Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 288win ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects personal information provided by users ("you," "Player") who access or use the 288win website at https://288win.bio and any associated services, mobile interfaces, and features.

288win is committed to handling your personal data with the highest degree of care and transparency. We recognise that privacy is a fundamental concern for our players across Pakistan — from Karachi to Lahore, Islamabad to Faisalabad — and we have designed our data practices to reflect that trust.

By registering an account on 288win or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information in the manner described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2. Data Controller

For the purposes of this Policy, 288win acts as the data controller — meaning we are the entity that determines the purposes and means of processing your personal data. All queries, requests, and complaints regarding data privacy should be directed to our support team using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

288win collects the following categories of personal data from players and prospective players:

3.1 Identity Data

• Full legal name as it appears on your CNIC or other government-issued identification.
• Date of birth (collected to verify that you meet the 21+ age requirement).
• Gender (optional, collected during account registration).
• Copies of identity documents submitted for KYC (Know Your Customer) verification purposes, such as your CNIC, passport, or driving licence.

3.2 Contact Data

• Email address.
• Mobile phone number (used for account verification, transaction alerts, and support).
• Residential address in Pakistan (city, province, postal code).

3.3 Financial Data

• JazzCash or EasyPaisa mobile wallet number or account identifier.
• Bank account details for HBL, UBL, Meezan Bank, or other supported banks (account title, account number, IBAN where applicable).
• Deposit and withdrawal transaction history, including amounts in PKR, timestamps, and method used.
• Records of bonuses claimed and wagering activity.

3.4 Technical Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Device fingerprint identifiers used for fraud prevention and multi-account detection.
• Session duration, login timestamps, and pages visited within the Platform.

3.5 Gameplay Data

• Betting history across all products including cricket betting, live casino, slots, and Dragon Tiger.
• Game preferences, staking patterns, and session frequency.
• Responsible gaming tool usage, including any deposit limits or self-exclusion requests you have made.

3.6 Communications Data

• Records of all communications between you and 288win support staff, including live chat transcripts, email correspondence, and support ticket logs.
• Feedback and survey responses submitted voluntarily.

4. How We Collect Your Data

288win collects personal data through the following means:

• Direct interactions: Information you provide when registering your account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or participating in promotions.
• Automated technologies: As you navigate the Platform, we automatically collect technical data using cookies, server logs, and similar tracking technologies. See Section 9 for full details on cookies.
• Third-party payment providers: When you transact via JazzCash, EasyPaisa, or a Pakistani bank, those providers may share transaction confirmation data with us to reconcile your account.
• Identity verification partners: We may use third-party KYC service providers to assist with document verification. These providers operate under strict data processing agreements with 288win.
• Fraud and risk partners: Device fingerprinting and IP reputation services may provide supplementary data used exclusively for fraud prevention and platform security.

5. How We Use Your Personal Data

288win uses your personal data for the following purposes:

6. Legal Basis for Processing

288win processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and 288win as described in our Terms & Conditions — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML requirements, age verification obligations, and fraud prevention duties.
• Legitimate interests: Processing carried out in 288win's legitimate business interests, including platform security, fraud detection, and service improvement, provided these interests are not overridden by your own rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

288win does not sell or rent your personal data to third parties. We may share your data only in the following limited circumstances:

7.1 Service Providers

We share data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (JazzCash, EasyPaisa, banking partners), KYC verification providers, cloud hosting infrastructure providers, and customer support tooling. All such providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing services to 288win.

7.2 Legal and Regulatory Authorities

288win may disclose personal data to government bodies, law enforcement agencies, or financial regulators when required to do so by applicable law, court order, or lawful regulatory request. Where permitted, we will notify you of such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 288win's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and your rights will be maintained.

7.4 Fraud Prevention Networks

Where required for the prevention of fraud or money laundering, 288win may share limited data (such as device identifiers or IP addresses flagged for suspicious activity) with industry-standard fraud prevention networks.

8. Data Retention

288win retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with the following general guidelines:

• Account data: Retained for the lifetime of your active account plus a minimum of 5 years following account closure, to meet AML and regulatory recordkeeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by financial recordkeeping regulations.
• KYC documents: Retained for 5 years following account closure or the last transaction, whichever is later.
• Support communications: Retained for 3 years from the date of the communication, unless related to an ongoing dispute.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for audit purposes.

When data is no longer required for its original purpose and no legal retention obligation applies, 288win will securely delete or irreversibly anonymise it.

9. Cookies & Tracking Technologies

288win uses cookies and similar technologies to provide a functional, personalised, and secure experience on the Platform. A cookie is a small text file stored on your device by your browser when you visit a website.

9.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred deposit method, and display options.
• Analytics cookies: Collect anonymised data about how players navigate and use the Platform, helping us identify areas for improvement. No personally identifiable information is captured in analytics cookies.
• Security and fraud prevention cookies: Used in conjunction with device fingerprinting to detect suspicious login patterns, bot activity, and multi-account behaviour.

9.2 Managing Cookies

You may configure your browser settings to refuse non-essential cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impact the functionality of the Platform, and some features may not work correctly. Detailed instructions for managing cookies are available in your browser's help documentation.

10. Security Measures

288win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data in transit is protected by 256-bit SSL/TLS encryption.
• Sensitive data at rest (including financial records and identity documents) is encrypted using industry-standard encryption algorithms.
• Access to player data is restricted to authorised personnel only, on a strict need-to-know basis, with access logs maintained and reviewed regularly.
• Regular security audits and vulnerability assessments are conducted on Platform infrastructure.
• Two-factor authentication (2FA) is available for player accounts and is strongly encouraged.
• Automated fraud detection systems monitor account activity in real time for anomalies.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your rights and freedoms, 288win will notify affected players promptly and take immediate remediation steps.

11. Your Privacy Rights

As a 288win player, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data 288win holds about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request a correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that 288win restricts the processing of your data while a query or complaint is being investigated.
• Right to data portability: Where technically feasible, you may request that your account data be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests. 288win will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all valid requests within 30 days. We may need to verify your identity before processing any data rights request.

12. Minors and the 21+ Policy

288win operates strictly as a 21+ platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the registration process and is enforced through KYC document checks.

If 288win becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all funds will be handled in accordance with our Terms & Conditions, and all data related to the underage user will be securely deleted.

Parents and guardians in Pakistan are encouraged to use device-level parental controls to prevent underage access to gambling platforms. If you have reason to believe a minor has registered on 288win, please contact our support team immediately.

13. International Data Transfers

288win's primary operations and data storage are designed to serve Pakistani players. In certain circumstances, data may be processed by service providers located outside Pakistan, such as cloud infrastructure providers or fraud prevention partners operating internationally.

Where such transfers occur, 288win ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. This includes data processing agreements with contractual clauses that impose equivalent data protection obligations on the receiving party.

14. Changes to This Privacy Policy

288win may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. When material changes are made, we will post an updated Policy on this page with a revised "Last Updated" date and, where practicable, notify registered players via email or on-platform notification.

Your continued use of the Platform following the posting of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how 288win protects your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 288win handles your personal data, please reach out to our support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu

For data erasure requests, access requests, or complaints related to the processing of your personal data, please include your registered account email address and a brief description of your request. Our team will acknowledge receipt within 48 hours and provide a full response within 30 days.