basah8 Privacy Policy — How We Handle Your Personal Data

1. Data We Collect

basah8 collects personal data from players across Bangladesh through several channels: directly from you when you register an account or contact support; automatically when you use our platform; and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are described below.

1.1 Registration Data

When you create a basah8 account, we collect the following information: your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. This information is required to establish your identity, verify your age, and comply with responsible gaming requirements. Providing inaccurate registration data is a breach of the basah8 Terms & Conditions and may result in account suspension.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, basah8 may request copies of identity documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request a proof of address document such as a recent utility bill or bank statement. KYC documents are used solely for identity verification, fraud prevention, and anti-money laundering compliance and are stored securely with restricted access.

1.3 Financial Transaction Data

When you make a deposit or withdrawal, basah8 records the transaction amount, the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction reference number, and the timestamp. We do not store full card numbers. Mobile wallet numbers associated with your basah8 account are stored in encrypted form and used only for processing transactions and verifying payment ownership.

1.4 Gaming Activity Data

basah8 automatically records your gaming activity on the platform, including game sessions, bet amounts, game titles played, win and loss records, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, bonus calculation, dispute resolution, and improving the player experience.

1.5 Technical and Device Data

When you access basah8, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), and pages visited on our platform. This data helps us optimise the basah8 platform for the devices and networks commonly used by players in Bangladesh and assists our security team in detecting unusual access patterns.

1.6 Communications Data

If you contact the basah8 support team via email or live chat, we retain records of those communications, including the content of your messages and any attachments you send. These records are kept for quality assurance, dispute resolution, and training purposes.

2. How We Use Your Data

basah8 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that you would not reasonably expect. The following table summarises the primary purposes for which basah8 uses your personal data and the legal basis for each use.

2.1 Marketing Communications

basah8 sends promotional emails and SMS notifications about bonuses, new games, seasonal offers (such as Eid or BPL promotions), and account-specific messages only to players who have opted in to receive such communications. You may withdraw your consent to receive marketing messages at any time by updating your notification preferences within your account settings or by emailing the basah8 support team. Opt-out requests are processed within 5 business days.

2.2 Automated Decision-Making

basah8 uses automated systems to detect fraudulent activity, identify problem gambling patterns, and flag potential breaches of the Terms & Conditions. These systems may result in automated actions such as account review, temporary restriction, or bonus suspension. If you believe an automated decision has been applied incorrectly to your account, you have the right to request a manual review by contacting the basah8 support team.

3. Data Sharing & Disclosure

basah8 does not sell or rent your personal data to any third party. We share your data only where it is necessary to deliver our services, comply with legal obligations, or protect the security of the platform. All third parties who receive data from basah8 are required to handle that data in accordance with the same privacy standards we apply internally.

3.1 Payment Processors

To process your deposits and withdrawals, basah8 shares the minimum necessary data — including your name, transaction amount, and payment reference — with our payment processing partners: bKash, Nagad, Rocket, Upay, and the relevant card networks (Visa and Mastercard). These providers are responsible for their own data handling practices in connection with your mobile banking or card transactions.

3.2 Game Software Providers

When you launch a game on the basah8 platform, your account identifier and session token are shared with the relevant game provider (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, or Spribe) to enable the game to load and record outcomes. Game providers do not receive your full name, address, or payment details.

3.3 Legal and Regulatory Disclosures

basah8 may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities if required by applicable law or valid legal process. In such cases, basah8 will disclose only the data specifically requested and will not make disclosures beyond what is legally required.

3.4 Business Transfers

In the event that basah8 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, basah8 will notify affected players via their registered email address before any transfer of data takes place, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4. Cookies & Tracking

basah8 uses cookies and similar tracking technologies on our website to ensure the platform functions correctly, remember your preferences, maintain your session, and analyse how players navigate and use the platform. This section explains what cookies we use and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files that are stored on your device (mobile phone, tablet, or computer) when you visit a website. They allow the website to recognise your device on subsequent visits, remember your settings, and provide a personalised experience. Cookies do not give basah8 access to your device files or any other data beyond what is described in this policy.

4.2 Types of Cookies We Use

4.3 Managing Cookies

Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu. You can also set your browser to block all cookies, though doing so may prevent some features of the basah8 platform from working correctly — including the ability to stay logged in, load game sessions, or apply your responsible gaming limits. basah8 recommends keeping strictly necessary cookies enabled at all times for the best and safest experience.

4.4 Do Not Track Signals

Some browsers send "Do Not Track" (DNT) signals to websites. basah8 respects DNT signals by limiting analytics tracking for browsers that have DNT enabled. Strictly necessary cookies required for account security and session management remain active regardless of DNT status, as they are essential for the safe operation of the platform.

5. Data Security

basah8 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational safeguards to protect player information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Safeguards

All data transmitted between your device and basah8 is encrypted using 256-bit TLS (Transport Layer Security). Player account passwords are stored as salted cryptographic hashes — never in plain text. Access to production databases containing player data is restricted to a small number of authorised personnel and is protected by multi-factor authentication and access logging. Regular penetration testing is conducted to identify and remediate potential vulnerabilities.

5.2 Organisational Safeguards

basah8 staff who handle personal data are required to complete data privacy training and are bound by strict confidentiality obligations. Access to player data is granted on a need-to-know basis. Employees who violate data privacy procedures are subject to disciplinary action. Third-party vendors who process data on behalf of basah8 are contractually required to implement equivalent security standards.

5.3 Data Breach Response

In the event of a confirmed data breach that is likely to result in risk to the rights or privacy of affected players, basah8 will notify affected players via their registered email address as soon as reasonably practicable after the breach is discovered and contained. Notifications will describe the nature of the breach, the types of data involved, the likely consequences, and the steps basah8 is taking to address the situation and prevent recurrence.

6. Data Retention

basah8 retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods we apply reflect our operational needs, legal obligations, and responsible gaming commitments.

6.1 Active Account Data

While your basah8 account remains active, we retain all account registration data, KYC documents, financial transaction records, and gaming activity logs. This data is necessary for managing your account, processing transactions, responding to disputes, and monitoring for responsible gaming indicators.

6.2 Data After Account Closure

Following the closure of a basah8 account — whether voluntary or enforced — we retain personal data for a minimum of five years from the date of account closure. This retention period reflects anti-money laundering obligations and the standard limitation period for financial disputes. After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised.

6.3 Self-Exclusion Records

Where a player has requested self-exclusion from the basah8 platform, records of that exclusion are retained for the duration of the exclusion period plus five years after its conclusion. This is to ensure that self-exclusion decisions are respected even if a player later attempts to re-register under a different name or contact detail.

6.4 Support and Communications Data

Records of support interactions — including live chat transcripts and email correspondence — are retained for three years from the date of the last interaction. These records are used for quality assurance, staff training, and resolving any subsequent disputes that reference prior communications.

7. Your Privacy Rights

As a player at basah8, you have specific rights in relation to your personal data. basah8 is committed to honouring these rights promptly and transparently. To exercise any of the rights described in this section, contact the basah8 support team at [email protected] with the subject line "Privacy Request" and a description of the right you wish to exercise. We will respond to all verified requests within 10 business days.

7.1 Right to Access

You have the right to request a copy of the personal data basah8 holds about you. Upon receipt of a verified request, basah8 will provide a summary of the data categories held, the purposes for which they are processed, and — upon specific request — a copy of the underlying data in a readable format.

7.2 Right to Correction

If you believe that personal data basah8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered address has changed or your name has been recorded incorrectly, contact the support team and we will update your records following identity verification.

7.3 Right to Deletion

You may request that basah8 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been processed unlawfully. Please note that basah8 may be unable to fulfil a deletion request in full where retention is required by law — for example, financial transaction records retained under anti-money laundering obligations.

7.4 Right to Restrict Processing

You have the right to request that basah8 restricts the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have disputed, or while we assess a legitimate interests objection. During a restriction period, basah8 will continue to store the data but will not process it for purposes beyond storage unless you provide explicit consent.

7.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes. If you exercise this right, basah8 will cease using your data for marketing immediately. This does not affect the use of your data for operational purposes such as account management and transaction processing.

7.6 Right to Data Portability

Where basah8 processes your personal data on the basis of your consent or in connection with a contract, and where processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format (such as CSV or JSON).

8. Policy Updates & Contact

basah8 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. The effective date at the top of this page indicates when the current version was last revised.

8.1 Notification of Changes

When basah8 makes material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties we share it with — we will notify registered players via email at least 14 days before the updated policy takes effect. For minor clarifications that do not affect the substance of the policy, we may update the page without separate notification. We encourage all players to review this page periodically to remain informed of how their data is being handled.

8.2 Contact the basah8 Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the basah8 privacy and support team using the details below. All privacy-related enquiries are handled by staff who are trained in data protection practices and are authorised to review and action privacy requests.

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Subject line for privacy enquiries: "Privacy Request"
• Response time: Within 10 business days of identity verification

8.3 Complaints

If you are not satisfied with basah8's response to a privacy concern or data request, you have the right to escalate your complaint through appropriate channels. basah8 takes all data privacy complaints seriously and will work in good faith to resolve any legitimate concerns raised by players. We recommend contacting the basah8 support team as a first step, as many concerns can be resolved quickly through direct communication.