639club Privacy Policy – Your Data Is Safe With Us

This Privacy Policy applies to all 639club services, including the main website, mobile app, and any affiliated platforms. "We" and "our" refer to 639club, while "you" refers to any visitor or registered member.

We believe privacy is a fundamental right. That is why 639club collects only the data that is necessary and keeps it under the highest level of protection. Your information is never sold or used for unauthorised purposes.

This policy is aligned with international data protection standards — in particular the principles of GDPR. 639club also manages data in compliance with Bangladesh's Digital Security Act.

639club collects several types of data, organized into three categories below:

We never store your password in plain text. All passwords are always kept in hashed form.

639club collects information in the following ways:

• Provided Directly: Information you provide directly through registration forms, KYC verification, support chat, or email.
• Automatically Collected: Through cookies and tracking technologies while using our website or app.
• Payment Gateway: Limited financial details processed during transactions via bKash, Nagad, or Rocket.
• Third-Party Verification: Identity verification is carried out against government databases as part of the KYC process.
• Social Login: If you log in via social media, we receive only the information authorized by that platform.

Collected data is used exclusively for the following purposes:

• Service Delivery: Account creation, betting processing, and payment settlement.
• Identity Verification: Meeting AML and KYC legal obligations.
• Security Assurance: Detecting and preventing fraud.
• Customer Support: Troubleshooting and account recovery.
• Personalized experience: Personalized promotions and game recommendations based on your preferences.
• Responsible Gaming: Monitoring betting behavior to identify potential problem signs.
• Platform Improvement: Analyzing usage data to improve our services.
• Legal Compliance: Compliance with legal demands from courts or regulatory bodies.

639club asks for your consent before sending marketing communications. You can opt out at any time.

639club does not sell, rent, or share your information with third parties for commercial purposes. However, in certain circumstances, sharing limited data may be necessary:

• Payment Processors: To process transactions via bKash, Nagad, and Rocket.
• KYC Service Providers: For identity verification and AML screening.
• Cloud Services: International-standard providers for secure data storage.
• Cybersecurity: For fraud detection and prevention services.
• Legal Authorities: In response to a court order or a valid request from a government authority.

639club uses cookies and similar technologies on its website and app to make your experience smoother and more personalised.

You can disable cookies through your browser settings, though some features may not function as a result. Cookie management options within the app are available in the Settings menu.

639club has implemented multiple layers of technical and organizational safeguards to protect your data:

• 256-Bit SSL/TLS Encryption: All data transmissions are encrypted.
• AES-256 Storage Encryption: Sensitive data stored in the database is encrypted.
• Two-Factor Authentication (2FA): An extra layer of protection for your account.
• AI-Based Fraud Detection: Real-time detection of suspicious activity.
• Regular Security Audits: Testing conducted by external security experts.
• Staff Training: Regular staff training on data protection.
• Principle of Least Privilege: Only authorized personnel can access specific data.

639club does not retain data longer than necessary. Retention periods by data type are outlined below:

• Account Information: For the duration of the active account + 5 years after closure (legal obligation).
• Transaction History: 7 years (as required by AML regulations).
• Login & Security Logs: 2 Years.
• Customer Support Records: 3 Years.
• Marketing Preferences: Deleted immediately upon opt-out.
• Device & IP Logs: 1 year.

Once the legal retention period expires, your data is securely deleted or anonymised. You may also request early deletion at any time (see Section 9).

As a 639club member, you have the following rights over your personal data. Submit any request to 639club Support — requests are typically resolved within 30 days:

• Right to Access: You can request to see what information we hold about you.
• Right of Access: You may request a copy of your own data.
• Right to Rectification: You may request corrections to any inaccurate information.
• Right to Erasure: You may request deletion of your data under certain circumstances.
• Right to Restrict Processing: You can restrict certain uses of your data.
• Right to Portability: You can receive your data in a portable format for transfer to another platform.
• Right to Object: You may object to the use of your data for marketing or profiling purposes.

639club strictly prohibits registration by anyone under the age of 18. We do not knowingly collect or store any personal information from minors.

Age is verified at registration and confirmed through identity documents during the KYC process. Should any minor's data be collected inadvertently, it is deleted immediately upon discovery and the associated account is closed.

This Privacy Policy may be updated to reflect changes in law, technology, or our services. For significant changes:

• Registered members will be notified in advance via email and in-app notifications.
• At least 14 days' notice will be provided before any changes take effect.
• Always check the "Last Updated" date at the top of the page.
• If you do not agree to the updated policy, you may request closure of your account.

If you have questions about our Privacy Policy or wish to exercise your data rights, please get in touch with us:

• Email: support@639club-baji.com
• Live Chat: Available 24/7 at the Help Center
• Language: Bengali & English
• Response Time: 24–48 hours by email

If you are not satisfied with how your complaint has been handled, you may escalate it to the relevant data protection authority.