Updated January 2026 · LGPD

Luna777 Privacy Policy – Your Data Protected with Transparency

At Luna777, privacy isn't fine print — it's a core part of how we operate. Here you'll find everything about how we collect, use, and protect your personal data, in full compliance with the LGPD.

+18 only. Available to residents of Brazil only.

🔒
Privacy Policy
In compliance with the LGPD
Law No. 13,709/2018
Your guaranteed rights
12
Sections
256
SSL bits
2026
Version

What This Policy Covers

Before getting into the details, here's a quick summary of the most important topics covered in this luna777 Privacy Policy.

What Data We Collect

Registration details, financial transaction data (deposits via Pix, boleto, credit/debit card), betting and gaming history, browsing data, and cookies. We only collect what is necessary to operate the platform and meet our legal obligations.

How We Use Your Data

To operate your account, process deposits and withdrawals, prevent fraud, personalize your platform experience, meet legal obligations, and — with your consent — send communications about Luna777 promotions and updates.

Who We Share Data With

Only with strictly necessary operational partners: payment processors (for Pix, boleto, and card), certified game providers, and authorities when required by law. Your data is never sold to third parties.

How We Protect Your Data

256-bit SSL encryption on all transmissions, secure storage on restricted-access servers, two-factor authentication available, and continuous monitoring against unauthorized access.

Your Rights Under the LGPD

Access, correction, deletion, portability, withdrawal of consent, and objection to processing. You can exercise all of these rights directly by emailing suporte@luna777.best, with a response time of up to 15 business days.

How Long We Retain Your Data

Account data: for as long as the account is active and for up to 5 years after closure, as required by law. Financial transaction data: up to 10 years, due to regulatory obligations. Cookies: subject to your browser settings.

Last updated: January 2026. This Privacy Policy applies to all users of the Luna777 platform (luna777.best) and describes how we handle your personal data in accordance with the General Data Protection Law (LGPD – Law No. 13,709/2018). Questions? Reach us at suporte@luna777.best.

1 Introduction

Luna777 believes privacy is a fundamental right, not a bureaucratic formality. That's why this Privacy Policy was written to actually be read: in plain language, free of unnecessary jargon, with information that genuinely explains what happens to your data.

When you create a luna777 account, you entrust us with important personal information — your name, CPF, banking details for Pix and other transactions, and your betting activity. We take that trust seriously. Every piece of data collected has a specific and legitimate purpose, and no information is used in any way you have not been informed of.

This Policy applies to all luna777 platform services: Sports Betting (Brasileirão, Libertadores, Copa do Brasil, UFC, NBB, and more), Live Casino, slots, crash games, and the VIP Program. By using any feature of the platform, you confirm that you have read and understood this Policy.

Our commitment: Luna777 does not sell, rent, or monetize users' personal data to third parties. Full stop.

2 Data Controller

The controller of personal data collected by the Luna777 platform, under the terms of the LGPD, is the company responsible for operating luna777.best. For all purposes of this Policy, the company is identified as luna777.

The Data Protection Officer (DPO) of luna777, responsible for handling communications from data subjects and authorities regarding the processing of personal data, can be reached at the following email address privacidade@luna777.best.

All communications regarding the exercise of data subject rights, questions about this Policy, or requests for information about data processing should be directed to the DPO at the email address above. Response time is up to 15 business days, as provided under the LGPD.

3 Data We Collect

Luna777 collects personal data at various points during your interactions with the platform. The categories of data collected and the contexts in which they are collected are described below.

3.1 Registration Data

At registration, we collect: full legal name as it appears on an official document, CPF, date of birth, email address, mobile number, and residential address. This information is required to create and maintain your Luna777 account.

3.2 Identity Verification Data (KYC)

To meet legal anti-money laundering and age verification obligations, we may request: a photo of an identity document (national ID, driver's license, or passport), a selfie holding the document, and proof of address. These documents are stored with encryption and accessed exclusively by the compliance team.

3.3 Financial and Transaction Data

We record all transactions carried out on the platform: deposits via Pix, bank slip (boleto), credit and debit card, PicPay, Mercado Pago, and bank transfer (TED); withdrawals; and the history of bonuses and promotions used. Full credit card details (card number, CVV) are not stored by Luna777 — they are processed directly by PCI-DSS certified payment operators.

3.4 Gaming and Betting Data

We record a full history of Sports Betting activity (covering sports such as football, UFC, and e-sports) and casino games (slots, live casino, crash games). This data is used to operate your account, calculate VIP Program rewards, and monitor responsible gambling patterns.

3.5 Browsing and Device Data

When you access the platform, we automatically collect: IP address, browser type and version, operating system, device identifier, pages visited, session duration, and clicks. This data is used for security, fraud prevention, and improving the user experience.

Data minimization principle: Luna777 only collects data that is strictly necessary for each stated purpose. We do not collect sensitive data (racial origin, health information, sexual orientation, etc.) from our users.

4 Legal Bases and Purposes of Processing

All personal data processing carried out by Luna777 has a legal basis under the LGPD and a specific, legitimate purpose. The table below summarizes the main processing activities:

Purpose Legal Basis (LGPD) Data Used
Account creation and management Contract performance Full registration details, CPF
Processing deposits and withdrawals via Pix Contract performance Financial data, Pix key
Identity verification (KYC) Legal obligation Identity documents
Anti-money laundering Legal obligation Transactions, KYC
Fraud prevention and security Legitimate interest IP, device, behavior
Sending marketing communications Consent Email, mobile
Responsible gambling monitoring Legitimate interest / Legal obligation Betting and gaming history
VIP program and personalization Contract performance Betting history, volume

Marketing communications — promotional emails, bonus notifications, and platform updates — are based on your consent and may be withdrawn at any time through your account settings panel or by emailing suporte@luna777.best. Withdrawing marketing consent does not affect your account's operation or any other processing activities based on other legal bases.

5 Data Sharing with Third Parties

Luna777 does not sell users' personal data. Data sharing only occurs in the situations described below, which are strictly necessary for the platform's operation:

5.1 Payment Processors

To process deposits and withdrawals via Pix, boleto bancário, credit and debit card, PicPay, Mercado Pago, and TED, we share the necessary financial data with certified payment processors. All payment partners operate under data processing agreements that impose obligations equivalent to those in this Policy.

5.2 Game Providers

To operate live casino games, slots, and crash games, we share session identifiers with certified providers (Pragmatic Play, PG Soft, Evolution Gaming, Spribe, and others). These providers do not receive full personal identification data — only the technical identifiers required to link the game session to the platform account.

5.3 Competent Authorities

Luna777 fully cooperates with Brazilian law enforcement, judicial, and regulatory authorities when required by court order or upon request from the Central Bank, Federal Revenue Service, or other bodies with legal jurisdiction to do so. No voluntary sharing takes place without a legal basis.

5.4 IT Service Providers

Cloud infrastructure, cybersecurity, and technical support companies may have limited technical access to Luna777's systems for maintenance and security purposes. Access is restricted to what is strictly necessary, and all providers are bound by confidentiality agreements.

International transfers: Some game providers and IT infrastructure partners may be located outside Brazil. In such cases, Luna777 ensures that international transfers of personal data are carried out with appropriate safeguards, in accordance with Article 33 of the LGPD.

6 Cookies and Tracking Technologies

Luna777 uses cookies and similar technologies to ensure the platform functions correctly, enhance the user experience, and collect browsing data for security and analytics purposes.

6.1 Types of Cookies Used

  • Essential cookies: required for the platform's basic operation — session authentication, bet slip maintenance, and language preferences. These cannot be disabled without affecting core site functionality.
  • Analytical cookies: collect data on how users interact with the platform (pages visited, session duration, traffic source). Used to improve the experience and identify technical issues.
  • Security cookies: detect anomalous behavior, fraud attempts, and suspicious access, protecting your account and luna777's systems.
  • Preference cookies: remember your display settings, favorite categories, and betting preferences to personalize your experience.

6.2 Cookie Management

You can manage cookie preferences through the banner shown on your first visit to the site and through your browser settings. Disabling non-essential cookies may affect certain platform features, such as personalized experiences, but will not prevent basic use.

Luna777 does not use third-party cookies for behavioral advertising on external networks. Browsing data collected is used exclusively within the platform itself.

7 Information Security

Protecting your personal and financial data is a technical priority at luna777. The security measures in place include:

  • 256-bit SSL encryption on all data transmissions between your device and luna777's servers;
  • Encrypted storage of sensitive data (passwords hashed with bcrypt, KYC documents encrypted at rest);
  • Role-based access control (RBAC): each Luna777 team member has access only to the data strictly necessary for their role;
  • Two-factor authentication (2FA) available to all users and mandatory for internal teams;
  • Continuous monitoring of access and transactions for real-time detection of anomalous behavior;
  • Security audits periodic audits conducted by independent specialized firms;
  • Incident response plan with notification to the ANPD and affected users in the event of a data breach, within the legal timeframes set out by the LGPD.

Despite all the technical measures we have in place, no system is 100% invulnerable. Luna777 recommends that you keep your password secure, enable 2FA, and notify us immediately if you suspect any unauthorized access to your account.

Card details: luna777 does not store full credit card numbers or CVV codes. This data is processed directly by PCI-DSS Level 1 certified payment processors — the industry's highest standard.

8 Data Retention and Deletion

Luna777 retains personal data for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. General retention periods are:

  • Active account data: for as long as the account remains active;
  • Data after account closure: up to 5 years, to fulfill legal obligations and support defense in potential disputes;
  • Financial transaction records: up to 10 years, as required by the Central Bank of Brazil and the Federal Revenue Service;
  • KYC documents: up to 5 years after account closure;
  • Security log data: up to 1 year;
  • Cookies: by type — session cookies (expire when the browser is closed) or persistent cookies (up to 12 months or as configured).

Once retention periods have expired, data is securely deleted or anonymized so that the original data subject can no longer be identified. Anonymized data may be used for statistical purposes without restrictions under the LGPD.

Deletion request: Even if you request deletion of your data, certain records must be retained to meet legal obligations (financial transactions, KYC records). In such cases, luna777 will inform you which data cannot be deleted and the applicable legal basis.

9 Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the owner of your personal data, the following rights regarding the processing carried out by Luna777. All rights may be exercised by emailing privacidade@luna777.best:

  • Access: know what personal data luna777 holds about you and how it is processed;
  • Correction: request the correction of incomplete, inaccurate, or outdated data;
  • Deletion: request deletion of data processed on the basis of your consent, subject to applicable legal retention periods;
  • Portability: receive your data in a structured, commonly used format for transfer to another service provider, where technically feasible;
  • Consent withdrawal: withdraw consent for processing based on that legal basis at any time, without affecting the lawfulness of prior processing;
  • Objection: object to processing carried out on the basis of legitimate interest when there is no adequate legal basis;
  • Information on data sharing: know which entities luna777 shares your data with;
  • Automated decision review: request human review of decisions made solely through automated processing that affect your interests.

Requests will be responded to within 15 business days. In complex cases, this deadline may be extended by an additional 15 business days, with prior notice to the data subject. If you are not satisfied with Luna777's response, you may file a complaint with the National Data Protection Authority (ANPD).

10 Minors

Luna777's services are intended exclusively for individuals aged 18 and over residing in Brazil. The platform does not intentionally collect personal data from minors.

Luna777 uses technical and procedural mechanisms to verify users' ages at registration, including CPF validation against public databases. Accounts identified as belonging to minors are closed immediately and the data is deleted.

If you become aware that a minor has created a luna777 account or has provided personal data to the platform, please notify us immediately at privacidade@luna777.best so we can take the appropriate action.

Minor protection: Any attempt by a minor to register violates luna777's Terms and Conditions and may be reported to the relevant authorities. The platform actively cooperates with initiatives to protect minors in digital environments.

11 Changes to this Privacy Policy

Luna777 may update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or platform improvements. The date of the most recent update is always shown at the top of the document.

Material changes — those that meaningfully affect your rights or how your data is processed — will be communicated by email to registered users at least 10 calendar days before taking effect. Minor changes (grammatical corrections, clarifications that do not alter the substantive content) may be made without prior notice.

Continued use of the Luna777 platform after a new version of this Policy takes effect constitutes acceptance of the changes. If you do not agree with the changes, you may request account closure by emailing suporte@luna777.best before the effective date.

12 Contact & Data Protection Officer (DPO)

For questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, you may contact Luna777 through the following channels:

  • DPO (Privacy) Email: privacidade@luna777.best
  • General Support Email: suporte@luna777.best
  • Live chat: available 24 hours a day, 7 days a week, directly on the platform

When contacting us about personal data, please include "Privacy – LGPD" in the subject line of your email and provide your registered CPF so we can verify your identity and respond more efficiently.

For issues not resolved directly with Luna777, you have the right to file a complaint with the National Data Protection Authority (ANPD), the public authority responsible for overseeing LGPD compliance in Brazil.

Effective date: January 2026. Previous version valid through December 2026. Version history available upon request to the DPO.

Your 8 LGPD Rights at luna777

Brazil's General Data Protection Law (LGPD) grants you concrete rights over your data. Here's how to exercise each of them on the platform.

Access

Request a full copy of all personal data Luna777 holds about you, along with a description of how each piece of data is used.

Response within 15 days
Correction

Found incorrect or outdated information? You can request a correction at any time. Basic registration details can be updated directly from your dashboard.

Via dashboard or email
Deletion

Request the deletion of data processed based on your consent. Data subject to legal retention requirements will be kept, with a clear explanation of the reason.

Legal exceptions disclosed
Portability

Receive your data in a structured format (JSON or CSV) to transfer to another service, where technically feasible and provided it does not conflict with trade secrets.

Structured format
Consent Withdrawal

Withdraw your consent for marketing and communications at any time. Simply go to your account settings or send an email to the DPO.

Instant, via settings
Objection

Object to processing based on legitimate interest when you have a valid reason related to your particular situation. Luna777 will review your request and respond formally.

Case-by-case review
Sharing Information

Know exactly which entities luna777 shares your data with, the purpose of each sharing arrangement, and the safeguards in place.

Section 5 of this Policy
Automated Decision Review

If an important decision about your account was made through automated processing, you may request a human review with an explanation of the criteria applied.

Human review guaranteed

To exercise any of these rights, please contact us at:

privacidade@luna777.best

Frequently Asked Questions About Privacy at Luna777

The most common questions from Brazilian users about how luna777 handles their personal data.

No. luna777 does not share users' personal data with external advertising networks, data brokers, or any company for behavioral advertising outside the platform. Marketing communications you receive from luna777 (email, notifications) are based on your own usage history on the platform and are sent directly by us — with no third-party intermediaries accessing your identifiable personal data. If you no longer wish to receive these communications, simply disable them in your account settings.

Transaction data (amounts, dates, and payment methods used) is recorded in your account history for auditing and legal compliance purposes. However, sensitive credit card details — such as the full card number and CVV — are not stored by luna777. They are processed directly by PCI-DSS Level 1 certified payment operators, without passing through luna777's servers. Your Pix key is stored in encrypted form to enable withdrawals, linked exclusively to your account, and can only be changed by the account holder.

Not immediately. After account closure, Luna777 retains certain data for the periods required by law: financial records for up to 10 years (as required by the Central Bank and Federal Revenue Service), KYC documents and registration data for up to 5 years. These retention periods exist to meet legal obligations and to support defense in potential disputes — not for commercial purposes. Data with no legal retention requirement is deleted within 30 days of account closure. You will receive a confirmation email detailing which data has been deleted and which will be retained, along with the applicable retention period.

Your betting history is used for three main purposes: operating your account (calculating balances, processing withdrawals, and correctly applying bonuses), managing the VIP Program (level progression is based on betting volume), and monitoring responsible gambling patterns (identifying behaviors that may indicate dependency or problematic use, in order to offer control tools or intervention when needed). Betting history is not shared with third parties for external analytical purposes. Within the platform, you have full access to your own betting history at any time through your account dashboard.

Luna777 has a formal security incident response plan. In the event of a data breach that could pose a significant risk or harm to affected individuals, Luna777 will notify the National Data Protection Authority (ANPD) within the timeframe established by the LGPD (generally 2 business days after becoming aware of the incident). Users whose data has been compromised will also be notified directly by email, with details on: which data was affected, the associated risks, and the steps Luna777 is taking to remediate the situation and protect those individuals. We will never conceal a security incident from our users.

Clear Privacy. Trusted Platform. Join Luna777.

Knowing how your data is handled is just the first step. The second is making the most of everything luna777 has to offer: Sports Betting on Brasileirão, Libertadores, and UFC, over 2,000 slots, Live Casino with Portuguese-speaking dealers, and Pix withdrawals in minutes. Free registration, first deposit from R$ 20.00, and a 100% bonus up to R$ 500.00.

+18 only. Terms and conditions apply. Play responsibly.

Responsible Gambling

Sports betting and casino games are entertainment, not a guaranteed source of income. Only play with what you can afford to lose, use the deposit limits available in your dashboard, and seek help if you need it. CVV: 188 (free, 24h). Available to users aged 18 and over residing in Brazil only.

Português