bsa8 Privacy Policy

DATA CONTROLLER NOTICE: bsa8 ("we", "us", "our") acts as the data controller for all personal information collected through the bsa8 platform at https://bsa8.io. By creating an account and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This policy applies to all players in Bangladesh and any other jurisdiction from which the bsa8 platform is accessed.

bsa8 is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Privacy Policy sets out in clear and transparent terms what personal information we collect from you, the purposes for which we process it, the grounds on which we rely to do so, how long we retain it, who we share it with, and the rights you have in relation to your personal data.

This Privacy Policy applies to all data collected through the bsa8 website at https://bsa8.io, including all services accessible through that domain such as casino games, live dealer tables, sports betting, poker, slots, crash games, and account management functions. It applies equally to players accessing bsa8 from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh.

Please read this Privacy Policy carefully before registering an account or using the bsa8 platform. If you do not agree with any part of this Privacy Policy, you should not access or use the bsa8 platform. By registering an account or continuing to use the bsa8 platform, you confirm that you have read, understood, and accepted the terms of this Privacy Policy.

bsa8 collects personal data that is necessary for the provision of our services, the verification of your identity, the prevention of fraud and money laundering, and the fulfilment of our obligations under applicable law. The categories of personal data we may collect include:

Where you choose not to provide personal data that is marked as mandatory during registration or at any other stage, bsa8 may be unable to provide you with access to certain services, including the ability to deposit, withdraw, or participate in promotional offers.

bsa8 collects personal data through a number of channels and methods. Understanding how your data reaches us helps ensure full transparency in our data practices:

• Direct submission: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotional offer, you provide data directly to bsa8.
• Automated technical collection: When you access and browse the bsa8 platform, our servers automatically collect technical information including your IP address, device identifiers, browser type and version, operating system, referring URLs, and session activity logs.
• Cookies and tracking technologies: bsa8 uses cookies, web beacons, pixel tags, and similar technologies to collect usage data and enhance your experience on the platform. Further details are provided in Section 7 of this Privacy Policy.
• Payment providers: When you use bKash, Nagad, Rocket, Upay, or other payment services to deposit or withdraw funds, those providers may transmit certain transaction-related data to bsa8 for the purpose of confirming and reconciling payments.
• Third-party identity verification services: bsa8 may use regulated third-party KYC service providers to assist in verifying your identity. These providers may access or contribute data to the verification process but are contractually bound to handle your data in accordance with applicable data protection laws.
• Fraud prevention and AML databases: bsa8 may check your details against publicly available records, sanction lists, politically exposed persons (PEP) databases, and third-party fraud prevention databases as required by applicable law.

bsa8 processes personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes described below. The primary purposes for which bsa8 processes personal data include:

• Account management: To register, maintain, and administer your bsa8 account, verify your identity, and process your login credentials securely.
• Service delivery: To provide you with access to casino games, sports betting markets, live dealer tables, poker, slots, and all other services offered through the bsa8 platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records as required by law.
• Identity and age verification: To verify that you meet the minimum age requirement of 21 years, to confirm your identity as required by our Know Your Customer (KYC) obligations, and to prevent the use of our platform by ineligible persons.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats that could harm players or the integrity of the platform.
• Legal compliance: To fulfil our obligations under applicable laws, including anti-money laundering (AML) regulations, data protection laws, and any requirements imposed by competent authorities.
• Responsible gaming: To monitor your gaming activity for indicators of problem gambling and, where appropriate, to apply responsible gaming tools such as deposit limits, session time limits, or self-exclusion at your request or in accordance with our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance through our 24/7 live chat and email support channels.
• Marketing communications: Where you have given your explicit consent, to send you promotional materials, bonus offers, and news about bsa8 services by email or other communication channels. You may withdraw this consent at any time by contacting [email protected].
• Platform improvement: To analyse usage patterns, player behaviour, and technical performance data for the purpose of improving the functionality, usability, and game selection of the bsa8 platform.

bsa8 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which bsa8 relies are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and bsa8, including providing access to the platform, processing payments, and managing your account. Without this processing, bsa8 cannot deliver the services you have requested.
• Legal obligation: Processing is required for bsa8 to comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, identity verification mandates, and record-keeping obligations under applicable financial and gaming laws.
• Legitimate interests: Processing is necessary for the legitimate interests of bsa8, including fraud prevention, platform security, detection of multi-accounting, responsible gaming monitoring, and improving our services — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bsa8 relies on consent as the legal basis — most notably for the sending of direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

bsa8 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: bsa8 shares necessary transaction data with payment partners including bKash, Nagad, Rocket, and Upay solely for the purpose of processing deposits and withdrawals on your behalf.
• Identity verification providers: bsa8 may engage regulated third-party KYC and identity verification providers to assist in verifying the identity and age of account holders. These providers act as data processors on our behalf and are bound by contractual data protection obligations.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate certain games accessible through the bsa8 platform. Limited technical data (such as session tokens) may be exchanged with these providers to facilitate gameplay. These providers do not receive your personal identity data.
• Fraud prevention and AML service providers: bsa8 may share data with third-party fraud detection and anti-money laundering screening services to fulfil its legal obligations and to protect the platform from financial crime.
• Law enforcement and regulatory authorities: bsa8 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or lawful governmental request. bsa8 will only disclose the minimum data necessary to comply with such requirements.
• Professional advisers: bsa8 may share data with external legal counsel, auditors, or other professional advisers where strictly necessary for the provision of their services, subject to binding confidentiality obligations.

All third parties with whom bsa8 shares personal data are required to handle that data in a manner consistent with applicable data protection law and the standards described in this Privacy Policy. bsa8 maintains written data processing agreements with all processors who handle personal data on its behalf.

bsa8 uses cookies and similar tracking technologies to operate the platform effectively, enhance your user experience, and gather analytics data that helps us improve our services. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain executable code and cannot access other information on your device.

The types of cookies used by bsa8 are as follows:

• Strictly necessary cookies: These cookies are essential for the operation of the bsa8 platform. They enable core functions such as account login, session management, and security features. Without these cookies, the platform cannot function. No consent is required for these cookies.
• Functional cookies: These cookies remember your preferences (such as language settings and display preferences) and enable personalised features. They improve your experience but are not strictly required for the platform to operate.
• Analytical cookies: These cookies collect anonymised data about how players use the bsa8 platform, including which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data helps bsa8 understand player behaviour and continuously improve the platform.
• Security cookies: These cookies help bsa8 detect and prevent fraudulent activity, including account takeover attempts, bot traffic, and suspicious login patterns.

Most web browsers allow you to control cookie behaviour through their settings. You can choose to block or delete cookies at any time; however, please be aware that blocking strictly necessary cookies will prevent you from accessing the bsa8 platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

bsa8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods applied by bsa8 are determined by reference to the nature of the data, the purpose for which it was collected, and any legal or regulatory obligations that prescribe minimum retention periods.

• Account data: Personal data associated with your bsa8 account is retained for the duration of your account and for a minimum period of five (5) years following the closure or termination of the account, in order to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Records of all financial transactions, including deposits, withdrawals, and betting activity, are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial crime prevention regulations.
• Identity verification documents: Copies of identity documents submitted for KYC purposes are retained for the duration of the account and for five (5) years following account closure. Where a document is submitted but the account registration is not completed, the document is deleted within ninety (90) days.
• Support communications: Records of customer support interactions, including live chat transcripts and email correspondence, are retained for two (2) years from the date of the interaction.
• Technical and usage data: Server logs, IP records, and session data are retained for up to twelve (12) months, after which they are anonymised or deleted unless required for an ongoing investigation.

At the end of the applicable retention period, bsa8 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where full deletion is not technically feasible in the short term (for example, where data exists in backup archives), bsa8 will isolate the data from further active processing until deletion is possible.

bsa8 takes the security of your personal data extremely seriously. We implement a comprehensive range of technical and organisational security measures designed to protect your personal information from unauthorised access, disclosure, alteration, loss, or destruction.

• SSL 256-bit encryption: All data transmitted between your device and the bsa8 platform is encrypted using SSL 256-bit TLS encryption, ensuring that your personal and financial data cannot be intercepted in transit.
• Secure password storage: Account passwords are never stored in plain text. bsa8 uses industry-standard cryptographic hashing algorithms to store passwords in a secure, non-reversible format.
• Access controls: Access to personal data within bsa8 is strictly limited to authorised personnel who require access to perform their job functions. All internal access is logged and subject to regular review.
• Fraud detection systems: bsa8 operates automated real-time fraud detection systems that monitor account activity for unusual patterns that may indicate unauthorised access, account takeover attempts, or other security threats.
• Regular security assessments: bsa8 conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in our infrastructure and data handling practices.

While bsa8 applies robust security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account by keeping your login credentials confidential and notifying bsa8 immediately if you suspect any unauthorised access to your account. Please report any security concerns to [email protected].

As an individual whose personal data is processed by bsa8, you have a number of rights in relation to your data. bsa8 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

• Right of access: You have the right to request a copy of the personal data bsa8 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held by bsa8. You may also update certain account information directly through your account settings panel.
• Right to erasure: In certain circumstances, you have the right to request that bsa8 delete your personal data. This right is subject to any legal or regulatory obligations that require us to retain certain records, such as AML record-keeping requirements.
• Right to restrict processing: You have the right to request that bsa8 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to the processing pending a review of your objection.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bsa8 relies on legitimate interests as the legal basis for processing. bsa8 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where bsa8 processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to our support team at [email protected]. bsa8 will respond to all valid requests within thirty (30) days. In complex cases or where a high volume of requests has been received, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.

The bsa8 platform may contain references to or integrations with third-party services, including payment providers such as bKash, Nagad, Rocket, and Upay, and game content studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you interact with third-party services, you are doing so under those providers' own terms of service and privacy policies.

bsa8 is not responsible for the privacy practices of third-party service providers or their data handling standards. We encourage you to review the privacy policies of any third-party services you use in connection with your bsa8 account. bsa8 cannot control and is not liable for the content, privacy policies, or practices of third-party sites or services.

The bsa8 platform is strictly intended for adults aged 21 years and above. bsa8 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to ensure compliance with this requirement.

If bsa8 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child may have registered an account with bsa8, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

bsa8 reserves the right to amend, update, or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our business practices, or the services we offer. Any updates to this Privacy Policy will be published on this page with a revised effective date indicated at the top of the document.

Where a change to this Privacy Policy is material — meaning it significantly affects your rights or the way in which bsa8 processes your personal data — bsa8 will notify registered account holders by email or by displaying a prominent notice on the platform prior to the change taking effect. Your continued use of the bsa8 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how bsa8 is protecting your personal data. If you have any questions or concerns about a change to this Privacy Policy, please contact our support team at [email protected] before continuing to use the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bsa8 handles your personal data, please do not hesitate to get in touch with our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries promptly and thoroughly.

• Email: [email protected]
• Live Chat: Available 24/7 via the bsa8 platform
• Response Time: Within 24 hours for standard enquiries; within 30 days for formal data rights requests
• Support Language: English

When contacting bsa8 regarding a data rights request, please include your registered account username or email address and a clear description of the right you wish to exercise. This will help us locate your records and process your request as efficiently as possible.