Privacy Policy – 2888pk Pakistan Gaming Platform

1 Introduction

This Privacy Policy applies to all players and visitors who use the 2888pk platform, including the website at 2888pk.win and the 2888pk mobile application for Android and iOS. It covers everything from the moment you first visit the site through to the ongoing operation of your account.

2888pk ("we", "us", "the platform") is the data controller responsible for your personal information. By registering an account or using any part of the 2888pk platform, you acknowledge that you have read this Privacy Policy and understand how your data is handled. This policy should be read alongside the Terms and Conditions and Responsible Gaming policy, both of which are part of your agreement with 2888pk.

We are committed to handling your personal data carefully and responsibly. The information we hold about you is used to run your account, process your deposits and withdrawals in PKR, and deliver the gaming services you signed up for — nothing more.

2 Data We Collect

We collect personal data in three main ways: information you give us directly, information generated automatically when you use the platform, and information provided by third-party services that help us operate.

Information you provide directly:

• Full name, date of birth and gender at registration
• Contact details — mobile number and email address
• Residential address in Pakistan
• Government-issued identity document details provided during identity verification (KYC)
• Payment account details — JazzCash number, Easypaisa account, Raast ID, bank account details or card information used for deposits and withdrawals
• Support correspondence — messages sent to 2888pk customer support via live chat or email
• Responsible gaming preferences — deposit limits, session time settings, and self-exclusion requests you set in your account

Information collected automatically:

• Device information — device type, operating system version, browser type
• IP address and approximate geographic location (city or region level)
• Session logs — login times, session duration, pages and games accessed
• Game activity — stakes placed, games played, results, bonus activations
• Transaction logs — all deposits and withdrawals with timestamps and amounts in PKR
• Cookie and tracking data — see Section 5 for full details

Information from third parties:

• Identity verification outcomes from KYC providers used to confirm your identity documents
• Payment confirmation data from JazzCash, Easypaisa, Raast, or other payment processors confirming whether a transaction was completed
• Fraud prevention signals from security and anti-fraud systems used to protect the platform and its players

3 How We Use Your Data

The personal data we hold about you is used for specific, defined purposes. We do not use your data for anything not described in this policy without first obtaining your consent.

• Account operation: Creating, maintaining and managing your 2888pk account, including login authentication and account settings.
• Payment processing: Processing deposits from and withdrawals to your registered Pakistani payment accounts — JazzCash, Easypaisa, Raast, bank transfer or cards — all in PKR.
• Identity verification: Verifying your identity as required before processing your first withdrawal or when triggered by our compliance process.
• Customer support: Responding to your queries, resolving account issues, and handling disputes or complaints.
• Responsible gaming: Applying deposit limits, cooling-off periods, session reminders and self-exclusion settings you have chosen, and monitoring for signs of problematic play patterns to prompt responsible gaming interventions where appropriate.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraud, money laundering, bonus abuse and other prohibited activity described in the Terms and Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and to improve game selection, site performance and the overall experience.
• Legal and compliance obligations: Meeting any obligations required by applicable laws or regulations, including responding to lawful requests from authorities.
• Marketing communications: Sending you promotional offers, bonus announcements and platform news — only where you have consented to receive them. You can withdraw this consent at any time through your account notification settings.

4 Payment Data & Financial Information

All financial transactions at 2888pk are conducted in PKR (Pakistani Rupees). When you make a deposit using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, the relevant payment details are processed securely.

Payment processing is handled through our payment service providers. When you deposit via JazzCash or Easypaisa, the transaction is processed through those providers' own secure systems. 2888pk receives a confirmation of the transaction rather than your full mobile wallet credentials. Similarly, card payments are processed through a PCI-DSS compliant payment gateway — full card numbers are not stored on 2888pk's systems.

We do retain enough payment account information — such as the last few digits of a card, or the registered mobile number associated with a JazzCash or Easypaisa account — to:

• Confirm that withdrawals are being sent to the correct payment method registered to your account
• Verify that deposits and withdrawals are not being made from or to third-party accounts
• Meet our record-keeping obligations in connection with financial transactions

5 Cookies & Tracking Technologies

2888pk uses cookies and similar tracking technologies on the website and in the mobile app. Cookies are small data files stored on your device that help the platform recognise you, remember your preferences, and function correctly.

The types of cookies we use include:

• Essential cookies: Required for the platform to function. These handle your login session, keep you authenticated while you play, and maintain your account preferences. The platform cannot operate without these cookies and they cannot be disabled.
• Performance cookies: Collect anonymised data about how the platform is used — which pages are visited most, how long sessions last, and where errors occur. This data helps us improve the platform. No personally identifiable information is collected by these cookies.
• Functional cookies: Remember choices you have made — such as your preferred language or notification settings — so you do not have to reset them every time you visit.
• Security cookies: Support fraud detection and prevention systems by identifying unusual patterns in how the platform is accessed from a particular device or IP address.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from working correctly. For the mobile app, cookie-equivalent data is stored in local app storage and can be cleared by uninstalling the app.

6 Data Sharing & Third Parties

2888pk does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or any organisation that has no role in delivering the 2888pk platform to you.

We share data only in the following defined circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card payment gateways receive the minimum transaction data required to process your deposits and withdrawals in PKR.
• Identity verification providers: KYC service providers receive your identity document details solely to perform the verification check. They are contractually bound to use this data only for verification purposes.
• Fraud and security providers: Anti-fraud and security systems receive device and behavioural signals to detect and prevent account compromise, bonus abuse, and money laundering.
• Technology infrastructure providers: Cloud hosting, database, and platform infrastructure providers that process data on our behalf under strict data processing agreements.
• Legal authorities: Where we are required by law to share data with government or regulatory bodies, we will comply with such lawful requests. We will inform you of any such request where we are legally permitted to do so.

All third parties with whom we share personal data are required to handle it securely and only for the purpose for which it was shared. They may not use your data for their own marketing or commercial purposes.

7 Data Security

Protecting the personal and financial data of our players is a core operational priority at 2888pk. We implement technical and organisational security measures appropriate to the sensitivity of the data we hold.

• Encryption in transit: All data transmitted between your device and 2888pk's servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this encryption is active.
• Encryption at rest: Sensitive data stored in our systems — including identity documents and payment records — is encrypted at the storage level.
• Access controls: Access to personal data within 2888pk is restricted on a need-to-know basis. Staff who handle player data are trained on data protection obligations and subject to confidentiality requirements.
• Account security: Your account is protected by a password that only you know. We strongly recommend using a unique, strong password for your 2888pk account and not reusing it on other platforms. You are responsible for keeping your login credentials confidential.
• Security monitoring: Our systems are continuously monitored for suspicious activity, unusual login patterns, and potential security incidents.

8 Data Retention

We retain your personal data for as long as your account is active and for a defined period after your account is closed. The retention period for specific data types is determined by the purpose for which the data was collected and by any applicable legal or compliance obligations.

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, in line with standard financial record-keeping requirements.
• Transaction records: All deposit and withdrawal records in PKR are retained for a minimum of five years after the transaction date.
• Game activity logs: Retained for a minimum of one year for dispute resolution purposes, and up to five years for compliance purposes.
• Support communications: Retained for three years from the date of the last communication in a support thread.
• Marketing consent records: Retained until you withdraw your consent plus a short additional period for audit purposes.

Once data is no longer required for any retention purpose, it is securely deleted or anonymised so it can no longer be linked to you personally.

9 Your Rights

As a player at 2888pk, you have the following rights regarding the personal data we hold about you. You can exercise any of these rights by contacting 2888pk support:

10 Children's Privacy

2888pk is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process requires you to confirm your date of birth, and we use identity verification to confirm the age of players before processing withdrawals.

If we discover that personal data has been collected from a player who is under 18, we will close that account immediately, delete the associated data, and forfeit any balance. Parents or guardians who believe a minor may have accessed 2888pk should contact support immediately so the account can be reviewed and closed without delay.

We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gaming platforms. Details of available tools are included on our Responsible Gaming page.

11 Marketing Communications

2888pk may send you promotional communications about bonuses, new game releases, tournaments, and platform news. We will only send marketing communications where you have given your consent to receive them — either at registration or subsequently through your account notification settings.

Marketing communications from 2888pk may be sent via:

• Email to your registered address
• SMS to your registered Pakistani mobile number
• Push notifications through the 2888pk mobile app (if you have enabled them on your device)
• In-platform notifications when you are logged in

You can unsubscribe from marketing communications at any time through the notification settings in your account, or by contacting support. Withdrawing your marketing consent does not affect the operation of your account — you will continue to receive essential account communications such as transaction confirmations and security alerts regardless of your marketing preferences.

If your account is under self-exclusion, all marketing communications are automatically suspended for the duration of the exclusion period.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how the platform operates, the data we collect, the third parties we work with, or in response to applicable legal developments. When material changes are made:

• The "Last Updated" date at the top of this page will be revised.
• For significant changes, we will notify you via your registered email address or through an in-platform notification at your next login.
• Minor clarifications may be made without direct notification.

Your continued use of 2888pk after a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and contact support to close your account and arrange withdrawal of any remaining balance.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to raise a concern about how your personal data has been handled, please contact the 2888pk support team. Support is available 24 hours a day, seven days a week via live chat within the platform.

For data-related requests — such as a request to access your data, correct it, or delete it — please contact support and allow a reasonable processing time. We may ask you to verify your identity before acting on a data rights request to ensure your data is not disclosed or altered at the request of an unauthorised party.