Introduction
Welcome to the 588min Privacy Policy. 588min ("we", "us", "our") is committed to protecting the personal information of every player who visits, registers on, or interacts with the 588min platform — including its website at https://588min.com, its Progressive Web App (PWA), its mobile interface, and all associated services.
This Privacy Policy explains in clear, plain English exactly how 588min collects, uses, stores, shares, and protects your personal data. It applies to all users of the 588min platform, including visitors who have not yet registered an account, registered players who are completing identity verification, and fully active account holders making real-money PKR deposits, placing cricket bets, or spinning slots.
This Privacy Policy should be read alongside the 588min Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the complete legal framework governing your relationship with 588min.
If you have any questions about how your data is handled, our dedicated privacy team is available via live chat 24/7 or by email at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.
Personal Data We Collect
588min collects personal data through several channels — directly from you when you register or transact, automatically when you use the platform, and in some cases from trusted third-party verification providers. Below is a comprehensive breakdown of the categories of data we collect.
2.1 Data You Provide Directly
- Registration data: Full legal name, date of birth, Pakistani CNIC number, residential address (including city — e.g. Karachi, Lahore, Islamabad, Faisalabad), email address, and mobile phone number.
- Identity verification (KYC) documents: Scanned copies or photographs of your Pakistani CNIC (front and back), passport, or driving licence; proof of address documents such as utility bills or bank statements.
- Payment data: JazzCash account number, EasyPaisa mobile wallet number, or bank account details (HBL, UBL, Meezan Bank) provided for deposit and withdrawal processing. Full payment card numbers are never stored on 588min servers.
- Communications data: Messages, complaints, feedback, and support tickets you submit via live chat, email, or any other support channel.
- Responsible gaming preferences: Self-declared deposit limits, loss limits, session time limits, cooling-off period requests, and self-exclusion applications.
2.2 Data Collected Automatically
- Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and mobile network information.
- Usage data: Pages visited on the 588min platform, game sessions played (including game titles such as Ocean King Jackpot and Ways of the Qilin), bet amounts, session durations, click patterns, and navigation paths.
- Geolocation data: Approximate geographic location derived from your IP address, used for fraud prevention and jurisdictional compliance purposes.
- Cookie and tracking data: Session identifiers, preference cookies, analytics cookies, and fraud-detection tokens. See Section 6 for full cookie details.
2.3 Data from Third Parties
- KYC verification providers: Identity confirmation results, document authenticity scores, and politically exposed persons (PEP) or sanctions screening outcomes.
- Payment processors: Transaction confirmation references from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to reconcile deposits and withdrawals.
- Fraud prevention services: Device fingerprint risk scores and behavioural fraud signals from third-party fraud detection partners.
| Data Category | Examples | Source |
|---|---|---|
| Identity Data | Name, CNIC, date of birth, address | You (at registration / KYC) |
| Contact Data | Email, mobile number | You (at registration) |
| Financial Data | JazzCash / EasyPaisa / bank account references | You + payment processors |
| Technical Data | IP address, device type, browser | Automatic collection |
| Gaming Data | Bet history, game sessions, win/loss records | Automatic collection |
| Verification Data | KYC document scans, PEP screening result | You + KYC providers |
How We Use Your Personal Data
588min uses your personal data only for the purposes described in this section. We do not use your data in ways that are incompatible with the original purpose for which it was collected without obtaining your additional consent.
- Account creation and management: To register your 588min account, authenticate your identity at login, manage your PKR wallet, and maintain your account preferences and responsible gaming settings.
- Transaction processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to execute withdrawal requests to your verified payment method.
- Identity verification (KYC/AML): To verify your identity and age (21+), screen against sanctions and PEP lists, and fulfil our anti-money laundering and counter-terrorism financing obligations.
- Service delivery: To provide access to casino games (including slots, live dealer games, jackpot titles), cricket betting markets (PSL, T20 internationals, ICC events), and all other 588min platform features.
- Customer support: To respond to your queries, resolve disputes, investigate complaints, and provide account-related assistance via live chat and email.
- Responsible gaming: To monitor gaming patterns for indicators of problem gambling, enforce player-set deposit and loss limits, and facilitate cooling-off and self-exclusion requests.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and unauthorised account access.
- Platform improvement: To analyse aggregated usage data and improve the 588min platform, user interface, game selection, and deposit flow experience for Pakistani players.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications and subject to your right to opt out at any time.
- Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory bodies, and enforce our Terms & Conditions.
Legal Basis for Processing
588min processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is necessary to provide the 588min service to you under our Terms & Conditions — including account registration, transaction processing, and game access.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
- Legitimate interests: Processing carried out in pursuit of 588min's legitimate business interests — including fraud prevention, platform security, and product improvement — where these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — including sending you marketing communications and using non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Third Parties
588min does not sell, rent, or otherwise transfer your personal data to third parties for their independent commercial purposes. We may, however, share your data with the following categories of trusted third parties where necessary and in accordance with this Privacy Policy:
- Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely for the purpose of processing your PKR deposits and withdrawals. These providers are bound by their own privacy and data protection policies.
- Identity verification (KYC) providers: Third-party KYC platforms that assist with CNIC validation, document authenticity checks, and PEP/sanctions screening. Data shared is limited to what is necessary for verification purposes.
- Game software providers: The game studios and software suppliers whose titles are hosted on the 588min platform may receive anonymised or session-level data necessary for game delivery, RNG certification, and progressive jackpot synchronisation.
- Fraud prevention and analytics partners: Trusted service providers who assist 588min in detecting fraudulent activity, analysing platform usage, and maintaining platform security. Data is shared under strict contractual data processing agreements.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, 588min will disclose personal data to the relevant authority. 588min will, where legally permitted, notify you of such a disclosure.
- Professional advisors: Lawyers, auditors, and accountants acting as data processors under confidentiality obligations, where their engagement requires access to personal data.
Cookies & Tracking Technologies
588min uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, remember your preferences, and understand how players interact with the platform. Below is a breakdown of the cookie categories used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, PKR wallet state, security tokens | No — essential for platform operation |
| Functional | Language preferences, game display settings, responsible gaming tool states | Yes — may affect platform experience |
| Analytics | Aggregated usage data, page visit counts, game session metrics | Yes — via cookie preference centre |
| Fraud Detection | Device fingerprinting, behavioural risk scoring | No — required for platform security |
| Marketing | Tracking of promotional campaign performance (where consent given) | Yes — via cookie preference centre or opt-out |
You can manage your cookie preferences at any time by accessing the Cookie Preference Centre available in the footer of the 588min platform. Disabling analytics or marketing cookies will not affect your ability to play games, deposit PKR, or access your account — only strictly necessary and fraud detection cookies are mandatory.
Most browsers also allow you to control cookies through their settings. Clearing your browser cookies will log you out of your 588min session and reset your cookie preferences.
Data Retention
588min retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and compliance obligations. The following retention periods apply as standard:
- Active account data: Retained for the full duration your 588min account remains open and active.
- Account closure data: Following account closure, core identity and transaction records are retained for a minimum of 5 years to comply with anti-money laundering record-keeping requirements.
- KYC documents: Retained for a minimum of 5 years from the date of the last transaction on your account, in line with AML regulatory obligations.
- Support communications: Retained for 3 years from the date of the last communication, unless a longer period is required to resolve an ongoing dispute.
- Marketing preferences and consent records: Retained for 3 years from the date consent was last confirmed or withdrawn.
- Anonymised analytics data: May be retained indefinitely in anonymised, aggregated form that cannot be used to identify you personally.
Data Security
588min implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- 256-bit SSL/TLS encryption on all data in transit between your device and 588min servers — the same encryption standard employed by major Pakistani banks including HBL and Meezan Bank.
- AES-256 encryption for sensitive data stored at rest, including KYC document scans and financial account references.
- Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all 588min staff with access to player data systems.
- Role-based access controls (RBAC) ensuring that 588min employees can only access the minimum personal data necessary for their specific job function.
- Regular penetration testing and independent security audits carried out by certified third-party security firms on a periodic basis.
- Secure data centres with physical access controls, 24/7 monitoring, fire suppression, and redundant power systems.
- Intrusion detection systems (IDS) monitoring for anomalous access patterns and automated alerting for potential security incidents.
You also play a role in keeping your data secure. Never share your 588min password with anyone — including 588min support staff, who will never ask for it. Use a strong, unique password for your account and enable two-factor authentication where available.
Your Privacy Rights
As a 588min account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and aim to respond within 30 days.
- Right of Access: You have the right to request a copy of the personal data 588min holds about you, along with information about how it is used. This is commonly referred to as a Subject Access Request (SAR).
- Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by 588min be corrected or updated.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to 588min's legal and regulatory retention obligations. Note that AML regulations require us to retain certain records for a minimum of 5 years.
- Right to Restrict Processing: You have the right to request that 588min temporarily suspend the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
- Right to Object: You have the right to object to 588min processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though 588min may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Children's Privacy — 21+ Only
588min takes the protection of minors extremely seriously. Our registration process and KYC verification procedures are specifically designed to identify and prevent underage access to real-money gaming. Any account found to belong to a person under 21 years of age will be immediately suspended and all funds on that account will be held pending investigation and, where appropriate, returned to the payment source after legal assessment.
If you are a parent or guardian and have reason to believe that a minor in your household has accessed or registered a 588min account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours of a verified report.
588min strongly encourages all responsible adults in Pakistani households to use device-level parental controls and internet filtering tools to prevent underage access to online gaming platforms.
Marketing Communications
588min may send you promotional emails, SMS notifications, and in-app messages about bonuses, new game releases, PSL cricket betting markets, and other 588min platform features — but only where you have given your explicit consent to receive such communications at the time of account registration or through your account settings.
Opting Out
You can opt out of 588min marketing communications at any time through any of the following methods:
- Click the "Unsubscribe" link included at the bottom of every 588min promotional email.
- Update your communication preferences directly in the Notifications section of your 588min account settings panel.
- Contact 588min support via live chat or at [email protected] with the subject line "Marketing Opt-Out".
Opt-out requests are processed within 48 hours. Please note that even after opting out of marketing communications, you will continue to receive essential transactional and account security communications — such as deposit confirmations, withdrawal notifications, and password reset emails — as these are not marketing in nature and are necessary for account operation.
Third-Party Links
The 588min platform may contain links to third-party websites — for example, links to game provider information pages, payment processor help centres, or responsible gaming support organisations. These third-party sites operate under their own privacy policies, which 588min has no control over and is not responsible for.
588min strongly recommends that you review the privacy policy of any third-party website you visit before submitting personal data. The inclusion of a link to a third-party site on the 588min platform does not constitute an endorsement of that site's privacy practices or content.
588min's Privacy Policy applies exclusively to data collected and processed directly by the 588min platform. It does not apply to data collected by third-party service providers operating under their own terms, even where those providers facilitate features integrated into the 588min platform (such as JazzCash or EasyPaisa payment processing).
Changes to This Privacy Policy
588min reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The effective date of the current version will always be displayed at the top of this page.
Where changes to this Privacy Policy are material — for example, introducing a new purpose for which we process your data, or changing how long we retain your information — 588min will notify registered account holders by email and display a prominent notice on the 588min platform at least 14 days before the changes take effect, where practicable.
Your continued use of the 588min platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. If you do not agree with the revised Privacy Policy, you should stop using the 588min platform and may request account closure by contacting [email protected].
Contact Us — Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 588min handles your personal data, please get in touch with our privacy team using the contact details below.
- Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing.
- Live Chat: Available 24/7 directly on the 588min platform — connect with a support agent in real time.
- Response Time: Standard privacy enquiries are acknowledged within 3 business days and resolved within 30 days. Complex Subject Access Requests may take up to 30 days from identity verification.
For formal complaints or concerns that cannot be resolved through our support team, you may also refer the matter to the relevant data protection or gaming regulatory authority in the jurisdiction under which 588min holds its operating licence. Details of the applicable regulatory authority will be provided upon written request.