2888pa Privacy Policy

2888pa ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at 2888pa.net. 2888pa serves English-speaking players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions of the country.

For the purposes of this Privacy Policy, 2888pa acts as the data controller in respect of the personal data collected from players who register and use our platform. As data controller, 2888pa determines the purposes and means by which personal data is processed.

This Privacy Policy applies to all personal data collected via the 2888pa website, mobile-optimised platform, customer support communications, and any other service provided under the 2888pa brand. It should be read in conjunction with the 2888pa Terms & Conditions, which form part of the overall legal framework governing your use of the platform.

2888pa collects personal data from you in the following categories. The specific data collected depends on your level of interaction with the platform:

We do not collect sensitive personal data such as biometric data, medical information, political opinions, or religious beliefs, except where strictly required by our regulatory obligations and with your explicit consent.

2888pa uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 2888pa platform.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, and bank transfers, and to facilitate withdrawal requests to your verified payment method.
• KYC and AML compliance: To fulfil our obligations under applicable anti-money laundering regulations and international gaming licence requirements, including identity and source-of-funds verification.
• Service delivery: To provide access to casino games, sports betting markets, bingo, and all other 2888pa platform features.
• Customer support: To respond to your queries, complaints, and requests through our 24/7 support team.
• Responsible gaming monitoring: To identify patterns that may indicate problem gambling behaviour and to proactively offer responsible gaming tools or interventions where appropriate.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Marketing communications: To send you relevant promotions, bonus offers, and platform updates, subject to your marketing communication preferences (see Section 12).
• Legal and regulatory obligations: To comply with requests from regulatory authorities and to exercise or defend legal claims.

2888pa processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:

• Contract performance: Processing necessary to provide the services you have registered for, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable laws, gaming licence conditions, AML regulations, and regulatory reporting obligations.
• Legitimate interests: Processing undertaken for our legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

The 2888pa platform uses cookies and similar tracking technologies to support its functionality, improve user experience, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function correctly — including session management, security tokens, and login state. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings, display options, and game history to personalise your 2888pa experience.
• Analytics cookies: Collect anonymised data on how players navigate and use the 2888pa platform, helping us identify areas for improvement. No personally identifiable information is collected via analytics cookies.
• Marketing cookies: Used to track the effectiveness of promotional campaigns and to avoid showing you redundant offers. These are only activated where you have provided consent.

You can manage your cookie preferences through your browser settings at any time. Disabling cookies beyond strictly necessary ones may affect some platform functionality but will not prevent you from accessing core 2888pa services.

2888pa does not sell your personal data to any third party. We may share your data with the following categories of trusted third parties where strictly necessary:

• Identity verification providers: Licensed KYC and AML service providers that process identity documents and biographic data on our behalf to fulfil regulatory verification requirements.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers involved in processing your PKR deposits and withdrawals.
• Game software providers: Third-party gaming studios and RNG certification labs that supply and audit the games available on the 2888pa platform. These providers may receive limited session and game data for audit and fairness verification purposes.
• Regulatory and law enforcement authorities: Where required by our gaming licence, applicable law, or a valid legal order, 2888pa will disclose relevant player data to the competent authority.
• Technology and hosting providers: Cloud infrastructure and IT service providers who host 2888pa's platform and data under strict data processing agreements with 2888pa.

As a platform operating under an international gaming licence, some of 2888pa's data processing activities may involve transferring personal data to countries outside Pakistan. Where such transfers occur, 2888pa ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.

Safeguards applied to international transfers include:

• Data processing agreements that incorporate internationally recognised standard contractual clauses
• Transfers only to jurisdictions that maintain adequate data protection standards recognised by the relevant gaming regulatory authority
• Encryption of data in transit and at rest for all cross-border transfers

If you wish to obtain further information about the specific safeguards applied to any international transfer of your data, please contact our data protection team using the details provided in Section 14.

2888pa retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by regulatory obligations:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in line with AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years following the date of each transaction, in line with standard financial record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years from the date of last verification, or longer where required by a specific regulatory request.
• Communications and support records: Retained for 3 years from the date of the communication, unless the matter relates to an unresolved dispute or legal proceeding.
• Cookies and analytics data: Session cookies are deleted when you close your browser. Persistent cookies and analytics data are retained for a maximum of 12 months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in line with 2888pa's internal data lifecycle management procedures.

As a 2888pa player, you hold the following rights in respect of your personal data. These rights can be exercised by submitting a written request to the contact address provided in Section 14:

• Right of Access: You have the right to request a copy of the personal data 2888pa holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to overriding legal and regulatory obligations that may require 2888pa to retain certain data.
• Right to Data Portability: You have the right to request that data you have provided to 2888pa be transferred to you or to another controller in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Restrict Processing: In certain circumstances, you have the right to request that 2888pa restricts processing of your data while a query or complaint is being resolved.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 2888pa platform is strictly for individuals aged 21 years and above. 2888pa does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory element of the KYC process for all accounts.

2888pa implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Layer Security (TLS 1.2+): All data transmitted between your device and 2888pa is encrypted in transit.
• AES-256 encryption at rest: All stored personal and financial data is encrypted using industry-standard algorithms.
• Role-based access controls: Internal access to player data is restricted to authorised personnel only, on a strict need-to-know basis.
• Two-factor authentication (2FA): Available to all players for account access; mandatory for administrative access by 2888pa staff.
• Regular security audits: 2888pa's platform and data infrastructure undergo periodic security assessments by qualified independent security professionals.
• Incident response procedures: In the event of a data security incident affecting player data, 2888pa will notify affected players and relevant regulatory authorities within the timeframes required by applicable regulations.

While 2888pa applies robust security controls, no online platform can guarantee absolute security against all threats. Players are encouraged to use strong, unique passwords for their 2888pa accounts and to enable two-factor authentication where available.

With your consent at registration or at a subsequent point, 2888pa may contact you with information about promotions, bonus offers, new games, PSL cricket betting opportunities, and other 2888pa platform updates that may be of interest to you. Marketing communications are sent via email and, where you have opted in, via SMS to your registered Pakistani mobile number.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your marketing preferences in your 2888pa account settings
• Clicking the unsubscribe link included in any marketing email
• Contacting 2888pa customer support with a written request to opt out

Please note that even if you opt out of marketing communications, 2888pa may continue to send you essential service communications — such as account security alerts, transaction confirmations, and KYC request notifications — as these are required for the operation of your account and cannot be disabled.

2888pa reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they affect your data rights or significantly alter how we process your personal data — we will provide advance notice to active account holders via email or prominent on-site notification, no less than 14 days before the changes take effect.

The effective date at the top of this page will be updated whenever the Privacy Policy is revised. We encourage you to review this page periodically. Continued use of the 2888pa platform following notice of a revised Privacy Policy constitutes acceptance of the updated terms.

For minor, non-material changes such as typographical corrections or clarifications that do not affect data processing practices, 2888pa may update the Privacy Policy without prior notice, updating only the effective date.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how 2888pa handles your personal data, please contact our data protection team:

If you are not satisfied with 2888pa's response to a privacy complaint, you have the right to escalate your complaint to the relevant regulatory or data protection authority in accordance with the process described in the 2888pa Terms & Conditions, Section 15.

2888pa takes all privacy complaints seriously and is committed to resolving them fairly and efficiently. We encourage players to contact us directly in the first instance so that we have the opportunity to address your concern before formal escalation.