Privacy Policy – 2888but Online Casino Pakistan

This Privacy Policy explains how 2888but ("the Platform," "we," "us," "our") collects, uses, stores and protects the personal information of registered users ("Player," "you," "your") who access our website, mobile application, or any associated services.

We take privacy seriously. When you create an account on 2888but, deposit funds in PKR, play casino games, bet on Cricket or PSL markets, or simply browse the platform, you are sharing certain information with us. This policy is designed to be completely transparent about what that information is and how it is handled.

By registering on 2888but or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your data as described herein. This policy should be read together with our Terms and Conditions. If you have any questions about how your data is handled, our support team is available 24/7 via live chat.

We collect different categories of information depending on how you interact with the platform. Below is a clear breakdown of the types of data we gather:

We do not collect sensitive personal information such as religious beliefs, ethnicity or health data. We collect only what is reasonably necessary to deliver the platform services to you.

Every piece of data we collect serves a specific, legitimate purpose. We do not use your information for anything beyond what is described here:

• Account management: To create, maintain and secure your player account, verify your identity, and manage your preferences and settings.
• Payment processing: To facilitate PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods.
• Platform security: To detect and prevent fraudulent activity, unauthorised account access, money laundering and abuse of bonuses or promotions.
• Customer support: To respond to your queries, resolve disputes, and keep records of interactions for quality and training purposes.
• Service improvement: To understand how players use the platform, identify technical issues, and improve the overall gaming experience.
• Legal compliance: To meet obligations related to identity verification, financial record-keeping and anti-fraud requirements.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates and security alerts. We do not send unsolicited marketing messages without your consent.

We always process your data on a lawful basis — either because it is necessary to fulfil the services you have signed up for, because of a legal obligation, or where you have given explicit consent.

Given that 2888but processes real-money transactions in PKR, we apply a higher standard of care to financial data. When you make a deposit or request a withdrawal, relevant payment details — such as your JazzCash mobile number, Easypaisa wallet reference, bank account number, or card details — are handled with strict security protocols.

Card details processed through our platform are handled by certified payment processors. We do not store complete card numbers on our own servers. Payment processors operate under their own privacy and security obligations, and data shared with them is limited strictly to what is required to complete your transaction.

Your full PKR transaction history — all deposits, withdrawals, bonus credits and game wagers — is stored securely and accessible to you at any time from your account dashboard. This record is maintained for a minimum period required for financial compliance purposes.

We do not sell, rent or trade your personal information to any third party for marketing or commercial purposes. Full stop. Your data is only shared in the following tightly controlled circumstances:

• Payment providers: JazzCash, Easypaisa, Raast, banking partners and card processors receive only the data necessary to process your specific transaction.
• Game providers: Third-party game studios integrated into the platform may receive your session data (such as bet amounts and game results) for the purpose of delivering the game. They do not receive your identity or contact details.
• Technology and infrastructure partners: Service providers who help us run the platform (such as server hosting, analytics and security services) may process certain data on our behalf, under strict contractual data protection obligations.
• Legal and regulatory requirements: We may disclose information where required by law, a court order, or where we reasonably believe disclosure is necessary to prevent fraud or protect the rights and safety of our users or the platform.

All third parties with whom we share data are required to handle it in a manner consistent with this Privacy Policy and applicable data protection standards.

2888but uses cookies and similar tracking technologies on both the website and the mobile application. Cookies are small data files stored on your device that help us deliver a better, more personalised experience.

We use the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and remember your preferences during a visit. These cannot be disabled without affecting core functionality.
• Analytics cookies: Help us understand how players navigate the platform — which pages are most visited, where players spend the most time, and where technical issues occur. This data is aggregated and anonymised.
• Security cookies: Used to detect unusual activity such as multiple login attempts from different locations, helping protect your account from unauthorised access.

Most web browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies, though doing so may affect certain features of the 2888but platform — such as staying logged in between sessions. The mobile app uses equivalent local storage technologies that function similarly to cookies.

We retain your personal data for as long as your account is active and for a reasonable period thereafter, in line with our legal and operational obligations. Specifically:

• Account identity and contact data is retained for the full duration of your account and for a minimum period following account closure, as required for financial and compliance record-keeping.
• Transaction records — including all PKR deposits, withdrawals and gameplay history — are retained for the period required under applicable financial record-keeping standards.
• Support communications are retained for a period sufficient to handle follow-up queries and disputes.
• Technical and usage data (including IP logs and session records) is typically retained for a shorter period, sufficient for security monitoring and fraud prevention purposes.

When data is no longer required for any of these purposes, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. If you request account closure, we will process your request and delete or anonymise personal data in accordance with the above retention schedules — subject to any legal obligations that require us to retain certain records for a defined period.

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our security infrastructure includes:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols, ensuring that information cannot be intercepted in transit.
• Secure server infrastructure: Player data is stored on protected servers with restricted access, firewall protection and regular security audits.
• Account security controls: Password hashing, login attempt monitoring and session management controls help protect individual accounts from unauthorised access.
• Staff access controls: Access to personal data within our organisation is limited strictly to staff who require it for their specific role. All staff with data access are subject to confidentiality obligations.

While we take every reasonable precaution, no system can guarantee absolute security. You also have a responsibility to protect your own account — keep your password strong and private, log out after each session when using a shared device, and contact support immediately if you notice any suspicious activity on your account.

As a registered player on 2888but, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting our support team through live chat or by email:

• Right of access: You can request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your personal details are inaccurate or out of date, you can request that we correct them. You can also update basic contact information directly through your account settings.
• Right to erasure: You can request deletion of your personal data. This right is subject to our legal obligation to retain certain records for compliance purposes, as described in Section 7.
• Right to restrict processing: In certain circumstances, you may ask us to temporarily restrict how we use your data while a query or dispute is being resolved.
• Right to data portability: You can request a copy of the data you have provided to us in a commonly used, machine-readable format.
• Right to withdraw consent: Where we rely on your consent to process data (such as for marketing communications), you can withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all data rights requests within a reasonable timeframe. Identity verification may be required before we can action any request, to ensure we are responding to the genuine account holder.

2888but is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation that the user is 18 or over, and we conduct identity verification checks to enforce this.

If we become aware that an account has been registered by or on behalf of a minor, we will immediately suspend the account, void any associated transactions, and delete the personal data collected in connection with that account.

If you believe a minor has registered on 2888but using false information, please contact our support team immediately so we can investigate and take appropriate action. We take underage access very seriously and work actively to prevent it.

We may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable requirements. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that affect how we use your data in a meaningful way, we may also notify you via a platform notification or by the contact details registered on your account.

We encourage you to review this page periodically. Continued use of the 2888but platform after any changes are posted constitutes your acknowledgement of the updated policy. If you do not agree with the changes, you should discontinue use of the platform and contact support to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with our support team. We are available 24/7 through the live chat feature on the website and within the mobile app.

You can also reach us by email at the address listed in the footer of this page. When contacting us about a data-related matter, please include your registered username and a clear description of your request so we can assist you efficiently. We aim to acknowledge all privacy-related queries promptly and resolve them as quickly as possible.