288bet Privacy Policy

1. Introduction

288bet ("288bet", "we", "us", "our") is committed to protecting the privacy and security of the personal information of its users ("User", "you", "your"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 288bet.

By registering an account with 288bet or by using any 288bet service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the 288bet platform.

288bet operates the online sports betting and casino platform available at https://288bet.bio, designed for Pakistani English-speaking players aged 18 and above. All accounts are denominated in Pakistani Rupees (PKR). References to payment processing in this policy include JazzCash, Easypaisa, and Pakistani bank transfer services.

2. Data Controller

For the purposes of applicable data protection legislation, 288bet is the data controller in respect of personal data collected through the 288bet platform. If you have any questions about how 288bet processes your personal data, or wish to exercise any of your data subject rights as described in Section 10 of this policy, please contact us using the details provided in Section 14.

3. Data We Collect

3.1 Data You Provide Directly

When you register a 288bet account, make a deposit or withdrawal, contact customer support, or participate in any 288bet service, we may collect the following categories of personal data:

• Identity data: Full name, date of birth, copy of national identity document (CNIC) or passport where required for KYC verification.
• Contact data: Email address, Pakistani mobile number (MSISDN), and city or region of residence (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Financial data: JazzCash wallet number, Easypaisa number, or Pakistani bank account details provided for deposit and withdrawal purposes (e.g. HBL, UBL, Meezan Bank, Bank Alfalah). Full payment card details are never stored by 288bet.
• Account data: Username, hashed password, account balance, transaction history, and communication preferences.
• Correspondence data: Content of live chat sessions, emails, or other support communications submitted to 288bet.

3.2 Data Collected Automatically

When you access and use the 288bet platform, certain technical data is collected automatically:

• Usage data: Pages visited, features accessed, games played, bets placed, session duration, and in-app behaviour.
• Device and technical data: IP address, browser type and version, operating system, device type, and screen resolution.
• Location data: General geographic location derived from IP address. 288bet does not collect precise GPS location data.
• Cookie data: As described in Section 9 of this policy.

3.3 Data from Third Parties

288bet may receive personal data about you from third parties in the following circumstances:

• Identity and fraud verification providers used to complete KYC checks.
• Payment processors including JazzCash and Easypaisa, which confirm transaction status and verify mobile wallet ownership.
• Analytics and fraud detection partners who provide aggregated or pseudonymised signals.

4. How We Use Your Data

288bet uses the personal data it collects for the following purposes:

5. Legal Basis for Processing

288bet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, verify your identity, process payments in PKR, and deliver the sports betting and casino services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional promotional communications, where you have provided explicit consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting support.

6. Sharing Your Personal Data

288bet does not sell, rent, or trade your personal data to third parties. 288bet may share your personal data with third parties only in the following circumstances:

• Service providers: Third-party vendors engaged by 288bet to deliver specific functions, including KYC verification services, payment processing (JazzCash, Easypaisa, and banking partners), cloud hosting infrastructure, fraud detection tools, and customer support platforms. All service providers are contractually bound to process data only for the purposes specified by 288bet and to maintain appropriate security standards.
• Game providers: Where you play a game provided by a third-party studio, certain gameplay data (bet amounts, game outcomes, session identifiers) may be processed by that studio's servers. 288bet ensures that game providers operate under appropriate data processing agreements.
• Legal and regulatory disclosure: Where 288bet is required by law, court order, or regulatory authority to disclose personal data, including for AML reporting or law enforcement purposes.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 288bet's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms.

7. Data Retention

288bet retains your personal data for as long as your account remains active and for a period thereafter as required to fulfil legal, regulatory, and operational obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with applicable AML and financial record-keeping requirements.
• KYC verification documents are retained for the minimum period required by applicable regulation, typically five years post-account closure.
• Customer support correspondence is retained for three (3) years following resolution of the query.
• Marketing consent records are retained until consent is withdrawn and for a further period to demonstrate compliance.
• Technical and usage data in anonymised or aggregated form may be retained indefinitely for analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 288bet's data disposal procedures.

8. Security Measures

288bet takes the security of your personal data seriously. We implement and maintain technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 288bet platform is encrypted in transit using industry-standard TLS protocols.
• Password hashing: Account passwords are stored as one-way cryptographic hashes. 288bet staff cannot access your plaintext password.
• Two-factor authentication (OTP): 288bet employs mobile OTP verification for sensitive actions including logins from new devices and withdrawal requests.
• Access controls: Access to personal data within 288bet's systems is restricted to authorised personnel on a need-to-know basis, with activity logging.
• Fraud monitoring: Automated systems continuously monitor account activity for signs of fraud, money laundering, or account compromise.

Notwithstanding the above, no method of data transmission or storage is completely secure. 288bet cannot guarantee absolute security and encourages you to use a strong, unique password for your 288bet account and to notify support immediately if you suspect unauthorised access.

9. Cookies & Similar Technologies

288bet uses cookies and similar tracking technologies on the 288bet platform. A cookie is a small text file placed on your device when you visit a website. 288bet uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function, including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency display (PKR), and responsible gaming settings.
• Analytics cookies: Collect pseudonymised data about how users interact with the platform, used to improve performance and user experience. These are not shared with advertising networks.
• Fraud detection cookies: Used by 288bet's fraud and risk management systems to identify unusual activity patterns.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair platform functionality, including the ability to log in to your 288bet account.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 288bet:

• Right of access: You may request a copy of the personal data 288bet holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. You may update most account information directly through your 288bet account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances. Note that data required for legal, regulatory, or legitimate business purposes (such as AML records) cannot be deleted before the applicable retention period expires.
• Right to restriction: You may request that 288bet restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is disputed.
• Right to data portability: Where technically feasible and legally applicable, you may request a machine-readable copy of personal data you have provided to 288bet.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact 288bet customer support as described in Section 14. 288bet will respond to verified requests within the timeframe required by applicable law.

11. Minors

The 288bet platform is strictly for users aged 18 years and above. 288bet does not knowingly collect personal data from persons under the age of 18. If 288bet becomes aware that personal data has been collected from a minor, the account will be immediately suspended, the data will be deleted, and any funds associated with the account will be handled in accordance with applicable regulations.

Parents or guardians who believe that a minor in their care may have registered a 288bet account should contact 288bet support immediately using the contact details in Section 14.

12. International Data Transfers

288bet's platform and infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, 288bet takes steps to ensure that appropriate safeguards are in place to protect your personal data, including the use of contractual data processing agreements with service providers that impose obligations equivalent to applicable data protection standards.

By using the 288bet platform, you acknowledge that your personal data may be processed outside Pakistan in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

288bet reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the updated Privacy Policy will be posted on this page with a revised "Last Updated" date. Where the changes are significant, 288bet will endeavour to notify registered users via the email address or mobile number associated with their account.

Your continued use of the 288bet platform after the posting of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you should stop using the platform and may request account closure by contacting support.

14. Contact & Data Requests

For any privacy-related queries, to exercise your data rights under Section 10, or to report a concern about how 288bet processes your personal data, please contact 288bet using the following channels:

• Live Chat: Available 24/7 via the support widget on the 288bet platform. Response time under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Email responses within 4 hours.
• Operating Hours: Pakistan Karachi Time (PKT, UTC+5), 24 hours a day, 7 days a week.

When contacting 288bet regarding a data rights request, please provide your registered email address or mobile number so that 288bet can verify your identity before processing the request.