Privacy Policy – 288wn Pakistan Online Gaming Data Protection

1. Introduction

This Privacy Policy describes how 288wn ("we", "us", "our") collects, processes, stores, and protects the personal data of players ("you", "your") who use the 288wn website, mobile application, and associated services at 288wn.app.

We understand that privacy is not a formality — it's a genuine concern for anyone sharing personal information with an online platform. Pakistani players entrust 288wn with their name, contact details, financial information, and gaming history every time they use the platform. We take that trust seriously and have designed our data practices around protecting it, not exploiting it.

This policy applies to all data collected through the 288wn platform. It should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which are part of the complete agreement governing your use of 288wn.

By registering an account or continuing to use 288wn after this policy is updated, you confirm that you have read and understood how your data is handled. If anything in this policy is unclear, our support team is available 24/7 to explain it — please contact us before proceeding if you have concerns.

2. What We Collect

288wn collects personal data in several different ways depending on how you interact with the platform. Below is a full breakdown of the categories of data we collect and the circumstances in which we collect them.

2.1 Registration Information

When you create a 288wn account, we collect your full name, date of birth, Pakistani mobile phone number, and email address (if provided). This information is mandatory — without it, we cannot create an account for you or verify your eligibility to use the platform.

2.2 Identity Verification Documents

As part of our Know Your Customer (KYC) process, we may collect copies of your CNIC (Computerised National Identity Card), a utility bill or bank statement as proof of address, and a selfie photograph. These documents are used solely for identity verification purposes and are handled with strict access controls. See Section 9 for full details on KYC.

2.3 Financial Information

We collect records of your deposit and withdrawal transactions, including the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard), transaction reference numbers, amounts, and timestamps. We do not store full payment credentials — card numbers and wallet PINs are processed by our certified payment gateway partners, not held on 288wn servers.

2.4 Gaming Activity

We maintain records of all betting and gaming activity on your 288wn account — bets placed, games played, stakes, outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and platform improvement.

2.5 Device and Technical Data

When you access 288wn, our systems automatically collect certain technical information including your IP address, device type and operating system, browser type and version, referring URL, pages visited on the platform, and session duration. This data helps us operate the platform securely, detect fraud, and improve performance.

2.6 Communications

If you contact 288wn support, we retain records of those communications including chat transcripts, emails, and call logs (where applicable). These records are kept for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Data

288wn uses your personal data for specific, defined purposes. We do not use your data for anything outside these purposes without your explicit consent.

3.1 Operating Your Account

The most fundamental use of your data is simply running your 288wn account. Processing deposits and withdrawals, verifying your identity, settling bets, crediting bonuses, and maintaining your betting history all require the use of personal data. Without this, the service cannot function.

3.2 Platform Security and Fraud Prevention

We use IP addresses, device fingerprints, and behavioural patterns to detect and prevent fraudulent activity on 288wn. This includes identifying multiple accounts operated by the same person, detecting use of automated tools, and flagging unusual transaction patterns consistent with money laundering or financial crime. This monitoring protects all players on the platform, not just 288wn as a business.

3.3 Responsible Gaming Monitoring

288wn uses your gaming activity data to monitor for patterns that may indicate problem gambling behaviour — for example, significantly increased bet frequency, large loss sequences, or rapid escalation of stake amounts. Where our responsible gaming system identifies concerning patterns, our trained support team may proactively reach out to the player in question. This is done in the interest of player welfare, not for marketing purposes.

3.4 Customer Support

When you contact 288wn support, we access your account and communication history to provide informed, effective assistance. Support communications are retained to ensure consistent service quality, train staff, and resolve disputes accurately.

3.5 Legal and Regulatory Compliance

We are required to maintain records of player identity, transactions, and gaming activity to comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations. These records may be disclosed to competent authorities if required by law — this is non-negotiable and applies regardless of a player's preferences.

3.6 Platform Improvement

Aggregated, anonymised data about how players use 288wn helps us improve the platform. This includes analysing which features are used most, where players encounter difficulties, and how the mobile experience performs on different device types. Individual player data used in this way is always anonymised before analysis.

3.7 Marketing Communications

With your consent, 288wn may send you promotional communications about new features, bonuses, and offers. You can opt out of marketing communications at any time through your account settings or by contacting support. Opting out of marketing does not affect service-related communications such as transaction confirmations and security alerts.

4. Legal Basis for Processing

Every use of your personal data by 288wn rests on one of the following legal bases:

• Contract: Processing necessary to fulfil the agreement between you and 288wn — running your account, processing transactions, settling bets.
• Legal Obligation: Processing required by law — KYC identity verification, AML transaction monitoring, reporting to regulatory authorities where mandated.
• Legitimate Interest: Processing that serves a genuine operational need proportionate to its privacy impact — fraud detection, platform security, support quality assurance, anonymised product analytics.
• Consent: Processing you have specifically agreed to — receiving marketing communications from 288wn. This consent can be withdrawn at any time.

We do not rely on consent for any processing that is actually required to operate your account — we use the appropriate legal basis (contract or legal obligation) for those. This means that withdrawing your consent for marketing does not affect the operation of your 288wn account.

5. Who We Share Your Data With

288wn does not sell your personal data to any third party under any circumstances. We share your data only where it is necessary to operate the platform and where the recipient is bound by appropriate data protection commitments. The categories of recipients are as follows:

5.1 Payment Processors

To process your deposits and withdrawals, we share necessary transaction data with our payment gateway partners including Easypaisa, JazzCash, NayaPay, SadaPay, and bank card processors. These providers receive only the transaction data they need to process the payment — they do not receive your gaming history or other account information.

5.2 Identity Verification Providers

If you undergo KYC verification, your identity documents may be processed by a specialist third-party identity verification provider operating under strict contractual data protection terms. These providers verify the authenticity of documents; they do not retain your documents beyond what is required for the verification process.

5.3 Technology and Infrastructure Providers

We use third-party providers for cloud hosting, data storage, cybersecurity services, and platform infrastructure. These providers process data on our behalf under data processing agreements that prohibit them from using your data for any purpose other than providing their service to 288wn.

5.4 Game Content Providers

Third-party game developers whose titles appear on 288wn — particularly live dealer casino providers — may receive limited session data (such as stake amounts and game outcomes) necessary for operating the game and settling results. These providers do not receive your identity information and are contractually prohibited from using the data for any purpose beyond delivering the game.

5.5 Regulatory and Law Enforcement Authorities

288wn will share personal data with competent authorities where required by law. This includes disclosures required under AML and CTF regulations, responses to court orders, and cooperation with investigations into financial crime or fraud. We will not notify players of such disclosures where doing so would be unlawful or would prejudice an investigation.

6. How Long We Keep Your Data

We retain personal data only for as long as it is needed for the purpose it was collected, or as long as we are legally required to keep it. Below are the standard retention periods that apply at 288wn:

• Account data (registration information): Retained for the life of your account plus 5 years after closure, to satisfy legal retention requirements.
• KYC and identity documents: Retained for 5 years after account closure in accordance with AML compliance obligations.
• Financial transaction records: Retained for 5 years after the transaction date for AML compliance purposes.
• Gaming activity records: Retained for the life of your account plus 3 years after closure.
• Support communications: Retained for 2 years after the last interaction to enable dispute resolution and quality monitoring.
• Technical logs (IP, device): Retained for 12 months, after which logs are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus 12 months as proof of the consent having been given.

After the applicable retention period expires, data is securely deleted or irreversibly anonymised. If you request deletion of your data before the retention period expires, we will action your request to the maximum extent permitted by our legal obligations — some data may need to be retained despite a deletion request where a legal obligation requires it, and we will explain which data cannot be deleted and why.

7. Security Measures

288wn implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are regularly reviewed and updated as technology and threat landscapes evolve.

Technical measures include: TLS 1.3 encryption on all data in transit; encryption of sensitive data fields at rest in our database; firewalled and access-controlled cloud infrastructure; automated intrusion detection systems; secure development practices with security review built into the deployment pipeline.

Organisational measures include: role-based access control limiting data access to staff with a demonstrated need; mandatory privacy and security training for all staff with access to personal data; contractual data protection obligations on all third-party processors; a documented incident response procedure.

Despite these measures, no internet-based system can guarantee absolute security. We strongly encourage players to protect their own accounts by using a strong, unique password for 288wn, enabling OTP verification, and contacting us immediately if they suspect unauthorised access.

8. Cookies & Tracking Technologies

288wn uses cookies and similar technologies to operate the platform effectively and improve your experience. A cookie is a small text file placed on your device by a website you visit. Below is a breakdown of the types of cookies we use:

8.1 Essential Cookies

These cookies are necessary for the platform to function. They maintain your login session, remember your language preference, protect against CSRF attacks, and ensure your bet slip is maintained across page loads. You cannot opt out of essential cookies without disabling core platform functionality.

8.2 Functional Cookies

Functional cookies remember your preferences and settings — for example, your preferred odds format, game lobby layout, and notification settings. These cookies improve your experience but are not strictly required.

8.3 Analytics Cookies

288wn uses anonymised analytics tools to understand how players navigate the platform, which features are used, and where performance improvements are needed. Analytics data is aggregated and does not identify individual players.

8.4 Security Cookies

We use cookies to support our fraud prevention systems, including device fingerprinting to detect multiple account attempts and bot activity. These cookies are part of our security infrastructure and cannot be disabled without affecting account protection measures.

You can manage cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality. A cookie management tool is also available through the platform settings panel when logged in to your 288wn account.

9. Identity Verification (KYC)

Know Your Customer (KYC) verification is a standard process at 288wn and is required by our compliance obligations. KYC is not optional — it is a condition of continued platform use, particularly for withdrawals above certain thresholds.

9.1 When KYC Is Required

KYC may be triggered at account registration, when a withdrawal request exceeds applicable thresholds, when our systems flag an account for additional verification, or as part of periodic compliance reviews. We will notify you when KYC is required and explain what documents are needed.

9.2 What Documents Are Required

Standard KYC at 288wn requires: a clear colour copy of your CNIC (both sides); a selfie photograph clearly showing your face and holding your CNIC; and, where address verification is required, a recent utility bill, bank statement, or mobile wallet statement showing your name and address.

9.3 How KYC Documents Are Handled

KYC documents are transmitted over encrypted connections and stored in a restricted-access system separate from general account data. Access to KYC documents is limited to compliance staff with a documented need. Documents are retained for 5 years after account closure as required by AML regulations, then securely destroyed.

9.4 KYC Failure

If you do not provide satisfactory KYC documentation within a reasonable timeframe, 288wn may restrict your account to read-only status — you can view your history but cannot deposit, bet, or withdraw until verification is completed. Repeated failure to verify may result in account closure with any remaining real-money balance returned to your last verified payment method after a standard review period.

10. Your Data Rights

As a player at 288wn, you have specific rights regarding your personal data. Here's what each right means in practice:

To exercise any of these rights, contact 288wn support at support@288wn.app. We will verify your identity before actioning any data request and respond within 30 calendar days. We do not charge a fee for routine data requests.

11. Minors

288wn does not knowingly collect personal data from persons under the age of 18. Our platform is strictly for adults, and we have age verification processes in place to prevent under-18s from creating accounts.

If we become aware that a minor has created an account and provided personal data, we will immediately close the account, void any bets or casino activity, return any real-money deposits, and delete all personal data associated with the account as promptly as our systems allow.

If you are a parent or guardian and believe your child may have created a 288wn account, please contact us immediately at support@288wn.app so we can investigate and take appropriate action without delay.

12. Changes to This Policy

288wn reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects when the most recent revision was made.

For material changes — revisions that significantly affect how your data is used or what rights you have — we will provide advance notice of at least 7 days via email or an in-platform notification before the changes take effect. You will be given an opportunity to review the changes before they apply to you.

Your continued use of 288wn after the effective date of any update constitutes your acceptance of the revised policy. If you disagree with a revision, you should close your account and contact us to request deletion of your personal data to the maximum extent our obligations allow.

13. Contact Us

For any questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact the 288wn Privacy team through the following channels:

• Email: support@288wn.app — use subject line "Privacy Request" for fastest routing
• Live Chat: Available 24/7 from within your 288wn account — mention that you have a data privacy request so the agent can escalate appropriately
• In-App: Account settings → Help & Support → Submit a Request

We aim to acknowledge all privacy-related contacts within one business day and to resolve them fully within 30 calendar days. Complex requests — such as full data access reports — may take longer, in which case we will inform you of the expected timeline at the point of acknowledgement.