basha 8 Privacy
Policy
At basha 8, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect when you use the basha 8 platform, how that information is used, who it may be shared with, and what rights you have over your own data. We encourage all players to read this document carefully alongside our Terms & Conditions.
Our Commitment
Six Pillars of basha 8 Data Privacy
These cards summarise the principles that underpin every data handling decision we make at basha 8. Full details are in the numbered sections below.
Minimal Data Collection
basha 8 coll ects only the data that is strictly necessary to operate your account, process your transactions, and comply with our anti-fraud and responsible gaming obligations. We do not collect data for its own sake.
No Selling of Personal Data
basha 8 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate and improve the basha 8 platform for your benefit.
SSL Encryption
All data transmitted between your device and the basha 8 platform is protected by industry-standard SSL/TLS encryption. Sensitive information such as payment details and identity documents is stored using strong encryption at rest.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data held by basha 8. Requests are handled by our dedicated support team at [email protected] and are processed within a reasonable timeframe.
Defined Retention Periods
basha 8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and anti-fraud obligations. Data no longer needed is securely deleted or anonymised.
Marketing Opt-Out
Promotional communications from basha 8 are always opt-in. If you no longer wish to receive marketing emails or SMS messages, you can withdraw consent at any time by contacting [email protected] or using the unsubscribe link in any communication.
Section 1
Information We Collect
When you register for a basha 8 account, use the platform, or contact our support team, we collect a range of personal information in order to provide services, verify your identity, process payments, and meet our responsible gaming obligations. The categories of data we collect are described below.
| Data Category | Specific Data Points | Purpose of Collection |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, mobile number, residential address, username | Account creation, identity verification (KYC), age verification (18+ compliance), and account communications |
| Identity Verification Documents | Government-issued photo ID (National ID card, passport, driving licence), proof of address documents | KYC verification required before withdrawal processing; anti-fraud and age verification compliance |
| Payment & Transaction Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details, transaction reference numbers, deposit and withdrawal amounts and timestamps | Processing deposits and withdrawals in BDT; detecting fraudulent transactions; anti-money laundering compliance |
| Gaming Activity Data | Games played, bet amounts and outcomes, session durations, bonus claims, wagering history, sports bets placed | Providing gaming services; responsible gaming monitoring; bonus management; dispute resolution |
| Device & Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone (Bangladesh Standard Time) | Platform security; fraud and duplicate account detection; optimising platform performance across devices |
| Communication Data | Support ticket content, live chat transcripts, email correspondence, complaint records | Customer support; dispute resolution; service improvement; regulatory audit trail |
| Marketing Preferences | Opt-in / opt-out status for email promotions, SMS promotions, and platform notifications | Sending promotional communications (only where consent has been given); managing marketing opt-outs |
Data collected automatically
In addition to information you provide directly, basha 8 automatically collects certain technical data each time you access the platform. This includes your IP address, the pages and games you visit, the duration of your session, and the referring URL if you arrived via an external link. This data is collected via server logs, cookies, and similar tracking technologies. It is used primarily for platform security, fraud detection, and performance analytics. For full details of how cookies are used, see Section 4 — Cookies & Tracking.
Data provided by third parties
In some circumstances, basha 8 may receive data about you from third parties. This includes identity verification results from KYC processing partners, fraud screening data from payment processors, and where applicable, self-exclusion registry data from responsible gaming services. Data received from third parties is handled with the same care and under the same protections as data you provide directly.
Section 2
How We Use Your Data
basha 8 uses your personal data for the following purposes. In each case, the lawful basis for processing is identified so you understand the legal foundation on which your data is handled.
- Account management and service delivery: Your registration data is used to create and maintain your basha 8 account, authenticate your login, and enable you to access games, place bets, claim bonuses, and use all features of the platform. This processing is necessary for the performance of the contract between you and basha 8.
- Identity and age verification (KYC): basha 8 is obligated to verify that all players are aged 18 or above and that the identity information provided is genuine. KYC processing is a legal and contractual obligation and cannot be opted out of. Players who decline to complete KYC may have their withdrawal requests held until verification is complete.
- Payment processing: Transaction data is used to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and major Bangladesh bank transfers. Payment data is shared with your payment provider only to the extent necessary to complete the transaction.
- Fraud detection and security: Device data, IP address information, and transaction patterns are analysed to detect and prevent fraudulent activity, duplicate account creation, bonus abuse, and unauthorised account access. This processing is in basha 8's legitimate interest to maintain a secure platform for all players.
- Responsible gaming monitoring: Gaming activity data — including session duration, bet frequency, deposit patterns, and loss history — is monitored to identify signs of problem gambling behaviour. Where such signs are identified, basha 8 may reach out to offer responsible gaming tools or, in serious cases, apply protective account restrictions. This processing reflects basha 8's commitment to player welfare.
- Customer support: Communication data from support tickets and live chat is used to resolve your queries, investigate complaints, and improve the quality of our support services. Support records are retained to provide context for future interactions and as an audit trail for dispute resolution.
- Marketing communications: Where you have opted in to marketing communications, basha 8 may send you promotional emails or SMS messages about bonuses, new games, seasonal promotions (such as Eid or BPL season offers), and platform updates. You may withdraw consent at any time. basha 8 does not send unsolicited marketing to players who have not opted in.
- Platform analytics and improvement: Aggregated and anonymised usage data is used to understand how players interact with the platform, which games are most popular, and where the user experience can be improved. This data does not identify individual players.
- Legal and regulatory compliance: basha 8 may process and retain your data where required to comply with applicable legal obligations, including anti-money laundering requirements, responding to lawful requests from authorities, and maintaining records for audit purposes.
Section 3
Data Sharing & Third Parties
basha 8 does not sell, rent, or trade your personal data to third parties. However, in order to operate the platform and meet our legal obligations, we do share certain data with trusted third-party service providers and, in specific circumstances, with authorities. Every recipient of your data is bound by appropriate data processing agreements and confidentiality obligations.
Categories of third parties who may receive your data:
- Payment processors and mobile money providers: bKash, Nagad, Rocket, Upay, and partner banks receive the payment data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independent data controllers in respect of your payment transaction data.
- KYC and identity verification partners: basha 8 uses specialist third-party KYC service providers to assist with identity document verification and age confirmation. These partners receive your identity documents and verification data solely for the purpose of completing the KYC check. They are contractually prohibited from using your data for any other purpose.
- Game providers: When you play a game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain session data — including your player ID, bet amounts, and game outcomes — is transmitted to that provider's platform to enable the game session. Game providers are bound by data processing agreements with basha 8.
- Fraud prevention and anti-money laundering services: basha 8 uses third-party fraud screening services to analyse transaction patterns and device fingerprints for signs of fraudulent activity. These services receive limited technical and transaction data and are used solely for security purposes.
- Customer support platform providers: Our support ticketing system and live chat infrastructure may be provided by third-party software vendors. Support communication data is stored on these platforms subject to appropriate data processing agreements.
- Analytics providers: Anonymised, aggregated usage data may be shared with analytics platforms to help basha 8 understand platform performance and user experience trends. No personally identifiable information is included in analytics data sharing.
- Legal and regulatory authorities: basha 8 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or other legal process. basha 8 will notify you of such disclosures where legally permitted to do so.
Section 5
Data Security
basha 8 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. While no digital system can guarantee absolute security, basha 8 applies industry-standard practices to minimise risk at every level.
- SSL/TLS encryption in transit: All data transmitted between your browser or device and the basha 8 platform is encrypted using SSL/TLS (Secure Sockets Layer / Transport Layer Security). This includes login credentials, payment data, and personal information submitted via any form on the platform. The presence of a valid SSL certificate is indicated by the padlock icon in your browser address bar.
- Encryption at rest: Sensitive data stored in basha 8 databases — including identity documents, payment method details, and account credentials — is encrypted at rest using strong encryption standards. Plaintext storage of passwords is never used; passwords are hashed using industry-standard one-way algorithms.
- Access controls: Access to player personal data within basha 8's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific data categories are granted that access. All internal access is logged and regularly audited.
- Fraud detection systems: basha 8 operates continuous automated fraud monitoring across all account activity, transaction flows, and login attempts. Unusual patterns trigger alerts for review by the security team. Accounts suspected of compromise are flagged and may be temporarily restricted while an investigation is conducted.
- Third-party security standards: All third-party service providers who handle basha 8 player data are required to maintain security standards commensurate with those applied by basha 8. This requirement is included in all data processing agreements with third-party partners.
- Security incident response: In the event of a data security incident that may affect your personal data, basha 8 will investigate promptly and, where required, notify affected players via the registered email address. basha 8 maintains an incident response plan and conducts periodic security assessments of platform infrastructure.
Section 6
Data Retention
basha 8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Once data is no longer needed for any of these purposes, it is securely deleted or irreversibly anonymised.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual obligation; anti-money laundering record-keeping requirements; dispute resolution |
| KYC / identity documents | Duration of account + 5 years after closure | Anti-fraud and anti-money laundering compliance; regulatory audit obligations |
| Transaction records | 7 years from date of transaction | Financial record-keeping requirements; anti-money laundering compliance; tax and audit obligations |
| Gaming activity logs | 3 years from date of activity | Responsible gaming monitoring; dispute resolution; bonus abuse investigation |
| Customer support records | 3 years from date of interaction | Dispute resolution; service quality improvement; regulatory audit trail |
| Marketing consent records | Duration of consent + 2 years after withdrawal | Evidence of consent basis for marketing communications; compliance with opt-out requests |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming compliance; prevention of re-registration during exclusion period |
| Technical / device logs | 90 days | Platform security monitoring; fraud detection; performance analysis |
Where you request account closure, basha 8 will cease active processing of your data for service delivery purposes. However, certain data will be retained for the post-closure periods specified above in order to meet legal and regulatory obligations. You will be informed of the applicable retention periods at the time of your account closure request.
Section 7
Your Rights Over Your Data
As a basha 8 player, you have a number of rights in relation to your personal data. basha 8 is committed to honouring these rights and to making the process of exercising them as straightforward as possible. To exercise any of the rights listed below, contact the basha 8 support team at [email protected] from your registered email address, clearly stating which right you wish to exercise and providing sufficient information to allow us to identify your account.
Right of Access
You have the right to request a copy of the personal data basha 8 holds about you. We will provide a summary of your data in a commonly used format within a reasonable timeframe following your verified request.
Right to Rectification
If any personal data basha 8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections (such as name changes) may require documentary evidence before being applied.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to basha 8's legal retention obligations — data required for regulatory compliance cannot be deleted before the applicable retention period expires.
Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of data or object to a processing activity — you may request that basha 8 restrict processing of your data while the matter is under review. During restriction, your data may be stored but not actively processed.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you choose.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though in such cases basha 8 may be able to demonstrate overriding legitimate grounds to continue processing.
basha 8 aims to respond to all data rights requests within 30 calendar days of receiving a verified request. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive, in which case basha 8 reserves the right to charge a reasonable administrative fee.
Section 8
Policy Updates & Contact
basha 8 reviews this Privacy Policy on a regular basis to ensure it accurately reflects our data processing practices and remains consistent with applicable law. We reserve the right to update or amend this Privacy Policy at any time. When material changes are made, registered players will be notified via the email address associated with their basha 8 account at least 7 calendar days before the revised Policy takes effect. The effective date of the current version is stated at the top of this page.
Continued use of the basha 8 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting [email protected]. The current version of this Privacy Policy is always accessible from the footer of every basha 8 page and is the authoritative version.
Children's privacy
The basha 8 platform is strictly intended for adults aged 18 and above. basha 8 does not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a person under 18, that data will be deleted without delay and the associated account will be permanently closed. If you believe a person under 18 has registered on the basha 8 platform, please report this to [email protected] immediately.
Links to third-party platforms
The basha 8 platform may contain references to third-party payment services such as bKash, Nagad, Rocket, and Upay. These services operate under their own privacy policies, which are independent of this document. basha 8 is not responsible for the privacy practices of third-party platforms accessed via or in connection with the basha 8 service. Players are encouraged to read the privacy policies of any third-party service they use in connection with their basha 8 account.
Contacting basha 8 about privacy
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about the way basha 8 handles your personal data, please contact the basha 8 support team. All privacy-related enquiries will be handled by a member of the team with responsibility for data protection matters.
Explore basha 8 With Confidence
Now that you understand how basha 8 handles your personal data, explore the platform knowing your information is protected. Cricket betting, 500+ slots, and live casino — all secured with SSL encryption.