28888 operates the online gaming and sports betting platform accessible at 28888.ws. As the operator of this platform, 28888 acts as the data controller for all personal data collected from players and visitors in Pakistan and other permitted jurisdictions. As data controller, 28888 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly and transparently.
For all data-related queries — including data access requests, correction requests, deletion requests and complaints — you can reach 28888 directly at support@28888.ws. The 28888 support team is available 24 hours a day, seven days a week, and can assist in both Urdu and English.
28888 collects personal data from you directly — when you register, make a deposit, contact support or use the platform — and indirectly through your device and browsing behaviour on the 28888 website and app. The categories of data 28888 collects are set out below.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, CNIC number, date of birth, photograph (for verification) | Provided by you |
| Contact Data | Mobile number, email address, residential address in Pakistan | Provided by you |
| Financial Data | Deposit and withdrawal amounts in PKR, payment method identifiers (e.g. Easypaisa wallet number, masked card numbers), transaction timestamps | Provided by you / payment processors |
| Gaming Activity Data | Bet history, casino session logs, game titles accessed, wagering volumes, win/loss records | Generated by platform use |
| Technical Data | IP address, device type, operating system, browser type and version, session duration, page visit logs | Collected automatically |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Generated by your contacts with 28888 |
| Marketing Preferences | Your opt-in/opt-out status for promotional communications from 28888 | Provided by you / inferred from activity |
28888 uses your personal data only for the purposes for which it was collected, and only to the extent necessary for those purposes. We do not process your data for purposes that are incompatible with the original reason for collection without informing you and, where required, obtaining your consent. The primary purposes for which 28888 uses your data are:
- Account creation and management: To create your 28888 account, verify your identity and age, and keep your account details accurate and up to date.
- Transaction processing: To process PKR deposits and withdrawals, verify payment method ownership and maintain accurate financial records in connection with your 28888 account.
- Platform operation: To provide access to the games, betting markets and features available at 28888, to personalise your experience and to ensure the platform performs correctly on your device.
- Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, money laundering, collusion in games and other activities that harm players or the integrity of the 28888 platform.
- Responsible gaming: To monitor betting patterns for signs of problem gambling and to administer the responsible gaming tools in your 28888 account — including deposit limits, loss limits and self-exclusion.
- Customer support: To respond to your queries, resolve disputes, investigate complaints and communicate relevant account information to you.
- Legal and regulatory compliance: To meet anti-money-laundering obligations, age verification requirements and any other applicable regulatory requirements.
- Marketing communications (opt-in only): To send you information about 28888 promotions, new games and relevant offers — only if you have opted in to receive such communications. You can opt out at any time.
28888 does not use automated decision-making — including profiling — to make decisions that have legal or similarly significant effects on you without involving human review. All account suspension and bonus forfeiture decisions that affect your financial position are reviewed by a member of the 28888 compliance team before they are finalised.
28888 processes your personal data on the following legal bases, depending on the specific purpose of processing:
- Contract performance: Processing necessary to fulfil our obligations under the 28888 Terms and Conditions — including account creation, transaction processing and game provision.
- Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money-laundering checks and record-keeping obligations.
- Legitimate interests: Processing necessary for the legitimate interests of 28888, including fraud prevention, platform security and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, for which 28888 will always seek your explicit opt-in consent and will not send marketing unless you have provided it.
28888 does not sell your personal data to any third party — ever. Your data is shared with third parties only in the following limited circumstances, and only to the extent necessary for the specific purpose:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks and card processors receive the minimum data needed to process your PKR transactions. These processors operate under their own privacy policies and security standards.
- Game software providers: 28888's casino game providers receive technical session identifiers and game-related data necessary to operate the games you play. They do not receive your full identity data or financial details.
- Identity verification services: Third-party KYC (Know Your Customer) service providers may process your identity documents to assist 28888 in meeting regulatory age and identity verification obligations.
- Regulatory and law enforcement authorities: 28888 will share data with competent authorities when legally required to do so — for example, in response to a valid court order, regulatory investigation or anti-money-laundering inquiry.
- Professional advisers: Auditors, legal advisers and insurers may access relevant data in the course of their professional services to 28888, subject to confidentiality obligations.
28888 retains your personal data only for as long as necessary for the purposes described in this policy and to comply with applicable legal obligations. The general retention schedule for each data category is as follows:
- Identity and verification data: Retained for the full period your 28888 account is active, plus a minimum of five years after account closure to meet anti-money-laundering regulatory requirements.
- Financial transaction data: Retained for a minimum of five years from the transaction date, in line with financial record-keeping obligations applicable in Pakistan.
- Gaming activity data: Retained for the period your account is active plus three years after closure, for dispute resolution and responsible gaming review purposes.
- Technical and device data: Retained for up to 12 months from collection, after which it is anonymised or deleted.
- Customer support communications: Retained for three years from the date of the last interaction relating to the specific query or dispute.
- Marketing preference data: Retained until you withdraw consent or close your 28888 account.
When personal data reaches the end of its retention period, 28888 deletes it securely — either via certified digital deletion or physical destruction of any printed records. Where deletion is not immediately possible due to technical constraints (for example, data in backup archives), 28888 isolates the data and prevents further active processing until deletion can be carried out.
28888 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Key security measures at 28888 include:
- 256-bit SSL/TLS encryption on all data in transit between your device and the 28888 servers — including login sessions, game play and payment processing.
- Encrypted data storage for sensitive personal information including identity documents, payment method identifiers and authentication credentials. Passwords are never stored in plain text.
- Two-factor authentication (2FA) available on all 28888 player accounts — strongly recommended for all registered players and required for account changes such as withdrawal method updates.
- Real-time fraud monitoring systems that flag unusual login activity, unusual transaction patterns and other indicators of potential account compromise.
- Role-based access controls that restrict access to player data within the 28888 organisation to employees who have a genuine need to access it for their specific function.
- Regular security audits and penetration testing conducted by independent cybersecurity professionals.
- Secure backup systems with encrypted storage and restricted access, subject to the same data retention limits as primary storage.
The 28888 website and app use cookies and similar technologies to operate correctly, to improve your experience and, with your consent, for analytics purposes. A cookie is a small text file stored on your device by the website you are visiting. 28888 uses the following categories of cookies:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Maintain your login session, process transactions, prevent CSRF attacks, remember your language preference | No — required for platform to function | |
| Remember your game lobby preferences, bet slip settings and display preferences | Yes — opt-in | |
| Aggregate data on page visits, feature usage and performance issues — used to improve 28888. All data is anonymised before analysis. | Yes — opt-in |
You can manage your cookie preferences at any time via the 28888 cookie settings panel, accessible from the footer of every page on the website. You can also control cookies through your browser settings; however, disabling essential cookies will prevent you from logging in and using the 28888 platform. 28888 does not use advertising or tracking cookies that share your data with social media platforms or advertising networks.
As a player at 28888, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting the 28888 data team at support@28888.ws. 28888 aims to respond to all data rights requests within 30 days of receipt.
The 28888 platform is strictly for players aged 18 and over. 28888 does not knowingly collect personal data from individuals under the age of 18. If 28888 becomes aware that it has collected personal data from a person who is under 18, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered at 28888 or provided their personal data to the platform, please contact 28888 support at support@28888.ws immediately.
28888 uses date of birth collection during registration and may request identity document verification at any time to enforce the 18+ requirement. These measures are not optional — they are a fundamental part of 28888's commitment to player safety and responsible gaming.
28888 may update this Privacy Policy from time to time to reflect changes in the way we collect or use personal data, changes in applicable law, or improvements to the platform. The most current version of this Privacy Policy is always published at 28888.ws/privacy-policy, with the "last updated" date shown at the top of the page.
For significant changes — those that materially affect how your data is used or your rights in relation to it — 28888 will provide advance notice via email to your registered address where reasonably practicable. Continued use of the 28888 platform after the effective date of a policy update constitutes your acknowledgement of the updated version. If you do not agree with any update, you may close your account and request deletion of your data in accordance with Section 9 of this policy.
For any questions, concerns or requests relating to this Privacy Policy or 28888's handling of your personal data, please contact the 28888 data team using any of the following methods:
- Email: support@28888.ws — include "Privacy Request" in the subject line for fastest routing to the correct team member.
- Live chat: Available 24/7 on the 28888 website and app. Ask the support agent to escalate a privacy-related request to the data team.
28888 aims to acknowledge all privacy-related contacts within 48 hours and to complete substantive responses within 30 days. For complex requests — such as full data access requests covering multiple years of activity — 28888 may request an extension of up to a further 30 days, in which case you will be notified of the extension and the expected completion date. Identity verification will be required before any personal data is disclosed or deleted in response to a data rights request.