Privacy Policy – 288min

1. Introduction

This Privacy Policy ("Policy") describes how 288min ("288min", "we", "us", "our") collects, processes, stores, and protects personal data provided by or generated through users ("you", "User") of the 288min website, mobile applications, and associated online services (collectively, the "Platform").

By registering an account, logging into 288min, or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use 288min or submit any personal information to the Platform.

288min takes its data protection obligations seriously. This Policy is designed to be transparent, straightforward, and honest about our practices — because Pakistani players deserve to know exactly how their information is handled on a platform they trust.

2. Data We Collect

2.1 Information You Provide Directly

When you register or interact with 288min, we collect information you submit voluntarily, including:

• Identity Data: Full legal name as it appears on your CNIC, date of birth, CNIC number (collected during KYC verification).
• Contact Data: Pakistani mobile number (including JazzCash or Easypaisa-registered numbers), email address, and city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Financial Data: Payment method details, transaction history including deposits and withdrawals in PKR, and bank or mobile wallet references (HBL, UBL, Meezan Bank, Bank Alfalah, JazzCash, Easypaisa).
• KYC Documentation: Copies of identity documents submitted during verification, including CNIC scans and any supporting address or photograph documents requested.
• Account Credentials: Username and encrypted password. Passwords are never stored in plain text.

2.2 Data Collected Automatically

When you access 288min, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, games played, and betting activity on the Platform.
• Referral source (how you arrived at 288min) and exit pages.
• Cookie identifiers and similar tracking technologies as described in Section 8.

3. How We Use Your Data

288min uses collected personal data for the following purposes:

• Account Management: To create, maintain, and administer your 288min account, verify your identity, and enable platform access.
• Payment Processing: To process PKR deposits and withdrawals through JazzCash, Easypaisa, and linked bank accounts in compliance with applicable financial regulations.
• KYC & Compliance: To fulfil anti-money laundering (AML) and Know Your Customer obligations, including age verification (18+ requirement) and fraud prevention.
• Service Delivery: To operate and improve the 288min Platform, including cricket betting, live casino, slots, King of Fishing, and all other gaming products.
• Customer Support: To respond to your queries, complaints, and support requests submitted via 288min support channels.
• Responsible Gaming: To monitor gaming activity and proactively offer responsible gaming tools — deposit limits, session timers, self-exclusion — where usage patterns suggest potential risk.
• Marketing Communications: To send promotional offers, bonus notifications, and relevant updates to users who have opted in to marketing communications. You may opt out at any time.
• Security & Fraud Prevention: To detect and prevent fraudulent account activity, unauthorised access, and abuse of the 288min bonus system.
• Legal Obligations: To comply with applicable legal requirements, regulatory investigations, or lawful requests from authorities.

4. Legal Basis for Processing

288min processes your personal data on the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 288min — including account creation, payment processing, and game delivery.
• Legitimate Interests: Processing necessary for 288min's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight, provided those interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC, AML regulations, and responses to lawful authority requests.
• Consent: Processing based on your specific, freely given consent — such as receipt of marketing communications. Consent may be withdrawn at any time by contacting 288min support or adjusting your account communication preferences.

5. Data Sharing

288min does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: Financial data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners solely to the extent necessary to process your transactions.
• KYC & Compliance Providers: Identity and document data may be shared with third-party KYC verification service providers who process data under contractual confidentiality obligations.
• Game Providers: Gameplay data (stakes, session data, game outcomes) may be shared with third-party game software providers for technical operation, game integrity, and RNG certification purposes.
• Legal Authorities: 288min will disclose personal data to government bodies, regulators, or law enforcement agencies where required to do so by applicable law or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets of 288min, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third-party recipients of personal data from 288min are required to handle such data in accordance with applicable data protection standards and may not use it for any purpose beyond that for which it was shared.

6. Data Retention

288min retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following:

• Active account data is retained for the duration of your 288min account and for a minimum period of five years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC documentation is retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Transaction records are retained for a minimum of five years from the date of transaction.
• Marketing preference data is retained until you withdraw consent or the account is permanently closed.
• Technical and log data collected automatically may be retained for shorter periods — typically 12 to 24 months — unless required longer for security investigations.

When personal data is no longer required for any retention purpose, 288min securely deletes or anonymises it.

7. Data Security

288min implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption across all pages of the 288min Platform, including login, registration, deposit, and withdrawal pages.
• Encrypted storage of passwords using one-way hashing — 288min employees cannot read your password.
• Access controls limiting internal access to personal data to personnel with a legitimate operational need.
• Regular security audits and penetration testing of Platform infrastructure.
• Two-factor authentication available to all 288min account holders and strongly recommended.

While 288min takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 288min login credentials and for promptly notifying 288min support of any suspected unauthorised account access.

8. Cookies & Tracking Technologies

288min uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. The types of cookies used include:

• Essential Cookies: Required for basic Platform functionality including session management and login state. Cannot be disabled without breaking Platform features.
• Analytics Cookies: Used to understand how users navigate 288min — which pages are visited, session durations, and game preferences — enabling platform improvements.
• Preference Cookies: Store your language, display, and notification preferences so you do not have to re-enter them on each visit.
• Marketing Cookies: Used only where you have consented, to serve relevant promotional offers based on your activity on 288min.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. 288min does not use cookies to collect personal data from third-party websites.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 288min:

• Right of Access: You may request a copy of the personal data 288min holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 288min support. Requests will be responded to within a reasonable timeframe consistent with applicable requirements. Identity verification may be required before personal data is disclosed or modified.

10. Minors

288min does not knowingly collect personal data from individuals under the age of 18. The Platform is strictly restricted to adults. All registrations are subject to age verification, and accounts found to belong to individuals under 18 are closed immediately with all associated data retained only to the extent required by AML obligations before deletion.

If you believe a minor has submitted personal information to 288min, please contact support immediately so the information can be identified and appropriately handled.

11. Policy Changes

288min may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated to registered users via email or a prominent notice within the 288min Platform prior to the change taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Continued use of 288min following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you object to changes, you should close your account and cease use of the Platform.

12. Contact

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by 288min, contact our support team. Support contact details are displayed in the footer of every 288min page. Email: [email protected] (plain text — not a clickable link).

288min aims to respond to all privacy-related enquiries within a reasonable timeframe. For complaints that remain unresolved after contacting 288min support, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.