basant Privacy Policy

basant is an online gaming platform accessible at basant.net, offering sports betting, live casino games, slot games, color prediction, and fishing games to eligible players aged 21 and above. basant is operated under an international gaming licence and is the data controller responsible for your personal data collected through this platform.

For all data protection enquiries, you may contact basant's data protection team directly:

basant collects personal data only where it is necessary to provide the platform's services, comply with regulatory obligations, or improve your experience. The categories of personal data we collect are set out below.

basant uses the personal data it collects for the following specific purposes:

• Account creation and management — to register your basant account, verify your identity, and manage your account settings and preferences throughout the lifecycle of your membership.
• Age and identity verification (KYC) — to confirm that you meet the minimum age requirement of 21 years and to comply with anti-money laundering (AML) obligations under our international gaming licence.
• Payment processing — to process deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions in PKR.
• Service delivery — to provide access to basant's full suite of gaming products including cricket betting, live casino, slots, color prediction, and fishing games.
• Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide 24/7 assistance in English and Urdu.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct on the basant platform.
• Regulatory compliance — to meet basant's obligations under its international gaming licence, including record-keeping, reporting, and cooperation with law enforcement or regulatory authorities where legally required.
• Responsible gaming — to monitor gaming patterns, implement and enforce responsible gaming tools such as deposit limits and self-exclusion, and identify players who may be at risk of problem gambling.
• Platform improvement — to analyse usage patterns and technical data in aggregated, anonymised form to improve the performance, usability, and game offering on basant.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have consented to receiving such communications or where we have a legitimate interest in doing so. You may opt out at any time.

basant processes your personal data on the following legal grounds:

• Contractual necessity — processing required to fulfil our contract with you as a registered basant player, including account management, payment processing, and service delivery.
• Legal obligation — processing required to comply with our international gaming licence, AML regulations, age verification requirements, and any applicable data protection law.
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming purposes, where these interests are not overridden by your fundamental rights.
• Consent — processing for marketing communications, non-essential cookies, and any other purpose for which you have given explicit, freely withdrawn consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

basant does not sell or rent your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment service providers — JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• KYC and identity verification partners — authorised third-party verification services may access your identity documents and CNIC data solely for the purpose of performing age and identity checks on behalf of basant.
• Game content providers — third-party game studios and live casino operators that power games on basant may receive pseudonymised technical and transaction data necessary to deliver gameplay and settle results.
• Fraud and AML screening services — basant uses third-party services to screen transactions and player activity against sanctions lists and fraud databases. These services receive only the minimum data required for screening purposes.
• Regulatory and law enforcement authorities — basant will disclose personal data to competent authorities, courts, or regulators where required by law, court order, or our international gaming licence conditions. basant will notify you of such disclosures where legally permitted to do so.
• Professional advisers — legal counsel, auditors, and compliance consultants engaged by basant may access personal data on a confidential, need-to-know basis.

basant uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device by your browser.

The categories of cookies basant uses are as follows:

• Strictly necessary cookies — essential for the platform to function. These include session authentication cookies that keep you logged in during your basant session. These cannot be disabled without breaking core platform functionality.
• Functional cookies — remember your language preferences, last-played games, and display settings to provide a more personalised experience on your next basant visit.
• Analytics cookies — collect anonymised data about how players navigate and interact with basant, used exclusively to improve platform performance and user experience. No individually identifiable data is included in analytics reports.
• Marketing cookies — used to track the effectiveness of basant's promotional campaigns and to avoid showing you the same bonus offer repeatedly. These are only active where you have consented to marketing communications.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the basant platform. For all other cookie categories, you can opt out without affecting core functionality.

basant retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our international gaming licence and applicable regulatory obligations:

• Account and identity data — retained for a minimum of five years following account closure, as required by AML and gaming licence record-keeping obligations.
• Transaction and betting records — retained for a minimum of five years following the date of each transaction, for regulatory audit and dispute resolution purposes.
• KYC documents — retained for a minimum of five years following the completion of KYC verification or account closure, whichever is later.
• Customer support communications — retained for two years following the resolution of each support interaction, for quality assurance and dispute evidence purposes.
• Technical and usage data — retained in aggregated, anonymised form for up to three years for platform analytics purposes.
• Responsible gaming records — self-exclusion and cooling-off period records are retained indefinitely to prevent re-registration by excluded players during their exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup cycles, the data is isolated from active processing and deleted at the earliest practicable opportunity.

basant implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and basant's servers
• AES-256 encryption for sensitive data stored at rest, including CNIC numbers, financial account references, and authentication credentials
• Multi-factor authentication requirements for all basant staff with access to production systems containing player data
• Role-based access controls ensuring that each team member can only access data relevant to their specific job function
• Comprehensive audit logging of all access to player data within internal systems, with automated alerting for anomalous access patterns
• Regular third-party penetration testing and security audits of the basant platform infrastructure
• Player fund segregation — basant player balances are held in accounts separate from basant's operational funds

While basant takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own basant login credentials and for notifying basant immediately if you suspect unauthorised access to your account.

As a basant player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address. basant will respond within 30 days of receiving a valid request.

• Right of access — you may request a copy of all personal data basant holds about you, along with information about how it is being used (a Subject Access Request).
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held in your basant account. Minor updates such as mobile number or email changes can be made directly in your account settings.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to basant's legal retention obligations described in Section 7.
• Right to restrict processing — you may request that basant limits how your personal data is used in certain circumstances, for example where you contest the accuracy of the data or object to a particular use.
• Right to data portability — you may request a copy of the personal data you have provided to basant in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract.
• Right to object — you may object to basant's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming purposes. basant will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

basant is strictly an adult gaming platform. The minimum age to register and use basant is 21 years. basant does not knowingly collect personal data from individuals under the age of 21.

basant encourages all adult players to use parental control software if there is any possibility that minors in their household could access their device. A number of reputable third-party parental control tools are available that can restrict access to online gaming platforms at the device or router level.

basant operates under an international gaming licence, and some of the third-party service providers we use — including game content providers, KYC verification partners, and cloud infrastructure providers — may process your personal data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, basant ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual data protection clauses requiring the recipient to process data to the same standard as basant
• Transfers to recipients in jurisdictions that have been recognised as providing an adequate level of data protection
• Binding corporate rules where data is transferred within a group of companies

You may request further information about the specific safeguards in place for any international transfer of your data by contacting [email protected].

basant reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

Where changes to this Privacy Policy are material — meaning they significantly affect how your personal data is collected or used — basant will notify you by email to your registered address at least 14 days before the changes take effect. For non-material changes such as clarifications or formatting updates, the revised policy will take effect immediately upon publication.

Your continued use of basant following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes, you should close your basant account before the revised policy takes effect by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how basant has handled your personal data, please contact our data protection team:

If you are not satisfied with basant's response to a privacy-related complaint, you have the right to escalate the matter to the relevant supervisory authority under the applicable data protection framework governing basant's international gaming licence.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the basant Privacy Policy.