1. Who We Are and What This Policy Covers
This Privacy Policy is published by 28888, the operator of the gaming and sports betting platform available at 28888.click ("28888", "we", "us", "our"). It applies to all personal data we collect from players, visitors, and users of the 28888 website and any related mobile-optimised services.
When we talk about "personal data" in this policy, we mean any information that can identify you as an individual — your name, mobile number, email address, payment details, IP address, and similar information. We understand that your personal data belongs to you, and this policy explains exactly how 28888 handles it from the moment you visit our platform to the point at which your data is deleted.
28888 operates under a valid gaming licence and is required by that licence to collect certain categories of personal data for identity verification, anti-money laundering, and responsible gaming purposes. Those legal obligations cannot be waived, but everything beyond that minimum is handled with the objective of giving you the best possible gaming experience while protecting your privacy to the highest standard we can achieve.
Scope: This policy covers data collected through the 28888 website, account registration, deposits, withdrawals, betting and gaming activity, customer support interactions, and marketing communications. It does not cover third-party websites that may be linked from our platform.
If you have any questions about how 28888 handles your data that are not answered in this policy, please contact our dedicated privacy team at privacy@28888.click. We aim to respond to all privacy enquiries within 48 hours.
2. Personal Data We Collect at 28888
28888 collects personal data through several different channels. We only collect what is genuinely necessary for operating our platform and meeting our legal obligations. The categories of data we collect are as follows:
2.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC number | Account registration & KYC |
| Contact | Mobile number, email address, postal address | Account registration |
| Financial | Payment method details, account numbers (masked), transaction history | Deposits & withdrawals |
| Verification | CNIC scan, utility bill, selfie image | KYC verification request |
| Communications | Support chat transcripts, email correspondence, WhatsApp messages | Support interactions |
2.2 Data Collected Automatically
When you access and use the 28888 platform, certain technical data is collected automatically by our systems. This includes:
- Your IP address and approximate geographic location (country/city level);
- Device type, operating system version, and browser type;
- Pages visited within the 28888 platform and time spent on each;
- Betting and gaming activity including bet amounts, game types, session duration, and outcomes;
- Login timestamps and session identifiers;
- Referral source (how you arrived at the 28888 website).
2.3 Data From Third Parties
In limited circumstances, 28888 may receive personal data about you from third parties. This includes identity verification data from KYC service providers, fraud scoring data from anti-fraud technology partners, and payment confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, banks, and card networks. We only use third-party data where it is lawfully obtained and where it serves a legitimate purpose directly related to operating your 28888 account securely.
3. How 28888 Uses Your Personal Data
28888 uses your personal data for the following purposes. We have listed each purpose alongside the data categories involved and the legal basis for the processing (detailed further in Section 4).
- Account Management: To create, maintain, and administer your 28888 account, verify your identity, authenticate your logins, and communicate account-related notices to you.
- Payment Processing: To process your deposits and withdrawals, verify payment method ownership, detect suspicious transactions, and comply with anti-money laundering (AML) obligations.
- Delivering Games and Betting Services: To operate the betting markets, casino games, Ludo tables, virtual sports, and all other features of the 28888 platform that you use.
- Regulatory Compliance: To meet obligations under our gaming licence, including Know Your Customer (KYC) checks, age verification, transaction monitoring, and reporting obligations to our licensing authority.
- Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling, to deliver responsible gaming tools, and to proactively contact you where our monitoring identifies patterns of concern at 28888.
- Fraud Prevention and Security: To detect, investigate, and prevent fraud, collusion, money laundering, and other prohibited conduct on the 28888 platform.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our support channels.
- Platform Improvement: To analyse how players use 28888, identify technical issues, improve game performance, and develop new features based on real usage patterns.
- Marketing Communications: To send you promotional offers, tournament notifications, and platform updates by email, SMS, or WhatsApp where you have consented to receive these communications. You can opt out at any time.
28888 does not use your personal data to make automated decisions that have a significant legal or similarly significant effect on you, except for automated fraud-flag alerts which are always subject to human review before any action is taken on your account.
4. Legal Basis for Processing Your Data
28888 processes your personal data on one or more of the following legal bases:
- Contract performance: Most of the data processing at 28888 is necessary to deliver the services you have registered for — operating your account, processing payments, running games, and paying out winnings. Without this processing, 28888 cannot fulfil its obligations to you as a player.
- Legal obligation: Our gaming licence requires us to carry out KYC verification, maintain transaction records, conduct AML monitoring, and cooperate with regulatory and law enforcement authorities when lawfully required. This processing is mandatory and cannot be waived.
- Legitimate interests: We process certain data on the basis of legitimate interests — for example, fraud prevention, platform security, and basic analytics to improve the 28888 experience — where those interests are not overridden by your privacy rights.
- Consent: Where we send you marketing communications, we do so only with your explicit consent. You can withdraw this consent at any time by contacting support or updating your communication preferences in your 28888 account settings.
5. Who 28888 Shares Your Data With
28888 does not sell your personal data. We do not share your data with advertisers, data brokers, or any third party for commercial purposes beyond operating the 28888 platform for you. Your data is shared only in the following limited and controlled circumstances:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard networks receive the minimum data necessary to process your transactions. These providers are subject to their own regulatory frameworks and privacy obligations.
- Identity Verification Partners: Where KYC checks are required, we engage certified third-party identity verification providers who process your CNIC and biometric data solely for the purpose of verification. They are bound by strict data processing agreements with 28888.
- Regulatory and Law Enforcement Authorities: 28888 will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent financial crime or protect the safety of individuals.
- Fraud Prevention Networks: We share fraud-related data with industry fraud prevention networks and anti-money laundering screening services on a need-to-know basis, solely to protect the integrity of the 28888 platform and our players.
- Technical Service Providers: Cloud hosting, content delivery, and cybersecurity providers who support the 28888 technical infrastructure may process data on our behalf under strict contractual data processing agreements. They are not permitted to use your data for any purpose other than providing their contracted service to 28888.
All third parties who handle personal data on behalf of 28888 are required to maintain appropriate technical and organisational security measures, to process data only as instructed by 28888, and to delete or return data when the processing relationship ends.
6. Cookies and Tracking Technologies
The 28888 website uses cookies and similar tracking technologies to operate correctly and to provide you with a better experience. A cookie is a small text file placed on your device when you visit a website. Here is how 28888 uses them:
6.1 Essential Cookies
These are required for the 28888 platform to function. They manage your login session, maintain your account security, and ensure that game sessions and betting slips work correctly. You cannot opt out of essential cookies without ceasing to use the platform.
6.2 Functional Cookies
These remember your preferences — such as your preferred language, display settings, and notification preferences — so you don't have to set them every time you visit 28888. They improve your experience without collecting data for marketing or tracking purposes.
6.3 Analytics Cookies
28888 uses privacy-respecting analytics tools to understand how players navigate the platform. This helps us identify broken features, slow pages, and opportunities to improve the 28888 experience. Analytics data is aggregated and does not identify individual players. You can opt out of analytics tracking in your account settings.
6.4 Marketing Cookies
Where you have consented to receive personalised promotions, 28888 may use cookies to understand which offers are most relevant to you based on your gaming preferences. You can withdraw this consent at any time through your account settings or by contacting support. Withdrawing consent does not affect any previous processing.
You can manage cookie preferences in your device browser settings. Please note that disabling essential cookies will prevent the 28888 platform from working correctly on your device.
7. How 28888 Secures Your Personal Data
Data security is not an afterthought at 28888 — it is a core design requirement. We apply the following technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure:
- 256-bit SSL encryption on all data transmissions between your device and the 28888 platform;
- Encrypted data storage for all sensitive personal data at rest, including payment details and identity documents;
- Access controls limiting access to personal data to only those 28888 team members who require it for their specific role;
- Multi-factor authentication for all internal 28888 systems that process personal data;
- Regular security audits and penetration testing by independent cybersecurity professionals;
- Automated intrusion detection systems that monitor for unusual access patterns around the clock;
- Staff training on data protection and security awareness for all 28888 employees who handle personal data.
In the unlikely event of a data breach that affects your personal data, 28888 will notify affected players promptly and will take immediate steps to contain the breach, assess the impact, and prevent recurrence. Where required by our licensing obligations, we will also notify relevant regulatory authorities within the timeframes required by applicable law.
8. Your Rights Over Your Personal Data
As a 28888 player, you have a number of rights in relation to your personal data. These rights exist to give you genuine control over your information and to ensure that 28888 remains accountable for how we handle it. Here is what you are entitled to:
To exercise any of these rights, contact our privacy team at privacy@28888.click. We will acknowledge your request within 24 hours and complete it within 30 days. We may need to verify your identity before processing your request to protect against unauthorised data disclosure.
9. How Long 28888 Retains Your Data
28888 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by our legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Licensing & AML obligations |
| Transaction records | 7 years from transaction date | Financial regulatory requirements |
| KYC / identity documents | 5 years after account closure | AML & licensing law |
| Betting & gaming history | 5 years after last activity | Dispute resolution & audit |
| Support communications | 3 years after resolution | Dispute evidence & quality review |
| Marketing consent records | Until withdrawn + 3 years | Consent compliance evidence |
| Technical / log data | 12 months | Security monitoring & debugging |
Once the applicable retention period expires, your personal data is securely deleted or anonymised in a way that means it can no longer be associated with you as an individual. Where anonymised data is retained after this point (for example, aggregated platform analytics), it no longer constitutes personal data and is not subject to this policy.
10. Contact, Complaints and Policy Updates
10.1 Contacting Our Privacy Team
For any privacy-related questions, data subject requests, or concerns about how 28888 handles your personal data, please contact us:
- Email: privacy@28888.click (preferred for privacy requests)
- General Support: support@28888.click
- Live Chat: Available 24/7 on the 28888 platform
We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within 30 days. For straightforward requests, we typically respond much faster. Our privacy team is based in Pakistan and is fully fluent in both Urdu and English.
10.2 Raising a Privacy Complaint
If you believe that 28888 has handled your personal data in a way that violates this Privacy Policy or applicable data protection law, please contact our privacy team in the first instance. We take all complaints seriously and will investigate them thoroughly. If you remain unsatisfied with our response, you may escalate your complaint to our licensing regulatory authority, details of which are available upon request from our support team.
10.3 Changes to This Privacy Policy
28888 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the addition of new features to the platform. When we make material changes, we will notify registered players via the email address associated with their account and will post the updated policy on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of the 28888 platform after changes are published constitutes acceptance of the updated policy.
This version of the 28888 Privacy Policy is effective as of 1 January 2025. Previous versions are available upon written request to privacy@28888.click.