At 288com, your personal data belongs to you. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and used, who it may be shared with, and the rights you hold over your own data. We are committed to keeping your information secure at every step.
1.1 288com ("we", "us", "our", or "the Platform") is an online casino and sports betting platform operating under international gaming licence oversight, offering services to registered Players in Pakistan and other permitted jurisdictions. The 288com platform is accessible at 288com.org and through any associated mobile interfaces.
1.2 288com acts as the data controller in respect of all personal data collected through the platform, meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party processors to handle data on our behalf — for example, payment service providers and KYC verification partners — those processors act under our instruction and are contractually bound to handle your data securely and only for the purposes we specify.
1.3 This Privacy Policy applies to all data processing activities conducted by 288com in connection with the platform, including account registration, deposits and withdrawals, gameplay, customer support interactions, marketing communications, and KYC verification processes. This policy should be read alongside the 288com Terms & Conditions and Responsible Gaming Policy.
2.1 288com collects personal data that is necessary to provide you with a safe, compliant, and fully functional gaming experience. The categories of personal data we collect are set out below.
3.1 288com collects personal data through the following channels and mechanisms:
3.2 288com does not purchase personal data lists or source personal data from social media platforms without your explicit consent. Any data received from third-party sources is obtained only where those third parties have a lawful basis to share it with us.
4.1 288com processes your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, contact, device data | Contract performance |
| KYC & age verification | Identity, CNIC, photograph | Legal obligation |
| Processing deposits & withdrawals | Financial, identity data | Contract performance |
| Fraud prevention & AML screening | Financial, identity, device data | Legal obligation |
| Responsible gaming monitoring | Gaming, behavioural data | Legal obligation |
| Customer support & dispute resolution | Communications, identity data | Contract performance |
| Platform personalisation | Behavioural, gaming data | Legitimate interest |
| Marketing & promotional communications | Contact, behavioural data | Consent |
| Security monitoring & logging | Device, technical data | Legitimate interest |
| Regulatory reporting & compliance | Identity, financial data | Legal obligation |
5.1 288com relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:
5.2 Where 288com relies on legitimate interest as a legal basis, we conduct a balancing test to confirm that our interests do not override your data protection rights. You have the right to object to processing carried out on legitimate interest grounds — see Clause 10 for details on how to exercise this right.
6.1 288com does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for each stated purpose.
We engage selected third-party service providers to assist in operating the platform. These include payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), KYC and identity verification providers, fraud screening services, cloud hosting providers, and customer support platform operators. All such providers are contractually bound to process your data solely under our instruction and to maintain appropriate security standards.
288com may disclose personal data to competent regulatory authorities, law enforcement agencies, or licensing oversight bodies where required or permitted by law. This includes disclosures required under AML and counter-terrorism financing obligations, court orders, or formal regulatory investigations.
In the event of a merger, acquisition, asset sale, or restructuring of the 288com business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications via the email address registered on your Account.
Where a Player activates a self-exclusion on 288com, we may share the minimum necessary identifying data with recognised cross-operator responsible gaming exclusion registers to give effect to that self-exclusion. This processing is carried out in the interest of player protection and in fulfilment of our responsible gaming obligations.
7.1 288com uses cookies and similar tracking technologies on the platform to ensure correct functionality, maintain session security, and improve user experience. Below is a summary of the cookie categories we deploy.
| Cookie Category | Purpose | Duration | Consent Required |
|---|---|---|---|
| Strictly Necessary | Session authentication, security tokens, CSRF protection | Session | No |
| Functional | Language preferences, game lobby layout, notification settings | 12 months | Optional |
| Analytical | Platform usage statistics, feature engagement metrics | 24 months | Optional |
| Marketing | Promotional campaign attribution, bonus offer personalisation | 12 months | Optional |
7.2 You may manage your cookie preferences at any time via the cookie consent panel accessible from the platform footer. Withdrawing consent for optional cookie categories will not affect the core functionality of your 288com account. Note that disabling strictly necessary cookies may impair your ability to log in and use the platform securely.
7.3 288com does not use third-party advertising network cookies or cross-site tracking pixels that report your behaviour on external websites back to advertisers.
8.1 288com retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC & identity documents | 5 years post-account closure | AML / Legal obligation |
| Financial transaction records | 5 years post-transaction | AML / Legal obligation |
| Gaming & betting history | 3 years post-account closure | Regulatory / Legitimate interest |
| Support & communications records | 3 years from interaction date | Legitimate interest |
| Marketing consent records | Until consent withdrawn + 1 year | Consent documentation |
| Technical & security logs | 12 months rolling | Security / Legitimate interest |
| Self-exclusion records | Permanent (anonymised after 7 years) | Responsible gaming obligation |
8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained for analytical purposes indefinitely, as it no longer constitutes personal data under applicable data protection standards.
9.1 288com implements a layered technical and organisational security programme to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, 288com will notify affected individuals without undue delay and, where required, report the breach to the relevant supervisory authority within the timeframes prescribed by applicable data protection law.
9.3 No security system is impenetrable. While 288com makes every reasonable effort to protect your personal data, we cannot guarantee absolute security against all threats. You are responsible for keeping your own login credentials secure and for notifying 288com immediately if you suspect unauthorised access to your Account.
10.1 As a 288com Player, you hold the following rights in relation to your personal data. Requests to exercise any of these rights should be submitted to our Data Protection contact as specified in Clause 14.
Request a copy of all personal data 288com holds about you, along with information about how it is processed. We will respond within 48 hours.
Request correction of inaccurate or incomplete personal data. Identity data corrections require supporting documentation such as an updated CNIC.
Request deletion of your personal data where retention is no longer necessary, subject to overriding legal and regulatory retention obligations under AML law.
Request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of data we hold.
Request a machine-readable export of personal data you have provided to 288com, in a structured, commonly used format such as CSV or JSON.
Object to processing based on legitimate interest or for direct marketing purposes. Marketing objections are acted upon immediately upon receipt.
10.2 288com will respond to all data rights requests within 48 hours of receipt for acknowledgement, and will provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 60 days with notification. 288com does not charge any fee for exercising data rights under normal circumstances.
10.3 To submit a data rights request, contact 288com's Data Protection contact at [email protected] with the subject line "Data Rights Request — [your registered email address]" and a description of the right you wish to exercise. You may be required to verify your identity before the request is fulfilled.
11.1 288com does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification and CNIC-based age confirmation precisely to prevent underage access. If 288com discovers or has reason to believe that personal data belonging to a person under the age of 21 has been collected, we will immediately suspend the associated Account, delete the data, and notify the relevant authorities where required.
11.2 If you believe that a minor has registered an account on 288com using false information, please report this to our support team via live chat or at [email protected] immediately. We will investigate and act within 24 hours of receiving a credible report.
12.1 288com operates under international gaming licence oversight, and certain aspects of our infrastructure and processing operations — including data hosting and KYC verification — may involve the transfer of personal data to countries outside Pakistan. Where such transfers occur, 288com ensures that appropriate safeguards are in place, including:
12.2 288com does not transfer personal data to any jurisdiction or entity that 288com's assessment identifies as presenting an elevated risk to data subject rights without implementing additional contractual or technical safeguards to mitigate that risk.
13.1 288com reserves the right to update or revise this Privacy Policy at any time. When material changes are made, 288com will notify registered Players via email to the address held on file and/or via a prominent notification displayed upon next login to the platform. The "Last Reviewed" date at the top of this document will be updated to reflect the publication date of the revised version.
13.2 The current version of this Privacy Policy is always accessible at 288com.org/privacy-policy. If you do not agree with the terms of a revised Privacy Policy, you should cease using the platform and may request Account closure in accordance with Clause 14.3 of the 288com Terms & Conditions. Continued use of the platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.
For all privacy-related queries, data rights requests, or concerns regarding 288com's data processing practices, please use the following contact channels:
Subject line: "Privacy Request — [your email]"
Available 24 hours / 7 days via platform
Acknowledgement within 48 hours
Privacy Policy v2.4 · Effective 01 Jan 2026
How We Protect You
Your privacy is not an afterthought at 288com — it is built into every layer of how we operate, from the moment you register to the day you withdraw.
Every byte of data transmitted between your device and 288com servers is protected by 256-bit SSL/TLS encryption — the same standard used by international banks. Your login credentials, payment details, and personal information are never transmitted in plain text.
288com has a firm, unconditional policy against selling player data to advertisers, data brokers, or any third party for commercial purposes. Your personal information is used only to operate your account and fulfil our legal obligations — nothing else.
Access to your personal data within 288com is restricted on a strict need-to-know basis. Staff accounts require multi-factor authentication, and all internal data access events are logged and audited regularly by our security team in Karachi and our international operations centre.
Every 288com player holds the right to access, correct, export, and delete their personal data. Submit a request to [email protected] and receive acknowledgement within 48 hours. We treat data rights requests with the same urgency as financial withdrawal requests.
CNIC copies and selfies submitted for KYC are stored in an encrypted, access-controlled document vault separate from general account data. KYC documents are never shared with third parties except regulated identity verification service providers operating under strict data processing agreements.
If a personal data breach occurs that affects your rights and freedoms, 288com will notify you directly without undue delay. Our incident response team monitors for anomalies 24/7, and our breach notification protocol is tested quarterly to ensure it works when it matters most.
Now that you understand how 288com handles your personal information, explore the platform with full confidence. PSL cricket betting, live Andar Bahar tables, 500+ slots — all backed by a privacy framework you can trust.
21+ only · Gamble responsibly · International gaming licence regulated · PKR payments