basha8 Privacy Policy

1. Who We Are

This Privacy Policy is issued by basha8 ("basha8", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at basha8.bet. basha8 is the data controller responsible for the personal data you provide when using our platform. If you have any privacy-related questions, you may contact us at [email protected].

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by basha8 through the basha8.bet website, its mobile-optimised interfaces, and any related services or communications. It applies to all registered players, prospective players who browse without registering, and any individual who contacts basha8 support.

By creating an account or using the basha8 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you should not use the basha8 platform.

3. Personal Data We Collect

basha8 collects the following categories of personal data:

4. How We Collect Your Data

basha8 collects personal data through the following means:

• Direct submission: When you register an account, complete identity verification, make a deposit or withdrawal, set responsible gaming limits, or contact our support team.
• Automated collection: Through cookies, server logs, and analytics tools that record technical and behavioural data as you navigate the basha8 platform.
• Third-party payment providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners share the minimum transaction data necessary to confirm and reconcile your deposit or withdrawal in BDT.
• Identity verification services: Where we engage a third-party KYC provider to verify your age and identity, that provider may share a verification result and summary data with us.

5. How We Use Your Personal Data

basha8 uses your personal data for the following purposes, each of which constitutes a legitimate basis for processing:

• Account management: To create, maintain, and secure your basha8 account and to authenticate your identity when you log in.
• Service delivery: To enable you to place bets, play casino games, and access all features of the basha8 platform.
• Payment processing: To process deposits and withdrawals in Bangladesh Taka (৳ BDT) via your chosen payment method, and to maintain accurate financial records.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and that your account details are accurate and genuine.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits where set by the player.
• Legal compliance: To meet our obligations under applicable law, including anti-money laundering (AML) requirements and any lawful requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the design, performance, and content of the basha8 platform.
• Customer support: To respond to your queries, complaints, and requests submitted to [email protected].
• Fraud prevention: To detect and investigate fraudulent activity, duplicate accounts, and any misuse of the basha8 platform.

6. Cookies and Tracking Technologies

basha8 uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files placed on your device that allow us to recognise your session, remember your preferences, and gather analytical data about platform usage.

basha8 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. You cannot opt out of these cookies while using the platform.
• Functional cookies: Used to remember your preferences, such as your preferred deposit method or responsible gaming settings.
• Analytical cookies: Used to collect anonymised data about how players navigate the basha8 platform, helping us identify and fix usability issues. This data is aggregated and does not identify individual users.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the basha8 platform and may prevent you from accessing your account.

7. Data Sharing and Disclosure

basha8 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: We share transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Where a KYC check is required, we share the minimum necessary data with our verification partner to confirm your identity and age.
• Legal authorities: We may disclose personal data to competent regulatory or law enforcement authorities where required by applicable law, court order, or to protect the security and integrity of the basha8 platform.
• IT and infrastructure providers: We engage trusted technology providers who process data on our behalf under strict data processing agreements. These providers are not permitted to use your data for any purpose other than delivering services to basha8.

All third parties with whom basha8 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for their own independent purposes.

8. Data Retention

basha8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. As a general guide:

• Account and identity data is retained for the duration of the account relationship and for a period of five years following account closure, in accordance with anti-money laundering obligations.
• Financial transaction records are retained for a minimum of five years.
• Customer support correspondence is retained for two years from the date of the last interaction.
• Technical and analytical data (e.g., log files, session data) is retained for up to twelve months in identifiable form, after which it is anonymised or deleted.

Where you request deletion of your personal data, basha8 will action your request within a reasonable timeframe, subject to any overriding legal retention obligations. Data that basha8 is legally required to retain will not be deleted until the applicable retention period has expired.

9. Your Rights Over Your Data

As a basha8 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data basha8 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data, subject to basha8's legal retention obligations.
• Right to restrict processing: You may request that basha8 limits the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data where processing is based on legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. basha8 will respond to all data rights requests within a reasonable period and will not charge a fee for standard requests.

10. Data Security

basha8 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data in transit between your device and basha8 servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Access controls that restrict internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and monitoring of our platform infrastructure.
• Hashed and salted password storage — basha8 never stores passwords in plain text.

While basha8 employs industry-standard security measures, no online platform can guarantee absolute security. You are responsible for keeping your account login credentials confidential. If you suspect unauthorised access to your account, please contact [email protected] immediately.

11. Children and Minors

The basha8 platform is strictly for adults aged 21 years and above. basha8 does not knowingly collect personal data from individuals under the age of 21. If basha8 discovers that personal data has been collected from a minor, the relevant account will be closed immediately and any associated data will be deleted. If you believe a minor has registered an account with basha8, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

basha8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players via their registered email address with a reasonable notice period before the changes take effect. The date of the most recent revision is displayed at the top of this page. Continued use of the basha8 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way basha8 handles your personal data, please contact us in writing at: [email protected]. Our support team operates during Bangladesh Standard Time (BST, UTC+6) business hours and aims to respond to all privacy-related enquiries within 48 hours.