288com Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 288com ("288com", "we", "us", "our") collects, uses, stores, discloses and protects personal information provided by users ("Player", "User", "you") when accessing or using the online casino and sports betting services available at https://288com.app (the "Platform").

288com is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the 288com platform. By registering an account with 288com, you acknowledge that you have read and understood this Privacy Policy.

This Policy applies to all data collected through the Platform, including data provided during account registration, KYC verification, deposits and withdrawals, gameplay activity, customer support interactions and marketing communications where opted in.

2. Data Controller

For the purposes of this Privacy Policy, 288com acts as the data controller in respect of all personal data collected through the Platform. The data controller is responsible for determining the purposes and means of processing your personal information.

Enquiries relating to the processing of your personal data, exercise of data rights, or complaints regarding data handling should be directed to the 288com Data Protection contact detailed in Section 15 of this Policy.

3. Data We Collect

288com collects the following categories of personal data:

288com does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data beyond what is strictly required for identity verification under KYC obligations.

4. How We Use Your Data

288com processes your personal data for the following purposes:

• Account management: To create, maintain and administer your 288com account, including processing login authentication and account settings changes.
• Identity verification (KYC): To verify your identity, confirm that you are 18 years of age or older, and comply with anti-money laundering obligations before processing withdrawals.
• Transaction processing: To process deposits and withdrawals in Pakistani Rupees via JazzCash, Easypaisa, bank transfer, USDT and other supported payment methods.
• Game and betting services: To deliver the casino and sports betting functionality of the platform, record wager outcomes, calculate winnings and update account balances.
• Responsible gaming compliance: To enforce deposit limits, session restrictions, self-exclusion requests and cooling-off periods as activated by the player or required by responsible gaming policy.
• Fraud prevention and security: To detect and investigate suspicious account activity, prevent unauthorised access, identify multi-accounting, and protect the platform from abuse.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through live chat or email.
• Legal compliance: To meet applicable legal and regulatory obligations, including the retention of financial records and cooperation with law enforcement requests where legally required.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the 288com platform's performance, game selection and user experience for Pakistani players.
• Marketing communications: To send promotional messages regarding 288com bonuses, new games and cricket betting offers — only where you have opted in to receive such communications.

5. Legal Basis for Processing

288com processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 288com — account registration, gameplay, deposits, withdrawals and KYC verification.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements and applicable gaming regulations.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming enforcement and aggregated analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time by contacting support.

6. Data Sharing & Disclosure

288com does not sell, rent or trade your personal data to third parties for their independent marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: Financial data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard, USDT wallet services, Skrill and Neteller solely to the extent necessary to process your requested transactions.
• Game software providers: Technical session data is shared with our certified casino game software providers to deliver RNG-verified game outcomes and live dealer streams. These providers act as data processors under contractual obligations to 288com.
• KYC verification services: Identity documents provided during KYC may be processed by specialist identity verification partners engaged by 288com to conduct CNIC authentication.
• Legal and regulatory authorities: Personal data may be disclosed to law enforcement agencies, regulatory authorities or courts where 288com is legally obliged to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering or other criminal activity.
• Corporate transactions: In the event of a merger, acquisition or asset sale involving 288com, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. Payment Data & Financial Privacy

288com handles PKR financial transactions with particular care. The following principles apply to all financial data processed on the platform:

• Full payment method credentials (e.g., complete JazzCash PIN, full bank account numbers) are never stored on 288com servers. Only payment reference identifiers necessary for transaction matching are retained.
• All financial data is transmitted over encrypted SSL/TLS connections between your device, the 288com platform and payment processor endpoints.
• Transaction history records (amounts, timestamps, payment method type) are retained for a minimum of five years to meet financial record-keeping obligations.
• Withdrawals are processed exclusively to payment methods that have been used for a deposit by the verified account holder. This policy exists to prevent fraudulent diversion of funds.

8. Cookies & Tracking Technologies

The 288com platform uses cookies and similar tracking technologies to operate core platform functionality and improve the player experience. The following cookie categories are used:

• Strictly necessary cookies: Required for session authentication, login state maintenance and security functions. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, game lobby filters and responsible gaming limit configurations. Deletion resets these preferences on your next visit.
• Analytics cookies: Collect anonymised, aggregated data about how Pakistani players navigate the platform — which game categories are most visited, where players drop off during registration. This data informs platform improvements.

You can control non-essential cookies through your browser settings. Note that disabling functional cookies may affect your ability to use certain 288com account features. 288com does not use third-party advertising cookies to serve behavioural advertisements on external websites.

9. Data Retention

288com retains personal data for as long as your account is active and for a defined period thereafter, in accordance with legal obligations and legitimate operational requirements:

• Active account data: Retained for the duration of the account relationship.
• KYC identity documents: Retained for a minimum of five years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years following each transaction.
• Support communications: Retained for three years following the resolution of the relevant enquiry or dispute.
• Self-exclusion records: Retained indefinitely to ensure that self-excluded players cannot re-register under the same identity.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

10. Your Data Rights

As a 288com player, you have the following rights in relation to your personal data. To exercise any of these rights, contact 288com at [email protected]:

• Right of access: You may request a copy of the personal data 288com holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that 288com restricts the processing of your data in certain circumstances, such as during an ongoing dispute.
• Right to data portability: You may request a structured, machine-readable copy of personal data you provided to 288com for the purpose of transferring it to another service.
• Right to object: You may object to processing based on legitimate interests, including processing for marketing purposes.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

11. Children's Privacy

The 288com platform is strictly intended for adults aged 18 and over. 288com does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has registered on the 288com platform, please contact our support team immediately. Upon confirmation, the account will be closed and any deposits returned to the originating payment method where feasible.

12. Data Security

288com implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure:

• Full SSL/TLS encryption on all data transmissions between your device and 288com servers
• Encrypted storage of passwords using industry-standard hashing algorithms — 288com staff cannot read your password in plain text
• Optional SMS-based two-factor authentication (2FA) for account login
• Access to player personal data restricted to 288com staff with a documented operational need
• Regular security audits of platform infrastructure and data handling procedures
• Automatic session timeout for inactive logged-in accounts

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, 288com will notify affected players without undue delay in accordance with applicable notification requirements.

13. International Data Transfers

288com operates with technology and payment infrastructure partners located in multiple jurisdictions. Where personal data is transferred outside of Pakistan — for example, to a game software provider's servers or an international payment processor — 288com ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the principles described in this Policy.

By using the 288com platform, you acknowledge and consent to the transfer of your personal data to these international service providers, subject to the protections described above.

14. Policy Updates

288com may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, our data practices or the services we offer. Material changes — those that significantly affect your rights or how your data is used — will be communicated to registered Pakistani players via SMS notification to the registered mobile number.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the 288com platform after an update constitutes acceptance of the revised Policy.

15. Contact & Data Enquiries

For all privacy-related enquiries, data rights requests or complaints regarding 288com's handling of your personal data, please contact us:

If you are not satisfied with 288com's response to a data privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.