388win Privacy Policy

1. Who We Are and How to Contact Us

388win ("388win", "the Platform", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://388win.club and through the 388win mobile application. 388win acts as the data controller in respect of all personal data collected and processed under this Privacy Policy.

If you have any questions, concerns, or requests relating to how 388win processes your personal data, you may contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the 388win Platform. Our support team operates in English and Urdu.
• Email: support at 388win.club — please include "Privacy Request" in the subject line of your message for prioritised handling.

388win is committed to responding to all privacy-related enquiries within a reasonable timeframe and no later than thirty (30) calendar days from the date of receipt.

2. Scope of This Policy

This Privacy Policy applies to all individuals who:

• Register an account on the 388win Platform;
• Access or browse the 388win website at https://388win.club without registering;
• Download and use the 388win mobile application;
• Contact 388win through live chat, email, or any other support channel; or
• Participate in any 388win promotional activity or survey.

This Policy should be read in conjunction with the 388win Terms & Conditions, which govern your use of the Platform as a whole. This Privacy Policy is incorporated by reference into the Terms and Conditions and forms part of the overall agreement between you and 388win.

3. What Personal Data We Collect

388win collects the following categories of personal data from members and Platform users:

388win does not collect or store payment card data (such as credit or debit card numbers) directly. All payment processing through JazzCash, Easypaisa, and banking partners is handled by the respective payment providers under their own security standards.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data 388win holds about you is information you have provided to us voluntarily during registration, KYC verification, financial transactions, promotional participation, or support interactions. This includes your name, CNIC, mobile number, and payment information.

4.2 Data Collected Automatically

When you access the 388win Platform — whether on browser or through the mobile app — we automatically collect technical and usage data including your IP address, device identifiers, browser type, operating system, session duration, pages visited, and game interactions. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 10.

4.3 Data from Third Parties

388win may receive personal data about you from third-party sources including:

• Identity verification and KYC service providers who validate the authenticity of your CNIC and other identity documents;
• Payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) who confirm transaction status and, where required by anti-money laundering law, provide transaction data;
• Fraud prevention and anti-money laundering databases that 388win consults to assess risk; and
• Analytics providers who supply aggregated Platform usage insights.

5. Why We Process Your Data (Legal Bases)

388win processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the 388win Terms and Conditions — including account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, and financial reporting obligations to regulatory authorities.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform optimisation, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw consent at any time by contacting 388win support.

6. How We Use Your Personal Data

388win uses the personal data it collects for the following specific purposes:

• To create, manage, and authenticate your 388win account, including processing login requests and OTP delivery to your registered Pakistani mobile number;
• To process deposits and withdrawals through your chosen payment method (JazzCash, Easypaisa, bank transfer) and maintain accurate transaction records;
• To verify your age and identity in compliance with our minimum age policy (18+) and applicable KYC requirements;
• To detect, investigate, and prevent fraud, collusion, money laundering, and other prohibited activities on the Platform;
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problematic play and proactively offering support tools where appropriate;
• To settle bets, credit winnings, apply bonuses, and manage promotional entitlements;
• To provide customer support via live chat and email, including resolving disputes and responding to account queries;
• To send transactional communications — including deposit confirmations, withdrawal notifications, and security alerts — to your registered mobile number or email;
• To improve the 388win Platform through analytics, A/B testing, and performance monitoring;
• To send marketing communications where you have consented to receive them, which you may opt out of at any time.

7. Data Sharing and Third-Party Disclosure

388win does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:

7.1 Service Providers

388win engages third-party service providers to support Platform operations, including KYC and identity verification providers, payment processors, cloud hosting providers, fraud detection services, analytics platforms, and customer support tooling. These providers process your data only on 388win's instructions and are bound by confidentiality and data processing agreements.

7.2 Legal and Regulatory Disclosure

388win may disclose your personal data to government authorities, law enforcement agencies, financial intelligence units, or regulators where required to do so by applicable law, court order, or regulatory directive. This includes disclosures required under anti-money laundering and counter-terrorism financing legislation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets involving 388win, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer that materially affects the terms under which your data is processed.

7.4 Responsible Gaming Partners

With your consent, or where required to protect your welfare, 388win may share limited data with responsible gaming support organisations. No financial or gaming history data is shared without your explicit consent except where mandated by applicable law.

8. International Data Transfers

As an online platform, 388win may store and process your data on servers located outside of Pakistan. Where data is transferred internationally, 388win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable in your home jurisdiction. These safeguards include contractual data processing agreements with service providers and the implementation of appropriate technical security measures. By registering with 388win and accepting these terms, you consent to international data transfers conducted under these protective arrangements.

9. Data Retention

388win retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Specific retention periods are as follows:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements.
• Transaction and Gaming History: Retained for a minimum of five (5) years following the relevant transaction or game session, in compliance with financial record-keeping obligations.
• Support Communications: Retained for a minimum of two (2) years following resolution of the relevant support interaction.
• Technical and Usage Data: Typically retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained until withdrawal of consent plus a record-keeping period of one (1) year.

Upon expiry of the applicable retention period, your data is securely deleted or anonymised in a manner that prevents re-identification.

10. Cookies and Tracking Technologies

The 388win Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for core Platform functionality including session management, login authentication, and security. These cannot be disabled without impairing your ability to use 388win.
• Performance and Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform to help us identify areas for improvement. These are only set with your consent.
• Functional Cookies: Remember your preferences — such as preferred language, last-used game category, or display settings — to personalise your 388win experience.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect Platform functionality. 388win does not use third-party advertising cookies to serve behavioural advertising to external platforms.

11. Security Measures

388win implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 388win Platform;
• Encrypted storage of passwords and sensitive authentication credentials;
• Two-factor authentication via SMS OTP for new device logins;
• Continuous security monitoring and intrusion detection systems;
• Strict access controls limiting employee access to personal data on a need-to-know basis; and
• Regular security audits and vulnerability assessments.

Whilst 388win takes every reasonable precaution to protect your data, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your own credentials and for notifying 388win promptly if you suspect any unauthorised access to your account.

12. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by 388win:

• Right of Access: You may request a copy of the personal data 388win holds about you, including information on how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal retention obligations — for example, 388win cannot delete transaction records required under anti-money laundering law.
• Right to Restrict Processing: You may request that 388win restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on your consent or contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests — including direct marketing — at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact 388win via live chat or at support at 388win.club. Please include "Privacy Request" in your message. 388win will respond within thirty (30) calendar days. Identity verification will be required before any request is actioned to protect your data from unauthorised disclosure.

13. Children and Minors

The 388win Platform is strictly intended for adults aged 18 and over. 388win does not knowingly collect or process personal data from individuals under the age of 18. If 388win becomes aware that a member has provided data while under the age of 18, the account will be closed immediately, any remaining funds will be returned to the deposit source, and all personal data associated with the underage account will be deleted except to the extent required by law.

If you are a parent or guardian and believe that a minor under your care has registered with 388win, please contact our support team immediately via live chat so that the matter can be investigated and resolved promptly.

14. Amendments to This Policy

388win reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material updates will be communicated to registered members via notification on the Platform or by SMS to your registered mobile number. The revised Policy will take effect from the date of publication. Continued use of the 388win Platform following publication of the revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how 388win protects your data.