Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how 282win ("Platform", "we", "us", "our") — accessible at https://282win.cam — collects, uses, processes, stores and protects the personal information of users ("you", "your", "User") who access and use the Platform and its associated services.

282win is an English-language online betting and casino information platform designed for Pakistani users. We understand that data privacy is a matter of significant concern, particularly in the context of online financial services and identity-sensitive registration processes. This Policy is designed to give you full visibility of how your data is handled — transparently, in plain English.

By registering an Account on the Platform, depositing funds or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue your use of the Platform.

2. Definitions

For the purposes of this Policy, the following terms are defined as follows:

• "Account" — the individual registered user profile created by you on 282win.
• "Controller" — the entity that determines the purposes and means of personal data processing. For the purposes of this Policy, 282win acts as the data controller.
• "KYC" — Know Your Customer; the identity and document verification process required by regulatory frameworks applicable to gambling operators.
• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, date of birth, national identity number (CNIC), contact details, financial information and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, deletion and transfer.
• "Processor" — a third party that processes personal data on behalf of the Controller under contractual obligation.
• "Sensitive Data" — personal data warranting enhanced protection, including financial account details, identity documents and data revealing national origin or health status.
• "Third Party" — any entity other than you and 282win, including payment processors, identity verification providers, fraud prevention services and regulatory authorities.

3. Data We Collect

282win collects personal data in the following categories. We do not collect data beyond what is described below without your explicit knowledge and, where required, your informed consent.

4. How We Collect Your Data

4.1 Directly From You

The majority of personal data 282win holds about you is provided directly by you: during Account registration, when completing KYC verification, when making deposits or withdrawals via the Cashier, when contacting customer support, and when responding to platform surveys or notifications.

4.2 Automatically Through Platform Use

When you browse the Platform, we automatically collect technical and usage data through cookies, server logs and similar tracking technologies. This includes your IP address, browser type, referring URL, pages visited and session timestamps. This data is used for security, fraud detection and performance monitoring — not for profiling or selling to third-party advertisers.

4.3 From Third-Party Verification Services

Where identity verification is required as part of the KYC process, 282win may use third-party identity verification providers. These providers may access and validate data you submit (such as CNIC details) against authoritative sources. The data shared with verification partners is limited to what is strictly necessary for the verification process.

4.4 From Payment Processing Partners

When you deposit or withdraw funds, transactional data is shared with and received from payment processors. References to familiar Pakistani payment services — including Easypaisa, JazzCash, Raast, and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah — are provided for contextual familiarity only. These providers maintain their own data processing relationships with users. None of these providers endorse or are affiliated with 282win.

5. Data Processing

282win processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining and securing your Account; authenticating your identity at login; processing password reset and security requests.
• Service Delivery: Processing bets, managing casino game access, resolving game disputes and administering promotional offers.
• Financial Transactions: Processing deposits and withdrawal requests; maintaining an auditable record of all Account financial activity.
• Regulatory Compliance: Fulfilling KYC, AML and customer due-diligence obligations as required by the Operator's applicable licence conditions.
• Responsible Gambling: Monitoring Account activity for patterns associated with problem gambling; administering deposit limits, loss limits, session timers and self-exclusion requests.
• Security & Fraud Prevention: Detecting and preventing unauthorised account access, fraudulent transactions, multi-accounting and bonus abuse.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve navigation, performance and content relevance.
• Customer Support: Responding to queries, managing complaints and maintaining records of support interactions.
• Legal Obligations: Retaining records as required by applicable law, cooperating with regulatory investigations and responding to lawful authority requests.

6. Legal Basis for Processing

282win processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you have agreed to, including Account management, transaction processing and support delivery.
• Legal Obligation: Processing required to comply with applicable regulatory obligations, including KYC, AML, age verification and licence conditions imposed on the Operator.
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, platform improvement and responsible gambling operations, where those interests are not overridden by your rights.
• Consent: Where we rely on your consent for a specific processing activity (such as marketing communications), we will obtain that consent explicitly and separately. You may withdraw consent at any time by contacting our support team.

7. Data Sharing & Disclosure

7.1 Authorised Third-Party Processors

282win may share your personal data with the following categories of third-party processors who are contractually bound to handle it only for the purposes specified and with appropriate security safeguards:

• Identity verification and KYC service providers
• Payment processing and fraud detection platforms
• Customer support platform providers
• Cloud hosting and data storage infrastructure providers
• Analytics and platform performance monitoring services (aggregated, anonymised data only)

7.2 Regulatory & Legal Disclosure

282win may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts or other governmental bodies where required by applicable law, court order or where we reasonably believe such disclosure is necessary to protect the rights, property or safety of the Platform, its users or the public.

7.3 No Sale of Personal Data

282win does not sell, rent, trade or otherwise transfer your personal data to third parties for marketing, advertising or commercial purposes. Data is shared only as described in this Policy.

8. International Data Transfers

282win may transfer personal data to servers or processors located outside of Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place — including contractual data protection clauses with processors — to maintain a standard of data protection equivalent to that described in this Policy.

Pakistan does not currently have a comprehensive data protection statute equivalent to the European GDPR. 282win nonetheless commits to applying internationally recognised data protection principles to all personal data it processes, regardless of the jurisdiction in which the data is stored.

9. Data Retention

282win retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status plus a minimum post-closure period required by the Operator's regulatory framework (typically 5–7 years).
• KYC & Identity Documents: Retained for the period required by the Operator's applicable licence conditions and AML obligations following Account closure.
• Transaction Records: Retained for the minimum period required under financial record-keeping obligations, typically 5 years from the date of the transaction.
• Support Communications: Retained for a reasonable period to allow for dispute resolution and quality assurance review, typically up to 3 years.
• Technical & Usage Data: Typically retained in identifiable form for up to 24 months, after which it is anonymised or deleted.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with a specific individual.

10. Your Data Rights

Subject to applicable law and certain regulatory exceptions, you have the following rights with respect to your personal data held by 282win:

To exercise any of the above rights, please contact 282win using the details in Section 15. We will respond within a reasonable timeframe, typically within 30 days. We may need to verify your identity before processing your request. Some requests may be limited by our legal obligations to retain certain data — we will explain any such limitations clearly when responding.

11. Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the Platform to remember your preferences, maintain session continuity and collect analytical data about how the Platform is used.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential to the Platform's operation — enabling login sessions, the Cashier, security controls and navigation. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language setting (English), display options and session duration reminders. These enhance your experience but are not essential.
• Analytical Cookies: Collect anonymised or aggregated data on how users interact with the Platform — pages viewed, time spent, navigation flows. Used solely for internal improvement purposes.
• Security Cookies: Help detect and prevent fraud, bot activity and account takeover attempts.

11.3 Managing Cookies

You may adjust your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use core Platform features including login and Cashier functionality. Analytical and functional cookies may be disabled without material impact on core features.

12. Security Measures

282win implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks associated with its processing. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including identity documents and payment references;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Audit logging of access to and modification of personal data records;
• Two-factor authentication options for user Accounts;
• Regular security assessments and vulnerability testing of the Platform infrastructure;
• Incident response procedures for detecting, reporting and responding to personal data breaches.

Despite these measures, no data transmission over the internet can be guaranteed as completely secure. If you have reason to believe your Account has been compromised, please contact support immediately.

13. Minors & Underage Access

The 282win Platform is strictly for individuals aged 18 or older — or the higher minimum age required by the Operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age. Age verification is applied during the registration and KYC processes.

If we become aware that personal data has been collected from an individual below the minimum age, we will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has created an Account using false age information, please notify us at once using the contact details in Section 15.

14. Policy Amendments

282win reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to the way we process your personal data, we will notify you through the Platform interface or by email to your registered Account address prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the Platform following notification of amendments constitutes your acceptance of the updated Policy.

15. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the 282win data support team. Support is available in English, with Urdu-language assistance available on request — including for users based in Karachi, Lahore, Rawalpindi, Islamabad, Faisalabad, Multan and Peshawar.

For responsible gambling-related account requests — including self-exclusion or limit-setting — please refer to our dedicated Responsible Gambling page. For general platform queries, visit our FAQ.