Privacy Policy – How basar8 Protects Your Personal Data

When you create a basar8 account, we collect:

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Mobile number or email address
• Username and hashed password
• City or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Rajshahi)

To comply with our know-your-customer (KYC) and anti-money-laundering (AML) obligations, we may request:

• National Identity Card (NID) number and scan
• Passport or other government-issued photo identification
• Proof of address (utility bill, bank statement, or similar document issued within 90 days)
• Selfie photograph for biometric identity matching

Verification documents are stored securely and are never shared with third parties outside of our regulated verification process.

We record deposit and withdrawal transactions including payment method type (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳), transaction dates and times, and transaction reference identifiers. We do not store full card numbers or full mobile wallet PINs. Financial data is used for transaction processing, fraud prevention, withdrawal verification, and regulatory reporting.

When you access basar8, our systems automatically collect certain technical information:

• IP address and approximate geographic location (city/district level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Game session data including games played, wager amounts, and session duration
• Referring URL (the page you visited immediately before arriving at basar8)
• Cookie identifiers and local storage tokens (see Section 7 on Cookies)

This data helps us improve Platform performance, detect fraud, and personalise your experience.

If you contact our support team — via email at [email protected] or through any in-Platform messaging feature — we retain a record of that correspondence, including your message content, timestamps, and any attachments. This data is used to resolve your query, maintain service quality records, and improve our support processes.

To process your deposits and withdrawals, we share relevant transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and card networks (Visa, Mastercard). These partners receive only the information strictly necessary to complete the transaction and are bound by their own data protection obligations.

We may share identity documents and biometric data with accredited third-party KYC and AML verification providers to fulfil our age-verification and fraud-prevention obligations. All such providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than the verification service they provide to basar8.

Casino games on the Platform are powered by third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymous game-session data for the purpose of delivering the game. They do not receive your name, payment details, or contact information as part of this integration.

basar8 may disclose personal data to law enforcement, regulatory authorities, or courts when required to do so by applicable law, court order, or legal process. We will notify you of any such disclosure where we are legally permitted to do so. Where a disclosure is made in connection with suspected fraud, money laundering, or another criminal investigation, we may be prohibited from notifying you.

In the event of a merger, acquisition, or sale of all or part of basar8's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data fields, including passwords (hashed with bcrypt) and identity document scans
• Firewalls, intrusion detection systems, and continuous security monitoring
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Strict access controls: Platform staff access personal data only on a need-to-know basis
• Multi-factor authentication required for all administrative access to production systems

• All staff with access to personal data are subject to confidentiality obligations
• Regular staff training on data protection and responsible data handling
• Documented data breach response procedures, with a target notification timeline for affected players
• Third-party processors are vetted and bound by data processing agreements before any data is shared

You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it. We will provide this information free of charge in a commonly used electronic format.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain data directly through your account settings. For changes to your legal name or date of birth, supporting documentation will be required.

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to our processing. This right is not absolute — where we are required by law to retain certain data (for example, AML transaction records), we will inform you and retain only that which is legally mandated.

Where we process your data on the basis of your consent — for example, sending promotional emails or SMS offers — you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, contact [email protected] or update your account preferences.

You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring. We will consider your objection and either cease the processing or explain the compelling legitimate grounds that override your interests.

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and last-played game. Disabling these may reduce your experience quality.
• Analytics cookies: Collect anonymised usage data about how players navigate the Platform. This data helps us identify performance issues and improve our services.
• Marketing cookies: Used to deliver personalised promotional content within the Platform. These are only set with your consent.

Email: [email protected]

Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

Response target: within 30 days for data rights requests; within 2 hours for urgent account and security concerns.