Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by 288min ("288min", "we", "us" or "our"), the operator of the online betting and live casino information platform accessible at https://288min.cam (the "Platform").

We are committed to protecting the personal data of every individual who interacts with the 288min Platform — whether you are a registered Account holder, a visitor browsing informational content, or a person who contacts our support team. This Policy sets out, in clear and accessible English, how we collect, process, store, share and protect personal information, and what rights you hold in relation to that information.

By registering an Account or otherwise using the Platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, please do not use the Platform.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — the data subject. This includes name, date of birth, contact details, financial information and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means 288min, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of 288min under a binding agreement, such as a payment processor or identity verification provider.
• "KYC" means Know Your Customer — the identity verification process required under applicable anti-money laundering obligations.
• "Account" means the registered user account created on the Platform.
• "Cookie" means a small text file stored on your device by a web browser, used to record information about your visit to the Platform.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3. Personal Data We Collect

288min collects Personal Data through several channels: directly from you during registration and account use; automatically through your interaction with the Platform; and from third-party verification providers where required by our KYC/AML obligations.

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, national identity card details, passport number	Registration form; KYC document upload
Contact Data	Email address, telephone number, residential address (including city: Karachi, Lahore, Islamabad, etc.)	Registration form; account settings
Financial Data	Payment method details, transaction history, deposit and withdrawal amounts (PKR), bank account references	Cashier; payment processor integration
Account Activity Data	Bets placed, games played, session durations, bonus usage, responsible gambling tool settings	Platform usage; automated logging
Technical Data	IP address, device type, browser type and version, operating system, time zone	Automatic collection via server logs and cookies
Communications Data	Support chat logs, email correspondence, complaint records	Customer support interactions
Verification Data	Copies of identity documents submitted for KYC purposes	Document upload; third-party identity verification

We do not knowingly collect Sensitive Personal Data (such as racial or ethnic origin, political opinions, health data or biometric data) except where strictly required by our KYC/AML obligations, in which case such data is handled with additional safeguards.

4. Legal Basis for Processing

We process Personal Data only where we have a valid legal basis to do so. The primary legal bases on which 288min relies are as follows:

• Performance of a Contract: Processing necessary to register your Account, manage your deposits and withdrawals, settle bets and provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML verification, fraud prevention and reporting obligations under the licensing framework applicable to 288min's operating jurisdiction.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention, responsible gambling monitoring and internal analytics, where those interests are not overridden by your rights.
• Consent: Where you have given specific, informed consent — for example, to receive promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

Personal Data collected by 288min is used for the following purposes:

• Account Management: To create, verify and maintain your Account; to authenticate your identity at login; and to process deposits, withdrawals and bet settlements.
• KYC & AML Compliance: To verify that you meet eligibility requirements (including age verification — 18+ only, or the higher minimum required by the operator's licence jurisdiction), to detect and prevent money laundering, and to comply with applicable financial crime regulations.
• Customer Support: To respond to your queries, complaints and feedback through our 24/7 support channels (available in English and Urdu).
• Responsible Gambling: To monitor account activity for signs of problematic gambling behaviour; to implement deposit limits, loss limits, session timers and self-exclusion settings you have requested; and to proactively contact users where our monitoring identifies concerns.
• Security & Fraud Prevention: To detect suspicious transactions, prevent account compromise and investigate any potential breach of our Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the Platform's features, performance and user experience.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, game announcements and platform updates. You may opt out of marketing communications at any time.
• Legal & Regulatory: To meet reporting and record-keeping obligations under applicable licensing and regulatory requirements.

6. Data Sharing & Third-Party Disclosure

288min does not sell your Personal Data to third parties. We may share data in the following limited and controlled circumstances:

• Payment Processors: Where payment methods such as bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah), mobile wallets (Easypaisa, JazzCash, Raast) or cryptocurrency processors are used, your transaction data is shared with the relevant processor solely to execute the transaction. These providers are bound by their own privacy obligations and do not receive data beyond what is necessary.
• Identity Verification Providers: For KYC purposes, document data may be shared with approved third-party identity verification services operating under binding data processing agreements with 288min.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, a court order or a legitimate request from a regulatory authority in 288min's licensing jurisdiction, we may disclose Personal Data as required. We will not make such disclosures beyond what is legally compelled.
• Fraud Prevention Services: Aggregated or anonymised data may be shared with industry-standard fraud detection networks for the purpose of identifying patterns of fraudulent activity.
• Corporate Transactions: In the event of a merger, acquisition or transfer of business assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

288min uses cookies and similar tracking technologies to operate the Platform, enhance your experience and analyse usage patterns. The types of cookies we use are:

• Strictly Necessary Cookies: Essential to the basic functionality of the Platform, including session management, login authentication and security. These cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, display preferences and responsible gambling tool configurations.
• Analytics Cookies: Used to collect anonymised data about how visitors interact with the Platform — pages visited, session duration, device type — for the purpose of improving performance. Data collected is aggregated and not linked to individual users.
• Marketing Cookies: Where you have provided consent, these cookies help us present relevant promotional content on the Platform. You may withdraw consent at any time through the cookie preference centre.

Most browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the Platform. For full details of the cookies in use, please refer to our Cookie Preference Centre accessible from the Platform footer.

8. Data Retention

288min retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations. In practice, this means:

• Account Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Retained for the period required by the applicable licensing jurisdiction's AML regulations, typically five (5) years from the end of the business relationship.
• Support Communications: Retained for up to three (3) years following resolution of the support interaction, unless the matter is subject to ongoing legal or regulatory proceedings.
• Marketing Preferences: Consent records retained for as long as you hold an Account, or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data governance procedures.

9. Data Security

288min implements technical and organisational security measures appropriate to the risk associated with the processing of your Personal Data. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and the Platform.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Two-factor authentication options for Account access.
• Incident response procedures for detecting, reporting and managing any Personal Data breach.

10. Your Rights as a Data Subject

Subject to applicable law and the conditions of your jurisdiction, you hold the following rights in relation to your Personal Data held by 288min:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances — for example, while a rectification request is pending.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our support team. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases we may extend this period by a further 30 days, with notice provided to you. We will not charge a fee for reasonable requests.

11. Minors & Age Verification

The 288min Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction or by the laws of your own jurisdiction, whichever is greater. We do not knowingly collect Personal Data from minors.

Age verification is conducted as part of the KYC process for all Account holders. Where we become aware that an Account has been registered by, or on behalf of, a person under the minimum age, we will immediately suspend that Account, void any associated bets or transactions and securely delete Personal Data associated with the Account to the extent permitted by law.

If you are a parent or guardian and believe that a minor has registered on the Platform using your details or without your knowledge, please contact us immediately at [email protected].

12. International Data Transfers

288min operates from a jurisdiction outside Pakistan. When you use the Platform, your Personal Data will be transferred to and processed in the jurisdiction where 288min is incorporated and operates its infrastructure. Where data is transferred internationally, we ensure that appropriate safeguards are in place — including contractual protections consistent with recognised international data transfer frameworks — to maintain the protection of your Personal Data to a standard equivalent to this Policy.

Where third-party Data Processors are located in jurisdictions other than 288min's primary operating jurisdiction, we ensure that any such transfer is subject to binding data processing agreements that impose equivalent data protection obligations on those processors.

13. Amendments to This Policy

288min reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or platform functionality. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — for example, if we introduce a new category of data processing or a new sharing arrangement — we will notify registered Account holders via the email address associated with their Account and/or through a prominent notice on the Platform. Your continued use of the Platform following notification of any material amendment constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically so that you remain informed about how your Personal Data is being handled.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the 288min Data Privacy team using the following details. Our support team is available 24 hours a day, 7 days a week, in both English and Urdu.

Email: [email protected]  (plain text only — not a clickable link)

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line, along with your registered email address and a clear description of your query. We aim to acknowledge all privacy-related correspondence within 5 business days.

If you remain dissatisfied following our response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in 288min's licensing jurisdiction, as specified in our regulatory disclosures.