288pk Privacy Policy

Welcome to the Privacy Policy of 288pk ("288pk", "we", "us", "our"), the online casino and sports betting platform accessible at https://288pk.org. This Privacy Policy is a legally binding document that governs how we collect, process, store, share, and protect personal data belonging to visitors, registered users, and all other individuals who interact with our platform.

By accessing the 288pk website, registering an account, making a deposit, placing a bet, or otherwise engaging with any feature of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

This Policy should be read alongside the 288pk Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into this document where relevant.

For the purposes of applicable data protection law, 288pk is the data controller responsible for your personal data. As data controller, we determine the purposes for which and the means by which your personal data is processed.

Where 288pk engages third-party service providers to process data on our behalf — such as payment processors, KYC verification providers, or customer support platforms — those parties act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purposes for which they have been engaged.

If you have any questions about how 288pk processes your personal data, or wish to exercise any of the rights described in Clause 11, please contact our Data Protection team via the details set out in Clause 16.

288pk collects the following categories of personal data, depending on how you interact with the platform:

Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — 288pk strictly enforces the 21+ age requirement)
• Nationality and country of residence
• National Identity Card (CNIC) number or Passport number, where required for KYC verification

Contact Data

• Email address (primary communication channel for account notifications and support)
• Mobile phone number (used for OTP verification and account security)
• Residential address (city, province, Pakistan)

Financial Data

• JazzCash wallet number or EasyPaisa account reference
• HBL or UBL bank account details (account title and IBAN, where provided)
• SadaPay account reference
• USDT TRC20 wallet address
• Transaction history: deposits, withdrawals, and any refunds or adjustments processed on your account

Gaming & Behavioural Data

• Betting history: all wagers placed, markets selected, stakes, odds, and outcomes
• Game session data: games played, session duration, win/loss records, bonus usage
• Responsible gaming tool usage and any self-imposed limits or exclusions

Technical Data

• IP address at the time of registration and at each login event
• Device type, operating system, browser type and version
• Geolocation data (country/city level, derived from IP address)
• Session identifiers and authentication tokens
• Cookie data as described in Clause 10

Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from 288pk
• Responses to satisfaction surveys or feedback forms (where you choose to participate)

288pk collects personal data through the following channels:

Directly From You

The majority of your personal data is collected directly from you when you: register an account; complete our KYC verification process; make a deposit or withdrawal; contact our support team; or respond to a promotion or survey. You are always aware of this collection as it occurs through deliberate actions you take on the platform.

Automatically During Platform Use

Technical and behavioural data is collected automatically when you browse or interact with the 288pk website. This includes IP address logging, session tracking, and the placement of cookies and similar technologies on your device as described in Clause 10. This automated collection is necessary for platform security, fraud prevention, and service improvement.

From Third-Party Verification Providers

When you submit identity documents for KYC verification, our third-party verification provider may return additional data points such as document authenticity scores or watchlist screening results. This data is used solely for compliance purposes and is not used for marketing.

From Payment Processors

Our payment partners — including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT network processors — share transaction confirmation data with us to allow us to credit your account accurately and reconcile financial records.

288pk uses your personal data for the following specific purposes:

We do not use your personal data for any purpose that is incompatible with the purposes listed above. If we intend to use your data for a new purpose, we will update this Privacy Policy and, where required, seek your renewed consent.

Every instance of personal data processing at 288pk is conducted on one of the following legal bases:

• Contract Performance: Processing is necessary to perform the contract between you and 288pk — i.e., to provide you with access to the platform, process your transactions, and deliver the services you have requested.
• Legal Obligation: Processing is required to comply with our obligations under applicable anti-money laundering regulations, licensing conditions, and other applicable laws. This includes KYC verification, AML screening, and retention of financial records.
• Legitimate Interests: Processing is necessary for the legitimate interests of 288pk, including fraud prevention, platform security, responsible gaming monitoring, and general platform analytics. We carry out a balancing test to ensure that our legitimate interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent as a legal basis — principally for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

288pk does not sell your personal data. We share personal data only in the following limited circumstances and only to the extent strictly necessary for the relevant purpose:

Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist us in operating the 288pk platform. These include:

• KYC & Identity Verification Providers — to verify your identity documents and conduct sanctions screening
• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT network operators, to facilitate deposits and withdrawals
• Game Software Providers — certified third-party casino game studios whose games are hosted on the 288pk platform; these providers receive session identifiers but not your full identity data
• Customer Support Platforms — providers of live chat and ticketing software used by our support team
• Cloud Infrastructure Providers — who host the platform servers and databases under strict data processing agreements

All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to 288pk.

Legal & Regulatory Disclosure

288pk may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so — for example, in connection with AML investigations, court orders, or gaming licence compliance audits. We will endeavour to notify you of any such disclosure where legally permissible.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 288pk's assets, personal data held by us may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

As an internationally licensed online gaming platform, 288pk may store or process your personal data on servers located outside Pakistan. Where personal data is transferred internationally, we implement appropriate safeguards to ensure that your data receives an equivalent level of protection regardless of where it is processed.

Safeguards we rely on for international transfers include:

• Contractual clauses that impose data protection obligations on recipient entities equivalent to those we observe
• Processing only with service providers that maintain recognised international security certifications (such as ISO 27001)
• Regular audits of our international data processor relationships to verify ongoing compliance

If you would like more information about the specific safeguards applied to any particular international transfer of your data, please contact us using the details in Clause 16.

288pk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence conditions. The following general retention periods apply:

At the end of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is used, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

288pk uses cookies and similar tracking technologies on our website. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow us to recognise your device, maintain your session, and gather analytical data about how the platform is used.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security token validation. The platform cannot function without these cookies and they do not require your consent.
• Functional Cookies: These remember your preferences — such as your preferred language, last-visited game category, or responsible gaming settings — to improve your experience. They are activated with your consent.
• Analytical Cookies: These help us understand how users interact with the 288pk platform — which pages are visited most, where users navigate from, and which features are used. This data is aggregated and anonymised. Activated with consent.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login attempts. These are strictly necessary and are always active.

Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, accept only certain cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will impair the functionality of the 288pk platform and may prevent you from logging in or completing transactions.

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data that 288pk holds about you:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances — such as where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you may request that we delete your personal data. This right is subject to our legal obligation to retain certain data (e.g., AML records) for specified minimum periods.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of the data you provided to us in a structured, commonly used, machine-readable format.
• Right to Object: Where we rely on legitimate interests as our legal basis for processing, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where consent is the basis for processing (principally marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact our Data Protection team via the details in Clause 16. We will verify your identity before processing any data access or deletion request. There is no fee for making a rights request, though we may charge a reasonable administrative fee if requests are manifestly unfounded or excessive.

The 288pk platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in our registration process and we use third-party KYC tools to validate the date of birth declared by all new registrants.

If 288pk becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the data, reverse any transactions where possible, and forfeit any winnings generated by that account. Parents or guardians who believe their child has registered on our platform should contact us immediately at the details provided in Clause 16.

288pk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS Encryption: All data in transit between your browser and the 288pk platform is encrypted using TLS 1.2 or higher
• Encryption at Rest: Personal data stored on our servers is encrypted using AES-256 or equivalent industry-standard encryption
• Access Controls: Access to personal data within 288pk is restricted on a strict need-to-know basis. Staff who handle personal data undergo regular data protection training
• Two-Factor Authentication: Account logins can be protected with two-factor authentication, which we strongly encourage all users to enable
• Penetration Testing: We conduct regular security assessments of our platform infrastructure to identify and address vulnerabilities before they can be exploited
• Incident Response: We maintain a formal incident response plan. In the event of a data breach, we will notify affected users and relevant authorities within the timeframes required by applicable law

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also have a role to play in keeping your account safe — please use a strong unique password, enable two-factor authentication, and never share your login credentials with anyone.

With your consent, 288pk may send you marketing communications about promotions, bonus offers, new games, and platform updates via email or SMS to your registered contact details. You may provide or withdraw this consent at any time.

Opting Out

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from 288pk
• Contacting our support team via live chat and requesting removal from marketing lists
• Emailing our support team at [email protected] with a clear opt-out request

Opting out of marketing does not affect transactional communications — we will continue to send you account-related notifications (such as deposit confirmations, withdrawal updates, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your account.

288pk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document
• Notify registered users via their registered email address where the changes are significant
• Display a prominent notice on the 288pk platform for a reasonable period following the update

Your continued use of the 288pk platform after any revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data. The current version of this Policy is always accessible at https://288pk.org/privacy-policy.

If you have any questions, concerns, or complaints about how 288pk handles your personal data, or if you wish to exercise any of the rights described in Clause 11, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the 288pk platform — the fastest way to reach us
• Email: [email protected] — please include "Privacy Request" or "Data Protection" in your subject line so that your message is routed to the correct team

We will acknowledge all data protection enquiries within 3 business days and aim to resolve them within 30 calendar days. For complex requests, we may require up to an additional 60 days, in which case we will inform you of the extension and the reason for it within the initial 30-day period.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the licensing authority under whose jurisdiction 288pk operates.