Privacy Policy — 633bd Platform

Section 1

Introduction

633bd ("we", "us", "our") operates the online betting and casino platform accessible at https://633bd.io. This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information provided to us by players, visitors, and other users ("you", "your") when you access or use the 633bd platform, create a registered account, place a bet, or interact with any 633bd service.

We are committed to handling your personal data responsibly, transparently, and in a manner consistent with the data protection principles that govern our operations. This policy applies to all personal data we process in connection with the 633bd platform, regardless of whether it is submitted through our website interface, via mobile browser, through live chat interactions, or through payment processing activities.

Please read this Privacy Policy carefully before registering an account or depositing funds on the 633bd platform. By using the 633bd platform, you confirm that you have read and understood the data practices described in this document. If you do not agree with any part of this Privacy Policy, you should discontinue use of the platform and, if applicable, close your registered account by contacting our support team.

Section 2

Data We Collect

633bd collects personal data in several ways: directly from you when you register an account or use our services, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

2.1 Registration & Account Data

When you create a 633bd account, we collect the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 633bd 21+ age requirement)
• Email address (used for account communications and account recovery)
• Mobile phone number (used for account verification and security alerts)
• Residential address (required for KYC verification prior to withdrawal processing)
• Username and hashed account password

2.2 Identity Verification (KYC) Data

Before processing withdrawal requests, 633bd requires all players to complete a Know Your Customer (KYC) identity verification process. During KYC, we may collect:

• A copy of a government-issued photo identification document (National ID card, passport, or driving licence)
• A copy of a recent utility bill or bank statement as proof of residential address (dated within the last three months)
• A selfie photograph or short video for liveness verification purposes
• Source-of-funds documentation if required by our internal AML risk assessment

2.3 Payment & Transaction Data

When you make a deposit or request a withdrawal on the 633bd platform, we collect:

• Payment method identifiers (e.g., bKash account number, Nagad wallet number, Rocket account reference, Upay identifier, masked Visa/Mastercard number, or bank account reference)
• Transaction amounts in BDT or INR
• Transaction timestamps and reference codes
• Deposit and withdrawal history associated with your account

633bd does not store full card numbers. Payment card data is processed and tokenised by our PCI-DSS compliant payment processing partners. We retain only the masked card number and the payment method reference token.

2.4 Betting & Game Activity Data

We record all betting and gaming activity conducted through your 633bd account, including:

• Bet placement history: market, stake amount, odds accepted, and outcome
• Casino game sessions: game title, provider, session duration, stakes, and results
• Card game sessions (Callbreak, Baccarat): session data and wagering records
• Bonus and promotion usage: which offers were claimed, wagering progress, and whether conditions were met

This data is retained for operational, regulatory, and responsible gaming purposes.

2.5 Technical & Device Data

When you access the 633bd platform, our systems automatically collect technical information, including:

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited within the platform and click-path data
• Referring URL (the page from which you arrived at 633bd.io)

2.6 Communications Data

If you contact 633bd support via live chat or email, we retain a record of those communications including the content of messages, timestamps, and the support agent who assisted you. These records are used for quality assurance, dispute resolution, and staff training.

Section 3

How We Use Your Data

633bd uses the personal data we collect for the following purposes:

• Account creation and operation: To register your account, verify your identity, maintain your account balance, and deliver the core betting and casino services you have requested.
• Age and identity verification: To confirm that you are 21 years of age or older before granting access to real-money services, as required by 633bd's Responsible Gaming Policy.
• Payment processing: To execute deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate transaction records.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity, apply risk-based due diligence, and meet our AML reporting obligations.
• Fraud detection and platform security: To identify unusual account behaviour, detect multi-accounting, investigate potential bonus abuse, and protect the integrity of the 633bd platform.
• Customer support: To respond to your enquiries, process complaints, resolve betting disputes, and provide assistance via live chat and email.
• Responsible gaming: To monitor player activity for indicators of problem gambling, apply deposit limits and self-exclusion measures where requested, and proactively reach out to at-risk players.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance, stability, and user experience of the 633bd platform.
• Marketing communications: To send you information about promotions, bonuses, new game launches, and seasonal offers — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].
• Legal compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce 633bd's Terms & Conditions.

Section 4

Legal Basis for Processing

633bd processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to create and operate your 633bd account, execute deposits and withdrawals, settle bets, and provide the services described in our Terms & Conditions. Without this processing, we cannot provide the 633bd service to you.
• Legal obligation: Processing that is required to comply with applicable anti-money laundering laws, age verification requirements, and any lawful requests from competent regulatory or law enforcement authorities. This includes all KYC-related data collection.
• Legitimate interests: Processing undertaken for fraud prevention, platform security, multi-accounting detection, and aggregate analytics — where those interests are not overridden by your fundamental rights and freedoms. We conduct a balancing assessment before relying on legitimate interests for any new processing activity.
• Consent: Processing of your data for direct marketing communications, where you have explicitly opted in. You may withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.

Section 5

Data Sharing & Disclosure

633bd does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below, and only to the extent necessary for each stated purpose.

5.1 Payment Processors

To execute deposit and withdrawal transactions, 633bd shares relevant payment details with our payment processing partners including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These partners process your payment data in accordance with their own privacy policies and applicable financial data protection standards including PCI-DSS.

5.2 Identity Verification Providers

KYC document verification is conducted with the assistance of specialist identity verification service providers. These providers receive copies of the identification documents you submit during the KYC process and return a verification result to 633bd. They do not retain your documents beyond the period necessary to complete verification, subject to their own data retention obligations.

5.3 Game Providers

To facilitate live casino games, slots, and card games on the 633bd platform, we share a limited set of technical session data (player session token, stake limits, currency, language preference) with third-party game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full registration details, KYC documents, or payment method information.

5.4 Regulatory & Law Enforcement Authorities

633bd will disclose personal data to competent regulatory, tax, or law enforcement authorities where we are legally required to do so, or where disclosure is necessary to protect the safety of any individual or to prevent or detect criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of 633bd, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, 633bd will notify affected players in advance and ensure that the acquiring entity commits to processing personal data in a manner consistent with this Privacy Policy.

Section 6

Cookies & Tracking Technologies

The 633bd platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access other files on your device.

6.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the operation of the 633bd platform. They maintain your logged-in session, preserve your account preferences across page loads, and support security features such as CSRF protection. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language, currency display format, and notification settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: We use internal analytics tools to collect aggregate, anonymised data about how players navigate the 633bd platform. This helps us identify technical issues, improve page performance, and optimise the user experience. Analytics data is not used to identify individual players.
• Security and fraud prevention cookies: These cookies assist our fraud detection systems by helping to identify unusual device behaviour, detect automated bot activity, and flag potential multi-accounting attempts.

6.2 Managing Cookies

You may configure your browser to block or delete cookies at any time through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to your 633bd account and accessing real-money services. We recommend leaving strictly necessary and security cookies enabled at all times for the best and safest experience on the 633bd platform.

Section 7

Data Retention

633bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the entire duration of your active 633bd account relationship.
• Post-closure account data: Following account closure for any reason, we retain registration data, KYC documents, transaction history, and betting records for a minimum period of five years. This retention is required to meet our AML compliance obligations and to handle any post-closure disputes or regulatory enquiries.
• Support and communications data: Retained for a period of three years from the date of the relevant interaction.
• Technical and device data (logs): Retained for a maximum period of 13 months from the date of collection, after which log data is deleted or irreversibly anonymised.
• Marketing consent records: If you opt in to marketing communications, we retain a record of that consent for the duration of the consent plus three years following withdrawal.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 633bd's internal data destruction procedures. Anonymised aggregate data may be retained indefinitely for analytics and platform improvement purposes, as it no longer constitutes personal data.

Section 8

Data Security

633bd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• TLS/SSL encryption: All data transmitted between your browser and the 633bd platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Look for the padlock icon in your browser address bar as confirmation that your connection is secure.
• Data encryption at rest: Sensitive personal data fields — including identity document images and KYC records — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access controls: Access to personal data held by 633bd is restricted on a strict need-to-know basis. Only authorised staff members whose job functions require access to specific data categories are granted access, and all access is logged and auditable.
• Password security: Account passwords are stored as salted cryptographic hashes. 633bd never stores plaintext passwords. Our systems do not permit retrieval of your original password — only a password reset via your registered email address is possible.
• Two-factor authentication: 633bd strongly recommends enabling two-factor authentication (2FA) on your account. When 2FA is active, a one-time code sent to your registered mobile number is required in addition to your password at login.
• Penetration testing: 633bd's platform infrastructure undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Section 9

Your Rights Over Your Personal Data

As a data subject, you hold a number of rights with respect to your personal data held by 633bd. 633bd is committed to honouring these rights promptly and without undue obstruction. Your rights are as follows:

• Right of access: You have the right to request a copy of the personal data we hold about you. Upon receiving a valid access request, we will provide a summary of your personal data in a readable format within 30 calendar days.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Requests for rectification of account data can also be made directly through your account profile settings for non-sensitive fields.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that this right is subject to our legal retention obligations (see Section 7); data we are legally required to retain cannot be deleted ahead of the applicable retention period.
• Right to restriction of processing: You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis on which we are processing your data.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) where the processing is based on consent or contractual necessity and is carried out by automated means.
• Right to object: You have the right to object to processing of your personal data where that processing is based on 633bd's legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact 633bd at [email protected] with a clear description of your request and sufficient information to identify your account. We will acknowledge all rights requests within five business days and provide a substantive response within 30 calendar days. For complex or multiple simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Section 10

Children's Privacy

The 633bd platform is strictly intended for adults aged 21 years and above. 633bd does not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If 633bd discovers that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected from that individual to the extent permitted by our legal retention obligations, and return any deposits made to the original payment method where technically feasible. Winnings generated during an underage session will be forfeited in accordance with 633bd's Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account on the 633bd platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

Section 11

Third-Party Links & Services

The 633bd platform may contain links to or integrations with third-party services, including game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) whose game interfaces load within the 633bd platform environment. While 633bd takes care to engage reputable third-party partners, we do not control and are not responsible for the privacy practices of third-party websites or services that are independently accessible from the 633bd platform.

If you click through to any external website — for example by following a link in a promotional email or by accessing a payment provider's own website directly — the privacy policy of that third party governs how your personal data is handled in that external context. We recommend reviewing the privacy policies of all third-party services you interact with in connection with your use of 633bd.

Section 12

Changes to This Privacy Policy

633bd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform and services. When we make material changes to this policy — meaning changes that affect how we process your personal data in a substantive way — we will notify all registered players by email to the address on file, and we will update the "Last Updated" date at the top of this document.

Non-material changes, such as typographical corrections, clarifications of existing language, or reorganisation of sections without substantive change, may be made without a separate notification. You are encouraged to review this Privacy Policy periodically to remain informed about our data practices.

Continued use of the 633bd platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of the platform and close your account by contacting 633bd support.

Section 13

Contact Us

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way 633bd handles your personal data, please contact our support team using the details below. All contact information is provided as plain text — 633bd does not accept liability for third-party email clients, applications, or services used to initiate contact.

• Email: [email protected] — responses provided within 24 hours; available 08:00–24:00 BST (UTC+6) daily
• Live Chat: Available directly within the 633bd platform interface, 24 hours a day, 7 days a week, including Eid holidays and BPL match nights

For urgent matters relating to suspected unauthorised access to your account, potential data breaches, or immediate self-exclusion requests, please use the 633bd live chat for the fastest possible response. Our support agents are trained to handle data-related enquiries and can escalate privacy concerns to our data protection team where required.