288vin Privacy Policy — Your Data, Explained Clearly and Honestly

288vin collects personal information through three main channels: information you provide directly during registration and account use; information generated automatically through your use of the platform; and information received from third-party payment providers when you make a transaction.

Information you provide directly:

• Full name and date of birth (for account registration and age verification)
• Mobile phone number (used as primary account identifier and for OTP verification)
• Email address (used for account communications and promotional messages where consented)
• CNIC or passport number (for identity verification, requested when required by our KYC process)
• Payment account details — mobile wallet IDs (Easypaisa, JazzCash, NayaPay, SadaPay), bank account numbers for IBFT, or masked card details for Visa/Mastercard
• Self-reported information provided when contacting 288vin support

Information collected automatically:

• Device type, operating system and browser version
• IP address and approximate location (city/region level)
• Session data — pages visited, games played, duration of sessions, bets placed and outcomes
• Login timestamps and access patterns
• Cookies and similar tracking technologies (see Section 8)

288vin uses your personal data only for the purposes listed below. We do not use your data for purposes that would surprise you or that you have not been informed about in this policy.

Every time 288vin processes your personal data, we do so on one of the following legal grounds. Understanding which ground applies helps you understand your rights in relation to that processing.

• Contract Performance: Processing necessary to deliver the 288vin service you signed up for — including running your account, processing transactions and providing customer support.
• Legal Obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks and responsible gaming record-keeping.
• Legitimate Interests: Processing for purposes that serve 288vin's reasonable business interests — such as fraud prevention, platform security and aggregate analytics — where those interests do not override your fundamental rights.
• Consent: Processing you have explicitly opted into, such as receiving marketing messages. You may withdraw this consent at any time by contacting support or updating your notification preferences in your 288vin account dashboard.

288vin does not sell, rent or trade your personal information. We share data with third parties only where it is strictly necessary for delivering our services, complying with legal obligations or protecting our platform from fraud. The categories of recipients are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard networks receive the payment data necessary to process your deposits and withdrawals. All payment partners operate under their own privacy and security standards.
• Identity Verification Providers: Third-party KYC platforms may process your identity documents on 288vin's behalf to verify your identity. These providers are contractually bound to use your data only for verification purposes.
• Game Software Providers: Where 288vin operates games under licence from third-party software providers, those providers may receive anonymised session data for game performance monitoring. They do not receive personally identifiable information.
• Regulatory and Law Enforcement Authorities: 288vin may be required to share information with authorities where mandated by applicable law, court order or regulatory requirement. We will always verify the legitimacy of such requests before disclosing information.
• Fraud Prevention Services: Anonymised or pseudonymised data may be shared with fraud prevention networks to help identify and block fraudulent activity patterns.

Given that 288vin operates as a real-money gaming platform in Pakistan, the security and privacy of payment data is a particularly critical responsibility. Here is exactly how 288vin handles your financial information:

• Full mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and used only for processing transactions in your name.
• Full bank account numbers for IBFT transfers are stored in encrypted form and used only for outbound withdrawal transfers to accounts verified in your name.
• Visa/Mastercard full card numbers are never stored on 288vin servers. Card transactions are processed through a PCI-DSS compliant tokenisation system. 288vin retains only a masked card reference (e.g., last four digits) for your account records.
• Transaction history — including deposits, withdrawals, bonuses and wagers — is retained as part of your account record for the period described in Section 6.
• You will never receive a legitimate request from 288vin asking you to share full payment credentials over chat, phone or email. Any such request should be treated as fraudulent and reported immediately.

288vin retains your personal data for as long as your account is active and for a defined period thereafter, based on the type of data and the legal or operational reason for holding it:

• Account and Identity Data: Retained for the lifetime of your active account plus five years after closure. This retention is required for anti-money laundering compliance and regulatory audit purposes.
• Transaction Records: Retained for seven years from the date of each transaction, in line with standard financial record-keeping requirements.
• Support Communications: Chat logs, email correspondence and complaint records are retained for three years after the date of the interaction.
• Marketing Consent Records: Records of marketing preferences and consent are retained for as long as your account is active plus two years after closure.
• Anonymised Analytics Data: Aggregated, anonymised usage data with no personally identifiable elements may be retained indefinitely for platform analytics purposes.

When the retention period for any category of data expires, that data is permanently deleted or fully anonymised using industry-standard secure deletion processes.

Protecting your data is one of 288vin's most important technical responsibilities. We apply the following security measures across our infrastructure:

• Transport Security: All communication between your device and the 288vin platform is encrypted using TLS 1.2 or higher (256-bit SSL). This prevents interception of data in transit.
• Data at Rest: Sensitive personal and payment data stored in 288vin databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 288vin is limited strictly to staff with a legitimate operational need. All access is logged and audited.
• Two-Factor Authentication: 288vin offers optional two-factor authentication for all account logins. We strongly recommend enabling this feature.
• Regular Security Audits: The 288vin platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.
• Data Breach Response: In the event of a confirmed data breach affecting your personal data, 288vin will notify affected users promptly and take immediate steps to contain and investigate the breach.

288vin uses cookies and similar browser-based tracking technologies to keep your session active, remember your preferences and gather anonymised analytics about how the platform is used. The following categories of cookies are in use on the 288vin platform:

You can also manage cookie settings through your browser. Disabling essential cookies will prevent the 288vin platform from functioning correctly and you will not be able to stay logged in or complete transactions.

As a 288vin user, you have the following rights regarding your personal data. You can exercise any of these rights by contacting our support team at support@288vin.ws. We will acknowledge requests within 48 hours and resolve them within 30 days.

The 288vin platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data belonging to minors. If a user below the age of 18 registers on 288vin using false information, their account will be closed on discovery and any balance will be returned to the verified payment source.

If you believe a minor has created a 288vin account, please contact support@288vin.ws immediately with as much detail as possible. We will investigate and take appropriate action promptly. Parents and guardians who are concerned about minor access to online gaming platforms are encouraged to use device-level parental controls and to review the 288vin Responsible Gaming page for additional guidance.

288vin may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements or platform features. When material changes are made, the revised policy will be published on this page with an updated "Last Updated" date. For changes that significantly affect how we use your personal data, we will provide notice via the 288vin platform notification system and, where possible, by email to your registered address.

We encourage you to review this Privacy Policy periodically, particularly before providing new categories of personal information or before making significant transactions. Your continued use of the 288vin platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or the way 288vin handles your personal data, please contact us through any of the following channels. All privacy-related enquiries are handled by the 288vin compliance and data team and will receive a response within 48 hours.