Privacy Policy – How 288min Protects Your Data

1Who We Are

288min is an online gaming platform built specifically for players in Pakistan. We provide a range of gaming entertainment including slots, fish games, live casino and sports betting — all available in PKR with local payment support through JazzCash, Easypaisa, Raast and bank transfer.

For the purposes of this Privacy Policy, "288min", "we", "us" and "our" refer to the operator of the 288min platform. "You" and "your" refer to any person who accesses or uses the platform in any capacity, whether as a registered player or a visitor.

This policy covers all personal data that we collect and process in connection with your use of 288min. It should be read alongside our Terms and Conditions, which form part of the overall agreement between you and 288min.

2What Data We Collect

We collect the minimum amount of personal data needed to provide a safe, functional and enjoyable gaming experience. The categories of data we collect include:

We do not collect sensitive personal data such as health information, religious beliefs or political views. We do not collect data from children — 288min is strictly an 18+ platform.

3How We Collect Your Data

Your data reaches us through several channels, all of which are tied directly to your interaction with the 288min platform:

• Registration: When you create a 288min account, you provide your name, contact details and date of birth directly.
• Account verification: When submitting identity documents such as your CNIC copy, we collect the information contained within those documents.
• Deposits and withdrawals: Financial transactions processed through JazzCash, Easypaisa, Raast or bank transfer generate transaction records linked to your account.
• Platform usage: As you play games, place bets and navigate the app, data about your activity is automatically logged for security and improvement purposes.
• Device and browser data: Technical information such as your IP address, device model and app version is captured automatically when you connect to the platform.
• Support interactions: When you contact our support team via live chat or email, records of those conversations are retained.
• Cookies and similar technologies: Our platform uses cookies and local storage to remember your preferences and maintain session continuity.

4Why We Use Your Data

Every piece of data we collect serves a specific, legitimate purpose. We do not collect data speculatively or "just in case". The primary reasons we process your personal information are:

• Account management: Creating and maintaining your 288min account, enabling login, tracking your balance and transaction history.
• Payment processing: Verifying deposits made via JazzCash, Easypaisa, Raast or bank transfer and processing withdrawal requests to your registered payment method.
• Identity verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. This is a standard requirement on all gaming platforms.
• Security and fraud prevention: Monitoring accounts and transactions for unusual activity, preventing unauthorised access and protecting the platform from abuse.
• Customer support: Resolving queries, disputes and technical issues raised through live chat or email.
• Platform improvement: Understanding how players use the app to improve game selection, app performance and overall user experience.
• Responsible gaming: Tracking usage patterns that might indicate a player is having difficulty managing their gaming, so that appropriate support can be offered proactively.
• Bonus and promotion management: Verifying eligibility for bonuses and ensuring that promotion terms are applied correctly and fairly.
• Legal compliance: Maintaining records as required by applicable laws and responding to legitimate requests from authorities where legally compelled.

5Legal Basis for Processing

We process your personal data on the following legal grounds depending on the purpose:

• Contractual necessity: Much of the data processing we carry out is necessary to provide the service you signed up for. Without processing your identity and payment data, we cannot operate your account or process your transactions.
• Legitimate interests: We process certain technical and usage data on the basis of our legitimate interest in operating a secure, high-quality platform and preventing fraud. We always balance this against your privacy rights.
• Legal obligation: Some processing is required by law — for example, maintaining financial records or responding to verified requests from law enforcement authorities.
• Consent: Where we rely on consent — for example, to send you promotional communications — you can withdraw that consent at any time by contacting our support team or adjusting your notification preferences in the app.

6Sharing Your Data

288min does not sell, rent or trade your personal information to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment processors: To process your deposits and withdrawals, we share relevant transaction details with JazzCash, Easypaisa, Raast and banking partners. These providers operate under their own privacy policies and data security standards.
• Game providers: Third-party game studios whose titles are available on 288min may receive anonymised session data to maintain game integrity and resolve technical disputes. They do not receive your personal identity details.
• Identity verification services: Where required, we may use third-party verification tools to confirm your identity or age. These services handle your data under strict confidentiality agreements.
• IT and hosting providers: Our platform infrastructure is supported by professional hosting and cloud service providers who may process data on our behalf under binding data processing agreements.
• Legal authorities: We may disclose your data to law enforcement, regulatory bodies or courts if we receive a legally valid request, or if we believe disclosure is necessary to prevent fraud, protect platform security or comply with applicable law.

7Payments & Financial Data

Because 288min processes real-money transactions in PKR, we take the security of financial data especially seriously. All payment transactions on 288min are handled through established Pakistani payment channels including JazzCash, Easypaisa, Raast and standard bank transfers.

We do not store full payment credentials — such as complete JazzCash PIN codes or full bank account numbers — on our own servers in retrievable plain-text form. Payment data is tokenised or masked wherever technically feasible. Sensitive financial information exchanged during a transaction is transmitted over encrypted connections.

Your registered payment method is linked to your account for the purpose of processing withdrawals back to the same channel used for your most recent deposit. This is a standard anti-money-laundering measure, not a restriction on your access to funds.

If you believe there has been an unauthorised transaction on your 288min account, contact our support team immediately via live chat. We will investigate and, where appropriate, escalate to the relevant payment provider on your behalf.

8Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter, to comply with legal obligations, resolve disputes and enforce our agreements. The general retention principles we follow are:

• Active accounts: All account and transaction data is retained for the duration of your account's active status.
• Closed accounts: After account closure, we retain core identity and financial records for a minimum period as required for anti-money-laundering and legal compliance purposes. This is typically between three and five years depending on the type of record.
• Support communications: Chat logs and email correspondence are retained for up to two years after the last interaction, to assist with future queries and dispute resolution.
• Technical logs: IP logs and device data used for security monitoring are typically retained for up to twelve months and then deleted or anonymised.

Once the relevant retention period has passed, data is securely deleted or irreversibly anonymised so that it can no longer be linked back to you personally.

9Cookies & Tracking Technologies

288min uses cookies and similar technologies to make the platform work properly and to improve your experience. A cookie is a small text file placed on your device when you visit a website or use an app. Here is how we use them:

• Essential cookies: These are required for the platform to function. They keep you logged in during a session, maintain your game state and ensure the app responds correctly. You cannot opt out of essential cookies without losing core platform functionality.
• Performance cookies: These collect anonymised data about how players move through the app — which games are most popular, where players encounter errors, how long sessions last. This data helps us improve the platform over time. No personally identifiable information is collected through performance cookies.
• Preference cookies: These remember your settings such as preferred language, last-used payment method and notification preferences, so you do not need to re-enter them every time.

You can manage cookie settings through your device's browser or app settings. Blocking all cookies may affect how certain parts of the 288min app function. For most players, the default cookie settings provide the best balance of privacy and usability.

10Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures to protect it from unauthorised access, loss, alteration or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and 288min servers is protected using industry-standard TLS encryption.
• Encryption at rest: Sensitive personal and financial data stored on our servers is encrypted at rest, meaning it cannot be read even if accessed without authorisation.
• Access controls: Access to personal data within the 288min organisation is restricted on a strict need-to-know basis. Staff who do not need access to personal data as part of their role do not have it.
• Account security: Player accounts are protected by password authentication. We strongly recommend using a unique, strong password and not sharing your login credentials with anyone.
• Fraud monitoring: Automated systems monitor account activity around the clock for signs of unusual behaviour, unauthorised access or fraudulent transactions.
• Regular reviews: Our security practices are reviewed periodically and updated as threats evolve and best practices improve.

While we do everything reasonable to protect your data, no system is completely immune to risk. If you suspect your account has been compromised, please contact our support team immediately so we can take swift action.

11Your Rights

As a 288min player, you have meaningful rights over your personal data. We are committed to honouring these rights promptly and without unnecessary barriers:

To exercise any of these rights, contact our support team at [email protected] or via live chat in the app. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days. We may need to verify your identity before processing a request to protect against unauthorised access to your data.

12Children's Privacy

288min is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their date of birth, and account verification procedures are in place to detect underage access.

If we discover that a registered account belongs to a person under 18, we will immediately suspend the account, void any transactions and delete the associated personal data. If you are a parent or guardian and believe your child has registered on 288min, please contact our support team straight away so we can act quickly.

We also encourage parents and guardians to use device-level parental controls and app restrictions to prevent minors from accessing adult gaming platforms. For more information on staying in control of your gaming habits and protecting younger family members, visit our Responsible Gaming page.

13Changes to This Privacy Policy

288min may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make changes, we will update the "Last Updated" date shown at the top of this page.

For significant changes that materially affect how your data is used, we will make reasonable efforts to notify registered players through the app or via your registered contact details before the changes take effect. Your continued use of 288min after any update constitutes acceptance of the revised policy.

We encourage you to revisit this page periodically to stay informed. If you disagree with any changes, you may close your account by contacting our support team, and we will process your request in line with our data retention obligations.

14Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch with our team:

• Live Chat: Available 24/7 through the 288min app — the fastest way to reach us for any privacy-related query.
• Email: [email protected] — for detailed data requests or formal privacy enquiries. Please include "Privacy Request" in the subject line so we can route your message correctly.
• FAQ: Visit our FAQ page for quick answers to common questions about accounts, payments and platform policies.

We aim to respond to all privacy-related enquiries within 48 hours. Formal data access or deletion requests will be fulfilled within 30 days of identity verification being completed. We appreciate your trust in 288min and are committed to handling your data with the care it deserves.