288pkr Privacy Policy – How We Handle Your Data

1. About This Policy

1.1 This Privacy Policy ("Policy") describes how 288pkr ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "User", "Player") who access or use the services available at 288pkr.net.

1.2 This Policy should be read alongside the 288pkr Terms & Conditions, which govern your use of the Platform generally. By registering an account or continuing to use the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

1.3 288pkr acts as the data controller in respect of personal data collected through the Platform. If you have questions about how your data is handled, contact details are provided at Section 14 of this Policy.

2. Personal Data We Collect

2.1 Registration Data. When you create a 288pkr account, we collect: your full legal name, date of birth, email address, Pakistani mobile number (03XX format), and account login credentials (stored in hashed form).

2.2 Identity Verification (KYC) Data. To comply with our anti-money laundering (AML) obligations and to verify that users are 18 or older, we collect copies of government-issued identity documents. For Pakistani users, this typically means a scan or photograph of your Computerised National Identity Card (CNIC) and, where required, a selfie or proof of address.

2.3 Payment Data. When you make deposits or request withdrawals, we collect transaction records including the payment method used (JazzCash mobile number, Easypaisa account, bank account details, card details, or USDT wallet address), transaction amounts in PKR, and timestamps. We do not store full card numbers or CVV codes – card payment processing is handled by PCI-DSS compliant third-party processors.

2.4 Gameplay & Activity Data. We record your gaming activity on the Platform, including game sessions, bet amounts, win/loss records, bonus usage, and session duration. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory compliance.

2.5 Technical & Device Data. We automatically collect certain technical information when you access the Platform: IP address, device type and operating system, browser type and version, mobile network operator (e.g., Jazz, Zong, Telenor, Ufone), screen resolution, and session timestamps.

2.6 Communications Data. If you contact 288pkr support via live chat or email, we retain records of those communications for customer service quality, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Personal Data

288pkr uses the personal data we collect for the following purposes:

• Account creation and management: to register your account, verify your identity, and administer your player profile on the 288pkr platform;
• Payment processing: to facilitate deposits and withdrawals in PKR via JazzCash, Easypaisa, bank transfer, and other supported methods;
• Regulatory compliance: to meet our obligations under applicable AML, KYC, and responsible gaming regulations, including age verification and transaction monitoring;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other abuses of the Platform;
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour and to enforce deposit limits, self-exclusion requests, and cooling-off periods;
• Customer support: to respond to your queries, complaints, and requests submitted via live chat or email;
• Platform improvement: to analyse aggregated usage data to improve game performance, mobile load speeds, and overall user experience;
• Promotions and bonuses: to administer bonus offers, verify wagering requirements, and prevent bonus abuse.

We do not sell your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

4.1 Contractual necessity: processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account administration and payment processing.

4.2 Legal obligation: processing required to comply with applicable AML, KYC, and regulatory requirements.

4.3 Legitimate interests: processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.

4.4 Consent: where we rely on consent (for example, for certain marketing communications), you may withdraw that consent at any time by contacting 288pkr support.

5. Payment Data & PKR Transactions

5.1 All financial transactions on 288pkr are denominated in Pakistani Rupees (PKR). Transaction records – including deposit and withdrawal amounts, timestamps, and the payment method reference (e.g., the last four digits of a card, or a masked JazzCash number) – are retained as part of our financial and compliance records.

5.2 JazzCash and Easypaisa mobile numbers provided for deposit or withdrawal purposes are used solely to process those specific transactions and to verify that the payment method is registered in the account holder's name. These numbers are not used for unsolicited marketing communications.

5.3 Bank account details (IBAN, account title, branch) provided for IBFT transfers are stored in encrypted form and are only accessible to authorised personnel involved in payment processing and fraud prevention.

6. KYC & Identity Verification

6.1 288pkr is required to verify the identity of all users prior to processing withdrawals, and in certain circumstances during account registration or after specific transaction thresholds are reached. For Pakistani users, the primary identity document is the CNIC (Computerised National Identity Card) issued by NADRA.

6.2 CNIC images and any supplementary identity documents submitted for KYC are stored in an encrypted, access-controlled environment. They are accessed only by authorised KYC compliance personnel and, where required, by regulatory authorities.

6.3 Identity documents are retained for the period required by applicable AML regulations, which may extend beyond the closure of your 288pkr account. Documents are securely deleted once the mandatory retention period has expired.

7. Cookies & Tracking Technologies

7.1 288pkr uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and analyse Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: essential for Platform functionality, including session management and security tokens. These cannot be disabled.
• Performance cookies: collect anonymised data about how users navigate the Platform to help us improve page load times and user experience on mobile devices.
• Functional cookies: remember your preferences such as language settings and display options.

7.2 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of the 288pkr platform.

8. Sharing Your Data

8.1 288pkr does not sell, rent, or trade your personal data to third parties. We share your data only in the following limited circumstances:

• Payment processors: your payment details are shared with our PCI-DSS compliant payment processing partners solely for the purpose of executing your deposit or withdrawal transaction;
• KYC and AML service providers: identity verification may be conducted via third-party KYC platforms that process your CNIC and related documents on our behalf;
• Game providers: your player ID and session data are shared with game studios (e.g., Pragmatic Play, PG Soft) to load and operate their games within the 288pkr environment. These providers do not receive your full personal profile;
• Regulatory and legal authorities: where required by applicable law, court order, or at the request of a competent regulatory authority, we may disclose user data. We will notify you where legally permitted to do so;
• Business transfers: in the event of a merger, acquisition, or sale of 288pkr's assets, user data may be transferred to the successor entity, subject to equivalent data protection commitments.

9. Data Retention

9.1 We retain your personal data for as long as your 288pkr account is active and for such additional periods as are required by applicable legal and regulatory obligations.

9.2 Following account closure, the following retention periods apply: account registration data and transaction records are retained for a minimum of five (5) years in compliance with AML obligations; KYC documents (CNIC copies) are retained for the period required by applicable AML regulations; gameplay and session data is retained for three (3) years for dispute resolution and fraud analysis purposes; communications (support chat logs, emails) are retained for two (2) years.

9.3 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised.

10. Data Security

10.1 288pkr implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: TLS/SSL encryption for all data transmitted between your device and the Platform; AES-256 encryption for stored sensitive data including identity documents and payment references; role-based access controls limiting internal access to personal data to authorised personnel only; regular security assessments and penetration testing of the Platform infrastructure.

10.2 Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying 288pkr support immediately if you suspect any unauthorised access to your account.

11. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 288pkr:

• Right of access: you may request a copy of the personal data we hold about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data;
• Right to erasure: you may request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction: you may request that we restrict processing of your data in certain circumstances;
• Right to data portability: you may request a structured copy of certain data you have provided to us;
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 288pkr support. We will respond within 30 days. Note that certain data cannot be deleted during mandatory legal retention periods or where account-related disputes are unresolved.

12. Children & Minors

12.1 The 288pkr platform is strictly for users aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data, we will immediately close that account and delete the associated data.

12.2 If you believe a minor has registered on the Platform using false age information, please contact 288pkr support immediately with relevant details so we can investigate and take appropriate action.

13. Changes to This Privacy Policy

13.1 288pkr reserves the right to update or modify this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect when the most recent revision was made. Where changes are material, we will notify registered users via email or an in-platform notice. Continued use of the 288pkr platform following the posting of changes constitutes acceptance of the revised Policy.

14. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 288pkr, please contact our Data team via the live chat support on the Platform, or by email at: [email protected] (plain text only – not a clickable link). Please include "Privacy Request" in your subject line for fastest routing.