288win Privacy Policy – How We Protect Your Personal Data

1 Who We Are

288win operates the online gaming and sports betting platform accessible at https://288win.club. References to "288win", "we", "us" or "our" in this Privacy Policy refer to the entity operating the 288win platform. 288win serves English-speaking players across Pakistan, offering cricket betting, live casino, slots, crash games and associated gaming products.

For all privacy-related queries, you may contact the 288win data team at [email protected]. Please include "Privacy Request" in your subject line to ensure prompt handling.

2 Personal Data We Collect

288win collects personal data in the following categories:

2.1 Registration & Account Data

• Mobile phone number (used as primary account identifier)
• Username and encrypted password
• Date of birth (for age verification purposes)
• Country and city of residence (e.g. Karachi, Lahore, Islamabad)

2.2 Identity Verification (KYC) Data

• Pakistani CNIC number and CNIC scan or photograph
• Selfie photograph for facial comparison against CNIC
• Additional identity documents where requested for enhanced verification

2.3 Financial Data

• Payment method details (e.g. JazzCash mobile number, Easypaisa wallet number, HBL or UBL account number, Meezan Bank or Bank Alfalah account details)
• Transaction history including deposit amounts, dates, withdrawal requests and payment statuses
• Account balance history

2.4 Gaming & Betting Data

• Bet history, game session data, wagering patterns and win/loss records
• Bonus redemption history and promotion eligibility records
• Self-exclusion and responsible gaming tool usage

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system and mobile browser version
• Session duration, pages visited and clickstream data within the 288win platform
• Cookies and similar tracking technologies as described in Section 6

2.6 Communications Data

• Content of communications you send to 288win support, including emails to [email protected]
• Support ticket history and resolution records

3 How 288win Uses Your Personal Data

288win processes your personal data for the following purposes:

• Account management: Creating, maintaining and managing your 288win account, including authentication via OTP verification and account security monitoring.
• Service delivery: Processing bets, game sessions, deposits and withdrawals. Providing access to all 288win gaming products.
• Identity verification (KYC): Verifying your identity and age in compliance with responsible gaming obligations before processing withdrawals or responding to large account activity.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and other supported payment methods.
• Responsible gaming: Monitoring account activity for signs of problem gambling; implementing and enforcing deposit limits, cooling-off periods and self-exclusion requests; providing appropriate interventions where required.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, money laundering, duplicate account registrations and other prohibited conduct as described in the 288win Terms & Conditions.
• Customer support: Responding to your queries, complaints and support requests via email and other support channels.
• Platform improvement: Analysing aggregated, anonymised usage data to improve 288win's features, performance and user experience.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to you, where you have not opted out of receiving such communications. You may opt out at any time by contacting [email protected].
• Legal compliance: Complying with applicable legal obligations, responding to lawful requests from regulatory authorities and maintaining records as required.

4 Legal Basis for Processing

288win processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 288win – account registration, bet settlement, payment processing and service delivery.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming assessment and platform improvement, where such interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable laws and respond to lawful authority requests, including KYC and anti-money-laundering obligations.
• Consent: Where we rely on your consent – such as for certain marketing communications – you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing & Disclosure

5.1 288win does not sell, rent or trade your personal data to any third party for their own marketing purposes.

5.2 288win may share your personal data with the following categories of third parties, strictly for the purposes described in this Privacy Policy:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and other payment service providers require transaction data to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and identity verification service providers engaged to assist in verifying CNIC and selfie submissions.
• Game and technology providers: Software providers whose games are available on 288win may receive anonymised session data necessary to deliver their products.
• Fraud prevention services: Third-party fraud detection providers who assist in identifying suspicious activity, duplicate accounts and potential money-laundering patterns.
• Legal and regulatory authorities: Where 288win is subject to a lawful requirement to disclose information to a governmental, regulatory or law enforcement authority.

5.3 Any third party with whom 288win shares personal data is required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared.

6 Cookies & Tracking Technologies

6.1 288win uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, authentication and security features.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the 288win platform, helping us identify and improve areas of poor performance.
• Preference cookies: Remember your settings and preferences, such as language selection, to personalise your experience.

6.2 You may configure your mobile browser to refuse cookies or to alert you when cookies are being set. However, disabling essential cookies may impair the functionality of the 288win platform, including the ability to log in and maintain your session.

7 Data Retention

7.1 288win retains your personal data for as long as your Account remains active and for a period thereafter as required to fulfil our legal obligations, resolve disputes and enforce our agreements.

7.2 KYC and financial transaction records are retained for a minimum period in accordance with applicable anti-money-laundering and record-keeping obligations. This period is typically a minimum of five (5) years from the date of the last relevant transaction.

7.3 Where you request deletion of your personal data, 288win will action this request to the extent permitted by law. Certain data categories must be retained regardless of deletion requests where retention is required by legal obligation.

8 Data Security

8.1 288win implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption of all data in transit between your device and 288win's servers
• Encrypted storage of passwords – 288win does not store passwords in plain text
• OTP-based two-factor authentication for account login and sensitive account actions
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security assessments and monitoring for potential vulnerabilities

8.2 Despite these measures, no method of electronic transmission or storage is completely secure. While 288win takes all reasonable precautions, we cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the security of your own Account credentials.

9 Your Data Rights

You have the following rights in relation to the personal data 288win holds about you:

• Right of access: Request a copy of the personal data 288win holds about you.
• Right to rectification: Request correction of any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to object: Object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to data portability: Request a copy of your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact 288win at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe. Identity verification may be required before we process any data access or deletion request.

10 Children & Minors

288win's platform is strictly for adults aged 18 years and over. We do not knowingly collect personal data from persons under 18. If 288win becomes aware that personal data has been collected from a minor, that Account will be immediately closed and all associated personal data deleted, subject to any overriding legal retention obligations. If you believe a minor has registered on 288win, please notify us immediately at [email protected].

11 Third-Party Links

The 288win platform does not contain links to external websites as a matter of policy. If any third-party service is integrated within the 288win platform (such as a game provider's content), that provider's own privacy practices will apply to data processed directly by them. 288win is not responsible for the privacy practices of third-party software providers beyond the data-sharing obligations described in Section 5 of this policy.

12 Changes to This Privacy Policy

12.1 288win reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Account holders by notification on the Platform or via the registered mobile contact, where practicable, prior to the changes taking effect.

12.2 The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the 288win platform following any update constitutes your acceptance of the revised Privacy Policy.

13 Contact & Privacy Queries

For all privacy-related queries, data access requests, or concerns about how 288win handles your personal information, please contact us: