288wim Privacy Policy — How We Protect Your Personal Data in Pakistan

1. Who We Are and What This Policy Covers

This Privacy Policy applies to all personal data collected and processed by 288wim in connection with the operation of the platform at 288wim.bet. When this policy refers to "288wim", "we", "us", or "our", it means the company that owns and operates the 288wim platform and all associated services.

This policy covers every way that 288wim interacts with your data — from the moment you land on our website, through the registration process, across your deposits and bets, and through to withdrawal and account closure. It also covers data collected when you contact our customer support team, participate in promotions, or use the Refer a Friend programme.

We are committed to protecting the privacy of every 288wim member in Pakistan. We do not sell personal data. We do not share it with third parties beyond what is strictly necessary to operate the platform. And we maintain it with security measures designed to protect it from unauthorised access at every stage.

2. What Personal Data We Collect

288wim collects only the personal data that is genuinely necessary to provide the services you use. The categories of data we collect are as follows:

2.1 Registration and Account Data

When you create a 288wim account, we collect:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Pakistani mobile phone number (used for account verification and security alerts)
• Email address (used for account communications and promotional messages, if opted in)
• Username and encrypted password
• Residential address in Pakistan

2.2 Identity Verification Data

To comply with anti-money laundering (AML) requirements and to protect your account, 288wim may collect:

• A copy of your Pakistani CNIC (Computerised National Identity Card) or NICOP
• Proof of address (utility bill, bank statement, or similar document)
• Proof of the payment method used for deposits

These documents are collected only when required by the verification process and are stored securely for the duration required by applicable regulations.

2.3 Financial Transaction Data

Every deposit and withdrawal made through 288wim generates a transaction record. This includes the amount, timestamp, payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard), and the transaction reference. We do not store full card numbers — only masked card details and the card type are retained.

2.4 Betting and Gaming Activity

A record is maintained of all bets placed, casino games played, sports markets accessed, and wagering activity across the 288wim platform. This data is used for account management, dispute resolution, responsible gaming monitoring, and to personalise your experience within the platform.

2.5 Technical and Device Data

When you visit 288wim, our systems automatically collect certain technical information including your IP address, browser type and version, device type and operating system, session duration, pages visited, and the referring URL if you arrived from another page. This data is used for platform security, fraud detection, and to improve the overall experience.

2.6 Customer Support Communications

When you contact the 288wim support team — whether via live chat or email — a record of that communication is retained. This allows us to follow up on unresolved issues and to improve the quality of our support service over time.

3. Why We Use Your Data — Legal Basis

288wim processes personal data only when there is a clear, legitimate reason to do so. The legal bases we rely on are:

• Contract performance: Processing your registration data, financial transactions, and betting activity is necessary to provide the services you signed up for at 288wim. Without this data, we cannot operate your account.
• Legal obligation: Identity verification, transaction records, and AML monitoring are required by the regulations that govern 288wim's operations. We are required to collect and retain this data regardless of your preferences.
• Legitimate interest: Security monitoring, fraud detection, platform analytics, and customer support quality improvement are carried out in the legitimate interest of both 288wim and its members. We balance this interest against your privacy rights and apply appropriate safeguards.
• Consent: Where 288wim sends you optional promotional communications — such as bonus offers, new game announcements, or personalised recommendations — we do so only with your explicit opt-in consent. You can withdraw consent at any time through your account settings or by emailing privacy@288wim.bet.

4. Who We Share Your Data With

288wim does not sell, rent, or trade your personal data with any third party. We share data only in the following limited and controlled circumstances:

4.1 Payment Service Providers

To process your deposits and withdrawals, 288wim shares the minimum necessary transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, banks processing IBFT transfers, and card networks (Visa/Mastercard). These providers receive only what is required to complete the specific transaction and are contractually bound to protect your data.

4.2 Identity Verification Services

For the purpose of verifying your identity in compliance with AML regulations, 288wim may use third-party identity verification providers. These providers process your identity documents securely and return a verification result. They do not retain your documents beyond the period required for verification.

4.3 Technology and Platform Partners

288wim uses reputable third-party technology partners for services such as live casino game delivery, analytics, customer support tools, and platform infrastructure. These partners process data strictly on 288wim's instructions, under data processing agreements that impose appropriate security and confidentiality obligations.

4.4 Legal and Regulatory Requirements

288wim will disclose personal data to regulators, law enforcement, or other authorities when required to do so by applicable law, or when necessary to protect the rights, safety, or property of 288wim, its members, or the public. In all such cases, 288wim discloses only the minimum data required.

5. How We Protect Your Data

Protecting the personal data of 288wim members in Pakistan is a technical and operational priority. The measures we apply include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 288wim platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this connection is active.
• Encrypted Data Storage: Sensitive account data including passwords (stored as irreversible hashes) and financial records are encrypted at rest on 288wim's secure servers.
• Access Controls: Access to personal data within 288wim is restricted on a strict need-to-know basis. Team members only access data that is relevant to their specific function, and all access is logged and audited.
• Two-Factor Authentication: 288wim offers two-factor authentication (2FA) for your account. We strongly recommend enabling it. With 2FA active, accessing your account requires both your password and a code sent to your registered mobile number.
• Fraud Detection Systems: Automated fraud detection systems monitor 288wim account activity around the clock. Unusual activity triggers an alert and, if necessary, a temporary account hold while the matter is investigated.
• Regular Security Reviews: 288wim conducts regular internal and third-party security assessments to identify and address any vulnerabilities in the platform infrastructure.

6. Cookies and Tracking Technologies

288wim uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, and understand how the platform is used. Here is how we categorise the cookies we use:

• Strictly Necessary Cookies: Required for the platform to function — login sessions, security tokens, and language preferences. These cannot be disabled without breaking core functionality.
• Analytical Cookies: Collect anonymised data about how players navigate the 288wim platform — which pages are visited most, where players encounter difficulty, and how the platform performs. This data is used to improve your experience.
• Functional Cookies: Remember your preferences such as your preferred sports tab, display settings, and notification choices so you do not have to reconfigure them each visit.
• Marketing Cookies: Only set when you have given explicit consent. These allow 288wim to show you relevant promotions based on your interests within the platform. No third-party advertising cookies are used.

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the platform normally. To opt out of analytical and functional cookies while continuing to use 288wim, contact privacy@288wim.bet.

7. Your Data Rights

As a 288wim member, you have specific rights over your personal data. These rights are described below, along with how to exercise each one. All requests should be sent to privacy@288wim.bet and will be responded to within 30 days.

8. Responsible Gaming and Data

288wim uses betting and gaming activity data as part of its responsible gaming programme. This means that if our systems detect patterns that suggest a player may be experiencing difficulty — such as significantly increased bet frequency, chasing losses, or dramatically rising deposits — the 288wim responsible gaming team may reach out proactively to check in and offer support tools.

This use of your data is carried out in your best interest and in fulfilment of 288wim's commitment to safer gambling. It is not used for any marketing purpose. The responsible gaming tools available to all 288wim members — deposit limits, session reminders, self-exclusion — are described in full on the Responsible Gaming page.

If you have requested self-exclusion from 288wim, your data is retained for the duration of the self-exclusion period and the regulatory retention period thereafter. It is used only to enforce the self-exclusion and will not be used for marketing or any other purpose during that time.

9. International Data Transfers

288wim's primary platform infrastructure is hosted in secure data centres. Some third-party technology partners used by 288wim — particularly live casino game providers and cloud infrastructure services — may process data in countries outside Pakistan. Where this occurs, 288wim ensures that appropriate contractual safeguards are in place to protect your data to at least the same standard that applies in Pakistan. If you would like details of the specific safeguards applied to any particular data transfer, please contact privacy@288wim.bet.

10. Children's Privacy

288wim is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If 288wim discovers that a person under 18 has registered an account or provided personal data, that account will be immediately closed, the data will be deleted, and any deposited funds will be returned to the original payment source. If you believe a person under 18 has created a 288wim account, please contact us immediately at support@288wim.bet.

11. Updates to This Privacy Policy

288wim reviews and updates this Privacy Policy periodically. When material changes are made — for example, changes to what data we collect, how we use it, or who we share it with — we will notify registered members via email or an in-platform notification at least 7 days before the changes take effect. The "Last Updated" date at the top of this page always reflects the current version. Continued use of 288wim after the effective date of any update constitutes acceptance of the revised policy.

12. How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how 288wim handles your personal information, please reach out using the contact details below. The 288wim privacy team aims to respond to all privacy enquiries within 48 hours and to resolve data rights requests within 30 days.