288min Privacy Policy

1. Who We Are

1.1 288min operates an English-language online sports betting and casino platform accessible at 288min.com. 288min is the data controller responsible for the personal information you provide when registering and using the 288min platform.

1.2 For all privacy-related enquiries, you may contact us at: [email protected] (plain text — not a clickable link).

1.3 This Privacy Policy governs all personal data processed in connection with your 288min account, including data collected via the website, any mobile interface, and through customer support interactions.

2. Information We Collect

2.1 Registration Data. When you create a 288min account, we collect your full name (as per your CNIC), date of birth, Pakistani mobile number, and any username or email address you provide. This information is mandatory for account creation.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and age verification requirements, 288min may collect copies of your CNIC, proof of address, and payment method documentation. This is a standard industry requirement for regulated betting platforms.

2.3 Financial Data. We collect records of your deposits, withdrawals, wagering activity, and transaction history. Payment method details (JazzCash wallet number, Easypaisa number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, etc.) are collected to facilitate transactions. 288min does not store full payment card numbers.

2.4 Usage Data. We automatically collect data about how you interact with the 288min platform, including pages visited, betting markets accessed, game sessions, session duration, device type, browser type, operating system, and IP address.

2.5 Communication Data. Records of your communications with 288min customer support — including live chat logs, emails, and any support tickets — are retained for quality assurance and dispute resolution purposes.

2.6 Responsible Gaming Data. If you set deposit limits, request a cooling-off period, or activate self-exclusion on your 288min account, we retain records of these requests to ensure compliance with your responsible gaming instructions.

3. How We Use Your Information

288min uses your personal information for the following purposes:

• Account Management: To create, maintain, and manage your 288min account and verify your identity.
• Service Delivery: To process bets, settle wagers, process deposits and withdrawals in PKR, and provide access to all 288min products including cricket betting, PSL markets, slots, and live casino.
• Age Verification: To confirm that you are 18 or older before granting access to real-money gambling services. 288min does not permit minors to use its platform under any circumstances.
• Fraud Prevention & AML: To detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in the 288min Terms & Conditions.
• Regulatory Compliance: To fulfil any legal or regulatory obligations applicable to 288min's operations.
• Customer Support: To respond to your enquiries, resolve disputes, and improve service quality.
• Responsible Gaming: To monitor for indicators of problem gambling behaviour and to administer any responsible gaming measures you have requested.
• Platform Improvement: To analyse usage patterns and improve the 288min user experience, product features, and technical performance.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant product updates, where you have not opted out of such communications.

4. Legal Basis for Processing

4.1 Contractual Necessity. Processing your registration data, financial transaction data, and KYC data is necessary to perform the contract between you and 288min — i.e., to provide you with access to 288min's betting and casino services.

4.2 Legal Obligation. Processing for KYC, AML, age verification, and regulatory compliance is required by applicable legal and regulatory obligations.

4.3 Legitimate Interests. Processing usage data for fraud detection, security monitoring, and platform improvement is justified by 288min's legitimate business interests, balanced against your rights and interests.

4.4 Consent. Where 288min processes your data for direct marketing purposes, such processing is based on your consent, which you may withdraw at any time by contacting 288min support or updating your account communication preferences.

5. Sharing Your Information

5.1 288min does not sell your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, and banking partners receive the minimum data necessary to process your PKR deposits and withdrawals.
• Game Providers: Licensed third-party game studios providing casino and live dealer content to 288min may receive session data necessary to deliver their games.
• Identity Verification Providers: Third-party KYC and age verification services may process your CNIC and identity documentation on our behalf.
• Fraud & AML Services: Specialist providers assisting with fraud prevention and anti-money laundering screening.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory authority, 288min may disclose your data to law enforcement or regulatory bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of 288min's business assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

5.2 All third parties with whom 288min shares personal data are required to maintain appropriate data security measures and are prohibited from using your data for any purpose other than the specific service they provide to 288min.

6. Cookies & Tracking Technologies

6.1 288min uses cookies and similar tracking technologies to operate and improve its platform. Cookies are small data files stored on your device when you visit 288min.com.

6.2 Essential Cookies: Required for the 288min platform to function — including maintaining your login session, remembering your language preference, and securing your account activity. These cannot be disabled without impairing platform functionality.

6.3 Analytics Cookies: Used to understand how players navigate and use the 288min platform, which features are popular, and where technical issues may arise. Analytics data is aggregated and anonymised where possible.

6.4 Marketing Cookies: Used to present relevant promotions and offers to you based on your browsing and betting activity patterns on 288min. You may opt out of marketing cookies via your browser settings or by contacting 288min support.

6.5 You can control and delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging into your 288min account.

7. Data Retention

7.1 288min retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, or audit obligations. Specifically:

• Account registration and KYC data: retained for a minimum of 5 years following account closure.
• Financial transaction records: retained for a minimum of 5 years for AML and audit purposes.
• Responsible gaming records (self-exclusion, deposit limit history): retained for a minimum of 5 years.
• Customer support communication logs: retained for 3 years following resolution.
• Marketing preference records: retained until you withdraw consent or close your account.

7.2 When data is no longer required for its original purpose and no retention obligation applies, 288min will securely delete or anonymise that data.

8. Data Security

8.1 288min implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 288min servers.
• Two-factor authentication (2FA) available for all player accounts.
• Access controls restricting internal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the 288min platform.
• Encrypted storage of sensitive account and payment data.

8.2 Notwithstanding the above, no internet transmission or electronic storage system is completely secure. 288min cannot guarantee absolute security, and you use the platform at your own risk. You are responsible for maintaining the security of your 288min login credentials.

9. Your Rights

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by 288min:

• Access: You may request a copy of the personal data 288min holds about you.
• Correction: You may request correction of inaccurate or incomplete personal data.
• Deletion: You may request deletion of your personal data, subject to legal retention obligations and any outstanding compliance requirements.
• Restriction: You may request that 288min restrict processing of your data in certain circumstances.
• Objection: You may object to processing of your data for direct marketing purposes at any time.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, contact 288min support at [email protected] (plain text). We aim to respond within 30 days of receiving a verifiable request.

10. Children's Privacy

10.1 288min is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If 288min becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the account will be suspended.

10.2 If you believe a minor has registered on 288min, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11. International Data Transfers

11.1 288min's platform infrastructure and some of its third-party service providers may process your data in countries outside Pakistan. Where such transfers occur, 288min takes steps to ensure that your data is afforded a level of protection equivalent to the standards described in this Privacy Policy, through contractual safeguards or other appropriate mechanisms.

12. Third-Party Links

12.1 The 288min platform may contain links to third-party websites or services for informational purposes. 288min is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any third-party site you visit independently of 288min.

13. Responsible Gaming & Data

13.1 288min processes certain data specifically to support responsible gaming. This includes monitoring betting patterns for indicators of problem gambling, administering deposit limits you have set, and maintaining records of any self-exclusion or cooling-off periods you have requested.

13.2 Responsible gaming data — particularly self-exclusion records — is retained for extended periods to prevent inadvertent reinstatement of access during an exclusion period. This processing is in your direct interest and is an integral part of 288min's responsible gaming commitment.

13.3 For further information on 288min's responsible gaming programme, please visit the Responsible Gaming page.

14. Changes to This Policy

14.1 288min may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated to registered players via the contact details on file or via a notice on the 288min platform.

14.2 The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of 288min following any update constitutes your acceptance of the revised policy.

15. Contact Us

For any privacy-related questions, data access requests, or complaints, please contact the 288min privacy team at:

Email: [email protected] (plain text — not a clickable link)

288min aims to acknowledge all privacy enquiries within 5 business days and to resolve substantive requests within 30 calendar days.