2888et Privacy Policy

01 Introduction

2888et ("we," "us," or "our") operates the online cricket betting and casino platform accessible at https://2888et.com. This Privacy Policy describes how 2888et collects, processes, stores, and discloses personal data relating to individuals ("you," "your," or "player") who register for or use the 2888et platform.

2888et is committed to ensuring that your personal data is handled responsibly and in accordance with the data protection obligations imposed by our gaming licence. Our platform is designed and operated primarily for players located in Pakistan, and we take particular care to handle Pakistani player data — including CNIC details, Pakistani mobile wallet account references, and bank account information — with the highest level of security and discretion.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which contain additional provisions relevant to how your account and associated data are managed.

02 Data We Collect

2888et collects personal data through several channels: directly from you when you register or use the platform, automatically through your interaction with our services, and in certain limited cases from third-party verification partners. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create a 2888et account, we collect the following information:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (to verify that you meet the 21+ age requirement)
• Pakistani CNIC number or valid government-issued identification number
• Residential address (city, province, and full postal address)
• Email address
• Mobile phone number (used for account verification and 2FA)
• Username and encrypted password

2.2 KYC Verification Data

To comply with our regulatory obligations and anti-money laundering (AML) requirements, we may collect:

• Scanned or photographed copies of your CNIC, passport, or driver's licence
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account, bank statement showing your name)
• Source of funds documentation where required by our compliance team

2.3 Financial Transaction Data

Each deposit and withdrawal on 2888et generates transaction records. These include:

• Transaction amounts in PKR
• Payment method references (JazzCash mobile number, EasyPaisa account reference, HBL/UBL/Meezan Bank account details, or cryptocurrency wallet addresses)
• Transaction timestamps and platform-generated transaction IDs
• Deposit and withdrawal history for your account lifetime

2.4 Betting and Gaming Activity Data

Your activity on the 2888et platform generates the following data, which is retained for regulatory compliance and responsible gaming monitoring purposes:

• Bet history (markets, stakes, odds, outcomes, returns)
• Casino game session records
• Net win/loss figures by period
• Bonus claim and wagering progress records
• Self-exclusion or responsible gaming tool activation records

2.5 Technical and Device Data

When you access the 2888et platform, we automatically collect certain technical information:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session start and end times, pages visited, and actions taken
• Cookie identifiers and similar tracking technologies (see Section 8)

03 How We Use Your Data

2888et uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons set out below.

• Account Management: To create, verify, and administer your 2888et player account, including processing login authentication and maintaining your account history.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels, and to reconcile your account balance accurately.
• Regulatory Compliance: To fulfil our obligations under our gaming licence, including KYC verification, AML screening, sanctions checking, and age verification (21+). These obligations are non-negotiable and cannot be opted out of.
• Responsible Gaming: To monitor player activity for signs of problem gambling behaviour and to administer self-exclusion, deposit limit, and session time restrictions requested by players or applied by our responsible gaming team.
• Customer Support: To respond to your queries, complaints, and disputes, and to maintain a record of interactions for quality assurance and training purposes.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, duplicate registrations, money laundering, and any other prohibited conduct described in our Terms and Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the functionality, content, and user experience of the 2888et platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, PSL betting promotions, and platform updates by email or SMS. You may withdraw this consent at any time via your account settings or by contacting support.

04 Legal Basis for Processing

2888et processes your personal data on the following legal bases:

• Contractual Necessity: The majority of data processing by 2888et is necessary to perform our contractual obligations to you under the 2888et Terms and Conditions — including operating your account, processing payments, and settling bets.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and age verification — are required by the conditions of our gaming licence and applicable law. This processing cannot be refused by players.
• Legitimate Interests: 2888et processes certain data (such as technical and device data for fraud detection, and aggregated usage data for platform improvement) on the basis of our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Consent: Where processing is not required for the above purposes — particularly direct marketing communications — we will seek your explicit consent and will process that data only while consent remains in place. You may withdraw consent at any time.

05 Data Sharing & Disclosure

5.1 Third-Party Service Providers. 2888et shares personal data with a limited number of trusted third-party service providers who assist us in operating the platform. These include:

• KYC and Identity Verification Partners: Third-party providers who verify CNIC documents and proof of address on our behalf. These providers are contractually prohibited from using your data for any purpose other than identity verification.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum data required to process your transactions.
• Game Providers: Casino and sports data providers receive anonymised session data necessary to operate their games on the 2888et platform. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Cloud Infrastructure Providers: 2888et's platform data is hosted on secure cloud infrastructure. These providers process data strictly as data processors under our instruction and are bound by data processing agreements.

5.2 Regulatory and Legal Disclosure. 2888et may disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts where required by applicable law or gaming licence conditions. Such disclosures are made only to the extent required and are logged for compliance purposes.

5.3 No Sale of Data. 2888et does not sell, rent, or otherwise trade your personal data to third parties for commercial or marketing purposes. This commitment applies regardless of any business changes affecting the 2888et platform.

5.4 Business Transfers. In the event that 2888et undergoes a corporate restructuring, merger, or acquisition, personal data held at that time may form part of the assets transferred. Affected players will be notified in advance, and the receiving entity will be bound by the terms of this Privacy Policy.

06 Data Retention

6.1 Active Accounts. Personal data associated with active 2888et accounts is retained for as long as the account remains open and for a period of five (5) years following account closure. This retention period reflects our obligations under anti-money laundering regulations and our gaming licence conditions.

6.2 KYC Documents. Identity and verification documents submitted during the KYC process are retained for a minimum of five (5) years from the date of submission, in accordance with regulatory requirements. These documents are stored on encrypted servers with restricted access.

6.3 Financial Records. Transaction records, including deposit and withdrawal history, are retained for a minimum of six (6) years from the date of the transaction for tax and regulatory compliance purposes.

6.4 Marketing Data. Where you have consented to marketing communications, your contact details are retained in our marketing database until you withdraw consent or until twenty-four (24) months have elapsed since your last interaction with a marketing communication, whichever comes first.

6.5 Technical Data. Server logs and device/IP data are typically retained for a period of twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted.

07 Your Rights

As a 2888et player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request." We will respond within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data 2888et holds about you. We will provide this in a commonly used electronic format (e.g., PDF or CSV) at no charge.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account holders may update certain information directly via their account settings page.
• Right to Erasure: You may request that 2888et delete your personal data. Please note that this right is subject to our legal retention obligations — data that we are required to retain under our gaming licence or applicable law cannot be deleted before the applicable retention period has elapsed.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing that is based on legitimate interests, including profiling for responsible gaming monitoring purposes. We will consider your objection but reserve the right to continue processing where we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

08 Cookies & Tracking Technologies

8.1 What Are Cookies. Cookies are small text files placed on your device by the 2888et website when you visit. They allow the platform to recognise your device on return visits, remember your preferences, and provide a personalised experience. Cookies do not contain personally identifiable information in isolation but may be linked to your account when you are logged in.

8.2 Types of Cookies Used by 2888et.

8.3 Managing Cookies. Strictly necessary cookies cannot be disabled as they are essential for the 2888et platform to function. You may disable functional, analytical, and marketing cookies via your browser settings or through the cookie preference panel on the 2888et website. Please note that disabling certain cookies may affect your experience on the platform.

8.4 No Third-Party Advertising Cookies. 2888et does not permit third-party advertising networks to place tracking cookies on our platform. Analytical data collected is used internally only and is not shared with external advertising platforms.

09 Data Security

9.1 Technical Safeguards. 2888et implements the following technical measures to protect your personal data:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases, including CNIC numbers and payment method references
• Bcrypt hashing for all stored passwords — your actual password is never stored in plain text
• Web Application Firewall (WAF) protection against injection attacks, cross-site scripting, and other common attack vectors
• Automated intrusion detection and rate limiting on all authentication endpoints
• Regular third-party penetration testing of the 2888et platform infrastructure

9.2 Organisational Safeguards. Access to personal data is strictly limited to 2888et employees and contractors who have a legitimate need to access it as part of their job responsibilities. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.

9.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, 2888et will notify affected players within seventy-two (72) hours of becoming aware of the breach, to the extent technically practicable. Notification will be made via the email address registered on your account and will include a description of the nature of the breach, the categories of data affected, and the steps being taken to address it.

9.4 Player Responsibility. While 2888et takes every reasonable step to secure your data on our end, you are also responsible for maintaining the security of your account credentials. We strongly recommend using a unique, strong password for your 2888et account and enabling two-factor authentication (2FA) via your account settings.

10 Changes to This Privacy Policy

10.1 2888et reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The effective date at the top of this policy will be updated whenever a revision is made.

10.2 Where changes are material — meaning they significantly affect how we collect or use your personal data — we will notify registered players by email at least fourteen (14) days before the changes take effect. Continued use of the 2888et platform following that notice period constitutes acceptance of the revised policy.

10.3 Minor clarifications or corrections that do not affect the substance of data processing will be updated without separate notification, though the effective date on this page will always reflect the most recent revision.

10.4 If you have questions about any changes to this policy, or wish to exercise any of your data rights as described in Section 7, please contact our data team at [email protected].