basa3 Privacy Policy

1 Introduction

basa3 operates an online betting and casino platform accessible at basa3.io, serving registered players in Bangladesh. As the operator of the Platform, basa3 acts as the data controller in respect of the personal information you provide to us or that we collect in the course of your use of our services.

We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection principles. This Privacy Policy describes our practices in detail, including the categories of data we collect, the purposes for which we use it, the parties with whom we may share it, the period for which we retain it, and the rights you hold as a data subject.

This Policy applies to all personal data collected through the basa3 Platform, including but not limited to registration data, betting and gaming activity, payment transactions, customer support interactions, and data collected via cookies and similar tracking technologies.

2 Data We Collect

basa3 collects personal data in several categories depending on your interaction with the Platform. The following table summarises the key categories of personal data we collect and their primary purpose:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where strictly required by applicable law or regulatory obligation (for example, facial matching as part of advanced KYC verification).

3 How We Collect Data

3.1 Directly From You

The majority of personal data basa3 holds is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are responsible for ensuring that all data you provide is accurate, current, and complete.

3.2 Automatically Through the Platform

When you access and use the basa3 Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This data is collected from the moment you visit basa3.io, regardless of whether you are logged into an Account. See Section 7 for details of our cookie practices.

3.3 From Third-Party Service Providers

We may receive personal data about you from third parties in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) may share transaction confirmation data and wallet identifiers with us to verify and complete payment instructions.
• KYC Verification Partners: Third-party identity verification services may return verification outcomes and document authenticity results to us as part of the KYC process.
• Fraud Prevention Services: Specialist anti-fraud platforms may share risk scores, flagged device fingerprints, or known fraudulent identifiers to assist us in protecting the Platform.
• Analytics Providers: Aggregated, anonymised usage data may be received from analytics platforms that help us understand how players interact with the Platform.

3.4 From Publicly Available Sources

In limited circumstances, basa3 may cross-reference information you have provided against publicly available sources — such as sanctions screening lists, politically exposed persons (PEP) databases, or adverse media — in order to comply with applicable anti-money laundering obligations.

4 Why We Use Your Data

basa3 uses the personal data it collects for the following clearly defined purposes:

• Account Registration and Management: To create and maintain your basa3 Account, verify your identity, and manage your Account settings and preferences.
• Age and Identity Verification: To confirm that you meet the 21+ age requirement and are eligible to use the Platform under our Terms & Conditions.
• Processing Transactions: To credit deposits to your Account balance, process withdrawal requests to your registered payment method, and maintain an accurate transaction history in BDT.
• Service Delivery: To provide access to all betting markets, casino games, live dealer tables, and other Platform features available to registered players.
• Responsible Gaming Monitoring: To monitor betting and gaming behaviour for signs of problem gambling, enforce deposit limits and cooling-off periods, and respond to self-exclusion requests.
• Fraud Detection and Security: To identify and prevent fraudulent activity, money laundering, collusion, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: To send you relevant promotions, bonus offers, and Platform updates — but only where you have consented to receive such communications. You may withdraw consent at any time.
• Legal and Regulatory Compliance: To meet obligations under applicable law, including anti-money laundering (AML), know-your-customer (KYC), and data retention requirements.
• Platform Improvement: To analyse usage patterns, identify technical issues, and enhance the overall user experience on basa3.io.

5 Legal Basis for Processing

basa3 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and basa3 — specifically to register and manage your Account, process deposits and withdrawals, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing is necessary for basa3 to comply with applicable legal requirements, including KYC verification, AML screening, sanctions compliance, and mandatory data retention obligations.
• Legitimate Interests: Processing is necessary for basa3's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and improving our services — provided these interests do not override your fundamental data protection rights.
• Consent: Where processing is based on your consent — most notably for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing

6.1 Who We Share Data With

basa3 does not sell your personal data to third parties. We share your data only where necessary and only with the following categories of recipient:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposit and withdrawal transactions.
• KYC and Identity Verification Services: Third-party verification platforms that authenticate identity documents and confirm age eligibility on our behalf.
• Fraud Prevention and Risk Management Platforms: Specialist services that help us detect and prevent fraudulent activity, multi-accounting, and money laundering.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data and game interaction data necessary to deliver and settle game rounds.
• IT and Infrastructure Providers: Hosting, cloud storage, and cybersecurity providers that support the technical operation of the Platform. All such providers are bound by data processing agreements requiring them to maintain appropriate security standards.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory demand, basa3 may disclose personal data to competent authorities. We will notify you of such disclosure where we are legally permitted to do so.

6.2 International Transfers

Some of the third-party service providers with whom we share data may be located outside Bangladesh. Where personal data is transferred internationally, basa3 takes appropriate steps to ensure that your data receives a level of protection equivalent to that afforded within Bangladesh, including the use of contractual safeguards and data processing agreements with all recipient organisations.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. basa3 uses cookies and similar technologies (including local storage objects and session tokens) to operate the Platform, maintain your login session, remember your preferences, and gather analytical data about how the Platform is used.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential to the operation of the Platform. They enable core functions such as maintaining your logged-in session, remembering your Account currency setting (BDT), and ensuring the security of your connection. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors interact with basa3.io — which pages are visited most frequently, where users arrive from, and how long sessions last. This data helps us improve the Platform experience for all Bangladeshi players.
• Functionality Cookies: These cookies remember choices you make — such as your preferred game category, notification settings, or display language — to personalise your experience on return visits.
• Targeting and Marketing Cookies: Where you have consented, these cookies track your browsing activity to enable personalised promotional communications relevant to your interests and betting habits on the Platform.

7.3 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies, restrict specific cookie types, or alert you when cookies are being set. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features, including logging in to your basa3 Account. Disabling analytics or marketing cookies will not impair core functionality.

8 Data Retention

basa3 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction.
• Betting and Gaming Activity Records: Retained for a minimum of 3 years from the date of each betting or gaming session.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, or longer where a dispute remains unresolved.
• Marketing Preference Records: Retained for the lifetime of your Account and for 1 year following Account closure or opt-out, to evidence your consent or withdrawal of consent.
• Technical and Log Data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Where personal data is no longer required for any of the above purposes and no legal retention obligation applies, basa3 will securely delete or anonymise the data as promptly as practicable.

9 Data Security

basa3 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and basa3.io is protected by industry-standard SSL/TLS encryption. Look for the padlock icon in your browser's address bar when using the Platform.
• Encrypted Data Storage: Sensitive data — including financial information and identity documents — is stored in encrypted form at rest, using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within basa3 is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific role. All internal access is logged and audited.
• Two-Step Verification: basa3 offers two-step verification (2FA) to all registered players via their Bangladesh mobile number. We strongly recommend enabling 2FA to add an additional layer of security to your Account.
• Fraud Monitoring: Automated fraud detection systems continuously monitor Account activity for unusual patterns, multiple login attempts, and suspicious transaction behaviour.
• Regular Security Reviews: basa3 conducts periodic security reviews and vulnerability assessments of the Platform infrastructure to identify and remediate potential weaknesses.

While basa3 takes all reasonable precautions to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data security incident that affects your personal data, basa3 will notify you promptly and take all appropriate remedial action.

10 Your Rights

As a registered player and data subject, you hold the following rights in respect of the personal data basa3 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of the personal data basa3 holds about you, along with information about how it is used, where it is stored, and with whom it has been shared. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Where you are able to update your own Account information (such as contact details) through the Account Settings page, we encourage you to do so directly.
• Right to Erasure: In certain circumstances, you have the right to request that basa3 delete your personal data. This right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for a minimum of 5 years and cannot delete them on request during that period.
• Right to Restriction of Processing: You may request that basa3 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and the outcome of that objection is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of the personal data you have provided to basa3 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where basa3 relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

basa3 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

11 Children's Privacy

basa3 employs age verification as a mandatory step in the Account registration process. Players are required to confirm their date of birth during registration and may be required to submit documentary proof of age as part of KYC verification before any withdrawal can be processed. We take underage gambling prevention seriously and will report confirmed cases to relevant authorities.

12 Third-Party Links

The basa3 Platform may contain references to third-party game providers, payment partners, and sports data services. While we take care to work only with reputable partners, basa3 does not control the privacy practices of third-party organisations and is not responsible for the content of their websites or the way in which they handle personal data.

Where the Platform integrates third-party game content — for example, live dealer tables streamed by Evolution Gaming or Ezugi, or slot games from Pragmatic Play — your gameplay interactions within those environments may be subject to the relevant studio's own data practices in addition to this Privacy Policy. We encourage you to review the privacy policies of any third-party provider whose services you access through the basa3 Platform.

13 Changes to This Privacy Policy

basa3 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new sharing arrangement — we will provide at least 7 days' advance notice to registered players via email or a prominently displayed Platform notification before the changes take effect.

The effective date shown at the top of this Policy will be updated each time a revision is published. Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request Account closure in accordance with the Terms & Conditions.

We recommend bookmarking this page and reviewing it periodically to stay informed of how basa3 manages your personal data.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the basa3 data team using the details below:

For general account support, payment queries, and game-related questions, please visit our FAQ page or contact our 24/7 support team at the same email address.