How B337 handles your bookmaker logins and data

B337 is software, not a bookmaker or wagering service provider. It does not take bets or hold betting funds: your money stays in your own bookmaker and exchange accounts, and bets are placed in those accounts on the rules you set.

To place bets in your accounts, the bot has to log in to them. When you add a bookmaker or exchange account in your dashboard, you enter its login details: the username and password, and a one-time login code or API key where that account needs one. B337 holds those details, protected in the ways set out in the short version above, which come from our Privacy Policy. The policy adds one more: if you ask us to delete your data, bookmaker credentials are removed first.

Your B337 password is handled differently: it is stored only as a hash by our login provider. Bookmaker passwords are held for the bot, because it has to use them to log in to your bookmaker accounts.

Our Terms add two rules of their own. You give B337 permission to use those details only so the bot can place bets in your accounts on your instructions, and every account you connect must be yours, opened in your own name.

No online system is perfectly secure, and we do not claim otherwise. Give B337 a password you use nowhere else, turn on two-factor authentication in Settings, on the Security tab, and use a different password at each bookmaker so one leaked password cannot open the others. If you think someone has been in your account, tell us straight away.

The bot is software you download and run on your own computer: Windows 10 or 11 (64-bit), macOS 11 or later on Apple Silicon, or Ubuntu 24.04 or later and Debian 13 or later. Your dashboard is where you set it up and follow along; the bot on your computer is what logs in to your bookmaker accounts and places the bets.

• It places bets only while it is running. If your computer is off or asleep, or the bot is closed, your sessions do not bet.
• One session is one logged-in bookmaker account, and one session can run several strategies.
• The bot reads the balances, bets, results and promotions in your accounts and reports them back, so every placement, price and settlement is recorded in your dashboard.
• Download it from the Downloads page in your B337 dashboard, not from a file someone sends you. The Mac app is not yet notarised by Apple, so macOS asks you to allow it the first time you open it.

Running on your own computer does not mean everything stays on it. Your login details and betting records are also held by B337, as described above, so your dashboard can show them and the bot can act for you.

You can also change your password at a bookmaker whenever you like. The copy B337 holds then stops working for that account until you update it.

The Privacy Policy lists everything we collect and why. In short:

• Your B337 account: your email address, your password (stored only as a hash by our login provider), your nickname and profile, and your Discord ID and name if you link Discord.
• Bookmaker and exchange accounts: the login details you enter, and the balances, bets, results and promotions the bot reads from those accounts.
• Betting activity: your sessions, strategies, bets, stakes, odds, results, and profit and loss.
• Payments: your plan, purchase history and credits. Card details are collected and held by our payment providers, Stripe and Whop, not by us.
• Technical data: IP address, browser and device information, a device key for the desktop client, login and session launch times, pages used and error logs.
• Alerts: any Discord webhook URLs, or Telegram bot tokens and chat IDs, you add for notifications.
• What you post or upload. Uploaded images, such as an avatar, are served from a public web address, so anyone with the link can open them.

We use providers to run the service, including Supabase (database, login and file storage), Vercel (hosting) and Cloudflare (content delivery and desktop client downloads). Some of them store or process data outside Australia, mainly in the United States. Where we can, we choose Australian regions; where we cannot, we rely on the provider's contractual commitments to protect your information. We do not sell personal information.

Deleting it

• When you delete an account, session, post or image in your dashboard, it is removed from view immediately. We then delete or de-identify it from our active systems as part of routine data cleanup, once we no longer need it.
• To close your B337 account and have your data deleted, email support@b337.bet. We confirm within 30 days, and bookmaker credentials are removed first.
• Copies can remain in backups and logs for a period after deletion. While they do, they are access-controlled, not used for any purpose, and removed when those backups are overwritten.
• Betting results that feed community statistics may be kept in de-identified form, with nothing that identifies you.
• You can see and change most of your information in Settings and on your profile, and ask for a copy of what we hold, or a correction, at the same address. We respond within 30 days.

Our public pages, including this one, use the Meta Pixel, and we also use the Meta Conversions API. Both are there to measure and improve our advertising. Meta is the company behind Facebook and Instagram.

• The Pixel runs in your browser on our public pages (including sign-up and log-in) and at checkout, and can set cookies there.
• The Conversions API tells Meta about key actions, such as signing up, starting checkout, purchasing and joining our Discord, from our servers.
• Once you have accepted the privacy policy, our servers also tell Meta, at most once a day while you use your account, that the account is in use and whether it is on a free or paid plan (and which plan).
• When we send your email address or account ID to Meta, it is hashed first: turned into a one-way code that Meta uses to match the action to a Meta account, if there is one.
• We never send your bookmaker account details to Meta.

You can control how Meta uses this for the ads you see at facebook.com/adpreferences. Blocking or clearing cookies in your browser stops the Pixel, but not the Conversions API.

AI

Our support staff use an AI assistant, Anthropic's Claude, to help answer support tickets, so your support messages and the account details needed to answer them may be sent to Anthropic. Under Anthropic's commercial API terms, that content is not used to train its models. We never send bookmaker passwords, payment details or uploaded images to an AI provider.

1. 01

   Tell us straight away

   Email support@b337.bet with what you noticed and when you noticed it.

2. 02

   Stop your sessions

   Stop them from your dashboard, or close the bot on your computer, so nothing new is placed while you check.

3. 03

   Lock your B337 login

   Change your B337 password to one you use nowhere else, and turn on two-factor authentication in Settings.

4. 04

   Change bookmaker passwords

   Change the password at each bookmaker you connected, then update it in your dashboard before you run again.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

Other problems

• Found something in B337 that looks like a security weakness? Email the details to support@b337.bet rather than posting them publicly.
• A privacy complaint? Email us with the details. We acknowledge complaints within 7 days and aim to resolve them within 30. If you are not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
• A message or email asking for your login details? Treat it with suspicion, and check with us through a channel you already use before you reply.