Privacy Policy – How 288 Games Protects Your Data

1 Who We Are

This Privacy Policy applies to the 288 Games online gaming platform, accessible at https://288games.bet, and to all services, features and communications provided under the 288 Games brand. When this policy refers to "288 Games", "we", "us" or "our", it means the operator of this platform.

288 Games is the data controller for all personal information collected from registered players and website visitors in connection with the platform. We are responsible for deciding how and why your personal data is processed, and for ensuring that processing is carried out lawfully and in accordance with the standards set out in this policy.

If you have any questions about how 288 Games handles your data, the first point of contact is our support team at support@288games.bet. We will respond to all data-related queries within 72 hours.

2 What Personal Data We Collect

288 Games collects the following categories of personal information from players. We have organised this by when and why each category is collected:

Registration Data

• Full legal name (as it appears on your CNIC)
• Mobile phone number (used as your primary account identifier)
• Date of birth (for age verification purposes)
• Password (stored as a one-way encrypted hash — we cannot see your actual password)
• City or region of residence

Identity Verification Data (KYC)

• CNIC number
• Front and back images of your CNIC
• A selfie photograph for liveness verification
• Proof of payment method (e.g. a screenshot confirming the registered name on your Easypaisa or JazzCash account)

Transaction and Financial Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (mobile wallet number, last four digits of card, bank IBAN) — full card numbers are never stored by 288 Games
• Transaction reference numbers
• Account balance history

Gameplay and Activity Data

• Betting history, game participation records and tournament entries
• Session duration and login timestamps
• Bonus and promotion claims and wagering activity
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

Device and Technical Data

• IP address at the time of login
• Device type, operating system version and browser type
• Screen resolution and time zone
• Cookie identifiers (see Section 10 for detail)

Communications Data

• Records of communications with 288 Games support, including live chat transcripts and email exchanges
• Support ticket content and resolution history

3 How We Collect Your Data

Data is collected through the following channels and methods on 288 Games:

• Directly from you: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal, contact support or fill in any form on the platform, you are providing data directly to 288 Games.
• Automatically through platform use: When you log in to your 288 Games account, browse the platform, place bets or interact with any feature, our servers automatically record technical data including your IP address, device identifiers and session information. This happens in the background as a standard part of how web platforms operate.
• From payment processors: When you make a deposit or withdrawal, the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card network) returns a transaction confirmation to 288 Games containing the minimum information needed to credit or debit your account accurately.
• From identity verification services: Where 288 Games uses a third-party KYC provider to assist with CNIC document checking, that provider returns a verification result and confidence score to 288 Games. The raw document images may be processed by the verification provider but are not retained by them beyond the scope of the verification task.
• Cookies and similar technologies: The 288 Games website uses cookies and similar browser-based storage mechanisms to maintain your login session, remember your preferences and collect anonymised usage analytics. See Section 10 for full details.

4 How We Use Your Personal Data

The table below summarises how 288 Games uses each category of personal data and why. We only use data for the purposes described below — we do not use your information for anything that is not listed here without first obtaining your explicit consent.

288 Games does not use your personal data to build advertising profiles, sell targeted advertising space, make fully automated decisions that legally affect you without human review, or for any purpose not listed in this section.

5 Legal Basis for Processing

288 Games processes your personal data on the following legal bases:

• Contract performance: Most processing on 288 Games is necessary to deliver the service you signed up for. Processing your deposits, verifying your identity before a withdrawal and maintaining your account balance are all necessary to fulfil the agreement between you and 288 Games.
• Legal obligation: Certain processing is required by law — maintaining financial transaction records for anti-money-laundering compliance, responding to lawful authority requests and retaining identity verification records fall into this category.
• Legitimate interests: Some processing is carried out on the basis of 288 Games' legitimate interest in operating a safe, fraud-free platform. This includes security monitoring, fraud detection and platform analytics. In each case, we have assessed that our legitimate interest is not overridden by your privacy rights.
• Consent: For optional processing — such as sending you promotional emails and SMS messages — we rely on your explicit consent. You can withdraw consent for marketing communications at any time from your account settings or by contacting support.

6 Who We Share Your Data With

288 Games takes a minimal-sharing approach. We only share personal data with the following categories of third parties, and only to the extent necessary for the specific purpose described:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT infrastructure and Visa/Mastercard card networks receive the minimum information needed to process your transactions. These providers have their own privacy policies governing how they handle data. 288 Games shares only what each payment provider requires to complete the transaction.
• Identity verification providers: Where 288 Games uses a third-party KYC service to assist with document checking, your CNIC images and registration details are shared with that provider solely for the purpose of completing the verification check. The provider is contractually prohibited from retaining or using your data for any other purpose.
• Technical infrastructure providers: Cloud hosting providers, content delivery networks and database infrastructure services may process data as part of operating the platform. These providers act as data processors under written contracts that require them to maintain appropriate security standards.
• Legal and regulatory authorities: 288 Games will share data with law enforcement or regulatory bodies if required to do so by a valid legal order or statutory obligation. We do not share data with authorities voluntarily beyond what is required.
• Fraud prevention services: In cases of suspected fraud, data may be shared with specialist fraud detection services to protect the integrity of the platform and other players.

7 How Long We Keep Your Data

288 Games retains personal data for as long as is necessary for the purposes for which it was collected, and for as long as required to meet legal obligations. Specific retention periods are as follows:

• Account data (active accounts): Retained for the lifetime of your account plus a period of five years following permanent account closure, to meet financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction. This is a standard financial compliance requirement.
• KYC documents (CNIC images, selfies): Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for two years from the date of the last message in each support conversation.
• Technical logs (IP addresses, session data): Retained for up to 12 months from the date of recording, then anonymised or deleted.
• Marketing preferences: Retained for as long as your account is active. Following account closure, we retain a suppression record of your opt-out status to ensure we do not inadvertently contact you in the future.

When data has reached the end of its retention period and there is no legal basis to retain it further, 288 Games securely deletes or anonymises it.

8 Security Measures

Protecting your data is taken seriously at 288 Games. The following technical and organisational security measures are in place:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment identifiers.
• One-way password hashing — your password is never stored in readable form. It is hashed using a strong cryptographic function so that even a database breach would not expose your actual password.
• Two-factor authentication (2FA) available and encouraged for all player accounts.
• Role-based access controls — 288 Games staff only access player data on a need-to-know basis. Support staff cannot see CNIC images without an escalated, logged access request.
• Regular security testing including vulnerability scans and penetration testing of the platform infrastructure.
• 24/7 transaction monitoring to detect unusual activity and flag potential account compromises in real time.

No online platform can guarantee absolute security against all possible threats. If you suspect your account has been compromised, change your password immediately and contact 288 Games support without delay. We will act to protect your account and investigate what happened.

9 Your Data Rights

As a registered player on 288 Games, you have the following rights over your personal data. All requests are handled by the support team at support@288games.bet, typically within 14 business days and at no charge.

10 Cookies and Tracking Technologies

The 288 Games platform uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your preferred game settings and prevent cross-site request forgery attacks. You cannot opt out of essential cookies without disabling your account session.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the 288 Games platform. This data is used to identify pages with usability issues, measure feature adoption and plan improvements. Analytics data is not linked to your individual account identity.
• Preference cookies: Remember your language settings, notification preferences and other customisations you have set within your account.

288 Games does not use advertising cookies or third-party tracking pixels. We do not participate in cross-site tracking or behavioural advertising networks.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from maintaining an active login session on the platform. For mobile app users, the equivalent session management relies on local storage rather than traditional browser cookies — the same principles apply.

11 Children's Privacy

288 Games is strictly for adults aged 18 and above. We do not knowingly collect any personal data from individuals under 18. If we discover or are informed that an account is held by a minor, we will immediately close the account, delete the associated personal data and return any real-money balance to the verified payment source.

If you believe that a minor may have registered on 288 Games using false information, please contact us immediately at support@288games.bet. We take underage access extremely seriously and will act promptly on any credible report.

12 Updates to This Privacy Policy

288 Games may update this Privacy Policy from time to time to reflect changes in how we operate the platform, new legal requirements or improvements in how we protect your data. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date.

For material changes — those that affect your rights or the way we use your data in a significant way — 288 Games will notify registered players via SMS or email at least seven days before the change takes effect. This gives you time to review the new policy and, if you do not agree with the changes, to contact us to discuss your options including closing your account and withdrawing your balance before the changes apply.

We recommend reviewing this policy periodically to stay informed about how 288 Games handles your personal data.

13 How to Contact Us About Privacy

For any questions, requests or concerns related to your personal data and how 288 Games handles it, please use one of the following contact methods. We aim to acknowledge all data-related enquiries within 24 hours and resolve them within 14 business days.