2888bat Privacy Policy – How We Handle Your Data in Pakistan

1. Who We Are

2888bat operates the online gaming platform available at 2888bat.win. The platform offers online slots, live casino games, sports betting (including cricket markets covering PSL, T20 internationals, and other major fixtures), and related services. All of these services are accessible through the website and via the Android app and iPhone PWA.

For the purposes of this Privacy Policy, 2888bat is the data controller responsible for the personal information you provide when registering an account or using any part of the Platform. If you have questions about how your data is handled, the contact details at the end of this policy are the right place to start.

2. Data We Collect

Depending on how you use the Platform, we may collect the following categories of personal data:

We do not collect sensitive personal data such as health information, religious beliefs, or biometric data.

3. How We Collect Your Data

Data is collected through three main routes:

• Directly from you — when you register an account, complete your profile, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — when you access the Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This happens from the first page load even before registration.
• From third parties — payment processors (such as JazzCash and Easypaisa) may share transaction confirmation data with us. Fraud prevention and identity verification services may also provide data when verification checks are run.

4. Why We Use Your Data

We use your personal data for the following purposes:

• Account management — creating, maintaining, and managing your 2888bat account, including login authentication and profile settings.
• Transaction processing — handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Identity and age verification — confirming that you meet the 18+ age requirement and verifying your identity when required before processing withdrawals or applying account restrictions.
• Fraud prevention and security — detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct described in our Terms and Conditions.
• Customer support — responding to queries, resolving account issues, and managing disputes.
• Platform improvement — analysing usage patterns to improve the game lobby, mobile app performance, and overall user experience.
• Marketing communications — sending you information about relevant promotions and offers, where you have given consent or where we have a legitimate interest to do so.
• Legal and regulatory compliance — maintaining records as required and responding to lawful requests from authorities.

5. Legal Basis for Processing

We process your personal data under the following bases:

• Contract performance — processing necessary to provide the services you signed up for, including account operation and transaction handling.
• Legitimate interests — fraud prevention, platform security, and improving our services, provided these interests are not outweighed by your privacy rights.
• Consent — for marketing communications and non-essential cookies, where we have obtained your explicit agreement.
• Legal obligation — where processing is required to comply with applicable laws and regulations.

6. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following categories of recipients where necessary:

• Payment service providers — JazzCash, Easypaisa, Raast, banks, and card networks require transaction data to process your deposits and withdrawals.
• Identity verification providers — third-party services used to verify your identity and age when required during account review or before significant withdrawal requests.
• Fraud prevention and security services — services that help detect suspicious activity, unauthorised access, and multi-accounting abuse.
• Technology and hosting providers — companies that provide server infrastructure, database management, and analytics tools necessary to run the platform.
• Customer support tools — platforms used to manage live chat and support ticket systems may store communication data.
• Legal and regulatory authorities — where we are required by law or legitimate legal process to disclose information.

All third-party service providers who process your data on our behalf are required to handle it securely and use it only for the stated purpose.

7. Payments and Financial Data in PKR

All financial transactions on 2888bat are processed in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or another supported method, the transaction data necessary to complete that payment is shared with the relevant payment provider.

2888bat does not store full payment instrument credentials such as card numbers or mobile wallet PINs on its own servers. This information is handled directly by the payment processor. What we retain is transaction metadata — the method used, the amount in PKR, the date and time, and the status of the transaction — for account management and fraud prevention purposes.

8. Cookies and Tracking Technologies

2888bat uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and understand how users interact with the site. Here is a breakdown of the types of cookies used:

• Essential cookies — required for the platform to function. These include session management cookies that keep you logged in and security tokens. You cannot opt out of essential cookies and still use the platform.
• Functional cookies — remember your preferences such as language settings, preferred game categories, and game lobby filters. These improve your experience but are not strictly necessary.
• Analytics cookies — used to understand how different pages and features are used so we can make improvements. Data collected through analytics cookies is aggregated and does not identify you individually.
• Marketing cookies — used to deliver relevant promotional messages. These are only placed with your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform.

9. How Long We Keep Your Data

We retain your personal data for as long as your account remains active and for a defined period after account closure. Retention periods vary by data type:

• Account and identity data — retained for the life of the account and typically for a period of five years following account closure, to comply with legal and regulatory record-keeping obligations.
• Transaction records in PKR — financial transaction data is retained for at least five years for accounting and fraud prevention purposes.
• Support correspondence — support tickets and chat transcripts are retained for two years after the issue was resolved.
• Technical and usage data — log files and session data are typically retained for 12 months before being anonymised or deleted.

Once the applicable retention period has passed and there is no ongoing legal reason to retain your data, it is securely deleted or anonymised.

10. How We Protect Your Data

2888bat applies technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols — all communication between your device and our servers is encrypted.
• Secure password storage — account passwords are hashed and are not stored in plain text.
• Access controls — only authorised personnel with a legitimate need have access to personal data, and access is logged and monitored.
• Regular security reviews — the platform infrastructure is reviewed periodically for vulnerabilities.

While we take security seriously and apply reasonable precautions, no system is completely immune to risk. If you become aware of any security concern related to your 2888bat account, please contact support immediately.

11. Your Data Rights

As a user of the 2888bat platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the details at the end of this policy.

We will respond to valid data rights requests within a reasonable timeframe. In some cases, legal obligations may prevent us from deleting certain data immediately — we will explain this if it applies to your request.

12. Minors

2888bat is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data has been submitted by a person under 18, we will delete that data and close the associated account immediately.

If you believe a minor has accessed the platform or submitted personal data, please notify us immediately using the contact details at the end of this policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable laws, or improvements to our data practices. When we make material changes, we will notify registered users via the contact details on file or by displaying a prominent notice on the Platform.

The "Last Updated" date shown at the top of this page reflects when the current version came into effect. We encourage you to review the policy periodically if you are a regular user of the platform.

14. Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal data has been handled, you can contact the 2888bat team through the following:

• Live Chat: Available 24/7 through the platform once you are logged in. This is the fastest way to raise an urgent concern.
• Email: [email protected] — use the subject line "Privacy Request" so the correct team picks it up.

We aim to respond to all privacy-related queries within a reasonable period. For formal data rights requests, we may need to verify your identity before we can fulfil the request — this is to protect your data from being disclosed to the wrong person.