basa8 Privacy Policy — Your Data, Your Rights

1 Introduction

basa8 ("we", "us", "the platform") is committed to protecting the privacy of every member and visitor. This Privacy Policy describes how basa8 collects, uses, stores, and protects your personal data when you use our website and mobile application. It also explains the rights you have in relation to your personal data and how to exercise them.

basa8 operates as an online gaming platform serving members in Bangladesh. We process personal data only where we have a lawful basis to do so, and we are committed to handling your information with transparency, fairness, and security at every step.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which form part of your agreement with basa8.

2 Data We Collect

basa8 collects personal data in three main ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party service providers. The table below summarises the categories of data we collect and why.

3 How We Use Your Data

basa8 uses your personal data only for the purposes described in this policy. We do not use your data in ways that are incompatible with the reason it was originally collected. The main ways we use your personal data are:

• To create and manage your basa8 account, including verifying your identity and age before you can deposit or withdraw funds.
• To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate financial records of all transactions.
• To detect and prevent fraud, money laundering, and other financial crimes, and to comply with our legal obligations in this regard.
• To provide customer support and resolve any disputes or complaints you raise with our team.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and reaching out proactively where appropriate.
• To improve the basa8 platform, including fixing bugs, optimising performance, and developing new features based on how members use the platform.
• To send you important account notifications, security alerts, and updates to our policies. These communications are not optional as they are necessary for the operation of your account.
• To send you promotional communications about basa8 bonuses and offers, where you have opted in to receive such communications. You can opt out at any time by contacting support.

4 Legal Basis for Processing

basa8 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing your data is necessary to fulfil our contractual obligations to you as a basa8 member — for example, processing your deposits and withdrawals or managing your account.
• Legal obligation: We are required by law to collect and retain certain data, including identity verification records and financial transaction records, for anti-money laundering and fraud prevention purposes.
• Legitimate interests: We process certain data — such as technical and usage data — on the basis of our legitimate interest in operating a secure, fair, and well-functioning platform. We always balance this interest against your privacy rights.
• Consent: Where we rely on your consent — for example, to send you promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Third Parties

basa8 does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle your data securely and in accordance with this policy:

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated financial service providers in Bangladesh.
• Identity verification providers: Where required for KYC compliance, we may share identity documents with regulated third-party verification services. These providers are bound by strict confidentiality obligations.
• Technology providers: We use third-party services for platform hosting, analytics, and security. These providers act as data processors on our behalf and are not permitted to use your data for their own purposes.
• Legal and regulatory authorities: We may disclose your data to law enforcement, regulatory bodies, or courts where required by law or where necessary to protect the rights, property, or safety of basa8, its members, or the public.

6 Cookies and Tracking Technologies

basa8 uses cookies and similar technologies to make the platform work properly and to improve your experience. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

• Essential cookies: These are required for the platform to function. They keep you logged in, maintain your session, and enable core features like deposits and game play. You cannot opt out of essential cookies without stopping use of the platform.
• Performance cookies: These help us understand how members use basa8 — which pages are visited most, where errors occur, and how fast pages load. This data is aggregated and anonymous.
• Functional cookies: These remember your preferences, such as your preferred language or display settings, so you don't have to set them every time you visit.
• Security cookies: These help us detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious transactions.

basa8 does not use advertising cookies or share cookie data with advertising networks. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect your ability to use the platform.

7 Data Security

basa8 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, or misuse:

• All data transmitted between your device and basa8 is encrypted using 256-bit SSL/TLS technology.
• Sensitive data, including payment information and identity documents, is stored in encrypted form on secure servers with restricted access.
• Access to personal data within basa8 is limited to staff who need it to perform their job functions, and all staff are trained in data protection best practices.
• basa8 conducts regular security audits and vulnerability assessments to identify and address potential weaknesses in our systems.
• Two-factor authentication (2FA) is available to all members and is strongly recommended to protect your account from unauthorised access.

While basa8 takes every reasonable precaution to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to affect your rights or freedoms, basa8 will notify affected members promptly and take immediate steps to contain and remediate the breach.

8 Data Retention

basa8 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

9 Your Privacy Rights

As a basa8 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days.

10 Children's Privacy

basa8 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use any basa8 service.

If basa8 becomes aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on basa8, please contact us at [email protected] so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. Visit our Responsible Gaming page for more information on protecting young people from gambling-related harm.

11 Updates to This Privacy Policy

basa8 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post a notice on the basa8 platform informing members of the update.
• Update the "Last Updated" date at the top of this page.
• Where the change is significant, send a notification to your registered mobile number or email address.

We encourage you to review this Privacy Policy periodically. Your continued use of basa8 after any update constitutes your acceptance of the revised policy. If you do not agree with any change, please stop using basa8 and contact support to close your account.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way basa8 handles your personal data, please get in touch with our team. We are available 24 hours a day, 7 days a week.

• Email: [email protected] — we aim to respond to all privacy-related requests within 30 days.
• Live Chat: Available directly within the basa8 platform for faster responses to general queries.
• FAQ: Visit our FAQ page for answers to common questions about your account and data.