Privacy Policy – 288win

1. Introduction

288win ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access, register on, or interact with the 288win website at 288win.asia. This Privacy Policy ("Policy") describes in detail what personal information 288win collects, why it is collected, how it is used, who it may be shared with, and what rights you hold in respect of your personal data.

By registering a 288win account, making a deposit, placing a bet, or otherwise using any feature of the 288win platform, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform.

This Policy applies to all personal data processed in connection with the 288win platform, including data collected through the website, support communications, payment processing, and any promotional activity. It should be read alongside the 288win Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

288win collects personal data in several ways: directly from you at the point of registration or during platform use, automatically through technical systems as you interact with the site, and occasionally from third-party service providers involved in payment processing or identity verification.

Information you provide directly:

• Full legal name as it appears on your CNIC or government-issued identity document.
• Date of birth (for mandatory age verification — you must be 18+ to hold a 288win account).
• Residential address in Pakistan.
• Pakistani mobile number and email address used for account communication and OTP verification.
• Login credentials (username and password — passwords are stored in hashed, non-reversible format).
• Payment information: mobile wallet identifiers (JazzCash account number, Easypaisa number), bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), and transaction records.
• Identity verification documents: CNIC front and back, proof of address (utility bill, bank statement).
• Communications you send to 288win support, including live chat transcripts and email correspondence.

Information collected automatically:

• IP address and approximate geographic location.
• Device type, operating system, browser type and version.
• Pages visited, time spent on platform sections, betting and gaming activity logs.
• Session timestamps, login history, and security event logs.
• Cookie and tracking data as described in Section 6 of this Policy.

3. How We Use Your Personal Data

288win uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your 288win account, including login authentication, password resets, and profile management.
• Identity and age verification: Confirming that you are who you say you are and that you meet the 18+ age requirement before permitting full platform access and withdrawals.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, and connected banking partners. Transaction records are maintained for regulatory and audit purposes.
• Service delivery: Providing access to sports betting markets including PSL cricket, American Football, Table Tennis, and other events; delivering live casino games and slot content; applying bonus offers to eligible accounts.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, multi-accounting, identity theft, and other prohibited conduct.
• Regulatory compliance: Fulfilling legal obligations including KYC (Know Your Customer), AML (Anti-Money Laundering), and responsible gaming requirements imposed by applicable regulatory frameworks.
• Customer support: Responding to your queries, resolving disputes, and processing responsible gaming requests such as deposit limits, cool-off periods, and self-exclusion applications.
• Platform improvement: Analysing usage patterns and technical performance data to improve the 288win user experience, fix issues, and develop new features.
• Marketing communications: Sending promotional emails or SMS notifications about 288win offers, new games, or bonuses — only where you have opted in to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

288win processes personal data on the following legal bases as applicable to each processing activity:

• Contractual necessity: Processing required to perform the contract between you and 288win — i.e., providing betting, casino, and payment services to your registered account.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, age verification, AML regulations, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform performance analytics where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and optional cookie categories where your affirmative consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

288win does not sell your personal data to third parties. We share personal data only in the limited circumstances described below:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the payment information necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and applicable Pakistani financial regulations.
• Identity verification providers: Third-party KYC service providers may process your identity documents and CNIC details to verify your identity and age on behalf of 288win.
• Technology and hosting providers: Cloud infrastructure, database, and software providers who host and maintain the 288win platform. These providers are bound by data processing agreements and may not use your data for their own purposes.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory instruction, 288win will disclose personal data to the relevant authority. This includes reporting of suspicious transactions under applicable AML obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 288win's business, user data may be transferred as part of that transaction. Users will be notified in advance of any such transfer where practicable.

6. Cookies & Tracking Technologies

288win uses cookies and similar tracking technologies to operate the platform correctly, analyse usage, and (where consented) deliver targeted communications. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function — session management, login authentication, security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and last-used payment method to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the 288win platform — which sections are visited most, where users drop off, and overall site performance. This data is used solely to improve the platform.
• Marketing cookies: Used only where you have provided explicit consent, these cookies allow 288win to present relevant offers and communications based on your betting and gaming activity history.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the 288win platform. Disabling other categories will not affect your ability to bet or play.

7. Data Retention

288win retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active account data is retained for the lifetime of your 288win account plus a minimum of five (5) years following account closure, in compliance with financial record-keeping and AML regulatory requirements.
• Transaction records and betting history are retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity verification documents are retained for the period required by applicable regulation, which is typically five (5) to seven (7) years.
• Marketing communication opt-in records are retained until you withdraw consent or for three (3) years from your last interaction, whichever is sooner.
• Support communication records are retained for two (2) years from the date of the last communication in each case.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 288win's internal data management procedures.

8. Data Security

288win implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your device and the 288win platform.
• Secure, hashed storage of account passwords — 288win staff cannot access your password in plain text.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of the 288win platform infrastructure.
• Incident response procedures for identifying, containing, and reporting data breaches in accordance with applicable obligations.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 288win login credentials. If you believe your account has been compromised, contact 288win support immediately via live chat.

9. Your Data Rights

Subject to applicable law and 288win's regulatory obligations, you have the following rights in respect of your personal data held by 288win:

• Right of access: You may request a copy of the personal data 288win holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Some corrections (e.g., name changes) require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 288win's regulatory retention obligations.
• Right to restrict processing: You may request that 288win limit the use of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the 288win support team via live chat or email at [email protected]. Requests will be responded to within 30 days. Identity verification may be required before actioning certain requests.

10. Children's Privacy

288win does not knowingly collect or process personal data from persons under the age of 18. The platform is strictly for adults aged 18 and over. Age verification is applied at account registration and, where necessary, at the withdrawal stage.

If 288win becomes aware that personal data has been collected from a person under 18, the account will be immediately suspended, all associated data will be reviewed, and any funds may be returned to the payment source pending investigation. If you believe a minor has registered on 288win, please notify us immediately via live chat or email.

11. International Data Transfers

288win may transfer personal data to servers and third-party processors located outside Pakistan in connection with cloud hosting, payment processing, and technology services. Any such international transfers are conducted in accordance with applicable data protection requirements and are protected by appropriate contractual safeguards (such as standard contractual clauses) to ensure your data receives a level of protection equivalent to that applicable in the jurisdiction of collection.

By using the 288win platform, you consent to the transfer of your personal data to countries outside your own where necessary for platform operations, subject to the protections described in this Policy.

12. Updates to This Privacy Policy

288win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, 288win will notify registered users via email or a prominent notice on the platform. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of 288win following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account and cease using the platform.

13. Contact Us – Data & Privacy Queries

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by 288win, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the 288win website — the fastest way to raise privacy queries or data subject requests.
• Email: [email protected] — for formal data subject access requests, deletion requests, or written privacy complaints. Please include "Privacy" in the subject line and your registered 288win mobile number for account identification.

288win aims to respond to all privacy-related queries within 30 calendar days. Complex requests may require additional time; in such cases, 288win will acknowledge receipt and provide an estimated resolution timeline.