8basa Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by 8basa ("we", "us", "our") in connection with the operation of the 8basa online betting and casino platform, accessible at https://8basa.io and through any related mobile-optimised interfaces (collectively, the "Platform").

8basa is committed to handling all personal data with the utmost care, in accordance with fair information practices and applicable data protection principles. Our approach to privacy is built on the following core values: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

This Policy applies to all registered players, visitors who browse the Platform without registering, and any other individual whose personal data we process in connection with our services. This Policy should be read in conjunction with the 8basa Terms and Conditions and Responsible Gaming Policy, all of which are published on this website.

The effective date of this Policy is stated in the hero section at the top of this page. We may update this Policy from time to time. The current version will always be available at https://8basa.io/privacy-policy. Material changes will be communicated to registered players via on-platform notification or email.

2 Personal Data We Collect

8basa collects personal data across several categories depending on the nature of your interaction with the Platform. The table below provides a structured overview of the data categories we collect, the specific data points within each category, and the primary purpose for which each category is processed.

3 How We Collect Your Data

8basa collects personal data through the following channels and mechanisms:

The majority of personal data we hold is provided directly by you when you register an account, complete a verification process, make a deposit or withdrawal request, contact our support team, or respond to a promotional offer. You are in control of what you provide at each of these interaction points.

When you visit the Platform, our servers automatically record certain technical information about your device and session. This includes your IP address, the pages you visit, the duration of your visit, the device and browser you are using, and any errors encountered during your session. This data is collected through standard server log mechanisms and through first-party session cookies.

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment provider transmits transaction confirmation data to 8basa. This typically includes the registered mobile number or account identifier associated with the transaction, the transaction reference number, the amount, and the timestamp. 8basa does not receive or store full payment card numbers from Visa or Mastercard transactions.

Where 8basa engages a third-party identity verification provider to assist with Know Your Customer (KYC) processes, that provider may supply us with a verification status result and a confidence score for the document or identity check performed. 8basa does not receive the raw biometric data (if any) used in the automated verification process; only the result of the check is transmitted to 8basa.

4 Legal Basis for Processing

Every instance of personal data processing carried out by 8basa is grounded in one of the following legal bases. We do not process personal data without a lawful basis:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 8basa Terms and Conditions — for example, maintaining your account, processing deposits and withdrawals, recording bet results, and crediting winnings to your balance.
• Legal Obligation: Processing required to comply with applicable legal obligations — for example, identity verification under anti-money laundering (AML) requirements, record-keeping obligations, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for the legitimate interests of 8basa, where those interests are not overridden by your rights and interests — for example, fraud detection, platform security monitoring, responsible gaming risk assessment, and internal analytics used to improve service quality.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you personalised promotional offers and marketing communications via SMS or email. You may withdraw consent for marketing communications at any time by contacting support or using the opt-out mechanism provided in each communication.

5 How We Use Your Personal Data

8basa uses the personal data it collects for the following specific purposes, each of which is grounded in a lawful basis as described in Section 4:

• Account Management: Creating, maintaining, and administering your 8basa account, including processing login requests, updating account settings, and managing account security features.
• Identity and Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years before allowing access to real-money gambling features.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and processing withdrawal requests to your verified payment method.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance through our 24/7 live chat and email support channels.
• Responsible Gaming: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, enforcing self-exclusion requests and deposit or loss limits set by you, and providing support resources proactively where risk indicators are observed.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the 8basa Terms and Conditions.
• Legal Compliance: Maintaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling our AML and KYC obligations.
• Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform, identify technical issues, and improve game selection, user experience, and support quality.
• Marketing Communications: Sending you personalised promotions, bonus offers, and platform updates via SMS and email, where you have given your consent to receive such communications and have not subsequently withdrawn that consent.

6 Sharing Your Personal Data

8basa does not sell, rent, or trade your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the specified purpose:

To process deposits and withdrawals, 8basa shares the minimum necessary account and transaction data with our payment partners, including the operators of bKash, Nagad, Rocket, Upay, and our acquiring bank partners for Visa and Mastercard transactions. These partners are contractually bound to use this data only for the purpose of processing the specific transaction and are prohibited from using it for their own marketing purposes.

Where 8basa uses a third-party KYC provider to assist with identity verification, we share the documents and information you have submitted for that specific purpose. The KYC provider is bound by contractual data processing obligations and is not permitted to retain or use your documents beyond the scope of the verification task.

8basa uses third-party cloud infrastructure, database hosting, and content delivery services to operate the Platform. These service providers process technical and operational data as data processors acting on 8basa's documented instructions. They do not have independent access to your personal data for their own purposes.

Game providers whose content is integrated into the 8basa Platform — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymous player session token to facilitate game delivery and fair play certification. These providers do not receive your name, contact details, or payment information.

8basa may disclose personal data to competent authorities, law enforcement agencies, or other legally entitled third parties where required to do so by applicable law, court order, or binding regulatory requirement. We will notify affected players of any such disclosure where we are legally permitted to do so.

7 Cookies and Tracking Technologies

The 8basa Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

You may configure your browser to block or delete cookies. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use core platform features. 8basa does not use third-party advertising cookies or cross-site tracking cookies.

8 Data Retention

8basa retains personal data for the periods set out below. At the end of the applicable retention period, data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the full duration of your account's active status plus a period of five years following permanent account closure, to satisfy legal record-keeping obligations and to handle any late-emerging disputes.
• Transaction Records: Deposit and withdrawal records, including associated financial data, are retained for a minimum of five years from the date of the transaction in accordance with AML record-keeping requirements.
• Identity Verification Documents: Copies of KYC documents are retained for five years following the date on which verification was completed, or five years after account closure, whichever is later.
• Support and Communication Records: Live chat transcripts and email correspondence are retained for three years from the date of the last communication in the relevant support thread.
• Technical and Log Data: Server logs containing IP addresses and session data are retained for 12 months and are then automatically purged unless required for an active security investigation.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account's active status and for two years following account closure.
• Self-Exclusion Records: Records of self-exclusion requests are retained permanently to prevent re-registration during the exclusion period and to provide an accurate history for responsible gaming purposes.

9 Data Security

8basa implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. Our key security practices include:

• Encryption in Transit: All data transmitted between your device and the 8basa Platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a continuous basis.
• Encryption at Rest: Databases containing personal data, financial records, and identity documents are encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted on a need-to-know basis. All access requests are subject to formal approval, and access rights are reviewed regularly. Multi-factor authentication is mandatory for all staff with access to production systems.
• Penetration Testing: 8basa commissions independent security assessments of the Platform on a periodic basis to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: 8basa maintains a documented incident response plan. In the event of a data breach, a dedicated response team is activated immediately to contain the breach, assess its scope, and notify affected players and relevant authorities as required.
• Staff Training: All 8basa employees who handle personal data receive mandatory data protection training at onboarding and at regular intervals thereafter.

10 Your Data Rights

You have the following rights in relation to the personal data that 8basa holds about you. These rights may be exercised by contacting our support team at [email protected] with the subject line "Data Rights Request":

8basa will respond to all verified data rights requests within 14 business days of receipt. In complex cases we may extend this period by a further 14 business days, in which case we will inform you of the extension and the reason for it. We may need to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised party.

Please note that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain, and we cannot provide portability for data that is not technically portable in a structured format. Where a limitation applies, we will explain the specific reason in our response to your request.

11 Children's Privacy

The 8basa Platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process, and we employ additional automated checks to detect and prevent underage access.

If 8basa discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage player will be handled in accordance with our Terms and Conditions and applicable legal requirements.

If you are a parent or guardian and you believe that a person under your care has registered an account on the 8basa Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

12 Marketing Communications

With your consent, 8basa may contact you with personalised promotional offers, bonus announcements, tournament invitations, and platform updates via SMS to your registered mobile number and email to your registered email address. We will only send marketing communications where you have opted in during registration or at a later point through your account settings.

Each marketing communication we send will contain a clear and easy-to-use opt-out mechanism. You may also withdraw your consent at any time by contacting our support team at [email protected] with the subject line "Marketing Opt-Out". We will action your request within five business days. Please note that even after opting out of marketing communications, you will continue to receive service-related messages that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

8basa does not use automated profiling to make decisions about you that produce significant legal effects without human review. While we may use your account activity data to personalise the offers and promotions presented to you, the final decision to send a given communication is subject to human oversight and is not purely automated.

13 Changes to This Privacy Policy

8basa reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, improvements to our services, or for any other legitimate operational reason. The most current version of this Policy will always be published at https://8basa.io/privacy-policy, and the effective date at the top of the page will be updated accordingly.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice to all registered players via an on-platform notification displayed upon login and, where possible, via email to the address registered to your account. For non-material changes such as clarifications of existing language, formatting improvements, or corrections of typographical errors, we may update the Policy without advance notice.

Your continued use of the 8basa Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes, you should stop using the Platform and contact our support team to discuss the closure of your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 8basa handles your personal data, please contact our Data Support team using the details below. All privacy-related enquiries are handled by a dedicated team member and are treated as confidential.

Please note that our support email address is provided for written correspondence only and is not a clickable link. Copy the address above and paste it into your email client to send your message. We do not accept phone calls or in-person visits for privacy-related matters.