bass8 Privacy Policy
At bass8, protecting your personal data is as important to us as delivering a world-class gaming experience. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your own data as a player on our platform.
Six Privacy Principles We Live By
These core principles summarise how bass8 approaches data privacy for every player on our Bangladesh-focused platform.
bass8 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and keep the platform secure. We do not gather data speculatively or for purposes beyond those stated in this policy.
All data transmitted between your device and bass8 servers is protected by industry-standard TLS/SSL encryption. Whether you are logging in, depositing via bKash or Nagad, or viewing your account history, your connection is always encrypted end-to- end.
bass8 does not sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose. Data is shared only with service providers directly involved in running the platform — and only under strict confidentiality obligations.
Every category of data we collect is linked to a specific, clearly stated purpose in this policy. We do not use your data for purposes that are incompatible with those stated here without first seeking your explicit consent.
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed, it is securely deleted or anonymised.
You have meaningful rights over your personal data, including the right to access, correct, delete, and port it. bass8 makes it straightforward to exercise these rights — simply contact our English-speaking support team at any time.
This Privacy Policy explains how bass8 collects, uses, stores, and protects your personal data when you use our platform at https://bass8.io. By registering an account or using any feature of the bass8 platform, you acknowledge that you have read and understood this Privacy Policy in full. Please read it carefully before creating an account.
Who We Are
bass8 operates the online casino and sports betting platform available at https://bass8.io (the "Platform"). In this Privacy Policy, "bass8", "we", "us", and "our" refer to the operator of the Platform. "You" and "your" refer to any individual who accesses, browses, registers on, or uses the Platform in any capacity.
bass8 is the data controller in respect of personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, our designated data support contact is available at [email protected] (plain text — not a clickable link).
This Privacy Policy applies to all users of the bass8 Platform, including registered players, visitors who browse the Platform without registering, and individuals who contact us through support channels. It covers all data processing activities carried out by bass8 in connection with the Platform, including the website, mobile browser interface, live casino, sports betting section, and all promotional materials hosted on bass8.io.
Personal Data We Collect
bass8 collects personal data in the following categories, depending on how you interact with the Platform:
2.1 Registration & Identity Data
When you create a bass8 account, we collect the information you provide in the registration form, including:
- Full legal name
- Date of birth (used to verify that you meet the 21+ age requirement)
- Email address
- Mobile phone number
- Username and password (password stored in hashed form — never in plain text)
- City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna)
2.2 KYC Verification Documents
As part of our Know Your Customer (KYC) process, we may collect copies or images of the following documents:
- Government-issued photo identification (National ID card, passport, or driver's licence)
- Proof of address (utility bill, bank statement, or other official correspondence dated within three months)
- Proof of payment method ownership (screenshot or image of bKash, Nagad, Rocket, or bank account registered in your name)
- Selfie photograph holding your identification document, where requested for additional verification
2.3 Financial & Transaction Data
To process deposits and withdrawals in Bangladeshi Taka (৳), we collect transaction-related data including:
- Mobile financial service account numbers (bKash, Nagad, Rocket, Upay)
- Bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or similar)
- Card details where Visa or Mastercard is used (handled securely by the payment processor; bass8 does not store full card numbers)
- Deposit and withdrawal amounts, dates, and transaction reference numbers
- Wagering history, game session data, and account balance records
2.4 Technical & Usage Data
When you access the Platform, our servers automatically collect certain technical information:
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Pages visited, time spent on each page, and navigation paths
- Session start and end times
- Referring URLs (the website or link that directed you to bass8)
- Error logs and diagnostic data
2.5 Communications Data
If you contact us via live chat, email, or WhatsApp, we retain records of those communications, including the content of your messages, the date and time of contact, and any resolution notes added by our support agents. This data is used to manage your query, improve support quality, and maintain an audit trail of account-related interactions.
bass8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data — except where health-related disclosures are made voluntarily by a player in the context of a responsible gaming self-exclusion request, in which case the data is used solely to action that request.
How We Use Your Personal Data
The table below maps each category of data we collect to the specific purpose for which it is used:
| Data Category | Purpose of Use |
|---|---|
| Registration & Identity Data | Creating and managing your account; verifying your identity and age (21+ requirement); communicating with you about your account; detecting duplicate registrations |
| KYC Documents | Fulfilling our anti-money-laundering (AML) and responsible gaming obligations; verifying that funds originate from a legitimate source; complying with lawful requests from authorities |
| Financial & Transaction Data | Processing deposits and withdrawals in BDT; preventing fraud and financial crime; maintaining accurate accounting records; detecting and investigating suspicious transaction patterns |
| Technical & Usage Data | Ensuring Platform security and stability; detecting unauthorised access or bot activity; analysing user behaviour to improve platform performance and game offering; geographic access controls |
| Communications Data | Handling and resolving your support queries; training support staff; maintaining a record of account-related interactions for dispute resolution purposes |
In addition to the above, bass8 may use your email address and mobile number to send you transactional notifications (deposit confirmations, withdrawal status updates, security alerts) and, where you have given your consent, promotional communications about offers, bonuses, and new game releases. You may withdraw consent to marketing communications at any time by contacting support at [email protected].
Legal Bases for Processing
bass8 processes your personal data on the following legal bases:
- Contractual Necessity: Processing your registration data, KYC documents, and financial data is necessary to fulfil our contractual obligations to you as a registered player — specifically, to operate your account, accept your deposits, process your withdrawals, and provide access to games and betting markets.
- Legitimate Interests: We process technical and usage data on the basis of our legitimate interest in maintaining a secure, stable, and fraud-free platform. This includes IP logging, session monitoring, and device fingerprinting used to detect bot activity and unauthorised access attempts.
- Legal Obligation: Certain processing activities — particularly KYC verification and the retention of transaction records — are carried out to comply with applicable anti-money-laundering regulations and other legal obligations.
- Consent: Where we send you marketing communications or use non-essential cookies and tracking technologies, we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing & Third Parties
bass8 does not sell your personal data. We share your data only in the following limited circumstances:
5.1 Service Providers
We engage carefully selected third-party service providers who process data on our behalf solely to support Platform operations. These providers are bound by strict data processing agreements and are not permitted to use your data for their own purposes. Categories of service providers include:
- Payment processors (bKash, Nagad, Rocket, Upay, and card payment gateways for Visa/Mastercard transactions)
- KYC and identity verification service providers
- Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) — these providers receive only the session data necessary to run game rounds; they do not receive your full profile or financial data
- Cloud hosting and infrastructure providers
- Email and SMS communication platforms used to send transactional notifications
- Anti-fraud and cybersecurity monitoring services
5.2 Legal & Regulatory Disclosures
bass8 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of bass8, its players, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bass8's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or an in-account notification if such a transfer occurs and your data will continue to be governed by a privacy policy of equivalent standard.
Under no circumstances does bass8 share your personal data with advertisers, data brokers, marketing agencies, or any third party for their own commercial use. Your data is used exclusively to operate, secure, and improve the bass8 platform experience for you.
Cookies & Tracking Technologies
bass8 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your browser, remember your preferences, keep you logged in securely, and gather analytical data about how the Platform is used.
6.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core Platform functionality.
- Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display preferences. Disabling these may affect your experience but will not prevent access to the Platform.
- Analytical Cookies: Help us understand how players navigate and use the Platform by collecting aggregated, anonymised data about page views, session durations, and feature interactions. This data is used to improve Platform design and performance.
- Security & Fraud-Prevention Cookies: Used to identify and block automated bots, detect suspicious login attempts, and flag unusual transaction patterns. These are fundamental to Platform integrity.
6.2 Managing Cookies
You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies. Please note that blocking strictly necessary cookies will prevent you from accessing your bass8 account. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.
Data Retention
bass8 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable legal or regulatory obligations. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Retained for the lifetime of the account, plus a minimum of 5 years after account closure to satisfy legal obligations |
| KYC verification documents | Minimum 5 years from the date of verification, in accordance with anti-money-laundering record-keeping requirements |
| Financial transaction records | Minimum 5 years from the date of the transaction |
| Technical & usage logs | Up to 24 months, after which logs are aggregated and anonymised |
| Support communications | Up to 3 years from the date of last interaction, or longer if the communication relates to an open dispute |
| Marketing consent records | Retained until consent is withdrawn, plus 1 year thereafter as evidence of consent history |
When the applicable retention period expires, bass8 will securely delete or irreversibly anonymise the personal data in question. Anonymised data — from which all identifying information has been removed — may be retained indefinitely for statistical and analytical purposes.
Data Security
bass8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- TLS/SSL encryption for all data in transit between your device and our servers
- AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
- Passwords stored exclusively as salted cryptographic hashes — plain-text passwords are never stored
- Role-based access controls ensuring that only authorised bass8 personnel can access personal data, and only to the extent necessary for their specific function
- Regular penetration testing and vulnerability assessments conducted by independent security specialists
- Two-factor authentication (2FA) available to all registered players and enforced for all bass8 staff accounts
- Intrusion detection systems and real-time security monitoring across all production infrastructure
- Strict data processing agreements with all third-party service providers, including security requirements and breach notification obligations
Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bass8 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
You also play an important role in protecting your own data. Please use a strong, unique password for your bass8 account, enable 2FA in your account settings, and contact our support team immediately at [email protected] if you suspect any unauthorised access to your account.
Your Data Rights
As a user of the bass8 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
You have the right to request a copy of the personal data bass8 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most account information directly through your account settings panel.
Right to Erasure
You may request that bass8 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that erasure requests may be limited where retention is required by law (e.g., AML record-keeping obligations).
Right to Restriction
In certain circumstances, you may request that bass8 restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being evaluated.
Right to Data Portability
Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes, which we will honour immediately upon receipt of your objection.
Minors & Age Restriction
The bass8 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes an age declaration step, and our KYC verification process is designed to detect and prevent underage registrations.
If bass8 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, return any deposits to the originating payment method, delete all personal data associated with that account, and take appropriate steps to prevent re-registration.
If you are a parent or guardian and believe that your child (under 21) may have created a bass8 account, please contact us immediately at [email protected] with the relevant account details. We will investigate and act on the report without delay.
Protecting minors from gambling harm is a top priority at bass8. Our 21+ policy is non-negotiable. We cooperate fully with any lawful investigation into underage gambling and actively use technical controls to minimise the risk of underage access.
Third-Party Links
The bass8 Platform may from time to time contain references to third-party services, payment partners, or game providers. This Privacy Policy applies exclusively to personal data collected and processed by bass8 through the bass8.io platform. bass8 is not responsible for the privacy practices of any third-party service, and we strongly recommend that you review the privacy policies of any third-party platform before providing them with your personal data.
In particular, when you use a mobile financial service such as bKash, Nagad, or Rocket to fund your bass8 account, the transaction passes through that provider's platform and infrastructure. Your use of those services is governed by their own terms and privacy policies, not by this document.
Updates to This Privacy Policy
bass8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered by the Platform. The effective date at the top of this document will always reflect the date of the most recent revision.
When we make material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify you by sending an email to the address registered on your account and by displaying a prominent notice on the Platform for a minimum of 30 days following the update.
Your continued use of the bass8 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform and may request account closure by contacting our support team.
We encourage you to review this Privacy Policy periodically so that you remain informed about how bass8 handles your personal data. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bass8 handles your personal data, our English-speaking support team is available 24 hours a day, 7 days a week, across Bangladesh Standard Time (BST, UTC+6).
You may reach us through the following channels — please note that all contact details below are provided as plain text only and are not clickable links:
- Email: [email protected]
- WhatsApp: +880 1700 000 000
- Live Chat: Available inside your logged-in bass8 account dashboard, 24/7
When contacting us about a data rights request, please include your registered username and the email address associated with your account so that we can verify your identity before processing the request. We will not action data rights requests from unverified sources.
We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days, in line with our obligations under applicable data protection principles.
Ready to Play at bass8?
Now that you know how we protect your data, explore everything bass8 has to offer — from live cricket betting and premium slots to live casino tables and crash games. Your privacy is secure every step of the way.