory date-of-birth verification, and a government-issued photo ID is required for the first withdrawal.

If you are a parent or legal guardian and believe that a minor under 18 has created a gq888 account without authorization, please contact our support team immediately at contato@gq888.best or via live chat. gq888 will close the account and delete all data collected from the minor as a top priority, in compliance with the Child and Adolescent Statute (ECA) and the LGPD.

In some cases, personal data from gq888 users may be processed by service providers located outside Brazil — such as international game providers (Pragmatic Play, Evolution Gaming, Spribe) and cloud infrastructure services.

When international data transfers occur, gq888 ensures they take place with the appropriate safeguards required by the LGPD, including:

• Specific data processing agreements with protection clauses equivalent to those required by the LGPD;
• Transfers only to countries with an adequate level of protection recognized by the ANPD, or with equivalent contractual safeguards;
• Data minimization principle: only the data strictly necessary for each specific service is shared with international providers.

Gq888 maintains an up-to-date record of all international data transfers and the protection mechanisms applied to each, available upon request to the data protection officer.

Gq888 may update this Privacy Policy periodically to reflect changes in data processing practices, updates to Brazilian legislation, or improvements to our internal processes. The date of the last update is always shown at the top of this page.

Changes that significantly affect your rights or the way we process your data will be communicated by email to the address registered on your account at least 7 days in advance before taking effect. Minor updates may take effect immediately, with this page updated accordingly.

Continued use of the gq888 platform after any changes to this Privacy Policy constitutes acceptance of those changes. If you disagree with the updated practices described, you have the right to request account closure and deletion of your data, subject to the mandatory retention periods required by law.

For any questions relating to this Privacy Policy, the processing of your personal data by gq888, or the exercise of your rights as a data subject, you can reach us through the following channels:

• DPO email: contato@gq888.best — use the subject line "LGPD – [request type]" for priority handling;
• Live chat: available directly on the gq888 platform, 24 hours a day, 7 days a week, in Brazilian Portuguese;

The response deadline for data subject requests is up to 15 business days, as set out in the LGPD. For more complex requests, this deadline may be extended with prior notice to the data subject. gq888 does not charge any fee to handle data subject rights requests.

If you believe your rights have not been properly addressed by gq888, you have the right to file a complaint with the National Data Protection Authority (ANPD), the Brazilian government authority responsible for enforcing the LGPD.