288won Privacy Policy — How We Protect Your Data

1Personal Data We Collect

When you register and use the 288won platform, we collect the following categories of personal information:

Registration Information

• Full legal name
• Date of birth (to verify you are 18 or over)
• Email address
• Mobile phone number
• Residential address (for verification purposes)

Identity Verification Documents

Where we are required to verify your identity — for example before processing a withdrawal above a certain threshold, or where required by our fraud prevention processes — we may request a copy of a government-issued identification document such as a National Identity Card (CNIC), passport or driving licence. These documents are handled with additional care and stored securely.

Account and Activity Data

• Betting history, game activity and transaction records
• Account balance and bonus history
• Login timestamps, IP address logs and device information
• Customer support communications

Payment Data

When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast, bank transfer, card or mobile wallet, we collect the transaction details necessary to process that payment. We do not store full card numbers or full mobile wallet PINs on our servers. Payment data is handled through secure, encrypted payment processing systems.

2How We Collect Your Data

288won collects personal data through the following channels:

• Directly from you — when you fill in registration details, contact support, submit verification documents, or update your account profile.
• Automatically through platform use — when you log in, place bets, play games, or navigate the platform, we automatically record activity data including IP address, device type, browser type, session duration and in-platform behaviour.
• Through payment providers — when you make a deposit or withdrawal, the relevant payment provider (JazzCash, Easypaisa, Raast, your bank) passes the transaction details to us so we can match it to your account.
• Through cookies and similar technologies — as described in the Cookies section of this policy.

3How We Use Your Personal Data

The personal data we collect is used for the following purposes:

We do not use your personal data for any purpose that goes beyond what is listed above. We will not use your data for automated decision-making that produces legal or similarly significant effects on you without your knowledge.

4Sharing Your Personal Data

288won does not sell your personal data to any third party. We share data only in the following limited circumstances:

Service Providers

We work with carefully selected third-party service providers who assist us in running the platform. These include payment processors, identity verification services, fraud detection providers, customer support infrastructure and hosting providers. These providers are only given access to the data they need to perform their specific service and are bound by data processing agreements that restrict how they can use that data.

Fraud Prevention and Security

We may share data with fraud prevention agencies and industry databases where necessary to detect, prevent and investigate fraudulent activity. This is done to protect all players on the platform, not just the account in question.

Legal Requirements

In limited circumstances, we may be required to share personal data with law enforcement, regulatory bodies or other authorities where we are legally obligated to do so. We will only disclose the minimum amount of data necessary to comply with such a requirement.

5Payment Data and Financial Information

All deposits and withdrawals on 288won are processed in Pakistani Rupees (PKR). We support JazzCash, Easypaisa, Raast, bank transfer, debit and credit cards, and mobile wallets. When you initiate a payment transaction, the relevant data — such as your JazzCash or Easypaisa mobile number, bank account details or card details — is transmitted securely to our payment processing partner to complete the transaction.

288won does not store full card numbers on its own servers. Card data is tokenised by our payment processor, meaning we retain only a secure reference token rather than the actual sensitive payment credentials. Similarly, mobile wallet identifiers are stored only to the extent needed to process and reconcile transactions against your account.

• Transaction records — amounts, dates, payment method type, and status — are retained as part of your account history and are visible to you from within your account.
• Financial records are retained for a minimum period after account closure to meet our recordkeeping obligations.
• If you believe a transaction on your account was not authorised by you, contact our support team immediately rather than initiating a chargeback directly with your bank or payment provider.

6How We Keep Your Data Secure

Protecting your personal information is something we take seriously. 288won implements a range of technical and organisational security measures to reduce the risk of unauthorised access, loss or misuse of your data.

• TLS encryption: All data transmitted between your browser or app and the 288won platform is encrypted in transit using Transport Layer Security (TLS).
• Encrypted storage: Sensitive data, including identity documents and financial records, is stored in encrypted form at rest.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff access is logged and reviewed regularly.
• Fraud monitoring: We run automated monitoring systems that flag unusual account activity, including suspicious login attempts, unusual betting patterns and payment anomalies.
• Regular security reviews: Our systems and processes are reviewed periodically to identify and address potential vulnerabilities.

While we take all reasonable steps to protect your data, no system is completely immune to risk. You also have a role to play in keeping your account secure — use a strong, unique password, do not share your login credentials with anyone, and contact us immediately if you suspect your account has been accessed without your permission.

7How Long We Keep Your Data

288won retains personal data for as long as your account is active and for a defined period after account closure. The retention period depends on the type of data and the reason it was collected.

• Account and registration data is retained for the duration of your active account and for a period after closure to allow for dispute resolution and recordkeeping compliance.
• Transaction and betting records are retained for a minimum period after the transaction date to meet financial recordkeeping requirements.
• Identity verification documents are retained for the period required by our verification obligations and then securely deleted.
• Customer support communications are retained for a reasonable period to allow us to reference them in the event of a follow-up query or dispute.
• Technical and log data such as IP address logs and session data is retained for a shorter period and then automatically purged.

When personal data is no longer required for any of the above purposes and is not subject to a legal retention obligation, we delete or anonymise it securely.

8Your Rights Over Your Personal Data

As a 288won account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your request and we will respond within a reasonable timeframe.

• Right of access: You can request a copy of the personal data we hold about you. We will provide this in a clear, readable format.
• Right to rectification: If any of the data we hold about you is inaccurate or incomplete, you can request that we correct it. Note that certain verified account details such as your registered name and date of birth cannot be changed without re-verification.
• Right to deletion: You can request that we delete your personal data and close your account. Deletion requests are processed subject to any legal retention obligations — for example, financial transaction records may need to be retained for a minimum period regardless of a deletion request.
• Right to restrict processing: In certain circumstances you can request that we limit how we use your data while a query or dispute is being resolved.
• Right to object to marketing: You can opt out of promotional communications at any time from your account settings or by contacting support. Opting out of marketing does not affect essential account communications such as deposit confirmations or security alerts.

9Cookies and Tracking Technologies

288won uses cookies and similar tracking technologies on its website and mobile platform. Cookies are small text files stored on your device that help us recognise your browser, remember your preferences and understand how you use the platform.

Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during a visit and security cookies that help protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Preference cookies: Remember your account settings and preferences, such as your chosen language or notification settings, so you do not have to re-enter them each time you log in.
• Analytics cookies: Help us understand how players navigate the platform — which pages are most visited, where players spend the most time, and where technical issues may be occurring. This data is aggregated and used to improve the platform experience. We do not use this data to build individual advertising profiles.
• Security and fraud detection cookies: Used by our fraud prevention systems to detect unusual patterns of behaviour that might indicate fraudulent activity.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform normally. Disabling analytics cookies will not affect your ability to place bets or access games.

10Contact and Policy Updates

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please contact our support team. Our support email address is displayed in the footer of this page. We aim to respond to all privacy-related queries within a reasonable timeframe.

288won may update this Privacy Policy from time to time to reflect changes in how we operate or to address new legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where the change is significant, notify registered players by email or through an in-platform notification.

Continued use of the 288won platform following publication of an updated Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any change to this policy, you should stop using the platform and contact us to close your account.

For information about how we handle responsible gaming and player protection, please visit our Responsible Gaming page. For the full rules governing your account, see our Terms and Conditions.