288min Privacy Policy
How We Handle Your Data

Section 01

Who We Are

288min ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://288min.vip (the "Platform"). 288min is the data controller responsible for the personal data you provide when registering, depositing, playing, or otherwise interacting with the Platform.

This Privacy Policy explains how 288min collects, uses, stores, shares, and protects personal data belonging to users ("you", "your") who access the Platform from Pakistan and other permitted jurisdictions. It applies to all 288min services including sports betting, live casino, slot games, Callbreak Quick, and all related account and payment functions.

By creating a 288min account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform immediately.

Section 02

Personal Data We Collect

288min collects personal data through several channels: directly from you when you register and use the Platform, automatically via technical means as you interact with the Platform, and from third-party verification and payment partners. The categories of data collected are as follows:

288min does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming self-assessment you voluntarily complete.

Section 03

How We Use Your Personal Data

288min uses your personal data for the following purposes. Each purpose is linked to a specific legal basis, which is detailed in Section 04.

• Account creation and management: To register your account, verify your identity, maintain your account balance in PKR, and provide access to all Platform features.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Financial data is shared with payment processors solely for this purpose.
• Identity verification (KYC): To comply with our international gaming licence obligations, which require us to verify the identity and age of all registered users prior to permitting withdrawals.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity and fulfil our reporting obligations under applicable AML regulations.
• Fraud prevention: To detect and prevent fraudulent account activity, bonus abuse, and the use of multiple accounts by the same individual.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer self-exclusion and limit-setting requests.
• Customer support: To respond to your queries, complaints, and support requests via email and live chat.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the 288min Platform.
• Marketing communications: To send you promotional emails and notifications about 288min offers — only where you have provided explicit consent at registration or subsequently opted in.

Section 04

Legal Basis for Processing

288min processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 288min — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence obligations, including KYC, AML, and responsible gaming requirements.
• Legitimate interests: Processing carried out for 288min's legitimate business interests, including fraud prevention, platform security, and general analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time.

Where 288min relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental privacy rights. The results of these assessments are available on written request to support@288min.vip.

Section 05

Data Sharing & Third Parties

288min does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the relevant purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial and identity data necessary to process your deposits and withdrawals. These parties process data under their own privacy policies and applicable Pakistani financial regulation.
• KYC and identity verification partners: 288min uses accredited third-party KYC service providers to perform identity and age verification. These partners receive only the identity documents and biometric data strictly required for verification and are contractually prohibited from using that data for any other purpose.
• Game content providers: Third-party game studios whose content is available on the 288min Platform receive anonymised session identifiers for game integrity and RTP auditing purposes. They do not receive your name, contact details, or financial information.
• Regulatory and law enforcement authorities: 288min will disclose personal data to competent authorities where required by law, court order, or the terms of our gaming licence — including AML reporting obligations.
• IT and infrastructure service providers: Cloud hosting and cybersecurity partners who process data on 288min's behalf under binding data processing agreements.

Section 06

Cookies & Tracking Technologies

The 288min Platform uses cookies and similar tracking technologies to operate core platform functionality, remember your session, and analyse Platform usage. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming limits previously set. Disabling these cookies will reduce Platform functionality.
• Analytics cookies: Collect anonymised data about how users interact with the Platform — which pages are visited, how long sessions last, and which features are used most frequently. This data is used to improve the Platform. You may opt out of analytics cookies via your browser settings.
• Marketing cookies: Used only where you have explicitly consented to receive promotional communications. These cookies help 288min show you relevant offers based on your gaming history. You may withdraw consent at any time.

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from operating correctly. 288min does not use third-party advertising network cookies or cross-site tracking technologies.

Section 07

Data Retention

288min retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and gaming licence record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping requirements.
• Gaming history: Retained for three (3) years following account closure, for the purposes of dispute resolution and responsible gaming monitoring.
• Support communications: Retained for two (2) years from the date of the communication, unless the communication relates to an ongoing dispute or regulatory matter.
• Technical and log data: Retained for twelve (12) months for fraud detection and platform security purposes, then deleted or anonymised.
• Self-exclusion records: Retained permanently to prevent re-registration by self-excluded users. This is a responsible gaming and regulatory requirement.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical and research purposes.

Section 08

Data Security

288min implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 288min's servers is encrypted in transit. The Platform enforces HTTPS across all pages.
• AES-256 encryption at rest: All personal data, financial records, and identity documents stored on 288min's servers are encrypted at rest using AES-256.
• Access controls: Access to personal data within 288min's systems is restricted on a strict need-to-know basis. All internal access events are logged and subject to periodic audit.
• Two-factor authentication (2FA): 288min offers 2FA for all registered accounts and strongly encourages its use. Certain high-value withdrawal requests may require 2FA completion.
• Penetration testing: 288min conducts periodic independent penetration testing of the Platform's infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach, 288min will notify affected users and relevant authorities within the timeframes required by applicable data protection law.

Section 09

Your Data Rights

As a 288min user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at support@288min.vip with your registered account username and a clear description of your request. We will respond within thirty (30) days.

Please note that some rights are subject to exceptions and may be limited where 288min has overriding legal obligations — for example, the right to erasure does not apply to data we are required to retain under AML and gaming licence regulations.

Section 10

Children & Minors

The 288min Platform is strictly for adults aged 21 years and above. 288min does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the registration and withdrawal process to enforce this requirement.

If 288min becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted, the associated account will be suspended, and any balance will be handled in accordance with applicable regulatory guidance. Parents or guardians who believe that a minor has registered on the 288min Platform should contact us immediately at support@288min.vip.

Section 11

International Data Transfers

288min operates under an international gaming licence, and some of the third-party service providers we use — including cloud infrastructure providers and KYC partners — may process your personal data outside of Pakistan. Where personal data is transferred internationally, 288min ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that require the recipient to apply data protection standards equivalent to those observed by 288min.
• Transfer only to jurisdictions or service providers that offer an adequate level of data protection as assessed by 288min's compliance function.
• Where required, obtaining your explicit consent to the international transfer prior to processing.

If you wish to obtain further information about the safeguards in place for any specific international data transfer, please contact us at support@288min.vip.

Section 12

Updates to This Privacy Policy

288min may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where updates are material — meaning they substantively affect your rights or how your data is used — we will notify you by email to your registered address and display a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Non-material updates, such as typographical corrections or clarifications that do not alter the substance of any provision, may take effect immediately upon publication. The effective date at the top of this policy will always reflect the date of the most recent update.

Your continued use of the 288min Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree to the updated policy, please cease using the Platform and request account closure in accordance with the 288min Terms & Conditions.

Section 13

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected data breach or privacy concern, please contact the 288min data team using the details below:

• Email: support@288min.vip
• Platform: https://288min.vip
• Response time: We aim to acknowledge all privacy-related requests within two (2) business days and provide a substantive response within thirty (30) days.

When contacting us about a data rights request, please include your registered 288min username and a clear description of your request to allow us to locate your records promptly and respond accurately. For identity verification purposes, we may request a copy of your CNIC before actioning certain requests such as data access or erasure.

If you are not satisfied with 288min's response to a data rights request or privacy concern, you may escalate the matter to the relevant data protection authority or gaming regulator under the jurisdiction of 288min's international gaming licence.