bass88 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how bass88 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to registered players and visitors to the Platform (collectively, "you", "your").

1.2 By registering an account on bass88 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein and consent to the processing of your personal data as set out in this Policy.

1.3 This Policy should be read together with the bass88 Terms & Conditions and the Responsible Gaming policy, each of which forms part of the overall agreement between you and bass88.

1.4 This Policy applies to all personal data collected through the bass88 website, mobile interface, application, live-chat system, email correspondence, and any other channel through which you interact with the Platform.

2. Data We Collect

2.1 bass88 collects the following categories of personal data in connection with the operation of the Platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued ID number	Account registration, age and identity verification
Contact Data	Email address, mobile number, residential address	Account communications, support, notifications
Financial Data	bKash/Nagad/Rocket account numbers, transaction reference IDs, deposit and withdrawal amounts	Payment processing, fraud prevention, financial reconciliation
Technical Data	IP address, device type, browser type and version, operating system, screen resolution	Platform security, fraud detection, service optimisation
Usage Data	Pages visited, games played, bet history, session duration, click-path data	Platform improvement, responsible gaming monitoring, personalisation
Communications Data	Support tickets, live-chat transcripts, email correspondence	Dispute resolution, quality assurance, compliance
Verification Documents	Passport scan, national ID scan, utility bill, bank statement	Know-Your-Customer (KYC) compliance, withdrawal authorisation

2.2 We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming self-exclusion purposes, in which case it is processed with your explicit consent and protected accordingly.

3. How We Collect Data

3.1 bass88 collects personal data through the following methods:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated collection: Data collected automatically when you use the Platform, including via cookies, server logs, and tracking technologies (see Section 7);
• Third-party sources: Data received from payment processors (bKash, Nagad, Rocket, Upay), identity verification service providers, and fraud-prevention databases in order to verify your identity and protect the integrity of the Platform.

4. Legal Basis for Processing

4.1 bass88 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the gaming services you have requested;
• Legal obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, and other applicable legal and regulatory duties;
• Legitimate interests: Processing carried out to protect the security of the Platform, detect and prevent fraud and collusion, improve the quality of our services, and conduct internal analytics — where these interests are not overridden by your rights;
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent, such as the sending of marketing communications or the handling of sensitive responsible gaming data. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

5.1 bass88 uses the personal data we collect for the following purposes:

• Creating, verifying, and managing your player account;
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods;
• Verifying your age and identity to comply with our 18+ policy;
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited conduct;
• Monitoring gameplay for responsible gaming indicators and applying player protection tools where appropriate;
• Providing customer support and resolving disputes;
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts;
• Sending promotional communications about bonuses, offers, and platform updates — only where you have given consent or where permitted by applicable law;
• Conducting internal analytics to improve the Platform's performance, usability, and game offering;
• Complying with legal obligations and responding to lawful requests from competent authorities.

5.2 bass88 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is necessary for fraud prevention and is subject to appropriate safeguards.

6. Sharing Your Data

6.1 bass88 does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• Payment processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, and other payment partners solely to process your transactions. These processors are contractually bound to handle your data securely and in accordance with applicable data protection standards;
• Identity verification providers: We share identity documents with accredited KYC service providers to verify your age and identity as required by our platform policies;
• Fraud prevention services: We may check your data against fraud-detection databases to protect the integrity of the Platform and the interests of our player community;
• IT and infrastructure providers: Third-party hosting, cloud storage, and software providers who process data on our behalf under strict data-processing agreements;
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law or a valid legal process;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.2 All third parties with whom bass88 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the purposes specified by bass88.

7. Cookies & Tracking Technologies

7.1 bass88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies may be set when you visit bass88:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting your ability to use the Platform;
• Functional Cookies: Used to remember your preferences such as language settings, display options, and last-visited game categories, improving your experience on return visits;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, including which pages are visited most frequently and where players encounter errors. This data helps us improve the Platform;
• Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your login session and game state during an active visit.

7.2 You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to remain logged in or access certain features.

7.3 bass88 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with unrelated advertising networks.

8. Data Retention

8.1 bass88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of the account and for a minimum of five years following account closure, to meet anti-money laundering record-keeping obligations;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• KYC documents: Retained for a minimum of five years following account closure or the completion of the relevant transaction, whichever is later;
• Support correspondence: Retained for three years from the date of the last communication in a given support thread;
• Analytics and usage data: Retained in anonymised or aggregated form indefinitely; individually identifiable usage data is deleted after 24 months.

8.2 When data is no longer required and no legal obligation exists to retain it, bass88 will securely delete or irreversibly anonymise the data so that it can no longer be attributed to an identifiable individual.

9. Data Security

9.1 bass88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including payment method details and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific role;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication options for player accounts;
• Intrusion detection systems and real-time monitoring for anomalous activity.

9.2 While bass88 takes all reasonable precautions to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we will notify affected players and take appropriate remedial action in the event of a confirmed data breach that poses a risk to your rights.

9.3 You are responsible for maintaining the security of your account credentials. Do not share your password with any third party. If you suspect your account has been compromised, contact [email protected] immediately.

10. International Data Transfers

10.1 bass88 operates as an offshore gaming platform. Some of the third-party service providers we use — including payment processors, KYC verification services, and cloud infrastructure providers — may be located outside Bangladesh. Where personal data is transferred internationally, bass88 ensures that appropriate safeguards are in place, such as contractual data protection clauses, to protect your data to a standard equivalent to that described in this Policy.

10.2 By using the Platform, you consent to the transfer of your personal data to service providers located outside your country of residence, subject to the safeguards described in this section.

11. Your Rights

11.1 Subject to applicable law, you have the following rights in relation to your personal data held by bass88:

• Right of Access: You may request a copy of the personal data bass88 holds about you, along with information about how it is used;
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that we temporarily restrict the processing of your personal data while a correction request or objection is being considered;
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contract;
• Right to Object: You may object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the rights listed above, please contact us in writing at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

11.3 bass88 will not charge a fee for handling a rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation.

12. Children's Privacy

12.1 The bass88 Platform is strictly for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will immediately close the associated account and delete all related data.

12.2 If you believe that a person under the age of 18 has registered an account on bass88, please notify us immediately at [email protected] so that we can take prompt action.

13. Third-Party Links

13.1 The Platform may contain references to payment partners and game providers whose services are integrated within bass88. These third-party services operate under their own privacy policies, and bass88 is not responsible for the data practices of third-party providers once data leaves our controlled environment.

13.2 We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of bass88.

14. Policy Amendments

14.1 bass88 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players via the email address associated with their account or via an on-platform notification, at least 14 days before the changes take effect.

14.2 The "Last Updated" date at the top of this Policy will be revised each time changes are made. We encourage you to review this page periodically so that you remain informed about how we protect your data.

14.3 Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

15. Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the bass88 Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request — [Your Username]"
• Response target: Within 30 days of receipt of a valid written request
• Support hours: 24 hours a day, 7 days a week

15.2 bass88 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy request, you may seek further recourse through applicable legal channels in your jurisdiction.