2888in Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is published by 2888in ("the Company," "we," "us," "our") and applies to all personal data collected from individuals ("you," "your," "the Player") who register for, access, or use the 2888in online gaming platform available at 2888in.net (the "Platform").

2888in is committed to protecting your privacy and processing your personal data responsibly, transparently, and in accordance with applicable data protection laws and the requirements of the international gaming licence under which the Platform operates. This Policy explains what personal information we collect, why we collect it, how we use it, how long we keep it, and what rights you have in relation to it.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are available on the Platform. By registering a 2888in account or using the Platform in any way, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data We Collect

2888in collects the following categories of personal data from players registered on the Platform. We do not collect data that is not necessary for the purposes described in Section 4 of this Policy.

2.1 Identity and Contact Data

When you register a 2888in account, we collect your full legal name, date of birth, Pakistani Computerised National Identity Card (CNIC) number or passport number, residential address (including city, province, and postal code), Pakistani mobile number, and email address. This information is required to create and verify your account, comply with know-your-customer (KYC) obligations, and enable communications with you about your account.

2.2 Financial and Transaction Data

We collect and retain records of all financial transactions conducted through your 2888in account, including deposits, withdrawals, bonus credits, wagers placed, winnings received, and any charges applied to your account. We also hold references to the payment instruments you use — such as your registered JazzCash account number, EasyPaisa wallet reference, HBL account details, UBL account details, or Meezan Bank account details — for the purpose of processing transactions and satisfying anti-money-laundering (AML) obligations. We do not store full debit or credit card numbers on our servers.

2.3 Gaming Activity Data

We collect detailed records of your gaming activity on the Platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool activations (such as deposit limit settings and self-exclusion requests). This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.4 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited, time spent on each page, and session activity logs. This data is used for security monitoring, fraud prevention, platform optimisation, and compliance purposes.

2.5 Communications Data

We retain records of all communications between you and 2888in's support team, including live chat transcripts, email correspondence, and complaint records. This data is retained for quality assurance, training, dispute resolution, and regulatory compliance purposes.

3 How We Collect Your Data

2888in collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting support, or responding to any survey or communication from 2888in
• Automated technologies: Data collected automatically through cookies, server logs, and similar tracking technologies when you access or interact with the Platform (see Section 9 for full cookie information)
• Third-party verification services: Identity and age verification data obtained from third-party KYC service providers when you submit identity documents for verification
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other payment service providers when you initiate a financial transaction
• Fraud prevention partners: Risk signals and device fingerprint data received from third-party fraud prevention and anti-money-laundering service providers

4 Purpose of Processing

2888in processes your personal data for the following specific purposes:

We do not process your personal data for any purpose not listed above without first notifying you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

2888in processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and 2888in, including account management, transaction processing, and game provision
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, AML reporting requirements, and gaming licence conditions
• Legitimate interests: Processing carried out in pursuit of 2888in's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights
• Consent: Processing for which you have given your explicit, freely given, informed, and withdrawable consent — including marketing communications. You may withdraw your consent to marketing at any time by contacting 2888in's support team

6 Data Sharing and Disclosure

2888in does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the Platform, including identity verification providers, payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay), fraud prevention vendors, customer support platform providers, and cloud hosting infrastructure providers. All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted service to 2888in.

6.2 Regulatory and Law Enforcement Authorities

We are required by law and by the conditions of our gaming licence to share certain data with regulatory authorities, law enforcement agencies, and other governmental bodies where we receive a legally valid request to do so. This includes reporting obligations under applicable anti-money-laundering and counter-terrorism financing regulations.

6.3 Game Content Providers

Certain game providers whose content is offered on the 2888in Platform may receive limited session data (such as a pseudonymous player identifier and game session token) for the technical purpose of operating the game. These providers do not receive your name, contact details, or financial information.

7 Data Retention

2888in retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by gaming licence and AML regulations
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial regulations applicable to licensed gaming operators
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session, or longer if required for an open investigation or dispute
• Support communications: Retained for a minimum of two (2) years from the date of each interaction
• Technical and usage data: Retained for up to twelve (12) months, after which it is either deleted or anonymised for aggregate analytics purposes
• Marketing consent records: Retained for as long as you remain opted in, and for a reasonable period thereafter as evidence of the consent given

Where personal data is no longer required and no legal obligation mandates its retention, 2888in will securely delete or irreversibly anonymise it.

8 Security Measures

2888in implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Role-based access controls that restrict staff access to personal data to those with a documented business need
• Multi-factor authentication requirements for all 2888in staff accessing production systems
• Regular penetration testing and security audits conducted by independent third parties
• Continuous intrusion detection monitoring and automated threat response systems
• Secure data backup procedures with geographically distributed redundancy

While 2888in takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring that your device is appropriately secured.

9 Cookies and Tracking Technologies

2888in uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by our server when you access the Platform. Cookies enable us to recognise your device, maintain your session, and gather usage analytics.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and enabling secure payment processing. These cookies cannot be disabled.
• Performance cookies: Collect anonymised information about how visitors use the Platform, helping us identify areas for improvement. Data is aggregated and not linked to individual users.
• Functionality cookies: Remember your preferences such as language selection, display settings, and preferred payment method to improve your user experience.
• Security cookies: Used to detect fraudulent login attempts, bot activity, and other security threats in real time.

9.2 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly, and you will not be able to log in or complete transactions. Disabling other cookie categories may affect your user experience but will not prevent basic Platform access.

10 Your Rights

As a 2888in player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact 2888in's support team via the 24/7 live chat facility. We will respond to all valid requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of all personal data 2888in holds about you, along with information about how it is being processed
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 7
• Right to restrict processing: You may request that we limit our processing of your personal data in certain circumstances, for example while a rectification request is being investigated
• Right to data portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal
• Right to object: You have the right to object to processing based on legitimate interests where you believe your privacy rights override those interests

Please note that the exercise of certain rights may be subject to limitations imposed by our legal and regulatory obligations, particularly in relation to AML and gaming licence requirements.

11 Children's Privacy

The 2888in Platform is strictly intended for adults aged twenty-one (21) years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any way.

If 2888in discovers or receives credible notification that an account has been registered by a person under the age of 21, we will immediately close the account, delete all associated personal data to the extent permitted by law, and retain only those records required by applicable gaming licence and AML obligations.

Parents and guardians are encouraged to install parental control software on devices accessible to minors in order to prevent underage access to online gaming platforms, including 2888in.

12 Amendments to This Policy

2888in reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services offered on the Platform. When we make a material change to this Policy, we will notify you by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address at least seven (7) days before the change takes effect.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how 2888in protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or 2888in's handling of your personal data, please contact our support team in the first instance:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform — response within 2 hours
• Email: [email protected] (plain text address — not a clickable link)

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the independent dispute resolution body designated by 2888in's licensing authority. Our support team can provide details of the applicable escalation route upon request.