basa29 Privacy Policy

1.1 Who We Are

basa29 is an online casino and sports betting platform operated for the benefit of adult players (aged 21 and above) across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are the data controller in respect of all personal data processed under this Policy.

1.2 Scope of This Policy

This Policy covers personal data collected through the basa29 Platform — including the website, mobile-optimised web application, customer support channels, and any promotional communications. It does not cover data practices of third-party services that may be linked from or integrated into the Platform (such as payment providers bKash, Nagad, Rocket, or Upay) — those third parties operate under their own independent privacy policies.

2.1 Data You Provide Directly

When you register a basa29 account, deposit funds, withdraw winnings, or contact our support team, you provide personal data that we collect and process. This includes:

• Full name as registered on your identity document
• Bangladeshi mobile telephone number (used as primary account identifier)
• Date of birth (used for 21+ age verification)
• Residential address (city and district — required at identity verification stage)
• Payment method details — specifically the mobile wallet number associated with your bKash, Nagad, Rocket, or Upay account (we do not store full card numbers for any card-based payment)
• Communications you send to our support team, including chat transcripts and email correspondence directed to [email protected]
• Identity verification documents submitted when requested (e.g., national ID, passport copy)

2.2 Data Collected Automatically

When you access and use the basa29 Platform, certain technical data is collected automatically by our systems. This includes:

• IP address and approximate geographic location derived from IP
• Device type, operating system version, and mobile browser type
• Pages visited, game sessions initiated, betting activity, and session duration
• Date and time stamps of all platform interactions
• Referring URL (if you arrived at basa29 from another website)
• Performance data such as page load times and error logs

2.3 Data From Payment Providers

When you complete a deposit or withdrawal through bKash, Nagad, Rocket, or Upay, basa29 receives a transaction confirmation reference from the relevant payment provider. This reference — which typically includes the transaction ID, amount, and originating wallet number — is logged against your account for record-keeping, fraud prevention, and withdrawal verification purposes. basa29 does not receive or store your full payment provider account credentials or PIN.

4.1 Payment Providers

To process deposits and withdrawals, basa29 shares the minimum necessary transactional data with the relevant payment provider — bKash, Nagad, Rocket, or Upay. This data exchange is required to execute your financial instructions. Each payment provider operates under its own privacy policy and data protection practices.

4.2 Game Providers

Live casino and slot game content on the basa29 Platform is delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session token is passed to the relevant game provider to initialise your game round. Game providers do not receive your full account profile, payment details, or personal contact information.

4.3 Technology and Infrastructure Partners

basa29 uses third-party technology providers for hosting, content delivery, platform analytics, and security monitoring. These providers act as data processors on our behalf and are contractually bound to process personal data only as instructed by basa29, with appropriate security measures in place. They are not permitted to use your data for their own purposes.

4.4 Disclosure Required by Law

basa29 may disclose personal data to authorities or third parties where required to do so by applicable law, court order, or formal regulatory request. In such cases, we will disclose only the minimum data necessary to satisfy the requirement and will notify the affected Member where we are legally permitted to do so.

4.5 No Sale of Personal Data

basa29 does not sell, rent, or trade personal data to any third party for that party's own marketing or commercial purposes. Your data is used solely to operate the Platform, prevent harm, and communicate with you about your account and relevant promotions where you have consented.

5.1 Active Accounts

While your basa29 account remains active, we retain all associated personal data necessary to operate your account, process transactions, and comply with our obligations. You may request deletion of specific data types at any time subject to the limitations described in clause 5.3.

5.2 Closed or Suspended Accounts

Following the closure or suspension of a basa29 account, personal data is retained for a minimum period of five (5) years from the date of closure. This retention period allows basa29 to resolve any outstanding disputes, respond to regulatory enquiries, detect and prevent re-registration by excluded or fraudulent users, and comply with applicable record-keeping requirements.

5.3 Deletion Requests

You may request deletion of your personal data by contacting our support team. basa29 will honour deletion requests to the fullest extent practicable, subject to the following exceptions:

• Data that must be retained to comply with applicable legal obligations
• Data that is necessary to resolve an open dispute or pending withdrawal
• Data related to a self-excluded Member where retention is required to enforce the exclusion
• Anonymised or aggregated data from which you cannot be individually identified

Where a deletion request cannot be fulfilled in full, basa29 will explain which data is retained, for what reason, and for how long.

6.1 Technical Safeguards

basa29 applies industry-standard security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encryption of sensitive data at rest, access controls that restrict personal data access to authorised personnel only, and regular security assessments of our infrastructure.

6.2 Your Responsibilities

The security of your basa29 account also depends on your own practices. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that your registered mobile device is secured against unauthorised use. basa29 will never ask for your password by phone, SMS, or any other channel. If you suspect that your account credentials have been compromised, contact our support team immediately.

6.3 Data Breach Response

In the event of a security incident that affects your personal data, basa29 will take immediate steps to contain the incident, assess its scope, and notify affected Members as promptly as practicable. Notifications will be sent via your registered mobile number and will include a description of the incident, the data affected, and the steps we are taking in response.

7.1 Right to Access

You have the right to request a copy of the personal data that basa29 holds about you. Access requests can be submitted by contacting our support team at [email protected] (plain text — not a clickable link). We will respond to verified access requests within thirty (30) days.

7.2 Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields — such as your registered name or date of birth — correction may require you to submit supporting documentation for verification purposes.

7.3 Right to Deletion

Subject to the retention obligations described in clause 5.3, you have the right to request deletion of your personal data. Please refer to clause 5.3 for the conditions under which basa29 may be required to retain certain data despite a deletion request.

7.4 Right to Withdraw Consent

Where basa29 processes your data on the basis of your consent — for example, for promotional communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for promotional messages, update your preferences in your account settings or contact our support team.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. basa29 will review any objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary to establish, exercise, or defend legal claims.

7.6 How to Contact Us

All data rights requests should be directed to our support team. Please include your registered mobile number and a brief description of your request. Contact details: [email protected] (plain text only — not a clickable link). We aim to acknowledge all requests within two (2) business days and resolve them within thirty (30) days.

8.1 Use of Cookies

The basa29 Platform uses cookies and similar technologies to maintain session state, remember your login, and collect anonymous usage analytics. Essential cookies (required to keep you logged in and to secure your session) are always active. Analytics cookies, which help us understand how Members interact with the Platform so we can improve it, may be managed through your browser settings. Disabling essential cookies may prevent certain Platform features from functioning correctly.

8.2 Updates to This Policy

basa29 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify Members via in-platform announcement or registered mobile number at least seven (7) days before the revised Policy takes effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

8.3 Links to Other Policies

This Privacy Policy should be read alongside the basa29 Terms & Conditions and Responsible Gaming Policy, both of which are available via the links in the footer of this page. Together, these three documents govern your relationship with the basa29 Platform.