basa88 Privacy Policy

Clause 1.1

Who We Are

This Privacy Policy is issued by basa88, the operator of the online gaming platform accessible at https://basa88.cc (referred to herein as "basa88", "we", "us", or "our"). This Policy applies to all individuals who access or use the basa88 platform, whether as registered players or as visitors browsing the site without an account.

Clause 1.2

Purpose of This Policy

This Privacy Policy describes:

• The categories of personal data basa88 collects from you.
• The purposes for which that data is collected and processed.
• The legal basis on which we rely for each processing activity.
• How long we retain your data.
• Your rights in relation to your personal data and how to exercise them.
• How we keep your data secure.

By registering an account on basa88, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Clause 1.3

Relationship with Terms & Conditions

This Privacy Policy forms part of the basa88 Terms & Conditions and should be read alongside them. In the event of any conflict between the Terms & Conditions and this Privacy Policy in relation to data protection matters, this Privacy Policy shall prevail.

Clause 2.1

Registration Data

When you create a basa88 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Mobile phone number registered to your MFS account (bKash, Nagad, Rocket, or Upay)
• Username chosen by you
• Password (stored in encrypted, hashed form — never in plain text)
• Preferred language and display settings

Clause 2.2

Identity Verification Data

Where basa88 is required to verify your identity — for example, before processing a withdrawal above a set threshold or in response to a compliance review — we may collect:

• A copy of your National Identity Card (NID), passport, or other government-issued photo identification.
• A selfie or live photograph for biometric matching purposes, if required by our compliance team.
• Proof of residential address (e.g., a utility bill or bank statement dated within the last three months).
• Source-of-funds documentation where required under our Anti-Money Laundering (AML) procedures.

Identity documents are handled with the highest level of care and are stored separately from standard account data with additional access controls in place.

Clause 2.3

Transaction and Payment Data

basa88 records all deposit and withdrawal transactions processed via bKash, Nagad, Rocket, and Upay. For each transaction we store:

• The MFS transaction reference number.
• The last four digits of the registered MFS mobile number.
• Transaction amount in Bangladeshi Taka (৳).
• Date and time of the transaction (Bangladesh Standard Time, UTC+6).
• Transaction type (deposit or withdrawal) and status.

We do not store your full MFS PIN, full MFS account credentials, or any banking login information.

Clause 2.4

Gaming and Activity Data

As part of normal platform operation, basa88 logs the following activity data linked to your account:

• Games played, bet amounts, and outcomes.
• Sports betting markets accessed and wagers placed.
• Bonus offers claimed and wagering requirement progress.
• Session start and end times.
• Responsible gaming settings you have applied (e.g., deposit limits, time-out status).

This data is used to maintain accurate account records, detect problematic gambling patterns, and operate our responsible gaming tools.

Clause 2.5

Technical and Device Data

When you access basa88, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version.
• Pages visited and navigation path through the site.
• Session duration and interaction events (e.g., button clicks, scroll depth).
• Error logs and crash reports for platform stability purposes.

This data is processed in aggregated and anonymised form wherever possible. Individual technical records are retained only as long as necessary for security and fraud-detection purposes.

Clause 3.1

Summary of Processing Purposes

The table below summarises the primary purposes for which basa88 processes your personal data and the legal basis for each activity:

Clause 3.2

Marketing Communications

basa88 will only send you promotional messages, bonus notifications, or marketing communications if you have explicitly opted in to receive them at the time of registration or through your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal, nor does it affect your ability to continue using the platform.

Clause 3.3

Automated Decision-Making

basa88 uses automated systems to detect patterns indicative of fraud, bonus abuse, or problem gambling. These systems may automatically flag or temporarily restrict your account pending a manual review by our compliance team. You have the right to request human review of any automated decision that materially affects your account. To request a review, contact [email protected] with the subject line "Automated Decision Review Request".

Clause 4.1

Service Providers

basa88 engages a limited number of trusted third-party service providers who process data on our behalf under strict data processing agreements. These providers include:

• Game studios (e.g., Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, NetEnt) — who receive anonymised session tokens to deliver live casino and slots content. Full personal data is not shared with game studios.
• MFS gateways (bKash, Nagad, Rocket, Upay) — who receive the minimum transaction data necessary to process payment instructions.
• Identity verification providers — who may process document scans on our behalf where enhanced KYC is required.
• Cloud hosting and infrastructure providers — who store platform data in secure, access-controlled server environments.

All third-party service providers are contractually prohibited from using your data for any purpose other than delivering the specific service for which they have been engaged by basa88.

Clause 4.2

Legal and Regulatory Disclosure

basa88 may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we receive a valid legal request or are under a statutory obligation to do so. In such circumstances, basa88 will disclose the minimum data necessary to comply with the legal requirement and, where legally permissible, will notify the affected player of the disclosure.

Clause 4.3

No Sale of Personal Data

basa88 does not sell, rent, lease, or otherwise transfer your personal data to any third party for that party's own commercial use, marketing activities, or data brokerage purposes. This prohibition applies regardless of whether the data is in identifiable or pseudonymised form.

Clause 5.1

Retention Periods

basa88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. As a general guide:

• Account registration data is retained for the lifetime of your account and for a minimum of 5 years following account closure.
• Transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• Identity verification documents are retained for the period required by applicable AML legislation and for no longer than 7 years from account closure.
• Gaming activity logs are retained for 2 years from the date of the session or wager.
• Technical and device data is retained for up to 12 months, after which it is deleted or anonymised.

Clause 5.2

Post-Closure Retention

When your basa88 account is closed — whether by voluntary request or due to a breach of the Terms & Conditions — basa88 will retain the minimum personal data required by law. Marketing preferences and session-level analytics will be deleted promptly following account closure. Transaction and identity records will be retained for the statutory minimum period as noted above.

Clause 6.1

Rights You Hold

As a data subject, you hold the following rights in relation to the personal data basa88 processes about you:

• Right of Access: You may request a copy of all personal data we hold about you (commonly known as a Subject Access Request or SAR).
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your basa88 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud detection. We will assess such objections and respond within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Clause 6.2

How to Exercise Your Rights

To exercise any of the rights listed above, contact the basa88 support team at [email protected] with the subject line "Privacy Rights Request" and a clear description of your request. We may ask you to verify your identity before processing the request. basa88 will respond to all valid rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

Clause 7.1

Types of Cookies Used

basa88 uses the following categories of cookies on the platform:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during an active session and security cookies that help detect fraudulent activity. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your chosen display language and responsible gaming settings, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how visitors navigate the basa88 platform — for example, which pages are visited most and where users leave the site. This data is used solely to improve the platform experience. No personally identifiable information is included in analytics reports.

basa88 does not use advertising or retargeting cookies. No cookie data is shared with third-party advertising networks.

Clause 7.2

Managing Cookies

You may manage cookie preferences through your browser settings. Most modern mobile and desktop browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent the basa88 platform from functioning correctly — you will not be able to log in or maintain an active session without these cookies. Blocking functional or analytics cookies will not prevent you from using the platform but may affect your experience.

Clause 8.1

Technical Safeguards

basa88 implements a range of technical security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
• Bcrypt cryptographic hashing for all stored passwords — passwords are never stored in recoverable plain text.
• Role-based access controls limiting staff access to personal data to only those with a legitimate operational need.
• Regular security audits and penetration testing conducted by independent security professionals.
• Automated monitoring for unusual access patterns, brute-force attempts, and suspicious account activity.

Clause 8.2

Data Breach Response

In the event of a data breach that poses a risk to the rights and freedoms of affected players, basa88 will notify affected individuals without undue delay and take immediate remedial action to contain the breach. basa88 maintains an incident response plan and conducts regular drills to ensure readiness. Despite our best efforts, no digital platform can guarantee absolute security, and basa88 does not accept liability for breaches resulting from events entirely outside our reasonable control, including zero-day exploits of third-party infrastructure components.

Clause 9.1

Changes to This Policy

basa88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or platform operations. Material changes will be communicated to registered players via a prominent notice on the basa88 platform homepage and, where an email address is held on file, by direct email notification. The version date displayed at the top of this page will be updated to reflect each revision. Continued use of the platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

Clause 9.2

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way basa88 handles your personal data, please contact our support team. We are committed to resolving all privacy-related enquiries promptly and transparently.

Email: [email protected]
Available: 24 hours a day, 7 days a week
Response time: Within 1 hour (Bangladesh Standard Time, UTC+6)