At b28 we take your personal data seriously. This policy explains what information we collect, why we collect it, how we use it, and the controls you have over your own data as a Pakistan-based player.
These cards summarise how b28 approaches your privacy. The full policy below contains all the details you need to understand your rights and our obligations.
b28 uses encryption, secure servers, and access controls to protect your personal data and PKR payment details. We do not store full card numbers and we never share your data with advertisers.
b28 does not sell, rent, or trade your personal information to any third party for marketing purposes. Data is shared only with the service providers needed to operate the platform — and only to the extent necessary.
You can access, correct, or request deletion of your personal data at any time by contacting b28 support. Marketing communications from b28 include opt-out options on every message.
JazzCash, Easypaisa, Raast and bank transfer details are processed via secure payment infrastructure. b28 does not store your full payment credentials — only the minimum reference data needed to process transactions.
b28 collects only the personal data required to run your account, process PKR payments, verify identity, and maintain a safe platform. We do not collect information that serves no legitimate operational purpose.
Promotional emails, SMS and push notifications from b28 can be turned off at any time from your account notification settings or by contacting support. Opting out of marketing does not affect your ability to use b28.
This Privacy Policy describes how b28 collects, stores, uses, and protects personal data belonging to players who register and use the b28 platform. By creating a b28 account or using the platform, you confirm that you have read and understood this policy. If you have questions at any point, contact us at [email protected].
b28 is an online gaming and sports betting platform operated for players in Pakistan. References to "b28", "we", "us" or "our" in this policy refer to the b28 platform and its operating entity. References to "you" or "your" refer to any person who accesses or uses b28, including registered account holders.
b28 is the data controller for the personal data collected through the platform. This means b28 determines the purposes for which personal data is collected and the means by which it is processed. If you have questions about how your data is handled, you can reach us directly via the contact details in Section 13 of this policy.
This policy covers data collected through the b28 website at b28.best, the b28 mobile application, and any communications between b28 and players including email, support chat, and push notifications. It does not cover the data practices of third-party payment providers — those are governed by the respective provider's own privacy policies.
b28 collects personal data in the following categories. We only collect what is genuinely necessary for the operation of your account and the delivery of the b28 platform.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, copy of government-issued ID | Account registration, age and identity verification (KYC) |
| Contact Data | Email address, phone number | Account communications, support, security alerts |
| Financial Data | PKR transaction records, payment method reference data | Processing deposits and withdrawals, fraud prevention |
| Account Data | Username, login history, bet history, game activity, bonus usage | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session data | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, features used, time on platform, game preferences | Improving the b28 experience, personalising promotions where opted in |
| Communications Data | Support chat logs, email correspondence | Support quality, dispute resolution, training |
b28 does not collect sensitive personal data such as biometric data, health information, or religious or political views. We do not collect data about you from social media platforms unless you choose to contact us via a social channel.
b28 collects your personal data through several channels depending on how you interact with the platform:
b28 does not purchase data from data brokers or collect personal data from sources unrelated to your use of the platform.
b28 uses your personal data only for legitimate operational purposes. The main reasons we process your data are:
b28 will only send you promotional communications if you have opted in. You can manage your marketing preferences from your account notification settings or by contacting support at any time. Opting out will not affect your account access or any active bonuses.
b28 does not sell your personal data. We share data only with trusted third-party service providers who help us operate the platform, and only to the extent necessary for the specific service they provide. All third parties who process b28 player data are required to handle it securely and in accordance with applicable data protection standards.
Categories of third parties with whom b28 may share your data include:
b28 does not share your data with social media platforms, advertising networks, or data brokers. Third-party game providers and payment processors are responsible for their own data practices under their respective privacy policies.
All payments on b28 are denominated in Pakistani Rupees (PKR). b28 supports JazzCash, Easypaisa, Raast, Bank Transfer, debit and credit cards, and mobile wallets. Payment processing is handled through secure infrastructure that meets current industry security standards.
When you make a deposit or withdrawal, b28 stores a transaction reference, the payment method type, the PKR amount, and the timestamp. b28 does not store full card numbers, full bank account numbers, or JazzCash/Easypaisa PINs. These credentials are handled exclusively by the respective payment provider during the transaction.
b28 will never ask you for your JazzCash PIN, Easypaisa PIN, bank password, or card CVV number through any communication channel — not via support chat, email, or phone. If you receive a message claiming to be from b28 that asks for these details, do not respond and contact support immediately.
Withdrawal requests are matched against the identity and payment method registered to your b28 account. This is a security measure designed to protect your PKR balance from unauthorised withdrawal requests. Where a new payment method is added, b28 may request verification before processing the first withdrawal to that method.
The b28 website uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it. Cookies are small text files stored on your device by your browser.
b28 uses the following types of cookies:
b28 does not use third-party advertising cookies or retargeting pixels. The b28 mobile app uses equivalent device-based identifiers for session management and analytics purposes.
You can control cookies through your browser settings. Disabling essential cookies will affect your ability to log in and use b28 normally. Disabling analytics or functional cookies will not prevent you from using the platform but may affect your experience.
b28 retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are based on the type of data and the purpose for which it was collected:
When retention periods expire, b28 securely deletes or anonymises your personal data so that it can no longer be associated with you. Anonymised aggregate data — which cannot identify individual players — may be retained indefinitely for platform analytics purposes.
Where you request account closure and there are no pending disputes, unresolved withdrawals, or active investigations, b28 will begin the data retention countdown from the date of account closure. Data subject to a legal hold will be retained until the hold is lifted regardless of the standard retention schedule.
b28 takes the security of your personal data seriously and has implemented technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:
While b28 applies strong security practices, no online platform can guarantee absolute security. Players are also responsible for protecting their own account credentials. Do not share your b28 password with anyone and use a strong, unique password. Enable two-factor authentication from your account security settings for an additional layer of protection.
If you believe your b28 account has been accessed by someone else, or if you suspect your data has been compromised, contact b28 support immediately via live chat. We will investigate and take appropriate action including securing your account and initiating our incident response process.
As a b28 player you have the following rights in relation to your personal data. To exercise any of these rights, contact b28 support with your registered account email and a description of your request.
Request a copy of the personal data b28 holds about you. We will provide this within a reasonable timeframe from the date of your verified request.
Request correction of inaccurate personal data. You can update most profile information directly in your b28 account settings.
Request deletion of your personal data where there is no legitimate reason for b28 to continue holding it. Note that data subject to legal retention requirements cannot be deleted before the retention period ends.
Object to b28 processing your data for direct marketing purposes. You can also opt out of marketing communications at any time from your account notification settings.
Request your personal data in a structured, commonly used, machine-readable format where technically feasible and where the processing is based on your consent or a contract.
Request that b28 restricts the processing of your data in certain circumstances, for example while the accuracy of the data is being verified following a correction request.
b28 will respond to all data rights requests within a reasonable period. In some cases we may need to verify your identity before processing the request. Where a request cannot be fulfilled — for example because it conflicts with a legal retention requirement — b28 will explain the reason clearly.
b28 is strictly an adult platform for players aged 18 and above. b28 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, do not attempt to register or use the b28 platform in any way.
If b28 discovers that an account has been registered by a person under 18, the account will be closed immediately, any balance will be handled in accordance with the Terms and Conditions, and all personal data associated with the account will be deleted unless retention is required for legal or fraud investigation purposes.
If you believe a minor has registered a b28 account or is using the platform, please contact b28 support immediately so we can investigate and take appropriate action. b28 also provides responsible gaming tools including self-exclusion and deposit limits to help adult account holders manage their gaming, which is described in more detail on the Responsible Gaming page.
b28 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable data protection standards, or changes to the services we offer. When material changes are made, b28 will notify active players via registered email or via a prominent notice on the platform prior to the changes taking effect.
The updated policy will always be available on this page with the date of last revision shown clearly. Continued use of b28 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you have concerns about any update, you are welcome to contact support before deciding whether to continue using the platform.
Where a change to this policy requires your fresh consent — for example if b28 were to begin processing your data for a materially new purpose — b28 will request that consent explicitly before the new processing begins and will not proceed without it.
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how b28 handles your personal data, please get in touch with the b28 support team:
When contacting us about a data request, please include your registered account email address and a clear description of your request so we can verify your identity and respond efficiently. b28 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within five business days.
The b28 support team is available around the clock via live chat. Whether you have a question about your data, want to update your account details, or need help with your account settings, the team is on hand to assist you at any time.