288com Privacy Policy — Your Data, Protected

1 What Information We Collect

When you register and use your 288com account, we collect the following categories of information:

We do not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health data or biometric information. We also do not knowingly collect data from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will delete it immediately and close the associated account.

2 How We Use Your Information

288com uses the information we collect for the following purposes:

• Account management: Creating, verifying and maintaining your 288com account, including processing deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer and mobile wallets.
• Platform delivery: Making sports betting markets, cricket and PSL odds, slot games, live casino tables and the full game lobby available to your account.
• Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that your identity matches the details registered to your account.
• Fraud prevention and security: Detecting unusual login attempts, suspicious transactions or patterns of activity that suggest account misuse, money laundering or bonus abuse.
• Customer support: Responding to your queries, resolving disputes, processing withdrawal requests and communicating about your account.
• Responsible gaming: Monitoring account activity to identify patterns that may suggest problem gambling behaviour and making the relevant self-help tools available.
• Service improvement: Analysing aggregated usage data — in a form that cannot be used to identify you individually — to improve platform performance, game selection and the overall user experience.
• Communications: Sending you account-related notifications such as transaction confirmations, security alerts and updates to our policies. Promotional communications are only sent where you have opted in and can be switched off at any time from your account settings.

3 Payment Data and Financial Security

Because 288com processes real-money transactions in PKR, we apply additional care to how financial data is handled.

• All payment processing is carried out through secure, PCI-DSS compliant payment gateways. 288com does not store full card numbers, full account numbers or complete mobile wallet credentials on its own servers.
• When you use JazzCash, Easypaisa or Raast, your payment details are passed directly to the respective payment processor via an encrypted channel. 288com receives only a transaction reference and status confirmation.
• Your deposit and withdrawal history within 288com is stored as part of your account record and is visible to you at all times from your account transaction history page.
• For withdrawal requests, 288com may verify that the payment method belongs to you before releasing funds. This is a security measure to protect against unauthorised withdrawals and does not indicate any suspicion of misconduct.
• Financial records including transaction histories are retained for a period necessary to comply with applicable record-keeping obligations. This is explained further in Section 6 (Data Retention).

4 Sharing Your Information

288com does not sell, rent or trade your personal information. We may share your data only in the following limited circumstances:

• Payment processors: To process deposits and withdrawals, we share the minimum necessary information with our payment gateway partners, including JazzCash, Easypaisa and Raast processors. These partners operate under their own privacy policies and data protection obligations.
• Game software providers: Third-party game developers whose titles are hosted on 288com may receive technical session data (such as a session token and bet amounts) to facilitate gameplay. They do not receive your name, CNIC, contact details or payment information.
• Identity verification services: Where we use a third-party service to assist with identity or age verification, your identity data may be shared with that service solely for verification purposes and is not retained by them beyond the verification process.
• Legal obligations: We may disclose your information where required to do so by law, court order or where we have a good-faith belief that disclosure is necessary to protect the safety of any person, prevent fraud or respond to a legitimate legal request.
• Business transfers: In the event that 288com or its operating entity is involved in a merger, acquisition or sale of assets, your personal data may be transferred as part of that transaction. You would be notified in advance of any such transfer and the new entity would be bound by the same privacy commitments as those described here.

In all cases where data is shared with third parties, we require those parties to handle your information with the same standard of care that 288com applies. We do not permit third parties to use your data for their own marketing purposes.

5 Cookies and Tracking Technologies

288com uses cookies and similar technologies to make the platform function correctly and to understand how it is being used. Here is a breakdown of what we use and why:

• Essential cookies: These are required for the platform to work. They keep you logged in during a session, remember your language preferences and maintain your account state as you move between pages. These cannot be disabled without breaking core functionality.
• Analytics cookies: We use anonymised analytics to understand which pages and features are most used, how long players spend on different sections and where technical errors occur. This data is aggregated and cannot be used to identify you individually.
• Security cookies: These help us detect and prevent fraudulent login attempts and protect your account from unauthorised access by verifying that activity is consistent with your normal usage pattern.
• Preference cookies: These remember settings you have chosen — such as game display preferences or notification settings — so you do not have to reconfigure them each time you log in.

6 Data Retention

288com retains your personal data for as long as your account remains active and for a defined period after account closure, based on the nature of the data:

• Account and identity data is retained for the duration of your account and for a period thereafter to comply with record-keeping requirements related to financial transactions and identity verification.
• Transaction records including deposit and withdrawal history in PKR are retained for a minimum period required by applicable financial record-keeping standards. This ensures we can respond accurately to any dispute or query relating to past transactions.
• Support and communication records are retained for a period sufficient to resolve any related disputes and to train and improve the quality of our support service.
• Technical and usage data such as session logs and IP address records are retained for a shorter period, primarily for security and fraud prevention purposes.

When data is no longer required for any of the above purposes, it is securely deleted or anonymised so that it can no longer be linked to your identity. You may request early deletion of your data — subject to our legal obligations — by contacting support as described in Section 10.

7 Your Privacy Rights

As a 288com player, you have the following rights over the personal data we hold about you:

To exercise any of the above rights, contact the 288com support team via live chat or the email address shown in the footer of this page. We will verify your identity before actioning any data request to ensure your information is not disclosed to an unauthorised party.

8 Security Measures

288com applies multiple layers of technical and organisational security to protect your personal data:

• TLS encryption on all data transmitted between your device and 288com servers, preventing interception in transit.
• Encrypted storage for sensitive account data, including hashed passwords that cannot be reversed even by 288com staff.
• Two-factor authentication (2FA) is available on your account and is strongly encouraged. Enabling 2FA significantly reduces the risk of unauthorised access even if your password is compromised.
• Automated fraud detection monitors login patterns, transaction behaviour and device fingerprints to flag unusual activity for review before it can cause harm to your account.
• Staff access controls ensure that only authorised personnel with a legitimate operational need can access player account data, and all such access is logged and auditable.
• Regular security reviews are conducted to identify and address potential vulnerabilities in the platform infrastructure before they can be exploited.

9 Updates to This Privacy Policy

288com may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to how we communicate our data practices. When updates are made, the revised policy will be published on this page with an updated "Last Updated" date.

For changes that materially affect your rights or how your data is used, we will notify you via your registered email address before the changes take effect. Continued use of the platform after notification constitutes acceptance of the updated policy.

We encourage you to revisit this page periodically. If you have any concerns about a change that has been made, please contact the support team before continuing to use the platform.

10 Privacy Questions and Contact

If you have a question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your information has been handled, please get in touch with the 288com support team.

The quickest way to reach us is via 24/7 live chat, available from any page on the platform. You can also contact us by email — the address is shown in the footer of this page. When submitting a data request, please include your registered username and a description of what you are requesting so we can process it efficiently.

We aim to respond to all privacy-related requests within a reasonable period. Complex requests — such as full data exports or account deletion — may take slightly longer due to the verification steps involved, but we will keep you informed of progress throughout.

For any dispute relating to how your data has been handled that cannot be resolved through direct contact with our support team, a formal escalation process is available — details of which can be requested via live chat.