2888w Privacy Policy —
How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by 2888w ("we", "us", "our", "Company", "Platform") and applies to all individuals who visit, register on, or use the services available at https://2888w.net ("the Platform"). The Platform serves an audience primarily based in Pakistan, providing online casino games, sports betting, live dealer services, and associated financial transaction facilities denominated in Pakistani Rupees (PKR).

This Policy describes in detail: what personal data 2888w collects about you, the purposes for which that data is collected and processed, the legal basis for such processing, how long data is retained, the circumstances under which data may be shared with third parties, the security measures applied to protect your data, and the rights you hold as a data subject.

By registering on the 2888w platform and accepting our Terms and Conditions, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, please do not use the platform.

For the purposes of applicable data protection legislation, 2888w is the data controller in respect of all personal data collected from users of the platform. As data controller, 2888w determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with applicable law and this Policy.

All data protection inquiries, subject access requests, and formal complaints should be directed to the 2888w support team via the in-platform live chat facility or via email at [email protected]. Our support team is available 24 hours a day, 7 days a week, to assist with data-related queries.

2888w collects personal data across several categories, each of which is described below. We collect only the minimum data necessary for the specified purpose. The following table summarises the categories of personal data 2888w processes:

2888w collects personal data through the following channels:

• Direct Registration: When you complete the 2888w account registration form, you provide us with your name, date of birth, CNIC number, mobile number, and email address directly.
• KYC Verification: During identity verification, you may be asked to submit a photograph or scan of your CNIC, a selfie, and/or proof of address documentation. This data is processed by our KYC verification partner under strict confidentiality obligations.
• Payment Transactions: When you make a deposit or request a withdrawal, transaction data including payment account identifiers and amounts is collected by the platform and shared with the relevant payment processor.
• Platform Interaction: Technical and usage data is automatically collected when you access and use the platform, including your IP address, device identifiers, browser information, and in-platform activity logs.
• Customer Support: When you contact our support team through live chat or email, the content of that communication, together with any associated account data, is recorded for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: 2888w uses cookies and similar technologies to collect technical and usage data. See Section 08 for full details of our cookie practices.

2888w processes your personal data for the following specific, lawful purposes:

• Account Administration: Creating and maintaining your account, verifying your identity, managing your PKR wallet, and providing access to the full platform — including casino games, sports betting, live dealer tables, and bingo.
• Payment Processing: Executing deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 in Pakistani Rupees.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming licensing conditions, including mandatory age verification to enforce the 21+ restriction.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, duplicate account creation, bonus abuse, money laundering, and unauthorised account access, including through automated monitoring of transaction patterns and login behaviour.
• Responsible Gaming: Monitoring your gaming activity to identify patterns consistent with problem gambling, enabling the responsible gaming tools (deposit limits, session timers, self-exclusion) set by you, and complying with responsible gaming obligations under our operating licence.
• Customer Support: Handling your support requests, resolving disputes, investigating complaints, and maintaining records of communications for quality assurance purposes.
• Platform Improvement: Analysing usage data and technical data in aggregate to improve platform performance, identify bugs, and develop new features that better serve Pakistani users.
• Direct Communications: Sending transactional communications such as deposit confirmations, withdrawal updates, and account security alerts. Subject to your preferences, also sending promotional communications about relevant bonuses and offers.

2888w does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment Processors: Your financial data and transaction details are shared with the relevant payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or cryptocurrency network operators) solely for the purpose of processing your deposit or withdrawal.
• KYC Verification Providers: Identity documents and biometric data provided during KYC verification are shared with our appointed identity verification service provider, which operates under contractual confidentiality and data security obligations.
• Game Software Providers: Technical session data may be shared with game providers (such as Evolution Gaming and Pragmatic Play) to the extent necessary for game functionality, fairness auditing, and dispute resolution involving specific game outcomes.
• Regulatory & Law Enforcement Authorities: 2888w is legally obligated to disclose personal data to gaming regulatory bodies, financial intelligence units, and law enforcement agencies upon receipt of a valid legal request or where disclosure is required by applicable law, including AML reporting obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of 2888w's business assets, personal data held by the platform may be transferred to the acquiring entity, subject to appropriate confidentiality protections and prior notification to affected users where feasible.

All third parties with whom 2888w shares personal data are contractually required to handle that data in accordance with applicable privacy standards and to use it only for the specific purpose for which it was shared.

2888w retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal data associated with an active 2888w account is retained for the duration of the account's active status and for a period thereafter as required by law or legitimate business purpose.
• Closed Accounts: Following account closure, 2888w retains identity and transaction data for a minimum of five (5) years in compliance with international anti-money laundering record-keeping requirements.
• Communications Data: Customer support records and live chat transcripts are retained for a period of up to two (2) years from the date of each interaction, after which they are securely deleted.
• Technical & Usage Data: Log data and usage analytics are retained in anonymised or pseudonymised form for internal analytics purposes and may be retained indefinitely in that form.

Where retention is no longer legally required or necessary, 2888w will securely delete or anonymise your personal data in accordance with its internal data management procedures.

2888w uses cookies and similar tracking technologies to improve platform performance, maintain session security, and gather anonymous usage analytics. The following categories of cookies are used on the 2888w platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your logged-in status, security tokens for CSRF protection, and cookies that remember your language and display preferences. These cannot be disabled.
• Analytical Cookies: Used to collect anonymous data about how users navigate the platform — which pages are visited most, where users encounter difficulties, and how long sessions last. This data is used solely to improve the platform and is not linked to individual user identities.
• Preference Cookies: Store your chosen platform settings between sessions, such as display preferences, last-played game categories, and responsible gaming reminder settings.

Most web browsers allow you to manage cookie preferences through the browser settings menu. Disabling certain cookies may affect the functionality of parts of the 2888w platform. Strictly necessary cookies cannot be disabled without preventing the platform from functioning correctly.

2888w implements a multi-layered security framework to protect the personal data of all registered users. The security measures applied across the platform include:

• 256-bit SSL/TLS encryption across all data transmission channels between user devices and 2888w servers.
• One-way cryptographic hashing of account passwords using industry-standard algorithms. 2888w staff cannot view or retrieve plain-text passwords at any time.
• Optional SMS-based two-factor authentication (2FA) available on all accounts to prevent unauthorised access even if account credentials are compromised.
• Automated brute-force login protection that detects and blocks repeated failed authentication attempts.
• Segregated storage of personal identity data and financial data to limit the scope of any potential data breach.
• Regular security audits and penetration testing of platform infrastructure by independent security professionals.
• Role-based access controls restricting staff access to personal data to only those employees whose job function requires it.

While 2888w employs extensive technical and organisational security measures, no method of electronic data transmission or storage can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights, 2888w will notify affected users in accordance with its obligations under applicable law.

As a registered user of the 2888w platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 2888w support team via the in-platform live chat or by emailing [email protected]:

• Right of Access: You may request confirmation of whether 2888w holds personal data about you, and if so, a copy of that data in a portable format.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request correction. Certain changes (such as name corrections) may require submission of supporting identity documentation.
• Right to Erasure: Subject to legal retention obligations, you may request deletion of your personal data. Note that data required for AML compliance (transaction records, KYC documentation) must be retained for the legally mandated period and cannot be deleted on request.
• Right to Restriction: You may request that 2888w restrict the processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though this right is not absolute and will be balanced against 2888w's interests and legal obligations.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

2888w will respond to data rights requests within a reasonable period, typically within 30 days of receipt. Complex requests may require additional time, in which case you will be notified of the extended timeframe.

The 2888w platform is strictly for adults aged 21 years and above. 2888w does not knowingly collect, process, or store personal data from individuals under the age of 21. The CNIC-based KYC verification process is specifically designed to enforce this age restriction at the point of registration.

If 2888w discovers that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — the following steps will be taken immediately: the account will be suspended and permanently closed; all balance and winnings will be forfeited; all personal data associated with the account will be deleted to the extent not legally required to be retained; and the registration may be reported to relevant authorities where legally required.

Parents and guardians who believe that a person under the age of 21 in their household may have registered on the 2888w platform should contact the support team immediately via live chat or email so that the matter can be investigated and resolved promptly.

As an internationally operating platform, 2888w may process and store personal data on servers located in jurisdictions outside Pakistan. Where your personal data is transferred to countries that may not provide data protection standards equivalent to those in your home jurisdiction, 2888w ensures that appropriate safeguards are in place to protect that data.

Such safeguards include contractual data processing agreements with all third-party processors that require equivalent standards of data protection, and the selection of service providers operating in jurisdictions with recognised data protection frameworks. By using the 2888w platform, you acknowledge and consent to the transfer of your personal data in accordance with the protections described in this Policy.

2888w reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — such as changes to the types of data collected, the purposes for which data is used, or the third parties with whom data is shared — 2888w will endeavour to notify affected users via email and/or an in-platform notification upon their next login.

The most current version of this Privacy Policy is always available at https://2888w.net/privacy-policy. The effective date displayed at the top of this document indicates when the current version became operative. Your continued use of the platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

If you have questions, concerns, or formal requests regarding this Privacy Policy or the processing of your personal data by 2888w, please contact us through the following channels:

• Live Chat: Available 24/7 within the platform. This is the fastest channel for urgent data-related queries and subject access requests.
• Email: [email protected] — for formal written communications and data rights requests. Please allow up to five (5) business days for email responses.

When contacting 2888w regarding a data-related matter, please include your registered mobile number and account username to allow our support team to locate your account and respond to your request efficiently.