2888but Privacy Policy – How We Handle Your Data

1Introduction

This Privacy Policy applies to the 2888but platform, including the website at 2888but.net and the 2888but mobile app. It describes how personal information belonging to registered players and website visitors is collected, used, stored and protected.

By registering an account on 2888but, you acknowledge that you have read and understood this policy and that you consent to the collection and use of your data as described here. If you do not agree with any part of this policy, do not create an account or continue using the platform.

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated date at the top. We encourage you to review this page periodically so you are always informed about how your data is being handled.

2What Personal Information We Collect

The personal data 2888but collects falls into the following categories:

We do not collect sensitive personal data such as religious beliefs, political opinions, biometric data or medical information. The data we collect is limited to what is needed to run your account and the platform.

3How We Collect Your Information

2888but collects personal data through the following means:

• Direct submission: Information you provide when registering, updating your profile, making a deposit or contacting support.
• Payment processing: Transaction references and confirmation data received from JazzCash, Easypaisa, Raast, banks and card payment gateways when you make a deposit or withdrawal.
• Automated collection: Technical and usage data collected automatically when you visit the website or use the app, including session logs, device information and navigation patterns.
• Cookies and similar technologies: Small data files stored on your browser or device that help the platform remember your preferences and keep you logged in. See Section 9 for details.
• Verification services: If identity verification is required, we may receive confirmation data from a verification service provider. We do not store the raw documents themselves beyond the time needed for verification.

4How We Use Your Data

2888but uses your personal data for the following purposes:

• Account management: Creating and maintaining your account, processing login, managing account settings and verifying your identity when required.
• Payments: Processing deposits in PKR via JazzCash, Easypaisa, Raast, Bank Transfer and cards; processing withdrawal requests to your registered payment account.
• Platform operations: Delivering games, settling sports bets, calculating winnings, managing bonuses and ensuring the platform functions correctly for your account.
• Security and fraud prevention: Detecting unusual activity, investigating suspected fraud or account breaches, and protecting other users and the platform.
• Customer support: Responding to your support queries, resolving deposit or withdrawal issues and managing disputes.
• Compliance: Meeting anti-money laundering obligations and cooperating with lawful requests from financial institutions and payment providers.
• Platform improvement: Understanding how the platform is used to improve performance, fix issues and develop features that work better for Pakistani players.
• Responsible gaming: Monitoring account activity to support the platform's responsible gaming tools, including deposit limit enforcement and cooling-off periods.

We do not use your data for automated decision-making that has a legal or similarly significant effect on you without human review.

5Payment Data and Financial Information

Payment data is among the most sensitive information 2888but handles. We take specific steps to ensure it is protected:

• JazzCash and Easypaisa transactions are processed through encrypted connections. Your wallet PIN is never transmitted to or stored by 2888but — authentication happens directly within the wallet provider's system.
• Card payments are processed through a PCI-compliant payment gateway. 2888but does not store your full card number or CVV. Only a tokenised reference is retained for transaction verification purposes.
• Bank account IBANs and Raast-linked details provided for withdrawals are stored in your account profile in encrypted form and used only to process your withdrawal requests.
• All PKR transaction amounts are logged in your account history. This history is available to you from the account section and to 2888but's accounts team for support and compliance purposes.

6Sharing Your Data with Third Parties

2888but does not sell, rent or trade your personal information. We share data with third parties only in the following circumstances:

• Payment providers: We share the minimum data necessary with JazzCash, Easypaisa, Raast, banks and card processors to complete your transactions. These providers handle their portion of the data under their own privacy policies.
• Technology service providers: Hosting, database, app delivery and analytics services that support platform operations. These providers process data on our behalf under data processing agreements that restrict how they can use it.
• Fraud prevention and security: If a security incident requires investigation, relevant transaction or technical data may be shared with financial institutions or payment network fraud teams.
• Legal obligations: If required by a lawful order, court directive or regulatory authority with legitimate jurisdiction over financial or electronic transactions, we may disclose data as required by law. We will inform you of such disclosures where we are legally permitted to do so.

We do not share your data with advertisers, data brokers, marketing platforms or any third party for purposes unrelated to running your 2888but account.

7How Long We Keep Your Data

2888but retains personal data for as long as your account is active and for a period after account closure as required by financial record-keeping and anti-money laundering obligations. Specific retention periods by data type:

• Account and identity data: Retained for the lifetime of the account plus a minimum of five years after account closure.
• Transaction and payment records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record obligations.
• Game and betting history: Retained for a minimum of three years from the date of each session.
• Technical and usage logs: Retained for up to 12 months from collection, unless a specific security investigation requires longer retention.
• Support communications: Retained for up to three years from the date of the last communication in each case.

After the relevant retention period, personal data is securely deleted or anonymised so it can no longer be linked back to you as an individual.

8How We Protect Your Data

2888but uses a combination of technical and organisational measures to protect personal data from unauthorised access, loss or misuse:

• All data transmitted between your browser or app and the 2888but platform is encrypted using TLS (Transport Layer Security).
• Account passwords are stored in hashed form. We do not store passwords in plain text.
• Payment data is handled through encrypted, PCI-compliant systems. Full card details and wallet authentication credentials are not stored on 2888but servers.
• Internal access to player data is restricted by role. Staff and contractors only access the data required for their specific function.
• Security logs are maintained and reviewed for anomalous access patterns that could indicate a breach or intrusion attempt.

Despite these measures, no system is completely immune to security incidents. If a data breach occurs that affects your personal information, 2888but will notify affected users through the registered contact details on their account as quickly as is practicable after the breach is confirmed.

9Cookies and Tracking Technologies

2888but uses cookies and similar technologies to keep the platform functioning correctly and to understand how it is being used. Here is what each type does:

• Essential cookies: Required for core functionality — keeping you logged in during a session, maintaining your deposit preferences and ensuring the platform behaves consistently. These cannot be switched off without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, game display options and notification preferences so you do not have to reset them each session.
• Analytics cookies: Collect anonymised or pseudonymised data about how players use the platform — which games are played, which pages are visited and how sessions flow — to help improve the experience. This data does not identify you personally.
• Security cookies: Used to detect anomalous access patterns and protect against session hijacking and cross-site request forgery.

2888but does not use advertising cookies or third-party marketing tracking technologies. The cookies we use are limited to what is needed to operate and improve the platform.

You can manage cookies through your browser settings. Disabling essential cookies will affect your ability to use the platform normally — you may be logged out repeatedly or find that settings are not saved between sessions.

10Your Rights Over Your Data

As a 2888but player, you have the following rights regarding your personal data. To exercise any of these, contact us at [email protected]:

11Minors and Age Verification

2888but is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. Age is confirmed during the registration process, and 2888but reserves the right to request proof of age documentation at any time.

If we discover that an account has been registered by or on behalf of a minor, or that a minor has been using an adult's account, the account will be immediately suspended, any balance will be refunded to the original payment source, and all associated data will be deleted from our systems promptly.

12How to Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, contact the 2888but support team.

All privacy-related requests are handled by the support team and will be acknowledged within a reasonable time frame. We aim to resolve straightforward requests quickly and will communicate openly if additional time or information is needed.

• For data access or deletion requests, include your registered account username or mobile number in your message so we can locate your account.
• For reports of suspected unauthorised account access, contact support immediately and we will prioritise the response.
• For general questions about how your data is used, our team is happy to explain any part of this policy in plain terms.