288bit Privacy Policy

1Who We Are

288bit is an online gaming and sports betting platform operated for players in Pakistan. The platform offers slot games, live casino, and sports betting — with a particular focus on cricket, PSL, and T20 markets — all transacted in PKR using local payment methods.

When this Privacy Policy refers to "288bit", "we", "us", or "our", it means the operating entity responsible for running the 288bit platform. When it refers to "you" or "the player", it means any individual who has registered an account, visited the platform, or interacted with 288bit in any capacity.

This Privacy Policy applies to all data collected through the 288bit website, platform features, customer support interactions, and any communications between you and 288bit. It should be read together with the Terms and Conditions which govern the overall relationship between you and the platform.

2Data We Collect

288bit collects personal data through several routes — directly from you when you register or interact with the platform, automatically when you use the platform, and occasionally from third-party verification or payment services. Here is a breakdown of the categories of data we collect:

We collect only the data that is genuinely necessary for the purposes described in this policy. We do not collect sensitive categories of data such as biometric data, racial or ethnic origin, or religious beliefs unless specifically required by a legal obligation.

3How We Use Your Data

The personal data we collect is used for specific, legitimate purposes. We do not use your data for any purpose incompatible with the reasons it was originally collected. Here is how each category of data is put to use at 288bit:

• Account management: Your identity and contact data allows us to create, maintain, and secure your player account, send you important account notifications, and respond to your support requests.
• Identity verification (KYC): Before processing withdrawals, we are required to verify that the account belongs to the person who registered it. This involves checking identity documents and matching them against the account details we hold.
• Payment processing: Financial data is used to process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, and other supported methods. Transaction records are maintained for financial and security audit purposes.
• Platform security and fraud prevention: Technical and usage data helps us detect unusual account activity, prevent unauthorised access, identify potential fraud or bonus abuse, and protect the platform and all players using it.
• Responsible gaming: Usage data — including deposit frequency, session lengths, and betting patterns — may be monitored to identify players who may benefit from responsible gaming tools or support.
• Platform improvement: Aggregated and anonymised usage data helps us understand how players interact with the platform so we can improve the experience, fix issues, and develop new features.
• Promotional communications: If you have opted in to marketing communications, we may send you information about promotions, cricket betting offers, PSL specials, or new slot game releases. You can opt out at any time through your account settings.

4Legal Basis for Processing

Every time 288bit processes your personal data, there is a legal basis for doing so. The main bases we rely on are:

• Contractual necessity: Most data processing is necessary to perform the contract between you and 288bit — specifically, to operate your account, process transactions in PKR, and deliver the gaming services you signed up for.
• Legal obligations: Some processing — particularly identity verification and financial record-keeping — is required in order to comply with applicable laws and to operate responsibly as a platform.
• Legitimate interests: We process certain technical and usage data on the basis of our legitimate interest in keeping the platform secure, preventing fraud, and improving the service — provided this does not override your fundamental privacy rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your consent. You can withdraw consent at any time without it affecting your ability to use the platform.

5Data Sharing and Third Parties

288bit does not sell, rent, or trade your personal data. However, we do share certain information with trusted third-party service providers where it is necessary to operate the platform. All third parties we work with are required to handle your data securely and only for the specific purpose for which it was shared.

• Payment processors: To process your PKR deposits and withdrawals, your payment details are shared with the relevant payment provider — such as JazzCash, Easypaisa, or your bank for Raast or bank transfer transactions.
• Identity verification providers: Third-party KYC service providers may process your identity documents to complete verification before withdrawals are released.
• Platform infrastructure providers: Hosting, security, and technical infrastructure partners may have limited access to platform data as part of maintaining the technical systems that power 288bit.
• Game providers: When you play a casino game or slot, the game content is delivered by a third-party game studio. These studios may receive your account identifier and game session data for the purpose of delivering the game and maintaining game integrity.
• Legal and regulatory disclosure: In the event that we are required by law or by a valid legal process to disclose information, we will do so. We will notify affected users where we are legally permitted to do so.

6Payment Data and PKR Transactions

All financial transactions at 288bit are conducted in Pakistani Rupees (PKR). Payment data — including your JazzCash mobile number, Easypaisa wallet reference, Raast ID, or bank account details — is collected and stored securely for the following purposes:

• To process incoming deposits to your 288bit account balance
• To process outgoing withdrawals back to your registered payment method
• To maintain transaction records for audit, dispute resolution, and security review purposes
• To verify that withdrawal requests are being made to a payment account registered in the same name as the 288bit account

288bit does not store full card numbers or complete bank account credentials on its own servers. Payment data is handled by our payment processing partners who maintain their own security standards. Where card or wallet tokenisation is used, only a secure reference token is stored — not the underlying sensitive financial detail.

7Cookies and Tracking

288bit uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience. Cookies are small text files stored on your device when you visit the platform.

• Essential cookies: These are required for the platform to operate. They manage your login session, keep you authenticated as you navigate the site, and maintain your account preferences. These cannot be disabled without breaking core platform functionality.
• Performance cookies: These collect anonymised data about how players use the platform — which pages are visited most, how long sessions last, and where errors occur. This data helps us identify and fix issues and improve platform speed and reliability.
• Functional cookies: These remember your preferences — such as language settings and preferred game categories — so you do not have to reset them each time you visit.
• Marketing cookies: With your consent, these cookies allow us to personalise promotional content based on your activity on the platform. You can withdraw consent for marketing cookies at any time through your browser settings or account preferences.

You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform. Disabling non-essential cookies will not prevent you from accessing your account or using any features.

8Data Retention

288bit retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to meet any legal or operational obligations. The following general retention guidelines apply:

• Active accounts: Personal data is retained for the full duration that your account remains active on the platform.
• Closed accounts: Following account closure, core identity and transaction data is retained for a minimum period of five years to meet financial record-keeping obligations and to handle any post-closure disputes or queries.
• Marketing preferences: If you opt out of marketing communications, your opt-out preference is recorded and retained indefinitely so that we do not accidentally re-subscribe you to communications you have declined.
• Support communications: Records of customer support interactions are retained for a reasonable period after the interaction is resolved, typically up to two years, to allow for follow-up queries or escalations.
• Technical logs: Platform access logs and technical data are retained for a shorter period — generally 90 days — unless a specific security or fraud investigation requires them to be held longer.

Once the applicable retention period has expired and there is no legal reason to continue holding the data, 288bit will securely delete or anonymise your personal information.

9Data Security

288bit takes the security of your personal information seriously. We implement a range of technical and organisational measures to protect your data from unauthorised access, loss, misuse, or disclosure. These include:

• Encryption: All data transmitted between your device and the 288bit platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data stored on our systems is encrypted at rest.
• Access controls: Access to personal data within 288bit is restricted to authorised personnel who have a genuine operational need to access it. Access rights are reviewed regularly.
• Secure payment handling: Payment data is processed through certified, secure payment gateways. 288bit does not directly handle raw card numbers or full banking credentials.
• Account security: Player accounts are protected by password authentication. We strongly encourage players to use a strong, unique password and to avoid sharing their login credentials with anyone.
• Monitoring and incident response: We monitor the platform for suspicious activity and have procedures in place to respond to security incidents. In the event of a data breach that affects your personal information, we will notify you as required by applicable procedures.

10Your Privacy Rights

As a player registered with 288bit, you have a number of rights in relation to your personal data. These rights can be exercised by contacting the 288bit support team. We will respond to all valid requests within a reasonable timeframe.