Privacy Policy — 288pak Platform

This Privacy Policy ("Policy") describes how 288pak ("we", "us", "our", "the Platform", "the Operator") collects, processes, stores, uses and discloses personal data relating to individuals ("you", "your", "User") who access or use the 288pak online betting and casino platform available at 288pak.cam and any associated web interfaces or mobile applications.

288pak is an English-language online betting information and platform hub designed for users in Pakistan. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is intended to give you a clear and honest account of our data practices so you can make informed decisions about your use of the Platform.

By registering for an Account, depositing funds or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not accept this Policy, you must not use the Platform.

The following definitions apply throughout this Policy:

• Personal Data: Any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, email address, phone number, CNIC number, IP address, device identifiers and financial account details.
• Processing: Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction.
• Data Controller: The entity that determines the purposes and means of processing Personal Data. In the context of this Policy, 288pak is the Data Controller.
• Data Processor: A third party that processes Personal Data on behalf of the Data Controller, under written instruction.
• Consent: A freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose.
• KYC: Know Your Customer — identity and address verification procedures applied for regulatory, fraud-prevention and AML compliance purposes.
• Cookies: Small text files placed on a User's device by a web server to store session, preference or tracking information.
• Third Party: Any natural or legal person other than the User and 288pak.

For the purposes of this Policy, 288pak acts as the Data Controller in respect of the personal data processed through the Platform. This means that 288pak determines the purposes for which, and the means by which, your personal data is processed.

Where 288pak engages third-party service providers — such as payment processors, identity verification providers, fraud-detection services or analytics platforms — those providers act as Data Processors under written agreements that restrict their use of your data to the purposes for which it was shared.

If you have any questions or concerns about how 288pak processes your personal data, or wish to exercise your data rights, please refer to Section 15 (Contact Us) of this Policy.

288pak collects personal data in the following categories, depending on how you interact with the Platform:

288pak processes personal data for the following purposes:

1. Account Registration and Management: To create, verify and administer your user account, including identity verification (KYC), password management and account preferences.
2. Service Delivery: To provide access to betting, casino, slots, esports and other Platform features, and to process deposits and withdrawals in PKR.
3. Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, money laundering, account abuse and other prohibited activities. AML obligations may require us to retain and report certain transaction data.
4. Responsible Gambling: To implement and monitor responsible gambling tools, including deposit limits, session controls and self-exclusion status. This may include profiling to identify patterns of potentially problematic gambling behaviour.
5. Customer Support: To respond to queries, complaints and support requests submitted via live chat or email.
6. Legal and Regulatory Compliance: To meet our obligations under applicable law, including responding to lawful requests from regulators or law enforcement authorities.
7. Platform Improvement: To analyse usage data to improve the Platform's performance, design, features and user experience for Pakistani users.
8. Marketing Communications: To send you promotional offers, bonus notifications and platform updates, where you have given consent to receive such communications. You may withdraw consent at any time via your account settings.
9. Dispute Resolution: To investigate and resolve disputes relating to bets, transactions or account activity, and to maintain records for that purpose.

Where applicable data protection law requires a lawful basis for processing personal data, 288pak relies on the following grounds:

• Performance of a Contract: Processing necessary to enter into or perform the contract with you — including account creation, bet processing, deposits and withdrawals in PKR, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, regulatory reporting and responding to lawful government or court requests.
• Legitimate Interests: Processing for purposes where our legitimate interests (or those of a third party) are not overridden by your privacy rights — including fraud prevention, Platform security, responsible gambling monitoring and business analytics.
• Consent: Processing for marketing communications and non-essential cookie placement, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

288pak does not sell, rent or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Identity Verification Providers: Third-party KYC services that verify identity documents, including CNIC and passport data, to satisfy regulatory requirements.
• Payment Processors: Entities that facilitate deposit and withdrawal transactions in PKR. Where familiar Pakistani payment services (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are referenced, those references are context only — they do not represent confirmed integrations or endorsements.
• Fraud and AML Detection Services: Third-party tools that assist in monitoring transactions for suspicious activity and compliance with anti-money laundering obligations.
• Technology and Hosting Providers: Infrastructure, cloud hosting and software providers who process data on our behalf under data processing agreements.
• Analytics Providers: Services that help us understand user behaviour and Platform performance, processing data in aggregate or pseudonymised form where possible.
• Legal and Regulatory Authorities: Government bodies, law enforcement, courts or regulators where disclosure is required by applicable law or legal process.
• Professional Advisors: Lawyers, auditors and consultants who process data under professional privilege obligations.

All third-party processors engaged by 288pak are required to process personal data only in accordance with our instructions and applicable data protection obligations.

288pak retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory and operational requirements. The following general retention principles apply:

• Account Data: Retained for the duration of the active account relationship and for a minimum period of five (5) years following account closure, to meet KYC, AML and dispute-resolution obligations.
• Transaction Data: Financial transaction records, including deposit and withdrawal history in PKR, are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the period required by applicable AML legislation, typically five (5) years from the end of the business relationship.
• Support Communications: Support correspondence is retained for a minimum of two (2) years following resolution of the relevant query or dispute.
• Marketing Data: Marketing preference records and consent logs are retained until consent is withdrawn and for a reasonable period thereafter for record-keeping purposes.
• Technical and Usage Data: Retained in aggregate or anonymised form for analytical purposes for up to twenty-four (24) months.

Where personal data is no longer required for any retention purpose, it will be securely deleted or anonymised in a manner that prevents reconstruction.

288pak implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Security measures in place include:

• HTTPS/SSL Encryption: All data transmitted between your browser or device and the 288pak Platform is encrypted in transit using HTTPS/SSL.
• Password Security: Passwords are stored in hashed, salted form. Plain-text passwords are never stored or transmitted.
• Two-Factor Authentication (2FA): Optional 2FA is available to all registered users as an additional account security layer.
• Access Controls: Access to personal data within the 288pak organisation is restricted on a need-to-know basis, with role-based access controls and audit logging.
• Third-Party Security: Data processors are subject to security requirements under their data processing agreements with 288pak.
• Incident Response: 288pak maintains procedures for identifying, assessing and responding to data security incidents. Affected users will be notified in accordance with applicable legal obligations where a breach poses a risk to their rights and freedoms.

288pak uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be placed on your device:

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Your cookie preferences can also be updated via the cookie management tool available within your account settings.

Subject to applicable data protection law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by 288pak:

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to verified requests within thirty (30) days. Requests may be refused or restricted where required by law, including where compliance would prejudice an active AML investigation or legal proceeding.

The 288pak Platform is strictly for adults aged 18 and above, or the higher minimum age required by the applicable license jurisdiction. We do not knowingly collect or process personal data from individuals under this minimum age.

If you believe a minor has registered on or accessed the Platform, please contact our support team immediately at [email protected] (displayed as plain text — not a clickable link).

288pak may process or store personal data in jurisdictions outside Pakistan, including countries where the Operator's infrastructure, technology providers or data processors are located. Where such transfers occur, 288pak takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied under this Policy.

Safeguards for international transfers may include:

• Data processing agreements incorporating standard contractual clauses or equivalent protections;
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection;
• Binding corporate rules where applicable within a group of companies.

By using the Platform, you acknowledge that your personal data may be transferred to, stored or processed in countries outside Pakistan. If you have concerns about international data transfers, please contact us using the details in Section 15.

288pak reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, new purposes for processing, or changes to data sharing practices — reasonable notice will be provided via the Platform or by email to your registered address. The updated Policy will display a revised effective date at the top of the page.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the changes. If you do not accept an amendment to this Policy, you must cease using the Platform and may close your account in accordance with the Terms and Conditions.

We recommend reviewing this Policy periodically to stay informed of how your data is being used and protected. Archived versions of previous policies may be requested from the support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact the 288pak privacy team using the details below.

288pak serves users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad and Multan. Our support team is familiar with PKR transaction queries and is available in English. Urdu-language assistance may also be available — please indicate your preference when you make contact.