Privacy Policy — 2888bat Pakistan

This Privacy Policy applies to the online betting and gaming platform operated at https://2888bat.bet and all services accessible through it, including cricket betting, slot games, jackpot slots, Baccarat, card games and live score features. When this Policy refers to "2888bat", "we", "us" or "our", it means the platform and the team responsible for operating it.

2888bat is the data controller for all personal data collected from Pakistani players through registration, account use, payment transactions, and customer support interactions. As data controller, we determine the purposes for which your personal data is processed and the means by which it is processed.

For all data-related enquiries, requests to exercise your rights, or questions about this Privacy Policy, contact our data team at: support@2888bat.bet. We aim to respond to data-related requests within 5 business days.

Information You Provide Directly

When you register at 2888bat, we collect the information you enter into the registration form: your full name, Pakistani mobile number, email address, date of birth, and the password you choose. For identity verification (KYC), we may collect a copy of your CNIC document and a selfie photograph to verify it belongs to you. You are not required to complete KYC immediately at registration, but it is required before your first withdrawal above Rs 50,000.

Information We Collect Automatically

When you access 2888bat from your device, we automatically collect technical information including your IP address, device type and model, mobile operating system version, browser type, screen resolution, and the pages or game sections you visit. This data is used for security monitoring, fraud detection, and to understand how Pakistani players use the platform so we can improve the experience.

Information From Your Platform Activity

Every bet you place, every game you play, every bonus you claim, and every deposit and withdrawal you make at 2888bat creates a transaction record associated with your Account. These records form your gaming history and are necessary for account management, balance maintenance, bonus tracking, responsible gaming monitoring, and dispute resolution.

2888bat uses your personal data for the following clearly defined purposes:

• Account creation and management: Creating your 2888bat account, maintaining your profile, processing your login, and managing your session security.
• Processing PKR transactions: Handling your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and cards — and processing your withdrawal requests back to those methods.
• Identity verification (KYC): Confirming that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your payment methods belong to you.
• Game and bet management: Recording your cricket bets, processing slot and casino game rounds, calculating results, and settling your account accordingly.
• Bonus and promotion administration: Tracking your wagering progress against bonus requirements, issuing promotional credits, and ensuring compliance with promotion terms.
• Responsible gaming: Monitoring your gaming activity for patterns that may indicate problem gambling, enforcing deposit and loss limits you've set, and administering self-exclusion requests.
• Customer support: Responding to your enquiries, investigating complaints, and resolving disputes regarding bets, payments, or account issues.
• Security and fraud prevention: Detecting unusual activity, preventing unauthorised account access, identifying multiple accounts, and protecting the platform against financial crime.
• Legal and regulatory compliance: Meeting our obligations under applicable law, cooperating with lawful regulatory or law enforcement requests, and maintaining financial records as legally required.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use 2888bat and to improve features, navigation, and game offerings.
• Marketing communications (with your consent only): Sending promotional emails, SMS, or notifications about bonuses, new games, and 2888bat features — only if you have opted in and only until you withdraw that consent.

Every processing activity at 2888bat rests on one of the following legal bases:

• Contractual necessity: Account management, payment processing, game operation, and dispute resolution are necessary to perform the service you've contracted for when you registered at 2888bat. Without this processing, we cannot operate your account.
• Legal obligation: Identity verification (KYC), financial transaction records, and cooperation with lawful regulatory or law enforcement requests are required by applicable legal obligations. 2888bat is legally required to maintain these records regardless of your preferences.
• Legitimate interests: Security monitoring, fraud detection, platform improvement using anonymised analytics, and responsible gaming monitoring are based on 2888bat's legitimate interest in operating a secure, fair, and responsible platform. In each case, we've assessed that our legitimate interest is not overridden by your privacy rights.
• Consent: Marketing communications (promotional emails, SMS, platform notifications) are only sent with your explicit prior consent. You may withdraw consent at any time with immediate effect.

Because 2888bat operates exclusively in PKR and uses Pakistani-specific payment methods, we want Pakistani users to understand exactly how their payment information is handled.

Easypaisa and JazzCash

When you deposit via Easypaisa or JazzCash, the transaction is initiated through the respective payment provider's API. 2888bat receives a transaction confirmation reference and the masked version of your mobile number (e.g., 03xx-xxxxx99). We never receive or store your full mobile wallet PIN or password. Subsequent withdrawals to the same Easypaisa or JazzCash number use the stored masked reference — your full number is not held in plain text in our systems after initial registration.

NayaPay, SadaPay and Other Digital Wallets

The same tokenisation and masking approach applies to NayaPay, SadaPay, and other digital wallet integrations. 2888bat stores only what is necessary to process your withdrawal — not your full wallet credentials.

Bank IBFT

For bank transfer withdrawals, we store your bank name, masked account number (last 4 digits visible), and account title as you provide them. This information is used exclusively to process your withdrawal. It is not shared with any party other than the banking intermediary required to execute the IBFT transfer.

2888bat does not sell, rent, or trade your personal data. We share your information only in the following specific, limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking intermediaries, and card payment processors receive the minimum data necessary to execute your transaction. They are contractually bound to use your data only for payment processing purposes.
• Game software providers: Licensed game developers whose games run on 2888bat may receive anonymised session data and technical event logs for anti-fraud and responsible gaming purposes. They do not receive your identity, contact details, or payment information.
• KYC verification services: When you submit identity documents, a third-party KYC verification service may process your CNIC data to confirm authenticity. These services are data processors acting under 2888bat's instructions and are contractually prohibited from using your data for any other purpose.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a Pakistani or international regulatory or law enforcement authority, 2888bat will disclose the required information. We will, where legally permitted, notify you of such a request.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 2888bat's assets, your personal data may transfer to the acquiring entity. You would be notified in advance of any such transfer and the Privacy Policy would be updated to reflect the new operator.

All third parties with whom 2888bat shares your data are required to have appropriate data protection measures in place. 2888bat does not authorise any third party to use your personal data for their own marketing or commercial purposes.

2888bat uses cookies and similar technologies on our platform. A cookie is a small text file stored on your device when you visit a website. Here's what we use and why:

• Essential cookies: These are strictly necessary for the platform to function — they keep you logged in during your session, maintain your game state, and process your bets. You cannot opt out of essential cookies without also opting out of using the platform entirely.
• Security cookies: Used to detect and prevent fraud, identify unusual access patterns, and protect against cross-site request forgery. These are not optional as they protect both you and the platform.
• Analytics cookies: We use anonymised analytics to understand how Pakistani players navigate 2888bat — which sections are most visited, where players encounter errors, and how to improve the mobile experience. These do not identify you personally.
• Preference cookies: Remember your language settings, display preferences, and other customisations so you don't have to reset them on every visit.
• Marketing cookies (consent required): If you consent to marketing communications, we may use cookies to personalise promotional content shown to you on the platform. You can withdraw this consent at any time in your account settings.

Most modern browsers allow you to view and delete cookies stored by websites. Deleting essential or security cookies will require you to log in again on your next visit and may affect some platform functions. 2888bat's cookie settings can be managed from your account preferences panel.

2888bat employs a layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The key measures in place include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and 2888bat's servers is encrypted in transit using TLS 1.3 — the most current standard, which is what you see as the padlock icon in your browser's address bar.
• Data encryption at rest: Personal data and payment records stored on 2888bat's servers are encrypted using AES-256 encryption. Even in the event of an unauthorised server access, the data is unreadable without the encryption keys.
• Role-based access controls: Only staff with a documented need to access your data can do so. Support agents see what they need to help you; marketing staff see only consent records; compliance staff see transaction records. Access is logged and regularly audited.
• Two-factor authentication: 2888bat's internal administrative systems require two-factor authentication for all staff access. We also offer and encourage 2FA for player accounts.
• Intrusion detection: Our systems include real-time monitoring for unusual access patterns, login anomalies, and potential security incidents. Security incidents trigger immediate investigation and, where necessary, account protection.

As a 2888bat player and data subject, you have the following rights regarding your personal information. These can be exercised at any time by contacting support@2888bat.bet:

2888bat will respond to all rights requests within 30 days. In complex cases we may extend this by a further 60 days, in which case we'll notify you of the extension and the reason. There is no fee for exercising your rights. We will not treat you differently or restrict your platform access because you've exercised a data right.

During registration, every user must confirm that they are 18 or older. For withdrawals or where fraud indicators arise, 2888bat may request date of birth verification through CNIC documentation. If we discover that a person under 18 has registered, the account will be immediately closed, the individual's data will be deleted from our active systems except where retention is required by law, and any deposited funds will be returned to the payment method used.

If you are a parent or guardian and believe your child has registered at 2888bat, please contact us immediately at support@2888bat.bet. We will investigate and take action promptly. We also recommend using your device's parental controls to prevent underage access to online betting platforms.

2888bat does not keep your personal data indefinitely. Retention periods are determined by the purpose for which data was collected and by applicable legal requirements. The key retention periods are:

• Active account data (profile, contact details, preferences) — retained for the life of your account and deleted within 12 months of account closure, unless a longer retention period applies.
• Financial transaction records (deposits, withdrawals, bet records) — retained for 7 years from the date of each transaction, as required by standard financial record-keeping obligations.
• KYC and identity documents — retained for the life of your account plus 5 years from closure, in line with anti-money laundering obligations.
• Support communications — retained for 3 years from your last contact to support, for quality assurance and dispute evidence purposes.
• Technical and security logs (IP addresses, device data) — retained for 12 months from collection.
• Marketing consent records — retained until account closure or until you withdraw consent, plus 12 months as evidence of the consent status.

At the end of each retention period, data is securely deleted or permanently anonymised so it cannot be linked back to you. Anonymised, aggregated analytics data may be retained indefinitely as it cannot identify any individual player.

2888bat reviews this Privacy Policy at least annually and updates it whenever our data processing practices change in a meaningful way. When we make material changes — anything that affects your rights or our obligations — we will notify you by posting a prominent notice on the platform and, where possible, by email to your registered address before the changes take effect.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. For minor changes — corrections of typographical errors, updates to contact details, or clarifications that don't change the substance of the Policy — we may update the document without advance notice.

Continuing to use 2888bat after a notified material change takes effect constitutes your acceptance of the revised Privacy Policy. If you disagree with a material change, you can close your account by contacting support@2888bat.bet before the change takes effect.

For any question about this Privacy Policy, to exercise any of your data rights, or to report a concern about how 2888bat handles your personal information, contact our data team through the following channels:

• Email: support@2888bat.bet — subject line: "Privacy / Data Request"
• Live Chat: Available 24/7 from within your 2888bat account — ask to be connected to the data team for formal requests

Our data team aims to acknowledge all privacy requests within 24 hours and provide a substantive response within 5 business days. For access requests or other rights exercises requiring data retrieval, the maximum response time is 30 days from receipt of your request, with the option to extend by a further 60 days in complex cases (with prior notification to you).