Privacy Policy — 288pkr

This Privacy Policy ("Policy") describes how 288pkr ("288pkr", "the Platform", "we", "us", "our") collects, uses, stores, shares and protects personal information about users ("Player", "User", "you") who access or interact with our website at https://288pkr.cam and any associated services, applications or features (collectively, the "Services").

288pkr is an English-language online betting and gaming platform serving players across Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We recognise that the privacy of your personal data is important, and we are committed to handling it responsibly, transparently and in accordance with applicable data protection principles.

By accessing the Platform, creating an account or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Services immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which forms part of the overall legal framework governing your use of 288pkr.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, phone number, date of birth, IP address, device identifiers and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination or erasure.
• "Data Controller" — 288pkr, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of 288pkr under a contractual arrangement.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC Data" — identity documents and related materials submitted by a Player for Know Your Customer verification purposes, including government-issued ID (such as CNIC), proof of address and payment method evidence.
• "Cookies" — small text files placed on your device by the Platform that help us recognise your browser, remember your preferences and understand how you interact with the Services.
• "Third Party" — any entity other than you and 288pkr, including payment processors, analytics providers, fraud-prevention services and regulatory bodies.

We collect only the personal data that is necessary to provide, operate and improve our Services, and to meet our legal and regulatory obligations. The categories of data we may collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (unless required for specific verification purposes) or medical information, except where strictly required by applicable regulation.

288pkr collects personal data through the following channels:

• Direct Interactions: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or responding to a survey or promotion.
• Automated Technologies: Technical and usage data collected automatically when you visit the Platform, including through cookies, web beacons, server logs and similar tracking technologies.
• Third-Party Sources: Information received from identity verification providers, fraud-prevention agencies, payment processors and, where applicable, publicly available databases — used to supplement and verify the information you provide to us.
• Responsible Gambling Tools: Data generated when you interact with responsible gambling features such as deposit limits, session time limits or self-exclusion requests.

When you use payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — any data shared between you and those providers is governed by each provider's own privacy policy. 288pkr receives only the transaction confirmation and reference data necessary to credit or debit your account. These references do not imply any endorsement or affiliation by those payment providers.

288pkr processes your personal data only where a valid legal basis exists. Depending on the context, we rely on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 288pkr — for example, to operate your account, process transactions and provide the Services you have requested.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money-laundering regulations, Know Your Customer requirements and age-verification obligations.
• Legitimate Interests: Processing is necessary for 288pkr's legitimate business interests, such as preventing fraud, ensuring platform security, improving our Services and analysing usage patterns — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent — for example, to send you promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

288pkr uses the personal data we collect for the following purposes:

• To create, maintain and manage your account on the Platform.
• To verify your identity and age as part of our KYC process, and to comply with anti-money-laundering obligations.
• To process deposits, withdrawals and other financial transactions.
• To provide customer support and respond to enquiries in English and Urdu.
• To monitor for fraud, suspicious activity, collusion and other prohibited conduct as defined in our Terms & Conditions.
• To send you transactional communications relating to your account, including security alerts, verification requests and transaction confirmations.
• To send you promotional communications about 288pkr offers, sporting events such as PSL T20 matches, ICC Cricket World Cup campaigns and other promotions — but only where you have given your consent or where we have a legitimate interest in doing so, and always with a clear opt-out mechanism.
• To operate responsible gambling tools, including monitoring betting patterns that may indicate problem gambling behaviour and triggering appropriate interventions.
• To analyse usage data and improve the functionality, performance and content of the Platform.
• To comply with applicable legal and regulatory requirements.

288pkr does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. We may share your data in the following limited circumstances:

• Service Providers & Data Processors: We share data with carefully selected third-party providers who assist in operating the Platform, including payment processors, identity verification services, fraud-prevention providers, cloud hosting services and customer support tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities — including financial intelligence units, law enforcement agencies or licensing regulators — where required by law or a valid legal process, or where we reasonably believe disclosure is necessary to prevent or investigate fraud, money laundering or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of 288pkr's business, your personal data may be transferred to the acquiring entity, provided that the acquirer agrees to honour this Policy or provides equivalent privacy protections.
• With Your Consent: We may share your data with other third parties where you have given your explicit prior consent.

In all cases, we take reasonable steps to ensure that third parties receiving your data are bound by appropriate confidentiality and security obligations.

288pkr uses cookies and similar tracking technologies on the Platform. These help us deliver a functional, secure and personalised experience. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Analytical / Performance Cookies: Used to understand how users interact with the Platform — for example, which pages are visited most often and where errors occur. This data is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gambling limits you have set and other account-level configurations.
• Security Cookies: Used to detect and prevent fraudulent or abusive activity, including bot detection and session integrity verification.

We do not use third-party advertising cookies or behavioural retargeting cookies. You can manage and delete cookies through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the Platform.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of your account's active status, plus a period of up to five (5) years following account closure, to meet legal, regulatory and audit requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years after the end of the business relationship, in line with standard anti-money-laundering compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for up to three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or opt out, after which we retain only a suppression record to ensure we do not contact you again.

Where personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

288pkr implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial records and KYC documents.
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security audits, vulnerability assessments and penetration testing.
• Multi-factor authentication options for account access.
• Incident response procedures to detect, contain and remediate data breaches promptly.

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with our obligations under applicable law.

You are also responsible for maintaining the security of your own account. Never share your 288pkr login credentials with any third party. If you suspect unauthorised access, contact our support team immediately.

As an online platform serving users across Pakistan and operating under an international licensing framework, 288pkr may transfer your personal data to, or store it in, countries outside your jurisdiction. Some of these countries may not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the recipient to apply data protection standards consistent with this Policy.
• Transferring data only to recipients in countries that are recognised as providing an adequate level of data protection.
• Obtaining your explicit consent to the transfer where required by applicable law.

If you have questions about the safeguards applied to international transfers of your personal data, please contact us using the details in Section 15.

The Services offered by 288pkr are strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction, whichever is greater. 288pkr does not knowingly collect, use or retain personal data from minors.

If we become aware that personal data has been collected from a person below the minimum age threshold, we will immediately suspend the associated account, delete the data in question and, where appropriate, report the matter to relevant authorities.

If you are a parent or guardian and believe that a minor under your care has registered on 288pkr or provided personal data to the Platform, please contact our support team without delay so that appropriate action can be taken.

Subject to applicable law and certain exceptions (for example, where retention is required by law or necessary to protect 288pkr's legitimate interests in legal proceedings), you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data 288pkr holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or completed.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where there is no longer a legitimate purpose for us to retain it.
• Right to Restriction of Processing: You may ask us to temporarily pause processing of your data — for example, while you contest its accuracy or object to a particular processing activity.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to our processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be able to demonstrate an overriding legitimate ground.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team at the details provided in Section 15. We will respond to all valid requests within a reasonable timeframe and no longer than thirty (30) days, unless an extension is permitted under applicable law, in which case we will notify you accordingly.

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory or data protection authority in the jurisdiction in which the operator is licensed.

288pkr reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via a notice on the Platform or by email to the address on file. The "Last Updated" date at the top of this page reflects the most recent revision.

Your continued use of the Services following notification of any change to this Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we handle your personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the way 288pkr handles your personal data, please contact our dedicated support team. We are available around the clock and aim to respond to all privacy-related enquiries promptly.

• Email: [email protected]
• Live Chat: Available directly on the Platform — look for the support icon at the bottom of any page.
• Languages: Our support team handles privacy enquiries in English and Urdu.

For formal data subject access requests or rights-related correspondence, please use the subject line "Data Privacy Request" when contacting us by email, and include your registered account email address and a clear description of your request.