Privacy Policy

This Privacy Policy ("Policy") is published by 288won ("Platform", "we", "us", "our"), accessible at https://288won.cam. It describes the manner in which 288won collects, processes, stores, shares and protects personal data relating to individuals ("Data Subjects", "Users", "you") who access or use the Platform in any capacity, including as registered account holders, visitors or prospective users.

This Policy applies to all personal data processing activities conducted by 288won in connection with the operation of its online sports betting and live casino services. It should be read in conjunction with the Terms & Conditions and Responsible Gambling Policy, which together form the complete framework governing your use of the Platform.

By registering an account on 288won, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not access or continue using the Platform.

The following definitions apply throughout this Privacy Policy:

288won collects personal data through multiple channels, including directly from you during registration and account use, automatically through your device and browser, and from third parties engaged in compliance and payment processing. The categories of personal data we collect include:

3.1 Registration & Account Data

• Full name and date of birth
• Email address (used as your primary account identifier)
• Username and encrypted password
• Country of residence and, where applicable, city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
• Account preferences and communication settings

3.2 Identity Verification (KYC) Data

• Government-issued identity documents, such as a Pakistani CNIC or passport
• Proof of address documentation where required
• Selfie or liveness check imagery for identity matching
• Any additional documents requested during enhanced due diligence

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts in PKR or other supported currencies
• Payment method details (partial card numbers, mobile wallet references)
• Transaction history, including timestamps and reference numbers

3.4 Usage & Technical Data

• IP address and approximate geolocation
• Device type, browser type and operating system
• Session duration, pages viewed, clicks and navigation patterns
• Bet history, wagering activity and game interaction data

3.5 Communications Data

• Content of messages sent through Live Chat, email or the Help Center
• Support ticket history and resolution records
• Feedback and survey responses where voluntarily submitted

288won processes personal data for the following purposes:

All processing of personal data by 288won is conducted on one of the following legal bases as applicable under the data protection framework governing the operator's license jurisdiction:

• Contract Performance: Processing necessary to provide the services you have requested, including account management, payment processing and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC obligations and licensing conditions.
• Legitimate Interests: Processing conducted for purposes of fraud prevention, platform security, responsible gambling monitoring and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing conducted for marketing communications and non-essential cookies, where your explicit consent has been obtained and may be withdrawn at any time.

288won does not sell, rent or trade your personal data to unaffiliated third parties. We may, however, share personal data with the following categories of recipients in limited and controlled circumstances:

• KYC and Identity Verification Providers: Third-party verification services that process identity documents and perform liveness checks on our behalf. These providers are bound by strict data processing agreements.
• Payment Processing Partners: Entities that facilitate deposit and withdrawal transactions. Payment processors handle financial data under their own PCI-DSS certified environments.
• Fraud Prevention Services: Specialist providers engaged to detect and prevent fraudulent activity, bonus abuse and money laundering.
• Analytics Providers: Aggregated, anonymised platform usage data may be processed by analytics partners to support platform improvement. No individually identifiable data is shared for this purpose.
• Regulatory and Law Enforcement Authorities: Personal data may be disclosed to competent authorities where required by law, court order or a lawful regulatory directive. 288won will not disclose more data than is legally required in such circumstances.
• Group Companies: Where 288won operates as part of a corporate group, data may be shared internally for compliance, audit and platform administration purposes.

288won operates internationally and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have equivalent data protection standards to those applicable in the operator's license jurisdiction.

Where such transfers are necessary, 288won implements appropriate safeguards, which may include standard contractual clauses approved under the applicable data protection framework, or reliance on an adequacy decision where available. You may request further information regarding the specific safeguards applied to any such transfer by contacting the support team.

288won retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory and compliance obligations. In practice, the following general principles apply:

• Account Data: Retained for the duration of your account's active status and for a period thereafter as required by AML and licensing obligations, which may extend to five years or longer following account closure.
• KYC Documents: Retained for the minimum period required by applicable AML legislation. Raw document files are deleted promptly once verification is confirmed; records of the verification outcome are retained for compliance purposes.
• Transaction Records: Retained for a minimum of five years from the date of the transaction, in compliance with AML record-keeping requirements.
• Communications Data: Support interactions are typically retained for up to two years to enable quality assurance and dispute resolution.
• Marketing Data: Retained until you withdraw consent to receive marketing communications or for a maximum of two years following your last active engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

288won uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable us to recognise your browser, maintain your session and deliver a consistent user experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable session management, authentication and security features. They cannot be disabled without significantly impairing your use of the Platform.
• Analytical / Performance Cookies: Used to collect aggregated, anonymised data on how users interact with the Platform, including page views, session duration and navigation paths. This data informs platform improvement efforts.
• Functional Cookies: Used to remember your preferences, such as language settings or display options, to personalise your experience.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotional content. These cookies are not set without prior consent.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. Most modern browsers provide options to block, delete or review cookies stored on your device.

Subject to the data protection framework applicable in the operator's license jurisdiction and any overriding legal obligations, you hold the following rights in relation to your personal data:

To exercise any of these rights, please contact the 288won support team via Live Chat or email at [email protected]. We will respond to all valid requests within the timeframe required by applicable law. We may need to verify your identity before processing your request.

288won implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encrypted storage of account credentials using industry-standard hashing algorithms;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring;
• Two-factor authentication available for all registered accounts;
• Secure document handling procedures for KYC materials.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. While 288won takes reasonable steps to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised use of your account.

The 288won Platform is strictly intended for adults aged 18 years or above, or such higher minimum age as may be required by the operator's applicable license jurisdiction. We do not knowingly collect personal data from persons below the applicable minimum age.

Age verification is a mandatory component of the KYC process. If we become aware or have reasonable grounds to suspect that personal data has been collected from a person below the minimum age, we will take immediate steps to delete that data and close the associated account. If you believe that data relating to a minor has been submitted to the Platform, please contact us at [email protected] immediately.

With your consent, 288won may send you promotional communications relating to platform offers, new features, sports betting promotions, live casino events and responsible gambling information. Marketing communications are sent by email and, where applicable, through in-platform notifications.

You may withdraw your consent to receive marketing communications at any time by:

• Using the unsubscribe link included in all marketing emails;
• Updating your communication preferences through your account settings;
• Contacting the support team via Live Chat or at [email protected].

Withdrawal of consent to marketing does not affect the lawfulness of any processing conducted prior to the withdrawal. You will continue to receive non-promotional service communications, such as account security alerts, transaction confirmations and KYC notifications, regardless of your marketing preferences.

288won will never share your contact information with unaffiliated third parties for the purpose of sending you their marketing communications.

288won reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform operations or data processing practices. The "Last Reviewed" date at the top of this Policy will be updated with each revision.

Where material changes are made to this Policy, 288won will provide notice to registered users through the platform interface or by email to the registered address. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree to the amended Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the 288won support team through any of the following channels:

• Live Chat: Available directly within the Platform interface, 24 hours a day.
• Help Center: A self-service knowledge base covering data and privacy topics, accessible at any time.
• Email: [email protected] — please include "Privacy Request" in the subject line. Use your registered email address when submitting requests.

Support is available in English and Urdu. For formal data subject requests, including access, erasure and portability requests, please submit your communication in writing via email so that we maintain a clear record of your request and our response.

If you believe that your data has been processed unlawfully or that your privacy rights have not been respected, you have the right to lodge a complaint with the supervisory authority or data protection regulator relevant to the operator's license jurisdiction. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a regulatory body.