Your Privacy at 288pak
Is Our Responsibility

288pak is committed to protecting the privacy and personal data of all users of its online gaming platform. This Privacy Policy applies to all interactions you have with the 288pak website, mobile platform, applications, and associated services (collectively, "the Platform").

This policy covers all categories of personal data that 288pak collects directly from you, as well as data collected automatically through your use of the Platform. It explains the purposes for which that data is used, the parties with whom it may be shared, the safeguards in place to protect it, and the rights you hold over it.

This Privacy Policy should be read alongside 288pak's Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 288pak.

For the purposes of this Privacy Policy, 288pak is the data controller in respect of all personal data collected through the Platform. As data controller, 288pak determines the purposes and means by which your personal data is processed.

288pak holds an international gaming licence and operates the Platform in compliance with the data protection requirements stipulated by its licensing authority. Full licensing and registration details are available upon written request submitted to our support team.

288pak collects personal data across several categories. The table below summarises the main categories of data collected, the source of that data, and the context in which it arises:

288pak uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 288pak player account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment channels. To maintain an accurate transaction history for your records.
• KYC & AML Compliance: To verify your identity in accordance with Know Your Customer requirements, and to monitor transactions for suspicious activity as required under international anti-money laundering standards.
• Platform Operation & Improvement: To provide, maintain, and improve the technical performance of the 288pak Platform, including diagnosing and resolving technical issues, and analysing usage patterns to enhance the user experience.
• Customer Support: To respond to your enquiries, resolve disputes, and process complaints through our Urdu-speaking and English-speaking support team.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, to apply responsible gaming tools you have set (deposit limits, self-exclusion), and to fulfil our duty of care obligations as a licensed gaming operator.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Legal & Regulatory Obligations: To comply with the legal and regulatory requirements of our licensing authority and any applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.

288pak relies on the following legal bases to process your personal data:

• Contractual Necessity: Much of the data processing described in this policy is necessary to perform the contract between you and 288pak — specifically, to operate your account, process your transactions, and provide the gaming services you have requested.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and regulatory reporting — are required by law or by the conditions of 288pak's international gaming licence.
• Legitimate Interests: 288pak processes some data on the basis of its legitimate interests as a gaming operator, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of its services. These interests are balanced against your rights and do not override them.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting support or updating your notification preferences in your account dashboard.

288pak does not sell your personal data. Data may be shared with carefully selected third parties only where necessary and under strict contractual data protection obligations. The categories of recipients are as follows:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network partners require transaction data to process your deposits and withdrawals. These entities receive only the minimum data necessary to complete each transaction.
• KYC & Identity Verification Providers: Specialist third-party services that assist in verifying your CNIC or passport details as part of the mandatory KYC process. All such providers operate under data processor agreements with 288pak.
• Game Content Providers: Software studios and live casino operators whose games are hosted on the 288pak platform may receive anonymised gameplay data required to operate their game engines. Player identity data is not shared with game studios.
• Fraud & Security Services: Third-party fraud detection and cybersecurity services that assist 288pak in identifying and preventing fraudulent account activity, bonus abuse, and other prohibited conduct.
• Legal & Regulatory Authorities: Where required by the lawful order of a court, regulator, or law enforcement authority, 288pak will disclose relevant personal data in compliance with its legal obligations.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by 288pak, subject to professional confidentiality obligations.

As an internationally licensed gaming platform, 288pak may transfer your personal data to servers and service providers located outside Pakistan. Where such transfers occur, 288pak ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by international data protection norms.

Safeguards used for international transfers include:

• Standard contractual clauses approved by recognised data protection authorities
• Data processor agreements binding third parties to confidentiality and security standards equivalent to those applied by 288pak
• Transfers to jurisdictions that provide an adequate level of data protection as assessed by 288pak's compliance team

288pak retains personal data only for as long as is necessary for the purposes set out in this policy, taking into account the following considerations:

• Active Accounts: All personal data associated with an active 288pak account is retained for the full duration that the account remains open and active.
• Closed Accounts: Following voluntary account closure or 288pak-initiated account termination, personal data is retained for a period of five (5) years to comply with AML and KYC record-keeping requirements imposed by our licensing authority.
• Transaction Records: Financial transaction records, including deposit and withdrawal history in PKR, are retained for a minimum of five years following the date of the transaction.
• Support Communications: Live chat transcripts and email correspondence with our support team are retained for two years, unless retention for a longer period is required for an open dispute or regulatory matter.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account and for one year following any withdrawal of consent.

After the applicable retention period has expired, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with you as an individual.

288pak uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. 288pak uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged into your 288pak account, security cookies that prevent CSRF attacks, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, notification preferences, and responsible gaming limit displays. These improve your experience but are not strictly necessary.
• Analytics Cookies: Help us understand how players use the Platform, which pages are most visited, and where technical errors occur. Analytics data is aggregated and anonymised where possible. 288pak uses this data solely for internal platform improvement purposes.
• Fraud Prevention Cookies: Assist in identifying unusual access patterns, detecting bot activity, and preventing unauthorised account access.

288pak respects your rights over your personal data. Depending on your jurisdiction and applicable law, you may hold the following rights:

• Right of Access: You may request a copy of all personal data 288pak holds about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update many data fields directly from your account dashboard.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to limitations — for example, we are legally required to retain KYC and transaction records for five years and cannot delete these on request.
• Right to Restriction of Processing: You may request that 288pak temporarily restricts processing of your data while a dispute or complaint is being resolved.
• Right to Data Portability: You may request that your personal data be provided to you in a machine-readable format so that it can be transferred to another service provider of your choice.
• Right to Object: You may object to processing of your personal data where 288pak relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 288pak Data Protection team via the support channels described in Section 15. We will verify your identity before processing any data rights request to ensure your data is not disclosed or altered in response to fraudulent requests.

The 288pak Platform is strictly restricted to individuals aged 21 years and above. 288pak does not knowingly collect personal data from any person under the age of 21, and we do not market our services to minors under any circumstances.

288pak employs age verification checks during registration and may request documentary proof of age (valid CNIC or passport) at any stage. Players who fail to provide satisfactory age verification documents within the stipulated timeframe will have their accounts suspended pending resolution.

288pak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and the 288pak Platform is encrypted using current TLS standards, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• AES-256 Data Encryption at Rest: Sensitive stored data — including identity documents, financial records, and CNIC details — is encrypted at rest using AES-256 encryption.
• Multi-Factor Authentication (2FA): Two-factor authentication is available to all players and strongly recommended. 288pak support and internal staff also operate under mandatory 2FA policies for all platform access.
• Access Controls: Personal data is accessible only to 288pak staff who have a legitimate operational need to view it. Role-based access controls are enforced across all internal systems, and all staff access is logged and audited.
• Penetration Testing: The 288pak Platform undergoes regular security assessments and penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response Plan: 288pak maintains a documented data breach incident response procedure. In the event of a data breach that poses a risk to your rights, affected players will be notified without undue delay in accordance with our legal obligations.

288pak's responsible gaming programme relies on the careful and proportionate use of your gaming activity data. This section explains how your data supports our duty of care obligations as a licensed gaming operator.

288pak uses automated monitoring tools that analyse patterns in your gaming behaviour — including session duration, betting frequency, stake levels, and loss chasing indicators — to identify early signs of problem gambling. Where such indicators are detected, our responsible gaming team may proactively reach out to discuss available support options.

• Self-Exclusion Data: If you apply a self-exclusion from the 288pak Platform, your account details are flagged and retained for the full duration of your self-exclusion period. This data is used solely to enforce the exclusion and prevent re-registration during the exclusion window.
• Deposit & Loss Limits: Your configured responsible gaming limits are stored and enforced at the platform level. This data is not shared with third parties except where required to comply with multi-operator self-exclusion schemes.
• Cooling-Off Periods: Data associated with cooling-off periods is retained and enforced in the same manner as self-exclusion data, preventing premature resumption of gaming activity.

288pak reserves the right to update, amend, or revise this Privacy Policy at any time. Any material changes to this policy will be communicated to registered players via email notification and/or a prominent notice displayed on the 288pak Platform upon login.

The effective date at the top of this policy indicates when the most recent version came into force. Where an update materially affects how your personal data is processed or your rights over that data, 288pak will provide at least 14 days' advance notice before the change takes effect, allowing you time to review the updated policy and, if you disagree, to close your account.

We encourage all players to review this Privacy Policy periodically to stay informed about how 288pak protects your data. The most current version is always available on this page.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 288pak, please contact our Data Protection team through the following channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the 288pak Platform — look for the chat icon in the bottom-right corner of any page
• Response Time: We aim to acknowledge all data-related enquiries within 48 hours and to resolve them fully within 30 calendar days

Our support team includes Urdu-speaking agents available around the clock to assist players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. You may communicate in English or Urdu — whichever is more comfortable for you.