Privacy Policy — basa29 Data Commitment

1. Introduction

basa29 ("the Platform", "we", "us", "our") operates the basa29 website and associated mobile platform as an online casino and sports betting service targeting players in Bangladesh. In the course of providing our Service, we collect and process certain personal data relating to our registered users ("Players", "you", "your").

This Privacy Policy sets out in full the categories of personal data we collect, the purposes for which we process that data, the legal bases that justify our processing activities, the circumstances under which data may be shared with third parties, and the rights you hold over your personal data. This Policy applies to all data collected through the basa29 website, mobile platform, customer support channels, and any other touchpoint through which you interact with basa29.

This Privacy Policy should be read together with the basa29 Terms & Conditions, which govern the overall use of the platform. Where this Policy and the Terms & Conditions address the same subject matter, both documents apply concurrently unless expressly stated otherwise.

2. Data We Collect

basa29 collects personal data through several distinct channels. The categories of data we collect, and the circumstances in which each category arises, are set out below.

2.1 Registration Data

When you create a basa29 account, we collect the following information:

• Full legal name
• Date of birth
• Residential address (including city, district, and postcode)
• Mobile phone number
• Email address
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect:

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill or bank statement issued within 90 days)
• Proof of payment method ownership (screenshots of mobile banking accounts such as bKash or Nagad, or bank statements)
• Selfie photographs for facial verification purposes where required

2.3 Transaction Data

We collect records of all financial transactions conducted through the basa29 platform, including:

• Deposit amounts, dates, times, and payment methods used (bKash, Nagad, Rocket, Upay, bank transfer)
• Withdrawal requests, amounts, processing status, and destination payment details
• Bonus credits awarded, wagering progress, and bonus expiry records
• Game stakes, winnings, and account balance history

2.4 Technical & Usage Data

When you access the basa29 platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Referring URL (the page from which you navigated to basa29)
• Cookie identifiers and similar tracking data (see Section 6)

2.5 Communications Data

We retain records of all communications between you and the basa29 support team, including support tickets, live chat transcripts, and emails sent to [email protected]. These records are retained for quality assurance, training, and dispute resolution purposes.

3. How We Use Your Data

basa29 processes personal data for the following specific purposes:

3.1 Account Management

Your registration data is used to create, maintain, and secure your basa29 account. This includes processing your login, managing your account settings, communicating important account updates, and enforcing account security measures such as OTP verification.

3.2 Identity Verification & Fraud Prevention

KYC data is processed to verify your identity, confirm your age eligibility (18+ requirement), and detect and prevent fraudulent activity, money laundering, and the operation of duplicate accounts. basa29 has a legal and operational obligation to conduct these checks.

3.3 Payment Processing

Transaction data is processed to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking channels, to apply bonus credits, and to maintain accurate financial records for each account. This processing is essential to the performance of our service agreement with you.

3.4 Responsible Gaming

basa29 uses account activity data, including gameplay frequency, session duration, and deposit patterns, to identify players who may be exhibiting signs of problem gambling behaviour. This data is used to proactively offer responsible gaming tools such as deposit limits and self-exclusion, and to comply with our responsible gaming obligations.

3.5 Platform Improvement & Analytics

Aggregated and anonymised technical and usage data is analysed to understand how players interact with the basa29 platform, to identify areas for improvement, to optimise game selection and user interface design, and to troubleshoot technical issues. This data is processed in a form that does not identify individual players.

3.6 Marketing Communications

Where you have provided explicit consent to receive marketing communications, basa29 may send you promotional emails or SMS messages relating to new games, bonus offers, and seasonal promotions relevant to the Bangladesh market. You may withdraw consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing message.

4. Legal Basis for Processing

basa29 processes personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary for the performance of the service agreement between basa29 and the Player — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations — including identity verification, anti-money laundering checks, and the maintenance of financial transaction records.
• Legitimate interests: Processing carried out in pursuit of basa29's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing

basa29 does not sell or rent your personal data. We may share your data only in the following circumstances:

5.1 Service Providers

basa29 engages third-party service providers who assist in the delivery of the platform, including payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification providers, game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and cloud infrastructure providers. All service providers are contractually required to process personal data only on basa29's instructions and to maintain appropriate security standards.

5.2 Legal & Regulatory Disclosure

basa29 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. basa29 will, where legally permissible, notify the affected Player of any such disclosure request.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of basa29's business, personal data held by basa29 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to the applicable privacy policy before the transfer takes effect.

6. Cookies & Tracking Technologies

basa29 uses cookies and similar tracking technologies to enhance the functionality of the platform and to collect usage data for analytics purposes. The categories of cookies we use are described below:

6.1 Essential Cookies

These cookies are strictly necessary for the basa29 platform to function. They enable core features such as session management, login state preservation, and security token validation. Essential cookies cannot be disabled without materially impairing your ability to use the platform.

6.2 Analytics Cookies

Analytics cookies allow basa29 to collect aggregated data about how players interact with the platform — including which pages are visited most frequently, how long sessions last, and where players navigate after visiting particular pages. This data is used exclusively to improve the basa29 platform and is not used to identify individual players.

6.3 Preference Cookies

Preference cookies store your platform settings — such as your preferred language and display preferences — so that the platform remembers your choices between sessions. These cookies improve your experience but are not essential to platform function.

6.4 Managing Cookies

You may manage your cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies may prevent you from accessing certain features of the basa29 platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

7. Data Security

basa29 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and basa29 servers.
• Encryption at rest for sensitive personal data including identity documents and payment details stored on basa29 infrastructure.
• Access controls limiting access to personal data to authorised basa29 personnel on a strict need-to-know basis, with role-based permissions and audit logging.
• Two-factor authentication available for all player accounts and mandatory for basa29 administrative systems.
• Regular security assessments including penetration testing and vulnerability scanning of the basa29 platform infrastructure.
• Incident response procedures for the prompt identification, containment, and remediation of any data security incidents, including timely notification to affected players where required.

While basa29 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying basa29 immediately if you believe your account has been compromised.

8. Data Retention

basa29 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by applicable law. The retention periods applicable to each category of data are set out in the table in Section 2 above.

Where an account is closed — whether at your request or by basa29 — basa29 will retain your personal data for a period of five years following closure to meet its financial record-keeping, anti-money laundering, and dispute resolution obligations. Transaction records are retained for seven years in accordance with applicable financial record-keeping requirements.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for platform analytics and improvement purposes.

9. Your Rights

As a basa29 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact basa29 at [email protected] with your full name, registered email address, and a description of your request. basa29 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data basa29 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by basa29 be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to basa29's legal retention obligations.
• Right to Restriction of Processing: You have the right to request that basa29 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes. basa29 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

10. Children's Privacy

The basa29 platform is intended exclusively for adults aged 18 years and above. basa29 does not knowingly collect or process personal data from any person under the age of 18. If basa29 discovers that it has inadvertently collected data from a minor, all such data will be permanently deleted and the associated account will be immediately closed.

If you believe that a minor has accessed or registered on the basa29 platform, please contact basa29 support immediately at [email protected] so that the matter can be investigated and resolved without delay. basa29 takes the protection of minors extremely seriously and operates robust age verification procedures to prevent underage access to its platform.

11. Third-Party Links

The basa29 platform may contain references to third-party game providers, payment processors, and other services. This Privacy Policy applies solely to data collected and processed by basa29 directly. basa29 is not responsible for the privacy practices of any third-party service provider or platform, and we encourage you to review the privacy policies of any third parties with which you interact in connection with your use of the basa29 Service.

12. Policy Updates

basa29 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. Where amendments are material, basa29 will notify registered players via their registered email address at least 14 days before the changes take effect.

The effective date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the basa29 platform following any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the platform and may request account closure by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way basa29 handles your personal data, please contact the basa29 Data Privacy team using the details below:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: basa29 aims to respond to all privacy-related enquiries within 30 days of receipt

Please note that the [email protected] address above is displayed as plain text. Copy the address manually into your email client — do not use a mailto: link. basa29 support is available around the clock to assist with any privacy concerns you may have.