basa18 Privacy Policy

1. Introduction

1.1 basa18 is committed to protecting the privacy and security of every player who uses its Platform. This Privacy Policy sets out in clear, plain English how personal data is handled across all basa18 products and services, including the website at https://basa18.vip, any associated mobile-optimised interfaces, and all related customer support channels.

1.2 basa18 is operated as an online casino and sports betting platform serving players in Bangladesh. In providing its services, basa18 necessarily collects certain personal information from players. This policy explains exactly what that information is, why it is needed, how it is protected, and how long it is kept.

1.3 basa18 operates under a strict data minimisation principle: we collect only what is genuinely required to provide you with a safe, fair, and functional gambling experience. Any data collected beyond strict operational necessity will always be explained in this policy with a clear stated purpose.

2. Data Controller

2.1 For the purposes of this Privacy Policy, basa18 acts as the data controller in respect of all personal data collected from players through the Platform. As data controller, basa18 determines the purposes for which, and the means by which, your personal data is processed.

2.2 If you have any questions or concerns about how basa18 handles your personal data, you may contact us at any time using the details set out in Section 15 of this policy.

3. Data We Collect

3.1 basa18 may collect and process the following categories of personal data about you:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you are 18 years of age or older);
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
• Username chosen at registration;
• Scanned or photographed copies of your National Identity Card (NID), passport, or other accepted identification document submitted during KYC verification.

3.2 Contact Data

• Email address registered to your basa18 account;
• Mobile phone number (where provided for account security or two-factor authentication purposes).

3.3 Financial & Transaction Data

• Records of all deposits and withdrawals made through your basa18 account, including amounts in BDT, timestamps, and payment method used;
• Mobile wallet identifiers associated with your bKash, Nagad, Rocket, or Upay accounts (we do not store full wallet PINs or passwords);
• Card type, expiry date, and the last four digits of any Visa or Mastercard used for deposits (full card numbers are not stored by basa18);
• Transaction reference numbers issued by payment processors.

3.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, and browser information;
• Session start and end times;
• Pages visited and features accessed within the Platform;
• Game history, bet history, and wagering records.

3.5 Communications Data

• Records of communications between you and the basa18 support team, including emails, live chat transcripts, and any documents you submit in support of a query or complaint.

4. How We Collect Data

4.1 basa18 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and session management tools (see Section 10 for full cookie details);
• Third-party sources: Identity verification data obtained from KYC service providers; fraud-risk signals obtained from payment processors; geolocation data obtained from IP resolution services used to enforce geographic access restrictions.

4.2 basa18 does not purchase personal data lists from data brokers or any other commercial third-party data sources.

5. Purposes & Legal Basis for Processing

5.1 The table below summarises the primary purposes for which basa18 processes your personal data and the legal basis relied upon for each processing activity.

5.2 Where basa18 relies on consent as the legal basis for processing (e.g., sending promotional emails or SMS messages), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting support at [email protected]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

6. Data Sharing

6.1 basa18 does not sell, rent, or trade your personal data to any third party for marketing purposes. Personal data is shared only in the following circumstances and only to the extent necessary:

6.1 Service Providers & Processors

basa18 engages third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — to facilitate deposits and withdrawals;
• KYC and identity verification service providers — to carry out age and identity checks;
• Fraud detection and risk management platforms — to protect the integrity of the Platform;
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — who receive anonymous session data required for game delivery and RNG certification;
• Cloud hosting and infrastructure providers — who store data on servers secured in accordance with industry standards.

6.2 Legal & Regulatory Disclosures

basa18 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where it is legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of basa18, its players, or the public.

6.3 Business Transfers

In the event that basa18 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by basa18 may be transferred to the successor entity. Players will be notified of any such transfer and any changes to the applicable privacy terms by email or via a prominent Platform notice prior to the transfer taking effect.

7. International Data Transfers

7.1 basa18 primarily stores and processes personal data on servers located in secure data centres. Where personal data is transferred to or accessed from a location outside of Bangladesh — for example, by a cloud infrastructure provider, game content supplier, or KYC processor — basa18 ensures that appropriate safeguards are in place before any such transfer occurs.

7.2 These safeguards may include contractual clauses that require the receiving party to protect personal data to a standard equivalent to that applied by basa18, or other recognised data transfer mechanisms appropriate to the circumstances of the transfer.

7.3 If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact the basa18 support team at [email protected].

8. Data Retention

8.1 basa18 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following permanent account closure, to meet anti-money laundering record-keeping requirements;
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction;
• Customer support communications: Retained for 3 years from the date of the last interaction, or longer where a dispute or investigation is ongoing;
• Technical and usage logs: Retained for up to 13 months for fraud detection and platform performance purposes, after which they are anonymised or deleted;
• Marketing preferences and consent records: Retained for the duration of your marketing consent and for 2 years following any withdrawal of consent.

8.2 When personal data is no longer required and no legal obligation exists to retain it, basa18 will securely delete or anonymise it in accordance with its internal data disposal procedures.

9. Security Measures

9.1 basa18 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and basa18 servers;
• Encryption of sensitive data at rest, including stored payment identifiers and KYC documents;
• Role-based access controls ensuring that basa18 staff can only access personal data relevant to their specific job function;
• Regular security audits and vulnerability assessments of the Platform infrastructure;
• Two-factor authentication options available to all registered players;
• Automated fraud monitoring and anomaly detection systems operating continuously across all account activity.

9.2 While basa18 takes every reasonable precaution to protect your data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your personal data, basa18 will notify you promptly and take all necessary steps to contain and remediate the breach.

9.3 You are responsible for maintaining the security of your own account by keeping your login credentials confidential and not sharing them with any third party. basa18 will never contact you to request your password.

10. Cookies & Tracking Technologies

10.1 basa18 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. The cookies used by basa18 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cookies cannot be disabled without affecting Platform functionality;
• Performance & analytics cookies: Used to collect anonymous data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps basa18 improve the Platform experience. No personally identifiable information is collected through these cookies;
• Functional cookies: Used to remember your preferences (such as language and display settings) to personalise your experience on the Platform.

10.2 basa18 does not use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels on the Platform.

10.3 You can control and manage cookie settings through your browser. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform — in particular, strictly necessary cookies must remain enabled for you to access your account and place bets.

10.4 By continuing to use the Platform after being presented with cookie information, you consent to basa18's use of cookies as described in this section.

11. Your Rights

11.1 basa18 respects your rights over the personal data we hold about you. Depending on applicable law, you may have the following rights:

• Right of access: You may request a copy of the personal data basa18 holds about you, together with information about how it is being used;
• Right to rectification: You may request that inaccurate or incomplete personal data held about you is corrected;
• Right to erasure: In certain circumstances, you may request that basa18 deletes your personal data. Note that this right may be limited where basa18 is required to retain data to comply with a legal obligation (e.g., AML record-keeping requirements);
• Right to restriction of processing: You may request that basa18 restricts the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved;
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that basa18 provides your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to the processing of your personal data where basa18 relies on legitimate interests as the legal basis, and where your particular circumstances justify an objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of these rights, please contact the basa18 support team at [email protected] with the subject line "Data Rights Request". basa18 will acknowledge your request within 5 business days and respond in full within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice given to you of the extension.

11.3 basa18 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied or the request may be refused, with written reasons provided.

12. Children's Privacy

12.1 The basa18 Platform is strictly intended for adults aged 18 years and over. basa18 does not knowingly collect personal data from any person under the age of 18. If basa18 becomes aware that personal data has been collected from a minor, the relevant account will be closed immediately, all data will be deleted, and any deposited funds will be handled in accordance with basa18's minor-protection procedures.

12.2 If you are a parent or guardian and believe that your child has registered an account with basa18, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13. Third-Party Links

13.1 The basa18 Platform may contain references or links to third-party websites or services. This Privacy Policy applies solely to basa18 and does not govern the privacy practices of any third-party website, application, or service. basa18 is not responsible for the content or privacy practices of any third party.

13.2 We encourage you to review the privacy policies of any third-party services you interact with independently of the basa18 Platform.

14. Policy Amendments

14.1 basa18 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, basa18 will notify registered players by email or by posting a prominent notice on the Platform at least 7 calendar days before the updated policy takes effect.

14.2 The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14.3 If you disagree with any changes to this Privacy Policy, you may request account closure in accordance with the procedures set out in our Terms & Conditions, available at /terms-conditions.

15. Contact & Complaints

15.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how basa18 handles your personal data, please contact us at:

15.2 basa18 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days, investigate the matter thoroughly, and provide a full written response within 30 calendar days.

15.3 If you are not satisfied with basa18's response to your complaint, you may be entitled to refer the matter to a relevant data protection authority or seek an independent resolution through an appropriate dispute resolution body in your jurisdiction.