LEGAL REFERENCE

How 2288win Handles Your Personal Information

At 2288win, we take the privacy of every account holder seriously. This policy explains what data we collect when you use our platform in supported regions of Pakistan...

Data collected at registrationTransaction records protectedAccount access logs securedYour rights clearly stated
Explore the Lobby Read FAQ
2288win How 2288win Handles Your Personal Information

What This Privacy Policy Covers and Why

This policy applies to all personal data processed by 2288win when you create or use an account in supported regions, including identity details submitted at registration, payment references linked to JazzCash, Easypaisa, SadaPay and Raast transactions, device and session data, and communications you send us. We process this data to operate your account, verify transactions, detect unauthorised access, and meet the obligations

that apply to us where local law permits. We do not sell your personal data to third parties. Retention periods are tied to account status and legal obligations — active account data is kept while your account remains open, and a limited set of records is retained after closure as required by applicable rules. You may request a copy of your data

or ask us to correct inaccurate records at any time through our support channels.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about this policy, want to request access to your data, or need to report a concern, our privacy support team is available through the channels below. We aim to respond to all data-related requests within five business days.

Team online

Live Chat

Open the chat window from your account dashboard to speak with our privacy support team directly. Available daily for Pakistan accounts in supported regions — no waiting on hold.

Email Support

Send your data request or privacy question to our dedicated privacy address. Include your registered account identifier so we can locate your records and respond accurately without delay.

Help Centre

Our help centre carries written answers to the most common privacy questions — account data access, correction requests, and how payment references are stored for JazzCash and Easypaisa accounts.

HOW WE PROTECT YOU

Six Ways We Keep Your Account Data Secure

Security is built into how we store and process your data at every layer — from registration through to withdrawal. These practices reflect how we actually operate, not...

Encrypted Storage

All personal data is stored with encryption at rest. Payment references from JazzCash, Easypaisa, SadaPay and Raast are tokenised so...

Access Controls

Only authorised 2288win staff with a specific operational need can access your account data. Access events are logged and reviewed...

Session Security

Each login session is tied to a token that expires after inactivity. If we detect a session opened from an...

Data Minimisation

We collect only the data needed to run your account and meet our obligations. If a piece of information has...

Breach Response

We maintain a documented incident response process. If a data breach affects your account, we will notify you through your...

Third-Party Limits

Where we share data with payment processors or verification partners, we do so under data-processing agreements that bind those parties...

How This Policy Aligns Across Our Platform

We apply the same data standards across every section of our platform. The table below shows how the principles in this policy connect to other areas of your...

Registration Data
Identity details collected when you open an account are governed by this policy from the moment you submit them.
Payment References
JazzCash, Easypaisa, SadaPay and Raast transaction references are processed under the same rules as all other personal data.
Account Activity Logs
Records of your sessions, bets placed, and withdrawals requested are retained only as long as operationally or legally required.
Marketing Preferences
If you have opted in to communications from us, your preference is stored and you can withdraw it at any time through account settings.
Verification Documents
Identity documents submitted for account verification are stored securely and not shared beyond the verification process without your consent.
Device and Browser Data
Technical data collected for fraud detection is held separately from your personal profile and is not used for profiling unrelated to security.
Data Deletion Requests
Requests to delete your account data are processed in line with our retention schedule and acknowledged within five business days of receipt.

Key Elements That Shape Our Privacy Approach

These six elements define how privacy works across the 2288win account experience. Each one reflects a deliberate choice about how we handle your information — not...

Lawful Basis

Every data processing activity we carry out has a documented lawful basis — account performance, legal obligation, or legitimate interest. We do not process your data without one of these foundations in place.

Consent Management

Where we rely on your consent to process data, you can withdraw that consent at any time. Withdrawal does not affect processing already carried out while consent was in place.

Data Portability

You can request a structured copy of the data we hold about your account. We provide this in a machine-readable format so you can review or transfer it as you choose.

Correction Rights

If any personal data we hold about you is inaccurate, you have the right to ask us to correct it. Submit a correction request through live chat or email and we will update our records promptly.

Retention Schedule

We keep active account data for as long as your account is open. After closure, a defined subset of records is retained only for the period required by applicable legal or regulatory obligations.

Policy Updates

When we make material changes to this policy, we notify account holders through their registered contact details before the changes take effect, giving you time to review the update.

Frequently Asked Questions About Our Privacy Policy

We collect your name, contact details, date of birth, and the payment method references you link to your account — such as your JazzCash or Easypaisa mobile number — along with device and session data generated when you log in.

Payment references are tokenised during processing. We store a reference identifier rather than your raw mobile wallet number, and that token is encrypted at rest so it cannot be read if the storage layer is ever accessed without authorisation.

Yes. Submit a data access request through live chat or our support email with your registered account identifier. We will compile and send you a structured copy of your personal data within the timeframe required by applicable rules.

A limited set of records — transaction history, verification documents, and account identifiers — is retained after closure for the period required by applicable legal or regulatory obligations. Data with no ongoing purpose is deleted on a documented schedule.

We share data only with partners directly involved in running your account — payment processors for JazzCash, Easypaisa, SadaPay and Raast transactions, and identity verification providers. All such parties are bound by data-processing agreements.

We notify account holders through their registered contact details before any material change takes effect. The updated policy is also published at this address so you can review the current version at any time without contacting support.

Contact our privacy support team immediately via live chat. We will review access logs for your account, take any necessary security steps, and keep you informed of the outcome in line with our incident response process.