Privacy Policy — How 288bat Handles Your Data

1. Introduction

288bat ("we", "us", "our", "the Platform") operates the online gaming platform accessible at https://288bat.cam. We are committed to protecting the personal information of every individual who uses our Platform, creates an account, contacts our support team or otherwise interacts with our services.

This Privacy Policy ("Policy") sets out in plain, structured terms: what personal data we collect, the lawful basis on which we process it, how we use and share it, how long we keep it, the security measures we apply, and the rights you hold with respect to your own data.

This Policy applies to all users of the 288bat Platform globally, including players located in Pakistan. It should be read alongside our Terms & Conditions. By creating an account or using the Platform you confirm that you have read and understood this Policy.

2. Definitions

In this Policy, the following terms have the meanings given below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, whether directly (e.g., full name, CNIC number) or indirectly (e.g., device ID, IP address combined with other data).
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure or anonymisation.
• "Data Subject" means the identified or identifiable individual to whom personal data relates — in the context of this Policy, primarily you as a registered user.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — 288bat in respect of user data collected via the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller pursuant to a written agreement.
• "KYC" (Know Your Customer) means the identity verification process conducted to confirm a user's identity and age before withdrawals are processed.
• "Cookies" means small text files placed on a user's device by the Platform to store session, preference or analytics data.

3. Data Controller Details

288bat is the data controller in respect of personal data collected from users of the Platform. For all data-related enquiries, correction requests, deletion requests or complaints, please contact us using the details set out in Section 16 of this Policy.

288bat processes data primarily to fulfil its contractual obligations to users, to comply with anti-money-laundering and responsible-gambling obligations, and to provide a secure, functional gaming environment. We do not process personal data for purposes incompatible with those stated in this Policy without your explicit consent.

4. Categories of Personal Data We Collect

The table below summarises the main categories of personal data collected during your use of the 288bat Platform, together with examples of the specific data points involved.

4.1 Data We Do Not Collect

288bat does not knowingly collect special-category (sensitive) personal data such as racial or ethnic origin, religious beliefs, health data or biometric data, except where CNIC document scans are required for KYC and contain incidental data of this nature. Such data is processed solely for identity verification and is not used for any other purpose.

5. Lawful Basis for Processing

288bat relies on the following lawful bases for processing personal data, consistent with internationally recognised data protection principles:

1. 5.1 Contractual Necessity: Processing is necessary to perform the contract between 288bat and the user — including account management, processing deposits, executing wagers, verifying withdrawals and providing platform access.
2. 5.2 Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering (AML) checks, KYC requirements and responsible gambling obligations.
3. 5.3 Legitimate Interests: Processing is necessary for 288bat's legitimate interests, including fraud detection and prevention, platform security, improving service quality and maintaining accurate records — provided these interests are not overridden by the rights of the data subject.
4. 5.4 Consent: Where we rely on consent — particularly for direct marketing communications — we will seek your explicit agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

Your personal data may be used by 288bat for the following purposes:

• Creating, maintaining and administering your user Account on the Platform.
• Processing deposits and withdrawal requests, including communicating with payment service processors.
• Conducting KYC identity and age verification to confirm eligibility and comply with legal requirements.
• Detecting, investigating and preventing fraud, money laundering, collusion and other prohibited conduct.
• Providing customer support via live chat and email, and maintaining records of support interactions.
• Personalising your Platform experience, including displaying content and offers relevant to your preferences.
• Sending you transactional communications such as account confirmations, withdrawal notifications and security alerts.
• Sending promotional communications where you have opted in, including information about bonuses, PSL betting markets, cricket odds updates and VIP programme developments.
• Monitoring Platform usage for security purposes and to identify and investigate technical or operational issues.
• Complying with applicable legal, regulatory and operator obligations.
• Enforcing the 288bat Terms & Conditions.
• Conducting responsible gambling monitoring to identify users who may be at risk and to facilitate access to self-exclusion or limit tools.

7. Sharing of Personal Data

288bat does not sell, rent or trade your personal data to third parties for their independent commercial purposes. We may share personal data in the following limited circumstances:

1. 7.1 Payment Processors: Personal data necessary to facilitate deposits and withdrawals is shared with payment processing partners. These processors act under contractual data processing agreements and may not use your data for any purpose other than facilitating the relevant transaction. References to payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as familiar local payment options only; none of these entities are data partners of 288bat and none endorse the Platform.
2. 7.2 KYC & Identity Verification Providers: Document verification and identity screening may be conducted through a third-party KYC service provider operating under a data processing agreement.
3. 7.3 Technology & Hosting Providers: Platform infrastructure, data storage and game content delivery may be provided by third-party technology partners acting as data processors under appropriate contractual safeguards.
4. 7.4 Legal & Regulatory Disclosure: We may disclose personal data to law enforcement, regulatory bodies or courts where required by applicable law, a valid legal order or to protect against fraud or illegal activity.
5. 7.5 Business Transfers: In the event of a merger, acquisition or sale of all or part of the Platform's business, user data may be transferred to the successor entity, subject to equivalent privacy protections.

8. International Data Transfers

The 288bat Platform may operate infrastructure and engage service providers located in jurisdictions outside Pakistan. Where personal data is transferred internationally, 288bat takes steps to ensure that an adequate level of data protection is maintained, consistent with the principles set out in this Policy.

Where transfers are made to processors in jurisdictions without equivalent privacy law frameworks, 288bat relies on contractual safeguards such as data processing agreements that impose obligations on the recipient equivalent to those applied by the Platform itself.

9. Cookies & Tracking Technologies

The 288bat Platform uses cookies and similar technologies to maintain your logged-in session, store user preferences, enable platform functionality and gather anonymised analytics data to improve the service.

9.1 Types of Cookies Used

• Essential Cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without affecting core platform functionality.
• Functional Cookies: Store your preferences such as display settings, language and game history. These improve your experience but are not essential to the operation of the Platform.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, session duration, features used — to help us identify improvements. This data does not identify you personally.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of campaigns. These are only placed where you have given consent.

9.2 Managing Cookie Preferences

You can manage cookie settings through your browser settings. Note that disabling essential cookies will affect your ability to use core Platform features including account login. Disabling analytics or marketing cookies will not prevent you from using the Platform but may affect the relevance of personalised content.

10. Data Retention

288bat retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to satisfy applicable legal, regulatory or contractual obligations.

• Active Accounts: Personal data associated with an active Account is retained for as long as the Account remains open and for a reasonable period thereafter to resolve disputes and respond to enquiries.
• Closed Accounts: Following voluntary or operator-initiated Account closure, certain data (particularly financial transaction records and KYC documentation) may be retained for a defined period to comply with anti-money-laundering and financial reporting obligations.
• Self-Excluded Users: Records relating to self-exclusion requests are retained for the duration of the exclusion and for a reasonable period afterwards to prevent re-registration in circumvention of the exclusion.
• Support Communications: Chat and email records are retained for a period sufficient to resolve any outstanding dispute and to provide a record of interaction history.
• Marketing Data: Opted-out marketing preferences are retained to maintain a suppression record and avoid sending unwanted communications.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11. Security Measures

288bat applies technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Secure server environments with access controls and activity monitoring.
• Password hashing and salting for stored account credentials.
• Periodic security reviews of Platform infrastructure and data handling procedures.
• Staff access controls limiting personal data access to personnel with a legitimate operational need.

12. Your Data Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your personal data held by 288bat:

To exercise any of the above rights, please contact us using the details in Section 16. We will acknowledge your request and provide a substantive response within a reasonable period. We may ask you to verify your identity before processing a rights request.

13. Children & Minors

The 288bat Platform is strictly for adults aged 18 or older, or the higher minimum age required by the operator or license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has provided personal information to 288bat, please contact support immediately using the details in Section 16.

14. Payment Data & Financial Information

When you make a deposit or request a withdrawal on 288bat, financial data — including the transaction amount in PKR, the payment method reference and associated account identifiers — is processed by the Platform and, where necessary, shared with the relevant payment service provider to execute the transaction.

288bat does not store full payment card numbers or sensitive authentication data. Payment processing is handled by the relevant payment service provider subject to their own security standards.

15. Amendments to This Policy

288bat reserves the right to update or revise this Privacy Policy at any time. Where changes are material, we will endeavour to notify active users through an in-platform notice or email communication prior to the changes taking effect. The revised Policy will carry an updated effective date at the top of the page.

Continued use of the Platform after a revised Policy has been published constitutes your acceptance of the updated terms. If you do not accept a revised Policy, you should discontinue use of the Platform and may request account closure as described in the Terms & Conditions.

16. Contact Us

For any questions, requests or complaints relating to this Privacy Policy, the handling of your personal data, or to exercise any of your data rights, please contact the 288bat support team using the following details:

• Live Chat: Available as operator-provided service via the Platform. Available 24/7 subject to operator availability. Response times may vary.
• Support Email (plain text — not a link):  [email protected]
• FAQ: Common data and account questions are answered at the FAQ page.

When submitting a data rights request by email, please include your registered account username and a description of your request. For security purposes, we may ask you to verify your identity before acting on the request.

288bat serves players across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All support and data communications are conducted in English. Urdu-language assistance is available on request.