basa99 Privacy Policy
Your privacy is a priority at basa99. This Privacy Policy explains exactly what personal data we collect when you use our platform, why we collect it, how it is stored and protected, and what rights you have over your own information. We are committed to handling your data with transparency and care.
Every page and transaction on basa99 is protected by 256-bit SSL encryption. Whether you are logging in, depositing via bKash, or browsing our cricket markets, your data is encrypted end-to-end at all times.
basa99 gives you full visibility and control over your personal data. You can request access, correction, or deletion of your information at any time by contacting our support team at [email protected].
basa99 does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely to operate the platform, verify your identity, process payments, and improve your experience.
When you use bKash, Nagad, Rocket, Upay, or DBBL to deposit or withdraw, basa99 stores only the minimum payment reference data required to process and verify your transactions. Full wallet credentials are never retained on our servers.
We do not hold your data indefinitely. basa99 follows clearly defined data retention schedules. Account data is retained for the duration of your active account plus a defined post-closure period in line with standard compliance requirements.
basa99 uses cookies strictly for session management, security, and anonymous analytics. We do not deploy invasive third-party advertising trackers. You can manage your cookie preferences through your browser settings at any time.
Please read this Privacy Policy carefully. By registering an account or continuing to use the basa99 platform, you confirm that you have read and understood how we collect and process your personal data as described below. If you do not agree with any part of this policy, please discontinue use and contact us to request account closure.
1 Data We Collect
basa99 collects personal data from you in order to provide, operate, maintain, and improve the platform. We only collect data that is genuinely necessary for one or more of the purposes described in this Privacy Policy. The categories of personal data we collect are set out below.
1.1 Data You Provide Directly
When you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you voluntarily provide us with personal information that may include:
- Identity data: Full legal name, date of birth, gender (where provided);
- Contact data: Email address, mobile phone number, residential address;
- Account credentials: Username and encrypted password (passwords are never stored in plain text);
- Identity verification documents: National ID card (NID), passport, or driver's licence scans submitted during KYC;
- Payment data: Mobile wallet account references for bKash, Nagad, Rocket, Upay, and DBBL bank transfer — we do not store full payment credentials, only the minimum reference needed to process transactions;
- Communications data: Any messages, complaints, feedback, or support requests you send to our team via live chat or email.
1.2 Data Collected Automatically
When you access and use the basa99 platform, certain technical and behavioural data is collected automatically by our systems:
- Device data: Device type, operating system, browser type and version, screen resolution;
- Network data: IP address, internet service provider (ISP), approximate geographic location derived from IP (city/country level only — we do not use GPS or precise location tracking);
- Usage data: Pages visited, games accessed, bets placed, session duration, click patterns, and navigation paths within the platform;
- Transaction data: Deposit and withdrawal history, bet history, bonus activity, account balance changes;
- Cookie and tracking data: Session tokens, authentication cookies, and anonymous analytics data — see Section 4 for full details.
1.3 Data from Third Parties
In certain circumstances, basa99 may receive personal data about you from third parties, including:
- Payment providers: Transaction confirmation and status data from bKash, Nagad, Rocket, Upay, and DBBL;
- Identity verification services: Results of document verification checks performed by our KYC partners;
- Fraud prevention services: Risk signals from fraud detection platforms used to protect the integrity of the platform;
- Game providers: Anonymised game result and RTP data from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — this data does not include personally identifiable information beyond your basa99 player ID.
basa99 never collects sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data for identification purposes. If any document submitted during KYC incidentally contains such data (e.g., a religious category on a national ID), that data is not processed or retained beyond the verification check.
2 How We Use Your Data
basa99 processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the purposes described at the time of collection. The table below summarises the primary purposes for which we use your data and the legal basis for each.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Identity, contact, credentials | Contract performance |
| Processing deposits and withdrawals | Payment data, identity data | Contract performance |
| Verifying your identity (KYC) | Identity documents, date of birth | Legal obligation / compliance |
| Providing customer support | Contact data, communications data | Contract performance |
| Fraud detection and prevention | Network data, transaction data, device data | Legitimate interest |
| Responsible gaming monitoring | Usage data, transaction data | Legal obligation / legitimate interest |
| Sending account and transaction notifications | Contact data | Contract performance |
| Sending promotional communications | Contact data, usage data | Consent (opt-in) |
| Improving platform performance and UX | Usage data, device data (anonymised) | Legitimate interest |
| Complying with legal and regulatory requests | All categories as required | Legal obligation |
2.1 Marketing Communications
basa99 will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or special offers if you have actively opted in to receive them during registration or subsequently through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any communications sent prior to that withdrawal.
2.2 Automated Decision-Making
basa99 uses automated systems for certain operational decisions, including fraud risk scoring, account verification status checks, and responsible gaming trigger monitoring. Where an automated process results in a significant decision affecting your account (such as a temporary restriction or a withdrawal hold), you have the right to request a manual review by a member of our compliance team. To exercise this right, contact [email protected] with your account details and the nature of the decision you wish to dispute.
3 Data Sharing
basa99 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of third parties, strictly on a need-to-know basis and solely for the purposes described in this Privacy Policy.
3.1 Service Providers
We engage trusted third-party service providers who process data on our behalf in order to deliver the basa99 platform. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, and DBBL receive transaction data necessary to process your deposits and withdrawals;
- KYC and identity verification providers: Third-party document verification services receive copies of identity documents you submit during the KYC process, solely for the purpose of verifying your identity and age;
- Cloud infrastructure and hosting providers: Our platform is hosted on secure cloud infrastructure. Hosting providers have access to server data but are contractually prohibited from using it for any purpose other than providing hosting services;
- Customer support tools: Live chat and ticketing platform providers process communications data to enable our support team to respond to your queries;
- Analytics providers: We use anonymised, aggregated analytics tools to understand platform usage patterns. These tools do not receive personally identifiable information.
All third-party service providers engaged by basa99 are subject to contractual data processing agreements that require them to handle your data securely, use it only for the specified purpose, and comply with applicable data protection standards.
3.2 Game Providers
To enable you to play casino games and place sports bets, basa99 shares a minimal player identifier (your anonymised basa99 player ID) with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This identifier is used solely to record game outcomes, manage your session within the game environment, and return results to our platform. Game providers do not receive your name, contact details, payment information, or any other personally identifiable data beyond the player ID.
3.3 Legal and Regulatory Disclosure
basa99 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where we believe in good faith that disclosure is necessary to:
- Comply with a legal obligation, court order, or governmental request;
- Investigate, prevent, or take action against suspected money laundering, fraud, match fixing, or other illegal activity;
- Protect the safety and rights of basa99, its employees, its users, or third parties;
- Enforce our Terms & Conditions or other platform policies.
Where permitted by law, basa99 will endeavour to notify you of any such disclosure request before complying, unless doing so would prejudice an investigation or is expressly prohibited by the relevant authority.
3.4 Business Transfers
In the event of a merger, acquisition, sale of assets, or other business reorganisation involving basa99, your personal data may be transferred as part of that transaction. In such circumstances, we will ensure that the receiving entity is bound by privacy obligations no less protective than those in this Privacy Policy, and we will notify affected users via the email address registered to their account prior to any such transfer taking effect.
4 Cookies & Tracking
basa99 uses cookies and similar browser-based technologies to operate the platform, maintain your session, and gather anonymised analytics data that helps us improve the user experience. This section explains what cookies we use, why we use them, and how you can manage them.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the site to recognise your device on return visits, maintain session states, and remember certain preferences. Cookies cannot execute programs or deliver viruses to your device.
4.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, CSRF protection | Session / up to 24 hours | No — platform will not function without these |
| Functional | Remembering your language preference, odds format, and display settings | Up to 30 days | Yes — disabling may affect personalisation |
| Analytics | Anonymous usage statistics — pages visited, session duration, device type | Up to 12 months | Yes — via browser settings |
| Fraud Prevention | Device fingerprinting signals used for detecting suspicious login attempts | Up to 90 days | No — required for platform security |
4.3 Third-Party Cookies
basa99 does not deploy third-party advertising or retargeting cookies. We do not use tracking pixels from social media platforms (Facebook Pixel, Twitter Pixel, TikTok Pixel, etc.) or ad networks. The only third-party scripts present on the platform are those strictly necessary for game delivery from our certified game providers and for anonymous analytics.
4.4 Managing Your Cookie Preferences
You can control and manage cookies through your browser settings. All major browsers (Chrome, Firefox, Safari, Edge, Opera) allow you to view, block, or delete cookies. Please note that disabling strictly necessary or fraud prevention cookies will prevent you from logging in and using the platform. Detailed instructions for managing cookies in your specific browser can be found in your browser's help documentation. For mobile users in Bangladesh accessing basa99 via a mobile browser or app, the same browser-level cookie controls apply.
5 Data Security
basa99 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or alteration. No system can guarantee absolute security, but we continuously invest in improving our security posture.
5.1 Technical Security Measures
- 256-bit SSL/TLS encryption: All data transmitted between your browser or app and basa99 servers is encrypted using industry-standard TLS 1.2 or higher;
- Password hashing: User passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm (bcrypt with a high cost factor);
- Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access is role-based and subject to multi-factor authentication;
- Intrusion detection: Our infrastructure is monitored 24/7 for anomalous activity, brute-force login attempts, and other indicators of compromise;
- Secure data storage: All personal data is stored on encrypted servers located in secure data centres with physical access controls and environmental safeguards.
5.2 Organisational Security Measures
- All basa99 staff with access to personal data are subject to confidentiality obligations and receive regular data protection training;
- Third-party service providers are subject to due diligence assessments before being granted access to any personal data;
- basa99 maintains an internal data breach response procedure. In the event of a confirmed data breach that is likely to result in risk to your rights, we will notify affected users promptly and take all reasonable steps to contain and remediate the breach.
5.3 Your Responsibility
While basa99 takes all reasonable steps to protect your data, you also have an important role to play in keeping your account secure. You are responsible for:
- Choosing a strong, unique password for your basa99 account and not reusing it across other services;
- Never sharing your login credentials with any third party;
- Logging out of your account when using a shared or public device;
- Contacting basa99 support immediately if you suspect unauthorised access to your account.
If you believe your basa99 account has been accessed without your authorisation, contact our support team immediately via live chat or at [email protected]. Our security team is available 24/7 and will act promptly to secure your account and investigate the incident.
6 Data Retention
basa99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of active account + 5 years post-closure | Compliance, fraud prevention, legal obligation |
| KYC / identity verification documents | Duration of active account + 5 years post-closure | Legal obligation, AML compliance |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | Financial record-keeping obligation |
| Customer support communications | 3 years from last communication | Dispute resolution, quality assurance |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent |
| Session and analytics data (anonymised) | 12 months from collection | Platform improvement (anonymised, not personal) |
| Self-exclusion records | Minimum 5 years from exclusion date | Responsible gaming enforcement |
After the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely as part of aggregated statistical records with no privacy impact.
7 Your Privacy Rights
As a basa99 user, you have a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise.
7.1 Right of Access
You have the right to request a copy of the personal data that basa99 holds about you. We will provide this in a structured, commonly used, machine-readable format within a reasonable timeframe of receiving your verified request. We may ask you to verify your identity before fulfilling an access request.
7.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For basic account details (email address, mobile number), you can make changes directly within your account profile. For more sensitive corrections (e.g., legal name correction following a verified identity document discrepancy), please contact our support team.
7.3 Right to Erasure
You may request that basa99 delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or when you withdraw consent and there is no other legal basis for processing. Please note that the right to erasure is not absolute. We may be required to retain certain data for legal compliance, fraud prevention, or dispute resolution purposes even after an erasure request. We will explain any applicable exceptions at the time of your request.
7.4 Right to Restrict Processing
You have the right to request that basa99 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and we are considering whether our legitimate interests override your objection. During a restriction, we will continue to store your data but will not actively process it.
7.5 Right to Data Portability
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another service provider where technically feasible.
7.6 Right to Object
You have the right to object to the processing of your personal data where that processing is based on legitimate interests or is used for direct marketing purposes. If you object to direct marketing, we will cease that processing immediately. If you object to processing based on legitimate interests, we will assess whether our interests are overridden by your rights and freedoms, and respond accordingly.
7.7 Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects concerning you. Where such automated decisions are made (e.g., an automated fraud flag resulting in an account restriction), you have the right to request human review of that decision. See Section 2.2 for details.
basa99 aims to respond to all privacy rights requests within 30 days of receipt of a verified request. In complex cases, this may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. All responses will be provided free of charge unless a request is manifestly unfounded or excessive.
8 Policy Changes
basa99 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law or regulatory guidance, new features or services added to the platform, or feedback from users and our compliance team.
Whenever a material change is made to this Privacy Policy, we will:
- Update the "Last Updated" date at the top of this page;
- Post a notice on the basa99 platform notifying logged-in users of the update;
- Where changes are significant, send a notification to the email address registered to your account.
Your continued use of the basa99 platform after any Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the platform and request account closure by contacting [email protected]. We encourage you to review this page periodically to stay informed about how basa99 protects your personal data.
8.1 Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way basa99 handles your personal data, our dedicated support team is available 24/7. You can reach us via live chat within your account (average response time: 2–5 minutes) or by email at [email protected]. Please include "Privacy Enquiry" in the subject line of any email so we can route your message to the appropriate team member promptly.
Ready to Experience basa99?
Now that you understand how basa99 protects your data, explore our cricket betting markets, top slots, and live casino games — all on a safe and reliable platform built for Bangladeshi players.