288wan Privacy Policy

288wan is an internationally licensed online gaming and sports betting platform operating at https://288wan.net. We offer a comprehensive suite of gaming products — including cricket betting, live casino, slots, lottery, and Super Bingo — to registered users across Pakistan and other eligible jurisdictions. For the purposes of this Privacy Policy, 288wan acts as the data controller in respect of all personal data collected through the 288wan platform, website, and any associated mobile interfaces.

If you have any questions about how 288wan handles your personal data, or wish to exercise any of your data subject rights, you may contact our Data Protection team using the details provided in Section 14 of this Policy. We are committed to handling all privacy enquiries professionally, respectfully, and within the response timeframes set out in this document.

3.1 Information You Provide Directly

The majority of personal data that 288wan holds about you is information that you provide to us voluntarily. This includes data entered during the account registration process, information submitted as part of KYC verification, payment details provided when making deposits or requesting withdrawals, and any communications you initiate with our support team via live chat or email.

3.2 Automatically Collected Data

When you access the 288wan platform, certain technical and usage data is collected automatically by our servers and analytics infrastructure. This includes your IP address, device identifiers, browser characteristics, pages visited, and session duration. This automated collection is necessary for platform security, fraud prevention, and the delivery of a consistent user experience across devices. We use first-party analytics tools for this purpose; we do not use third-party behavioural advertising trackers.

3.3 Data from Third Parties

288wan may receive identity and financial verification data about you from our licensed payment processing partners (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) as part of the deposit and withdrawal confirmation process. We may also receive fraud-screening data from third-party risk management service providers who are contractually bound to process data only on 288wan's instructions and in accordance with applicable data protection law.

288wan uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or establishing a new lawful basis.

• Account creation and management — to register your 288wan account, verify your identity, and maintain your account settings and preferences.
• Payment processing — to process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to execute withdrawal requests to your verified payment method.
• KYC and regulatory compliance — to conduct identity verification checks, source-of-funds assessments, and age verification as required by our international gaming licence and applicable anti-money laundering obligations.
• Platform delivery and personalisation — to display relevant game recommendations, localise the platform experience for Pakistani users, and maintain your gaming preferences and history.
• Fraud prevention and security — to detect and prevent unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activity on the 288wan platform.
• Customer support — to respond to your support queries, complaints, and responsible gaming requests in a timely and informed manner.
• Responsible gaming monitoring — to monitor gaming activity patterns for indicators of problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming Policy.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory obligations — to comply with record-keeping requirements, respond to lawful requests from regulatory authorities, and enforce our Terms and Conditions.

288wan processes your personal data only where a valid lawful basis exists under applicable data protection law. The primary legal bases on which we rely are as follows:

• Contractual necessity — Processing that is necessary to perform the contract between you and 288wan (i.e., your account agreement and these Terms). This covers account registration, payment processing, KYC verification, and the delivery of gaming services.
• Legal obligation — Processing required to comply with our anti-money laundering, age verification, licensing, and record-keeping obligations imposed by the regulatory authority under which 288wan operates.
• Legitimate interests — Processing necessary for 288wan's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and improving our services through aggregated analytics.
• Consent — Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.1 Payment Service Providers

To process your PKR deposits and withdrawals, 288wan shares relevant financial and identity data with our licensed payment partners: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers act as independent data controllers in respect of their own payment infrastructure and are subject to their own privacy policies and applicable Pakistani financial regulation.

6.2 Identity Verification & Fraud Prevention Partners

288wan engages licensed third-party KYC and fraud-screening service providers who process identity documents and risk signals on our behalf. These providers are engaged as data processors under written data processing agreements and are not permitted to use your data for any purpose beyond the specific service they provide to 288wan.

6.3 Regulatory & Law Enforcement Authorities

288wan may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or the terms of our gaming licence. We will not make such disclosures voluntarily beyond what is legally required, and we will seek to notify you of any such disclosure unless legally prohibited from doing so.

6.4 Game Content Providers

Certain technical data (such as session tokens, game round identifiers, and RNG seed data) may be processed by the third-party game studios whose titles are available on the 288wan platform. This data is technical in nature and does not include your full identity or financial details. Game providers are contractually bound to process this data solely for game operation and audit purposes.

288wan uses cookies and similar tracking technologies to operate the platform effectively, maintain your session state, and analyse aggregate usage patterns. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies — Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies — Remember your preferences such as language settings, display options, and responsible gaming tool configurations so you do not need to re-enter them each session.
• Analytics Cookies — Collect aggregated, anonymised data about how users navigate the platform. This data is used internally to improve page performance and user experience. 288wan uses first-party analytics and does not deploy third-party advertising trackers.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Cookie preferences for functional and analytics categories can be adjusted without affecting your account access. A full Cookie Policy is available on request from our support team.

288wan retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to meet applicable legal and regulatory retention requirements. The following retention periods apply as a general guide:

• Account and identity data — Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records — Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC documents — Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC review, whichever is later.
• Gaming activity logs — Retained for a minimum of three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Support communications — Retained for two (2) years from the date of the last communication in a support thread.
• Technical and usage data — Retained in anonymised or aggregated form for up to two (2) years for analytics purposes. Raw technical logs are retained for a maximum of 90 days.
• Self-exclusion records — Retained indefinitely to prevent re-registration by previously excluded users.

Upon expiry of the applicable retention period, personal data is securely deleted from our active systems. Where data is held in backup archives, it will be deleted at the next scheduled backup rotation cycle following the expiry of the retention period. Data that has been anonymised and can no longer be used to identify you may be retained indefinitely for aggregate statistical purposes.

288wan implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and the 288wan platform.
• One-way cryptographic hashing for all stored passwords using industry-standard algorithms, ensuring that even 288wan staff cannot view your password in plain text.
• Role-based access controls limiting internal access to personal data to only those staff members whose job functions require it, with all access activity logged and auditable.
• Intrusion detection systems monitoring platform infrastructure for anomalous access patterns, brute-force attempts, and other indicators of compromise in real time.
• Regular penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Encrypted data storage for all sensitive personal data held at rest on 288wan's servers, including KYC documents and financial records.

While 288wan takes all reasonable and industry-standard precautions to protect your data, no security system is entirely immune to breach. In the event of a security incident involving your personal data, 288wan will follow its incident response protocol, which includes prompt internal investigation, containment of the breach, and notification of affected users and the relevant supervisory authority within the legally required timeframes.

As part of our account registration and KYC process, 288wan applies mandatory age-verification checks to confirm that all users meet the minimum age requirement of 21 years. These checks include verification of government-issued identity documents and cross-referencing with date-of-birth data provided at registration. Where our age-verification procedures identify or reasonably suspect that a user is under the age of 21, the account will be immediately suspended, access to funds frozen pending investigation, and the matter escalated to our compliance team. Any personal data collected from a confirmed underage user will be deleted promptly upon confirmation of their age. 288wan does not use the personal data of underage users for any commercial or analytical purpose.

The 288wan platform may, from time to time, contain references to third-party services such as payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). Clicking on links to these external platforms will take you away from the 288wan environment, at which point this Privacy Policy no longer applies. 288wan is not responsible for the privacy practices or the content of any third-party websites or services. We encourage you to read the privacy policy of any third-party service before submitting your personal data to them. 288wan does not endorse or make any representations about third-party privacy practices.

288wan reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing, engage a new category of third-party processor, or make changes that significantly affect your rights — we will notify you by email to your registered address and/or by a prominent notice within the 288wan platform at least 14 days before the changes take effect.

Minor clarifications, corrections to typographical errors, or updates that do not materially affect your rights or our data processing practices may be made without specific advance notification. The effective date at the top of this document is updated each time the Policy is revised. We encourage you to review this Privacy Policy periodically. Your continued use of the 288wan platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 288wan handles your personal data, please get in touch with our Data Protection team. We are committed to responding to all privacy-related enquiries within 30 calendar days of receipt.

• Email (plain text): support at 288wan.net
• Subject line for data requests: "Data Subject Request – [Your Full Name]"
• Support Hours: 24 hours / 7 days
• Responsible Gaming queries: Please visit our Responsible Gaming page for self-exclusion and limit-setting requests.

When submitting a data subject request, please include your full name, your registered 288wan email address, and a clear description of your request. We may need to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised party. Verification will typically involve confirming two or more pieces of information that match your account record.