288 wins Privacy Policy —
How We Handle Your
Personal Data in Pakistan

1. Scope and Data Controller

This Privacy Policy applies to all personal data collected and processed by 288 wins ("we", "us", "our") from Members and prospective Members who access the 288wins.pro platform, including all casino, sports betting, Cockfighting, and account management features of the 288 wins service.

For the purposes of this policy, 288 wins acts as the data controller with respect to all personal data collected from Pakistan players through the 288wins.pro website and associated services. As data controller, 288 wins is responsible for determining the purposes and means of processing your personal information and for ensuring that processing activities comply with applicable data protection principles.

This policy applies to personal data collected from:

• Pakistan players who register a 288 wins account;
• Visitors who browse 288wins.pro without registering;
• Individuals who contact 288 wins via live chat, email, or any other support channel;
• Persons submitting KYC documentation to 288 wins for account verification purposes.

2. Personal Data We Collect

2.1 Registration Data

When you register a 288 wins account, we collect the personal information you provide during the registration process, which includes:

• Your full legal name (as per your Pakistani CNIC);
• Your Pakistani mobile number (used as your account identifier and for OTP verification);
• Your chosen username and password (password stored in hashed form — never as plain text);
• Your city of residence in Pakistan (optional during registration, may be required for KYC);
• Your date of birth (required for age verification — 18+ enforcement);
• Your email address (optional at registration, used for account communications if provided).

2.2 KYC Verification Data

When KYC verification is triggered — either by withdrawal thresholds or account review — we collect additional identity documentation, which may include:

• Scanned or photographed copies of your Pakistani CNIC (both sides);
• A selfie photograph with your CNIC for liveness verification;
• Proof of payment method ownership (e.g., screenshot of your Easypaisa or JazzCash account showing your registered name and mobile number);
• Any additional documentation requested by our compliance team in response to specific verification requirements.

2.3 Transaction and Gaming Data

288 wins automatically records data related to your PKR transactions and gaming activity, including:

• Deposit amounts, methods, timestamps, and payment provider transaction references;
• Withdrawal requests, amounts, processing times, and receiving account details;
• Game session records, including games played, stakes wagered, outcomes, and session durations;
• Sports bets placed, including market selections, PKR stake amounts, and settlement records;
• Cockfighting bets placed, arena identifiers, and settlement records;
• Bonus funds received, wagering requirement progress, and conversion records.

2.4 Technical and Device Data

When you access 288wins.pro, our systems automatically collect certain technical information, including:

• IP address at the time of login and significant account actions;
• Device type, operating system, and browser version;
• Mobile network operator (where applicable — relevant for Pakistan players on Jazz, Telenor, Zong, Ufone, or Warid);
• Session timestamps and duration;
• Pages visited within the 288 wins platform and features accessed.

3. How We Use Your Personal Data

288 wins uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Name, mobile number, username, password, date of birth
Age verification and 18+ enforcement	Date of birth, CNIC, KYC documents
PKR deposit and withdrawal processing	Payment method details, transaction records, KYC data
Fraud prevention and anti-money laundering	Transaction records, IP addresses, KYC data, device data
Responsible gaming monitoring	Gaming session data, deposit patterns, self-exclusion records
Customer support and complaints handling	Account data, transaction records, communication history
Security and OTP authentication	Mobile number, IP address, device data
Platform improvement and analytics	Anonymised or aggregated technical and gaming data
Marketing (with consent only)	Mobile number or email, communication preferences

4. Legal Basis for Processing

288 wins processes your personal data under the following legal bases:

• Contractual Necessity: Processing required to provide you with the 288 wins service as described in our Terms and Conditions — including account management, PKR transaction processing, and game provision — is processed on the basis of contractual necessity.
• Legal Obligation: Processing required by applicable anti-money laundering regulations, age verification obligations, and financial record-keeping requirements is processed on the basis of legal obligation. This includes KYC verification and transaction monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted on the basis of legitimate interests, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications — including promotional SMS and email — is conducted on the basis of your explicit consent, given at registration or subsequently via your account communication preferences. You may withdraw marketing consent at any time.

5. PKR Transactions and KYC Verification

Given that all 288 wins transactions are denominated in Pakistani Rupees (PKR) and processed via Pakistani payment providers including Easypaisa, JazzCash, HBL, and Raast, the handling of financial personal data requires particular attention.

5.1 Payment Provider Data Sharing

When you make a PKR deposit or withdrawal, 288 wins shares the necessary transaction data with your chosen payment provider (Easypaisa, JazzCash, HBL, etc.) to process the transaction. This data sharing is limited to the information required to complete the specific transaction and does not include your gaming history or full account profile. Each payment provider has its own privacy policy governing their use of data received from 288 wins in connection with your transactions.

5.2 KYC Data Handling

KYC documents — including CNIC copies and selfies — are processed by 288 wins' compliance team and, where applicable, by authorised KYC verification service providers operating under strict data processing agreements. KYC data is used exclusively for identity and age verification and anti-money laundering purposes. It is not used for marketing, sold to third parties, or shared beyond what is required to fulfil verification and regulatory obligations.

6. Cookies and Tracking Technologies

288wins.pro uses cookies and similar tracking technologies to operate and improve the platform. The cookies used by 288 wins fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, login state management, and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how Pakistan players use the platform — which games are most popular, average session durations, and error rates. This data is aggregated and not linked to individual identities.
• Functional Cookies: Remember your language preference, display settings, and recent activity within the 288 wins platform to improve your experience on return visits.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content about 288 wins offers. You may opt out of marketing cookies via your browser settings or account communication preferences.

Most modern browsers allow you to control cookie settings. Blocking strictly necessary cookies will prevent you from using the 288 wins platform. Blocking performance or marketing cookies will not affect your ability to play or make PKR transactions.

7. Third-Party Data Sharing

288 wins does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Providers: Easypaisa, JazzCash, HBL, SadaPay, Raast, and other PKR payment providers receive transaction data required to process your deposits and withdrawals. Each provider operates under its own privacy policy.
• KYC Verification Services: Authorised identity verification providers receive KYC documentation under strict data processing agreements limiting their use of that data to verification purposes only.
• Game Content Providers: Third-party game studios whose titles are available on 288 wins may receive anonymised session data necessary to operate game features, jackpot tracking, and RTP monitoring. No personally identifiable information is shared with game providers without your consent.
• Regulatory Authorities: 288 wins will disclose personal data to regulatory or law enforcement authorities where required by law, court order, or valid regulatory request. We cannot guarantee the confidentiality of data shared under legal compulsion.
• Fraud Prevention Services: 288 wins may share flagged transaction data with fraud prevention databases and shared industry anti-money-laundering networks where required for compliance purposes.

8. Data Security

288 wins implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 288 wins platform;
• Encryption of sensitive data at rest, including financial records and KYC documents;
• Strict internal access controls — only authorised staff with a documented need can access Member personal data;
• Two-factor OTP authentication for account login, triggered on new devices or after periods of inactivity;
• Automated monitoring for unusual account activity, including login attempts from unrecognised locations or devices;
• Regular security reviews and vulnerability assessments of platform infrastructure.

While 288 wins takes all reasonable precautions, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to affect your personal data, 288 wins will notify affected Members as quickly as practicable and take immediate steps to contain and remediate the breach.

9. Data Retention

288 wins retains personal data for the following periods:

• Active Accounts: Personal data is retained for the full duration of your 288 wins membership and for a period of five years following account closure, in accordance with financial record-keeping and anti-money laundering regulatory requirements applicable to PKR transactions.
• KYC Documents: Identity verification documents are retained for a minimum of five years following account closure. This retention period is required by applicable financial compliance regulations and cannot be shortened on request.
• Transaction Records: All PKR deposit, withdrawal, and betting transaction records are retained for a minimum of five years for regulatory and audit purposes.
• Support Communications: Live chat transcripts and email communications with the 288 wins support team are retained for two years following the date of the communication.
• Technical Logs: IP address logs and session data are retained for a maximum of 12 months, after which they are deleted or anonymised.
• Marketing Consent Records: Records of marketing consent are retained for the duration of your membership plus two years following account closure, to demonstrate compliance with consent obligations.

10. Marketing Communications

288 wins sends promotional communications — including SMS notifications about bonuses, new games, and special events — only to Members who have given explicit consent to receive such communications. You can manage your marketing preferences at any time through your 288 wins account settings.

To withdraw consent for marketing communications, update your preferences in your account settings or contact the support team. Withdrawal of marketing consent does not affect your ability to continue using the 288 wins platform or affect any other aspect of your account. Transactional communications — including OTP codes, withdrawal confirmations, and security alerts — are not marketing communications and cannot be opted out of while your account is active, as they are essential to account security and operation.

11. Minors and Under-18 Data Protection

288 wins is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. Our registration process includes a date-of-birth requirement, and age is further verified through KYC documentation. If 288 wins becomes aware that personal data has been collected from a person under 18, that data will be deleted promptly and the account will be permanently closed.

If you are a parent or guardian and believe that a person under 18 in your care has registered a 288 wins account, please contact our support team immediately with the relevant account information. We will take immediate action to verify and, where confirmed, close the account and delete the associated personal data.

12. Your Privacy Rights

As a 288 wins Member in Pakistan, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of the personal data 288 wins holds about you. We will respond within 30 days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that it be corrected. For account details, you may update many fields directly in your account settings without contacting support.
• Right to Erasure: You may request deletion of your personal data. Note that this right is subject to regulatory retention obligations — transaction records and KYC data cannot be deleted before the minimum retention period has elapsed. We will explain any limitations that apply to a specific erasure request.
• Right to Restriction: You may request that 288 wins restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, subject to our ability to demonstrate compelling legitimate grounds for continued processing.
• Right to Withdraw Consent: Where processing is based on consent — including marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

13. Changes to This Privacy Policy

288 wins may update this Privacy Policy from time to time to reflect changes in our data handling practices, regulatory requirements, or platform features. Where material changes are made, 288 wins will notify Members via a notice displayed on the platform upon next login, or via SMS to their registered Pakistani mobile number, providing at least 14 days' notice before the revised policy takes effect.

The date of the most recent revision is displayed at the top of this page. The version published on this page at any given time is the current operative version. Previous versions are available on request from the support team. Continued use of the 288 wins platform following notification of a policy update constitutes acceptance of the revised Privacy Policy.

14. Contact and Data Rights Requests

For any privacy-related query, data rights request, or concern about how 288 wins handles your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the 288 wins platform. Sign in to your account and use the live chat icon. English-language support, available to all Pakistan Members at any hour.
• Email: [email protected] — this is displayed as plain text. Please copy and paste this address into your email client. Formal data rights requests submitted by email will receive a written response within 30 days.

When submitting a data rights request, please include your registered Pakistani mobile number and full name so that we can locate your account and verify your identity before processing the request. 288 wins will not process data rights requests that we cannot verify as coming from the account holder.