w288 Privacy Policy

1. Who We Are

w288 ("w288", "we", "us", "our") operates the online sports betting and live casino platform accessible at w288.app, along with any associated mobile applications and digital services. w288 is the data controller responsible for the personal information collected through the platform.

w288 serves registered users across Pakistan — including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and regions of the country. The platform offers cricket betting (including Pakistan Super League markets), boxing and other sports betting, live casino tables, and slot games.

If you have any questions about how w288 handles your personal data, you can reach our support team at any time. Contact details are provided in Section 13 of this policy.

2. Data We Collect

w288 collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the platform, and in some cases from third-party identity verification and payment partners. Below is a detailed breakdown of the categories of data we collect.

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC (Computerised National Identity Card)
• Date of birth (for mandatory 21+ age verification)
• Pakistani mobile phone number
• Email address (where provided)
• CNIC number and scanned copies submitted during KYC verification
• Selfie or photograph where required for identity verification

2.2 Financial & Transaction Data

• Payment method details (JazzCash account numbers, EasyPaisa wallet IDs, HBL/UBL/Meezan Bank account references)
• Deposit and withdrawal history denominated in Pakistani Rupees (PKR)
• Betting and gaming transaction records including stakes, odds, outcomes, and winnings
• Bonus and promotional credit history

2.3 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration data
• Platform interaction logs and navigation patterns

2.4 Communications Data

• Support chat transcripts and email correspondence with the w288 team
• Feedback and survey responses submitted voluntarily
• Records of responsible gaming requests, including deposit limit changes and self-exclusion applications

3. How We Use Your Data

w288 uses your personal data strictly for the purposes outlined below. We do not use your data for any purpose that is incompatible with these stated purposes without your prior consent.

1. Account Creation & Management: To register your w288 account, verify your identity, maintain your account settings, and communicate important account-related updates.
2. Age & Identity Verification (KYC): To confirm that you meet the mandatory 21+ age requirement and that all account information is accurate and legitimate, as required under our responsible gaming obligations.
3. Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions in PKR.
4. Service Delivery: To provide access to cricket betting markets (including PSL), boxing betting, live casino games, slot games, and all other w288 services you use.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, duplicate account creation, and other prohibited conduct on the platform.
6. Responsible Gaming Compliance: To monitor gambling behaviour, enforce self-exclusion requests, apply account limits, and fulfil our obligations under international responsible gaming standards.
7. Customer Support: To respond to your queries, handle complaints, and maintain records of all customer communications for quality assurance purposes.
8. Platform Improvement: To analyse aggregate usage data in order to improve the w288 platform's functionality, performance, and overall user experience.
9. Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates about w288 services — but only where you have given your explicit consent to receive such communications, and always with a clear opt-out mechanism.

4. Legal Basis for Processing

w288 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing your identity, financial, and account data is necessary to perform the contract between you and w288 — that is, to deliver the betting and gaming services you have registered to use.
• Legal Obligation: Certain data processing activities — particularly KYC identity verification, anti-money laundering (AML) record keeping, and age verification — are required by applicable gaming regulations and international compliance standards that w288 is obligated to follow.
• Legitimate Interests: w288 processes certain technical and behavioural data on the basis of its legitimate interests in operating a secure, fraud-free platform, preventing misuse, and improving the quality of its services — provided these interests are not overridden by your fundamental rights.
• Consent: Where w288 processes your data for marketing communications or optional personalisation features, it does so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time.

5. Data Sharing

w288 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, w288 shares the minimum necessary financial data with our payment partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers are contractually bound to handle your data securely and exclusively for payment processing purposes.

5.2 Identity Verification Partners

w288 may use third-party KYC verification services to confirm the authenticity of identity documents such as your CNIC. Any such partner is vetted for security and data protection compliance before engagement and is restricted from using your data for any purpose beyond the verification task.

5.3 Regulatory & Law Enforcement Authorities

w288 may be legally required to disclose personal data to regulatory bodies, anti-money laundering authorities, or law enforcement agencies where required by applicable law or a lawful order. In such cases, w288 will disclose only the minimum data required to comply with the legal obligation.

5.4 Platform Technology Partners

w288 works with gaming technology providers, hosting infrastructure partners, and customer support platform providers to operate the platform. These partners process data on w288's behalf under strict data processing agreements and are not permitted to use your data independently.

6. Cookies & Tracking Technologies

w288 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The w288 platform uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. You cannot opt out of these without also opting out of using the platform.
• Functional Cookies: Remember your preferences such as language settings, odds format (decimal/fractional), and responsible gaming limit settings, so you do not need to reconfigure them each session.
• Analytics Cookies: Help w288 understand how users interact with the platform — which pages are visited most, where users encounter difficulties, and how navigation flows can be improved. This data is processed in aggregate and anonymised form.
• Performance Cookies: Used to monitor platform load times and technical performance, particularly during high-traffic events like PSL match days or major boxing bouts.

You can manage your cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the w288 platform but will not prevent you from accessing core betting and gaming features.

7. Data Retention

w288 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations.

• Active Account Data: Retained for the lifetime of your active w288 account, plus a minimum of five (5) years following account closure, as required for AML compliance and gaming audit purposes.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the customer relationship, in accordance with international gaming licensing requirements.
• Transaction Records: Financial transaction history is retained for a minimum of five (5) years for regulatory compliance, dispute resolution, and audit trail purposes.
• Customer Support Records: Support communications are retained for three (3) years following the resolution of the relevant interaction.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming restrictions are retained for a minimum of seven (7) years to prevent the re-registration of excluded players.
• Technical & Log Data: Server logs and session data are retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user.

8. Your Rights

As a w288 user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the w288 support team using the details in Section 13. w288 will respond to all data rights requests within a reasonable timeframe.

1. Right of Access: You have the right to request a copy of the personal data w288 holds about you, along with information about how it is being used and with whom it has been shared.
2. Right to Rectification: If any personal data w288 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can also update basic account information directly through your w288 account settings.
3. Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to w288's legal retention obligations — certain data may be retained despite a deletion request where required by law.
4. Right to Restriction: You may request that w288 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
5. Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your personal data in a structured, machine-readable format.
6. Right to Object: You have the right to object to processing of your personal data carried out on the basis of w288's legitimate interests, including profiling for responsible gaming purposes. w288 will cease such processing unless compelling legitimate grounds exist that override your interests.
7. Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Children & Minors

The w288 platform is strictly an adults-only service. Users must be at least 21 years of age to register an account and access any w288 service. w288 does not knowingly collect or process personal data from individuals under the age of 21.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on w288 or has accessed the platform, please contact the support team at [email protected] immediately.

10. Security Measures

w288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and w288 servers
• AES-256 encryption for sensitive data stored in w288 databases
• Multi-factor authentication options for user account access
• Role-based access controls restricting internal data access on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third parties
• Continuous server-side monitoring for suspicious access patterns and anomalous activity
• Secure data backup and disaster recovery procedures

While w288 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.

11. International Data Transfers

w288 operates using internationally hosted infrastructure. As a result, your personal data may be stored on or processed by servers located outside of Pakistan. Where such transfers occur, w288 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles.

Safeguards applied to international data transfers include contractual data processing agreements with all third-party service providers that establish binding obligations regarding data security, confidentiality, and permitted use. w288 conducts due diligence on all international processing partners before transferring any user data.

12. Updates to This Privacy Policy

w288 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable regulatory requirements. When material changes are made, w288 will notify registered users via the platform or through the contact details registered on their account.

The date of the most recent revision is displayed at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how w288 protects your data. Your continued use of the w288 platform following the publication of any updated Privacy Policy constitutes acceptance of the revised terms.

If any update to this Privacy Policy materially reduces your rights or increases the scope of data processing in a way that requires your consent, w288 will seek that consent explicitly before the updated processing activities commence.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way w288 handles your personal data, please reach out to the w288 data support team using the contact details below:

w288 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to your privacy enquiry, you may escalate the matter through the applicable dispute resolution process under our operating licensing framework.