288min Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 288min ("we," "us," "our," or "the Platform") and applies to all players, visitors, and users who access the 288min website at 288min.app, its mobile-optimised interfaces, and any related services, products, or features offered under the 288min brand.

288min is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By creating a 288min account, logging in, making a deposit, placing a bet, or simply browsing the platform, you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein.

This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about how 288min handles your data, please reach out to our support team — details are provided in Section 14 of this Policy.

Data We Collect

288min collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser as you navigate the site, and from verified third-party sources such as KYC providers and payment processors. The categories of data we collect are set out below.

How We Use Your Data

288min uses the personal data we collect for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes listed below without first notifying you and, where required, obtaining your consent.

Legal Basis for Processing

288min processes your personal data under one or more of the following lawful bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including operating your account, processing bets, and handling deposits and withdrawals in PKR.
• Legal Obligation: Processing required to comply with KYC, AML, and other regulatory requirements applicable to 288min's operating jurisdiction.
• Legitimate Interests: Processing carried out to prevent fraud, ensure platform security, improve services, and conduct responsible gaming monitoring — where these interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting prior processing.

Sharing Your Data

288min does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We share data only where strictly necessary and only with the categories of recipients described below, each of whom is bound by appropriate confidentiality and data protection obligations.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing partners receive the minimum financial data required to execute your PKR deposit or withdrawal transaction.
• KYC & Identity Verification Providers: Third-party KYC service providers receive identity document data (CNIC, passport, or driving licence images) solely for the purpose of verifying your identity and age on behalf of 288min.
• Game Software Providers: Casino and sports data providers may receive limited technical session data (anonymised where possible) to facilitate game delivery and real-time odds feeds.
• Regulatory & Law Enforcement Authorities: 288min will disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory instruction. We will notify you of any such disclosure where legally permitted to do so.
• Technology & Infrastructure Partners: Hosting, cloud storage, and cybersecurity service providers who process data on behalf of 288min under strict data processing agreements.

Cookies & Tracking Technologies

288min uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your session security, and to understand how players interact with the site so we can make ongoing improvements.

You may manage or withdraw your cookie consent at any time by accessing the cookie preferences panel available in the footer of the 288min website. Please note that disabling strictly necessary cookies will impair your ability to log into and use the 288min platform.

Data Retention

288min retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations applicable to 288min's operations.

• Active Accounts: All account data is retained for the full duration of your active relationship with 288min.
• Closed Accounts: Following account closure, 288min retains identity, financial, and transaction data for a minimum of five (5) years to comply with AML regulations and audit requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Live chat logs and email correspondence are retained for up to three (3) years to assist with dispute resolution and quality improvement.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once fully anonymised.

Security Measures

288min implements a multi-layered security architecture to protect your personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to, the following:

Your Rights

As a 288min player, you hold a number of rights with respect to your personal data. 288min is committed to facilitating the exercise of these rights in a timely and transparent manner. To submit a data rights request, please contact the 288min support team using the details in Section 14.

288min will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. Please note that certain rights may be limited where retention of data is required by applicable law — for example, AML regulations that mandate retention of KYC and transaction records.

Minors & Age Policy

288min is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. All registration submissions are subject to mandatory KYC age verification before any real-money activity is permitted on a 288min account.

If 288min discovers or reasonably suspects that a player account belongs to an individual under 21 years of age, the account will be immediately suspended pending investigation. Any deposits made to the account will be returned to the originating payment method after verification, and the account will be permanently closed. No winnings generated on an account belonging to a minor will be paid out.

Third-Party Links

The 288min platform may contain references to third-party services such as payment providers or game software studios. Where links to third-party websites or services exist, please be aware that 288min has no control over, and accepts no responsibility for, the privacy practices or content of those third-party sites.

Each third-party provider operates under its own privacy policy. We encourage you to review the privacy notice of any third-party service you interact with in connection with your use of 288min — particularly your chosen payment provider (for example, JazzCash's or EasyPaisa's own privacy terms) before submitting financial information through their respective platforms.

International Data Transfers

In order to provide the 288min platform to players in Pakistan, certain personal data may be processed by our technology and service partners in jurisdictions outside Pakistan. Where such transfers occur, 288min ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection principles.

Safeguards for international transfers may include contractual data processing agreements with standard data protection clauses, adequacy assessments of the recipient jurisdiction, or other lawful transfer mechanisms as appropriate. If you have questions about the specific safeguards applied to any international transfer of your data, please contact the 288min support team.

Changes to This Policy

288min reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address on file and display a prominent notice within the 288min platform upon your next login. The revised Policy will display an updated effective date at the top of this page.

Your continued use of the 288min platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the 288min platform and may request account closure by contacting the support team.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 288min handles your personal data, our dedicated support team is available 24 hours a day, 7 days a week, operating on Pakistan Standard Time (PKT, UTC+5).

We are committed to resolving all privacy-related enquiries promptly and fairly. If you believe your data rights have not been adequately addressed after contacting us, you may also seek recourse through the relevant data protection authority or supervisory body in your jurisdiction.