Privacy Policy
2888pk is committed to protecting your personal information. This Policy explains exactly what data we collect, why we collect it, how it is used and what rights you hold over your own information.
Introduction
This Privacy Policy ("Policy") describes how 2888pk ("Platform", "we", "us", "our"), an English-language online gaming information platform serving the Pakistan market and accessible at https://2888pk.cam/, collects, processes, stores, shares and protects personal data relating to users of the Platform ("User", "you", "your").
2888pk is committed to responsible data stewardship. We collect only the personal data necessary to operate and improve the Platform, verify user identities, process transactions and comply with applicable legal obligations. We do not sell your personal data to unaffiliated third parties.
This Policy applies to all users accessing the Platform from any location, including Pakistan — whether from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or any other city — regardless of the device or method of access.
Scope: This Policy covers data processed directly by 2888pk in connection with Platform operation. It does not cover data collected by third-party gaming operators, payment providers or other services that you may access via links or integrations referenced on the Platform. Those parties maintain their own privacy policies, which you should review independently.
Definitions
The following terms carry the meanings assigned throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial information. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure and any other form of handling. |
| "Data Controller" | 2888pk, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | Any third party that processes Personal Data on behalf of 2888pk, including cloud hosting providers, analytics services and KYC verification partners. |
| "KYC" | Know Your Customer — the identity verification process under which users provide documentation (such as a CNIC or passport) to confirm identity and age. |
| "Cookies" | Small text files stored on a user's device by a website to recognise the device, remember preferences and collect usage analytics. |
| "Consent" | A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose. |
Data We Collect
2888pk collects Personal Data in three broad categories: information you provide directly, information collected automatically as you use the Platform, and information obtained from third-party sources where applicable.
3.1 Data You Provide Directly
- Account Registration: Full name, date of birth, email address, username and chosen password.
- KYC Verification: Government-issued identity document (Pakistani CNIC, passport), selfie or portrait photograph, and proof of address where required.
- Financial Information: Payment method details sufficient to process deposits and withdrawals. Full card numbers are not stored by 2888pk — these are handled by the applicable payment processor.
- Support Communications: Any information you include in emails or chat messages sent to the 2888pk support team, including your account reference number and query details.
- Preference Settings: Responsible gambling limit selections, notification preferences and communication opt-in or opt-out choices.
3.2 Data Collected Automatically
- Device & Technical Data: IP address, browser type and version, operating system, device type and screen resolution.
- Usage Data: Pages visited, time spent on each page, click paths, search queries entered within the Platform and referral source.
- Session Data: Login timestamps, session duration, language settings and time zone.
- Cookie Data: Data stored via first-party cookies and, where applicable, third-party analytics cookies. See Section 11 for full details.
3.3 Data from Third Parties
- Identity Verification Partners: Verification outcomes (pass/fail) returned by KYC processing providers. We do not receive raw document scans stored by the provider.
- Fraud & Risk Services: Risk scores or flags returned by AML screening or fraud-detection services used in connection with transaction monitoring.
How Data Is Collected
Personal Data is collected through the following methods:
- Registration Forms: When you create an account on the Platform, the information entered in the registration form is transmitted to our servers over an encrypted HTTPS connection.
- KYC Upload Portals: Identity documents are submitted via a secure, encrypted upload interface. Document data is processed by our designated KYC partner under a data processing agreement.
- Contact & Support Channels: Information provided via email to [email protected] is stored in our support ticketing system and retained for the period described in Section 9.
- Cookies and Local Storage: Technical and analytics data is collected passively as you browse the Platform, subject to applicable cookie consent controls.
- Third-Party Integrations: Where you interact with third-party services referenced on the Platform (such as payment processors), those services may collect additional data under their own privacy policies.
Lawful Basis for Processing
2888pk processes Personal Data only where a lawful basis exists. The principal bases applicable to our processing activities are as follows:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract — necessary to provide Platform services to you. |
| KYC / AML identity verification | Legal obligation — required to comply with anti-money laundering and age verification requirements. |
| Transaction processing | Performance of a contract — necessary to process deposits and withdrawals. |
| Customer support communications | Legitimate interest — necessary to respond to user queries and resolve disputes. |
| Analytics and Platform improvement | Legitimate interest — to understand usage patterns and improve the user experience. |
| Marketing communications | Consent — only sent where you have actively opted in to receive promotional messages. |
| Fraud detection and security | Legitimate interest and legal obligation — to protect Platform integrity and comply with AML requirements. |
How We Use Your Data
Personal Data collected by 2888pk is used for the following purposes:
6.1 Account & Platform Services
- Creating, maintaining and authenticating your user account;
- Processing deposit and withdrawal transactions via applicable payment channels;
- Applying bonus offers, loyalty rewards and promotional credits to eligible accounts;
- Providing customer support and resolving disputes or queries.
6.2 Compliance & Security
- Verifying your age and identity as required by KYC obligations;
- Screening transactions for anti-money laundering (AML) compliance;
- Detecting, investigating and preventing fraudulent, abusive or unlawful activity;
- Responding to lawful requests from regulatory bodies, courts or law enforcement.
6.3 Responsible Gambling
- Monitoring account activity to identify patterns consistent with problem gambling behaviour;
- Enforcing player-set deposit limits, loss limits and self-exclusion periods;
- Sending responsible gambling reminders and support signposting where appropriate.
6.4 Platform Improvement & Communications
- Analysing aggregated, anonymised usage data to improve Platform design and content;
- Sending transactional communications such as account confirmations, security alerts and withdrawal notifications;
- Sending marketing and promotional communications only where you have provided explicit consent and only to the extent permitted by applicable law.
Data Sharing & Disclosure
2888pk does not sell, rent or trade your Personal Data to unaffiliated third parties. We may share Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:
- KYC & Identity Verification Providers: To fulfil age and identity verification obligations. These providers process data under binding data processing agreements with 2888pk.
- Payment Processors: To facilitate deposit and withdrawal transactions. Payment providers referenced for Pakistani users — such as Easypaisa, JazzCash, Raast and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah — operate independently. Sharing personal data with any payment provider does not constitute an endorsement of gambling by that provider.
- Cloud Infrastructure & Hosting: Server and data storage providers who host Platform systems. These providers are contractually bound to process data only on 2888pk's instructions.
- Analytics Services: Anonymised or pseudonymised usage data may be shared with analytics platforms to support Platform improvement.
- Legal & Regulatory Authorities: Personal Data may be disclosed to courts, regulators, law enforcement or government agencies where required by applicable law or a valid legal order.
- Business Transfers: In the event of a merger, acquisition or sale of all or part of 2888pk's business, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.
No Sale of Data: 2888pk will never sell, licence or otherwise commercially exploit your Personal Data for the benefit of third parties. Any data sharing is strictly limited to what is necessary for the operational and legal purposes described in this Policy.
International Data Transfers
The 2888pk Platform serves users in Pakistan and may store or process Personal Data on servers located outside Pakistan. Where Personal Data is transferred to jurisdictions that may not have equivalent data protection laws, 2888pk implements appropriate safeguards to ensure that your data receives a comparable level of protection, including:
- Contractual clauses between 2888pk and the data processor requiring equivalent data protection standards;
- Use of service providers that maintain internationally recognised security certifications;
- Anonymisation or pseudonymisation of data where full Personal Data is not required for the processing purpose.
By using the Platform, you acknowledge that your Personal Data may be transferred to, and processed in, countries outside Pakistan, including countries where data protection laws may differ from those applicable in Pakistan.
Data Retention
2888pk retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account, plus up to 5 years following account closure. |
| KYC identity documents | Duration of account, plus up to 5 years following account closure (or longer if required by AML obligations). |
| Transaction records | Minimum 5 years from the date of the transaction, for AML and audit purposes. |
| Support communications | 3 years from the date of the communication, unless relevant to an ongoing dispute. |
| Analytics data (anonymised) | Up to 26 months from collection, consistent with standard analytics platform cycles. |
| Marketing consent records | For the duration of the consent, plus 3 years following withdrawal of consent. |
Following the applicable retention period, Personal Data is securely deleted or anonymised. Where deletion is not immediately possible due to backup schedules, data will be isolated and protected from further processing until deletion occurs.
Security Measures
2888pk implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. Key measures include:
- HTTPS / TLS Encryption: All data transmitted between your browser and the Platform is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser's address bar.
- Access Controls: Personal Data is accessible only to authorised 2888pk personnel and processors who need it to perform their functions, governed by role-based access controls.
- Two-Factor Authentication: Where available, account access is protected by optional two-factor authentication to reduce the risk of unauthorised login.
- Pseudonymisation: Analytics and certain internal processing activities use pseudonymised data to reduce privacy risk.
- Incident Response: 2888pk maintains documented data breach response procedures. Where a breach is likely to result in material risk to users, affected individuals will be notified in accordance with applicable obligations.
Your Responsibility: While 2888pk implements robust security measures, no transmission over the internet is entirely risk-free. You are responsible for maintaining the confidentiality of your login credentials. If you suspect unauthorised access to your account, contact us immediately at [email protected].
Cookies & Tracking Technologies
2888pk uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website.
11.1 Types of Cookies We Use
- Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, authentication and security features. They cannot be disabled without impairing Platform functionality.
- Functional Cookies: Remember your preferences — such as language settings and responsible gambling limit selections — to personalise your experience.
- Analytics Cookies: Collect anonymised data on how users interact with the Platform (page views, click paths, session duration) to help us improve content and usability.
- Marketing Cookies: Used only where you have consented, to measure the effectiveness of promotional campaigns. These are not used to track you across unrelated third-party websites.
11.2 Cookie Management
You may control and delete cookies through your browser settings. Most modern browsers allow you to refuse all or certain types of cookies. Note that disabling strictly necessary cookies may prevent you from using core Platform features. For full cookie management, refer to the help documentation of your browser (Chrome, Firefox, Safari, Edge or other).
Your Rights
Subject to applicable law, you hold the following rights in respect of Personal Data that 2888pk processes about you. To exercise any of these rights, please contact us at the address provided in Section 16.
- Right of Access: You may request a copy of the Personal Data we hold about you, together with information on how it is processed.
- Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML retention requirements).
- Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, such as while a rectification request is assessed.
- Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will honour objections unless we have compelling legitimate grounds to continue.
- Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
We will respond to all rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, with written notification provided. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case a reasonable fee may apply.
Children's Privacy
The 2888pk Platform is strictly for adults aged 18 or above — or the higher minimum age required by the applicable operator licence jurisdiction. We do not knowingly collect Personal Data from individuals under the age of 18.
If we become aware that Personal Data has been collected from a minor, that data will be deleted promptly and the associated account closed. If you believe that a minor has registered an account on the Platform, please notify us immediately at [email protected] so that we can take appropriate action.
Age Verification: We use KYC verification tools to confirm the age and identity of all registered users. Providing false date-of-birth information to circumvent age restrictions is a breach of our Terms & Conditions and may constitute a criminal offence under applicable law.
Third-Party Links & Services
The 2888pk Platform may contain references to third-party gaming operators, payment service providers and other external resources. When you interact with or navigate to a third-party service, that service's own privacy policy governs the collection and use of your personal data — not this Policy.
2888pk is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party service before providing personal information to them. In particular, references to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on the Platform are for contextual familiarity only; data shared with these providers in connection with payment transactions is governed by those providers' own terms and policies.
Changes to This Policy
2888pk reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. For significant changes, we may provide additional notification via on-site banner or registered email address.
Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept any revised Privacy Policy, you must cease using the Platform and may request account closure in accordance with the procedure described in our Terms & Conditions.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the 2888pk data team. We will endeavour to respond to all enquiries within 30 days.
Email: [email protected]
When submitting a data rights request, please include your full name, registered email address and a clear description of the right you wish to exercise (e.g., "I wish to exercise my right of access" or "I wish to request deletion of my account data"). This helps us process your request efficiently.
Support is available in English and Urdu. If you are contacting us from Karachi, Lahore, Islamabad or elsewhere in Pakistan, you may write in English or mention Urdu as your preferred response language and we will do our best to accommodate.
Response Commitment: We take data rights requests seriously and aim to acknowledge all requests within 5 business days. Full responses will follow within 30 days, with extension notifications provided where the complexity of the request requires additional time.
Your Data Rights at a Glance
A quick-reference summary of the rights you hold over your personal data on the 2888pk Platform.
Right of Access
Request a copy of all Personal Data we hold about you.
Right to Rectify
Correct inaccurate or incomplete data in your profile at any time.
Right to Erasure
Request deletion of your data where no overriding legal obligation requires retention.
Right to Restrict
Ask us to pause processing while you challenge the accuracy or use of your data.
Data Portability
Receive a copy of your data in a structured, machine-readable format where applicable.
Right to Object
Object to processing based on legitimate interests, including any marketing profiling.
Withdraw Consent
Withdraw marketing consent at any time without affecting prior lawful processing.
30-Day Response
We commit to acknowledging your request within 5 days and responding in full within 30 days.
Our Privacy Commitments
Six core principles that guide how 2888pk handles your personal data every day.
No Sale of Your Data
2888pk will never sell, rent or commercially exploit your Personal Data. Data is shared only where operationally or legally necessary, with bound processors and authorities.
Encrypted at Every Stage
All data in transit is protected by HTTPS/TLS encryption. Stored data is protected by access controls and pseudonymisation where technically feasible.
Minimal Data Collection
We collect only the data strictly necessary for account management, KYC, transactions and Platform improvement. We do not collect data speculatively.
Defined Retention Limits
Every data category has a documented retention period. Data is deleted or anonymised once the applicable period expires and legal obligations are satisfied.
KYC Protects Everyone
Identity verification is not just a regulatory requirement — it protects the Platform from fraud and ensures that only eligible adults participate in gaming activity.
Support in English & Urdu
Data rights requests and privacy queries can be submitted in English. Where Urdu is preferred, our support team will make every effort to accommodate Pakistani users accordingly.
Questions About Your Privacy?
If you'd like to exercise a data right, request your data or ask anything about this Privacy Policy, get in touch with our support team. You can also explore the full Terms & Conditions or return to the homepage.