288pak Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 288pak ("the Platform", "we", "us", "our") and applies to all members, registered users, and visitors of the 288pak website and associated digital services. This Policy explains how 288pak collects, uses, stores, shares, and protects personal data in connection with the operation of Pakistan's premier online casino and sports betting platform.

288pak is committed to handling your personal data responsibly and transparently. This Policy has been written in plain, clear English so that every member — whether based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan — can understand exactly how their information is handled and what choices they have.

This Policy should be read together with the 288pak Terms & Conditions, which form part of the overall agreement governing your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall take precedence.

Data We Collect

288pak collects personal data through several channels: directly from you during registration and account operation, automatically through your use of the platform, and from third-party service providers where permitted by applicable law. The categories of personal data we collect include:

288pak does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable anti-money-laundering or responsible gaming regulations, in which case such collection will be clearly explained and handled with the highest level of care.

How We Use Your Data

288pak uses the personal data it collects for a range of clearly defined purposes. We do not use your data for any purpose that has not been disclosed in this Policy. The primary purposes for which 288pak processes personal data are:

• Account Registration and Management: To create and maintain your 288pak member account, verify your identity and age (21+), and manage your account settings and preferences.
• Service Delivery: To provide access to the 288pak gaming platform, process bets, settle winnings, and deliver the full range of casino, live dealer, sports betting, and slot services available to Pakistani members.
• Financial Transactions: To process deposits and withdrawals in PKR through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and to maintain accurate transaction records.
• Identity Verification and KYC Compliance: To comply with applicable know-your-customer (KYC) and anti-money-laundering (AML) regulatory obligations, including verifying identity documents and source of funds where required.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to apply responsible gaming tools such as deposit limits and self-exclusion, and to fulfil our duty of care to all members.
• Customer Support: To respond to enquiries, complaints, and disputes, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
• Legal and Regulatory Compliance: To meet our obligations under applicable gaming regulations, financial regulations, and applicable laws, including responding to lawful requests from regulatory authorities.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the 288pak platform, enhance the member experience, and develop new features.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. See Section 11 for your opt-out rights.

Legal Basis for Processing

288pak processes personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between 288pak and the member — for example, processing a withdrawal, settling a bet, or managing an account.
• Legal Obligation: Processing is necessary for 288pak to comply with applicable legal or regulatory obligations — for example, KYC verification, AML monitoring, or responding to a lawful regulatory enquiry.
• Legitimate Interests: Processing is necessary for the legitimate interests of 288pak, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent — for example, processing your data for marketing communications purposes. Where consent is the lawful basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Cookies & Tracking Technologies

288pak uses cookies and similar tracking technologies to operate the platform effectively, enhance member experience, analyse usage patterns, and support security and fraud prevention measures. When you access the 288pak platform, the following categories of cookies may be set on your device:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security enforcement. These cookies cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised or aggregated information about how members use the 288pak platform — such as which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used exclusively to improve the platform.
• Functionality Cookies: These cookies remember your preferences and settings — such as your preferred language, currency display, and responsible gaming tool configurations — so you do not need to re-enter them every session.
• Targeting and Marketing Cookies: Where you have provided consent, these cookies allow 288pak to deliver relevant promotional content. You can withdraw consent for marketing cookies at any time through your account settings or by contacting support.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 288pak platform. For detailed information on the specific cookies used by 288pak, please contact our support team via live chat.

Data Sharing

288pak does not sell, rent, or commercially trade your personal data. We share personal data with third parties only in the following clearly defined circumstances:

• Payment Service Providers: We share necessary financial data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer networks — to process deposits and withdrawals. These providers act as data processors under binding contractual agreements and may only use your data as directed by 288pak for the purpose of processing your transactions.
• Identity Verification Providers: We may share identity and document data with third-party KYC verification service providers who assist in verifying member identity and age in compliance with applicable regulatory requirements.
• Fraud Prevention and Security Services: We may share technical and behavioural data with specialist fraud detection and cybersecurity service providers to protect the platform and its members from fraudulent activity.
• Regulatory and Law Enforcement Authorities: We are legally required to share relevant data with gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by applicable law or a lawful order. 288pak will comply with all such legitimate requests and will notify the affected member where permitted by law to do so.
• Platform Technology Partners: We share data with technology service providers who support the operation of the 288pak platform — including game software providers, hosting providers, and customer support platforms. All such providers are bound by data processing agreements that limit their use of member data to the specific services they provide to 288pak.

All third-party data processors engaged by 288pak are required to implement appropriate technical and organisational security measures to protect the personal data they process on 288pak's behalf, and are prohibited from using that data for any purpose other than the specific service for which they have been engaged.

Data Security

288pak takes the security of your personal and financial data extremely seriously. We have implemented a multi-layered security architecture designed to protect member data against unauthorised access, disclosure, alteration, loss, and destruction. Our security measures include:

• Encryption: All data transmitted between your device and the 288pak platform is encrypted using TLS (Transport Layer Security) protocol. Sensitive data stored in our databases is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within 288pak's internal systems is strictly controlled on a need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all access is logged and audited.
• Two-Factor Authentication: Members are encouraged — and in some circumstances required — to enable two-factor authentication on their 288pak accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: 288pak engages independent security specialists to conduct regular penetration testing and vulnerability assessments of its platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to members, 288pak will take immediate containment action and notify affected members and relevant regulatory authorities within the timeframes required by applicable law.

Data Retention

288pak retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Personal data associated with your active 288pak account is retained for the duration of the account relationship and for a reasonable period thereafter to handle any post-closure queries, disputes, or regulatory enquiries.
• Financial and Transaction Records: Transaction records, deposit and withdrawal histories, and related financial data are retained for a minimum of five years following the relevant transaction or account closure, as required by applicable anti-money-laundering regulations.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five years following account closure, as required by applicable KYC regulatory obligations.
• Communications Records: Support chat transcripts and email correspondence are retained for a period sufficient to resolve disputes and meet quality assurance requirements, typically up to three years from the date of the communication.
• Marketing Data: Where processing is based on consent, marketing preference data is retained until consent is withdrawn. Following withdrawal of consent, your data is removed from active marketing databases promptly.

When personal data reaches the end of its applicable retention period, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Your Rights

As a 288pak member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 288pak support team via live chat or email. We will respond to all valid rights requests within 30 days of receipt:

• Right of Access: You have the right to request a copy of the personal data 288pak holds about you, together with information about how it is being used and on what legal basis.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some corrections may require supporting documentation for verification purposes.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right is subject to legal and regulatory retention obligations that may require 288pak to retain certain data notwithstanding your request.
• Right to Restrict Processing: You have the right to request that 288pak restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. 288pak will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

Children & Minors

288pak is a strictly 21+ platform. The collection of personal data from persons under the age of 21 is entirely prohibited and contrary to 288pak's policies and operating standards. 288pak does not knowingly collect, process, or retain personal data belonging to minors.

During the registration process, all prospective members are required to confirm that they are at least 21 years of age. 288pak conducts age verification checks and reserves the right to request documentary proof of age at any point during the account lifecycle. Where 288pak has reasonable grounds to suspect that a registered account is being operated by a person under the age of 21, the account will be immediately suspended and investigated.

If a parent, guardian, or any concerned party believes that a minor has registered an account with 288pak or has accessed the platform, they should contact 288pak support immediately via live chat. 288pak will investigate the matter urgently, close the account if the concern is substantiated, return any deposited funds as appropriate, and securely delete any personal data associated with the minor's account.

Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing online gambling platforms. 288pak supports all efforts to protect minors from exposure to gambling content.

Marketing Communications

288pak may send you promotional offers, bonus announcements, game recommendations, and other marketing communications by email or SMS where you have provided your consent to receive such communications during registration or subsequently through your account settings.

Marketing communications from 288pak will always:

• Clearly identify 288pak as the sender.
• Include a clear and easy unsubscribe mechanism in every message.
• Comply with applicable marketing and communications regulations.
• Respect your communication preferences as updated in your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any 288pak marketing email.
• Updating your communication preferences in your 288pak account dashboard.
• Contacting 288pak support via live chat or email and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional or account-related communications that are necessary for the operation of your account — such as withdrawal confirmations, security alerts, verification requests, or responsible gaming notifications. These essential communications will continue regardless of your marketing preferences.

Third-Party Services

The 288pak platform may contain links to or integrations with third-party services, including game software providers and payment gateways. This Privacy Policy applies solely to data collected and processed by 288pak directly. It does not extend to the data practices of third-party services accessed through the 288pak platform.

When you interact with a third-party service — for example, when completing a JazzCash or EasyPaisa payment — you are subject to that provider's own terms of service and privacy policy. 288pak is not responsible for the privacy practices of third-party services and encourages members to review the privacy policies of any external service they interact with.

All third-party service providers engaged by 288pak as data processors are required to comply with binding contractual data protection obligations and may not use member data for any purpose outside the scope of the services they provide to 288pak. 288pak regularly reviews its third-party data processor relationships to ensure continued compliance with these obligations.

Changes to This Policy

288pak reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform operations, or data processing practices. The effective date at the top of this page will be updated whenever a material change is made.

Where changes to this Policy are material — meaning they significantly affect your rights or the way 288pak processes your data — 288pak will provide advance notice of no less than 7 days via the registered email address associated with your account and through a prominent notice on the 288pak platform prior to the changes taking effect.

Minor amendments, such as typographical corrections or clarifications that do not change the substance of the Policy, may be made without advance notice. We encourage members to review this Privacy Policy periodically to stay informed of how 288pak protects their personal data.

Continued use of the 288pak platform following the effective date of any amended Privacy Policy constitutes your acknowledgement and acceptance of the updated terms.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 288pak has handled your personal data, please contact us through any of the following channels. Our support team is available around the clock, every day of the year.

If you are not satisfied with how 288pak has handled your privacy complaint after raising it with our support team, you may escalate the matter to the applicable data protection supervisory authority or gaming regulatory body under whose jurisdiction 288pak operates.