288fd Privacy Policy — How We Collect, Use, and Protect Your Personal Data on Pakistan's Premier Online Gaming Platform

🏢1. Scope and Data Controller

This Privacy Policy applies to all personal data collected by 288fd in connection with the operation of the 288fd online gaming platform at https://288fd.net, including all games, betting markets, account services, customer support interactions, marketing communications, and any other services provided under the 288fd brand (collectively, the "Platform").

288fd is the data controller in respect of all personal data collected and processed pursuant to this Privacy Policy. As data controller, 288fd determines the purposes for which, and the manner in which, personal data is processed. 288fd operates under a full international gaming license which imposes specific data protection, KYC (Know Your Customer), and AML (Anti-Money Laundering) obligations upon us as part of the conditions of our license.

This Privacy Policy is incorporated into and forms part of 288fd's Terms & Conditions. By registering for or using the 288fd Platform, you acknowledge that you have read and understood this Privacy Policy.

📂2. Personal Data We Collect

288fd collects the following categories of personal data in connection with your use of the Platform:

2.1 Identity and Contact Data

• Full legal name (as it appears on your CNIC or other government-issued identity document)
• Date of birth (for mandatory age verification — 288fd requires all users to be 21 years of age or older)
• Pakistani mobile number (used for account verification, OTP-based login, and account communications)
• Email address (where provided)
• Residential address (required for enhanced KYC verification)
• Copies of identity documents — Computerised National Identity Card (CNIC), passport, or other government-issued identification as required by KYC procedures

2.2 Financial and Transaction Data

• JazzCash or EasyPaisa account number or mobile wallet identifier
• HBL, UBL, or Meezan Bank account details (where used for deposits or withdrawals)
• Deposit history, withdrawal history, and complete transaction records
• Account balance information (current balance, bonus balance, pending withdrawals)
• Source of funds documentation (where requested under AML obligations)

2.3 Gaming and Betting Activity Data

• Complete betting and gaming history including all wagers placed, game outcomes, and settlement records
• Game preferences, favourite game selections, and session history
• Bonus redemption history and wagering requirement progress
• Session duration, session frequency, and time-of-day gaming patterns
• In-play betting behaviour on cricket, PSL, and other sports markets

2.4 Technical and Device Data

• IP address and geographic location derived therefrom
• Device type, operating system, and browser version
• Mobile network operator (Jazz, Zong, Telenor, Ufone, or other)
• Session identifiers, login timestamps, and session duration data
• Cookie data and similar tracking technology data (see Section 7)

2.5 Communications Data

• Records of all communications between you and the 288fd customer support team, including live chat transcripts and email correspondence
• Complaint records and their resolution status
• Responses to surveys, feedback submissions, and promotional participation data

📡3. How We Collect Your Data

288fd collects personal data through the following methods:

• Direct Provision: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, participating in promotions, or completing surveys.
• Automated Collection: Technical data including IP address, device information, and session data collected automatically when you access and use the 288fd Platform. This collection occurs through web server logs, cookies, and similar technologies.
• Payment Processors: Transaction confirmation and payment method verification data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you process deposits or withdrawals.
• Identity Verification Services: Where 288fd uses third-party KYC or identity verification services to verify the accuracy of identity documents you submit, those services may return data to 288fd confirming or flagging the verification outcome.
• Fraud Prevention and AML Services: 288fd may receive data from fraud prevention or AML screening services regarding whether a user or transaction presents elevated risk indicators. This data is used solely for compliance and risk management purposes.

🎯4. How We Use Your Personal Data

288fd uses personal data collected from 288fd users for the following purposes:

⚖️5. Legal Bases for Processing

288fd processes personal data on the following legal bases under internationally recognised data protection principles:

• Contract Performance: Processing necessary to enter into and perform the contract between you and 288fd (your account registration and use of the Platform) — including account management, KYC, payment processing, and gaming operations.
• Legal Obligation: Processing required to comply with 288fd's international gaming license conditions, AML regulations, and other applicable legal obligations — including mandatory identity verification, transaction monitoring, and record-keeping requirements.
• Legitimate Interests: Processing for 288fd's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics for platform improvement.
• Consent: Where 288fd relies on your consent — primarily for the sending of direct marketing communications — such consent is obtained separately and may be withdrawn by you at any time without affecting the lawfulness of processing carried out before withdrawal of consent.

🤝6. Who We Share Your Data With

288fd shares personal data only with the categories of recipients listed below, and only to the extent necessary for the purpose stated. 288fd does not sell personal data to any third party.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers process data as independent data controllers in accordance with their own privacy policies.
• KYC and Identity Verification Providers: Where 288fd uses third-party services to verify identity documents, those providers receive copies of the identity documents you submit for verification. They are bound by data processing agreements with 288fd and may not use your data for any purpose other than verification.
• Game Content Providers: Where 288fd's Platform includes games developed and operated by third-party game studios (particularly live dealer games), those providers may receive session and gaming activity data necessary to operate the game. Game providers are vetted by 288fd for data security standards.
• Regulatory and Law Enforcement Authorities: 288fd will disclose personal data to regulatory authorities, licensing bodies, or law enforcement agencies where required to do so by law, court order, or pursuant to our gaming license obligations. 288fd will notify affected users of such disclosures where legally permitted to do so.
• Fraud Prevention and AML Services: 288fd uses specialist third-party services for AML screening and fraud detection. These providers process data solely for the risk assessment purposes for which they are engaged.
• Professional Advisers: 288fd's legal, compliance, and financial advisers may access personal data to the minimum extent necessary for them to provide professional advice and services to 288fd.

🍪7. Cookies and Tracking Technologies

288fd uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in to your 288fd account during a session, security cookies, and cookies required for payment processing. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game preferences, and display settings, so you don't have to reconfigure them on each visit to 288fd.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate and use the 288fd Platform — which pages are visited most frequently, where users encounter errors, and how gaming sessions are typically structured. This data is used to improve the Platform experience. Individual users are not identified through analytics data.
• Security and Anti-Fraud Cookies: Used to detect and prevent fraudulent activity including multi-accounting, automated bot access, and suspicious login patterns.

You can manage your cookie preferences through your browser settings. However, disabling strictly necessary cookies will prevent core 288fd Platform functionality — including the ability to maintain a logged-in session — from operating correctly. The 288fd Platform does not currently use third-party advertising or retargeting cookies.

🌍8. International Data Transfers

288fd's operations involve the transfer of personal data to servers and third-party service providers located outside Pakistan. Where personal data is transferred internationally, 288fd ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses recognised under international data protection frameworks — to protect your data to the same standard that applies within our operating jurisdiction.

Specifically, data processed by 288fd's payment processors (JazzCash, EasyPaisa), KYC providers, game content providers, and cloud infrastructure providers may be processed in server locations outside Pakistan. All such international processing arrangements are governed by contracts that require recipient organisations to maintain data security standards consistent with 288fd's own obligations.

🔐9. Security Measures

288fd implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your device and 288fd's servers is encrypted using 256-bit SSL/TLS encryption. This applies to all pages of the Platform, not just login and payment pages.
• Password Security: User passwords are never stored in plaintext. 288fd uses industry-standard cryptographic hashing algorithms to store password data in a form that cannot be reverse-engineered to reveal the original password, even in the event of a data breach.
• At-Rest Encryption: Sensitive personal data — including identity document copies, financial data, and CNIC information — is encrypted at rest on 288fd's servers and those of relevant service providers.
• Access Controls: Access to personal data within 288fd's systems is restricted on a strict need-to-know basis. Staff members can access only the data necessary for their specific role. All access is logged and audited.
• Multi-Factor Authentication: OTP-based multi-factor authentication is available and encouraged for all 288fd Login sessions. It provides a second layer of protection in addition to your password.
• Penetration Testing and Security Audits: 288fd's Platform and data security infrastructure are subject to regular independent security testing and audits to identify and remediate vulnerabilities.
• Incident Response: 288fd maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected users, 288fd will notify relevant regulatory authorities and affected individuals as required under our licensing obligations.

🗓️10. Data Retention

288fd retains personal data only for as long as necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention requirements. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or, where deletion is not technically feasible, irreversibly anonymised so that it can no longer be linked to any individual.

👤11. Your Data Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your personal data held by 288fd:

• Right of Access: You have the right to request a copy of the personal data that 288fd holds about you (a "Subject Access Request"). 288fd will respond to Subject Access Requests within 30 days of receipt.
• Right to Rectification: You have the right to request that 288fd corrects inaccurate personal data about you. Many basic account details can be updated directly in your account settings. For identity data, you may need to contact support and provide updated documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that this right is subject to overriding legal obligations — 288fd cannot delete transaction records that must be retained under AML law.
• Right to Restriction of Processing: You have the right to request that 288fd restricts the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract performance.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.

🔞12. Children and Minors — Strict 21+ Policy

The 288fd Platform is strictly intended for users aged 21 years and above. 288fd does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the 288fd registration process, and Real Money Play is disabled on all accounts until age verification is successfully completed.

If 288fd becomes aware that it has collected personal data from a person under the age of 21 — whether through age verification failure, a complaint from a third party, or any other means — the following steps will be taken immediately:

• The affected account will be immediately suspended.
• All real-money gaming activity on the account will be voided where permitted by applicable rules.
• Deposits will be returned net of any gaming losses, in accordance with 288fd's terms.
• All personal data associated with the underage account will be deleted at the earliest opportunity consistent with any mandatory record-keeping obligations.
• The incident will be reported to 288fd's licensing authority as required under license conditions.

🤝13. Responsible Gaming Data Processing

288fd processes gaming behaviour data specifically for responsible gaming monitoring purposes. This processing is carried out in your interest — to identify patterns that may indicate problem gambling and to enable 288fd to take appropriate protective action, including proactive outreach, enforced deposit limit suggestions, or mandatory account reviews.

Data used for responsible gaming monitoring includes: session frequency and duration, time-of-day gaming patterns, deposit frequency and amounts relative to historical behaviour, changes in betting patterns, and engagement with responsible gaming tools (or lack thereof).

Where 288fd's responsible gaming monitoring identifies an account that may be experiencing problem gambling, 288fd may contact the account holder using their registered contact details to provide information about responsible gaming tools and third-party support resources. This contact is made in the account holder's interest and does not constitute marketing.

All self-exclusion requests, deposit limit settings, and session controls applied to your 288fd account are recorded and retained for the periods specified in Section 10. This retention is necessary to enforce these protections consistently and to demonstrate compliance with our licensing obligations.

Full details of responsible gaming tools available on 288fd are set out on our Responsible Gaming page.

📣14. Marketing Communications

288fd may send you promotional communications about offers, new games, upcoming PSL betting markets, bonuses, and other 288fd services, using the contact details you provide during registration. Marketing communications may be sent by SMS to your registered Pakistani mobile number or by email where an email address is registered.

288fd will only send marketing communications where:

• You have not opted out of receiving such communications, or
• You have provided explicit consent to receive them (where required by applicable law).

Opting Out: You may opt out of receiving marketing communications from 288fd at any time by:

• Adjusting your marketing preferences within your 288fd account settings, or
• Following the unsubscribe instructions included in any marketing email, or
• Contacting 288fd support at [email protected] with a request to remove you from marketing lists.

Opting out of marketing communications will not affect the delivery of essential account communications — including transaction confirmations, account security alerts, KYC requests, and responsible gaming notifications — which are sent on the basis of contract performance or legal obligation rather than marketing consent.

📝15. Updates to This Privacy Policy

288fd reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer on the Platform.

When 288fd makes material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will provide notice by:

• Sending a notification to your registered mobile number or email address, and/or
• Displaying a prominent notice on the 288fd Platform when you next log in.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. The current version of this Privacy Policy will always be accessible at https://288fd.net/privacy-policy. By continuing to use the 288fd Platform after an updated Policy has been published, you accept the updated Policy.

If you do not accept any updates to this Policy, you may request account closure by contacting 288fd support. Closing your account does not affect 288fd's obligation to retain data that must be kept pursuant to legal or regulatory requirements.

📞16. Contact and Privacy Complaints

If you have any questions about this Privacy Policy, about how 288fd handles your personal data, or if you wish to exercise any of your data rights, please contact our privacy team using the details below:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 within your 288fd account. Our Urdu-speaking support agents can assist with privacy queries and can escalate requests to the Data Protection team where required.

288fd aims to respond to all privacy enquiries within 72 hours and to resolve substantive data rights requests within 30 days of receipt. Complex requests may require additional time, in which case 288fd will communicate estimated timelines to you.

If you are dissatisfied with 288fd's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the Alternative Dispute Resolution body recognised under 288fd's international gaming license. Details of the applicable supervisory authority and ADR body are available on request.