basa99 Privacy Policy

1. Who We Are

1.1. basa99 (referred to in this policy as "basa99", "we", "us", or "our") operates the online gaming and sports betting platform accessible at basa99.app. We act as the data controller in respect of all personal data collected through the platform.

1.2. If you have any questions or concerns about this Privacy Policy or our data practices, you may contact our dedicated privacy team by email at [email protected]. Our support team operates 24 hours a day, seven days a week, with an average response time under three minutes.

2. Data We Collect and How We Collect It

2.1. Information you provide directly. When you register a basa99 account, we collect your full name, date of birth, mobile number, email address, and where required for identity verification, a copy of your National Identity Card (NID) or equivalent government-issued document. When you make a deposit or request a withdrawal, we record your payment wallet details (such as your bKash, Nagad, or Rocket number) and transaction amounts.

2.2. Information collected automatically. When you access the basa99 platform, our systems automatically collect certain technical data including your IP address, device type, operating system, browser type and version, referring URL, and pages or game sessions accessed. This data is collected through server logs, session tokens, and first-party cookies.

2.3. Information from identity verification. Where we are required to verify your identity — for example, when processing a withdrawal above a specified threshold or upon receipt of a suspicious activity alert — we may request and retain copies of identity documents. These documents are stored in an encrypted document management system with strictly controlled access.

2.4. Information from third parties. In limited circumstances, we may receive information about you from third-party service providers such as payment processors or fraud prevention agencies. Any such data is handled with the same degree of care as data collected directly from you.

3. How We Use Your Data

3.1. To provide and operate the platform. We use your identity and contact data to create and manage your account, authenticate your login sessions, and allow you to place bets and play casino games on basa99.

3.2. To process payments. Your financial data is used exclusively to execute deposit and withdrawal transactions via your registered payment method. basa99 does not store full wallet credentials beyond what is necessary for transaction matching and reconciliation.

3.3. To verify age and identity. Bangladeshi law and our platform policies require that all players are 21 years of age or older. We use identity data, and where necessary identity documents, to verify that this requirement is satisfied before funds are released or bonuses are applied.

3.4. To prevent fraud and maintain security. Technical data — including IP addresses, device fingerprints, and login patterns — is analysed by our security team to detect suspicious activity, prevent account takeovers, identify duplicate accounts, and protect the integrity of games and betting markets.

3.5. To provide customer support. When you contact our support team, we use your account information, transaction history, and communications data to understand your query and provide an accurate, timely response. Support transcripts are retained for a period of two years for quality assurance and dispute resolution purposes.

3.6. To improve the platform. Aggregated, anonymised usage data — such as which game categories attract the most sessions or which deposit methods are most popular — is used to guide product development decisions. This data cannot be used to identify any individual player.

3.7. To comply with legal obligations. In certain circumstances, basa99 may be legally required to retain, process, or disclose personal data in response to lawful requests from competent authorities. We will always assess such requests for lawfulness before complying and will notify affected players to the extent permitted by law.

4. Legal Basis for Processing

4.1. basa99 processes your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are:

• Contractual necessity: Processing required to perform the contract between basa99 and you — including account creation, payment processing, and game delivery.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and aggregate analytics, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing necessary to comply with applicable laws, regulatory requirements, or lawful orders from competent authorities.
• Consent: Where we rely on your consent — for example, for sending promotional communications — you may withdraw that consent at any time by contacting support or updating your account notification preferences.

5. Sharing Your Data

5.1. basa99 does not sell your personal data to any third party under any circumstances.

5.2. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners — to execute and verify your transactions.
• Game software providers: Including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — who may receive technical session data necessary to deliver live games.
• Fraud and security vendors: Third-party services that analyse technical signals to flag suspicious behaviour. These vendors process only pseudonymised data and are prohibited from using it for their own purposes.
• Regulatory or law enforcement authorities: Where required by a lawful order or legal obligation, as described in Section 3.7 above.

5.3. All third-party data processors engaged by basa99 are subject to written data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only as instructed by basa99.

6. Cookies and Tracking Technologies

6.1. basa99 uses first-party cookies — small text files stored on your device — for the following purposes:

• Session cookies: To keep you logged in during your browsing session. These expire when you close your browser.
• Preference cookies: To remember display preferences such as your language or notification settings across sessions.
• Security cookies: To protect your account from cross-site request forgery (CSRF) and session hijacking attacks.
• Analytics cookies: To collect anonymised, aggregated data about how players navigate the platform. No personally identifiable information is included in analytics reports.

6.2. basa99 does not use third-party advertising cookies, pixel trackers, or cross-site retargeting technologies. You will not see basa99 advertisements following you across other websites as a result of our cookie practices.

6.3. You may disable cookies in your browser settings; however, doing so will prevent certain platform features — including persistent login — from functioning correctly.

7. Data Retention

7.1. basa99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Our standard retention periods are:

• Account data: Retained for the lifetime of the account and for a period of five years following account closure.
• Transaction records: Retained for seven years to satisfy financial record-keeping requirements.
• Support communications: Retained for two years from the date of the last interaction.
• Technical/log data: Retained for 90 days from collection, after which it is automatically purged from active systems.
• Identity verification documents: Retained for five years from the date of verification or account closure, whichever is later.

7.2. When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual.

8. Your Rights

8.1. As a basa99 player, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of all personal data basa99 holds about you. We will respond within 30 days of a valid request.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data held on your account.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request deletion of your personal data. Note that we may be unable to delete data we are legally required to retain.
• Right to restriction: You may ask us to restrict processing of your data while a correction or objection request is under review.
• Right to object: You may object to our processing of your data where we rely on legitimate interests as the legal basis, including for direct marketing purposes.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to basa99, to transfer to another service if you wish.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8.2. To exercise any of these rights, contact our support team at [email protected]. We may need to verify your identity before processing your request. There is no charge for exercising your rights in most circumstances.

9. Data Security

9.1. basa99 implements a layered security architecture to protect your personal data from unauthorised access, loss, or disclosure. Our technical safeguards include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including stored identity documents and financial records.
• Multi-factor authentication requirements for all administrative access to production systems.
• Regular penetration testing and security audits conducted by independent specialists.
• Automated intrusion detection and real-time alerting systems monitored by our security team around the clock.

9.2. Despite these measures, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your basa99 account, enable any available two-factor authentication, and notify support immediately if you suspect unauthorised access.

9.3. In the event of a confirmed data breach affecting your personal information, basa99 will notify you via the contact details registered on your account within a reasonable timeframe, describing the nature of the incident, data affected, and remedial steps taken.

10. Children and Minors

10.1. The basa99 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account and delete all associated personal data, retaining only what is required by law.

10.2. If you believe a minor has accessed or registered on basa99, please contact our support team immediately at [email protected] so we can investigate and take appropriate action without delay.

11. Changes to This Privacy Policy

11.1. basa99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will post the revised policy on the platform and notify registered players via email or an in-platform notice.

11.2. The date at the top of this document indicates when the policy was last updated. We encourage you to review this page periodically. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the updated terms.

12. Contact Us

12.1. For any questions, concerns, or requests relating to this Privacy Policy or the personal data basa99 holds about you, please reach out to our support team. We are available 24 hours a day, seven days a week, including all Bangladeshi public holidays such as Victory Day, Independence Day, and Eid.

12.2. Contact email: [email protected]
Response time: under 3 minutes on average
Hours: All days, Bangladesh Standard Time (UTC+6)