288won Privacy Policy – How We Handle Your Data

1Who We Are

288won is an online sports betting and casino platform serving players in Pakistan. The platform is accessible at 288won.pro and through the official Android app available for download on our site. References to "288won," "we," "us," or "our" in this policy refer to the platform and its operating entity.

288won operates as an entertainment platform and does not claim any Pakistan government licence, regulatory certification, or official state backing. This Privacy Policy governs how we handle the personal data of players and visitors who interact with the platform.

For any privacy-related queries, you can reach us at [email protected].

2Information We Collect

We collect personal data in the following ways:

Information You Provide Directly

• Full name and date of birth provided during account registration
• Email address and mobile phone number
• Residential address
• Username and account password (stored in encrypted form — we do not have access to your plain-text password)
• Identity verification documents such as a government-issued national identity card or passport, where verification is required
• Payment method details necessary to process PKR deposits and withdrawals — for example, your JazzCash or Easypaisa mobile account number, bank account details, or card information
• Communications you send to our support team via live chat or email

Information Collected Automatically

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser or app version
• Pages visited, session duration, and navigation paths within the platform
• Betting and gaming activity including bet amounts, game choices, deposit frequency, and session patterns
• Cookie identifiers and similar tracking data (see Section 7)

Information from Third Parties

• Identity verification outcomes from third-party verification services where we use them to confirm your identity documents
• Fraud and risk signals from payment processors during transaction processing

3How We Use Your Data

We use the personal data we collect for the following purposes:

• Account management — creating and maintaining your account, verifying your identity and age, and keeping your account secure.
• Processing transactions — handling PKR deposits via JazzCash, Easypaisa, Raast, and bank transfers, processing withdrawal requests, and maintaining accurate transaction records.
• Providing the service — delivering sports betting markets (Cricket, PSL, Football, Esports), casino games, live dealer tables, and the VIP programme to you as an authenticated player.
• Customer support — responding to your queries, resolving disputes about bets or transactions, and processing account closure requests.
• Fraud prevention and security — detecting suspicious account activity, preventing bonus abuse, identifying potential money laundering, and maintaining platform integrity.
• Responsible gaming — monitoring betting patterns to flag accounts that may need support, and giving effect to self-exclusion and deposit limit requests.
• Improving the platform — analysing how players navigate the site and app, identifying performance issues, and prioritising product improvements.
• Marketing communications — sending you information about promotions, PSL specials, and relevant offers, but only where you have opted in to receive such communications.

4Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — processing your data is necessary to deliver the services you have signed up for, including account management and payment processing.
• Legitimate interests — we have a legitimate interest in preventing fraud, maintaining platform security, and improving the service. We ensure this interest is balanced against your privacy rights.
• Legal obligation — we may be required to retain and process certain data to comply with financial record-keeping, anti-money laundering, and identity verification obligations.
• Consent — for marketing communications and non-essential cookies, we rely on your explicit consent. You can withdraw consent at any time.

5Sharing Your Data

288won does not sell your personal data to third parties for advertising or marketing purposes. We share data only in the following circumstances and with the following categories of recipient:

Payment Processors

To process your PKR transactions, we share necessary financial data with payment processors that operate the supported channels — JazzCash, Easypaisa, Raast, bank networks, and card processors. These processors have their own privacy policies governing how they handle data within their systems.

Identity Verification Providers

Where identity verification is required, we may share your submitted documents and personal details with a third-party verification service to confirm your identity and age. These providers are bound by strict confidentiality and data handling agreements.

Fraud Prevention Services

Transaction and behavioural data may be checked against fraud prevention databases to protect the platform and other players from financial crime. Where a fraud flag is raised, relevant data may be retained by these services for the purpose of preventing recurrence.

Analytics and Platform Services

We use analytics tools to understand platform usage and performance. These tools may process anonymised or pseudonymised usage data. No personally identifiable data is shared with analytics providers beyond what is technically necessary.

Legal and Regulatory Requirements

We may disclose your data to law enforcement, financial investigation bodies, or other authorities where required by applicable law or in response to a valid legal request. We will not share more than is required to comply.

6Payments and Financial Data

Because 288won processes real money transactions in PKR, financial data receives specific handling beyond general personal data. The following applies:

• Payment method details are handled under the security standards applicable to payment processing. 288won does not store full card numbers — where card payments are used, these are tokenised by the payment processor.
• JazzCash and Easypaisa mobile numbers associated with your account are stored securely and used only for processing transactions on those accounts. They are not used for marketing SMS without your explicit consent.
• Transaction records — including deposit amounts, dates, withdrawal requests, and methods — are retained for a minimum period required for financial record-keeping and anti-fraud purposes.
• Deposits and withdrawals are processed only to and from accounts registered in your own name. Attempting to use another person's payment account will result in the transaction being rejected and your account reviewed.

7Cookies and Similar Technologies

288won uses cookies and similar technologies to make the platform function correctly and to understand how it is used. Here is a breakdown of the types of cookies we use:

Essential Cookies

These are necessary for the platform to function. They keep you logged into your account during a session, remember your bet slip contents, and maintain security settings. You cannot opt out of essential cookies without stopping the platform from working properly.

Performance Cookies

These collect anonymised data about how players use the site — which pages are visited most, where players drop off, and how long sessions last. This data is used to improve the platform. You can opt out of performance cookies through your browser settings.

Functional Cookies

These remember your preferences — such as your preferred language, display settings, or recently viewed sports markets — so you do not have to set them again each visit.

Managing Cookies

Most browsers allow you to view, block, or delete cookies through their settings. Blocking all cookies will affect the functionality of the 288won platform. For the Android app, cookie-equivalent data is managed through the app's standard session management.

8Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any legal retention requirements that compel us to keep data for longer.

• Active accounts — data is retained for the duration of your account's existence and a reasonable period after closure.
• Transaction records — financial transaction data is retained for a minimum period required by applicable financial record-keeping standards, which is typically five to seven years.
• Identity verification documents — retained for as long as required to satisfy our verification and anti-money laundering obligations.
• Support communications — retained for a period sufficient to resolve disputes and for training and quality assurance purposes.
• Inactive accounts — where an account has been inactive for an extended period, we may delete or anonymise personal data beyond what is required for record-keeping.

When data is no longer needed and no legal obligation requires its retention, we securely delete or anonymise it so it can no longer be linked back to you.

9Security

288won takes the security of your personal and financial data seriously. The measures in place include:

• TLS encryption for all data in transit between your device and our servers
• Encryption at rest for sensitive personal and financial data stored on our systems
• Access controls that limit which staff members can access personal data, based on their operational role
• Regular security reviews and monitoring for unusual access patterns
• Secure password handling — passwords are hashed and salted; plain-text passwords are never stored or accessible to staff

Despite these measures, no internet-based system is completely immune to security incidents. In the unlikely event of a data breach that could affect your personal data, we will notify affected users in accordance with applicable requirements.

10Your Rights

As a person whose data we process, you have the following rights regarding that data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — if data we hold about you is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure — you can ask us to delete your personal data where we no longer have a legitimate reason to retain it. Note that legal obligations may require us to retain certain records for specified periods even after an account is closed.
• Right to restrict processing — in certain circumstances, you can ask us to stop processing your data while a concern is being resolved.
• Right to object to marketing — you can opt out of receiving promotional communications at any time by updating your preferences in your account settings or contacting support.
• Right to data portability — where technically feasible, you can request that your data be provided to you in a structured, machine-readable format.

To exercise any of these rights, contact us at [email protected] from the email address registered on your account. We will respond within a reasonable timeframe and may ask you to verify your identity before processing the request.

11Children and Minors

288won is strictly an adult platform. The service is not directed at persons under 18 years of age, and we do not knowingly collect or process personal data from anyone under 18.

If we become aware that a person under 18 has created an account or submitted personal data to us, we will close the account, delete the data, and if applicable, return any deposited funds. Age verification may be requested at any time to confirm that a player meets the minimum age requirement.

If you are a parent or guardian and believe a minor has used 288won, please contact our support team immediately so we can investigate and take appropriate action.

12Marketing Communications

288won may send you email or SMS communications about promotions, new features, PSL specials, and platform news — but only if you have opted in to receive such communications during registration or through your account settings.

You can withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your account settings
• Contacting our support team and requesting to be removed from marketing lists

Withdrawing marketing consent does not affect transactional communications — we will still contact you about your account, deposits, withdrawal status, and security alerts, as these are necessary for running your account rather than marketing.

13Third-Party Links

The 288won platform does not contain links to external third-party websites within its main content areas. Where third-party services are integrated (such as live game providers within the casino section), those services operate under their own privacy practices as part of their software delivery. 288won does not control the privacy practices of software providers whose games are hosted within the platform.

This Privacy Policy applies only to the 288won platform itself — the website and official Android app. It does not extend to any third-party tools or services integrated at the software level.

14Changes to This Policy

288won may update this Privacy Policy from time to time to reflect changes in how we operate, changes to applicable data practices, or in response to player feedback. The "Last reviewed" date at the top of this page will be updated whenever significant changes are made.

For material changes — those that meaningfully affect how we use your data or your rights — we will notify you via email or a prominent notice in your account before the changes take effect. Continued use of the platform after the effective date of an update constitutes your acceptance of the revised policy.

We encourage you to check this page periodically so you stay informed about how your data is handled.

15Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information is handled at 288won, please get in touch:

• Email: [email protected]
• Live chat: Available 24/7 through your account dashboard

When contacting us about a data request, please use the email address registered on your account and include your username so we can locate your records efficiently. We aim to acknowledge all data-related requests within 72 hours.