Privacy Policy — Your Data Is Safe with 288win

1 Who We Are

288win is an online gaming and entertainment platform accessible at 288win.onl, offering sports betting, casino games, slots, live casino, bingo, fishing games, crash games, and a wide-ranging game lobby — all designed for players in Pakistan. When this Privacy Policy refers to "288win", "we", "us", or "our", it refers to the operators of the 288win platform.

This Privacy Policy explains how 288win collects, uses, stores, and shares personal data when you visit our website, use our Android app, or interact with any of our services. It applies to all registered players as well as visitors who browse 288win without registering an account.

If you have any questions about this policy or how your data is handled, please reach out to our support team. Contact details are available throughout the 288win platform.

2 Data We Collect

288win collects personal data in the following circumstances: when you register an account, when you make a deposit or withdrawal, when you contact our support team, when you use the platform's features, and passively through cookies and device data when you visit our site or app.

The categories of data we collect include:

We do not collect data that is unnecessary for the purposes described in this policy. We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, or health information unless directly relevant to a responsible gaming or legal matter.

3 How We Use Your Data

The personal data 288win collects is used for specific, legitimate purposes. We do not use your data for anything that falls outside the scope of delivering and improving our gaming platform and services.

• Account Management — To create and maintain your 288win account, verify your identity, and manage your login credentials securely.
• Payment Processing — To process deposits in PKR via JazzCash, Easypaisa, Raast, bank transfer, and card payments, and to process withdrawal requests back to your nominated payment method.
• Platform Delivery — To provide access to all 288win products including sports betting, casino, slots, live casino, bingo, and the full game lobby.
• Fraud Prevention & Security — To detect and prevent fraud, account takeover, bonus abuse, money laundering, and other activities that may harm players or the integrity of the platform.
• Responsible Gaming — To monitor gaming activity for signs of problematic behaviour, apply deposit limits or self-exclusions when requested, and comply with responsible gaming obligations.
• Customer Support — To respond to your queries, resolve disputes, and improve the quality of our support services.
• Platform Improvement — To analyse aggregate usage data, identify bugs, and improve the overall experience on 288win for all players.
• Marketing Communications — To send you relevant promotional offers and updates about 288win, where you have opted in to receive such communications. You can opt out of marketing communications at any time by contacting our support team or adjusting your notification preferences in your account settings.

4 Legal Basis for Processing

288win processes your personal data on the following legal grounds:

• Contractual Necessity — Processing your registration details, payment data, and gaming activity is necessary to deliver the services you have signed up for under our Terms and Conditions.
• Legitimate Interests — We process certain data — such as device information, IP addresses, and session logs — to protect our platform from fraud, maintain security, and improve our services. These legitimate interests do not override your fundamental privacy rights.
• Legal Obligation — Identity verification and transaction records are retained where required by applicable anti-money laundering and financial regulations.
• Consent — Where we rely on consent — such as for optional marketing emails — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Payment Data & Financial Transactions

All financial transactions on 288win are conducted in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, the relevant transaction data is processed by the respective payment provider under their own privacy and security standards.

We retain records of deposit and withdrawal amounts, dates, and payment methods for account management, fraud prevention, and legal compliance purposes. These records are kept for the duration of your account and for a period thereafter as required by applicable regulations.

All deposits must be made using a payment method registered in your own name. Third-party deposits are not permitted and will be returned. This rule exists to protect you from fraud and to ensure that all financial activity on your account is genuinely authorised by you.

6 Cookies & Tracking Technologies

288win uses cookies and similar tracking technologies on our website and app. Cookies are small text files placed on your device that help us deliver a functioning, personalised, and secure platform experience.

The types of cookies we use include:

• Essential Cookies — Required for the platform to function. These include session cookies that keep you logged in during your visit. Without these, the platform cannot operate correctly.
• Analytics Cookies — Help us understand how players use 288win — which pages are most visited, where users drop off, and how long sessions last. This data is aggregated and does not identify you personally.
• Functional Cookies — Remember your preferences, such as language settings, to provide a more personalised experience on return visits.
• Security Cookies — Used to detect and prevent fraudulent activity, including identifying suspicious login attempts or unusual session patterns.

We do not use cookies to serve third-party advertising or to track your activity across unrelated websites for commercial purposes.

7 Third-Party Sharing

288win does not sell your personal data to any third party. We share data only with specific categories of trusted partners where it is necessary to operate the platform and deliver our services to you:

• Game Providers — Studios and software providers whose games appear in the 288win game lobby may receive anonymised session data necessary to deliver and audit game outcomes. They do not receive your full personal profile.
• Payment Processors — JazzCash, Easypaisa, Raast, and bank partners receive transaction data necessary to process your deposits and withdrawals. Each operates under its own privacy and security framework.
• Identity Verification Services — Where we use third-party KYC (Know Your Customer) services to verify identity documents, those providers handle your documents under strict data protection agreements with 288win.
• Fraud & Security Partners — We may share device data, IP information, and transaction patterns with fraud prevention services to protect the platform and all players.
• Legal & Regulatory Authorities — We may be required to disclose certain data in response to a valid legal request, court order, or regulatory obligation. In such cases, we will only share the minimum data required to comply.

All third parties who receive data from 288win are required to handle it in a manner consistent with applicable data protection standards. We do not share data with third-party advertisers, data brokers, or marketing platforms without your explicit consent.

8 Data Retention

288win retains your personal data for as long as your account is active and for a defined period after account closure, in line with the following principles:

• Account registration and profile data is retained for the lifetime of your account. After account closure, basic identification records may be retained for up to 5 years to comply with anti-money laundering and financial record-keeping obligations.
• Payment transaction records are retained for a minimum of 5 years following the transaction date, as required for financial compliance purposes.
• Identity verification documents (such as CNIC copies) are retained for the duration of your account and for a period of up to 5 years after closure, unless a longer retention period is required by applicable law.
• Gaming activity logs are retained for the duration of your account and for up to 2 years after closure for dispute resolution and responsible gaming audit purposes.
• Support correspondence is retained for up to 3 years, or longer if it relates to an unresolved dispute or legal matter.

9 Your Rights

As a player on the 288win platform, you have a number of rights regarding the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary obstacles.

• Right of Access — You can request a copy of the personal data 288win holds about you at any time. We will respond to such requests within a reasonable timeframe.
• Right to Rectification — If any of the data we hold about you is inaccurate or incomplete, you can ask us to correct it. Some corrections may require supporting documentation.
• Right to Erasure — You can request that we delete your personal data. This right is subject to any overriding legal obligations — for example, we are required to retain certain financial records for a period after account closure regardless of a deletion request.
• Right to Object — You can object to certain types of data processing, including marketing communications. Objections to processing based on legitimate interests will be reviewed on a case-by-case basis.
• Right to Withdraw Consent — Where processing is based on your consent (such as marketing emails), you can withdraw that consent at any time without affecting any prior processing.
• Right to Data Portability — You can request a machine-readable copy of the personal data you have provided to 288win, for the purpose of transferring it to another service if you choose.

To exercise any of these rights, please contact our support team. We will acknowledge your request and aim to provide a full response within 30 days. In complex cases, we may need up to 60 days, in which case we will keep you informed of progress.

10 Children's Privacy

288win is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. By registering an account, you confirm that you are at least 18 years old.

If you believe that a child has registered an account on 288win, please contact our support team immediately with details. We take these reports seriously and act on them as quickly as possible. We also strongly encourage parents and guardians to make use of parental control tools on shared devices to prevent underage access to gaming platforms.

11 Security Measures

288win employs a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and the 288win platform.
• Encrypted storage of sensitive account and identity data on secure servers with restricted access.
• Multi-factor authentication options for player accounts to prevent unauthorised logins.
• Continuous monitoring of platform activity for unusual patterns, suspicious transactions, and potential security incidents.
• Regular internal security reviews and access control audits to limit who within our organisation can view player data.
• Strict data processing agreements with all third-party service providers who handle player data on our behalf.

While we work hard to protect your data, no online platform can guarantee absolute security. We strongly encourage you to use a strong, unique password for your 288win account, enable any available two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately.

12 Changes to This Privacy Policy

288win may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make significant changes, we will notify registered players through in-platform notifications or via the contact details on file.

The updated policy will always be published on this page with a revised "Last Updated" date at the top. We encourage you to review this page periodically to stay informed about how we are protecting your data.

This Privacy Policy was last reviewed in January 2026 and supersedes all previous versions published on the 288win platform.