Privacy Policy – 288game Pakistan Online Casino & Sports Betting

This Privacy Policy describes the data practices of 288game ("we", "us", "our") in relation to the personal information of players and visitors ("you") who use the 288game platform, accessible at 288game.bet. The policy covers data collected through the website, through mobile applications, and through direct communication channels including live chat and email.

288game is designed specifically for Pakistani players. All platform operations are conducted in Pakistani Rupees (PKR) and all customer interactions are handled in English and Urdu. This Privacy Policy is written in English (en-PK) and is intended to be understood by Pakistani residents without the need for legal expertise.

This policy should be read alongside 288game's Terms and Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your relationship with 288game. By registering an account or using the 288game platform in any capacity, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

The current version of this policy was last updated on 1 June 2025. We review and update this policy periodically to reflect changes in our data practices, technology, or applicable regulations. The most current version is always published on this page.

288game collects the following categories of personal data in the course of operating the platform:

We collect only the data we genuinely need to operate the 288game platform and fulfil our legal obligations. We do not collect data speculatively or for undisclosed future uses.

288game collects personal data through the following channels:

• Directly from you: When you register an account, you provide your mobile number, name, and date of birth. When you make a deposit or request a withdrawal, you provide payment account details. When you contact support, the content of your communication is recorded.
• Automatically during platform use: When you visit 288game.bet or use the app, technical data (IP address, device information, browser type) and behavioural data (pages visited, features used, session duration) are automatically recorded through server logs, cookies, and analytics tools.
• From third-party payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the relevant payment processor confirms the transaction to 288game. This confirmation may include references necessary to reconcile your account balance but does not include your full payment credentials.
• From identity verification providers: Where 288game is required to verify your identity for withdrawal processing or regulatory compliance, we may use an approved third-party identity verification service. These services confirm the authenticity of documents you submit and report a pass/fail result to 288game.
• From fraud prevention systems: 288game operates automated fraud detection that monitors account activity patterns. Where suspicious activity is flagged, additional investigation may involve cross-referencing data points already held in your account.

288game uses personal data for the following specific purposes. Every use of your data is directly connected to operating the platform or meeting a legal obligation — we do not use data for purposes unrelated to your 288game account:

• Account creation and management: Your registration data is used to create and maintain your 288game account, verify your identity, and ensure each registered player is a genuine unique individual.
• Processing transactions: Financial data is used to process PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card, and to facilitate withdrawals back to your registered payment method. All transactions are denominated in PKR.
• Age and identity verification: 288game is required to verify that players are 18 or older and are who they say they are. Your identity data, including CNIC where requested, is used for this purpose before withdrawals above defined thresholds are processed.
• Bet and game settlement: Your gaming activity data is used to settle bets, calculate winnings, apply bonuses, and produce your transaction and game history, which you can view in your account at any time.
• Fraud and security monitoring: Technical and behavioural data is used to detect unusual account activity, prevent unauthorised access, and identify potential cases of bonus abuse, money laundering, or multi-accounting.
• Responsible gaming: Gaming activity data is monitored by 288game's responsible gaming systems to identify patterns that may indicate problem gambling. This data is used to trigger internal review processes and — where appropriate — outreach to affected players. See our Responsible Gaming page for full details.
• Customer support: Communications data is used by our support team to handle your queries, resolve disputes, and maintain a record of interactions relevant to your account.
• Platform improvement: Aggregated, anonymised behavioural and technical data is used to analyse platform performance, identify areas for improvement, and guide product development decisions at 288game.
• Regulatory compliance: 288game is required to maintain certain records for regulatory and legal compliance purposes. Data retained for compliance purposes is held securely and accessed only as required.

Every use of your personal data at 288game is underpinned by one of the following legal bases:

• Performance of a contract: The majority of data processing at 288game is necessary to fulfil the contract between you and 288game — specifically, to operate your account, process bets, and handle payments. Without this processing, we cannot provide the service.
• Legal obligation: Some data processing is required for 288game to comply with applicable legal obligations, including anti-money laundering (AML) requirements and age verification obligations.
• Legitimate interests: Fraud detection, security monitoring, and platform improvement are conducted on the basis of 288game's legitimate interests in running a secure and well-functioning platform. These interests are balanced against your right to privacy — we use the minimum data necessary and apply appropriate security controls.
• Consent: Marketing communications (SMS, push notifications, email if provided) are sent only where you have given explicit consent at registration or subsequently via your account settings. Consent can be withdrawn at any time without affecting your ability to use the 288game platform.

288game does not sell your personal data to any third party. We do not share your data with advertising networks, data brokers, or commercial data aggregators. Data is shared only in the following strictly controlled circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners (for IBFT), and card payment networks receive only the data strictly necessary to process your deposit or withdrawal in PKR. Each payment processor is bound by their own privacy obligations and by our data processing agreements.
• Identity verification providers: Where required for KYC (Know Your Customer) or age verification, we share identity documents with an approved third-party verification service. This service returns a verification result to 288game and does not retain your documents beyond the period required to complete the check.
• Fraud prevention and AML systems: 288game uses industry-standard fraud detection and anti-money laundering screening tools. Certain data points may be shared with these systems in order to assess risk. These providers are contractually bound to use shared data only for the specified purpose.
• Technology and infrastructure providers: 288game's platform relies on cloud hosting, software, and infrastructure providers. These providers may process data on 288game's behalf but are contractually bound not to use player data for their own purposes and to maintain appropriate security standards.
• Legal and regulatory authorities: Where required by law or a valid legal process, 288game may be obliged to disclose specific player data to law enforcement, regulatory authorities, or courts. We will always seek to verify the legality and scope of any such request before complying.
• Business transfers: If 288game is involved in a merger, acquisition, or asset sale, player data may form part of the transferred assets. In such a scenario, affected players would be notified in advance and given the opportunity to request account closure prior to the transfer.

288game uses cookies and similar tracking technologies to operate the platform effectively and to understand how players use the site. Here is a plain explanation of the types of cookies we use:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your session when you are logged in, remember your preferences (e.g., odds format, language), and enable secure payment processes. You cannot opt out of these cookies because the platform cannot work without them.
• Analytics Cookies: 288game uses analytics tools to understand aggregate patterns of platform use — which features are popular, where players encounter friction, how long sessions last. This data is collected in anonymised or pseudonymised form and is not linked to your personal identity. You can opt out of analytics cookies in the cookie settings on the platform.
• Functional Cookies: These remember choices you make — for example, that you prefer decimal odds or Urdu language support — so you don't have to reset preferences each session. You can opt out of functional cookies, though this may affect platform convenience.
• No Third-Party Advertising Cookies: 288game does not use advertising cookies or allow third-party advertising networks to place tracking cookies on our platform. There are no retargeting pixels or social media tracking scripts on 288game.

288game takes the security of financial data with particular seriousness. Pakistani players trust us with their Easypaisa accounts, JazzCash wallets, bank account references, and debit/credit card details. Here is precisely how that data is handled:

• Easypaisa and JazzCash: When you deposit or withdraw via Easypaisa or JazzCash, the transaction is initiated through the respective payment provider's API. 288game receives a transaction confirmation reference but does not store your Easypaisa or JazzCash PIN or full wallet credentials.
• Bank IBFT: Bank account references (IBAN or account number) provided for IBFT withdrawals are stored in encrypted form, accessible only to the payments team on a need-to-process basis.
• Card Payments: 288game does not store raw card numbers. Card details submitted for deposits are tokenised through our PCI-DSS compliant payment gateway. A token representing your card is stored (to facilitate future deposits without re-entry), but the actual card number, CVV, and expiry are never stored on 288game's systems.
• Transaction Records: Records of all PKR transactions — amounts, timestamps, methods, and references — are retained for a minimum of five years for regulatory compliance and dispute resolution purposes.

288game retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your active 288game account, plus a minimum of five years following account closure for regulatory and legal compliance purposes.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five years from the date of verification, or for the duration required by applicable AML and KYC obligations, whichever is longer.
• Customer support records: Retained for three years from the date of the last interaction in a support conversation, to allow for dispute resolution and quality assurance.
• Gaming activity logs: Retained for five years to support bet dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Analytics data: Aggregated, anonymised analytics data has no defined maximum retention period as it cannot be linked to individual identities. Raw behavioural data logs from which analytics are derived are retained for 12 months.

When data is no longer required to be retained, it is securely deleted or anonymised such that it can no longer be linked to any individual player.

As a 288game player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@288game.bet. We will respond to all data rights requests within 30 days:

• Right of Access (Data Subject Access Request): You may request a copy of all personal data 288game holds about you. We will provide this in a structured, readable format. Requests can be made in English or Urdu.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Contact support with the specific data point you wish to correct and the correct version.
• Right to Erasure ("Right to be Forgotten"): You may request that 288game delete your personal data. We will comply where no legal obligation requires us to retain the data. Note that financial transaction records must be retained for regulatory compliance — these cannot be deleted on request. The rest of your account data can be erased following account closure.
• Right to Restrict Processing: In certain circumstances, you may request that 288game stops using your data for specific purposes while the relevant data remains in our systems — for example, while a dispute is being investigated.
• Right to Object: You may object to processing of your data based on 288game's legitimate interests, including profiling for fraud detection. We will assess your objection and respond. Note that some processing is essential for platform security and cannot be stopped without closing your account.
• Right to Withdraw Consent: Where processing is based on consent (primarily marketing communications), you may withdraw consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request your data in a machine-readable format (CSV or equivalent) to transfer to another service where technically feasible.

288game is strictly for adults aged 18 and over. The platform is not directed at, and does not knowingly collect data from, individuals under the age of 18. Age verification is conducted at registration and prior to first withdrawal to confirm that players meet the minimum age requirement.

If 288game becomes aware that a player under the age of 18 has registered an account, the account will be closed immediately, all activity will be voided, any deposits will be returned to the payment source, and all personal data associated with the minor will be securely deleted to the extent permitted by law.

If you believe a minor may have registered at 288game using your payment details or identity, please contact our support team immediately at support@288game.bet. We will investigate and take action promptly.

288game sends marketing communications — including promotions, bonus offers, and platform news — only to players who have explicitly opted in to receive them. Marketing channels include SMS to your registered Pakistani mobile number and push notifications within the 288game app. Email marketing is available if you have provided an email address and consented to its use.

You can control your marketing communication preferences at any time by:

• Visiting the Communication Preferences section of your 288game account settings.
• Replying STOP to any SMS received from 288game.
• Disabling push notifications in the app settings on your device.
• Contacting our support team at support@288game.bet with a request to unsubscribe.

Opting out of marketing communications will not affect your ability to use any part of the 288game platform. You will continue to receive transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — regardless of your marketing preferences, as these are essential to account operation.

288game does not engage in any form of aggressive re-marketing or targeted advertising through external platforms. Your browsing behaviour on 288game is not shared with advertising networks.

288game implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and 288game servers.
• AES-256 encryption for sensitive data stored in 288game's database infrastructure.
• PCI-DSS compliant payment processing — no raw card data is ever stored on 288game systems.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting internal staff access to player data on a strict need-to-know basis.
• Continuous automated monitoring of system access logs for anomalous activity.
• Regular penetration testing and vulnerability assessments by qualified security professionals.
• Incident response procedures ensuring data breach notification where required by applicable law.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that affects your personal data and creates a significant risk to you, 288game will notify you promptly through your registered contact details and provide clear guidance on any steps you should take.

288game reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. When material changes are made to this policy, we will notify registered players via SMS or in-platform notification at least 7 days before the changes take effect.

The updated version will be published on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Continued use of 288game after a policy update has taken effect constitutes acceptance of the updated policy.

If you have concerns about any proposed change to this policy before it takes effect, please contact our support team at support@288game.bet. If you do not accept the updated policy, you may close your account before the changes take effect — your balance will be returned to your registered payment method.

If you have any questions about this Privacy Policy or about how 288game handles your personal data, please contact us through any of the following channels:

• Email: support@288game.bet — for privacy-specific enquiries, please use the subject line "Privacy Enquiry".
• Live Chat: Available 24/7 from within your logged-in 288game account. Support is provided in English and Urdu. Response time is typically under 90 seconds.

If you wish to raise a formal complaint about 288game's data practices, please submit it in writing to support@288game.bet marked as "Data Complaint". We will acknowledge receipt within 48 hours and provide a full response within 30 days. If you are not satisfied with our response, you may raise your complaint with the relevant data protection authority applicable under your jurisdiction.

For general legal and terms enquiries, please refer to our Terms and Conditions page. For questions about responsible gaming tools and player protection, please visit our Responsible Gaming page.