basb8 Privacy Policy — How We Handle Your Data
Your privacy is important to basb8. This policy explains exactly what personal information we collect, why we need it, how we protect it, and what rights you have over it.
Introduction
This Privacy Policy ("Policy") describes how basb8 ("basb8", "we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "your") who visit, register with, or use the services available at basb8.app. This Policy applies to all players, registered users, and visitors of the basb8 platform, including anyone accessing the site from anywhere in Bangladesh — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. By creating an account or using the basb8 platform in any way, you consent to the collection and use of your personal information as described in this Policy.
basb8 is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We collect only the data we need, we use it only for the purposes described in this Policy, we do not sell it to third parties, and we apply appropriate technical and organisational security measures to protect it from unauthorised access, loss, or misuse.
Our Privacy Commitments
Six principles guide how basb8 handles every player's personal data. These are not aspirational statements — they reflect how the platform is actually built and operated.
All data transmitted between your device and basb8.app is encrypted via SSL. This includes your login credentials, personal details, and payment information. No sensitive data travels in plain text over the network.
basb8 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data stays within the basb8 ecosystem except where required by law or expressly permitted by this Policy.
You have the right to request access to the personal data basb8 holds about you, and to request correction of any inaccurate data. Submit access or correction requests through the basb8 support team via the platform.
Players who wish to delete their basb8 account and associated personal data may request deletion through the support team. basb8 will process deletion requests subject to our legal retention obligations — certain transaction and KYC records must be retained for regulatory compliance periods.
basb8 collects only the personal information that is necessary to operate the platform, comply with legal obligations, and deliver the services you use. We do not collect data speculatively or for purposes beyond what is described in this Policy.
Where basb8 transfers personal data to service providers located outside Bangladesh, we ensure appropriate data transfer safeguards are in place, including contractual obligations on those providers to protect your data to a standard equivalent to this Policy.
1. Information We Collect
When you register a basb8 account, we collect: your full legal name; your Bangladesh mobile number (used as your account identifier and for OTP verification); a password (stored in hashed form — basb8 never stores passwords in plain text); your date of birth; and any optional profile information you choose to provide such as your preferred language. This information is necessary to create and operate your account and to verify that you meet the 21+ age requirement.
As part of our mandatory KYC process, we collect copies of identity documents — specifically a Bangladesh National ID (NID) front and back photograph or a Passport biographical page photograph, together with a selfie photograph for liveness verification. We also collect proof of payment method ownership where required (for example a screenshot of your bKash or Nagad account registration screen showing your mobile number). KYC documents are stored securely and accessed only by authorised basb8 compliance team members.
When you use basb8 we automatically collect certain technical information including: your device type and operating system version; your browser type and version; your IP address (used for geographic verification, fraud detection, and responsible gaming purposes); session timestamps and duration; pages visited and features used; and game and betting activity logs (which game was played, stakes placed, and outcomes). This technical data is used to improve platform performance, detect unusual activity, and fulfil our regulatory obligations.
2. How We Use Your Information
We use your registration data to create and maintain your basb8 account, process your deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and card payment methods, provide access to cricket betting markets, live casino games, slots, and crash games, and deliver customer support when you contact us. This use of your data is necessary to perform the contract between you and basb8.
We use identity documents and technical data to verify that you are who you claim to be, that you meet the 21+ age requirement, that your account is not a duplicate, and that your payment methods are registered in your own name. We also use your IP address, device fingerprint, and betting pattern data to detect and prevent fraudulent activity, money laundering, bonus abuse, and account sharing. This processing is necessary for legal compliance and to protect the integrity of the basb8 platform.
basb8 uses your game activity data, session duration records, and deposit and withdrawal history to monitor for signs of problem gambling behaviour. This includes tracking whether you have set and are adhering to deposit limits, session time limits, or self-exclusion periods. Where basb8's responsible gaming systems identify patterns of concern, we may contact you to offer support resources or to enforce cooling-off measures in accordance with our responsible gaming obligations.
We use your mobile number to send account-related communications including OTP verification codes, deposit confirmation messages, withdrawal status updates, and important account notices. Where you have opted in to promotional communications, we may also send you information about basb8 bonuses, promotions, and new game launches. You may opt out of promotional messages at any time by contacting basb8 support. Opting out of promotional messages does not affect the delivery of transactional account communications.
3. KYC and Identity Verification Data
KYC identity verification is a legal and regulatory requirement for online gambling platforms. basb8 is required to verify the identity and age of all players before processing withdrawals, and in some cases before enabling full platform access. The identity documents you submit as part of KYC are stored securely using encryption at rest. Access to KYC documents is restricted to authorised basb8 compliance team members on a need-to-know basis. KYC documents are not used for any purpose other than identity verification and regulatory compliance. basb8 does not display your NID number, passport number, or identity document images anywhere within the player-facing account interface.
If basb8 is unable to verify your identity to the required standard, we reserve the right to limit your account functionality, suspend withdrawals, or close your account. In such cases we will contact you through the mobile number on your account to explain what additional documentation is required and allow you a reasonable period to provide it before any account action is taken.
4. Sharing Your Information
basb8 works with a limited set of trusted third-party service providers who process personal data on our behalf to help us operate the platform. These include: payment processing partners (bKash, Nagad, Rocket, Upay, and card payment processors) who process transaction data; KYC verification technology providers who assist with automated identity document checks; cloud infrastructure providers who host platform data; and customer support software providers. All service providers are contractually required to process your data only on basb8's instructions and to maintain security standards at least equivalent to those described in this Policy.
basb8 may disclose your personal information to law enforcement authorities, regulatory bodies, financial intelligence units, or courts where we are legally required to do so — for example in response to a valid court order, to comply with anti-money laundering reporting obligations, or to assist in the investigation of a fraud or criminal offence. basb8 will disclose only the minimum information necessary to satisfy the legal requirement and will, where permitted by law, notify you of such disclosure.
In the event that basb8 or substantially all of its assets are acquired by or merged with another entity, player personal data may be transferred as part of that transaction. In such an event basb8 will take reasonable steps to ensure that the acquiring entity agrees to handle your personal data in a manner consistent with this Policy, and will notify players of the change through an in-platform notice prior to any transfer taking effect.
5. Payment Data and Financial Information
When you make a deposit or withdrawal on basb8, your payment transaction data is processed by our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment processors. basb8 does not store your full bKash or Nagad PIN, your card number, or your card CVV code. Payment credentials are handled directly by the respective payment provider using their own security infrastructure. basb8 retains a record of transaction amounts, timestamps, payment method types (e.g. bKash, Nagad), and transaction reference numbers for the purposes of account management, dispute resolution, and regulatory compliance.
All transaction records held by basb8 are retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping obligations. These records are used only for the purposes of account management, withdrawal dispute resolution, fraud investigation, and regulatory reporting. Transaction history is accessible to you through the basb8 account statement feature at any time.
6. Cookies and Tracking Technologies
basb8 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform. Cookies used by basb8 fall into three categories: essential cookies (required for the platform to function — including session authentication, account login state, and security tokens); functional cookies (which remember your preferences such as language setting); and analytics cookies (which help basb8 understand aggregate user behaviour patterns to improve the platform — these do not identify you individually). basb8 does not use third-party advertising cookies or allow third-party ad networks to place tracking cookies on the basb8 platform.
You can control and manage cookies through your browser settings. Disabling essential cookies will prevent you from logging into and using basb8. Disabling functional or analytics cookies will not affect your ability to use the platform but may result in a less personalised experience. Note that clearing cookies will log you out of your current basb8 session and you will need to log in again. basb8 does not currently support a separate cookie preference centre — cookie management is handled through your browser's built-in controls.
7. Data Retention
basb8 retains personal data for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Specifically: account registration data is retained for the lifetime of your account plus a minimum of five years after account closure; KYC identity documents are retained for a minimum of five years from the date of verification; transaction records are retained for a minimum of five years from the date of the transaction; and technical/usage logs are retained for up to 12 months for fraud detection and platform performance purposes, after which they are anonymised or deleted.
When data is no longer required to be retained, basb8 will securely delete or anonymise it. Secure deletion means overwriting or cryptographically erasing stored data so that it cannot be recovered. Anonymisation means irreversibly stripping all personally identifying fields from a data record so that the remaining data cannot be linked back to any individual. basb8 conducts periodic data retention reviews to ensure that data is not held longer than necessary.
8. Your Rights Over Your Personal Data
You have the right to request a copy of the personal data basb8 holds about you. To make an access request, contact the basb8 support team through the platform, providing your registered mobile number and a description of the data you wish to access. basb8 will respond to access requests within 30 days. In exceptional cases where the request is complex or voluminous, we may extend this period by a further 30 days and will notify you of the extension.
If you believe that any personal data basb8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Contact the basb8 support team with details of the data you believe is incorrect and, where possible, the correct information you would like it updated to. basb8 will assess the correction request and update your data where the correction is valid and supported by evidence.
You may request deletion of your personal data and basb8 account by contacting the support team. basb8 will process deletion requests subject to our legal retention obligations. Data that we are legally required to retain (such as KYC documents and transaction records within the applicable retention period) cannot be deleted ahead of their retention deadline, but will be isolated from active systems and used only as required by law. Once retention obligations expire, all such data will be securely deleted.
9. Security Measures
basb8 applies multiple layers of technical and organisational security to protect your personal data. Technical measures include: SSL/TLS encryption for all data in transit between your device and basb8 servers; encryption at rest for sensitive data including KYC documents and financial records; password hashing using industry-standard algorithms (plain-text passwords are never stored); OTP-based two-step verification for account login; automated fraud and unusual-activity detection systems that monitor transactions and gameplay in real time; and regular security assessments of platform infrastructure.
Despite these measures, no platform can guarantee absolute security. If basb8 becomes aware of a data security incident that affects your personal data and poses a risk to your rights, we will notify you through your registered mobile number as soon as reasonably practicable. The notification will describe the nature of the incident, the data affected, the steps basb8 has taken in response, and any steps you should take to protect yourself. basb8 will also notify relevant regulatory authorities as required by applicable law.
10. Minor Protection and Age Verification
basb8 is an adult-only platform. The minimum age to register and use basb8 is 21 years. basb8 does not knowingly collect personal data from individuals under the age of 21. If basb8 discovers or is informed that it holds personal data relating to a person under 21, that data will be deleted and the associated account closed. If you are a parent or guardian and believe that a person under 21 has registered a basb8 account using your or their personal information, please contact the basb8 support team immediately and we will investigate and take appropriate action. basb8 uses date-of-birth collection at registration and KYC age verification to enforce the 21+ requirement and protect minors from accessing gambling services.
11. Changes to This Privacy Policy
basb8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When we update this Policy, we will revise the "Last Updated" date at the top of this page. For material changes — those that significantly affect how we use your personal data or your rights over it — basb8 will use reasonable efforts to notify you through an in-platform notification prior to the change taking effect. Your continued use of the basb8 platform following publication of an updated Privacy Policy constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed about how basb8 protects your privacy.
12. Contact and Privacy Requests
For all privacy-related enquiries, access requests, correction requests, deletion requests, or complaints regarding basb8's handling of your personal data, please contact the basb8 customer support team through the platform. When submitting a privacy request, please include your registered mobile number, a description of your request, and any relevant details that will help us locate and process your request efficiently.
basb8 is committed to responding to all privacy requests promptly and in good faith. We aim to acknowledge all privacy requests within 2 business days and to resolve them within 30 days. Where resolution requires more time, we will notify you of the expected timeline. basb8 will never charge a fee for processing a legitimate privacy request. Our support email for privacy matters is [email protected] — please note this address is displayed as plain text and is not a clickable link.
basb8 is committed to your privacy. We collect only what we need, protect it with SSL encryption and secure storage, never sell it, and give you clear rights to access, correct, or delete it. Bangladesh's trusted platform — built with privacy by design. 21+ only.