BSA8 Privacy Policy

This Privacy Policy explains how bsa8 ("we", "us", "our") collects, uses, stores, and protects the personal information of players who register and use the bsa8 platform at bsa8.app. It applies to the bsa8 website, the bsa8 mobile application, and all services offered through them.

bsa8 is built specifically for players in Bangladesh. We understand that trust is the foundation of any good gaming experience, and that trust starts with being transparent about how we handle your data. This policy is written in plain language so you know exactly what is happening with your information — no legal jargon designed to confuse.

By registering an account on bsa8, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this policy, you should not register an account or use the bsa8 platform.

bsa8 collects personal data in two ways: information you provide directly when you register and use the platform, and information collected automatically when you interact with the bsa8 website or app.

Information you provide directly:

Information collected automatically:

• Device data: Device type, operating system, browser type and version.
• Usage data: Pages visited, games played, session duration, click patterns.
• Technical data: IP address, time zone, approximate location derived from IP.
• Transaction data: Deposit and withdrawal history, bet history, bonus usage.
• Cookie data: Session identifiers, preference settings, analytics identifiers. See Section 6 for full cookie details.

bsa8 uses your personal data for the following purposes. Each purpose is tied to a specific legitimate reason — we do not use your data for anything that isn't listed here.

• Account management: Creating and maintaining your bsa8 account, verifying your identity, and managing your login credentials.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, and Rocket. Verifying that payment methods belong to you.
• KYC compliance: Verifying your age and identity before processing your first withdrawal, as required by anti-money laundering obligations.
• Customer support: Responding to your queries, resolving disputes, and investigating complaints.
• Platform security: Detecting and preventing fraud, multi-accounting, bot activity, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying any self-imposed limits you have set.
• Platform improvement: Analysing usage data to improve the bsa8 website, app, and game library.
• Marketing communications: Sending you information about bsa8 promotions and bonuses — only if you have opted in to receive them. You can opt out at any time.
• Legal compliance: Meeting our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities.

bsa8 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing your data is necessary to fulfil the contract between you and bsa8 — i.e., to operate your account, process your payments, and deliver the gaming services you have signed up for.
• Legal obligation: Some processing is required by law. For example, bsa8 is required to verify the identity of players before processing withdrawals as part of its anti-money laundering obligations.
• Legitimate interests: bsa8 has a legitimate interest in keeping the platform secure, preventing fraud, and improving its services. This processing does not override your privacy rights.
• Consent: For marketing communications, bsa8 relies on your explicit consent. You can withdraw this consent at any time by contacting support or updating your account preferences.

bsa8 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bsa8 shares transaction data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Game providers: Some game data (such as bet amounts and game session identifiers) is shared with the third-party game studios whose games are available on bsa8. This is necessary to deliver the game and calculate results.
• Identity verification services: bsa8 may use a third-party KYC provider to verify your identity documents. These providers are contractually bound to handle your data securely and only for the purpose of verification.
• Fraud prevention services: bsa8 uses automated fraud detection tools that may process your device and behavioural data to identify suspicious activity.
• Legal authorities: bsa8 will disclose your personal data to law enforcement, regulatory bodies, or courts if required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of bsa8's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer.

bsa8 uses cookies and similar tracking technologies on its website and app. Cookies are small text files stored on your device that help bsa8 remember your preferences, keep you logged in, and understand how you use the platform.

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the core bsa8 platform, but some features may not work as smoothly.

bsa8 retains your personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your account and for up to 5 years after account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction data: Retained for 5 years from the date of the transaction, as required by financial regulations.
• KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.
• Analytics data: Anonymised and aggregated after 12 months. Anonymised data does not identify you and is retained indefinitely for platform improvement purposes.
• Marketing consent records: Retained for as long as you have an active account, and for 1 year after account closure as evidence of consent.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. bsa8 conducts regular data audits to ensure that data is not retained beyond its required period.

bsa8 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration.

• TLS encryption: All data transmitted between your device and bsa8 servers is encrypted using TLS (Transport Layer Security).
• Password hashing: Your account password is never stored in plain text. It is hashed using a strong cryptographic algorithm before storage.
• Access controls: Access to personal data within bsa8 is restricted to authorised personnel on a need-to-know basis. All access is logged and audited.
• Two-factor authentication: bsa8 offers 2FA for player accounts and requires it for all internal staff accounts with access to player data.
• Regular security audits: bsa8 conducts regular security assessments and penetration tests to identify and address vulnerabilities.
• Incident response: bsa8 has a documented data breach response procedure. In the event of a breach that affects your personal data, you will be notified as required by applicable law.

As a bsa8 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bsa8 support team at [email protected]. bsa8 will respond to all valid requests within 30 days.

bsa8 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use the bsa8 platform.

If bsa8 discovers that personal data has been collected from a person under 18, the account will be suspended immediately, all data will be deleted, and any funds in the account will be handled in accordance with our Terms and Conditions.

If you are a parent or guardian and you believe your child has registered an account on bsa8, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.

bsa8 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes — such as changes to the types of data we collect or the purposes for which we use it — bsa8 will notify registered players via email or in-app notification at least 7 days before the changes take effect. For minor changes, such as clarifications or corrections, we may update the policy without advance notice.

Your continued use of the bsa8 platform after the effective date of any policy update constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you should stop using bsa8 and contact support to close your account.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how bsa8 handles your personal information, please get in touch with the bsa8 support team.

• Email: [email protected] — for privacy-related requests and data subject access requests.
• Live chat: Available 24/7 on the bsa8 website and mobile app for general privacy questions.
• Support page: Visit bsa8.app/support to start a live chat or browse help articles.

bsa8 aims to respond to all privacy-related requests within 30 days. For complex requests, we may need up to 60 days — if this is the case, we will let you know within the initial 30-day window.