Contents
1. Overview 2. Data We Collect 3. How We Use Your Data 4. Legal Basis 5. Data Sharing 6. Cookies & Tracking 7. Data Retention 8. Security Measures 9. Your Rights 10. Minors 11. Policy Updates 12. Contact UsMost Read: Sections 2, 5 and 9 cover what data we collect, who we share it with, and your rights — the three things players ask about most.
1. Overview
This Privacy Policy applies to all users of 288game — the online gaming platform accessible at 288game.ws — and governs how 288game collects, processes, stores, and protects personal data in connection with the services provided on the platform. 288game serves players primarily based in Pakistan and this policy is written with Pakistani users in mind.
By registering a 288game account, making a deposit, claiming a promotion, or simply browsing the website, you acknowledge that you have read this Privacy Policy and understand how your personal data is handled. If you do not agree with anything in this policy, you should not use 288game.
This Privacy Policy should be read alongside 288game's Terms and Conditions and Responsible Gaming policy. Where these documents overlap, they complement one another and should be read as a whole. The legal language has been kept to a minimum — where something important is said in technical terms, a plain-language explanation follows.
288game takes data privacy seriously not because it is a legal obligation, but because our players are Pakistani individuals who deserve to know exactly what is happening with their personal information. The goal of this policy is transparency: nothing is hidden, nothing is ambiguous, and everything is here for a reason.
Short Version: 288game collects the data needed to run your account, process your payments, verify your identity, and keep the platform secure. We do not sell your data. We share it only with trusted service providers who need it to help us operate. You can request access to, correction of, or deletion of your data at any time.
2. Data We Collect
288game collects only the data that is genuinely necessary to provide its services. We do not collect data speculatively or build profiles beyond what the platform requires to operate fairly and securely. Below is a breakdown of the categories of personal data 288game collects and the circumstances under which each category is collected.
2.1 Registration Data
When you create a 288game account, you provide:
- Full legal name
- Date of birth
- Mobile number or email address
- A username and password of your choosing
This information is used to create and manage your account, communicate with you about your account activity, and verify your identity when required.
2.2 Identity Verification (KYC) Data
As part of our Know Your Customer process — required to confirm age and identity before processing withdrawals above certain thresholds — 288game may request:
- A copy of your CNIC (Computerised National Identity Card)
- A selfie or photograph for document matching
- Proof of address (such as a utility bill or bank statement)
- Proof of payment method ownership (such as a screenshot of your Easypaisa or JazzCash account)
2.3 Financial Transaction Data
Every deposit and withdrawal you make through 288game generates a transaction record. This includes the amount, date, time, payment method used, and transaction reference number. 288game does not store full payment card numbers — card transactions are handled through a PCI-DSS-compliant payment processor and 288game receives only a tokenised reference.
2.4 Gaming Activity Data
288game logs your gaming activity on the platform, including games played, bets placed, wagers, wins and losses, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud detection, and dispute resolution.
2.5 Technical & Device Data
When you access 288game, the platform automatically collects certain technical information including your IP address, browser type and version, device type, operating system, screen resolution, referring URL, and session timestamps. This data is collected to maintain platform security, detect suspicious access patterns, and improve the user experience.
2.6 Communications Data
If you contact 288game support via live chat or email, the content of those communications is stored. This includes the subject matter, timestamps, and any attachments submitted. These records are retained for quality assurance and dispute resolution purposes.
| Data Category | Examples | Why Collected |
|---|---|---|
| Registration | Name, DOB, mobile, email | Account creation & identity |
| KYC Documents | CNIC, selfie, address proof | Age & identity verification |
| Financial | Deposit/withdrawal records | Payment processing & AML |
| Gaming Activity | Bets, sessions, wins/losses | Account management & RG |
| Technical | IP, device, browser | Security & fraud prevention |
| Communications | Support chat logs, emails | QA & dispute resolution |
3. How We Use Your Data
288game uses the personal data it collects for specific, defined purposes. We do not use data for purposes beyond what is described here without first updating this policy and notifying you.
- Account Management: Creating and maintaining your 288game account, processing login requests, managing your balance, and recording your transaction history.
- Payment Processing: Facilitating PKR deposits and withdrawals through your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard). Your financial data is shared with payment processors only to the extent required to complete each transaction.
- Identity Verification: Verifying that you are who you say you are and that you meet the minimum age requirement of 18 years. This is a legal obligation for any responsible gaming platform.
- Fraud & Security: Detecting and preventing fraudulent account activity, multi-accounting, payment fraud, money laundering, and other prohibited conduct as described in the Terms and Conditions.
- Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling. Where concerning patterns are detected, 288game may reach out proactively or apply protective restrictions.
- Customer Support: Responding to your queries, resolving disputes, and maintaining records of those interactions for quality assurance.
- Promotions & Communications: Sending you information about bonus offers, promotions, and platform updates. You can opt out of promotional communications at any time from your account settings.
- Platform Improvement: Using aggregated, anonymised usage data to understand how players interact with 288game and improve the platform experience over time.
4. Legal Basis for Processing
288game processes your personal data on the following legal bases:
- Contractual Necessity: Most data processing at 288game is necessary to perform the contract between you and us — i.e., to operate your account, process payments, and deliver the gaming services you have signed up for.
- Legal Obligation: Certain data processing is required by law. Identity verification and anti-money laundering checks fall into this category — 288game is legally required to perform them.
- Legitimate Interests: Some data processing — particularly fraud prevention, security monitoring, and platform improvement using aggregated data — is carried out on the basis of 288game's legitimate business interests, provided those interests do not override your fundamental rights.
- Consent: Where consent is the basis for processing — for example, promotional email communications — you can withdraw that consent at any time from your account settings or by contacting support.
5. Data Sharing
288game does not sell personal data. Full stop. Your information is not sold to data brokers, advertising networks, or any other third party for commercial gain. Data is shared only in the circumstances described below, and only to the extent necessary for the purpose stated.
5.1 Payment Processors
To process deposits and withdrawals in PKR, 288game shares transaction data with our payment processing partners — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and Visa/Mastercard acquiring banks. These partners receive only the data they need to process the specific transaction.
5.2 Game Providers
288game's game library is provided by third-party developers including Pragmatic Play, PG Soft, Evolution, NetEnt, Habanero, and others. When you launch a game, the game provider's platform may receive a session token that identifies your account to the game. Game providers do not receive your name, payment details, or contact information — only the session data required to run the game and record results.
5.3 KYC & Identity Verification Services
To verify identity documents submitted as part of KYC checks, 288game may use third-party identity verification services. These services process your CNIC and associated documentation on 288game's behalf and under strict data processing agreements.
5.4 Anti-Fraud & Security Services
288game uses technical security services to detect unusual login patterns, payment fraud, and other suspicious activity. These services may process device fingerprint data and IP addresses.
5.5 Legal and Regulatory Disclosure
288game will disclose personal data to law enforcement authorities, regulators, or courts where required to do so by law or valid legal order. 288game will not resist lawful requests, but will not disclose data voluntarily beyond what is legally required.
Your data stays within necessary boundaries. Every third party that receives data from 288game does so under a data processing agreement that restricts their use of that data to the specific purpose for which it was shared.
6. Cookies & Tracking Technologies
288game uses cookies and similar tracking technologies on its website. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.
6.1 Types of Cookies Used
- Essential Cookies: Required for the 288game website to function. These include session management cookies that keep you logged in during a session, CSRF protection tokens, and load balancer cookies. These cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings and the last game category you browsed. These improve convenience but are not strictly essential.
- Analytics Cookies: Collect anonymised usage data — pages visited, time on site, navigation paths — to help 288game understand how the platform is used and where improvements should be made. No personally identifiable information is included in analytics data.
- Security Cookies: Used as part of fraud detection and account protection measures. These help 288game identify legitimate returning users versus suspicious access attempts.
6.2 Managing Cookies
You can control cookie settings through your browser. Most browsers allow you to view, delete, and block cookies. Note that disabling essential cookies will prevent 288game from functioning correctly — you will not be able to log in or use the platform without them. Instructions for managing cookies in common browsers are available through your browser's help documentation.
7. Data Retention
288game retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, plus any additional period required by law or legitimate business need. The following retention periods apply:
- Account and registration data: Retained for the lifetime of the account plus 5 years after account closure. This is required for anti-money laundering compliance.
- KYC documents: Retained for 5 years from the date of submission, consistent with financial services compliance requirements.
- Financial transaction records: Retained for 7 years from the date of each transaction.
- Gaming activity logs: Retained for 3 years from the date of each session.
- Support communications: Retained for 3 years from the date of the last interaction in a conversation thread.
- Technical and device data: Retained for 12 months on a rolling basis.
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data — where no individual can be identified — may be retained indefinitely for platform analytics.
8. Security Measures
288game takes the security of your personal data seriously and applies technical and organisational safeguards appropriate to the sensitivity of the data it handles. These include:
- SSL/TLS Encryption: All data transmitted between your device and 288game servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser's address bar when visiting 288game.ws confirms this encryption is active.
- Password Hashing: Your 288game password is never stored in plain text. It is hashed using a one-way cryptographic function before storage, meaning that even 288game staff cannot read your password.
- Access Controls: Internal access to personal data at 288game is restricted on a need-to-know basis. Staff who do not require access to personal data as part of their role do not have it.
- Payment Security: Full card numbers are never stored by 288game. Card transactions are handled through PCI-DSS-compliant processors. Easypaisa and JazzCash transactions use their own security infrastructure.
- Monitoring: 288game's systems are monitored for unusual access patterns, potential intrusions, and data anomalies around the clock.
- Incident Response: In the event of a data breach that affects your personal data, 288game will notify affected users as quickly as practicable and take immediate steps to contain the breach and mitigate harm.
Your Role in Security: No security system is completely impenetrable. You play an important part in protecting your own account by using a strong, unique password for 288game, not sharing your login credentials with anyone, and logging out after sessions on shared devices.
9. Your Privacy Rights
As a 288game user, you have specific rights over your personal data. These rights are set out below with a plain-language explanation of what each one means in practice. To exercise any of these rights, contact 288game at support@288game.ws with the subject line "Privacy Request" and your account username.
Right of Access
You can request a copy of all personal data 288game holds about you. We will provide this within 30 days of receiving a verified request. The information will be delivered in a readable format.
Right to Rectification
If any personal data 288game holds about you is inaccurate or incomplete, you can request that it be corrected. Most basic account details can be updated directly from your account settings.
Right to Erasure
You can request deletion of your personal data. This right is not absolute — 288game must retain certain data for legal and compliance reasons (such as financial transaction records) — but all non-mandatory data can be deleted on request.
Right to Restrict Processing
You can ask 288game to stop processing your data in certain ways, for example while a dispute about data accuracy is being resolved, even if you do not want the data deleted entirely.
Right to Data Portability
Where data has been provided by you and is processed on the basis of consent or contract, you can request a copy in a machine-readable format (such as CSV) that you can transfer to another service.
Right to Object
You can object to processing carried out on the basis of legitimate interests — for example, profiling for responsible gaming monitoring. 288game will consider and respond to such objections on a case-by-case basis.
Exercising Your Rights: Email support@288game.ws with the subject "Privacy Request" and we will acknowledge your request within 5 business days. Responses will be provided within 30 days. Complex requests may take up to 60 days — we will notify you if this is the case and explain why.
10. Minors & Under-18 Protection
288game strictly enforces the minimum age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If you are under 18, do not register an account or submit any personal information to 288game.
If 288game becomes aware that personal data has been collected from a person under 18, that account will be immediately closed and all associated personal data will be deleted, except where retention is required to document the underage access incident and prevent recurrence.
If you are a parent or guardian and believe that your child has created a 288game account or submitted personal data to the platform, please contact support@288game.ws immediately. 288game will act promptly to close the account and remove the data.
11. Updates to This Policy
288game may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised and, for material changes, we will notify registered users via the email address associated with their account or through an in-platform notification.
We encourage you to review this Privacy Policy periodically. Continued use of 288game after the effective date of any changes constitutes acceptance of the revised policy. If you disagree with a change, you should stop using the platform and request account closure before the change takes effect.
12. Contact Us About Privacy
If you have any questions about this Privacy Policy, how 288game handles your data, or if you want to exercise any of your data rights, you can reach us through the following channels:
- Live Chat: Available 24/7 on every page of 288game.ws — the fastest route for most queries
- Email: support@288game.ws — please use the subject line "Privacy Request" for data rights enquiries
- FAQ: Visit our FAQ page for answers to common questions including privacy topics
288game aims to acknowledge all privacy-related emails within 5 business days and provide a full response within 30 days. If your request is complex or you have submitted multiple requests simultaneously, the response window may be extended to 60 days. You will be notified if this is the case.