2888 Bit Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy explains how 2888 Bit ("we", "us", "the Platform") collects, processes, stores, and protects the personal information of players registered on the 2888 Bit online gaming platform at https://2888bit.ws. This policy applies to all Pakistani players and covers every interaction you have with the 2888 Bit Platform — from first registration through to account closure.

By creating a 2888 Bit account or continuing to use the Platform after this policy has been published or updated, you confirm that you have read and understood how we handle your personal information. If you do not agree with any part of this policy, you should stop using the Platform and contact us at support@2888bit.ws to request account closure.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which govern other aspects of your relationship with 2888 Bit. In the event of any conflict between this Privacy Policy and those documents specifically in relation to data handling, this Privacy Policy takes precedence.

2888 Bit collects only the personal data we genuinely need to operate your account, verify your identity, process your PKR transactions, and comply with applicable obligations. Below is a complete list of the categories of personal data we may collect and hold:

Account and Identity Data

• Full legal name (as it appears on your CNIC)
• Date of birth (to verify you are 18 or above)
• Pakistani mobile phone number
• Email address (if provided)
• National Identity Card (CNIC) number and a copy of the card (for KYC verification)
• Username and encrypted password
• Security questions and answers

Financial and Transaction Data

• Easypaisa, JazzCash, NayaPay, or SadaPay mobile wallet number
• Bank account number or IBAN (for IBFT withdrawals)
• Visa/Mastercard number (masked; only last 4 digits stored)
• Full transaction history — deposits, withdrawals, bonuses, and wagers in PKR
• Account balance information

Device and Technical Data

• IP address at time of login and account creation
• Device type, operating system, and browser version
• Session duration and timing data
• Geolocation data (city and country level only, derived from IP)
• Cookies and similar tracking data (see Section 7)

Gameplay and Behavioural Data

• Game session logs — which games were played, bet amounts, outcomes
• Bonus activation and wagering progress
• Tournament participation records
• Responsible gaming tool settings and usage

The data types currently held on a typical 2888 Bit account:

2888 Bit collects personal data through three main channels:

Directly from you: Information you provide when you register an account, complete identity verification (KYC), make a deposit or withdrawal request, contact our support team, participate in promotions, or update your account settings. This is the primary source of your data on the Platform.

Automatically during Platform use: Technical data collected by our servers when you access the Platform, including IP address, device identifiers, session timing, and gameplay logs. This data is collected automatically and cannot be avoided without ceasing to use the Platform. It is used primarily for security monitoring, fraud prevention, and improving Platform performance.

From payment providers: When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or a card payment processor, those providers may share transaction reference data with 2888 Bit to confirm and reconcile your payment. We do not receive your PIN, banking password, or full card details from these providers.

The table below outlines all the purposes for which 2888 Bit uses your personal data, and the specific data category used for each purpose:

2888 Bit does not use your personal data for targeted advertising to third-party ad networks, profiling for non-gaming purposes, or any activity unrelated to operating and improving the Platform.

Every instance of personal data processing at 2888 Bit is carried out on one of the following legal bases:

• Contractual necessity: Processing your account data, payment details, and game logs is necessary to perform the contract between you and 2888 Bit — i.e., to deliver the gaming services you have signed up to use.
• Legal obligation: Certain processing — including identity verification, transaction record-keeping, and fraud and anti-money laundering checks — is required by applicable obligations that 2888 Bit operates under.
• Legitimate interests: Processing for platform security, fraud prevention, responsible gaming monitoring, customer support improvement, and technical performance optimisation is carried out on the basis of 2888 Bit's legitimate interest in operating a secure and high-quality platform. We apply proportionality checks to ensure this processing does not override your privacy rights.
• Consent: Where processing is not covered by the above bases — for example, optional marketing communications — we will only do so with your explicit consent, which you can withdraw at any time by contacting support@2888bit.ws.

2888 Bit does not sell, rent, or commercially transfer your personal data to any third party for their own purposes. We share personal data only in the following limited and necessary circumstances:

• Payment processing partners: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive only the transaction data necessary to process your PKR deposits and withdrawals. They are contractually bound to use this data for payment processing only and not to retain it beyond their own regulatory requirements.
• Identity verification providers: Where third-party KYC services are used to verify your CNIC or age, they receive only the minimum data necessary for that specific verification purpose and are bound by data processing agreements with 2888 Bit.
• Platform infrastructure providers: Our hosting, cloud infrastructure, and security vendors may have access to encrypted data as part of providing their infrastructure services. All such vendors operate under strict data processing agreements that prohibit them from using your data for any purpose other than providing contracted services to 2888 Bit.
• Legal and regulatory authorities: 2888 Bit will disclose personal data to relevant authorities where required by applicable law, court order, or regulatory requirement. We will notify affected players of such disclosures wherever legally permitted to do so.

2888 Bit uses cookies and similar technologies to make the Platform work properly, keep your account session secure, and understand how players use the Platform so we can improve it. A cookie is a small text file stored on your device when you visit the Platform. Here is a breakdown of the cookies we use:

• Essential cookies: These are required for the Platform to function. They maintain your login session, remember your preferences (such as language settings), and keep your account secure between pages. The Platform cannot function without these cookies and they cannot be disabled without preventing login.
• Security cookies: Used to detect and prevent unauthorised access, fraud attempts, and bot activity. These help 2888 Bit protect your account and ensure the fairness of the gaming environment.
• Performance and analytics cookies: These collect anonymised data about how players navigate the Platform — which pages are visited most, where errors occur, and how long pages take to load. This data is used exclusively to improve Platform performance and is not linked back to individual player identities.
• Preference cookies: These remember choices you have made on the Platform, such as game display settings or notification preferences, to improve your experience on return visits.

You can manage cookies through your browser settings. Blocking essential cookies will prevent you from logging in. Blocking analytics cookies has no functional impact on your use of the Platform. Most browsers allow you to clear stored cookies at any time — doing so will log you out of your current 2888 Bit session.

2888 Bit does not use third-party advertising or social media tracking cookies. The cookies deployed on the Platform are limited to those necessary for the Platform's own operation and improvement.

Data security is a priority at 2888 Bit, not an afterthought. We implement a layered set of technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption: All data exchanged between your device and the 2888 Bit Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This ensures that even if data were intercepted, it would be unreadable.
• Encrypted storage: Personal and financial data stored in our databases is encrypted at rest. Account passwords are hashed using a strong one-way algorithm — not even our own team can see your password in plain text.
• Access controls: Access to personal data within 2888 Bit systems is restricted to authorised staff on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Fraud detection systems: Automated monitoring systems run continuously to detect unusual account activity, suspicious login patterns, and potential fraud or money laundering attempts. These systems trigger reviews and, where necessary, temporary account holds.
• Regular security audits: The 2888 Bit Platform and infrastructure undergo regular security assessments and vulnerability testing. Critical findings are addressed on an emergency basis.
• Breach response plan: In the event of a confirmed data breach affecting player information, 2888 Bit will notify affected players within 72 hours of becoming aware, clearly detailing what data was affected, the likely consequences, and the steps we are taking.

2888 Bit retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable obligations. The following retention periods apply:

When the applicable retention period expires, 2888 Bit will securely delete or anonymise the relevant data. Anonymised data — from which all identifying information has been permanently removed — may be retained for statistical and platform improvement purposes without limit.

As a 2888 Bit player, you have the following rights over your personal data. These can be exercised at any time by contacting support@2888bit.ws:

• Right to access: You may request a copy of all personal data we hold about your 2888 Bit account. We will provide this within 30 days of your request. First request is free; subsequent requests within 12 months may attract a reasonable processing fee.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Corrections to core account data (name, mobile number) may require supporting documentation.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected for, and where no legal obligation requires us to retain it. Note that transaction records and KYC data are subject to mandatory retention periods that override this right during those periods.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold.
• Right to data portability: You may request a copy of data you have actively provided to 2888 Bit in a structured, machine-readable format (e.g., CSV) for transfer to another service provider.
• Right to withdraw consent: Where data processing is based on your consent (e.g., optional marketing messages), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. 2888 Bit will cease that specific processing unless we can demonstrate compelling grounds that override your interests.

To exercise any of these rights, send an email to support@2888bit.ws with the subject line "Privacy Rights Request – [Your Username]". Please include your registered mobile number for verification. We will acknowledge your request within 48 hours and respond fully within 30 days.

2888 Bit is strictly for adults aged 18 and above. The Platform is not directed at, nor does it knowingly collect personal data from, individuals under the age of 18. If you believe that a person under 18 has registered a 2888 Bit account, please notify us immediately at support@2888bit.ws.

Upon receiving a credible report of an underage account, 2888 Bit will:

• Suspend the account immediately pending investigation.
• Verify age through available KYC documentation.
• If the account holder is confirmed to be under 18, close the account permanently, delete all personal data collected (subject to any legally mandated reporting obligations), and return any deposited funds that can be traced to a legitimate adult payment method.

We encourage all parents and guardians to use device-level parental controls to prevent underage individuals from accessing online gaming platforms. If you need guidance on available parental control tools for Pakistani smartphones and networks, our support team can point you in the right direction.

2888 Bit reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, applicable obligations, or Platform features. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

For material changes — those that meaningfully affect how we collect, use, or share your personal data — we will provide advance notice via a prominent notice on the Platform homepage. Where we have contact information for your account, we will also attempt to notify you directly. The notice will specify the nature of the change and its effective date.

Your continued use of the 2888 Bit Platform after a privacy policy update constitutes acceptance of the revised policy. If you do not agree with a material change, you may close your account and request deletion of your data (subject to mandatory retention requirements) before the change takes effect.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy concern, please contact the 2888 Bit team:

• Email: support@2888bit.ws (subject: "Privacy – [Your Username]")
• Live Chat: Available 24/7 within your logged-in 2888 Bit account
• Response time: Privacy requests acknowledged within 48 hours; full response within 30 days

If you are not satisfied with how 2888 Bit has handled your personal data or responded to a privacy rights request, you have the right to submit a formal complaint. Please begin by sending a written complaint to support@2888bit.ws with the subject line "Formal Privacy Complaint – [Your Username]". We will acknowledge within 48 hours and provide a full written response within 14 business days.