2888com Privacy Policy — How We Handle Your Data

2888com collects information in several ways: information you provide directly when you register or use the platform, information generated by your activity on the platform, and technical information collected automatically by the platform's systems.

Information you provide:

• Registration details: Your name, date of birth, email address, mobile number, and residential address as entered when creating your account.
• Identity verification documents: Where required, a copy of a government-issued ID to confirm your identity and age. This is processed securely and used solely for verification.
• Payment information: Account details for the PKR payment methods you use — JazzCash number, Easypaisa account, Raast ID, or bank account details. See Section 03 for more detail on how this is handled.
• Communication content: Messages you send to support, responses to surveys, and any feedback you provide voluntarily.

Information generated by your activity:

• Games played, bet amounts, win and loss records, deposit and withdrawal history
• Bonuses claimed, wagering activity and promotion participation
• Session times, frequency of play and platform navigation patterns
• Responsible gaming tool usage — deposit limits set, session reminders activated, self-exclusion periods applied

Technical information collected automatically:

• IP address, device type, operating system, browser type
• Mobile network information (carrier, connection type)
• App version, device identifier and crash reports
• Pages visited, time on page, referral source

The information collected is used for specific, legitimate purposes directly related to running the platform and serving Pakistani players. Here is a breakdown of the main uses:

We do not use your data for purposes beyond those listed above without notifying you and, where required, obtaining your consent first.

Given that 2888com processes PKR transactions via JazzCash, Easypaisa, Raast and bank transfer, how we handle payment data deserves specific explanation.

• Stored payment references: 2888com stores the minimum information needed to process transactions — typically your registered mobile number (for JazzCash/Easypaisa), Raast ID, or bank account details as provided at the time of transaction. This information is stored in encrypted form.
• No card data storage: Where debit or credit cards are used, card numbers and CVV codes are handled directly by the payment processor and are not stored on 2888com's own systems.
• Verification of ownership: Payment account details are cross-checked against your registered identity to confirm that the payment method belongs to you. Third-party payment methods are not accepted.
• Transaction records: A record of all deposits and withdrawals is maintained for operational, financial and fraud prevention purposes. These records are retained in line with the data retention policy in Section 07.
• Payment partner security: JazzCash, Easypaisa, Raast and bank transfer partners operate under their own data protection and security frameworks. 2888com is not responsible for data processed solely within those systems.

2888com does not sell personal data. Sharing of your information with third parties is limited to the specific circumstances below:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive only the data necessary to process your transaction — typically your payment identifier and the transaction amount.
• Identity verification providers: Where identity documents are required for verification, a specialist third-party verification service may process the document on our behalf. These providers are bound by data processing agreements and may not use your data for any purpose other than verification.
• Technology infrastructure providers: Cloud hosting, database and security service providers who host or process platform data on our behalf. All such providers operate under data processing agreements that restrict their use of data.
• Game content providers: Some game titles on the 2888com platform are provided by third-party software developers. These providers may receive anonymised technical data (device type, session data) to facilitate game delivery. They do not receive your personal identity or payment information.
• Fraud prevention and security services: Anonymised or pseudonymised data may be shared with security services for fraud detection and prevention purposes.

We do not share your data with advertisers, marketing companies, social media platforms or any commercial third party for their own marketing purposes. We do not transfer your data to parties outside of direct operational necessity.

The 2888com website and app use cookies and similar technologies to make the platform work correctly and to understand how it is being used. Here is what is in use:

• Essential cookies: These are required for the platform to function. They manage your login session, maintain your account authentication between pages, and remember security preferences. These cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language setting, game filter selections and last-used payment method. They make the platform more convenient to use across sessions.
• Analytics cookies: Anonymised data about how players navigate the platform — which pages are visited, how long sessions last, where errors occur — helps us identify issues and improve the platform. This data does not include personally identifiable information.
• No advertising cookies: 2888com does not use advertising tracking cookies that follow you across other websites or share your browsing behaviour with advertising networks.

Most browsers allow you to review and delete cookies from your settings. However, disabling essential cookies will affect your ability to log in and use the platform normally. The 2888com mobile app uses equivalent local storage mechanisms that follow the same principles.

2888com uses a combination of technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction.

• Encryption in transit: All data transmitted between your device and our servers is protected using TLS encryption. This includes login credentials, payment details and personal account information.
• Encryption at rest: Sensitive personal data and payment details stored in our systems are encrypted. Access to encrypted data requires keys that are separately managed and restricted.
• Access controls: Internal access to personal data is restricted to staff who require it for specific operational tasks. Access is logged and regularly reviewed.
• Account security features: The platform supports strong password requirements, session timeout and biometric login on supported devices. These are tools available to you as a player to keep your own account secure.
• Incident response: 2888com has procedures in place for identifying and responding to data security incidents. If a breach occurs that affects your personal data in a material way, we will notify you.

No digital system is entirely immune to security risk. We take reasonable and proportionate steps to protect your data, but we also encourage you to use strong passwords, keep your device secure, and contact support immediately if you suspect your account has been accessed without your authorisation.

We keep your data for as long as is necessary for the purposes for which it was collected, and no longer. The key retention periods are as follows:

• Active account data: Maintained for the full duration of your account's active status. This includes registration details, transaction history, game history and communication records.
• Closed account data: After an account is closed, core identity and transaction data is retained for a period required by financial record-keeping obligations. After this period, personal identifiers are removed and the data is anonymised or deleted.
• Identity verification documents: Retained for the period required to fulfil verification obligations and no longer. Once the retention period has passed, documents are securely deleted.
• Support communications: Messages and support records are retained for a reasonable period to allow for follow-up and dispute resolution, then deleted.
• Technical and analytics data: Anonymised analytics data is retained indefinitely for platform performance purposes, as it does not contain personally identifiable information.

If you request account closure, the process of data deletion or anonymisation will begin following the conclusion of the standard retention period applicable to your account type.

You have meaningful rights over the personal data 2888com holds about you. These can be exercised by contacting our support team directly.

2888com sends promotional communications to players who have opted in — these include information about new games, bonus offers, PSL-related promotions, seasonal campaigns and platform updates. You are in control of whether you receive these.

• Opt-in: During registration you are given the choice to receive marketing communications. This is not automatically opted in — you actively choose.
• Opt-out at any time: You can withdraw consent for marketing communications at any time by updating your preferences in your account settings or by contacting support. Opting out of marketing does not affect your ability to use the platform.
• Transactional communications: Messages about your account — deposit confirmations, withdrawal updates, security alerts, verification requests — are not marketing and will continue regardless of your marketing preferences. These are a necessary part of running your account.
• Push notifications on the app: If you have the 2888com Android app installed, you can manage push notification preferences directly in your phone's notification settings at any time.

We do not share your contact details with any third party for the purpose of that party sending you their own marketing communications.

This Privacy Policy may be updated from time to time as the platform evolves, as new features are introduced, or as data protection requirements change. When we make material changes to this policy, we will notify registered players in a way that ensures you are actually aware of the update — not just a small text change on an obscure page.

• Significant changes will be communicated via in-app notification, email, or a prominent notice when you next log in to the platform.
• Minor clarifications or formatting changes that do not affect the substance of the policy may be made without a specific notification.
• The date shown at the top of this policy indicates when it was last substantively revised.
• Continued use of the 2888com platform after a policy update has been communicated constitutes your acceptance of the revised policy.

If you have questions about how this policy applies to your account, or if you want to understand how a specific change affects you, please contact our support team before continuing to use the platform. We would rather take the time to clarify than have you uncertain about what applies to your data.