basha88 Privacy Policy

1 Information We Collect

basha88 collects personal data from players at various points during the account lifecycle — at registration, during the identity verification (KYC) process, through your ongoing use of the platform, and via your communications with our support team. The categories of data we collect, and the context in which we collect them, are set out below.

Registration Data: When you create a basha88 account, we collect the following information:

• Full legal name
• Date of birth (used to verify the 18+ age requirement)
• Email address
• Mobile phone number (Bangladesh-registered)
• Chosen username and encrypted password (passwords are hashed and are never stored in plain text)
• Country of residence

Identity Verification (KYC) Data: To comply with anti-money-laundering obligations and to verify player identity before processing withdrawals, basha88 may request:

• Government-issued photo identification — National Identity Card (NID), passport, or driving licence
• Proof of address — a utility bill, bank statement, or other official document dated within the past three months
• Proof of payment method ownership — a screenshot or statement confirming the bKash, Nagad, Rocket, or bank account used for deposits is registered in your name
• A selfie or live photograph for facial verification where required

Transaction and Financial Data: Each time you deposit funds, place a bet, claim a bonus, or request a withdrawal on basha88, we record:

• Transaction amount in Bangladeshi Taka (BDT)
• Payment method type and masked identifier (e.g., last four digits of a card, or the registered mobile number of a bKash wallet)
• Date, time (Bangladesh Standard Time, UTC+6), and transaction reference number
• Account balance before and after each transaction

Behavioural and Usage Data: As you use the basha88 platform, we automatically collect certain technical and behavioural data to ensure platform performance, detect fraud, and improve the user experience:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser or app version
• Pages and game titles viewed, bet amounts, and session duration
• Login timestamps and logout events
• Referring URL (the website or link that directed you to basha88, where applicable)

Communications Data: If you contact basha88 via live chat, email ([email protected]), or WhatsApp, we retain records of those communications including any attachments you provide, for customer service quality assurance, dispute resolution, and compliance purposes.

2 How We Use Your Information

basha88 processes your personal data only for defined, legitimate purposes. The table below summarises the primary purposes for which we use each category of data and the lawful basis under which that processing is carried out.

Where basha88 relies on your consent as the lawful basis for processing — specifically for optional marketing communications — you may withdraw that consent at any time by contacting our support team or by using the unsubscribe option included in any marketing message we send you. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

basha88 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated systems flag an account for potential fraud or bonus abuse, a member of the basha88 compliance team reviews the case before any account action is taken.

3 Data Sharing and Disclosure

basha88 does not sell, rent, or trade your personal information to third parties for commercial purposes. However, in order to operate the platform and meet our legal obligations, we share certain categories of data with a limited set of trusted third-party service providers and authorities, as described below.

Payment Processors: To facilitate deposits and withdrawals, basha88 shares the minimum necessary transaction data with payment processing partners including bKash, Nagad, Rocket, Upay, and the card networks (Visa and Mastercard). These providers operate under their own privacy policies and are independently responsible for the data they process as part of each payment transaction.

Identity Verification Providers: Where automated KYC or facial verification technology is used, we may share KYC document images and photographs with a certified third-party identity verification provider. All such providers are contractually bound to process that data solely for the purpose of identity verification on behalf of basha88 and to delete the data upon completion of the verification process.

Game Providers: When you launch a game on the basha88 platform supplied by a third-party provider — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token and minimal player identifier are passed to the game provider's system to enable the game session. Game providers do not receive your full name, NID, or payment details.

Analytics and Security Tools: basha88 uses industry-standard analytics and fraud detection software to monitor platform performance and detect suspicious activity. These tools may process IP addresses, session data, and device identifiers. They are configured to process this data on behalf of basha88 and are not permitted to use it for their own commercial purposes.

Legal and Regulatory Disclosure: basha88 may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where we are legally required to do so — for example, in response to a lawful request related to an anti-money-laundering investigation or a court order. In such cases, basha88 will disclose only the minimum data necessary to comply with the specific legal requirement.

4 Cookies and Tracking Technologies

The basha88 website uses cookies and similar tracking technologies (including local storage and session storage) to enable core platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics data about how players use the site. This section explains the types of cookies we use and your options for managing them.

Strictly Necessary Cookies: These cookies are essential for the basha88 website to function. Without them, services such as maintaining your login session, remembering items in your bet slip, and processing secure transactions would not be possible. Strictly necessary cookies cannot be disabled without breaking core platform functionality.

Functional Cookies: These cookies allow the basha88 platform to remember choices you have made — such as your preferred odds format (decimal or fractional), language display settings, and whether you have previously acknowledged certain notification banners. Disabling functional cookies may cause parts of the platform to behave in a less personalised manner.

Analytics Cookies: basha88 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical errors are occurring. This data is aggregated and does not identify individual players. Analytics cookies help us improve the platform experience over time.

Security and Fraud Detection Cookies: Certain cookies and device fingerprinting techniques are used by basha88's fraud detection systems to identify unusual login patterns, detect the use of multiple accounts from the same device, and flag suspicious betting behaviour. These technologies are integral to protecting the fairness and integrity of the platform.

Most modern browsers allow you to view, manage, and delete cookies via the browser settings menu. You may also use browser extensions designed for cookie management. Please be aware that deleting or blocking certain categories of cookie may impair your ability to use the basha88 platform, particularly features that require an active login session.

5 Data Retention and Storage

basha88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Account and registration data: Retained for the duration of your active account relationship with basha88, and for a period of five years following permanent account closure. This retention period supports our anti-money-laundering record-keeping obligations.
• KYC verification documents: Retained for five years from the date of submission, or five years from account closure, whichever is the later date. Document images associated with failed or incomplete KYC checks are deleted within 90 days of the failed verification decision.
• Transaction records: Retained for seven years from the date of each transaction in order to comply with financial record-keeping requirements. This includes deposit confirmations, withdrawal records, bet settlement records, and bonus transaction logs.
• Customer support communications: Retained for three years from the date of the last communication in each support case. Where a support communication forms part of an ongoing dispute or legal matter, it is retained until that matter is fully resolved.
• Behavioural and analytics data: Aggregated, anonymised analytics data is retained indefinitely for platform improvement purposes. Raw session logs containing IP addresses and device identifiers are retained for 12 months and then automatically purged.
• Marketing consent records: If you have opted in to receive promotional communications, your consent record is retained for as long as you remain opted in, and for two years following any opt-out, in order to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where immediate deletion is not technically feasible — for example, in the case of data held in automated backup systems — the data is isolated from active processing until routine backup deletion cycles can be completed.

All personal data is stored on servers located in secured data centre facilities. Access to stored data is restricted on a need-to-know basis, and all staff with access to personal data are subject to confidentiality obligations.

6 Security Measures

basha88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no system can guarantee absolute security, we take the following steps to minimise risk:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or app and the basha88 servers is encrypted using TLS 1.2 or higher. This applies to all connections including login, registration, deposits, and withdrawal requests.
• Password Hashing: User passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm with per-user salt values, meaning that even in the highly unlikely event of a data breach, your password cannot be recovered from stored data.
• Access Controls: Internal access to personal data is governed by role-based access controls. Staff members are granted access only to the specific data categories required for their job function. All privileged access is logged and subject to periodic review.
• Two-Factor Authentication: basha88 supports and encourages the use of SMS-based one-time password (OTP) verification for account login and withdrawal requests, providing an additional layer of protection beyond the username and password.
• Fraud Detection Systems: basha88 employs real-time fraud detection systems that monitor login activity, transaction patterns, and betting behaviour for anomalies that may indicate account takeover, identity fraud, or money laundering activity.
• Regular Security Reviews: Our platform infrastructure and data handling practices are subject to periodic internal security reviews. Critical security patches are applied to platform systems on a priority basis.
• Incident Response: In the event of a personal data breach that poses a risk to affected players, basha88 will notify impacted users via their registered email address as promptly as possible, and will take immediate steps to contain and remediate the breach.

7 Your Privacy Rights

As a player on the basha88 platform, you have a number of rights with respect to the personal data we hold about you. basha88 is committed to honouring these rights promptly and without undue barrier. To exercise any of the rights described below, please contact our support team via live chat (available 24/7) or by emailing [email protected].

• Right of Access: You have the right to request a copy of the personal data that basha88 holds about you. Upon a verified access request, we will provide a summary of your data in a commonly used format within a reasonable timeframe.
• Right to Rectification: If any personal data basha88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as email address or phone number, you may update these directly within your account settings. For KYC-verified data such as your legal name or date of birth, contact our support team to initiate a correction request supported by documentary evidence.
• Right to Erasure: You may request that basha88 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for processing based on consent. Note that erasure requests cannot override our legal obligation to retain certain data (such as transaction records) for the mandatory retention periods described in Section 5 of this policy.
• Right to Restrict Processing: You may request that basha88 restrict the processing of your personal data in certain circumstances — for instance, while you contest the accuracy of data we hold or where you object to processing based on legitimate interest and that objection is under review.
• Right to Data Portability: Where basha88 processes your data on the basis of contract or consent, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format for the purpose of transmitting it to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on our legitimate interests, and we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where basha88 processes your data based on your consent — specifically for optional marketing communications — you may withdraw that consent at any time without detriment. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

basha88 will respond to verified privacy rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

We may need to verify your identity before processing a privacy rights request to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised third party. Verification will typically involve confirming details already associated with your registered account.

8 Changes to This Policy

basha88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When we make material changes to this policy, we will update the "Last updated" date displayed at the top of this document and, where the changes are significant, we will notify registered players via their registered email address prior to the changes taking effect.

The most current version of this Privacy Policy is always available at https://basha88.net/privacy-policy. We encourage you to review this page periodically to stay informed about how basha88 protects your personal data. Your continued use of the basha88 platform after any revision to this Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which basha88 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the basha88 platform
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)

Our support team is available around the clock, including on Bangladeshi public holidays such as Eid, Pohela Boishakh, Independence Day (March 26), and Victory Day (December 16). We take all privacy-related enquiries seriously and aim to address them promptly and thoroughly.

This Privacy Policy should be read alongside the basha88 Terms & Conditions and Responsible Gaming policy, which together form the full framework of your agreement with basha88 and our obligations to you as a player.