basha8 Privacy Policy

1.Introduction

basha8 ("basha8", "we", "us", "our") operates the online betting and casino platform accessible at basha8.vip. We are committed to protecting the privacy and security of every individual who interacts with our platform. This Privacy Policy ("Policy") explains how basha8 collects, uses, stores, shares, and safeguards personal data in connection with our Services.

This Policy applies to all users of the basha8 website, mobile interface, and related services, including registered players, visitors who browse without an account, and any individual who contacts our support team. By accessing or using basha8, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle your data, please discontinue use of the platform.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Where a conflict exists between this Policy and any other document, this Policy governs with respect to data-protection matters.

2.Data We Collect

basha8 collects personal data that is necessary to provide our Services, comply with legal obligations, prevent fraud, and maintain responsible gaming standards. The categories of personal data we collect are outlined in the table below.

We do not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless specifically required for responsible gaming interventions and with your explicit consent where required.

3.How We Collect Your Data

basha8 collects personal data through the following methods:

3.1 Directly from You

• When you register an account on basha8, including your name, date of birth, email address, and mobile number
• When you complete identity verification (KYC) by submitting documents such as your NID, passport, or proof of address
• When you make a deposit or withdrawal and provide payment method details
• When you contact our support team via email at [email protected] or via live chat
• When you submit feedback, complete surveys, or participate in promotional activities
• When you set responsible gaming preferences such as deposit limits or self-exclusion requests

3.2 Automatically

• Through cookies, web beacons, and similar tracking technologies when you browse the basha8 platform — see Section 7 for full details
• Through server logs that automatically record your IP address, browser type, device identifiers, pages visited, and session timestamps each time you access basha8
• Through our fraud-detection and security systems that monitor login patterns, transaction behaviour, and device fingerprints
• Through our responsible gaming monitoring systems that track betting frequency, session duration, and wagering patterns

3.3 From Third Parties

• From identity verification and KYC service providers who assist in validating the documents you submit
• From payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) to confirm transaction completion and account ownership
• From fraud-prevention and anti-money-laundering (AML) screening services that cross-reference your information against watchlists and sanctions databases
• From analytics providers who help us understand aggregate platform usage patterns — this data is always anonymised or pseudonymised before we receive it

4.How We Use Your Data

basha8 uses your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected.

• Account Management: To create, maintain, and administer your basha8 account, including processing login requests and enforcing account security.
• Service Delivery: To provide access to sports betting markets, casino games, live dealer tables, and all other basha8 platform features.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate transaction records.
• Identity Verification: To verify your identity and age as part of our KYC process, as required for responsible operation of a gambling platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats.
• Responsible Gaming: To monitor betting behaviour, enforce deposit limits and self-exclusion requests, and proactively identify players who may be experiencing gambling-related harm.
• Legal Compliance: To comply with applicable anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, and any other legal obligations applicable to basha8's operations.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the overall player experience on basha8.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — only where you have provided consent or where we have a legitimate interest, and always with a clear opt-out mechanism.

5.Legal Basis for Processing

basha8 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your basha8 account, process transactions, and deliver the Services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC/AML obligations and age verification duties.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable platform. This includes fraud detection, security monitoring, responsible gaming oversight, and platform analytics. We only rely on this basis where our interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, for certain marketing communications or for processing sensitive data in the context of responsible gaming interventions — we will always request your consent explicitly and separately. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.Data Sharing & Third Parties

basha8 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf to support the operation of basha8. These include:

• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) for transaction processing
• Identity verification and KYC providers for document validation and age-verification checks
• Fraud-detection and AML screening providers for financial crime prevention
• Cloud hosting and infrastructure providers for secure data storage and platform operation
• Customer support software providers for managing support ticket and live chat communications
• Analytics providers for aggregated, anonymised platform usage analysis

All third-party service providers are contractually required to process your data only on basha8's documented instructions, to maintain appropriate technical and organisational security measures, and to refrain from using your data for their own purposes.

6.2 Legal Disclosures

basha8 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of basha8, its players, or the public, or where we have a good-faith belief that disclosure is required to investigate or prevent fraud, money laundering, or other illegal activity.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of basha8's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users via email or an in-platform notice before your data is transferred and becomes subject to a different privacy policy.

7.Cookies & Tracking Technologies

basha8 uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) on the basha8 platform. These technologies help us operate the site effectively, keep you logged in, remember your preferences, and analyse how the platform is used.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of basha8. Without these cookies, core features such as account login, session management, and the betting interface cannot function. These cookies cannot be disabled.
• Functional Cookies: Enable the platform to remember your preferences (such as preferred language and display settings) to provide a more personalised experience.
• Performance & Analytics Cookies: Collect anonymised information about how visitors use basha8, including which pages are most visited and any error messages encountered. This data helps us improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and other security threats by analysing session behaviour and device characteristics.

7.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies — particularly strictly necessary cookies — may affect the functionality of the basha8 platform and prevent you from accessing some features, including your account.

For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation. Commonly used browsers include Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.

8.Data Retention

basha8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on basha8, plus a period of five (5) years following account closure to satisfy AML record-keeping obligations.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and betting history, are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity documents submitted for verification are retained for five (5) years from the date of account closure or the last transaction, whichever is later.
• Support Communications: Customer support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Technical Logs: Server and security logs are retained for a period of twelve (12) months and then automatically purged unless required for an active investigation.
• Marketing Data: If you have opted out of marketing, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9.Data Security

basha8 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and basha8's servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including passwords (stored as salted hashes), financial details, and identity documents — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data within basha8's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data-protection training.
• Intrusion Detection & Monitoring: Our platform is continuously monitored for unauthorised access attempts, unusual activity patterns, and other security anomalies. Alerts are investigated by our security team in real time.
• Regular Security Audits: basha8 conducts periodic internal and third-party security reviews to identify and remediate vulnerabilities in our systems and processes.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, basha8 will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach.

While we implement robust security measures, no online platform can guarantee absolute security. You play an important role in protecting your own data by using a strong, unique password, keeping your login credentials confidential, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10.Your Rights

As a user of basha8, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your account username and a description of your request. We will respond within 30 days of receipt of a valid request.

• Right of Access: You have the right to request a copy of the personal data basha8 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may also update certain account details directly through your basha8 account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations — for example, we are legally required to retain transaction records and KYC documents for a minimum period regardless of a deletion request.
• Right to Restriction of Processing: You may request that basha8 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, basha8 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.Children's Privacy

basha8 is strictly an 18+ platform. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18 years of age, you must not register an account or use any basha8 service.

If basha8 discovers or is notified that personal data has been collected from a person under the age of 18, we will immediately close the associated account, void any transactions, and permanently delete the data from our systems to the extent technically possible. Parents or guardians who believe their child has registered on basha8 should contact us immediately at [email protected] so that we can take prompt remedial action.

basha8 encourages parents and guardians to make use of parental control software and filtering tools to prevent minors from accessing online gambling platforms. For further information on tools available in Bangladesh, please visit our Responsible Gaming page.

12.International Data Transfers

basha8 primarily processes and stores personal data within infrastructure serving the Bangladesh and South Asia region. However, some of our third-party service providers — particularly cloud hosting, fraud-detection, and analytics providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, basha8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data-protection clauses with the receiving party, use of providers operating under recognised data-protection frameworks, or other legally recognised transfer mechanisms.

By using basha8, you acknowledge and consent to the transfer of your personal data to countries or territories outside Bangladesh where our service providers operate, subject to the safeguards described above.

13.Changes to This Policy

basha8 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this Policy and notify registered players via email or an in-platform notice prior to the changes taking effect.

We encourage you to review this Policy periodically to stay informed about how basha8 protects your personal data. Your continued use of the basha8 platform following notification of any update constitutes your acceptance of the revised Privacy Policy.

14.Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way basha8 handles your personal data, please contact our support team using the details below. We take all privacy concerns seriously and aim to resolve enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: Privacy Enquiry or Data Rights Request
• Response Time: Within 2 business days for general enquiries; within 30 days for formal data rights requests
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6)

If you are not satisfied with basha8's response to your privacy concern, you have the right to escalate your complaint to the relevant data-protection authority or regulatory body with jurisdiction over basha8's operations. basha8 will cooperate fully with any such regulatory investigation.