Privacy Policy

This Privacy Policy ("Policy") describes how 288wen ("we", "us", "our", "the Platform") collects, processes, stores and protects personal data relating to individuals ("you", "your", "User") who access or use the website located at https://288wen.cam and any associated services, features or content offered by 288wen.

288wen is an online betting and gaming information platform serving users primarily in Pakistan. We are committed to handling your personal data responsibly, transparently and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation and integrity.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein, where such consent is the applicable legal basis for processing.

The following definitions apply throughout this Privacy Policy:

• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, 288wen.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by the Controller — i.e., you as a registered or visiting user of the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, IP address, device identifiers and financial transaction data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Processor" means any third party that processes personal data on behalf of 288wen in accordance with this Policy and applicable data protection law.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or data concerning a person's sex life or sexual orientation. 288wen does not intentionally collect Sensitive Data.
• "Cookies" means small text files placed on your device by the Platform to store session and preference information, as further described in Section 8.

288wen collects personal data across three broad categories: data you provide directly, data collected automatically during your use of the Platform, and data received from third parties in limited circumstances.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically by our servers and analytics systems:

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, links clicked, betting or game categories browsed, session start and end times, and referral source URLs.
• Location Data: General geographic location derived from your IP address (typically to city or regional level — for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar). We do not collect precise GPS location data unless you explicitly grant permission.
• Log Data: Server access logs recording HTTP requests, response codes and timestamps for security monitoring purposes.

3.3 Data from Third Parties

In limited circumstances, 288wen may receive personal data about you from third-party sources, including identity verification service providers (for KYC purposes), fraud prevention and AML screening databases, and payment processing intermediaries. Data received from third parties is handled under the same standards as data you provide directly.

288wen collects personal data through the following channels and mechanisms:

• Account Registration Forms: When you create or update your 288wen account, you submit Identity Data, Contact Data and account credentials directly through the registration interface.
• Deposit and Withdrawal Transactions: Financial Data is captured during payment processing flows, which may involve references to payment methods familiar to Pakistani users such as mobile wallet services and bank transfers. Payment provider names referenced in this context — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — are used for transactional reference only and do not indicate an endorsement of gambling by any such institution.
• Customer Support Channels: Data submitted through live chat, email correspondence or support ticket systems is retained as part of your support interaction record.
• Cookies and Tracking Technologies: Automated data collection via cookies, web beacons and similar technologies as described in Section 8.
• KYC and Verification Processes: Documents and data submitted as part of identity, age or address verification checks required by the Operator's compliance obligations.
• Responsible Gambling Tool Submissions: Preferences and requests submitted through self-exclusion, deposit limit or time-limit controls within your account dashboard.

288wen processes your personal data only for specified, explicit and legitimate purposes. The table below sets out the primary purposes for which your data is processed and the categories of data used for each purpose.

288wen processes personal data on the following legal bases, as recognised under internationally applicable data protection frameworks:

• Contractual Necessity: Processing required to perform our contract with you — for example, creating your account, processing deposits and withdrawals, and providing access to Platform features.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML screening, age verification and regulatory reporting duties.
• Legitimate Interests: Processing carried out for legitimate business interests, including fraud prevention, Platform security, analytics, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as direct marketing communications, non-essential cookies and certain profiling activities, where your freely given, specific and informed consent has been obtained. Consent may be withdrawn at any time without affecting prior lawful processing.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect your vital interests or those of another person — for example, in connection with a responsible gambling intervention.

Where processing is based on legitimate interests, 288wen conducts a balancing assessment to ensure that such interests do not disproportionately impact your rights. Records of these assessments are maintained internally.

288wen does not sell, rent or trade your personal data to third parties for their own commercial purposes. Your data may be shared in the following limited circumstances:

7.1 Service Providers and Processors

We engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include identity verification and KYC service providers, payment processing intermediaries, cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform operators. All processors are required to handle your data only in accordance with our documented instructions and applicable data protection obligations.

7.2 The Operator

Where 288wen acts as an intermediary information platform in connection with a licensed gaming Operator, relevant account, transactional and verification data may be shared with that Operator to the extent necessary to facilitate the provision of services. The Operator's own privacy policy governs data processing carried out by the Operator in its own capacity.

7.3 Legal and Regulatory Disclosures

288wen may disclose your personal data to law enforcement agencies, regulatory authorities, courts or other government bodies where required to do so by law or in response to a lawful request. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of our business assets, your personal data may be transferred to the relevant successor entity as part of that transaction, subject to equivalent data protection commitments. You will be notified of any such transfer in advance where practicable.

The 288wen Platform uses cookies and similar tracking technologies to deliver a functional, personalised and secure user experience. This section explains the types of cookies we use and how you can manage your preferences.

8.1 Types of Cookies Used

8.2 Managing Cookie Preferences

You can manage or withdraw consent for non-essential cookies at any time through your browser settings or any cookie management tool provided on the Platform. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Most modern browsers — including those commonly used on mobile devices across Pakistan — allow you to view, delete and block cookies through the browser's privacy or settings menu.

8.3 Web Beacons and Similar Technologies

In addition to cookies, the Platform may use web beacons (also known as pixel tags or clear GIFs) in emails and web pages to track open rates, link clicks and user engagement. These technologies work in conjunction with cookies and are subject to the same consent requirements as analytics and marketing cookies.

288wen retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal, regulatory or contractual obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised, the resulting aggregate data may be retained indefinitely for analytical purposes.

288wen implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) protocols. This applies to all account operations, payment flows and support communications.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff and third-party processors who handle personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion Detection and Monitoring: Continuous monitoring systems detect and alert on anomalous access patterns, potential breaches and suspicious activity in real time.
• Vulnerability Management: Regular security assessments, penetration testing and vulnerability scanning are conducted to identify and remediate weaknesses in Platform infrastructure.
• Incident Response: A documented data breach response procedure is in place, including notification obligations to affected individuals and relevant authorities where a breach is likely to result in a high risk to your rights and freedoms.

Subject to applicable data protection law and certain legal exceptions, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 16.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update many of your account details directly through your account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. This right is subject to legal retention obligations — for example, AML records must be retained for the periods specified in Section 9 regardless of an erasure request.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object at any time to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing processing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce significant legal or similarly significant effects, unless such processing is necessary for a contract, authorised by law, or based on your explicit consent.

We will respond to all rights requests within 30 calendar days of receipt. In complex cases or where a high volume of requests has been received, this period may be extended by a further two months, of which you will be informed. We will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive.

The 288wen Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the applicable licensing jurisdiction or operator. We do not knowingly collect, process or store personal data from individuals under the applicable minimum age.

During the account registration and KYC verification process, all users are required to confirm their date of birth and to provide documentary evidence of age where required. Where we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account without delay.

Parents and guardians who have reason to believe that a minor under their care has accessed the Platform or provided personal data to 288wen are encouraged to contact our support team immediately. We take such reports seriously and will act promptly to address any confirmed cases.

288wen operates as a platform serving users across Pakistan and may engage service providers and infrastructure partners located in different countries. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 288wen takes steps to ensure that your data receives an equivalent level of protection to that afforded under the data protection principles set out in this Policy.

Safeguards used for international transfers may include contractual commitments between 288wen and receiving entities, binding corporate rules where applicable, and the selection of processors located in jurisdictions that provide adequate levels of data protection. Where required by applicable law, transfers will be carried out only where appropriate safeguards are in place.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us using the details in Section 16.

The Platform does not include external links to third-party websites as a general rule. Where reference is made to third-party payment methods or services — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — these references are provided for contextual information only. Such references do not constitute an endorsement of gambling by those institutions, nor do they imply any formal data-sharing arrangement between 288wen and those entities in respect of your personal data.

Where 288wen engages third-party analytics or operational tools that may process limited technical data about your Platform usage, those providers act as data processors under binding contractual agreements with 288wen. They are not permitted to use your data for their own independent commercial purposes.

288wen is not responsible for the privacy practices of any third-party operator whose platform you access in connection with services referenced on 288wen. We recommend that you review the privacy policy of any operator platform you engage with directly.

288wen reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices or Platform features. Where amendments are material, we will provide reasonable advance notice by posting the updated Policy on this page with a revised "Last Updated" date and, where practicable, by notifying registered users via their registered email address.

Your continued use of the Platform following the posting of any amendment constitutes your acknowledgement of the revised Policy. Where an amendment requires your consent under applicable law — for example, a new processing purpose that requires consent as its legal basis — we will seek that consent separately before commencing the new processing activity.

If you have any questions, concerns or requests relating to this Privacy Policy or the manner in which 288wen processes your personal data, please contact our support team using the details below. Our team handles all data-related enquiries in English, with Urdu-language assistance available upon request.

• Email: [email protected]
• Subject Line for Data Rights Requests: "Data Rights Request — [Your Right]"
• Subject Line for Privacy Concerns: "Privacy Enquiry"
• Response Commitment: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.

For urgent matters relating to suspected unauthorised access to your account or a potential data security incident, please mark your communication as "Urgent — Security" to ensure prioritised handling by our team.