Reference

Privacy Policy: How We Handle Your Information

We collect what we need to run your account, verify withdrawals and keep your wallet secure. This policy explains what data we gather when you deposit through bKash, Nagad or Rocket, how we use it to process payouts and prevent fraud, and how you…

Account data protectionWithdrawal verificationCookie transparencyContact us anytimeRequest data access
bast casino Privacy Policy: How We Handle Your Information
POLICY QUESTIONS

Contact Us About Privacy

If you have a question about what data we hold, want to request a copy or believe we have incorrect information on file, reach us through any channel below. Live chat is the fastest route during business hours; email works for detailed requests that need a written reply. We handle data requests in the order received and aim to close each one within seven business days.

Team online

Live Chat

Open the chat bubble in the bottom corner of any page and tell the agent you need privacy support. They will route your request to the data team and give you a reference number you can check back on.

Email Support

Send your request to our support address with the subject line 'Privacy Request' and include your registered mobile number. We will confirm receipt within one business day and send the full reply once the team reviews your account.

Account Settings

Log in, go to settings and open the Privacy tab to see what data categories we hold, download a JSON export of your profile and transaction log, or submit a deletion request. Deletion closes your account and cannot be undone.

DATA SAFEGUARDS

How We Protect Your Information

We encrypt your password with bcrypt and your wallet details with AES-256 so they are not readable in our database. Session tokens expire after thirty minutes of inactivity; if you log in from a new device we send an OTP to your registered mobile before granting access. Our payment processor handles bKash, Nagad and Rocket transactions over SSL and does not store your wallet PIN on our servers. We run quarterly access audits to ensure only authorised staff can view account data, and we log every query so suspicious activity triggers an alert.

Encrypted Storage

Passwords are hashed with bcrypt; wallet account numbers and withdrawal addresses are encrypted with AES-256. Even if someone accesses the database they cannot reverse the encryption without the key, which is stored separately and rotated every quarter.

Session Security

Your login session expires after thirty minutes of inactivity or when you close the browser. If you log in from a device we have not seen before we send an OTP to your mobile; you must enter that code to proceed.

Cookie Use

We set a session cookie to keep you logged in, a functional cookie to remember your language choice and an analytics cookie to count page views. You can block non-essential cookies in your browser; blocking the session cookie will require you to log in on every page.

Data Retention

Active accounts remain on file indefinitely; if you close your account we anonymise your profile after ninety days by removing your name, mobile number and wallet details. Transaction logs are kept for six years to meet local record-keeping obligations in Bangladesh, then purged.

Common Questions About Your Data

We collect your mobile number, a password you create, your date of birth to verify age eligibility, and the wallet you choose for deposits — bKash, Nagad or Rocket. We also log your IP address and device type each time you log in.

Our payment gateway handles wallet transfers over SSL encryption. We store your wallet account number in encrypted form on our server; we never see or store your wallet PIN. When you deposit the PIN stays between you and your wallet app.

Yes. Log in, go to account settings and open the Privacy tab, then click Download My Data. You will receive a JSON file with your profile fields, transaction history and support tickets. Alternatively email support with 'Data Request' in the subject line.

We anonymise closed accounts after ninety days by removing your name, mobile number and wallet details. Transaction logs are retained for six years to meet local record-keeping rules in Bangladesh, then deleted. You can request faster deletion by contacting support.

We do not sell your data. We share wallet account numbers with our payment processor to route deposits and withdrawals, and we disclose account records to authorities if required by local law in Bangladesh. No other third party receives your information.

We set a session cookie to keep you logged in, a functional cookie for language preference and an analytics cookie to count visits. You can block non-essential cookies in your browser settings; blocking the session cookie means you will need to log in on every page.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.