288wi Privacy Policy

This Privacy Policy is issued by 288wi ("288wi", "we", "us", "our") and applies to all players, visitors, and registered users of the 288wi online gaming platform accessible at 288wi.org. We are committed to protecting the personal information of every individual who interacts with our platform, particularly our Pakistani player base across Karachi, Lahore, Islamabad, Faisalabad, and beyond.

This policy has been prepared in accordance with applicable international data protection standards and 288wi's licensing obligations. It explains in plain English precisely how we collect, process, store, share, and protect your personal information, and sets out the rights available to you regarding that information.

This Privacy Policy should be read alongside the 288wi Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the 288wi platform.

288wi collects personal information through several channels, including account registration, ongoing platform use, payment processing, customer support interactions, and through automated technical systems. The categories of data we collect are set out below.

2.1 Registration & Identity Data

When you create a 288wi account, we collect your full legal name, date of birth, gender, residential address in Pakistan, email address, and Pakistani mobile number. This information is required to create and maintain your account and forms the basis for KYC verification.

2.2 KYC Verification Documents

To comply with anti-money laundering (AML) and responsible gaming obligations, 288wi collects copies of identity documents such as your National Identity Card (CNIC) or Pakistani passport, proof of address documents, and payment method verification materials. These documents are processed securely and retained only for the period required by law.

2.3 Financial & Transaction Data

288wi collects records of all deposits, withdrawals, and wagers conducted on the platform. This includes transaction amounts in PKR, payment method identifiers (such as JazzCash or EasyPaisa wallet IDs, or masked bank account numbers), transaction timestamps, and game or event references. Full payment credentials are never stored directly by 288wi — they are handled by our PCI-DSS compliant payment partners.

2.4 Gaming & Behavioural Data

We collect data about your gaming activity on the 288wi platform, including games played, bets placed, session duration, win/loss history, and bonus utilisation. This data is used to personalise your experience, comply with responsible gaming obligations, and detect unusual patterns that may indicate problem gambling or fraudulent behaviour.

2.5 Technical & Device Data

2.6 Communications Data

When you contact 288wi's support team — whether via email, live chat, or any other channel — we retain records of that correspondence, including the content of messages, timestamps, and any attachments or documents shared. This data is used to resolve disputes, improve our service quality, and maintain an audit trail.

288wi uses the personal data we collect for clearly defined, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which 288wi processes personal data are as follows:

• Account Management: To create, maintain, and administer your 288wi player account, including processing deposits and withdrawals in PKR, applying bonuses, and maintaining your gaming history.
• Identity Verification (KYC): To verify your identity and age in compliance with AML regulations and 288wi's responsible gaming obligations. All players must be 21 years of age or older.
• Payment Processing: To facilitate secure deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, including fraud screening and transaction reconciliation.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and fulfil our duty of care obligations to players.
• Legal & Regulatory Compliance: To comply with applicable gaming licence conditions, AML reporting obligations, and any lawful requests from competent regulatory or law enforcement authorities.
• Platform Security: To detect and prevent fraud, money laundering, duplicate account creation, unauthorised access, and other prohibited activities on the 288wi platform.
• Service Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and the overall player experience.
• Communications: To send account-related notifications, transaction confirmations, security alerts, and — where you have opted in — promotional communications about 288wi offers and bonuses.

288wi processes your personal data only where a lawful basis for doing so exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our obligations to you under the 288wi Terms & Conditions — for example, processing your deposits, settling your winning bets, and maintaining your account.
• Legal Obligation: Processing required for 288wi to comply with applicable laws and regulations, including KYC/AML obligations, licence conditions, and responses to lawful regulatory requests.
• Legitimate Interests: Processing undertaken for 288wi's legitimate business interests, including fraud prevention, platform security, and improving the quality of our services — provided those interests are not outweighed by your rights.
• Consent: Processing for purposes where you have given us your explicit consent, such as receiving promotional emails and SMS notifications about 288wi bonuses and offers. You may withdraw this consent at any time via your account settings.

288wi does not sell, rent, or otherwise commercially exploit your personal data. We share your data only in the following specific and controlled circumstances:

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction and identity data with our regulated payment processing partners. These partners — which facilitate JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions — are contractually bound to use your data only for payment processing purposes and are required to maintain appropriate data security standards.

5.2 KYC & Identity Verification Partners

288wi uses authorised third-party KYC verification services to validate identity documents. Your submitted KYC documents are transmitted to these partners securely and are used solely for verification purposes. These partners are prohibited from retaining your documents beyond the verification period or using them for any other purpose.

5.3 Regulatory & Law Enforcement Authorities

288wi will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid court order, or our gaming licence conditions. We will only disclose the minimum data necessary to satisfy such legal requirements.

The 288wi platform uses cookies and similar technologies to deliver a functional, secure, and personalised gaming experience. Below is a breakdown of the cookie categories we use:

288wi does not use third-party advertising or retargeting cookies. You may manage your cookie preferences — excluding essential and responsible gaming cookies — through the cookie settings panel accessible from the footer of any 288wi page. Disabling optional cookies will not affect your ability to use core platform features.

288wi retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Transaction Records: Retained for a minimum of five (5) years following account closure, in accordance with AML and gaming licence record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later. This retention period is mandated by applicable financial regulations.
• Communications & Support Records: Retained for three (3) years from the date of the most recent interaction, or longer where required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained until you withdraw your consent, plus a reasonable additional period for audit purposes.
• Technical & Session Logs: Retained for a rolling period of twelve (12) months for security analysis purposes, after which they are anonymised or deleted.

When personal data is no longer required and no legal retention obligation applies, 288wi will securely delete or permanently anonymise the data. Data that has been anonymised such that it can no longer be attributed to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

288wi implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your device and the 288wi platform is encrypted using TLS 1.3 protocol. Our platform enforces HTTPS across all pages and connections.
• Encryption at Rest: All personal and financial data stored in 288wi's databases is encrypted using AES-256 standard encryption. This ensures that even in the event of a physical storage compromise, data remains unreadable.
• Access Controls: Access to personal data within the 288wi organisation is restricted on a strict need-to-know basis. Staff are granted the minimum data access required to perform their specific roles. All data access is logged and monitored.
• Two-Factor Authentication: 288wi supports and encourages two-factor authentication (2FA) for all player accounts. Staff accounts with access to player data are required to use 2FA as a mandatory security control.
• Penetration Testing: 288wi engages independent security specialists to conduct regular penetration testing and vulnerability assessments of the platform infrastructure. Critical findings are remediated on a priority basis.
• Payment Security: 288wi does not store full payment card numbers or mobile wallet PINs. Payment credentials are tokenised by our PCI-DSS compliant payment partners, and 288wi only retains masked identifiers for transaction reference purposes.

As a 288wi player, you have a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact the 288wi support team using the contact details provided in Section 13.

288wi will not charge a fee for exercising any of the above rights, except in cases of manifestly unfounded or excessive requests. We may need to verify your identity before processing a rights request to protect against unauthorised disclosure of personal data.

The 288wi platform is strictly intended for adults only. You must be at least 21 years of age to register an account or participate in any gaming activity on the 288wi platform. 288wi does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

Age verification is conducted as part of the KYC process for all new 288wi accounts. Providing false date of birth information during registration is a serious breach of the 288wi Terms & Conditions and may result in permanent account closure and forfeiture of any account balance.

288wi's primary data infrastructure is located within secure, regulated data centre facilities. In the course of providing our services — particularly in relation to KYC verification, payment processing, and cloud-based platform infrastructure — your personal data may be transferred to and processed in jurisdictions outside Pakistan.

Where such international transfers occur, 288wi ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under 288wi's licensing jurisdiction. These safeguards include contractual data processing agreements with all third-party processors, restricting transfers to jurisdictions with adequate data protection frameworks, and applying technical security controls consistently regardless of where data is processed.

288wi will not transfer your personal data to any jurisdiction or third party that cannot demonstrate an adequate level of data protection. If you have specific questions about the international transfer of your personal data, please contact us using the details in Section 13.

288wi reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. The most current version of this Privacy Policy will always be available at 288wi.org/privacy-policy.

When material changes are made to this Privacy Policy, 288wi will notify registered players via the email address associated with their account at least fourteen (14) days before the changes take effect, where operationally feasible. Minor or non-material updates — such as clarifications of existing practices — may be made without prior notice, though the effective date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the 288wi platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated terms, you should cease use of the platform and contact support to request account closure prior to the effective date of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 288wi handles your personal data, please contact our Data Protection team using the following details:

For formal complaints that cannot be resolved through our support team, you have the right to escalate your concern to the relevant data protection supervisory authority or dispute resolution body as specified under 288wi's operating licence. Details of the applicable body are available on request.