Privacy Policy for 288wi — How We Handle Your Personal Data

This Privacy Policy explains how 288wi collects, stores, uses, and protects the personal information of people who use the 288wi platform at 288wi.bet. It applies to all 288wi products and services including cricket betting, esports betting, online casino, jackpot slots, roulette, ludo games, and live cricket score features.

At 288wi, we take data protection seriously — not because we have to, but because we believe Pakistani players deserve to know exactly what happens to their information when they use our platform. This policy is written to be read and understood by a real person, not just a lawyer. If something here isn't clear, contact us and we'll explain it.

By registering a 288wi account or using any 288wi service, you confirm that you have read this Privacy Policy and that you agree to the collection and use of your information as described here. This Privacy Policy forms part of the 288wi Terms and Conditions.

288wi is an online gaming and betting platform operating at 288wi.bet. References to "288wi", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the 288wi platform. References to "you", "your", or "player" refer to any individual who has registered or is using the 288wi platform.

288wi acts as the data controller in respect of the personal data collected through the platform. This means 288wi is responsible for deciding how and why your personal data is used, and for ensuring that those uses comply with applicable data protection obligations.

If you have any questions about how 288wi handles your data, the contact details are in Section 15 of this Privacy Policy.

288wi collects the following categories of personal data from players. We do not collect data that is not necessary for the purposes described in this policy.

288wi collects personal data through the following means:

• Direct from you: When you register a 288wi account, complete your profile, make a deposit, place a bet, submit a withdrawal request, contact support, or respond to a promotion. The information you enter directly is collected at the point of entry.
• Automatically during use: When you access the 288wi platform, certain technical data is collected automatically — including your IP address, device information, browser type, and session activity. This collection happens in the background and does not require any action on your part.
• From payment providers: When you use Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard to deposit or withdraw, 288wi receives a transaction confirmation from the payment provider. The actual payment credentials — your card number, wallet PIN, or account password — are never transmitted to or stored by 288wi. Those are handled entirely by the certified payment processor.
• From third-party verification services: Where 288wi uses a third-party KYC or identity verification provider to verify your identity documents, that provider may share verification results with 288wi. 288wi receives a pass/fail confirmation and, where necessary, a copy of the documents submitted, but does not receive any additional data beyond what is required for verification.
• From cookies and similar technologies: See Section 9 for a full explanation of how 288wi uses cookies.

288wi uses your personal data for the following purposes. For each purpose, the specific data used is limited to what is necessary — we don't pull in data categories that aren't relevant to the task.

• Running your 288wi account: Creating and maintaining your account, processing deposits and withdrawals in PKR, settling your bets, and delivering winnings to your wallet. Without this, the platform simply cannot function for you.
• Verifying your identity and age: Confirming that you are 18 or older and that the account is genuinely yours before processing withdrawals or escalating account limits. 288wi takes underage gambling prevention seriously and identity verification is central to that.
• Preventing fraud and protecting security: Monitoring account activity for signs of fraud, account takeover, money laundering, or other prohibited conduct. This is in both your interest and 288wi's — it protects your money and your account.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) requirements, maintaining records required by applicable law, and cooperating with law enforcement or regulatory requests where legally required.
• Improving the platform: Using anonymised and aggregated usage data to understand how 288wi is used, identify features that need improvement, and develop new services. This analysis uses anonymised data and does not involve profiling individual players.
• Customer support: Responding to your support enquiries, resolving disputes, and maintaining records of communications for quality and compliance purposes.
• Responsible gaming monitoring: Monitoring patterns of play that may indicate problem gambling, in order to provide timely support or intervention where appropriate. This is a core 288wi commitment.
• Sending service communications: Notifying you of significant account events such as successful deposits, withdrawal confirmations, security alerts, or changes to these policies. These communications are operational, not marketing, and cannot be opted out of while your account is active.
• Marketing communications (where you have opted in): Sending promotional offers, bonus notifications, and news about new 288wi features to players who have opted in to receive marketing. You can opt out of marketing communications at any time via your account settings or by contacting support.

288wi processes your personal data on the following legal bases:

• Contract performance: Most data processing at 288wi is necessary to fulfil the contract between you and 288wi — running your account, processing your bets, and settling your winnings. Without this processing, 288wi cannot provide the service you signed up for.
• Legal obligation: Some processing is required by law — for example, KYC verification, AML record-keeping, and cooperation with regulatory or law enforcement requests. 288wi cannot waive these obligations on your request.
• Legitimate interests: Some processing is based on 288wi's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and anonymised analytics used to improve the service.
• Consent: Marketing communications are sent only to players who have actively opted in to receive them. You can withdraw this consent at any time and 288wi will stop sending marketing within 48 hours of receiving your opt-out request.

288wi does not sell your personal data. It is not shared with advertisers, data brokers, social media platforms, or any third party for their own commercial purposes. The only parties with whom 288wi shares personal data are those involved in operating the platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard processing networks receive the transaction data necessary to process your deposit or withdrawal. They do not receive your betting history or gameplay data.
• Identity verification providers: Where a third-party KYC provider is used, your submitted identity documents are shared with them for the purpose of verification only. These providers are contractually bound to use the data only for that purpose.
• Game software providers: Providers of casino games, slots, and live dealer services on the 288wi platform may receive anonymised session data for the purpose of running the game and generating certified random outcomes. They do not receive your name, payment details, or CNIC.
• Fraud and security providers: Third-party services used to detect and prevent fraud or platform abuse may process technical data (IP addresses, device fingerprints) for that purpose only.
• Legal authorities: 288wi will disclose personal data to police, regulatory bodies, or courts where required to do so by a valid legal process. 288wi will notify you of any such request unless legally prohibited from doing so.

Payment security is a particular concern for players using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard on the 288wi platform. Here is exactly how it works.

When you initiate a deposit or withdrawal at 288wi, you are either redirected to your payment provider's secure page or prompted to enter your payment reference in a form that is processed directly by the payment provider's encrypted system. At no point in this process does 288wi's own server receive your Easypaisa PIN, your JazzCash password, your card number, your card CVV, or any other payment credential. These details go directly from your device to the payment provider's certified infrastructure.

What 288wi does receive and store is:

• The transaction reference number issued by the payment provider
• The amount in PKR and the transaction status (success/pending/failed)
• The last four digits of a card number (where a card was used) — this partial reference is used only to match your transaction to your account
• Your registered payment wallet name or account name — used to verify that withdrawals go to the same person who deposited

None of this information is sufficient to initiate a payment transaction on your behalf. 288wi cannot charge your Easypaisa account, make a card payment, or initiate a bank transfer from the data it holds. Your actual payment credentials are exclusively in the hands of the certified payment processors.

288wi uses cookies — small text files stored on your device by your browser — to make the platform function correctly, keep you logged in securely, and understand how the platform is used at an aggregate level.

The cookies 288wi uses fall into the following categories:

• Strictly necessary cookies: These are required for the platform to function. They handle session authentication (keeping you logged in), security tokens, and your bet slip contents. Without them, 288wi cannot operate. You cannot opt out of strictly necessary cookies while using the platform.
• Functional cookies: These remember your preferences — your chosen language, your saved deposit method, your preferred game lobby layout. They improve your experience but are not essential. You can disable them, though this may affect how the platform presents itself to you.
• Analytics cookies: These allow 288wi to understand usage patterns — which sections of the platform are most visited, which games are most popular, and where players encounter difficulty. The data is aggregated and anonymised. No individual player is identified through analytics cookies. 288wi uses this data solely for platform improvement.

288wi does not use advertising cookies or any cookie technology designed to track your behaviour across other websites. The 288wi platform does not embed third-party social media trackers or advertising pixels.

288wi retains your personal data only for as long as it is needed for the purposes for which it was collected, or for as long as required by law. Here is a straightforward summary of 288wi's retention approach:

• Active account data: Retained for the duration of your 288wi account being active, plus a standard period after closure as required by AML and financial record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with standard financial compliance requirements.
• KYC documents: Retained for the period required by applicable AML regulations — typically five years from the end of the customer relationship.
• Support communications: Retained for three years from the date of the communication, or for as long as an active dispute remains unresolved.
• Technical and usage data: Retained for 13 months from collection for security and analytics purposes, then deleted or anonymised.
• Marketing consent records: Retained for as long as you have active marketing consent, plus a standard period afterward to demonstrate compliance.

When your data reaches the end of its retention period, 288wi will securely delete or anonymise it in a way that prevents it from being associated with you.

Protecting the personal data of our players is something 288wi invests in as a real operational priority. The following measures are in place at 288wi to protect your information:

• 256-bit SSL/TLS encryption on every page of the 288wi platform — including the login page, game lobby, cashier, and all account management pages. This protects data in transit between your device and 288wi's servers.
• Encrypted password storage — your 288wi password is stored using a one-way hash function. This means 288wi staff cannot see your password. If you forget it, it must be reset — it cannot be retrieved.
• Access controls: 288wi employee access to player data is restricted on a need-to-know basis. Employees who handle support queries can access account information relevant to resolving your issue. They cannot access payment credentials.
• Fraud monitoring systems that operate continuously to detect unusual activity on accounts, flagging anomalies for review before damage can occur.
• Regular security reviews of the 288wi platform infrastructure to identify and remediate vulnerabilities.

While 288wi takes all reasonable steps to protect your data, no internet-based system is completely immune to security incidents. If a breach occurs that is likely to affect your rights, 288wi will notify you as quickly as possible and take immediate steps to contain the incident.

You also play a role in account security. Use a strong, unique password for your 288wi account. Enable two-factor authentication where available. Never share your login details. If you believe your account has been compromised, contact 288wi support immediately.

As a 288wi player, you have the following rights in relation to your personal data. These rights are genuine — if you exercise any of them, 288wi will respond within a reasonable timeframe, generally within 30 days.