This Privacy Policy explains how 288win collects, uses, stores, and protects your personal information when you use the 288win platform. Your data belongs to you — this document tells you exactly what we do with it and what rights you hold over it.
Last updated: 1 January 2026 · Version 1.0 · This policy supersedes all prior versions published on 288win.lat
A plain-English summary of how 288win treats your data. The full legal policy follows below — these cards do not replace it.
All data transmitted between your device and 288win is protected by SSL 256-bit encryption. Personal and financial information stored on 288win servers is encrypted at rest using industry-standard protocols.
288win does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used only to operate the platform, comply with legal obligations, and improve your experience.
As a 288win account holder, you have the right to access, correct, and request deletion of your personal data. You may also withdraw consent to specific processing activities at any time by contacting 288win support.
Data is shared with third parties only where strictly necessary — payment processors for transactions, identity verification providers for KYC, and regulators where legally required. All third parties are bound by confidentiality obligations.
288win retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with regulatory retention obligations. Account data is typically retained for the duration of the account relationship plus five years.
In the unlikely event of a data breach affecting your personal information, 288win will notify affected users in a timely manner and take all appropriate remediation steps in accordance with applicable regulations and our licensing obligations.
A structured overview of each category of personal data 288win processes, the purpose of collection, and the legal basis on which we rely.
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID or passport number | Account registration, age verification, KYC compliance | Contractual necessity; Legal obligation |
| Contact Data | Email address, Pakistani mobile number, city of residence | Account communication, support, verification codes | Contractual necessity; Legitimate interest |
| Financial Data | JazzCash/EasyPaisa number, bank account details, transaction history | Processing deposits and withdrawals, anti-money laundering | Contractual necessity; Legal obligation |
| Gaming Activity Data | Bets placed, games played, win/loss history, session duration | Game settlement, responsible gaming monitoring, platform improvement | Contractual necessity; Legitimate interest |
| Technical Data | IP address, device type, browser, operating system, cookies | Security, fraud detection, platform optimisation | Legitimate interest; Legal obligation |
| Communication Data | Live chat transcripts, support emails, complaint records | Customer support, dispute resolution, service improvement | Contractual necessity; Legal obligation |
| Marketing Preferences | Opt-in/opt-out records, preferred notification types | Sending promotional offers and platform updates where consented | Consent |
This Privacy Policy ("Policy") is issued by 288win ("the Platform", "we", "us", "our"), the operator of the online gaming platform accessible at 288win.lat. It sets out how 288win collects, processes, stores, shares, and protects personal data relating to individuals ("you", "User", "Member") who access or use the 288win platform in any capacity.
This Policy applies to all personal data processed by 288win in connection with: registration and maintenance of a 288win account; use of any gaming, betting, or related services on the platform; communications with 288win customer support; visits to the 288win website; and participation in any promotional or marketing activities operated by 288win.
By creating a 288win account or using the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 288win Terms & Conditions, which govern the overall relationship between you and the platform.
Note for Pakistani Users: 288win is designed for Pakistani players and specifically integrates local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Data processing related to these payment methods is governed by both this Policy and the individual privacy terms of those service providers.
Data Controller: 288win, operating the platform at 288win.lat, is the data controller in respect of the personal data processed under this Policy. As data controller, 288win is responsible for determining the purposes and means of personal data processing and for ensuring that processing activities comply with applicable data protection requirements under 288win's international gaming licence framework.
Questions, requests, or complaints relating to data protection at 288win should be directed to the 288win Privacy team via the contact details provided in Section 15 of this Policy.
3.1 Information You Provide Directly. When you register for a 288win account, verify your identity, make deposits or withdrawals, contact customer support, or participate in promotions, you provide 288win with personal information including:
3.2 Information Collected Automatically. When you use the 288win platform, certain technical information is collected automatically by our systems, including:
3.3 Information From Third Parties. 288win may receive information about you from third-party sources in limited circumstances, including: identity verification providers used to confirm your identity during KYC procedures; payment processors confirming transaction status; and fraud prevention agencies where 288win is legally permitted to access such data for security purposes.
288win uses your personal data strictly for the purposes described below. We do not process personal data in ways that are incompatible with these stated purposes without providing prior notice and, where required, seeking your consent.
288win processes personal data only where a valid legal basis exists. The primary legal bases applicable to 288win's processing activities are:
6.1 No Sale of Data. 288win does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. This is an absolute commitment — not qualified by exceptions or commercial arrangements.
6.2 Service Providers. 288win shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers are contractually bound to process data only in accordance with 288win's instructions and to implement appropriate security measures. Categories of service providers include:
6.3 Regulatory and Legal Disclosure. 288win may disclose personal data to regulatory bodies, gaming licence authorities, financial intelligence units, law enforcement agencies, or courts where required to do so by applicable law, court order, or the terms of our gaming licence. We will notify you of such disclosures where we are legally permitted to do so.
6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material part of 288win's business assets, personal data held by 288win may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy policy applicable to your data following the transaction.
All third parties with whom 288win shares personal data are required to have adequate data protection measures in place and are prohibited from using the data for any purpose beyond the specific service they provide to 288win.
As an internationally licensed gaming platform, 288win may process and store personal data in locations outside of Pakistan. Where personal data is transferred to service providers or infrastructure located in other countries, 288win ensures that appropriate safeguards are in place to protect the data in accordance with the standards required by our gaming licence and applicable data protection frameworks.
Such safeguards may include: contractual data protection clauses incorporated into agreements with service providers; data processing only in jurisdictions recognised as providing adequate data protection standards; and security measures that are equivalent to or exceed those applied within the platform's primary operational jurisdiction.
8.1 Retention Principles. 288win retains personal data only for as long as is necessary to fulfil the specific purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. When data is no longer required, it is securely deleted or anonymised.
8.2 Retention Periods. Specific retention periods applicable to 288win data categories are as follows:
8.3 Post-Retention Deletion. Upon expiry of applicable retention periods, 288win will either securely delete personal data from all active systems and backups or anonymise it such that it can no longer be attributed to an identified or identifiable individual.
288win uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and provide usage analytics. The following categories of cookies are used by 288win:
You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may significantly impair your ability to use the 288win platform. 288win does not use third-party advertising or behavioural targeting cookies.
As an individual whose personal data is processed by 288win, you hold the following rights in respect of your personal information. To exercise any of these rights, please contact the 288win Privacy team using the details in Section 15.
You have the right to request a copy of the personal data that 288win holds about you. We will provide this information within 30 days of a verified request, at no charge for the first request in any 12-month period.
If any personal data held by 288win about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings panel.
You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected and no legal retention obligation applies. Note that certain data must be retained to comply with AML and licensing requirements, even following account closure.
In certain circumstances — such as where you contest the accuracy of data or object to processing — you may request that 288win restrict the active processing of your personal data while the relevant matter is under review.
Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
You have the right to object to processing of your personal data where that processing is based on 288win's legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes, which 288win will action immediately upon receipt.
Where 288win relies on your consent as the legal basis for processing — primarily for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
288win will respond to all valid data rights requests within 30 days. We may ask you to verify your identity before processing a rights request to ensure the security of your data. Requests may be submitted to [email protected] (displayed as plain text).
11.1 Technical Measures. 288win implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include SSL 256-bit encryption for all data in transit; encryption of sensitive data at rest; access controls limiting data access to authorised personnel only; two-factor authentication for account access; and continuous monitoring of platform activity for security anomalies.
11.2 Organisational Measures. In addition to technical controls, 288win maintains organisational security measures including: staff training on data protection and information security obligations; strict access control policies based on the principle of minimum necessary access; regular security assessments; and incident response procedures for data breaches.
11.3 Breach Response. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, 288win will notify affected users without undue delay and take all reasonable steps to contain and remediate the breach. 288win will also notify the relevant regulatory authority where required by applicable law or the terms of our gaming licence.
11.4 Your Role in Security. The security of your 288win account is a shared responsibility. You are responsible for maintaining the confidentiality of your password and for ensuring that access to your account from shared or public devices is properly terminated. 288win will never request your password via email or live chat.
The 288win platform is strictly restricted to individuals aged 21 years and above. 288win does not knowingly collect personal data from individuals under the age of 21. If 288win becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered on 288win, please contact our support team immediately via the email address provided in Section 15. We treat such reports as high priority and will investigate and act promptly.
13.1 Opt-In Basis. 288win sends promotional emails, SMS notifications, and platform alerts regarding bonuses, new games, and offers only to users who have explicitly opted in to receive such communications. Opting in is not a condition of account registration or platform use.
13.2 Opt-Out. You may withdraw consent to receive marketing communications from 288win at any time by: updating your notification preferences in your account settings; clicking the unsubscribe link in any marketing email; or contacting 288win support with a request to opt out of all marketing. Opt-out requests are actioned within 5 business days.
13.3 Service Communications. Even if you opt out of marketing communications, 288win will continue to send service-related communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory regulatory notices. These cannot be opted out of as they form part of the contractual service.
288win reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or platform services. The date of the most recent revision is displayed at the top of this page.
Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data — 288win will provide advance notice to registered users via email or in-platform notification before the changes take effect. Continued use of the 288win platform following the effective date of any revised Policy constitutes acceptance of the updated terms.
We encourage you to review this Privacy Policy periodically to remain informed about how 288win protects your personal information.
If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to raise a concern about how 288win handles your personal data, please contact us through the following channels:
Privacy & Data Protection: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 within the 288win platform via the in-platform chat widget after login.
288win aims to resolve all data protection queries and rights requests within 30 days of receipt. If you are not satisfied with our response, or if you believe that 288win is processing your personal data in violation of applicable data protection requirements, you have the right to raise a complaint with the relevant regulatory authority under 288win's gaming licence jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document effective from the date stated above. The applicable Privacy Policy at any given time is the version published at 288win.lat/privacy-policy.
Our support team is available 24/7 to answer any questions about how we handle your personal data. Or log in to your 288win account to review and update your privacy preferences.
21+ only. Your data is protected. 288win is an internationally licensed gaming platform.