Privacy Policy — How basa27 Collects, Uses, and Protects Your Data

1. Who We Are and How to Contact Us

1.1 basa27 is an online casino and sports betting platform operated at basa27. vip, providing services to players across Bangladesh. For the purposes of this Privacy Policy, "basa27", "we", "us", and "our" refer to the Platform and its operating team.

1.2 If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our support team:

• Live Chat: Available 24/7 directly through the basa27 Platform
• Email: [email protected] (plain text — not a clickable link)
• Response Hours: Priority response during 07:00–00:00 Bangladesh Standard Time (UTC+6)

2. Personal Data We Collect

2.1 basa27 collects personal data from you in the following ways: directly when you provide it during registration or account management, automatically when you use the Platform, and from third parties such as payment processors and identity verification providers.

2.2 Data you provide directly includes:

• Full name, date of birth, and gender
• Residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi), and postcode
• Email address and mobile phone number
• Username and password (stored in encrypted form)
• Payment method details, including bKash wallet numbers, Nagad account numbers, Rocket mobile banking details, bank account information for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank transfers, and masked card details for Visa or Mastercard payments
• Identity verification documents such as National Identity Card (NID), passport, or driving licence
• Any communications you send to our support team

2.3 Data collected automatically when you use the Platform includes:

• IP address and approximate geographic location derived from it
• Device type, operating system, browser type and version
• Pages visited, game sessions played, betting history, and session duration
• Referring URLs and navigation paths within the Platform
• Cookie identifiers and similar tracking data (see Section 8 for cookie details)
• Transaction timestamps, amounts, and payment method used

2.4 Data from third parties may include identity verification outcomes from KYC providers, fraud risk signals from payment processors, and publicly available information used to confirm the accuracy of data you have provided.

3. How We Use Your Personal Data

3.1 basa27 processes your personal data for the following purposes and on the following legal bases:

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with basa27. Legal basis: performance of a contract.
• Processing transactions: To handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and card payments. Legal basis: performance of a contract.
• Identity and age verification: To confirm that you meet the 21+ age requirement and to prevent fraud and money laundering. Legal basis: legal obligation and legitimate interests.
• Customer support: To respond to your enquiries, resolve complaints, and improve our service quality. Legal basis: legitimate interests.
• Responsible gaming: To monitor play patterns, enforce deposit limits and self-exclusion requests, and identify signs of problem gambling. Legal basis: legal obligation and legitimate interests.
• Security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, and abuse of promotional offers. Legal basis: legitimate interests.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and enhance the basa27 user experience. Legal basis: legitimate interests.
• Promotional communications: To send you information about basa27 bonuses, offers, and game updates where you have provided consent to receive such communications. Legal basis: consent (you may withdraw this at any time).
• Legal compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities. Legal basis: legal obligation.

3.2 basa27 will not use your personal data for any purpose that is incompatible with the purposes described in this section without first obtaining your consent or establishing a new lawful basis for processing.

4. Sharing Your Personal Data

4.1 basa27 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive transaction data strictly necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers receive identity document data solely to fulfil our verification obligations.
• Game providers: Certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to support game delivery and fair-play auditing.
• IT and hosting providers: Infrastructure partners who host the basa27 Platform under strict data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent authority, basa27 may disclose your data to the relevant body.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the basa27 business, your personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

4.2 All third-party recipients of personal data are subject to contractual data protection obligations consistent with the standards set out in this Privacy Policy.

5. How Long We Retain Your Data

5.1 basa27 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, or reporting requirements.

5.2 As a general guide, the following retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, in order to meet financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years following account closure.
• Support communications: Retained for up to three (3) years from the date of the communication.
• Marketing preferences and consent records: Retained until you withdraw consent or for up to two (2) years of account inactivity, whichever is sooner.
• Cookie and analytics data: Retained in accordance with the cookie lifespans described in Section 8.

5.3 Once your data is no longer required, basa27 will delete or anonymise it in a secure manner.

6. Your Data Rights

6.1 As a basa27 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address listed in Section 1.

6.2 basa27 will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, of which you will be notified.

6.3 basa27 may need to verify your identity before processing a data rights request to prevent unauthorised disclosure of your information.

7. Data Security

7.1 basa27 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the basa27 Platform
• Encrypted storage of passwords and sensitive account credentials
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Secure data centre environments with physical access controls
• Incident response procedures to detect, contain, and report data security events

7.2 While basa27 takes all reasonable steps to protect your data, no internet-based transmission is entirely risk-free. You are responsible for keeping your account credentials confidential and for notifying basa27 immediately if you suspect any unauthorised access to your account.

7.3 In the event of a data breach that is likely to result in a risk to your rights or interests, basa27 will notify affected users promptly and will take all necessary steps to mitigate the impact of the breach.

8. Cookies and Tracking Technologies

8.1 basa27 uses cookies and similar technologies to operate the Platform, analyse usage, and personalise your experience. A "cookie" is a small text file placed on your device when you visit the Platform.

8.2 basa27 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Collect anonymised data about how users interact with the Platform, including pages visited and error messages encountered, to help us improve the basa27 experience.
• Functional cookies: Remember your preferences such as language settings and game display options to provide a more personalised experience across sessions.
• Marketing cookies: Used (where you have consented) to deliver promotional content relevant to your interests, including basa27 bonus offers and game recommendations.

8.3 You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the basa27 Platform. For detailed guidance on managing cookies, refer to your browser's help documentation.

8.4 basa27 does not permit third-party advertisers to place tracking cookies on the Platform for their own independent purposes.

9. Children and Minors

9.1 The basa27 Platform is strictly intended for adults aged 21 years and above. basa27 does not knowingly collect personal data from any individual under the age of 21.

9.2 If basa27 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on basa27, please contact our support team immediately.

10. Third-Party Services and Links

10.1 The basa27 Platform integrates with third-party services including payment processors and game providers. These services operate under their own privacy policies, and basa27 is not responsible for the data practices of third-party operators.

10.2 basa27 does not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that collect your data for purposes unrelated to the delivery of the basa27 service.

11. Changes to This Privacy Policy

11.1 basa27 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. When we make material changes, we will notify registered players via the email address associated with their account and/or by posting a prominent notice on the Platform.

11.2 The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of basa27 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

11.3 We encourage you to review this Privacy Policy periodically to stay informed about how basa27 is protecting your information.