288k Privacy Policy — How We Protect Your Personal Data

1. Introduction

288k is committed to protecting the privacy and personal data of all individuals who interact with our platform. We recognise that players in Bangladesh and elsewhere entrust us with sensitive personal and financial information when they register and use our services. This Policy sets out in plain, transparent terms what data we hold, why we hold it, and the safeguards we have put in place to keep it secure.

This Policy applies to all personal data collected through the 288k website, mobile-optimised browser interface, customer support channels (including email correspondence), and any promotional communications you receive from 288k. It does not apply to third-party websites or services linked to or from the 288k platform — those services operate under their own privacy policies.

If you have questions about this Policy or wish to exercise any of your data rights, please contact our support team at [email protected]. Our team is available 24 hours a day, seven days a week, Bangladesh Standard Time (UTC+6).

2. Data Controller

For the purposes of data protection, 288k acts as the data controller in respect of all personal data collected through the platform. As data controller, 288k determines the purposes for which and the means by which personal data is processed.

Where 288k engages third-party service providers — such as payment processors, identity verification agencies, or fraud prevention services — those providers act as data processors on behalf of 288k and are contractually required to process personal data solely in accordance with 288k's documented instructions and this Policy.

3. Personal Data We Collect

288k collects the following categories of personal data from registered players and platform visitors:

288k does not collect or store full payment card numbers. Where card payments are facilitated, those transactions are handled entirely by PCI-DSS-compliant payment processors, and 288k receives only a tokenised reference.

4. How We Collect Your Data

288k collects personal data through several mechanisms:

• Direct Submission: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a 288k survey or promotion, you provide personal data directly to us.
• Automated Technical Collection: When you access the 288k website, our systems automatically record technical data including your IP address, browser fingerprint, device type, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described in Section 11 of this Policy.
• Third-Party Verification Providers: Where identity verification is required, 288k may receive identity data from specialist KYC (Know Your Customer) providers who cross-reference documents you supply against official databases.
• Payment Processors: Payment service providers used by 288k — including the mobile wallet operators bKash, Nagad, Rocket, and Upay — may share transaction confirmation data with 288k as part of the payment completion process.
• Fraud and Risk Partners: 288k works with industry-standard fraud prevention services that may provide risk scores or flag indicators derived from publicly available or shared industry data to help protect the integrity of the platform.

5. How We Use Your Personal Data

288k uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and administer your 288k player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To process your bets on cricket (BPL, IPL, T20 World Cup), live casino games, slots, and other gaming products available on the platform, and to credit winnings to your account.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, to reconcile transactions, and to investigate and resolve payment disputes.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, identity theft, account takeover, bonus abuse, and other illegal or prohibited activities on the platform.
• Responsible Gaming: To monitor your gambling activity patterns and intervene proactively where usage data suggests a player may be developing problem gambling behaviour — for example, by prompting the player to review self-exclusion tools.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, including maintaining transaction records, responding to lawful requests from competent authorities, and fulfilling anti-money laundering (AML) obligations.
• Customer Support: To respond to your queries, resolve complaints, and provide assistance through our support channels.
• Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and updates about new games or events at 288k. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify areas for improvement, and inform the development of new features.

6. Legal Basis for Processing

288k processes your personal data on the following legal bases:

• Contractual Necessity: Much of the data processing described in this Policy is necessary to perform the contract between you and 288k — specifically, to operate your account and deliver the betting and gaming services you have signed up for.
• Legal Obligation: Certain processing activities — particularly identity verification, transaction record-keeping, and AML screening — are required by applicable law and cannot be waived.
• Legitimate Interests: 288k processes some data (such as security logs, fraud-detection signals, and aggregated platform analytics) on the basis of its legitimate interest in operating a safe, secure, and well-functioning platform, provided that this interest is not overridden by your own privacy rights.
• Consent: Where 288k relies on your consent as the legal basis for processing — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing and Disclosure

288k does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: To process your deposits and withdrawals, we share the minimum necessary financial data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard processors. These partners are contractually bound to use your data solely for transaction processing.
• Identity Verification Providers: To perform KYC checks, we may share identity documents you submit with specialist verification service providers operating under strict confidentiality obligations.
• Fraud and Security Services: We share technical identifiers (such as IP addresses and device fingerprints) with fraud-prevention platforms to protect the integrity of the 288k platform and its players.
• Game Content Providers: Some game providers — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a player session token and anonymised account identifier to enable their games to function within the 288k platform. These providers do not receive your full identity data.
• Legal and Regulatory Authorities: 288k will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of 288k, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 288k's business, personal data held by 288k may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by 288k are required to implement appropriate technical and organisational security measures and to process personal data only on documented instructions from 288k.

8. Data Retention

288k retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to mandatory legal retention requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, to meet financial record-keeping and AML obligations.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial regulations.
• KYC and Identity Documents: Copies of identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Support Communications: Customer support tickets and correspondence are retained for three (3) years from the date of resolution.
• Technical Logs: Server and security logs are typically retained for twelve (12) months, after which they are automatically purged unless a security investigation requires longer retention.
• Marketing Data: Where you have opted out of marketing, we retain a suppression record of your opt-out preference indefinitely to ensure we do not contact you again.

Once a retention period expires and no legal obligation requires continued storage, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9. Security Measures

288k takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 288k platform is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Encrypted Data Storage: Sensitive fields within our databases — including payment method references and identity document data — are stored in encrypted form using strong encryption algorithms.
• Access Controls: Access to production systems and databases containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Intrusion Detection: 288k employs real-time intrusion detection and monitoring systems to identify and respond to suspicious access attempts or anomalous activity on our infrastructure.
• Regular Security Audits: Our platform and infrastructure undergo periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All 288k personnel with access to personal data receive regular training on data protection obligations and security best practices.

10. Your Data Rights

As a 288k player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data that 288k holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention requirements — we cannot erase data we are legally obliged to keep.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data — for example, while you contest the accuracy of the data we hold.
• Right to Data Portability: Where processing is based on your consent or on contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of 288k's legitimate interests, including profiling for personalisation purposes.
• Right to Withdraw Consent: Where processing is based on your consent — including marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

288k will respond to all valid data rights requests within 30 calendar days. Where a request is complex or 288k receives multiple requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with how 288k has handled a data rights request or a privacy complaint, you have the right to raise the matter with the appropriate supervisory or consumer protection authority in your jurisdiction.

11. Cookies and Tracking Technologies

288k uses cookies and similar technologies (such as local storage and session storage) to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow the website to recognise your device on subsequent visits and remember certain preferences or session states.

288k uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication cookies that keep you logged in, anti-CSRF tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players interact with the platform — such as which pages are visited most frequently and where errors occur — enabling us to improve the user experience. The data collected is aggregated and does not identify individual users.
• Functionality Cookies: These cookies remember your preferences — such as your selected language, display settings, or the last game you played — so you do not have to re-enter them on every visit.
• Targeting and Marketing Cookies: Where you have consented, these cookies track your browsing activity to help us (and our promotional partners) deliver relevant bonus offers and promotions. You may opt out of marketing cookies at any time.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use core platform features, including the ability to remain logged in to your 288k account.

12. Protection of Minors

The 288k platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from any person under the age of 21. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If 288k becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 288k platform, please notify us immediately at [email protected] so we can investigate and act without delay.

Parents and guardians are encouraged to make use of parental control tools — available through Internet Service Providers, device manufacturers, and third-party software providers — to prevent minors from accessing online gambling platforms, including 288k.

13. Changes to This Privacy Policy

288k may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the platform at login, or by sending a notification to your registered email address, at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 288k platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you do not agree with any material change to this Policy, you may close your account by contacting [email protected] before the revised Policy takes effect. Following account closure, your personal data will be handled in accordance with the data retention rules set out in Section 8 above.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 288k holds about you, please reach out through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Policy Enquiry" or "Data Rights Request" for fastest routing
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: General privacy enquiries within 48 hours; data rights requests within 30 calendar days

288k is committed to resolving all privacy concerns promptly and transparently. We treat every data rights request with the seriousness it deserves and will keep you informed of our progress throughout the process.