2888et Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 2888et ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the Player") who register for and use the 2888et online casino and sports betting platform at https://2888et.net.

2888et is committed to protecting the privacy and personal data of all its users, particularly those accessing the Platform from Pakistan. This Policy is designed to meet internationally recognised data protection standards and reflects our obligations under applicable data protection frameworks.

This Policy should be read alongside the 2888et Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between the two documents on a data-related matter, this Privacy Policy shall prevail.

2 Personal Data We Collect

2.1 Registration Data

When you create a 2888et account, we collect the following information:

• Full legal name as it appears on your Computerised National Identity Card (CNIC)
• CNIC number and a copy of your CNIC (front and back) for KYC verification
• Date of birth (to verify the mandatory 21+ age requirement)
• Valid Pakistani mobile number (used for account verification and OTP authentication)
• Email address
• Residential address in Pakistan
• Chosen username and encrypted password (passwords are never stored in plaintext)

2.2 Financial Data

To process deposits and withdrawals in Pakistani Rupees (PKR), 2888et collects:

• JazzCash and EasyPaisa account identifiers (mobile numbers associated with wallets)
• Bank account details for HBL, UBL, Meezan Bank, and 1LINK transfers (account title, account number, IBAN)
• Transaction histories including deposit amounts, withdrawal requests, and bonus credits
• Raast ID where applicable

2888et does not store full card numbers or complete mobile wallet credentials on its own servers. Payment processing is handled by PCI-DSS compliant third-party processors.

2.3 Technical and Usage Data

When you access 2888et, our servers and analytics systems automatically record:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser information
• Session timestamps, pages visited, and features used
• Game session data including titles played, bet amounts, outcomes, and session duration
• Referring URLs and search terms where applicable

2.4 Communications Data

When you contact 2888et customer support via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and any resolutions reached. This data is used to provide effective support and improve our services.

2.5 Responsible Gaming Data

Where you voluntarily engage with responsible gaming tools — including deposit limits, loss limits, session time limits, cooling-off periods, or self-exclusion — 2888et records these preferences and enforces them at the Platform level. This data is treated with heightened sensitivity and is not used for marketing purposes.

3 How We Use Your Personal Data

2888et uses collected personal data for the following specific purposes:

• Account Creation and Management: To register your 2888et account, verify your identity, and maintain accurate account records.
• Age Verification: To confirm that you are 21 years of age or older before permitting access to real-money gaming features, as required by our operating licence and responsible gaming obligations.
• KYC and Compliance: To conduct Know Your Customer checks, verify the source of funds where required, and meet anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, and to process withdrawal requests to verified payment methods.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, duplicate accounts, bonus abuse, and unauthorised access to player accounts.
• Customer Support: To respond to queries, resolve disputes, and improve support quality based on interaction history.
• Responsible Gaming: To enforce player-set limits, process self-exclusion requests, and monitor for indicators of problem gambling behaviour.
• Platform Improvement: To analyse aggregate usage patterns, optimise game performance, and develop new features based on player behaviour data.
• Marketing Communications: To send promotional emails, SMS notifications, and personalised bonus offers — only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.
• Legal Compliance: To respond to lawful requests from regulatory authorities, law enforcement agencies, or financial intelligence units as required by applicable law.

4 Legal Basis for Processing

2888et processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 2888et — including account registration, payment processing, and game provision — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Certain processing activities, including KYC verification, AML checks, and retention of financial records, are carried out to comply with legal and regulatory obligations binding on 2888et under its international gaming licence.
• Legitimate Interests: Processing for fraud prevention, Platform security, technical optimisation, and customer support analytics is carried out on the basis of 2888et's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — such as for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

5.1 Trusted Service Providers

2888et shares your personal data with carefully selected third-party service providers who assist in operating the Platform. These include:

• Payment processors and mobile wallet operators (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK) for transaction processing
• KYC and identity verification providers for CNIC authentication and age verification
• Fraud detection and AML screening services
• Cloud hosting and data storage infrastructure providers
• Customer support platform providers (live chat software vendors)
• Email and SMS delivery services for transactional communications

All third-party service providers are contractually bound to process your data only for the specific purposes for which it was shared and to maintain appropriate security standards.

5.2 Regulatory and Legal Disclosure

2888et may disclose your personal data to governmental authorities, financial intelligence units, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be made without prior notification to you where legally required.

5.3 No Sale of Personal Data

2888et does not sell, rent, lease, or trade your personal data to any third party for commercial or marketing purposes under any circumstances. Your data is an asset we protect — not a product we monetise.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of 2888et's business assets, your personal data may be transferred to the successor entity. We will notify registered players of any such transfer via email and provide an opportunity to request account deletion prior to the transfer taking effect.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. 2888et uses cookies and similar technologies (including local storage and session tokens) to ensure the Platform functions correctly and to improve your experience as a player.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in during a gaming session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language selection, preferred lobby view, and responsible gaming settings so that they persist across sessions.
• Analytical Cookies: Collect aggregate, anonymised data about how players navigate and use the Platform. This helps 2888et identify which games are most popular, where players encounter difficulties, and how to improve the overall user experience.
• Security Cookies: Support fraud detection by identifying unusual session patterns, device fingerprinting anomalies, and rapid account-switching behaviour that may indicate account sharing or automated bot activity.

6.3 Managing Cookies

You may manage or disable cookies through your browser settings. Please be aware that disabling strictly necessary cookies will prevent you from logging in to or using core features of the 2888et Platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available through your browser's help documentation.

7 Data Retention

2888et retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following standard retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction to meet tax and financial reporting obligations.
• KYC Documents: Retained for a minimum of five years following the completion of your last transaction or account closure, whichever is later.
• Customer Support Communications: Retained for a period of three years from the date of the interaction, or longer where the communication relates to an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for as long as your consent remains active, plus three years following withdrawal of consent as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8 Your Data Rights

Subject to applicable law and the limitations imposed by our legal obligations, you have the following rights in respect of your personal data held by 2888et:

• Right of Access: You may request a copy of all personal data 2888et holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Where account data can be updated directly within your account settings, we encourage you to do so without needing to contact support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. Note that certain data must be retained for legal compliance periods regardless of erasure requests.
• Right to Restriction of Processing: You may request that 2888et restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to 2888et for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, 2888et will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact 2888et's data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. Identity verification will be required before processing rights requests.

9 Children and Minors

The 2888et Platform is strictly intended for adults aged 21 years and over. 2888et does not knowingly collect personal data from individuals under the age of 21. Our registration process requires date of birth disclosure and CNIC verification, both of which are used to screen out underage applicants.

Parents and guardians of young adults in Pakistan are encouraged to use parental control software to restrict access to online gaming platforms where appropriate. 2888et supports responsible access controls at the household level.

10 Data Security

2888et implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and 2888et servers is encrypted using 256-bit TLS/SSL protocols. Any connection that does not meet minimum encryption standards is rejected.
• Encryption at Rest: Sensitive personal data, including CNIC details, financial identifiers, and authentication credentials, is stored in AES-256 encrypted database fields.
• Access Controls: Access to personal data within 2888et's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to binding confidentiality obligations and regular security training.
• Penetration Testing: 2888et's Platform infrastructure undergoes regular independent penetration testing and vulnerability assessments conducted by qualified third-party security firms.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 2888et will notify affected players and relevant supervisory authorities within the timeframes required by applicable data protection law.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 2888et promptly if you suspect any unauthorised access to your account.

11 International Data Transfers

2888et operates as an international online gaming platform. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including the jurisdiction in which 2888et's gaming licence is held and the locations of our cloud infrastructure and third-party service providers.

Where personal data is transferred to countries that do not provide an equivalent level of data protection to that available in Pakistan, 2888et ensures that appropriate safeguards are in place. These may include standard contractual clauses, data processing agreements incorporating equivalent protections, or transfers to jurisdictions recognised as providing adequate data protection standards.

By using the 2888et Platform and providing your personal data, you acknowledge and consent to the transfer of your data outside of Pakistan in accordance with the safeguards described in this section.

12 Changes to This Privacy Policy

2888et reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable data protection law, modifications to Platform features, or evolving best practices in data security. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Where material changes are made to this Policy — particularly changes that affect how your data is used or shared — 2888et will notify registered players via email to the address on file and/or by displaying a prominent notice on the Platform upon login. We encourage you to review this Policy periodically regardless of whether you receive a notification.

Your continued use of the 2888et Platform following notification of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must discontinue use of the Platform and may contact support to request account closure and data deletion.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or 2888et's data processing practices, please contact us through the following channels:

• Data Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line for Rights Requests: "Data Rights Request – [Your Registered Email]"
• Live Chat: Available 24/7 via the 2888et site dashboard in English and Urdu
• Response Time: Data-related email queries are acknowledged within 72 hours and substantively resolved within 30 calendar days

Our Urdu-speaking support team is available around the clock to assist players from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all across Pakistan with any privacy concerns. Your trust in 2888et is something we work every day to earn and maintain.