Legal Information · Data Protection
Everything about what personal data bas8a collects, why it is collected, and how securely it is stored is explained here in plain English. We believe transparency is the strongest form of security.
A quick overview of the steps bas8a has taken to keep your personal information safe.
All data transfers use TLS 1.3 protocol. Stored data is encrypted with AES-256 — the same security standard used in the banking sector.
Bas8a never sells your personal data to third parties. No data is shared with advertising companies or data brokers.
Servers are monitored around the clock. Regular security audits are conducted. Backup systems are stored in separate, secured locations to eliminate the risk of data loss.
We only collect what is necessary to provide our services — nothing more. We do not request unnecessary personal information. We follow a strict data minimisation policy.
You have the right to view, correct, or request deletion of your personal data. To stop marketing notifications, you can do so at any time through your settings.
You will always be told clearly what each cookie does. All non-essential cookies are only active with your consent. You can delete cookies from your browser at any time.
This privacy policy applies to all users of the bas8a website (bas8a.click) and mobile app. By using the platform, you agree to this policy. For questions: support@bas8a.click
Bas8a collects only the data necessary to operate its services. This data comes from three sources:
1. Information you provide directly:
2. Automatically Collected Information:
3. Information received from third parties:
There is a specific reason behind every piece of data we collect. Nothing is gathered arbitrarily:
| Data type | Why it's needed |
|---|---|
| Name & Date of Birth | To verify age and confirm account identity |
| Mobile Number | Sending OTPs, security alerts, and support communications |
| Payment Information | To process deposits and withdrawals |
| National ID Card | To comply with KYC verification and financial regulations |
| IP Address | To detect fraud and maintain security |
| Usage history | To improve the platform and deliver a personalized experience |
| Device Information | To ensure compatibility and detect unauthorized access |
Your data is not used beyond these purposes. Your consent will be obtained before your information is used for any new purpose.
Bas8a does not sell or share your data with advertisers or data brokers. Limited information is shared only in specific circumstances:
Bas8a's website uses several types of cookies, which fall into three categories:
The mobile app uses device identifiers instead of cookies, serving the same purpose. You can limit tracking through the app's settings.
Bas8a's data retention policy is clear and purpose-driven:
Once the retention period ends, data is securely deleted or anonymised so that no individual can be identified from it.
Every registered user on bas8a has the following rights regarding their personal data:
You can request to see what information bas8a holds about you.
You can request corrections to any inaccurate or outdated information.
You may request deletion of your data where there is no legal obligation to retain it.
You can request that your data no longer be used for specific purposes.
You may request a copy of your data and ask for it to be transferred to another platform.
You can opt out of promotional emails and SMS at any time.
To exercise any of these rights, email us at support@bas8a.click. We typically respond within 30 days.
Bas8a uses a multi-layered security framework to protect user data:
Keep in mind, though, that no one can guarantee 100% security on the internet. On your end, using a strong password and never sharing your OTP with anyone is essential.
Bas8a is strictly for adults aged 18 and over. We do not knowingly collect personal data from minors.
If a minor creates an account using false information and this is later discovered, that account and all associated data will be permanently deleted. Any transactions will be considered void.
If a parent or guardian believes their child has registered on bas8a, please contact us immediately at support@bas8a.click. Action will be taken within 24 hours.
This privacy policy may be updated from time to time due to changes in technology, law, or business operations. When changes are made:
For any privacy-related questions, requests, or complaints:
Bas8a takes your privacy complaints seriously. Once a complaint is submitted, you will receive a reference number to track the status of your case.
For anyone in Dhaka betting via bKash, a common concern is: where does my number and transaction data actually go? Could I start getting spam calls? These are completely valid questions, and bas8a addresses them head-on.
Awareness of digital privacy in Bangladesh is still growing. Many platforms sell user data to third parties — bas8a does not. This isn't just about compliance; we believe that trust is our most valuable long-term asset.
Many users wonder whether sharing their bKash or Nagad number with bas8a is safe. The answer is yes — as long as you're on the correct platform. bas8a uses this number solely to process payments. It is shared with the payment gateway provider only to confirm transactions and goes nowhere else.
Many people are uneasy about the KYC process — does submitting a photo of your National ID put you at security risk? The reality is, that image is used solely to verify your age and identity. It is stored in encrypted form, is not repeatedly accessed by any staff member, and is never shared with third parties. Once the legally required retention period has passed, it is permanently deleted.
If you no longer want to receive emails or SMS messages from bas8a, there's no need to call anyone. Simply go to your account settings and turn off marketing communications under Notification Preferences. You can also click the "Unsubscribe" link at the bottom of any marketing email. Please note that transactional and security-related messages cannot be disabled, as they are sent for your protection.
In the event of a data breach, bas8a is required to notify affected users within 72 hours. The notification will clearly state what type of information was compromised and what steps you need to take. To date, bas8a has had no major data breach incidents — but this policy is already in place should one ever occur.
In short — sharing your information with bas8a is just as safe as sharing it with a well-established bank. The name may not be as widely known, but the security standards are equally rigorous.
The most frequently asked questions about payments and responsible gaming.