Privacy Policy — How 288bit Handles Your Data

1 Introduction

288bit, operating through the domain 288bit.win, is committed to protecting the privacy of all registered players and visitors. This Privacy Policy explains how we collect, use, store and protect your personal information when you use the 288bit platform, including sports betting on cricket, PSL, T20 internationals, football and esports, and live casino services.

By registering an account on 288bit, depositing funds or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here.

This policy applies to all data collected through the 288bit website and mobile app. It should be read alongside the Terms and Conditions, which govern the overall use of the platform.

2 Data We Collect

288bit collects personal data in several ways — directly from you when you register or interact with the platform, and automatically through your use of the site and app. The categories of data we collect include:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs or health data, unless specifically required for responsible gaming purposes and with your explicit consent.

3 How We Use Your Data

288bit uses the data we collect for the following purposes:

• Account management — creating and maintaining your player account, verifying your identity and age, and managing login and access.
• Payment processing — handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers and cards; verifying payment source and preventing fraud.
• Platform delivery — providing sports betting markets including cricket, PSL and T20, live casino services, and the 288bit app experience.
• Customer support — responding to queries, resolving disputes, and maintaining records of communications for quality and training purposes.
• Security and fraud prevention — detecting and preventing unauthorised account access, money laundering, bonus abuse and other fraudulent activity.
• Responsible gaming — monitoring betting patterns to identify signs of problem gambling and applying tools such as deposit limits or self-exclusion where appropriate.
• Legal compliance — maintaining transaction records and identity verification data as required by anti-money laundering obligations and financial record-keeping requirements.
• Platform improvement — analysing aggregate usage patterns to improve site performance, product features and user experience. This analysis uses anonymised or aggregated data wherever possible.

4 Legal Basis for Processing

288bit processes your personal data on the following legal bases:

• Contractual necessity — processing required to provide the services you signed up for, including account creation, betting services and payment processing in PKR.
• Legal obligation — processing required to comply with anti-money laundering laws, financial record-keeping requirements and identity verification obligations.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring and aggregate analytics. We balance these interests against your privacy rights and do not override them.
• Consent — where we request specific consent for particular types of processing, such as optional marketing communications, you may withdraw that consent at any time by contacting support.

5 Sharing Your Data

288bit does not sell your personal data. We share it only in the following limited circumstances and only to the extent necessary:

• Payment processors — JazzCash, Easypaisa, Raast, bank partners and card processors receive the financial data needed to complete your PKR transactions. These providers operate under their own privacy and security standards.
• Identity verification providers — third-party KYC (Know Your Customer) services that verify identity documents and CNIC information as part of the account verification process.
• Technology providers — cloud hosting, live casino game studios and app infrastructure providers who process data on our behalf under contractual data processing agreements.
• Legal and regulatory authorities — where we are required by applicable law, court order or regulatory request to disclose information, we will do so. We will notify you where legally permitted to do so.
• Business transfers — in the event of a merger, acquisition or sale of assets, your data may be transferred as part of the transaction. You will be notified of any such change in data controller.

6 Payment Data

All financial transactions on 288bit are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast, bank transfer or card, we collect the financial identifiers necessary to process that transaction.

288bit does not store full card numbers, CVV codes or complete bank account credentials on our own servers. This data is handled directly by our PCI DSS-compliant payment processing partners. We retain transaction reference numbers, amounts, timestamps and payment method types for account records and financial compliance purposes.

If you request a withdrawal and identity verification is required, we may ask you to provide documentation confirming the ownership of your payment account. This is a standard security measure to prevent fraudulent withdrawal requests and to comply with anti-money laundering procedures.

• Payment data is retained in line with financial record-keeping requirements.
• Transaction history is accessible within your 288bit account dashboard.
• Disputed transactions should be reported to support within 30 days of the transaction date.

7 Cookies and Tracking

288bit uses cookies and similar tracking technologies on the website and app to deliver and improve the platform experience. The categories of cookies we use are:

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in and security cookies that help protect your account. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, default sports markets and display options. These improve your experience but are not strictly necessary.
• Analytics cookies — collect anonymised data about how players use the platform, which pages are visited most frequently, and where technical errors occur. This information helps us improve the platform.
• Security cookies — used to detect and prevent fraudulent login attempts, bot activity and unusual account behaviour.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform properly. Analytics and functional cookies can generally be disabled without preventing core platform access.

8 Data Retention

288bit retains your personal data for as long as your account is active and for a minimum period after account closure as required by legal and compliance obligations. Specific retention periods include:

• Account and identity data — retained for the duration of the account and for a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records — PKR deposit and withdrawal records, including JazzCash and Easypaisa transactions, are retained for a minimum of five years.
• Betting history — individual bet records are retained for a minimum of two years from the date of the bet.
• Support communications — email and chat records are retained for two years from the date of the last communication.
• Technical logs — server and access logs are retained for up to 12 months for security and fraud investigation purposes.

Once the applicable retention period has passed and there is no legal reason to retain data further, it is securely deleted or anonymised.

9 Data Security

288bit implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss or destruction. Our security approach includes:

• SSL/TLS encryption on all data transmitted between your device and 288bit servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Strict internal access controls — only staff with a legitimate need can access player personal data.
• Regular security assessments and vulnerability reviews of the platform infrastructure.
• Two-factor authentication options available for player accounts.
• Payment data handled exclusively by PCI DSS-compliant payment processors.

Despite these measures, no system is completely immune to security risks. You are responsible for keeping your own account credentials secure. If you suspect your account has been compromised, contact 288bit support immediately using the email address in the footer.

10 Your Privacy Rights

As a 288bit player, you have the following rights over your personal data. To exercise any of these rights, contact support using the email address in the footer:

288bit will respond to all data rights requests within 30 days. In complex cases this may be extended, and we will notify you if that is the case. There is no charge for submitting a data rights request.

11 Children and Minors

288bit is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation of age, and identity verification checks are performed to support this.

If we become aware that personal data has been collected from a person under 18, that account will be closed immediately, the data will be deleted, and any deposits will be returned through the original payment method where technically possible.

12 Updates to This Policy

288bit may update this Privacy Policy from time to time to reflect changes in our data practices, technology or legal requirements. When material changes are made, we will provide notice to registered players via the platform or by email to the registered account address, with a minimum of 7 days' notice where feasible.

The date of the most recent update is shown at the top of this page. Continued use of 288bit following notification of a policy update constitutes acceptance of the revised policy. If you disagree with the changes, you may contact support to close your account.

We recommend checking this page periodically to stay informed about how your data is being handled.

13 Contact Us

For any privacy-related queries, data rights requests, or concerns about how your personal information is handled on 288bit, please contact our support team using the email address displayed in the footer of this page.

When submitting a data rights request, please include your registered email address, account username and a clear description of your request. This helps us locate your records and respond accurately within the 30-day response window.

For general platform queries, account issues or withdrawal support, you can also reach us through the same support contact. See our FAQ page for answers to common questions before getting in touch.